Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Application of Layer 2 Port Mirroring Types

    You can apply different sets of Layer 2 port-mirroring properties to the VPLS packets at different ingress or egress points of an MX Series router.

    Table 1 describes the three types of Layer 2 port mirroring you can configure on an MX Series router: the global instance, named instances, and firewall filters.

    Table 1: Application of Layer 2 Port Mirroring Types

    Type of Layer 2 Port Mirroring Definition

    Point of Application

    Scope of Mirroring

    Description

    Configuration Details

    Global Instance of Layer 2 Port Mirroring

    All ports in the MX Series router chassis

    VPLS packets received on all ports in the MX Series router chassis

    If configured, the global port-mirroring properties implicitly apply to all VPLS packets received on all ports in the router chassis.

    See Configuring the Global Instance of Layer 2 Port Mirroring.

    Named Instance of Layer 2 Port Mirroring

    Ports grouped at the FPC level

    See Binding Layer 2 Port Mirroring to Ports Grouped at the FPC Level.

    VPLS packets received on ports associated with a specific DPC or FPC and its Packet Forwarding Engines.

    Overrides any port-mirroring properties configured by the global port-mirroring instance.

    See Defining a Named Instance of Layer 2 Port Mirroring.

    NOTE: The number of port-mirroring destinations supported for an MX Series router is limited to the number of Packet Forwarding Engines contained on the DPCs installed in the router chassis.

    Ports grouped at the PIC level

    See Binding Layer 2 Port Mirroring to Ports Grouped at the PIC Level.

    VPLS packets received on ports associated with a specific Packet Forwarding Engine.

    Overrides any port-mirroring properties configured at the FPC level or in the global port-mirroring instance.

    Layer 2 Port-Mirroring Firewall Filter

    Logical interface (including an aggregated Ethernet interface)

    See Applying Layer 2 Port Mirroring to a Logical Interface.

    VPLS packets received or sent on a logical interface.

    In the firewall filter configuration, include action and action-modifier terms to apply to the packets selected for mirroring:

    1. The accept action is recommended.
    2. Specify port mirroring by Including one of the following modifiers:

      • The port-mirror modifier implicitly references the port-mirroring properties currently bound to the underlying physical interfaces.
      • The port-mirror-instance pm-instance-name modifier explicitly references a named instance of port mirroring.
    3. (Optional) For tunnel interface input packets only, to mirror the packets to additional destinations, include the next-hop-group next-hop-group-name modifier. This modifier references a next-hop-group that specifies the next-hop addresses (for sending additional copies of packets to an analyzer).

    See Defining a Layer 2 Port-Mirroring Firewall Filter.

    NOTE: Layer 2 port-mirroring firewall filters are not supported for logical systems.

    For mirroring tunnel interface input packets to multiple destinations, also see Defining a Next-Hop Group for Layer 2 Port Mirroring.

    Bridge domain forwarding table or flood table

    See Applying Layer 2 Port Mirroring to Traffic Forwarded or Flooded to a Bridge Domain.

    Layer 2 traffic forwarded or flooded to a bridge domain

    VPLS routing instance forwarding table or flood table

    See Applying Layer 2 Port Mirroring to Traffic Forwarded or Flooded to a VPLS Routing Instance.

    Layer 2 traffic forwarded or flooded to a VPLS routing instance

    Modified: 2017-08-31