Juniper EX9200 Features Guide

4. Apply a Layer 2 port-mirroring firewall filter to the VLAN forwarding table or flood
table.
•
To mirror packets being forwarded to the VLAN:
[edit ... bridge-domains bridge-domain-name forwarding-options]
user@host# set filter input pm-filter-for-bd-ingress-forwarded
•
To mirror packets being flooded to the VLAN:
[edit ... bridge-domains bridge-domain-name forwarding-options]
user@host# set flood input pm-filter-for-bd-ingress-flooded
5. Verify the minimum configuration for applying a Layer 2 port-mirroring firewall filter
to the forwarding table or flood table of the VLAN.
a. Navigate to the hierarchy level at which the VLAN is configured:
•
[edit]
•
[edit routing-instances routing-instance-name]
b.
Display the VLAN configurations:
user@host# show vlans
vlans {
vlan-name {
instance-type virtual-switch; # For a bridge domain under a routing instance.
domain-type bridge;
interface interface-name;
forwarding-options {
filter { # Mirror ingress forwarded traffic
input pm-filter-for-bd-ingress-forwarded;
}
flood { # Mirror ingress flooded traffic
input pm-filter-for-bd-ingress-flooded;
}
}
}
}
Related
Documentation
Understanding Layer 2 Port Mirroring on page 3•
• Layer 2 Port Mirroring Firewall Filters
• Defining a Layer 2 Port-Mirroring Firewall Filter
• Applying Layer 2 Port Mirroring to a Logical Interface
• Applying Layer 2 Port Mirroring to Traffic Forwarded or Flooded to a VPLS Routing Instance
• Example: Layer 2 Port Mirroring at a Logical Interface
• Example: Layer 2 Port Mirroring for a Layer 2 VPN
• Example: Layer 2 Port Mirroring for a Layer 2 VPN with LAG Links
53Copyright © 2016, Juniper Networks, Inc.
Chapter 7: Port Mirroring for Logical interfaces

Juniper EX9200 Specifications

General

Brand	Juniper
Model	EX9200
Category	Network Router
Language	English