Juniper EX9200 Features Manual page 69

Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
Apply a Layer 2 port-mirroring firewall filter to the VLAN forwarding table or flood
4.
table.
To mirror packets being forwarded to the VLAN:
[edit ... bridge-domains bridge-domain-name forwarding-options]
user@host# set filter input pm-filter-for-bd-ingress-forwarded
To mirror packets being flooded to the VLAN:
[edit ... bridge-domains bridge-domain-name forwarding-options]
user@host# set flood input pm-filter-for-bd-ingress-flooded
Verify the minimum configuration for applying a Layer 2 port-mirroring firewall filter
5.
to the forwarding table or flood table of the VLAN.
Navigate to the hierarchy level at which the VLAN is configured:
a.
[edit]
[edit routing-instances routing-instance-name]
Display the VLAN configurations:
b.
user@host# show vlans
vlans {
vlan-name {
instance-type virtual-switch; # For a bridge domain under a routing instance.
domain-type bridge;
interface interface-name;
forwarding-options {
filter { # Mirror ingress forwarded traffic
input pm-filter-for-bd-ingress-forwarded;
}
flood { # Mirror ingress flooded traffic
input pm-filter-for-bd-ingress-flooded;
}
}
}
}
Understanding Layer 2 Port Mirroring on page 3
Layer 2 Port Mirroring Firewall Filters
Defining a Layer 2 Port-Mirroring Firewall Filter
Applying Layer 2 Port Mirroring to a Logical Interface
Applying Layer 2 Port Mirroring to Traffic Forwarded or Flooded to a VPLS Routing Instance
Example: Layer 2 Port Mirroring at a Logical Interface
Example: Layer 2 Port Mirroring for a Layer 2 VPN
Example: Layer 2 Port Mirroring for a Layer 2 VPN with LAG Links
Chapter 7: Port Mirroring for Logical interfaces
53