Services on the QFX Series - Juniper.net
Services on the QFX Series - Juniper.net
Services on the QFX Series - Juniper.net
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<str<strong>on</strong>g>Services</str<strong>on</strong>g> <strong>on</strong> <strong>the</strong> <strong>QFX</strong> <strong>Series</strong><br />
[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />
user@switch# set analyzer analyzer-name input (ingress | egress) interface interface-name<br />
NOTE: If you c<strong>on</strong>figure Junos OS to mirror egress packets, do not c<strong>on</strong>figure<br />
more than 2000 VLANs. If you do so, some VLAN packets might c<strong>on</strong>tain<br />
incorrect VLAN IDs.<br />
NOTE: If you c<strong>on</strong>figure mirroring for packets that egress an access<br />
interface, <strong>the</strong> original packets lose any VLAN tags when <strong>the</strong>y exit <strong>the</strong><br />
access interface, but <strong>the</strong> mirrored (copied) packets retain <strong>the</strong> VLAN tags<br />
when <strong>the</strong>y are sent to <strong>the</strong> analyzer system.<br />
2. If you want to specify that all traffic entering a VLAN should be mirrored, choose a<br />
name for <strong>the</strong> port-mirroring c<strong>on</strong>figurati<strong>on</strong> and specify <strong>the</strong> VLAN:<br />
[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />
user@switch# set analyzer analyzer-name input ingress vlan vlan-name<br />
NOTE: You cannot c<strong>on</strong>figure port mirroring to copy traffic that egresses<br />
a VLAN.<br />
3. C<strong>on</strong>figure <strong>the</strong> destinati<strong>on</strong> interface for <strong>the</strong> mirrored packets:<br />
C<strong>on</strong>figuring Port Mirroring for Remote Analysis<br />
[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />
user@switch# set analyzer analyzer-name output interface interface-name<br />
To mirror traffic to a VLAN for analysis at a remote locati<strong>on</strong>:<br />
1. C<strong>on</strong>figure a VLAN to carry <strong>the</strong> mirrored traffic:<br />
[edit]<br />
user@switch# set vlans vlan-name vlan-id number<br />
2. C<strong>on</strong>figure <strong>the</strong> interface that c<strong>on</strong>nects to ano<strong>the</strong>r switch (<strong>the</strong> uplink interface) to trunk<br />
mode and associate it with <strong>the</strong> appropriate VLAN:<br />
[edit]<br />
user@switch# set interfaces interface-name unit 0 family e<strong>the</strong>r<strong>net</strong>-switching port-mode<br />
trunk vlan members (vlan-name | vlan-id)<br />
3. C<strong>on</strong>figure <strong>the</strong> analyzer:<br />
a. Choose a name for <strong>the</strong> analyzer:<br />
[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />
user@switch# set analyzer analyzer-name<br />
b. Specify <strong>the</strong> interface to be mirrored and whe<strong>the</strong>r <strong>the</strong> traffic should be mirrored <strong>on</strong><br />
ingress or egress:<br />
[edit e<strong>the</strong>r<strong>net</strong>-switching-opti<strong>on</strong>s]<br />
user@switch# set analyzer analyzer-name input (ingress | egress) interface interface-name<br />
24<br />
Copyright © 2013, <strong>Juniper</strong> Networks, Inc.