Juniper EX9200 Features Manual page 23

Port mirroring feature guide ex series
Hide thumbs Also See for EX9200:
Table of Contents

Advertisement

Table 3: Application of Layer 2 Port Mirroring Types (continued)
Type of
Layer2PortMirroring
Point of
Definition
Application
Layer2Port-Mirroring
Logical interface
Firewall Filter
(including an
aggregated
Ethernet interface)
See Applying Layer
2 Port Mirroring to
a Logical Interface.
VLAN forwarding
table or flood
table
See Applying Layer
2 Port Mirroring to
Traffic Forwarded
or Flooded to a
Bridge Domain.
VPLS routing
instance
forwarding table or
flood table
See Applying Layer
2 Port Mirroring to
Traffic Forwarded
or Flooded to a
VPLS Routing
Instance.
Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
Scope of
Mirroring
VPLS packets
received or sent on
a logical interface.
Layer 2 traffic
forwarded or
flooded to a VLAN
Layer 2 traffic
forwarded or
flooded to a VPLS
routing instance
Understanding Layer 2 Port Mirroring on page 3
Restrictions on Layer 2 Port Mirroring
Precedence of Multiple Levels of Layer 2 Port Mirroring on a Physical Interface on
page 29
Understanding Layer 2 Port Mirroring of PE Router Logical Interfaces on page 41
Understanding Layer 2 Port Mirroring of PE Router Aggregated Ethernet Interfaces
Chapter 1: Introduction to Port Mirroring
Description
In the firewall filter configuration, include
action and action-modifier terms to apply
to the packets selected for mirroring:
1.
The
action is recommended.
accept
2. Specify port mirroring by Including
one of the following modifiers:
The
port-mirror
modifier implicitly
references the port-mirroring
properties currently bound to the
underlying physical interfaces.
The
port-mirror-instance
modifier
pm-instance-name
explicitly references a named
instance of port mirroring.
3. (Optional) For tunnel interface input
packets only, to mirror the packets to
additional destinations, include the
next-hop-group next-hop-group-name
modifier. This modifier references a
next-hop-group that specifies the
next-hop addresses (for sending
additional copies of packets to an
analyzer).
Configuration
Details
See Defining a
Layer 2
Port-Mirroring
Firewall Filter.
Layer 2
NOTE:
port-mirroring
firewall filters are
not supported for
logical systems.
For mirroring
tunnel interface
input packets to
multiple
destinations, also
see
"Defining a
Next-Hop Group
for Layer 2 Port
Mirroring" on
page
72.
7

Advertisement

Table of Contents
loading

Table of Contents