• This guide provides detailed instructions for configuring remote port mirroring in EVPN-VXLAN fabrics with an Edge-Routed Bridging (ERB) architecture. Remote port mirroring is essential for duplicating network traffic flows and forwarding them to monitoring hosts, facilitating troubleshooting and monitoring in data center environments.

• The need to set up remote port mirroring in an EVPN-VXLAN ERB fabric.
• A desire to replicate traffic flows for monitoring and troubleshooting purposes.
• Uncertainty about whether to use the Analyzer Instance or Port Mirroring Instance methods.

Remote port mirroring in EVPN-VXLAN fabrics is vital for observing and analyzing network traffic. Here are the key steps and considerations:

1. Remote Port Mirroring in EVPN-VXLAN IP Fabrics:

• Mirrored traffic is encapsulated in Generic Routing Encapsulation (GRE) and routed through the underlay IP fabric.
• The GRE tunnel allows the monitoring station to connect to any leaf switch within the fabric, enhancing flexibility.
• GRE tunneling simplifies routing, even across multiple intermediate IP nodes or outside of the fabric.

2. Port Mirroring Methods: Analyzer Instance and Port Mirroring Instance:

• Two primary methods are available for port mirroring: Analyzer Instance and Port Mirroring Instance.
• The Analyzer Instance is straightforward, lacking specific filtering criteria, and is ideal when tenant information is unavailable.
• Port Mirroring Instance permits mirroring based on specific criteria defined by the fabric administrator.

3. Supported Data Center Architectures:

• Juniper Networks supports three core data center architectures, each with its recommended port mirroring method:
• Bridged Overlay: Analyzer Instance
• Centrally-Routed Bridging (CRB): Port Mirroring Instance
• Edge-Routed Bridging (ERB): Port Mirroring Instance

4. Introducing EVPN-VXLAN ERB Fabrics:

• This guide focuses on remote port mirroring within the EVPN-VXLAN ERB architecture, particularly with a lean spine.
• In an ERB fabric with a lean spine, selective mirroring of tenant-specific inner flows into the tunnel is not feasible. Only outer header-based filtering (underlay) is supported at the spine device.
• The guide covers mirroring scenarios for both inter-VLAN (routed) and intra-VLAN (bridged) traffic within the ERB fabric.

For In-Depth Configuration Guides for EVPN-VXLAN ERB Fabrics:

Please refer to the following articles for comprehensive technical guidance on configuring remote port mirroring in various scenarios within the EVPN-VXLAN ERB architecture:

1. Example: Ingress/Egress Solution for an EVPN-VXLAN ERB Fabric Spine Device :

• This guide provides detailed instructions for configuring port mirroring that encompasses both incoming and outgoing traffic at the spine device level within an EVPN-VXLAN ERB fabric.

2. Example: Ingress Solution for an EVPN-VXLAN ERB Fabric Leaf Device:

• This article focuses on the configuration specifics required for mirroring inbound traffic at the leaf device level within the same EVPN-VXLAN ERB fabric.

3. Example: Enable a Remote Mirroring Instance at an ESI-LAG Interface:

• Delve into the steps necessary to enable remote mirroring instances at interfaces configured with Ethernet Segment Identifier Link Aggregation (ESI-LAG) within EVPN-VXLAN ERB architecture.

4. Example: Enable a Remote Analyzer Instance at an ESI-LAG Interface:

• This article explores the technicalities of enabling remote analyzer instances at ESI-LAG interfaces within the same EVPN-VXLAN ERB fabric, providing a comprehensive guide for configuring this particular scenario.

Remote Port Mirroring for EVPN-VXLAN Fabrics