16.03.2014 Views

Services on the QFX Series - Juniper.net

Services on the QFX Series - Juniper.net

Services on the QFX Series - Juniper.net

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<str<strong>on</strong>g>Services</str<strong>on</strong>g> <strong>on</strong> <strong>the</strong> <strong>QFX</strong> <strong>Series</strong><br />

[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />

user@switch# set analyzer analyzer-name input (ingress | egress) interface interface-name<br />

NOTE: If you c<strong>on</strong>figure Junos OS to mirror egress packets, do not c<strong>on</strong>figure<br />

more than 2000 VLANs. If you do so, some VLAN packets might c<strong>on</strong>tain<br />

incorrect VLAN IDs.<br />

NOTE: If you c<strong>on</strong>figure mirroring for packets that egress an access<br />

interface, <strong>the</strong> original packets lose any VLAN tags when <strong>the</strong>y exit <strong>the</strong><br />

access interface, but <strong>the</strong> mirrored (copied) packets retain <strong>the</strong> VLAN tags<br />

when <strong>the</strong>y are sent to <strong>the</strong> analyzer system.<br />

2. If you want to specify that all traffic entering a VLAN should be mirrored, choose a<br />

name for <strong>the</strong> port-mirroring c<strong>on</strong>figurati<strong>on</strong> and specify <strong>the</strong> VLAN:<br />

[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />

user@switch# set analyzer analyzer-name input ingress vlan vlan-name<br />

NOTE: You cannot c<strong>on</strong>figure port mirroring to copy traffic that egresses<br />

a VLAN.<br />

3. C<strong>on</strong>figure <strong>the</strong> destinati<strong>on</strong> interface for <strong>the</strong> mirrored packets:<br />

C<strong>on</strong>figuring Port Mirroring for Remote Analysis<br />

[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />

user@switch# set analyzer analyzer-name output interface interface-name<br />

To mirror traffic to a VLAN for analysis at a remote locati<strong>on</strong>:<br />

1. C<strong>on</strong>figure a VLAN to carry <strong>the</strong> mirrored traffic:<br />

[edit]<br />

user@switch# set vlans vlan-name vlan-id number<br />

2. C<strong>on</strong>figure <strong>the</strong> interface that c<strong>on</strong>nects to ano<strong>the</strong>r switch (<strong>the</strong> uplink interface) to trunk<br />

mode and associate it with <strong>the</strong> appropriate VLAN:<br />

[edit]<br />

user@switch# set interfaces interface-name unit 0 family e<strong>the</strong>r<strong>net</strong>-switching port-mode<br />

trunk vlan members (vlan-name | vlan-id)<br />

3. C<strong>on</strong>figure <strong>the</strong> analyzer:<br />

a. Choose a name for <strong>the</strong> analyzer:<br />

[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />

user@switch# set analyzer analyzer-name<br />

b. Specify <strong>the</strong> interface to be mirrored and whe<strong>the</strong>r <strong>the</strong> traffic should be mirrored <strong>on</strong><br />

ingress or egress:<br />

[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />

user@switch# set analyzer analyzer-name input (ingress | egress) interface interface-name<br />

24<br />

Copyright © 2013, <strong>Juniper</strong> Networks, Inc.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!