Junos OS

Hello forum guys,

Recentry, I tried to configure simple one sessions locat port mirroring on MX80 platform (Junos 11.4R7.5) following this document:

http://www.juniper.net/documentation/en_US/junos11.4/topics/usage-guidelines/services-configuring-port-mirroring.html

this is my configuration:

admin@MX-80-1-Feve3-Rack-21> show configuration firewall

    filter port-mirroring {
        term port-mirroring {
            then {
                port-mirror;
                accept;
            }
        }
    }
}


admin@MX-80-1-Feve3-Rack-21> show configuration forwarding-options
port-mirroring {
    input {
        rate 1;
        run-length 10;
        maximum-packet-length 5000;
    }
    family inet {
        output {
            interface ge-1/0/1.0;
            no-filter-check;
        }
    }
}

then, I applied filer on logical interface:

admin@MX-80-1-Feve3-Rack-21# set interfaces ae1 unit 901 family inet filter input port-mirroring

Then, I connetced laptop to ge-1/0/1 pfysical interface, opened wireshark and I did not see any epcpected packets.

What have I missed?

Hello there,

---

@Cas-CCNP wrote:

 

 

What have I missed?

 

 

---

PM next-hop, IP address and static ARP on output IFL:

set forwarding-options port-mirroring family inet output interface ge-1/0/1.0 next-hop 198.18.1.2
set interfaces ge-1/0/1.0 family inet address 198.18.1.1/24 arp 198.18.1.2 mac 02:00:00:00:00:02

HTH

Thx

Alex

thanks aarseniev !

just to verify - by PM next-hop, IP address and static ARP - do you mean Ip address + mac of NIC laptop I connected to ge-1/0/1 ?

and by this command:

set interfaces ge-1/0/1.0 family inet address 198.18.1.1/24 arp 198.18.1.2 mac 02:00:00:00:00:02

so output mirroring interface should be configured with Ip address from same subnet as connected monitoring device (in this case - laptop NIC) ?

Hello,

---

@Cas-CCNP wrote:

thanks @aarseniev !

 

just to verify - by PM next-hop, IP address and static ARP - do you mean Ip address + mac of NIC laptop I connected to ge-1/0/1 ?

 

 

---

Yes. 

---

@Cas-CCNP wrote:

 

and by this command:

 

set interfaces ge-1/0/1.0 family inet address 198.18.1.1/24 arp 198.18.1.2 mac 02:00:00:00:00:02

 

so output mirroring interface should be configured with Ip address from same subnet as connected monitoring device (in this case - laptop NIC) ?

---

Yes.

Thx

Alex

excelent! it works - thanks aarseniev !