Juniper EX9200 Features Manual page 66

Port Mirroring Analyzers Feature Guide for EX9200 Switches
Mirroring All Employee Traffic for Remote Analysis Through a Transit Switch
CLI Quick
Configuration
Step-by-Step
Procedure
52
f. Interface ge-0/0/14 is a Layer 2 interface on the destination switch and connects to
the remote monitoring station.
g. VLAN is configured on all switches in the topology to carry the mirrored
remote-analyzer
traffic.
To configure mirroring for remote traffic analysis through a transit switch, for all incoming
and outgoing employee traffic, perform these tasks:
To quickly configure mirroring for remote traffic analysis through a transit switch, for
incoming and outgoing employee traffic, copy the following commands and paste them
into the switchterminal window:
Copy and paste the following commands in the source switch (monitored switch)
terminal window:
[edit]
set vlans remote-analyzer vlan-id 999
set interfaces ge-0/0/10 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members 999
set forwarding-options analyzer employee-monitor input ingress interface ge-0/0/0.0
set forwarding-options analyzer employee-monitor input ingress interface ge-0/0/1.0
set forwarding-options analyzer employee-monitor input egress interface ge-0/0/0.0
set forwarding-options analyzer employee-monitor input egress interface ge-0/0/1.0
set forwarding-options analyzer employee-monitor output vlan remote-analyzer
Copy and paste the following commands in the transit switch window:
[edit]
set vlans remote-analyzer vlan-id 999
set interfaces ge-0/0/11 unit 0 family ethernet-switching interface-mode access
set vlans remote-analyzer interface ge-0/0/11
set interfaces ge-0/0/12 unit 0 family ethernet-switching interface-mode access
set vlans remote-analyzer interface ge-0/0/12
Copy and paste the following commands in the destination switch window:
[edit]
set vlans remote-analyzer vlan-id 999
set interfaces ge-0/0/13 unit 0 family ethernet-switching interface-mode access
set vlans remote-analyzer interface ge-0/0/13 ingress
set interfaces ge-0/0/14 unit 0 family ethernet-switching interface-mode access
set forwarding-options analyzer employee-monitor input ingress vlan remote-analyzer
set forwarding-options analyzer employee-monitor output interface ge-0/0/14.0
To configure remote mirroring through a transit switch:
On the source switch:
1.
Configure the VLAN ID for the
[edit vlans]
user@switch# set remote-analyzer vlan-id 999
Configure the interfaces on the network port connected to transit switch for
access mode and associate it with the
[edit interfaces]
user@switch# set ge-0/0/10 unit 0 family ethernet-switching interface-mode access
VLAN:
remote-analyzer
VLAN:
remote-analyzer
Copyright © 2016, Juniper Networks, Inc.