Juniper EX9200 Series Specification sheet

Port Mirroring Analyzers Feature Guide for EX9200
Switches
Release
16.2
Modified: 2016-11-03
Copyright © 2016, Juniper Networks, Inc.

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United
States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other
trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
Port Mirroring Analyzers Feature Guide for EX9200 Switches
Release 16.2
Copyright © 2016, Juniper Networks, Inc.
All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of
that EULA.
Copyright © 2016, Juniper Networks, Inc.ii

Table of Contents
AbouttheDocumentation............................................ix
DocumentationandReleaseNotes..................................ix
SupportedPlatforms.............................................ix
UsingtheExamplesinThisManual..................................ix
MergingaFullExample........................................x
MergingaSnippet............................................x
DocumentationConventions.......................................xi
Documentation Feedback........................................xiii
RequestingTechnicalSupport.....................................xiii
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
OpeningaCasewithJTAC.....................................xiv
Part 1 Overview
Chapter 1 Understanding Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Understanding Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
AnalyzerOverview................................................5
StatisticalAnalyzerOverview.......................................5
DefaultAnalyzerOverview.........................................5
Port Mirroring at a Group of Ports Bound to Multiple Statistical
Analyzers ...................................................5
Port Mirroring Analyzer Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Configuration Guidelines for Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . 7
Part 2 Configuring Analyzers
Chapter 2 Copy Packets to a Local Interface for Local Monitoring . . . . . . . . . . . . . . . . . 13
Configuring Mirroring on EX9200 Switches to Analyze Traffic (CLI
Procedure) .....................................................13
Configuring an Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . . . . . . . . . 14
Configuring an Analyzer for Remote Traffic Analysis . . . . . . . . . . . . . . . . . . . . 14
Configuring a Statistical Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . 15
Configuring a Statistical Analyzer for Remote Traffic Analysis . . . . . . . . . . . . 16
Binding Statistical Analyzers to Ports Grouped at the FPC Level . . . . . . . . . . . 17
Configuring an Analyzer with Multiple Destinations by Using Next-Hop
Groups ....................................................18
Defining a Next-Hop Group for Layer 2 Mirroring . . . . . . . . . . . . . . . . . . . . . . . 18
Example: Configuring Port Mirroring Analyzers for Local Monitoring of Employee
ResourceUse...................................................19
iiiCopyright © 2016, Juniper Networks, Inc.

Chapter 3 Copy Packets to a VLAN or Bridge Domain for Remote Monitoring . . . . . . . 25
Configuring Mirroring on EX9200 Switches to Analyze Traffic (CLI
Procedure).....................................................25
Configuring an Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . . . . . . . . . 26
Configuring an Analyzer for Remote Traffic Analysis . . . . . . . . . . . . . . . . . . . . 27
Configuring a Statistical Analyzer for Local Traffic Analysis . . . . . . . . . . . . . . 27
Configuring a Statistical Analyzer for Remote Traffic Analysis . . . . . . . . . . . . 28
Binding Statistical Analyzers to Ports Grouped at the FPC Level . . . . . . . . . . 29
Configuring an Analyzer with Multiple Destinations by Using Next-Hop
Groups ....................................................30
Defining a Next-Hop Group for Layer 2 Mirroring . . . . . . . . . . . . . . . . . . . . . . . 31
Example: Configuring Port Mirroring for Remote Monitoring of Employee Resource
Use ...........................................................31
Example: Configuring Mirroring to Multiple Interfaces for Remote Monitoring of
Employee Resource Use on EX9200 Switches . . . . . . . . . . . . . . . . . . . . . . . . 41
Example: Configuring Mirroring for Remote Monitoring of Employee Resource
Use Through a Transit Switch on EX9200 Switches . . . . . . . . . . . . . . . . . . . . 50
Part 3 Configuration Statements and Operational Commands
Chapter4 Configuration Statements .........................................59
egress............................................................59
egress(Analyzer)...................................................60
ingress(vlans).....................................................60
ingress(Analyzer)...................................................61
input(Analyzer)....................................................62
interface(Analyzer).................................................63
no-tag............................................................64
output(Mirroring)..................................................65
vlan (Mirroring) ....................................................66
Chapter5 Operational Commands ...........................................67
showforwarding-optionsanalyzer.....................................68
Copyright © 2016, Juniper Networks, Inc.iv
Port Mirroring Analyzers Feature Guide for EX9200 Switches

List of Figures
Part 2 Configuring Analyzers
Chapter 2 Copy Packets to a Local Interface for Local Monitoring . . . . . . . . . . . . . . . . . 13
Figure 1: Network Topology for Local Port Mirroring Example . . . . . . . . . . . . . . . . . 21
Chapter 3 Copy Packets to a VLAN or Bridge Domain for Remote Monitoring . . . . . . . 25
Figure 2: Network Topology for Remote Port Mirroring and Analysis . . . . . . . . . . . 33
Figure 3: Remote Mirroring Example Network Topology Using Multiple VLAN
Member Interfaces in the Next-Hop Group . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Figure 4: Network Monitoring for Remote Mirroring Through a Transit Switch . . . . 51
vCopyright © 2016, Juniper Networks, Inc.

Copyright © 2016, Juniper Networks, Inc.vi
Port Mirroring Analyzers Feature Guide for EX9200 Switches

List of Tables
AbouttheDocumentation..........................................ix
Table1:NoticeIcons..................................................xi
Table2:TextandSyntaxConventions...................................xi
Part 1 Overview
Chapter 1 Understanding Port Mirroring Analyzers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Table3:AnalyzerTerminology..........................................5
Table 4: Configuration Guidelines for Port Mirroring Analyzers . . . . . . . . . . . . . . . . . 7
Part 3 Configuration Statements and Operational Commands
Chapter5 Operational Commands ...........................................67
Table 5: show forwarding-options analyzer Output Fields . . . . . . . . . . . . . . . . . . 68
viiCopyright © 2016, Juniper Networks, Inc.

Copyright © 2016, Juniper Networks, Inc.viii
Port Mirroring Analyzers Feature Guide for EX9200 Switches

About the Documentation
•Documentation and Release Notes on page ix
•Supported Platforms on page ix
•Using the Examples in This Manual on page ix
•Documentation Conventions on page xi
•Documentation Feedback on page xiii
•Requesting Technical Support on page xiii
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation,
see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at http://www.juniper.net/books.
Supported Platforms
For the features described in this document, the following platforms are supported:
•EX Series
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load
merge relative command. These commands cause the software to merge the incoming
configuration into the current candidate configuration. The example does not become
active until you commit the candidate configuration.
If the example configuration contains the top level of the hierarchy (or multiple
hierarchies), the example is a full example. In this case, use the load merge command.
ixCopyright © 2016, Juniper Networks, Inc.

If the example configuration does not start at the top level of the hierarchy, the example
isasnippet. In this case, use the load merge relative command. These procedures are
described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a
text file, save the file with a name, and copy the file to a directory on your routing
platform.
For example, copy the following configuration to a file and name the file ex-script.conf.
Copy the ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
2. Merge the contents of the file into your routing platform configuration by issuing the
load merge configuration mode command:
[edit]
user@host# load merge /var/tmp/ex-script.conf
load complete
Merging a Snippet
To merge a snippet, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration snippet into a text
file, save the file with a name, and copy the file to a directory on your routing platform.
For example, copy the following snippet to a file and name the file
ex-script-snippet.conf. Copy the ex-script-snippet.conf file to the /var/tmp directory
on your routing platform.
commit {
file ex-script-snippet.xsl; }
2. Move to the hierarchy level that is relevant for this snippet by issuing the following
configuration mode command:
Copyright © 2016, Juniper Networks, Inc.x
Port Mirroring Analyzers Feature Guide for EX9200 Switches