Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3645 / 3946

Example: Configuring Port Mirroring for Remote Monitoring of Employee Resource Use on EX
Series Switches
EX Series switches allow you to configure port mirroring to send copies of packets to
either a local interface for local monitoring or to a VLAN for remote monitoring. You can
use port mirroring to copy these packets:
• Packets entering or exiting a port
• Packets entering a VLAN on EX2200, EX3200, EX4200, or EX4500 switches
•
Packets exiting a VLAN on EX8200 switches
You can analyze the mirrored traffic using a protocol analyzer application running on a
remote monitoring station if you are sending mirrored traffic to an analyzer VLAN.
This topic includes two related examples that describe how to mirror traffic entering
ports on the switch to the
remote-analyzer
VLAN so that you can perform analysis from
a remote monitoring station. The first example shows how to mirror all traffic entering
the ports connected to employee computers. The second example shows the same
scenario, but includes a filter to mirror only the employee traffic going to the Web.
This example describes how to configure remote port mirroring:
• Requirements on page 3549
• Overview and Topology on page 3549
•
Mirroring All Employee Traffic for Remote Analysis on page 3550
•
Mirroring Employee-to-Web Traffic for Remote Analysis on page 3551
• Verification on page 3554
Requirements
This example uses the following hardware and software components:
• Junos OS Release 9.5 or later for EX Series switches
• One EX3200 or EX4200 switch connected to another EX3200 or EX4200 switch
Before you configure port mirroring, be sure you have an understanding of port mirroring
concepts.
Input interfaces that are referred by the analyzer must be configured.
Overview and Topology
This topic includes two related examples that describe how to configure port mirroring
to the
remote-analyzer
VLAN so that analysis can be performed from a remote monitoring
station. The first example shows how to configure an EX Series switch to mirror all traffic
from employee computers. The second example shows the same scenario, but the setup
includes a filter to mirror only the employee traffic going to the Web.
Figure 87 on page 3550 shows the network topology for this example.
3549 Copyright © 2010, Juniper Networks, Inc.
Chapter 127: Port Mirroring