Mirror outgoing control-plane traffic with family any filters

Port mirroring copies IPv4 or IPv6 packets entering or leaving an interface and sends copies of these packets to an external host or packet analyzer for analysis. One port-mirroring method that you can use allows you to mirror selected transit network traffic to remote network analyzers by sending the mirrored packets through overlay tunnels. The enhanced method allows you to use family any filters with the same match conditions that you would use with family inet or family inet6 to selectively mirror the host-outbound traffic.

For IPv4 traffic, you can use the family any filter with these match conditions:

• address, destination-port, destination-port-except, destination-prefix-list, dscp, dscp-except, first-fragment, fragment-flags, fragment-offset, fragment-offset-except, gre-key, gre-key-except, icmp-code, icmp-code-except, icmp-type, icmp-type-except, ip-address, ip-destination-address, ip-precedence, ip-precedence-except, ip-protocol, ip-protocol-except, ip-source-address, is-fragment, port, port-except, prefix-list, source-port, source-port-except, source-prefix-list, tcp-established, tcp-flags, tcp-initial, ttl, ttl-except

For IPv6 traffic, you can use the family any filter with these match conditions:

• address, destination-port, destination-port-except, destination-prefix-list, extension-header, extension-header-except, first-fragment, gre-key, gre-key-except, hop-limit, hop-limit-except, icmp-code, icmp-code-except, icmp-type, icmp-type-except, ip6-address, ip6-destination-address, ip6-source-address, is-fragment, last-fragment, next-header, next-header-except, payload-protocol, payload-protocol-except, port, port-except, prefix-list, source-port, source-port-except, source-prefix-list, tcp-established, tcp-flags, tcp-initial, traffic-class, traffic-class-except