Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All
Configuring Flow Mirroring on ACX5000 Series Routers
This section shows the various methods to configure flow mirroring on ACX5000 line of routers.
The following are the various methods to configure flow mirroring on ACX5000 line of routers:
Configure flow mirroring for the ethernet-switching family and specify Layer 2 logical interface as the output.
- Configure the output as logical interface.[edit forwarding-options]port-mirroring {family ethernet-switching {output {interface logical-interface-name;}}}
- Configure the firewall filter and specify the action as
mirror.[edit firewall]family ethernet-switching {filter filter-name {term rule-name {from {match-conditions;}then port-mirror;}}}
- Attach the firewall filter to the logical interface.[edit interfaces]interface-name {unit interface-unit-number {family ethernet-switching {filter {input filter-name;}vlan-id number;encapsulation vlan-bridge;}}}
Configure flow mirroring for the ethernet-switching family and specify a VLAN (VLAN name or VLAN ID) as the output.
- Configure the output as VLAN (VLAN name or VLAN ID).[edit forwarding-options]port-mirroring {family ethernet-switching {output {vlan vlan-name;}}}
- Configure the firewall filter and specify the action as
mirror.[edit firewall]family ethernet-switching {filter filter-name {term rule-name {from {match-conditions;}then port-mirror;}}}
- Attach the firewall filter to the VLAN.[edit interfaces]interface-name {unit interface-unit-number {family ethernet-switching {filter {input filter-name;}vlan-id number;encapsulation vlan-bridge;}}}
Configure flow mirroring with a no-tag option.
- Configure the input as VLAN (VLAN name or VLAN ID) and
output as VLAN without any additional VLAN (bridge domain) tag. In
this method, the mirrored packet will not have any VLAN tags associated
with the packet.[edit forwarding-options]port-mirroring {family ethernet-switching {output {vlan vlan-name; {no-tag;}}}}
- Configure the firewall filter and specify the action as
mirror or mirroring instance.[edit firewall]family ethernet-switching {filter filter-name {term rule-name {from {match-conditions;}then (port-mirror | port-mirror-instance instance-name);}}}
- Attach the firewall filter to the VLAN.[edit interfaces]interface-name {unit interface-unit-number {family ethernet-switching {filter {input filter-name;}vlan-id number;encapsulation vlan-bridge;}}}
Configure flow mirroring for the inet family and specify the next-hop IP address as the output.
- Configure the output as the next-hop IP address.[edit forwarding-options]port-mirroring {family inet {output {ip-address ip-address;}}}
- Configure the firewall filter and specify the action as
mirror.[edit firewall]family inet {filter filter-name {term rule-name {from {match-conditions;}then port-mirror;}}}
- Attach the firewall filter to the IP address of the packets
in the inet family.[edit interfaces]interface-name {unit interface-unit-number {vlan-id number;family inet {ip-address ip-address; filter {input filter-name;}}}}
