Juniper EX9200

}
}
}
next-hop-group nhg_mirror_to_bd { # Configure a next-hop group.
group-type layer-2; # Specify ’layer-2’ for Layer 2; default ’inet’ is for Layer 3.
interface ge-2/0/2.0; # Interface on ’bd_next_hop_group’ bridge domain.
interface ge-2/2/9.0; # Interface on ’bd_next_hop_group’ bridge domain.
}
}
5.
Configure two Layer 2 port-mirroring firewall filters for family bridge traffic:
•
filter_pm_bridge—Sends all family bridge traffic to the global port mirroring
destination.
•
filter_redirect_to_nhg—Sends all family bridge traffic to the final next-hop group
nhg_mirror_to_bd.
Layer 2 port-mirroring firewall filters for family bridge traffic applies to traffic on a
physical interface configured with encapsulation ethernet-bridge.
[edit]
firewall {
family bridge {
filter filter_pm_bridge {
term term_port_mirror {
then port-mirror;
}
}
filter filter_redirect_to_nhg {
term term_nhg {
then next-hop-group nhg_mirror_to_bd;
}
}
}
}
Related
Documentation
• Understanding Layer 2 Port Mirroring on page 3
• Understanding Layer 2 Port Mirroring to Multiple Destinations Using Next-Hop Groups
on page 68
• Defining a Layer 2 Port-Mirroring Firewall Filter
• Defining a Next-Hop Group for Layer 2 Port Mirroring on page 72
• Displaying Next-Hop Group Settings and Status on page 95
79Copyright © 2016, Juniper Networks, Inc.
Chapter 8: Port Mirroring for Multiple Destinations