Description

This article provides information on how to view the traffic of a specific VLAN that hits a LAG bundle on EX-series switches.

Symptoms

Monitoring an AE LAG bundle will not display the traffic for a specific VLAN. It shows the aggregate traffic of all the VLANs.

Solution


To view the traffic for a specific VLAN, a firewall filter has to be configured to match the VLAN packets. The following configuration is a sample of a firewall filter that was created to match packets of the v100 VLAN:

set firewall family ethernet-switching filter 1 term 1 from vlan v100
set firewall family ethernet-switching filter 1 term 1 then accept
set firewall family ethernet-switching filter 1 term 1 then count v100_count_packet
set firewall family ethernet-switching filter 1 term 2 then accept
The firewall filter is applied on the ingress of the ae0 LAG bundle:
set interface ae0.0 family ethernet-switching filter input 1
The following commands are issued to verify the firewall filters: 
user@switch # run show firewall 

Filter: 1
Counters:
Name                                 Bytes       Packets
v100_count_packet                    48786        594 > v100 traffic hitting the ae0 bundle  user@switch# run show firewall

Filter: 1
Counters:
Name                                 Bytes       Packets
v100_count_packet                    59268        722

user@switch# run show firewall

Filter: 1
Counters:
Name                                 Bytes       Packets
v100_count_packet                    60990        743