}
}
}
...
firewall {
family ethernet-switching {
...
filter watch-employee {
term employee-to-corp {
from {
source-address {
192.0.2.16/28;
}
destination-address {
192.0.2.16/28;
}
}
then accept;
}
term employee-to-web {
from {
destination-port 80;
}
then analyzer employee-web-monitor;
}
}
}
}
ethernet-switching-options {
analyzer employee-web-monitor {
loss-priority high;
output {
vlan {
999;
}
}
}
vlans {
remote-analyzer {
vlan-id 999;
}
}
Verification
To confirm that the configuration is working properly, perform these tasks:
Verifying That the Analyzer Has Been Correctly Created on page 3259
Verifying That the Analyzer Has Been Correctly Created
Purpose
Verify that the analyzer named
created on the switch with the appropriate input interfaces, and appropriate output
interface.
or
employee-monitor
employee-web-monitor
Chapter 126: Port Mirroring
has been
3259