Mirroring

interface source

The following example shows a mirroring-instance configuration with an interface as the source for mirrored traffic:

--{ + candidate shared default }--[  ]--
# info with-context system mirroring
    system {
        mirroring {
            mirroring-instance 1 {
                admin-state enable
                mirror-source {
                    interface ethernet-1/5 {
                        direction ingress-egress
                    }
                }
            }
        }
    }

ACL source

The following example configures an ACL with an entry that matches TCP packets and applies the ACL to a subinterface. A mirroring-instance is configured that uses packets matching the ACL as the source for mirrored traffic.

--{ + candidate shared default }--[  ]--
# info with-context acl acl-filter ip_tcp type ipv4
    acl {
        acl-filter ip_tcp type ipv4 {
            entry 1000 {
                description Match_TCP_Protocol
                match {
                    ipv4 {
                        protocol tcp
                    }
                }
                action {
                    accept {
                    }
                }
            }
        }
    }

--{ + candidate shared default }--[  ]--
# info with-context acl interface ethernet-1/1.1
    acl {
        interface ethernet-1/1.1 {
            interface-ref {
                interface ethernet-1/1
                subinterface 1
            }
            input {
                acl-filter ip_tcp type ipv4 {
                }
            }
        }
    }

--{ + candidate shared default }--[  ]--
# info with-context system mirroring
    system {
        mirroring {
            mirroring-instance 1 {
                admin-state enable
                mirror-source {
                    interface ethernet-1/5 {
                        direction ingress-egress
                    }
                    acl {
                        acl-filter ip_tcp type ipv4 {
                            entry 1000 {
                            }
                        }
                    }
                }
            }
        }
    }

Configuring a local mirroring destination

The following example configures a subinterface to be a local mirror destination.

--{ + candidate shared default }--[  ]--
# info with-context interface ethernet-1/4 subinterface 1
    interface ethernet-1/4 {
        subinterface 1 {
            type local-mirror-dest
            admin-state enable
            vlan {
                encap {
                    single-tagged {
                        vlan-id 1127
                    }
                }
            }
            local-mirror-destination {
                admin-state enable
            }
        }
    }

Configuring a remote mirroring destination using underlay

The following example configures a mirroring-instance that specifies the mirrored traffic be encapsulated into a tunnel within a network-instance. The mirrored traffic is encapsulated with a GRE header and a ERSPAN header and is tunneled to the remote destination.

--{ + candidate shared default }--[  ]--
# info with-context system mirroring
    system {
        mirroring {
            mirroring-instance test {
                admin-state enable
                mirror-source {
                    interface ethernet-1/1 {
                        direction ingress-egress
                    }
                }
                mirror-destination {
                    remote {
                        encap l2ogre
                        network-instance IPVRF-1
                        tunnel-end-points {
                            source-address 192.168.1.53
                            destination-address 192.168.1.153
                        }
                    }
                }
            }
        }
    }

Configuring a remote mirroring destination in 7730 SXR platforms

The following example configures a remote mirroring destination in 7730 SXR platforms. In this example, the original packet along with its Layer 2 header is mirrored. The encapsulation used is MPLS over GRE. The tunnel type supported includes IP-GRE, SR-ISIS, and SR-TE).

--{ + candidate shared default }--[  ]--
# info with-context system mirroring mirroring-instance one
    system {
        mirroring {
            mirroring-instance one {
                mirror-source {
                    subinterface lag7.1 {
                        direction ingress-only
                    }
                }
                mirror-destination {
                    remote {
                        encap mpls
                        network-instance green_default
                        tunnel-end-points {
                            source-address 1.1.1.1
                            destination-address 32.1.1.5
                            admin-state enable
                            service-label 145
                            allowed-tunnel-types [
                                sr-isis
                                te-policy-sr-mpls-uncolored
                            ]
                        }
                    }
                }
            }
        }
    }

Configure a mirror slice size

The following example configures a slice size for a mirror destination.

--{ + candidate shared default }--[  ]--
# info with-context system mirroring mirroring-instance test
    system {
        mirroring {
            mirroring-instance test {
                admin-state enable
                mirror-source {
                    interface ethernet-1/1 {
                        direction ingress-egress
                    }
                }
                mirror-destination {
                    slice-size 256
                    remote {
                        encap mpls
                        network-instance IPVRF-1
                        tunnel-end-points {
                            source-address 192.168.1.53
                            destination-address 192.168.1.153
                            service-label 16
                            allowed-tunnel-types [
                                gre
                            ]
                        }
                    }
                }
            }
        }
    }