Groups - Juniper EX9200 Features Manual

Port Mirroring Feature Guide for EX9200 Switches
Understanding Layer 2 Port Mirroring to Multiple Destinations Using Next-Hop Groups
Related
Documentation
68
On an MX Series router and on an EX Series switch, you can mirror traffic to multiple
destinations by configuring next-hop groups in Layer 2 port-mirroring firewall filters
applied to tunnel interfaces. The mirroring of packets to multiple destinations is also
known as multipacket port mirroring,
NOTE: Junos OS Release 9.5 introduced support for Layer 2 port mirroring
using next-hop groups on MX Series routers, but required installation of a
Tunnel PIC. Beginning in Junos OS Release 9.6, Layer 2 port mirroring using
next-hop groups on MX Series routers does not require Tunnel PICs.
On MX Series routers and on EX Series switches, you can define a firewall filter for mirroring
packets to a next-hop group. The next-hop group can contain Layer 2 members, Layer 3
members, and subgroups that are either unit list (mirroring packets to each interface) or
load-balanced (mirroring packets to one of several interfaces). The MX Series router and
the EX Series switch supports up to 30 next-hop groups. Each next-hop group supports
up to 16 next-hop addresses. Each next-hop group must specify at least two addresses.
To enable port mirroring to the members of a next-hop group, you specify the next-hop
group as the filter action of a firewall filter, and then you apply the firewall filter to logical
tunnel interfaces ( lt- ) or virtual tunnel interfaces (
EX Series switch.
NOTE: The use of subgroups for load-balancing mirrored traffic is not
supported.
Understanding Layer 2 Port Mirroring on page 3Understanding Layer 2 Port Mirroring
on page 3
Defining a Layer 2 Port-Mirroring Firewall Filter
Defining a Next-Hop Group for Layer 2 Port Mirroring on page 72
Example: Layer 2 Port Mirroring to Multiple Destinations
vt- ) on the MX Series router or on the
Copyright © 2016, Juniper Networks, Inc.