Routing

Hello Experts,

Greetings !!

My basic port-mirroring is not working with MX80, Am I missing anything in the config?

Its fairly straight forward case. I wanted to capture traffic coming from interface ge-1/0/5 and

mirror  it to ge-1/3/7.0 where I have connected a linux machine (91.1.1.5) .

Now, when I send some traffic from device connected to ge-1/0/5, it does not appear in tcpdump of linux machine.

Device behind MX interface ge-1/0/5 is able to ping server IP 91.1.1.5.

Is there anything missing? Please help suggest.

Configuration

==========

root@orange-mx> show configuration forwarding-options
port-mirroring {
input {
rate 1;
}
family any {
output {
interface ge-1/3/7.0 {
next-hop 91.1.1.5;
}
}
}
}

root@orange-mx> show configuration firewall
family bridge {
filter NFX1Filter {
term catch_all {
then {
accept;
port-mirror;
}
}
}
}

root@

root@orange-mx> show configuration interfaces ge-1/3/7
unit 0 {
family bridge {
interface-mode access;
vlan-id 1001;
}
}

orange-mx> show configuration interfaces ge-1/0/5
unit 0 {
family bridge {
filter {
input NFX1Filter;
output NFX1Filter;
}
interface-mode access;
vlan-id 1001;
}
}

root@orange-mx>

Hello,

---

@shirish wrote:

 

Now, when I send some traffic from device connected to ge-1/0/5, it does not appear in tcpdump of linux machine.

 

 

 

---

And how do You run tcpdump I wonder? Please make sure You capture both tagged and untagged frames for certainty

https://christian-rossow.de/articles/tcpdump_filter_mixed_tagged_and_untagged_VLAN_traffic.php

HTH

Thx
Alex

Thanks Alex, agree with you. I now made it very simple.

Instead of ge-1/3/7 as MX trunk port , I made it access.

root@orange-mx> show configuration interfaces ge-1/3/7
unit 0 {
family bridge {
interface-mode access;
vlan-id 1001;
}
 

Just converted to access port and attached Linux server to it, but still the traffic is not captured by tcpdump at eth1 interface of server.

Any reasons folks?

Plz read this configuration example how to mirror layer 2 traffic

Or this

Thanks Akushner, it worked.