[j-nsp] MONITOR TRANSIT TRAFFIC ON A LOGICAL TUNNEL INTERFACE

jose nuñez jnunyez at ac.upc.edu
Sun Mar 25 15:11:44 EST 2007


The  monitor traffic interface xx-x/x/x  works  for taffic destined to this 
interface but not for transit traffic.

On Sunday 25 March 2007 20:25, Koch, Christian wrote:
> Not sure if it works on a logical interface, but have you tried the -
> monitor traffic interface xx-x/x/x  command?
>
> If you do test this out be sure to pipe through matching identifiers such
> as count and type of traffic, since running the monitor can have a negative
> impact on your router..
>
> |-----Original Message-----
> |From: juniper-nsp-bounces at puck.nether.net
> |[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Jose Nuñez
> |Sent: Thursday, March 22, 2007 8:31 AM
> |To: juniper-nsp at puck.nether.net
> |Subject: [j-nsp] MONITOR TRANSIT TRAFFIC ON A LOGICAL TUNNEL INTERFACE
> |
> |Hi,
> |I would need to monitor transit traffic on a logical tunel
> |interface ( lt ) in a logical router in Juniper M7i router with AS PIC.
> |
> |I'm trying with port-mirroring with no luck.
> |
> |My configuration:
> |
> |
> |interfaces {
> |    lt-1/2/0 {
> |        unit 64 {
> |            encapsulation vlan;
> |            vlan-id 946;
> |            peer-unit 46;
> |            family inet {
> |                filter {
> |                    input mirror;
> |                }
> |                address 10.0.46.6/24;
> |            }
> |            family mpls;
> |        }
> |        unit 67 {
> |            encapsulation vlan;
> |            vlan-id 967;
> |            peer-unit 76;
> |            family inet {
> |                address 10.0.67.6/24;
> |            }
> |            family mpls;
> |        }
> |    }
> |}
> |
> |filter mirror{
> |term catch_all {
> |    then port-mirror;
> |}
> |}
> |
> |
> |forwarding-options{
> | port-mirroring {
> |    input {
> |        family inet {
> |            rate 1;
> |        }
> |    }
> |    output {
> |	interface ge-1/3/0.999 {
> |            next-hop 192.168.0.2;
> |        }
> |    }
> | }
> |}
> |
> |
> |interfaces{
> | ge-1/3/0{
> | unit 999 {
> | vlan-id 999;
> |  family inet {
> |    address 192.168.0.2/24;
> |  }
> | }
> |}
> |}
> |
> |Anyone can help me?
> |
> |Best Regards,
> |José
> |
> |_______________________________________________
> |juniper-nsp mailing list juniper-nsp at puck.nether.net
> |https://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list