Routing

Expand all | Collapse all

Basic port-mirroring on MX not working.

Jump to Best Answer
  • 1.  Basic port-mirroring on MX not working.

    Posted 05-30-2018 05:38

    Hello Experts,

     

    Greetings !!

     

    My basic port-mirroring is not working with MX80, Am I missing anything in the config?

    Its fairly straight forward case. I wanted to capture traffic coming from interface ge-1/0/5 and

    mirror  it to ge-1/3/7.0 where I have connected a linux machine (91.1.1.5) .

     

    Now, when I send some traffic from device connected to ge-1/0/5, it does not appear in tcpdump of linux machine.

    Device behind MX interface ge-1/0/5 is able to ping server IP 91.1.1.5.

     

    Is there anything missing? Please help suggest.

     

    Configuration

    ==========

    root@orange-mx> show configuration forwarding-options
    port-mirroring {
    input {
    rate 1;
    }
    family any {
    output {
    interface ge-1/3/7.0 {
    next-hop 91.1.1.5;
    }
    }
    }
    }

    root@orange-mx> show configuration firewall
    family bridge {
    filter NFX1Filter {
    term catch_all {
    then {
    accept;
    port-mirror;
    }
    }
    }
    }

     

    root@

    root@orange-mx> show configuration interfaces ge-1/3/7
    unit 0 {
    family bridge {
    interface-mode access;
    vlan-id 1001;
    }
    }

    orange-mx> show configuration interfaces ge-1/0/5
    unit 0 {
    family bridge {
    filter {
    input NFX1Filter;
    output NFX1Filter;
    }
    interface-mode access;
    vlan-id 1001;
    }
    }

    root@orange-mx>

     



  • 2.  RE: Basic port-mirroring on MX not working.

    Posted 05-30-2018 05:54

    Hello,


    @shirish wrote:

     

    Now, when I send some traffic from device connected to ge-1/0/5, it does not appear in tcpdump of linux machine.

     

     

     


    And how do You run tcpdump I wonder? Please make sure You capture both tagged and untagged frames for certainty

    https://christian-rossow.de/articles/tcpdump_filter_mixed_tagged_and_untagged_VLAN_traffic.php

    HTH

    Thx
    Alex

     

     



  • 3.  RE: Basic port-mirroring on MX not working.

    Posted 05-31-2018 00:13

    Thanks Alex, agree with you. I now made it very simple.

    Instead of ge-1/3/7 as MX trunk port , I made it access.

    root@orange-mx> show configuration interfaces ge-1/3/7
    unit 0 {
    family bridge {
    interface-mode access;
    vlan-id 1001;
    }
     

    Just converted to access port and attached Linux server to it, but still the traffic is not captured by tcpdump at eth1 interface of server.

     

    Any reasons folks?

     



  • 4.  RE: Basic port-mirroring on MX not working.

    Posted 05-31-2018 00:37

    Plz read this configuration example how to mirror layer 2 traffic

    Or this



  • 5.  RE: Basic port-mirroring on MX not working.
    Best Answer

    Posted 05-31-2018 04:43

    Thanks Akushner, it worked.