Juniper EX9200 Features Manual page 100

Port Mirroring Feature Guide for EX9200 Switches
Requirements
Overview and Topology
84
Packets entering or existing a VLAN
You can analyze the mirrored traffic by using a protocol analyzer application running on
a remote monitoring station if you are sending mirrored traffic to an analyzer VLAN.
This topic includes two related examples that describe how to mirror traffic entering
ports on the switch to the
a remote monitoring station. The first example shows how to mirror all traffic entering
the ports connected to employee computers. The second example shows the same
scenario but includes a filter to mirror only the employee traffic going to the Web.
BEST PRACTICE:
performance impact. We recommend that you:
Disable your configured mirroring sessions when you are not using them.
Specify individual interfaces as input to analyzers rather than specifying
all interfaces as input.
Limit the amount of mirrored traffic by using firewall filters.
This example describes how to configure remote mirroring:
Requirements on page 84
Overview and Topology on page 84
Mirroring Employee-to-Web Traffic for Remote Analysis on page 85
Verification on page 89
This example uses the following hardware and software components:
An EX9200 switch connected to another EX9200 switch
Junos OS Release 13.2X50-D10 or later for EX Series switches
Before you configure remote mirroring, be sure that:
You have an understanding of mirroring concepts.
The interfaces that port-mirroring will use as output interfaces have been configured
on the switch.
This topic includes two related examples that describe how to configure mirroring to the
VLAN so that analysis can be performed from a remote monitoring
remote-analyzer
station. The first example shows how to configure a switch to mirror all traffic from
employee computers. The second example shows the same scenario, but the setup
includes a filter to mirror only the employee traffic going to the Web.
VLAN so that you can perform analysis from
remote-analyzer
Mirror only necessary packets to reduce potential
Copyright © 2016, Juniper Networks, Inc.