Juniper EX9200 Features Manual page 73

Copyright © 2016, Juniper Networks, Inc.
The statement at the
output
hierarchy level specifies the output mirror interface for Layer 2
ethernet-switching]
packets in a bridging environment:
Logical interface
ge-2/0/0.0
is configured as the port-mirroring destination.
The optional
no-filter-check
destination interface.
Configure the Layer 2 port-mirroring firewall filter
3.
[edit]
firewall {
family ethernet-switching {
filter example-bridge-pm-filter {
term example-filter-terms {
then {
accept;
port-mirror;
}
}
}
}
}
When this firewall filter is applied to the input or output of a logical interface for traffic
in a bridging environment, Layer 2 port mirroring is performed according to the input
packet-sampling properties and mirror destination properties configured for the Layer 2
port mirroring global instance. Because this firewall filter is configured with the single,
default filter action accept
= ) match this filter.
run-length 5
Configure the logical interfaces:
4.
[edit]
interfaces {
ge-2/0/0 { # Define the interface to the external analyzer
encapsulation ethernet-bridge;
unit 0 {
family ethernet-switching;
}
}
ge-2/0/6 { # Define the traffic input port
flexible-vlan-tagging;
encapsulation extended-vlan-bridge;
unit 0 {
vlan-id 100;
family ethernet-switching {
filter {
input example-bridge-pm-filter; # Apply the port-mirroring firewall filter
}
}
}
}
ge-3/0/1 { # Define the traffic output port
Chapter 7: Port Mirroring for Logical interfaces
[edit forwarding-options port-mirroring family
, which is associated with the external packet analyzer,
statement allows filters to be configured on this
example-bridge-pm-filter
, all packets selected by the
:
input properties ( rate = 10 and
57