Configuring Port Mirroring - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Example: Configuring Port Mirroring for Remote Monitoring of Employee Resource Use on EX
Series Switches
Copyright © 2010, Juniper Networks, Inc.
EX Series switches allow you to configure port mirroring to send copies of packets to
either a local interface for local monitoring or to a VLAN for remote monitoring. You can
use port mirroring to copy these packets:
Packets entering or exiting a port
Packets entering a VLAN on EX2200, EX3200, EX4200, or EX4500 switches
Packets exiting a VLAN on EX8200 switches
You can analyze the mirrored traffic using a protocol analyzer application running on a
remote monitoring station if you are sending mirrored traffic to an analyzer VLAN.
This topic includes two related examples that describe how to mirror traffic entering
ports on the switch to the
a remote monitoring station. The first example shows how to mirror all traffic entering
the ports connected to employee computers. The second example shows the same
scenario, but includes a filter to mirror only the employee traffic going to the Web.
This example describes how to configure remote port mirroring:
Requirements on page 3549
Overview and Topology on page 3549
Mirroring All Employee Traffic for Remote Analysis on page 3550
Mirroring Employee-to-Web Traffic for Remote Analysis on page 3551
Verification on page 3554
Requirements
This example uses the following hardware and software components:
Junos OS Release 9.5 or later for EX Series switches
One EX3200 or EX4200 switch connected to another EX3200 or EX4200 switch
Before you configure port mirroring, be sure you have an understanding of port mirroring
concepts.
Input interfaces that are referred by the analyzer must be configured.
Overview and Topology
This topic includes two related examples that describe how to configure port mirroring
to the VLAN so that analysis can be performed from a remote monitoring
remote-analyzer
station. The first example shows how to configure an EX Series switch to mirror all traffic
from employee computers. The second example shows the same scenario, but the setup
includes a filter to mirror only the employee traffic going to the Web.
Figure 87 on page 3550 shows the network topology for this example.
remote-analyzer VLAN so that you can perform analysis from
Chapter 127: Port Mirroring
3549