Juniper EX9200 Features Guide

Table 5: Application of Layer 2 Port Mirroring Firewall Filters on PE Routers and PE Switches
Configuration DetailsNotesScope of MirroringPoint of Application
See Applying Layer 2 Port
Mirroring to a Logical Interface.
For more information about
VPLS routing instances, see
Configuring a VPLS Routing
Instance and Configuring
VLAN Identifiers for Bridge
Domains and VPLS Routing
Instances.
You can also configure
aggregated Ethernet
interfaces between CE
devices and PE routers or PE
switches for VPLS routing
instances. Traffic is
load-balanced across all of
the links in the aggregated
interface.
Traffic received on an
aggregated Ethernet interface
is forwarded over a different
interface based on a lookup
of the destination MAC
(DMAC) address:
•
Packets destined for a local
site are sent out of the
load-balanced child
interface.
•
Packets destined for the
remote site are
encapsulated and
forwarded over a
label-switched path (LSP).
Packets originating within a
service provider customer’s
network, sent first to a CE
device, and sent next to an
MX Series router or an EX
Series switch acting as a PE
router or PE switch.
Ingress Customer-Facing
Logical Interface
See Applying Layer 2 Port
Mirroring to a Logical Interface.
Unicast packets being
forwarded by the MX Series
router or the EX Series switch
to another PE router or PE
switch.
NOTE: If you apply a
port-mirroring filter to the
output for a logical interface,
only unicast packets are
mirrored. To mirror multicast,
unknown unicast, and
broadcast packets, apply a
filter to the input to the flood
table of a bridge domain or
VPLS routing instance.
Egress Customer-Facing
Logical Interface
See Applying Layer 2 Port
Mirroring to Traffic Forwarded
or Flooded to a Bridge Domain.
For information about
flooding behavior in VPLS, see
the Junos OS VPNs Library for
Routing Devices.
Forwarding and flood traffic
typically consists of
broadcast packets, multicast
packets, unicast packets with
an unknown destination MAC
address, or packets with a
MAC entry in the DMAC
routing table.
Forwarding traffic or flood
traffic sent to the bridge
domain from a CE device.
Input to a Bridge Domain
Forwarding Table or
Flood Table
See Applying Layer 2 Port
Mirroring to Traffic Forwarded
or Flooded to a VPLS Routing
Instance. For information
about flooding behavior in
VPLS, see the Junos OS VPNs
Library for Routing Devices.
Forwarding traffic or flood
traffic sent to the VPLS
routing instance from a CE
device.
Input to a
VPLS Routing Instance
Forwarding Table or
Flood Table
Related
Documentation
Understanding Layer 2 Port Mirroring on page 3•
• Layer 2 Port Mirroring Firewall Filters
• Defining a Layer 2 Port-Mirroring Firewall Filter
• Example: Layer 2 Port Mirroring at a Logical Interface
Copyright © 2016, Juniper Networks, Inc.42
Port Mirroring Feature Guide for EX9200 Switches

Juniper EX9200 Specifications

General

Brand	Juniper
Model	EX9200
Category	Network Router
Language	English