Specifications

port-mirroring family (inet | inet6)] hierarchy level. To configure the input packet
properties for port mirroring, you must include the input statement at the [edit
forwarding-options port-mirroring] hierarchy level.
To configure port mirroring on a logical interface, configure the following statements
at the [edit forwarding-options port-mirroring] hierarchy level:
[edit forwarding-options port-mirroring]
input {
maximum-packet-length bytes
rate rate;
run-length number;
}
family (inet|inet6) {
output {
interface interface-name {
next-hop address;
}
no-filter-check;
}
}
Also, the note incorrectly states that the input statement can also be configured at the
[edit forwarding-options port-mirroring] hierarchy level and that it is only maintained
for backward compatibility. The note also mentions that the configuration of the output
statement is deprecated at the [edit forwarding-options port-mirroring] hierarchy level.
The correct behavior regarding the port-mirroring configuration for the packets to be
mirrored and for the destination at which the packets are to be received is as follows:
NOTE: The input statement is deprecated at the [edit forwarding-options
port-mirroring family (inet | inet6)] hierarchy level and is maintained only
for backward compatibility. You must include the input statement at the
[edit forwarding-options port-mirroring] hierarchy level.
•
In the Output Fields section of the show services ipsec-vpn ipsec security-associations
command topic of the Junos VPN Site Secure Feature Guide, the descriptions of the
Local Identity and Remote Identity fields are not clear and complete. The following are
the revised descriptions of these fields:
•
Local Identity—Protocol, address or prefix, and port number of the local entity of the
IPsec association. The format is id-type-name
(proto-name:port-number,[0..id-data-len] = iddata-presentation). The protocol is
always displayed as any because it is not user-configurable in the IPsec rule. Similarly,
the port number field in the output is always displayed as 0 because it is not
user-configurable in the IPsec rule. The value of the id-data-len parameter can be
one of the following, depending on the address configured in the IPsec rule:
•
For an IPv4 address, the length is 4 and the value displayed is 3.
•
For a subnet mask of an IPv4 address, the length is 8 and the value displayed is 7.
•
For a range of IPv4 addresses, the length is 8 and the value displayed is 7.
Copyright © 2015, Juniper Networks, Inc.150
Release Notes: Junos OS Release 13.3R6 for the EX Series, M Series, MX Series, PTX Series, and T Series