Configuring Port Mirroring For Remote Traffic Analysis - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Complete Software Guide for Junos
3850
®
OS for EX Series Ethernet Switches, Release 10.4
user@switch# set analyzer employee-monitor ratio 200
When the ratio is set to 200, 1 of every 200 packets is mirrored to the analyzer. You
can use statistical sampling to reduce the volume of mirrored traffic, as a high volume
of mirrored traffic can be performance intensive for the switch. On EX8200 switches,
you can set a ratio only for ingress packets.
Configure the destination interface for the mirrored packets:
3.
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor output interface ge-0/0/10.0

Configuring Port Mirroring for Remote Traffic Analysis

To mirror traffic that is traversing interfaces or a VLAN on the switch to a VLAN for analysis
from a remote location:
Configure a VLAN to carry the mirrored traffic. This VLAN is called
1.
and given the ID of 999 by convention in this documentation:
[edit]
user@switch# set vlans remote-analyzer vlan-id 999
Set the uplink module interface that is connected to the distribution switch to trunk
2.
mode and associate it with the
[edit]
user@switch# set interfaces ge-0/1/1 unit 0 family ethernet-switching port-mode trunk
vlan members 999
Configure the analyzer:
3.
Choose a name and set the loss priority to high. Loss priority should always be set
a.
to high when configuring for remote port mirroring:
[edit ethernet-switching-options]
user@switch# set analyzer employee–monitor loss-priority high
Specify the traffic to be mirrored—in this example the packets entering ports
b.
ge-0/0/0 and ge-0/0/1
[edit ethernet-switching-options]
user@switch# set analyzer employee–monitor input ingress interface ge-0/0/0.0
[edit ethernet-switching-options]
user@switch# set analyzer employee–monitor input ingress interface ge-0/0/1.0
Specify the remote-analyzer
c.
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor output vlan 999
Optionally, you can specify a statistical sampling of the packets by setting a ratio:
4.
[edit ethernet-switching-options]
user@switch# set analyzer employee-monitor ratio 200
remote-analyzer VLAN:
:
VLAN as the output for the analyzer:
Copyright © 2010, Juniper Networks, Inc.
remote-analyzer