[j-nsp] Port Mirroring on M7i

Mario DEL RE mario.delre at gmail.com
Fri Mar 6 16:24:33 EST 2009


Hello all,

I would like to do Port Mirroring on an interface. I can mirror the IN
traffic of my interface, but I can not mirror the OUT traffic.

 The global topology is as follows:
*J4300 *------------------ (mirrored port,1/3/0.100)
*M7i*(1/3/1.0)----------------> Mirrored Traffic's destination.

Here is the mirrored port:

lab at m7# show interfaces fe-1/3/0

vlan-tagging;

unit 100 {

    vlan-id 100;

    family inet {

        filter {

            input mirror_in;

            output mirror_out;

        }

        address 1.1.1.2/30;

    }

}


And the filters are as follows:

lab at m7# show firewall family inet filter mirror_in

term 1 {

    then {

        port-mirror;

        accept;

    }

}

The mirror_out filter is exactly the same as mirror_in. My Forwarding
options are as follows:

lab at m7# show forwarding-options

port-mirroring {

    family inet {

        input {

            rate 1;

            run-length 1;

        }

        output {

            interface fe-1/3/1.0 {

                next-hop 10.10.10.2;

            }

        }

    }

}

When I generate a traffic between the J4300 and the M7i (a ping from J4300
to M7i for example), the M7i only mirrors the INPUT packets to the interface
fe-1/3/1.0. I am sure that it's the input traffic (and not the output
traffic) by deactivating the filters one by one. The output traffic is not
mirrored at any time.

Should I add/change some config to also mirror the output traffic, or is it
a default Junos behaviour? (Junos: 8.3R2.11)


Thanks in advance,

Mario DEL RE


More information about the juniper-nsp mailing list