Juniper EX9200 Features Manual page 59

Step-by-Step
Procedure
Copyright © 2016, Juniper Networks, Inc.
Chapter 3: Copy Packets to a VLAN or Bridge Domain for Remote Monitoring
set forwarding-options analyzer employee-monitor loss-priority high output interface
ge-0/0/13.0
To configure basic remote mirroring to two VLAN member interfaces:
On the source switch:
1.
Configure the VLAN ID for the
[edit vlans]
user@switch# set remote-analyzer vlan-id 999
Configure the interfaces on the network port connected to destination switches
for access mode and associate it with the
[edit interfaces]
user@switch# set ge-0/0/10 unit 0 family ethernet-switching interface-mode trunk
user@switch# set ge-0/0/10 unit 0 family ethernet-switching vlan members 999
user@switch# set ge-0/0/11 unit 0 family ethernet-switching interface-mode trunk
user@switch# set ge-0/0/11 unit 0 family ethernet-switching vlan members 999
Configure the employee-monitor
[edit forwarding-options]
user@switch# set analyzer employee-monitor input ingress interface ge-0/0/0.0
user@switch# set analyzer employee-monitor input ingress interface ge-0/0/1.0
user@switch# set analyzer employee-monitor input egress interface ge-0/0/0.0
user@switch# set analyzer employee-monitor input egress interface ge-0/0/1.0
user@switch# set analyzer employee-monitor output next-hop-group
remote-analyzer-nhg
In this analyzer configuration, traffic that enters and exits interfaces ge-0/0/0.0
and ge-0/0/1.0 are sent to the output destination defined by the next-hop group
named remote-analyzer-nhg
Configure the
remote-analyzer-nhb
[edit forwarding-options]
user@switch# set next-hop-group remote-analyzer-nhg interface ge-0/0/10.0
user@switch# set next-hop-group remote-analyzer-nhg interface ge-0/0/11.0
user@switch# set next-hop-group remote-analyzer-nhg group-type layer-2
On the Destination 1 switch:
2.
Configure the VLAN ID for the
[edit vlans]
user@switch# set remote-analyzer vlan-id 999
Configure the ge-0/0/10 interface on the Destination 1 switch for access mode:
[edit interfaces]
user@switch# set ge-0/0/10 unit 0 family ethernet-switching interface-mode access
Configure the interface connected to the remote monitoring station for access
mode:
[edit interfaces]
user@switch# set ge-0/0/12 unit 0 family ethernet-switching interface-mode access
Configure the
employee-monitor
[edit forwarding-options]
user@switch# set analyzer employee-monitor input ingress vlan remote-analyzer
user@switch# set analyzer employee-monitor loss-priority high output interface
ge-0/0/12.0
remote-analyzer VLAN:
remote-analyzer
analyzer:
.
next-hop group:
VLAN:
remote-analyzer
analyzer:
VLAN:
45