Experiencing issues with getting port mirroring to function properly on a EX4600 virtual chassis, as our core. JUNOS is last recommended. JTAC says configuration is good, but still we have no solution.
We have a Secure Onion server, 2 NIC's 10G interfaces. We've done serveral different configurations, but not much luck.
We've created an analyzer for each NIC, one per switch, using ae interfaces [trunks from multiple IDF's connected to the core] in the configuration. No luck.
We tried individual interfaces, instead of the ae interfaces. Still no luck.
We reduced the analayzers to only one for the entire VC, and it only sees one server interface, which happens to be the only Access interface.
The infosec goal is to see Everything across the Core, from all interfaces.
Anyone successful with a VC, and dual NIC spans/mirroring in place ?
Yep, it is working on a EX4600 VC (mixed in my case so the interface you see below would be on the EX4300s). Have not try on an AE interface. If you share your configuration and software version, i could probably run it in the lab.