Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configuring Port Mirroring to Analyze Traffic (J-Web Procedure)

Note:

This topic applies only to the J-Web Application package.

EX Series switches allow you to configure port mirroring to send copies of packets to either a local interface for local monitoring or to a VLAN for remote monitoring. You can use port mirroring to copy these packets:

  • Packets entering or exiting a port

  • Packets entering a VLAN on EX2200, EX3200, EX3300, EX4200, EX4500, EX6200 switches

  • Packets exiting a VLAN on EX8200 switches

To configure port mirroring on an EX Series switch using the J-Web interface:

  1. Select Configure > Security > Port Mirroring.

    The top of the screen displays analyzer details such as the name, status, analyzer port, ratio, and loss priority.

    The bottom of the screen lists ingress and egress ports of the selected analyzer.

    Note:

    After you make changes to the configuration on this page, you must commit the changes for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes for details about all commit options.

  2. Click one of the following options:
    • Add—Add an analyzer. Enter information as specified in Table 1.

    • Edit—Modify details of the selected analyzer. Enter information as specified in Table 1.

    • Delete—Delete the selected analyzer.

    • Enable/Disable—Enable or disable the selected analyzer (toggle).

Note:

On EX2200, EX3200, EX4200, and EX4500 switches, only one analyzer can be enabled at a time. On EX8200 switches, a maximum of seven analyzers can be enabled.

Note:

When an analyzer is deleted or disabled, any filter association is removed.

Table 1: Port Mirroring Configuration Settings

Field

Function

Your Action

Analyzer Name

Specifies the name of the analyzer.

Type a name for the analyzer.

Ratio

Specifies the ratio of packets to be mirrored. For example:

  • A ratio of 1 sends copies of all packets.

  • A ratio of 2047 sends copies of 1 out of every 2047 packets.

Enter a number from 0 through 2047.

Loss Priority

Specifies the loss priority of the mirrored packets.

By default, the switch applies a lower priority to mirrored data than to regular port-to-port data—mirrored traffic is dropped in preference to regular traffic when capacity is exceeded.

For port-mirroring configurations with output to an analyzer VLAN, set the loss priority to high.

Keep the default of low, unless the output is to a VLAN.

Analyzer Port

Specifies a local interface or VLAN to which mirrored packets are sent.

Note:

A VLAN must have only one associated interface to be specified as an analyzer interface.

Click Select. In the Select Analyzer Port/VLAN window, select either port or VLAN as the Analyzer Type. Next, select the required port or VLAN. For an EX8200 Virtual Chassis configuration, select the member, FPC, and the port (interface) from the list.

Ingress

Specifies interfaces or VLANs for which entering traffic is mirrored.

Click Add. For an EX8200 Virtual Chassis configuration, select the member, FPC, and the interface from the list.

Click Remove to delete an ingress interface or VLAN.

Egress

Specifies interfaces for which exiting traffic is mirrored.

Click Add and select Port or VLAN. For an EX8200 Virtual Chassis configuration, select the member, FPC, and the interface from the list.

Click Remove to remove egress interfaces.