Juniper EX9200 Series Technisches Datenblatt

Port Mirroring Analyzers Feature Guide for EX9200

Switches

Release

16.2

Modified: 2016-11-03

Juniper Networks, Inc.

1133 Innovation Way

Sunnyvale, California 94089

USA

408-745-2000

www.juniper.net

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United

States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other

trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,

transfer, or otherwise revise this publication without notice.

Port Mirroring Analyzers Feature Guide for EX9200 Switches

Release 16.2

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the

year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks

software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at

http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of

that EULA.

Table of Contents

AbouttheDocumentation............................................ix

DocumentationandReleaseNotes..................................ix

SupportedPlatforms.............................................ix

UsingtheExamplesinThisManual..................................ix

MergingaFullExample........................................x

MergingaSnippet............................................x

DocumentationConventions.......................................xi

Documentation Feedback........................................xiii

RequestingTechnicalSupport.....................................xiii

Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

OpeningaCasewithJTAC.....................................xiv

Part 1 Overview

Chapter 1 Understanding Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Understanding Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

AnalyzerOverview................................................5

StatisticalAnalyzerOverview.......................................5

DefaultAnalyzerOverview.........................................5

Port Mirroring at a Group of Ports Bound to Multiple Statistical

Analyzers ...................................................5

Port Mirroring Analyzer Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Configuration Guidelines for Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . 7

Part 2 Configuring Analyzers

Chapter 2 Copy Packets to a Local Interface for Local Monitoring . . . . . . . . . . . . . . . . . 13

Configuring Mirroring on EX9200 Switches to Analyze Traffic (CLI

Procedure) .....................................................13

Configuring an Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . . . . . . . . . 14

Configuring an Analyzer for Remote Traffic Analysis . . . . . . . . . . . . . . . . . . . . 14

Configuring a Statistical Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . 15

Configuring a Statistical Analyzer for Remote Traffic Analysis . . . . . . . . . . . . 16

Binding Statistical Analyzers to Ports Grouped at the FPC Level . . . . . . . . . . . 17

Configuring an Analyzer with Multiple Destinations by Using Next-Hop

Groups ....................................................18

Defining a Next-Hop Group for Layer 2 Mirroring . . . . . . . . . . . . . . . . . . . . . . . 18

Example: Configuring Port Mirroring Analyzers for Local Monitoring of Employee

ResourceUse...................................................19

Chapter 3 Copy Packets to a VLAN or Bridge Domain for Remote Monitoring . . . . . . . 25

Configuring Mirroring on EX9200 Switches to Analyze Traffic (CLI

Procedure).....................................................25

Configuring an Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . . . . . . . . . 26

Configuring an Analyzer for Remote Traffic Analysis . . . . . . . . . . . . . . . . . . . . 27

Configuring a Statistical Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . 27

Configuring a Statistical Analyzer for Remote Traffic Analysis . . . . . . . . . . . . 28

Binding Statistical Analyzers to Ports Grouped at the FPC Level . . . . . . . . . . 29

Configuring an Analyzer with Multiple Destinations by Using Next-Hop

Groups ....................................................30

Defining a Next-Hop Group for Layer 2 Mirroring . . . . . . . . . . . . . . . . . . . . . . . 31

Example: Configuring Port Mirroring for Remote Monitoring of Employee Resource

Use ...........................................................31

Example: Configuring Mirroring to Multiple Interfaces for Remote Monitoring of

Employee Resource Use on EX9200 Switches . . . . . . . . . . . . . . . . . . . . . . . . 41

Example: Configuring Mirroring for Remote Monitoring of Employee Resource

Use Through a Transit Switch on EX9200 Switches . . . . . . . . . . . . . . . . . . . . 50

Part 3 Configuration Statements and Operational Commands

Chapter4 Configuration Statements .........................................59

egress............................................................59

egress(Analyzer)...................................................60

ingress(vlans).....................................................60

ingress(Analyzer)...................................................61

input(Analyzer)....................................................62

interface(Analyzer).................................................63

no-tag............................................................64

output(Mirroring)..................................................65

vlan (Mirroring) ....................................................66

Chapter5 Operational Commands ...........................................67

showforwarding-optionsanalyzer.....................................68

Port Mirroring Analyzers Feature Guide for EX9200 Switches

List of Figures

Part 2 Configuring Analyzers

Chapter 2 Copy Packets to a Local Interface for Local Monitoring . . . . . . . . . . . . . . . . . 13

Figure 1: Network Topology for Local Port Mirroring Example . . . . . . . . . . . . . . . . . 21

Chapter 3 Copy Packets to a VLAN or Bridge Domain for Remote Monitoring . . . . . . . 25

Figure 2: Network Topology for Remote Port Mirroring and Analysis . . . . . . . . . . . 33

Figure 3: Remote Mirroring Example Network Topology Using Multiple VLAN

Member Interfaces in the Next-Hop Group . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Figure 4: Network Monitoring for Remote Mirroring Through a Transit Switch . . . . 51

Port Mirroring Analyzers Feature Guide for EX9200 Switches

List of Tables

AbouttheDocumentation..........................................ix

Table1:NoticeIcons..................................................xi

Table2:TextandSyntaxConventions...................................xi

Part 1 Overview

Chapter 1 Understanding Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Table3:AnalyzerTerminology..........................................5

Table 4: Configuration Guidelines for Port Mirroring Analyzers . . . . . . . . . . . . . . . . . 7

Part 3 Configuration Statements and Operational Commands

Chapter5 Operational Commands ...........................................67

Table 5: show forwarding-options analyzer Output Fields . . . . . . . . . . . . . . . . . . 68

Port Mirroring Analyzers Feature Guide for EX9200 Switches

About the Documentation

•Documentation and Release Notes on page ix

•Supported Platforms on page ix

•Using the Examples in This Manual on page ix

•Documentation Conventions on page xi

•Documentation Feedback on page xiii

•Requesting Technical Support on page xiii

Documentation and Release Notes

To obtain the most current version of all Juniper Networks®technical documentation,

see the product documentation page on the Juniper Networks website at

http://www.juniper.net/techpubs/.

If the information in the latest release notes differs from the information in the

documentation, follow the product Release Notes.

Juniper Networks Books publishes books by Juniper Networks engineers and subject

matter experts. These books go beyond the technical documentation to explore the

nuances of network architecture, deployment, and administration. The current list can

be viewed at http://www.juniper.net/books.

Supported Platforms

For the features described in this document, the following platforms are supported:

•EX Series

Using the Examples in This Manual

If you want to use the examples in this manual, you can use the load merge or the load

merge relative command. These commands cause the software to merge the incoming

configuration into the current candidate configuration. The example does not become

active until you commit the candidate configuration.

If the example configuration contains the top level of the hierarchy (or multiple

hierarchies), the example is a full example. In this case, use the load merge command.

If the example configuration does not start at the top level of the hierarchy, the example

isasnippet. In this case, use the load merge relative command. These procedures are

described in the following sections.

Merging a Full Example

To merge a full example, follow these steps:

1. From the HTML or PDF version of the manual, copy a configuration example into a

text file, save the file with a name, and copy the file to a directory on your routing

platform.

For example, copy the following configuration to a file and name the file ex-script.conf.

Copy the ex-script.conf file to the /var/tmp directory on your routing platform.

system {

scripts {

commit {

file ex-script.xsl;

}

interfaces {

fxp0 {

disable;

unit 0 {

family inet {

address 10.0.0.1/24;

}

2. Merge the contents of the file into your routing platform configuration by issuing the

load merge configuration mode command:

[edit]

user@host# load merge /var/tmp/ex-script.conf

load complete

Merging a Snippet

To merge a snippet, follow these steps:

1. From the HTML or PDF version of the manual, copy a configuration snippet into a text

file, save the file with a name, and copy the file to a directory on your routing platform.

For example, copy the following snippet to a file and name the file

ex-script-snippet.conf. Copy the ex-script-snippet.conf file to the /var/tmp directory

on your routing platform.

commit {

file ex-script-snippet.xsl; }

2. Move to the hierarchy level that is relevant for this snippet by issuing the following

configuration mode command:

Port Mirroring Analyzers Feature Guide for EX9200 Switches

Andere Handbücher für EX9200 Series

Inhaltsverzeichnis

Andere Juniper Netzwerk-Router Handbücher

Juniper

Juniper MX960 Montageanleitung

Juniper

Juniper M10i Montageanleitung

Juniper

Juniper PTX10003-80C Montageanleitung

Juniper

Juniper ACX2200 Bedienungsanleitung

Juniper

Juniper T320 Bedienungsanleitung

Juniper

Juniper MX5 Montageanleitung

Juniper

Juniper Day One+ Bedienungsanleitung

Juniper

Juniper J2350 Montageanleitung

Juniper

Juniper E SERIES BROADBAND SERVICES ROUTERS 11.3.X - E120 AND E320 HARDWARE GUIDE REV... Montageanleitung

Juniper

Juniper LN2600 Bedienungsanleitung

Juniper

Juniper PTX10001-36MR Bedienungsanleitung

Juniper

Juniper MX104 Montageanleitung

Juniper

Juniper E SERIES BROADBAND SERVICES ROUTERS 11.3.X - E120 AND E320 MODULE GUIDE REV... Bedienungsanleitung

Juniper

Juniper J-Series Bedienungsanleitung

Juniper

Juniper MX480 Montageanleitung

Juniper

Juniper ACX2000 Bedienungsanleitung

Juniper

Juniper MX10008 Montageanleitung

Juniper

Juniper QFX10002 Bedienungsanleitung

Juniper

Juniper J-Series Bedienungsanleitung

Juniper

Juniper T4000 - Bedienungsanleitung

Juniper

Juniper ACX1000 Bedienungsanleitung

Juniper

Juniper M40 Bedienungsanleitung

Juniper

Juniper XRE200 - Bedienungsanleitung

Juniper

Juniper E SERIES BROADBAND SERVICES ROUTERS - E SERIES END-OF-LIFE MODULE GUIDE... Bedienungsanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise