Juniper EX9200 Features Manual page 41

Configuring an Analyzer for Remote Traffic Analysis
Configuring a Statistical Analyzer for Local Traffic Analysis
Copyright © 2016, Juniper Networks, Inc.
Chapter 3: Copy Packets to a VLAN or Bridge Domain for Remote Monitoring
To mirror traffic that is traversing interfaces or a VLAN on the switchto a VLAN for analysis
from a remote location (by using analyzers):
Configure a VLAN to carry the mirrored traffic:
1.
[edit]
user@switch# set vlans analyzer-name vlan-id vlan-ID
For example, define an analyzer VLAN called
ID :
999
[edit]
user@switch# set vlans remote-analyzer vlan-id 999
Set the uplink module interface that is connected to the distribution switchto access
2.
mode and associate it with the analyzer VLAN:
[edit]
user@switch# set interfaces interface-name unit 0 family ethernet-switching interface-mode
access vlan members vlan-ID
For example, set the interface ge-0/1/1 to access mode and associate it with the
analyzer VLAN ID :
999
[edit]
user@switch# set interfaces ge-0/1/1 unit 0 family ethernet-switching interface-mode access
vlan members 999
Configure the analyzer:
3.
Define an analyzer and specify the traffic to be mirrored:
a.
[edit forwarding-options]
user@switch# set analyzer analyzer-name input ingress interface interface-name
For example, define the
comprises packets entering interfaces ge-0/0/0.0 and ge-0/0/1.0:
[edit forwarding-options]
user@switch# set analyzer employee-monitor input ingress interface ge-0/0/0.0
[edit forwarding-options]
user@switch# set analyzer employee-monitor input ingress interface ge-0/0/1.0
Specify the analyzer VLAN as the output for the analyzer:
b.
[edit forwarding-options]
user@switch# set analyzer analyzer-name output vlan vlan-ID
For example, specify the
analyzer:
employee-monitor
[edit forwarding-options]
user@switch# set analyzer employee-monitor output vlan 999
To mirror interface traffic or VLAN traffic on the switchto an interface on the switchby
using a statistical analyzer:
Choose a name for the analyzer and specify the input interfaces:
1.
[edit forwarding-options]
remote-analyzer
analyzer for which traffic to be mirrored
employee-monitor
VLAN as the output analyzer for the
remote-analyzer
and assign it the VLAN
27