Services on the QFX Series - Juniper.net

CHAPTER 3
Configuration Examples
• Example: Configuring Port Mirroring for Local Analysis on page 13
• Example: Configuring Port Mirroring for Remote Analysis on page 17
Example: Configuring Port Mirroring for Local Analysis
Use port mirroring to send traffic to applications that analyze traffic for purposes such
as monitoring compliance, enforcing policies, detecting intrusions, monitoring and
predicting traffic patterns, correlating events, and so on. Port mirroring copies packets
entering or exiting an interface or entering a VLAN and sends the copies to a local interface
for local monitoring.
This example describes how to configure port mirroring to copy traffic sent by employee
computers to a switch to an access interface on the same switch.
• Requirements on page 13
• Overview and Topology on page 13
• Mirroring All Employee Traffic for Local Analysis on page 14
• Mirroring Employee-to-Web Traffic for Local Analysis on page 15
• Verification on page 17
Requirements
This example uses the following hardware and software components:
• Junos OS Release 11.1
• A switch
Overview and Topology
This topic includes two related examples that describe how to mirror traffic entering
interfaces on the switch to an access interface on the same switch. The first example
shows how to mirror all traffic sent by employee computers to the switch. The second
example includes a filter to mirror only the employee traffic going to the Web.
In this example, xe-0/0/0 and xe-0/0/6 serve as connections for employee computers.
Interface xe-0/0/47 is connected to a device running an analyzer application.
Copyright © 2013, Juniper Networks, Inc.
13