是否可以在 Juniper MX 系列路由器中为家庭 inet/inet6 接口进行第 2 层端口镜像?

网络工程 瞻博网络 瞻博网络
2021-07-28 09:03:38

我已经使用这样的逻辑隧道连接了两个逻辑系统:

[edit]
root@mx1# show logical-systems r1 interfaces lt-0/0/10 unit 10 
encapsulation ethernet;
peer-unit 80;
family inet {
    address 10.10.200.1/24;
}

[edit]
root@mx1# show logical-systems r2 interfaces lt-0/0/10 unit 80    
encapsulation ethernet;
peer-unit 10;
family inet {
    address 10.10.200.2/24;
}

[edit]
root@mx1# 

是否可以在入口和出口方向lt-0/0/10.10lt-0/0/10.80两者上进行第 2 层(即包括以太网标头)端口镜像

1个回答

查看https://www.juniper.net/documentation/en_US/junos/topics/usage-guidelines/services-configuring-port-mirroring.html

一、设置过滤器

filter filter-name {
  term term-name {
    then {
      port-mirror;
      accept;
    }
  }
}

接着

[edit forwarding-options port-mirroring]
input {
  maximum-packet-length bytes;
  rate rate;
  run-length number;
}
family (inet | inet6) {
  output {
    interface interface-name {
      next-hop address;
    }
    next-hop-group group-name {
      group-type (inet | inet6);
      interface interface-name {
        next-hop address;
      }
      next-hop-subgroup group-name {
        interface interface-name {
          next-hop address;
        }
      }
    }
    no-filter-check;
  }
}