Support Support Downloads Knowledge Base Apex Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[MX] How to use "forwarding-options port-mirroring family vpls" when configuring port mirror for "family bridge" interfaces on MX devices

0

0

Article ID: KB31836 KB Last Updated: 29 Jun 2017Version: 1.0
Summary:

This article describes how to  use the command forwarding-options port-mirroring family vpls when configuring a port mirror for family bridge interfaces on MX device.

Cause:

The family bridge option is not available:
 

[edit forwarding-options port-mirroring]

root@MX480-re0# set family ?

Possible completions:

> any                  Mirror any packets

> ccc                  Mirror layer-2 ccc packets

> inet                 Mirror IPv4 packets

> inet6                Mirror IPv6 packets

> mpls                 Mirror MPLS packets

> vpls                 Mirror Layer-2 bridged/vpls packets 
 





 

Solution:

Using "family any" will not mirror the interface. 

Alternatively, using Junos OS 14.1 or later, the Port Mirror Analyzer will achieve the same goal.

Example: Configuring Port Mirroring Analyzers for Local Monitoring of Employee Resource Use
 

Here is what the configuration should look like:

(irb.10) Mx480 (0/1/6)  -- (1/3/6)mx104(irb.10)

        (2/1/6)

          |

         PC 

Ping from irb.10 to irb.10 and port mirror interface ge-0/1/6

MX480

[edit interfaces ge-0/1/6]

root@MX480-re0# show

unit 0 {

    family bridge {  

        filter {

            input 123;

            output 123;

        }

        interface-mode access;

        vlan-id 10;

    }

[edit interfaces irb]

root@MX480-re0# show

unit 10 {

    family inet {

        address 11.11.11.11/24;

    }

[edit interfaces irb]

root@MX480-re0# show

unit 10 {

    family inet {

        address 11.11.11.11/24;

    }


[edit firewall]

root@MX480-re0# show

family bridge {

    filter 123 {

        term 123 {

            then {

                accept;

                port-mirror;

            }

        }

   

{MASTER}[edit bridge-domains]

lab@MX104-re0# show

VLAN-10 {

    vlan-id 10;

    routing-interface irb.10;

}

[edit forwarding-options]

root@MX480-re0# show

port-mirroring {

    input {

        rate 1;

    }

    family vpls {  

        output {

            interface ge-2/1/6.0;

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search