Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
How to Configure the NFX150
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring Analyzer VNF and Port-mirroring

date_range 20-Jan-21

The Port-mirroring feature allows you to monitor network traffic. If the feature is enabled on a VNF interface, the OVS system bridge sends a copy of all network packets of that VNF interface to the analyzer VNF for analysis. You can use the port-mirroring or analyzer commands for analyzing the network traffic.

Note:
  • Port-mirroring is supported only on VNF interfaces that are connected to an OVS system bridge.

  • VNF interfaces must be configured before configuring port-mirroring options.

  • If the analyzer VNF is active after you configure, you must restart the VNF for changes to take effect.

  • You can configure up to four input ports and only one output port for an analyzer rule.

  • Output ports must be unique in all analyzer rules.

  • After changing the configuration of the input VNF interfaces, you must de-activate and activate the analyzer rules referencing to it along with the analyzer VNF restart.

To configure the analyzer VNF and enable port-mirroring:

  1. Configure the analyzer VNF:
    content_copy zoom_out_map
    [edit]
    user@host#set virtual-network-functions analyzer-vnf-name image file-path 
    user@host#set virtual-network-functions analyzer-vnf-name interfaces interface-name analyzer 
    
  2. Enable port-mirroring of the network traffic in the input and output ports of the VNF interface and analyzer VNF:
    content_copy zoom_out_map
    user@host# set vmhost forwarding-options analyzer analyzer-instance-name input [ingress | egress] virtual-network-function vnf-name interface interface-name
    user@host# set vmhost forwarding-options analyzer analyzer-rule-name output virtual-network-function analyzer-vnf-name interface interface-name
    
footer-navigation