SRX

Expand all | Collapse all

Port mirroring on a SRX430

  • 1.  Port mirroring on a SRX430

    Posted 10-16-2020 03:51

    Hello,

     

    Does port mirroring work on SRX340?

    I was tried to configure this feature based on this:

    https://kb.juniper.net/InfoCenter/index?page=content&id=KB21833

    but it doesn't work.

    I see that couter in filter increase, but I don't see any packets on outging interface.

     

    Best Regards



  • 2.  Re: Port mirroring on a SRX430

    Posted 10-16-2020 04:18

    Hello,

    If You follow this KB, there is a bit of configuration missing, namely, static ARP on port-mirror output interface.

    For the KB example config, it would be

     

    set interfaces ge-0/0/1.0 family inet address 2.2.2.1/24 arp 2.2.2.2. mac 0e:00:00:00:00:0e 

     

    Please add static ARP entry to Your config, re-test and report back.

    HTH

    Thx

    Alex

     

     



  • 3.  Re: Port mirroring on a SRX430

    Posted 10-19-2020 02:43
      |   view attached

    Hello

     

    I added static ARP but it still doesn't work.

    Attachment(s)



  • 4.  Re: Port mirroring on a SRX430

    Posted 10-19-2020 04:12

    Hello,

     

    Please send traffic thru ge-0/0/0 and share the following printouts:

     

    show forwarding-options port-mirroring | no-more
    show interfaces ge-0/0/0 extensive | no-more
    show interfaces ge-0/0/7 extensive | no-more

     

     

    HTH

    Thx

    Alex



  • 5.  Re: Port mirroring on a SRX430

    Posted 10-19-2020 04:38
      |   view attached

    I attached the file.

     

    I see:

    root> show forwarding-options port-mirroring | no-more
    Instance Name: &global_instance
    Instance Id: 1
    Input parameters:
    Rate : 1
    Run-length : 0
    Maximum-packet-length : 0
    Output parameters:
    Family State Destination Next-hop
    inet down ge-0/0/7.0

     

    but Physical interface is UP.

    Attachment(s)



  • 6.  Re: Port mirroring on a SRX430

    Posted 10-26-2020 07:58

    Hello,

     

    I noticed that I made a mistake in the subject. It should be SRX340