asked on

mirror port on srx240

I have several srx240 and I'd like to monitor my WAN port with Wireshark. I am new to Juniper. So I am just wondering if anybody can provide some guidance in configuring the mirror port on my srx240.

This is what I intend to setup:
Internet <--ge-0/0/0-->srx240<--ge-0/0/1-->internal network
|
ge-0/0/2 (this is where my PC with Wireshark is connected to)

Thanks

ASKER CERTIFIED SOLUTION

hypercube

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

leblanc

ASKER

That looks complex. I see the Security section and I am not sure I understand the implication of it. My FW is in a production environment and I don't want to compromise the security. Does this section mean that it will allow everything to go through the FW?

security {
    policies {
        default-policy {
            permit-all;
        }
    }
    zones {
        security-zone trust {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                all;

Open in new window

SOLUTION

hypercube

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial