Ethernet Switching
Highlighted
Ethernet Switching

RE: Remote port mirroring (port mirroring over layer3)

[ Edited ]
‎07-13-2020 11:46 AM

Hello Folks,

 

Is there a way to forward port-mirrored traffic over layer 3? A local "ge" interface needs to be monitored for an EX-4200 switch and then the mirrored traffic needs to be sent to a remote laptop, which is several hops away from this switch and is on separate broadcast domain compared to the switch interface being monitored.

 

Basically checking to see if there is a way to transmit port-mirrored traffic over layer 3.

 

 

Kudos are always appreciated. Please mark solution as accepted if it help solves your issue.
Thanks,
B
5 REPLIES 5
Highlighted
Ethernet Switching

RE: Remote port mirroring (port mirroring over layer3)

‎07-13-2020 12:02 PM

Hi,

 

You can specify the egress interface as a vlan for the purpose of sending the mirrored traffic to remote host 

https://www.juniper.net/documentation/en_US/junos/topics/concept/layer-2-services-port-mirroring-rem...

 

If this solves your problem, please mark this post as "Accepted Solution."

Regards,
A.A.
Highlighted
Ethernet Switching

RE: Remote port mirroring (port mirroring over layer3)

[ Edited ]
‎07-13-2020 12:11 PM

The above suggested approach looks like transmission over layer 2, which requires the layer 2 VLANS to be tagged along the network path, I am seeking for an approach to transfer mirrored traffic over layer 3.

 

Kudos are always appreciated. Please mark solution as accepted if it help solves your issue.
Thanks,
B
Highlighted
Ethernet Switching
Solution
Accepted by topic author biraj
‎07-14-2020 09:27 AM

RE: Remote port mirroring (port mirroring over layer3)

‎07-13-2020 01:43 PM

Hey Biraj,

 

Unfortunately, I don't think that this is not possible with this gear.

 

 This could be accomplished using a GRE tunnel but the EX4200 only supports one MPLS label and VPLS requires at least two. 

 

[edit forwarding-options family vpls]
set output interface gre-interface-name

 

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/configuring-layer-2-port...

 

With an EVPN/VXLAN set up is possible but your EX4200 does not support any of these technologies. 

 

https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/nce-175-port-mirr...

 

 

If this solves your problem, please mark this post as "Accepted Solution" so we can help others too \:)/

Regards,

Lil Dexx
JNCIE-ENT#863, 3X JNCIP-[SP-ENT-DC], 4X JNCIA [cloud-DevOps-Junos-Design], Champions Ingenius, SSYB

Highlighted
Ethernet Switching

RE: Remote port mirroring (port mirroring over layer3)

‎07-14-2020 09:31 AM

Hi Dex,

 

Thanks for providing me with options using VPLS and EVPN. Really hope the port-mirroring feature over standard layer3 will be supported in the future, it will really help customers.

 

Kudos are always appreciated. Please mark solution as accepted if it help solves your issue.
Thanks,
B
Highlighted
Ethernet Switching

RE: Remote port mirroring (port mirroring over layer3)

‎07-14-2020 10:47 AM

Hey

 

You are more than welcome, I don't believe that this would not be the case as Juniper is moving away from these types of platforms since they are considered legacy devices hence our chances of getting new features and enhancements are slim to none.

 

 

If this solves your problem, please mark this post as "Accepted Solution" so we can help others too \:)/

Regards,

 

Lil Dexx
JNCIE-ENT#863, 3X JNCIP-[SP-ENT-DC], 4X JNCIA [cloud-DevOps-Junos-Design], Champions Ingenius, SSYB

Feedback