Layer 2 Port Mirroring Of Pe Router Or Pe Switch Aggregated Ethernet Interfaces - Juniper EX9200 Features Manual

Layer 2 Port Mirroring of PE Router or PE Switch Aggregated Ethernet Interfaces

Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
Chapter 3: Behavior of Layer 2 Port Mirroring of Logical Interfaces on PE Routers
An aggregated Ethernet interface is a virtual aggregated link that consists of a set of
physical interfaces of the same speed and operating in full-duplex link connection mode.
You can configure aggregated Ethernet interfaces between CE devices and PE devices
for VPLS routing instances. Traffic is load-balanced across all of the links in the aggregated
interface. If one or more links in the aggregated interface fails, the traffic is switched to
the remaining links.
You can apply a Layer 2 port-mirroring firewall filter to an aggregated Ethernet interface
to configure port mirroring at the parent interface. However, if any child interfaces are
bound to different Layer 2 port-mirroring instances, packets received at the child interfaces
will be mirrored to the destinations specified by their respective port-mirroring instances.
Thus, multiple child interfaces can mirror packets to multiple destinations.
For example, suppose the parent aggregated Ethernet interface instance
child interfaces:
xe-2/0/0
xe-3/1/2
Suppose that these child interfaces on
port-mirroring instances:
—A named instance of Layer 2 port mirroring, bound to child interface
pm_instance_A
xe-2/0/0 .
—A named instance of Layer 2 port mirroring, bound to child interface
pm_instance_B
.
xe-3/1/2
Now suppose you apply a Layer 2 port-mirroring firewall filter to the Layer 2 traffic sent
on ae0.0 (logical unit 0 on the aggregated Ethernet interface instance
port mirroring on , which has the following effect on the processing of traffic received
ae0.0
on the child interfaces for which Layer 2 port-mirroring properties are specified:
The packets received on
in port-mirroring instance
The packets received on
in port-mirroring instance
Because and
pm_instance_A
properties or mirror destination properties, the packets received on
xe-3/1/2.0 can mirror different packets to different destinations.
Understanding Layer 2 Port Mirroring on page 3
Layer 2 Port Mirroring Firewall Filters
Defining a Layer 2 Port-Mirroring Firewall Filter
Example: Layer 2 Port Mirroring for a Layer 2 VPN
ae0 are bound to two different Layer 2
xe-2/0/0.0 are mirrored to the output interfaces configured
.
pm_instance_A
are mirrored to the output interfaces configured
xe-3/1/2.0
.
pm_instance_B
can specify different packet-selection
pm_instance_B
has two
ae0
0 ). This enables
and
xe-2/0/0.0
15