Description

The EX9200 supports native analyzer port for port mirroring from Junos 13.2 and later releases.

This article describes the configuration requirements in Junos 13.2 to support the port mirroring function.

Symptoms

The EX9200 Platforms, prior to Junos 13.2, do not support native analyzer port.  This feature is supported  from Junos 13.2, and later releases.

Solution


The configuration syntax is similar to other EX platforms, except that in Junos Release 13.2, a dummy vlan is needed to assign to the analyzer port .

The example below is for mirroring traffic (ingress and egress) from interface ge-2/0/2.0 and the mirrored output is sent to interface ge-2/0/0.0 for collection.

  • Ge-2/0/2.0 (Ingress/Egress) mirror traffic from this port
  • ge-2/0/0.0 mirrored output sent to this port

The following output shows that a vlan is needed for the anayzer port , and without it the configuration check-out will fail:

set interfaces ge-2/0/0 unit 0 family ethernet-switching
set interfaces ge-2/0/2 unit 0 family ethernet-switching vlan members v100
set forwarding-options analyzer jtac input ingress interface ge-2/0/2.0
set forwarding-options analyzer jtac input egress interface ge-2/0/2.0
set forwarding-options analyzer jtac output interface ge-2/0/0.0
set protocols lldp interface all
set vlans v100 vlan-id 100

[edit]
root@helen-dut# commit
[edit interfaces ge-2/0/0 unit 0 family]
'ethernet-switching'
For access interface, please ensure vlan members is configured
error: configuration check-out failed

ADD VLAN TO ANALYZER PORT:

set interfaces ge-2/0/0 unit 0 family ethernet-switching vlan members v200
set vlans v200 vlan-id 200
[edit]
root@helen-dut# commit
commit complete

WORKING CONFIG:

set interfaces ge-2/0/0 unit 0 family ethernet-switching vlan members v200
set interfaces ge-2/0/2 unit 0 family ethernet-switching vlan members v100
set forwarding-options analyzer jtac input ingress interface ge-2/0/2.0
set forwarding-options analyzer jtac input egress interface ge-2/0/2.0
set forwarding-options analyzer jtac output interface ge-2/0/0.0
set protocols lldp interface all
set vlans v100 vlan-id 100
set vlans v200 vlan-id 200

VERIFICATION:

A PC running wireshark is connected to ge-2/0/0 to verify that mirroring is working for ge-2/0/2.