Juniper EX9200 Features Manual page 4

Port Mirroring Feature Guide for EX9200 Switches
Part 2
Chapter 5
Chapter 6
Chapter 7
Chapter 8
iv
Configuring Port Mirroring
Port Mirroring Instances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Configuring the Global Instance of Layer 2 Port Mirroring . . . . . . . . . . . . . . . . . . . . 21
Defining a Named Instance of Layer 2 Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . 24
Port Mirroring for Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Precedence of Multiple Levels of Layer 2 Port Mirroring on a Physical
Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Binding Layer 2 Port Mirroring to Ports Grouped at the FPC Level . . . . . . . . . . . . . 30
Binding Layer 2 Port Mirroring to Ports Grouped at the PIC Level . . . . . . . . . . . . . . 32
Disabling Layer 2 Port Mirroring Instances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Examples: Layer 2 Port Mirroring at Multiple Levels of the Chassis . . . . . . . . . . . . 34
Layer 2 Port Mirroring at the FPC Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Layer 2 Port Mirroring at the PIC Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Layer 2 Port Mirroring at the FPC and PIC Levels . . . . . . . . . . . . . . . . . . . . . . . 35
Example: Layer 2 Port Mirroring with Multiple Instances . . . . . . . . . . . . . . . . . . . . 36
Example: Configuring Multiple Instances of Layer 2 Port Mirroring . . . . . . . . . 36
Explicit Reference of a Port Mirroring Instance . . . . . . . . . . . . . . . . . . . . . . . . 39
Implicit Reference of Port Mirroring on the Underlying Physical Interface . . . 39
Port Mirroring for Logical interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Understanding Layer 2 Port Mirroring of PE Router Logical Interfaces . . . . . . . . . . 41
Layer 2 Port Mirroring Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Layer 2 Port Mirroring Firewall Filters Overview . . . . . . . . . . . . . . . . . . . . . . . . 43
Mirroring of Packets Received or Sent on a Logical Interface . . . . . . . . . . . . . 44
Mirroring of Packets Forwarded or Flooded to a VLAN . . . . . . . . . . . . . . . . . . 44
Mirroring of Packets Forwarded or Flooded to a VPLS Routing Instance . . . . 45
Defining a Layer 2 Port-Mirroring Firewall Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Applying Layer 2 Port Mirroring to a Logical Interface . . . . . . . . . . . . . . . . . . . . . . 49
Applying Layer 2 Port Mirroring to Traffic Forwarded or Flooded to a VLAN . . . . . 52
Applying Layer 2 Port Mirroring to Traffic Forwarded or Flooded to a VPLS Routing
Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Example: Layer 2 Port Mirroring at a Logical Interface . . . . . . . . . . . . . . . . . . . . . . 56
Example: Layer 2 Port Mirroring for a Layer 2 VPN . . . . . . . . . . . . . . . . . . . . . . . . . 58
Example: Layer 2 Port Mirroring for a Layer 2 VPN with LAG Links . . . . . . . . . . . . 60
Port Mirroring for Multiple Destinations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Layer 2 Port Mirroring Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Layer 2 Port Mirroring Firewall Filters Overview . . . . . . . . . . . . . . . . . . . . . . . . 65
Mirroring of Packets Received or Sent on a Logical Interface . . . . . . . . . . . . . 66
Mirroring of Packets Forwarded or Flooded to a VLAN . . . . . . . . . . . . . . . . . . 67
Mirroring of Packets Forwarded or Flooded to a VPLS Routing Instance . . . . 67
Understanding Layer 2 Port Mirroring to Multiple Destinations Using Next-Hop
Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Defining a Layer 2 Port-Mirroring Firewall Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Defining a Next-Hop Group for Layer 2 Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . 72
Applying Layer 2 Port Mirroring to a Logical Interface . . . . . . . . . . . . . . . . . . . . . . . 74
Example: Layer 2 Port Mirroring to Multiple Destinations . . . . . . . . . . . . . . . . . . . . 76
Copyright © 2016, Juniper Networks, Inc.