Juniper EX9200

Understanding Layer 2 Port Mirroring to Multiple Destinations Using Next-Hop Groups
On an MX Series router and on an EX Series switch, you can mirror traffic to multiple
destinations by configuring next-hop groups in Layer 2 port-mirroring firewall filters
applied to tunnel interfaces. The mirroring of packets to multiple destinations is also
known as multipacket port mirroring,
NOTE: Junos OS Release 9.5 introduced support for Layer 2 port mirroring
using next-hop groups on MX Series routers, but required installation of a
Tunnel PIC. Beginning in Junos OS Release 9.6, Layer 2 port mirroring using
next-hop groups on MX Series routers does not require Tunnel PICs.
On MX Series routers and on EX Series switches, you can define a firewall filter for mirroring
packets to a next-hop group. The next-hop group can contain Layer 2 members, Layer 3
members, and subgroups that are either unit list (mirroring packets to each interface) or
load-balanced (mirroring packets to one of several interfaces). The MX Series router and
the EX Series switch supports up to 30 next-hop groups. Each next-hop group supports
up to 16 next-hop addresses. Each next-hop group must specify at least two addresses.
To enable port mirroring to the members of a next-hop group, you specify the next-hop
group as the filter action of a firewall filter, and then you apply the firewall filter to logical
tunnel interfaces (lt-) or virtual tunnel interfaces (vt-) on the MX Series router or on the
EX Series switch.
NOTE: The use of subgroups for load-balancing mirrored traffic is not
supported.
Related
Documentation
Understanding Layer 2 Port Mirroring on page 3Understanding Layer 2 Port Mirroring
on page 3
•
• Defining a Layer 2 Port-Mirroring Firewall Filter
• Defining a Next-Hop Group for Layer 2 Port Mirroring on page 72
• Example: Layer 2 Port Mirroring to Multiple Destinations
Copyright © 2016, Juniper Networks, Inc.68
Port Mirroring Feature Guide for EX9200 Switches