Configuring Port Mirroring For Local Traffic Analysis - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Configuring Port Mirroring
Configuring Port Mirroring to Analyze Traffic (CLI Procedure)
Copyright © 2010, Juniper Networks, Inc.
Configuring Port Mirroring to Analyze Traffic (CLI Procedure) on page 3849
Configuring Port Mirroring to Analyze Traffic (J-Web Procedure) on page 3852
EX Series switches allow you to configure port mirroring to send copies of packets to
either a local interface for local monitoring or to a VLAN for remote monitoring. You can
use port mirroring to copy these packets:
Packets entering or exiting a port
Packets entering a VLAN on EX2200, EX3200, EX4200, or EX4500 switches
Packets exiting a VLAN on EX8200 switches
We recommend that you disable port mirroring when you are not using it and select
specific input interfaces in preference to using the
amount of mirrored traffic by using a firewall filter or the
selection of packets.
NOTE: If you want to create additional analyzers without deleting the existing
analyzer, first disable the existing analyzer using the
analyzer-name command or the J-Web configuration page for port mirroring.
NOTE: Interfaces used as output for a port mirror analyzer must be configured
as family
ethernet-switching
Configuring Port Mirroring for Local Traffic Analysis on page 3849
Configuring Port Mirroring for Remote Traffic Analysis on page 3850
Filtering the Traffic Entering an Analyzer on page 3851

Configuring Port Mirroring for Local Traffic Analysis

To mirror interface traffic or VLAN traffic on the switch to an interface on the switch:
Choose a name for the port mirroring configuration—in this case,
1.
employee-monitor —and specify the input—in this case, packets entering
and :
ge-0/0/1
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor input ingress interface ge–0/0/0.0
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor input ingress interface ge–0/0/1.0
Optionally, you can specify a statistical sampling of the packets by setting a ratio:
2.
[edit ethernet-switching-options]
keyword. You can also limit the
all
keyword to mirror only a
ratio
disable analyzer
.
Chapter 138: Port Mirroring
ge-0/0/0
3849