ON THIS PAGE
Mapping OpenConfig Port Mirroring Commands to Junos Configuration
Note:
See OpenConfig Data Model Version topic to understand the data models supported version and its Junos OS release for Juniper Networks MX Series and PTX Series.
Remote Port Mirroring
The tables below show the mappings of remote port mirroring commands with the relevant configurations in Junos.
- Table 1: Firewall Filter Configuration
- Table 2: Forwarding Class Configuration
- Table 3: Forwarding Options Configuration
- Table 4: Flexible Tunnel Interface (FTI) Configuration
Note:
In the configurations below, the symbols <> indicate a
variable.
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Port mirror instance |
acl-set <> ACL_IPV4 {
acl-entries {
acl-entry <> {
actions {
config {
jnx-aug-openconfig-acl:remote-port-mirror <>;
}
}
}
}
}
|
firewall {
family inet {
filter <> {
term <> {
then {
count <>;
port-mirror-instance <>;
}
}
}
}
}
|
|
Policer CIR |
jnx-aug-openconfig-qos:policers {
policer <> SINGLE-RATE-2-COLOR {
one-rate-two-color {
config {
cir <>;
}
}
}
}
|
firewall {
policer <> {
if-exceeding {
bandwidth-limit <>;
}
}
}
|
|
Policer burst size |
jnx-aug-openconfig-qos:policers {
policer <> SINGLE-RATE-2-COLOR {
one-rate-two-color {
config {
bc <>;
}
}
}
}
|
firewall {
policer <> {
if-exceeding {
burst-size-limit <>;
}
then discard;
}
}
|
| Policer action |
jnx-aug-openconfig-qos:policers {
policer <> SINGLE-RATE-2-COLOR {
one-rate-two-color {
exceed-action {
config {
drop true;
}
}
}
}
}
|
firewall {
policer <> {
then discard;
}
}
|
|
Filter action count |
acl-set <> ACL_IPV4 {
acl-entries {
acl-entry <> {
actions {
config {
jnx-aug-openconfig-acl:jnx-count <>;
}
}
}
}
}
|
firewall {
family inet {
filter <> {
term <> {
then {
count <>;
}
}
}
}
}
|
|
Filter attachment |
interfaces {
interface et-<>/<>/<>.<> {
interface-ref {
config {
interface et-<>/<>/<>;
subinterface <>;
}
}
ingress-acl-sets {
ingress-acl-set <>;
}
}
}
|
interfaces {
et-<>/<>/<> {
unit <> {
family inet {
filter {
input <>;
}
}
}
}
}
|
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Class of service name |
forwarding-groups {
forwarding-group <> {
config {
name <>;
}
}
}
|
class-of-service {
forwarding-classes {
class <> queue-num <>;
}
}
|
|
Class of service priority |
forwarding-groups {
forwarding-group <> {
config {
fabric-priority <>;
}
}
}
|
class-of-service {
forwarding-classes {
class <> queue-num <>;
}
}
|
|
Output queue |
forwarding-groups {
forwarding-group <> {
config {
output-queue <>;
}
}
}
|
class-of-service {
forwarding-classes {
class <> queue-num <>;
}
}
|
| Rewrite rule and bindings |
interfaces {
interface et-<>/<>/<>.<> {
interface-ref {
config {
interface et-<>/<>/<>;
subinterface <>;
}
}
output {
classifiers {
classifier <> {
config {
name <>;
}
}
}
}
}
}
classifiers {
classifier <> {
terms {
term <> {
actions {
config {
target-group best-effort;
}
remark {
config {
set-dscp <>;
}
}
}
}
}
}
}
|
class-of-service {
interfaces {
et-<>/<>/<> {
unit <> {
rewrite-rules {
dscp rewrite-dscps;
}
}
}
}
rewrite-rules {
dscp rewrite-dscps {
forwarding-class assured-forwarding {
loss-priority high code-point <>;
loss-priority low code-point <>;
}
forwarding-class best-effort {
loss-priority high code-point <>;
loss-priority low code-point <>;
}
forwarding-class expedited-forwarding {
loss-priority high code-point <>;
loss-priority low code-point <>;
}
forwarding-class network-control {
loss-priority high code-point <>;
loss-priority low code-point <>;
}
}
}
}
|
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Rate |
jnx-aug-openconfig-pm:port-mirror {
remote-port-mirror {
instances {
instance <> PM_IPV4 {
config {
input-rate <>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
instance {
<> {
input {
rate <>;
}
}
}
}
}
|
|
FTI |
jnx-aug-openconfig-pm:port-mirror {
remote-port-mirror {
instances {
instance <> PM_IPV4 {
config {
egress-interface fti<>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
instance {
<> {
family inet {
output {
interface fti<>.<>;
}
}
}
}
}
}
|
|
Policer |
jnx-aug-openconfig-pm:port-mirror {
remote-port-mirror {
instances {
instance <> PM_IPV4 {
config {
egress-policer <>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
instance {
<> {
family inet {
output {
policer <>;
}
}
}
}
}
}
|
| Forwarding class |
jnx-aug-openconfig-pm:port-mirror {
remote-port-mirror {
instances {
instance <> PM_IPV4 {
config {
egress-fc <>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
instance {
<> {
family inet {
output {
forwarding-class <>;
}
}
}
}
}
}
|
| Maximum packet length |
jnx-aug-openconfig-pm:port-mirror {
remote-port-mirror {
instances {
instance <> PM_IPV4 {
config {
input-max-packet-length <>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
instance {
<> {
input {
maximum-packet-length <>;
}
}
}
}
}
|
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Source address |
interface fti<> {
openconfig-if-tunnel:tunnel {
config {
src <>;
}
}
}
|
interfaces {
fti<> {
unit <> {
tunnel {
encapsulation gre {
source {
address <>;
}
}
}
}
}
}
|
|
Destination address |
interface fti<> {
openconfig-if-tunnel:tunnel {
config {
dst <>;
}
}
}
|
interfaces {
fti<> {
unit <> {
tunnel {
encapsulation gre {
destination {
address <>;
}
}
}
}
}
}
|
|
Tunnel interface IP |
interface fti<> {
openconfig-if-tunnel:tunnel {
ipv4 {
addresses {
address <> {
config {
ip <>;
}
}
}
}
}
}
|
interfaces {
fti<> {
unit <> {
family inet {
address <>/<>;
}
}
}
}
|
| Prefix length |
interface fti<> {
openconfig-if-tunnel:tunnel {
ipv4 {
addresses {
address <> {
config {
prefix-length <>;
}
}
}
}
}
}
|
interfaces {
fti<> {
unit <> {
family inet {
address <>/<>;
}
}
}
}
|
Local Port Mirroring
The tables below show the mappings of local port mirroring commands with the relevant configurations in Junos.
- Table 5: Interface Configuration
- Table 6: Forwarding Options Configuration
- Table 7: Firewall Filter Configuration
Note:
In the configurations below, the symbols <> are
placeholders for variables.
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Interface (IPv4) |
interface et-<>/<>/<> {
subinterfaces {
subinterface <> {
openconfig-if-ip:ipv4 {
addresses {
address <> {
config {
ip <>;
prefix-length <>;
}
}
}
}
}
}
}
|
interfaces {
et-<>/<>/<> {
unit <> {
family inet {
address <>/<>
}
}
}
}
|
|
Interface (IPv6) |
interface et-<>/<>/<> {
subinterfaces {
subinterface <> {
openconfig-if-ip:ipv6 {
addresses {
address <> {
config {
ip <>;
prefix-length <>;
}
}
}
}
}
}
}
|
interfaces {
et-<>/<>/<> {
unit <> {
family inet {
address <>/<>
}
}
}
}
|
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Rate |
jnx-aug-openconfig-pm:port-mirror {
local-port-mirror {
instances {
instance PM_IPV4 {
config {
input-rate <>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
input {
rate <>;
}
}
}
|
|
Next hop |
jnx-aug-openconfig-pm:port-mirror {
local-port-mirror {
instances {
instance PM_IPV4 {
config {
input-rate <>;
pm-interface xe-<>/<>/<>;
pm-nexthop <>;
}
}
}
}
}
|
forwarding-options {
port-mirroring {
family inet {
output {
interface et-<>/<>/<>.<> {
next-hop <>;
}
}
}
}
}
|
|
Command Name |
OpenConfig configuration with Juniper augmentation |
Junos EVO Configuration |
|---|---|---|
|
Filter count |
acl-sets {
acl-set <> <> {
acl-entries {
acl-entry 1 {
actions {
config {
jnx-aug-openconfig-acl:jnx-count <>;
}
}
}
}
}
}
|
firewall {
family inet {
filter <> {
term <> {
then {
count <>;
}
}
}
}
}
|
|
Port mirror |
acl-sets {
acl-set <> <> {
acl-entries {
acl-entry <> {
actions {
config {
jnx-aug-openconfig-acl:jnx-local-port-mirror true;
}
}
}
}
}
}
|
firewall {
family inet {
filter <> {
term <> {
then {
port-mirror;
}
}
}
}
}
|