Defining a Next-Hop Group for Layer 2 Port Mirroring
On MX Series routers and EX Series switches, you can mirror tunnel interface input traffic
to multiple destinations. To this form of multipacket port mirroring, you specify two or
more additional destinations in a next-hop group, define a firewall filter that references
the next-hop group as the filter action, and then apply the filter to a logical tunnel interface
(lt-) or virtual tunnel interface (vt-) on the MX Series router and on an EX Series switch.
NOTE: This topic describes how to define a next-hop group for Layer 2 port
mirroring to multiple destinations. For detailed information about defining a
firewall filter for Layer 2 port mirroring to multiple destinations, see Defining
a Layer 2 Port-Mirroring Firewall Filter.
To define a next-hop group for a Layer 2 port-mirroring firewall filter action:
1. Enable configuration of Layer 2 forwarding options.
•
To enable Layer 2 forwarding options at the top level:
[edit]
user@host edit forwarding-options port-mirroring family (ccc | vpls) output
•
To enable Layer 2 forwarding options for a routing instance:
[edit]
user@host edit forwarding-options port-mirroring instance instance-name
family (ccc | vpls) output
2.
Enable configuration of a next-hop-group for Layer 2 port mirroring:
[edit forwarding-options port-mirroring ... family (ccc | vpls) output]
user@host# edit next-hop-group pm-next-hop-group-name
3.
Specify the type of addresses to be used in the next-hop group configuration. By
default, the next-hop group is specified using Layer 3 addresses (group-type inet). To
specify the next-hop group using Layer 2 addresses instead, you must include the
group-type layer-2 statement:
[edit forwarding-options port-mirroring ... family (ccc | vpls) output next-hop-group
pm-next-hop-group-name]
user@host# set group-type layer-2
4.
Specify the logical interfaces of the next-hop route (or switch):
[edit forwarding-options port-mirroring ... family (ccc | vpls) output next-hop-group
pm-next-hop-group-name]
user@host# set interface logical-interface-name-1
user@host# set interface logical-interface-name-2
The MX Series router and the EX Series switch supports up to 30 next-hop groups.
Each next-hop group supports up to 16 next-hop addresses. Each next-hop group
must specify at least two addresses.
Copyright © 2016, Juniper Networks, Inc.72
Port Mirroring Feature Guide for EX9200 Switches
To Next Page
Loading...
Need help?
General
