Figure 86: Network Topology For Local Port Mirroring Example - Juniper JUNOS OS 10.3 - SOFTWARE Manual

CLI Quick
Configuration
Step-by-Step
Procedure
Results
Copyright © 2010, Juniper Networks, Inc.

Figure 86: Network Topology for Local Port Mirroring Example

Mirroring All Employee Traffic for Local Analysis
To configure port mirroring for all employee traffic for local analysis, perform these tasks:
To quickly configure local port mirroring for ingress traffic to the two ports connected to
employee computers, copy the following commands and paste them into the switch
terminal window:
[edit]
set interfaces ge-0/0/0 unit 0 family ethernet-switching
set interfaces ge-0/0/1 unit 0 family inet 192.1.1.1/24
set interfaces ge-0/0/10 unit 0 family ethernet-switching
set ethernet-switching options analyzer employee–monitor input ingress interface ge-0/0/0.0
set ethernet-switching options analyzer employee–monitor input ingress interface ge-0/0/1.0
set ethernet-switching options analyzer employee–monitor output interface ge-0/0/10.0
To configure an analyzer called
interfaces and the analyzer output interface:
Configure each interface connected to employee computers as an input interface
1.
for the port-mirror analyzer that we are calling
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor input ingress interface ge–0/0/0.0
user@switch# set analyzer employee-monitor input ingress interface ge–0/0/1.0
Configure the output analyzer interface for the
2.
will be the destination interface for the mirrored packets:
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor output interface ge-0/0/10.0
Check the results of the configuration:
[edit]
user@switch# show
ethernet-switching-options {
analyzer employee-monitor {
and specify the input (source)
employee-monitor
employee-monitor
employee-monitor
Chapter 127: Port Mirroring
:
analyzer. This
3545