Juniper各类设备端口镜像配置

ex系列:
set forwarding-options analyzer ftfsoft input ingress interface ae2.0
set forwarding-options analyzer ftfsoft input ingress interface ae6.0
set forwarding-options analyzer ftfsoft input ingress interface ae8.0
set forwarding-options analyzer ftfsoft input ingress interface ae10.0
set forwarding-options analyzer ftfsoft input ingress interface ae11.0
set forwarding-options analyzer ftfsoft input ingress interface ae12.0
set forwarding-options analyzer ftfsoft input ingress interface ae14.0
set forwarding-options analyzer ftfsoft input ingress interface ae16.0
set forwarding-options analyzer ftfsoft input ingress interface ae18.0
set forwarding-options analyzer ftfsoft input ingress interface ae20.0
set forwarding-options analyzer ftfsoft input ingress interface ge-0/0/7.0
set forwarding-options analyzer ftfsoft input ingress interface ge-0/0/9.0
set forwarding-options analyzer ftfsoft input ingress interface ge-1/0/7.0
set forwarding-options analyzer ftfsoft input ingress interface ge-1/0/9.0
set forwarding-options analyzer ftfsoft input ingress interface ge-1/0/19.0
set forwarding-options analyzer ftfsoft input egress interface ae2.0
set forwarding-options analyzer ftfsoft input egress interface ae6.0
set forwarding-options analyzer ftfsoft input egress interface ae8.0
set forwarding-options analyzer ftfsoft input egress interface ae10.0
set forwarding-options analyzer ftfsoft input egress interface ae11.0
set forwarding-options analyzer ftfsoft input egress interface ae12.0
set forwarding-options analyzer ftfsoft input egress interface ae14.0
set forwarding-options analyzer ftfsoft input egress interface ae16.0
set forwarding-options analyzer ftfsoft input egress interface ae18.0
set forwarding-options analyzer ftfsoft input egress interface ae20.0
set forwarding-options analyzer ftfsoft input egress interface ge-1/0/7.0
set forwarding-options analyzer ftfsoft input egress interface ge-1/0/9.0
set forwarding-options analyzer ftfsoft input egress interface ge-0/0/7.0
set forwarding-options analyzer ftfsoft input egress interface ge-0/0/9.0
set forwarding-options analyzer ftfsoft input egress interface ge-1/0/19.0
set forwarding-options analyzer ftfsoft output interface ge-1/0/4.0

mx系列
set forwarding-options port-mirroring input rate 1
set forwarding-options port-mirroring family inet output interface ge-0/0/5.0 next-hop 10.0.2.66
set forwarding-options port-mirroring family inet output no-filter-check
set forwarding-options port-mirroring instance linshi input rate 1 --配置mirror选项

set firewall family inet filter linshi term 5 then port-mirror --配置filter模式为port-mirror

set interfaces ge-0/0/5 unit 0 family inet address 10.0.2.65/30 arp 10.0.2.66 mac 70:5a:0f:88:41:c2
set interfaces ge-0/0/5 unit 0 family inet address 10.0.2.65/30 arp 10.0.2.66 publish --配置mirror端口

set interfaces ge-0/0/0 unit 0 family inet filter input linshi
set interfaces ge-0/0/0 unit 0 family inet filter output linshi --源端口调用filter

srx系列
set firewall filter port-mirror term 1 from source-address 0.0.0.0/0
set firewall filter port-mirror term 1 then port-mirror
set firewall filter port-mirror term 1 then accept
set firewall filter port-mirror term 2 then accept --配置filter模式为mirror

set forwarding-options port-mirroring input rate 1
set forwarding-options port-mirroring input run-length 10
set forwarding-options port-mirroring family inet output interface ge-0/0/5.0 next-hop 1.1.1.2 --配置mirror选项

set interfaces ge-0/0/0 unit 0 family inet filter input port-mirror
set interfaces ge-0/0/0 unit 0 family inet filter output port-mirror --源端口调用filter

set interfaces ge-0/0/5 unit 0 family inet address 1.1.1.1/24 --配置镜像端口

猜你喜欢

转载自www.cnblogs.com/juanxu/p/9211957.html