Juniper JUNOS OS 10.3 - SOFTWARE Manual page 3647

Step-by-Step
Procedure
Results
CLI Quick
Configuration
Copyright © 2010, Juniper Networks, Inc.
To configure basic remote port mirroring:
Configure the VLAN tag ID for the
1.
[edit vlans]
user@switch# set remote-analyzer vlan-id 999
Configure the interface on the network port connected to another switch for trunk
2.
mode and associate it with the
[edit interfaces]
user@switch# set ge-0/0/10 unit 0 family ethernet-switching port-mode trunk
user@switch# set ge-0/0/10 unit 0 family ethernet-switching vlan members 999
Configure the
3. employee-monitor
[edit ethernet-switching-options]
user@switch# set analyzer employee–monitor loss-priority high
user@switch# set analyzer employee-monitor input ingress interface ge-0/0/0.0
user@switch# set analyzer employee–monitor input ingress interface ge-0/0/1.0
user@switch# set analyzer employee–monitor output vlan remote-analyzer
set analyzer employee-monitor input egress interface ge-0/0/0.0
set analyzer employee-monitor input egress interface ge-0/0/1.0
Check the results of the configuration:
[edit]
user@switch# show
ethernet-switching-options {
analyzer employee-monitor {
loss-priority high;
input {
ingress {
interface ge-0/0/0.0;
interface ge-0/0/1.0;
}
egress {
interface ge-0/0/0.0;
interface ge-0/0/1.0;
}
}
output {
vlan {
remote-analyzer;
}
}
}
}
Mirroring Employee-to-Web Traffic for Remote Analysis
To configure port mirroring for remote traffic analysis of employee to web traffic, perform
these tasks:
To quickly configure port mirroring to mirror employee traffic to the external Web, copy
the following commands and paste them into the terminal window:
[edit]
VLAN:
remote-analyzer
VLAN:
remote-analyzer
analyzer:
Chapter 127: Port Mirroring
3551