Juniper EX9200 Features Manual page 91

Copyright © 2016, Juniper Networks, Inc.
For a Fast Ethernet, Gigabit Ethernet, or Aggregated Ethernet interface, bind an
b.
802.1Q VLAN tag ID to the logical interface:
[edit interfaces interface-name unit logical-unit-number]
user@host# set vlan-id number
Enable specification of an input or output filter to be applied to Layer 2 packets that
3.
are part of bridging domain, Layer 2 switching cross-connects, or virtual private LAN
service (VPLS).
If the filter is to be evaluated when packets are received on the interface:
[edit interfaces interface-name unit logical-unit-number]
user@host# set family family filter input pm-filter-name-a
If the filter is to be evaluated when packets are sent on the interface:
[edit interfaces interface-name unit logical-unit-number]
user@host# set family family filter output pm-filter-name-b
The value of the family option can be
NOTE: If port-mirroring firewall filters are applied at both the input and
output of a logical interface, two copies of each packet are mirrored. To
prevent the router or switch from forwarding duplicate packets to the
same destination, include the optional
forwarding-options]
Verify the minimum configuration for applying a named Layer 2 port mirroring firewall
4.
filter to a logical interface:
[edit interfaces interface-name unit logical-unit-number family family filter ... ]
user@host# top
[edit]
user@host# show interfaces
interfaces {
interface-name {
vlan-tagging;
encapsulation extended-vlan-ethernet-switching;
unit number { # Apply a filter to the input of this interface
vlan-id number;
family (ethernet-switching | ccc | vpls) {
filter {
input pm-filter-for-logical-interface-input;
}
}
}
unit number { # Apply a filter to the output of this interface
vlan-id number;
family (ethernet-switching | ccc | vpls) {
filter {
output pm-filter-for-logical-interface-output;
}
}
Chapter 8: Port Mirroring for Multiple Destinations
,
ethernet-switching
mirror-once
hierarchy level.
, or .
ccc vpls
statement at the
[edit
75