Juniper JUNOS OS 10.3 - SOFTWARE Manual page 3637

Copyright © 2010, Juniper Networks, Inc.
You configure a firewall filter to establish a policy to select certain packets. You can
send the sample to a local analyzer port or to an analyzer VLAN.
NOTE: Juniper Networks Junos operating system (Junos OS) for EX Series
switches implements port mirroring differently than other Junos OS packages.
Junos OS for EX Series switches does not include the
found in the
edit forwarding-options
packages, nor the
Limitations of Port Mirroring
Port mirroring on EX Series switches has the following limitations:
On an EX2200, EX3200, EX4200, or EX4500 switch, you can enable only one analyzer
(port mirroring configuration).
On an EX8208 or an EX8216 switch, you can enable a maximum of seven analyzers
(port mirroring configurations).
Packets with physical layer errors are filtered out and thus are not sent to the analyzer
port or analyzer VLAN.
You cannot mirror packets exiting or entering the following ports:
Dedicated Virtual Chassis ports (VCPs)
Management port (
me0
Routed VLAN interfaces (RVIs)
On EX8200 switches, you can set a ratio only for ingress packets.
On EX2200, EX3200, EX4200, and EX4500 switches, mirrored packets exiting a tagged
interface might contain an incorrect VLAN ID.
On EX2200, EX3200, EX4200, and EX4500 switches, tagged packets mirrored to an
analyzer port might contain an incorrect Ethertype.
On an EX2200 switch, you cannot configure multiple VLANs (including a VLAN range
or PVLANs) as ingress input to an analyzer.
Table 481 on page 3542 lists some port mirroring terms and their descriptions.
level of the hierarchy of other Junos OS
action in firewall filter terms.
port-mirror
or )
vme0
Chapter 127: Port Mirroring
port-mirroring statement
3541