Juniper EX9200 Features Manual page 87

Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
specified in the named instance referenced by the
modifier.
To reference a next-hop group that specifies the next-hop addresses (for sending
additional copies of packets to an analyzer), use the
next-hop-group pm-next-hop-group-name
[edit firewall family family filter pm-filter-name term pm-filter-term-name then]
user@host# set next-hop-group pm-next-hop-group-name
For configuration information about next-hop groups, see
Group for Layer 2 Port Mirroring" on page
Layer 2 port mirroring, the firewall filter term applies to the tunnel interface input
only.
Verify the minimum configuration of the Layer 2 port-mirroring firewall filter:
8.
[edit firewall ... ]
user@host# top
[edit]
user@host# show firewall
family (ethernet-switching | ccc | vpls) { # Type of packets to mirror
filter pm-filter-name { # Firewall filter name
term pm-filter-term-name {
from { # Do not specify match conditions based on route source address
}
then {
action; # Recommended action is 'accept'
action-modifier; # Three options for Layer 2 port mirroring
}
}
}
}
In the firewall filter term
port-mirror-instance pm-instance-name
Understanding Layer 2 Port Mirroring on page 3
Layer 2 Port Mirroring Firewall Filters
Understanding Layer 2 Port Mirroring to Multiple Destinations Using Next-Hop Groups
on page 68
Example: Layer 2 Port Mirroring at a Logical Interface
Example: Layer 2 Port Mirroring for a Layer 2 VPN
Example: Layer 2 Port Mirroring for a Layer 2 VPN with LAG Links
Example: Layer 2 Port Mirroring to Multiple Destinations
Chapter 8: Port Mirroring for Multiple Destinations
action modifier:
72. If you specify a next-hop group for
then statement, the action-modifier can be
, or
next-hop-group pm-next-hop-group-name
action
port-mirror-instance
"Defining a Next-Hop
port-mirror ,
.
71