Skip to content

Support

Techpubs Home
Report an Error

Entire manual as PDF [2764 KB]

Table of Contents

About This Guide
Objectives
Audience
Documentation Conventions
Related Juniper Networks Documentation
Obtaining Documentation
Documentation Feedback
Requesting Support
Installing the SRC Applications
SRC Software CDs
Before You Install the SRC Applications
Installation Prerequisites
Solaris Patches
SRC-ACP
Installing SRC Application Packages
Uninstalling SRC Packages
Installing Sample SRC Data
Installing SRC Web Applications
Installing Web Applications Inside JBoss
Removing SRC Web Applications
Removing a Web Application from JBoss
Reviewing SRC Port Settings
Overview of the SRC SOAP Gateway
Overview of the SRC-SG
Terminology
Activating Services with SOAP
Overview of Dynamic Service Activator
Dynamic Service Activator Operation
Dynamic Service Activator in a Redundant Environment
Before You Install Dynamic Service Activator
Installing Dynamic Service Activator on a Web Application Server
Bootstrap Properties for Dynamic Service Activator
Configuring Dynamic Service Activator
Configuring Security for Gateway Clients
Configuring General Properties for Dynamic Service Activator
Dynamic Service Activation General Properties
Configuring Subscriber Types for Dynamic Service Activator
Subscriber Type Fields
Configuring the NIC Proxies
Configuring Access to Methods and Scripts
Method and Scripts Fields
Configuring Access Constraints
Deleting Subscriber Types, NIC Proxies, Methods, Scripts, and Clients
Configuring the Logging Properties
Sample Data for Dynamic Service Activator
Methods, Scripts, and Clients
PCMM Available Services
Monitoring Dynamic Service Activator
Monitoring the Performance of Dynamic Service Activator
Monitoring the SOAP Operations
Monitoring the NIC Proxies
Testing Dynamic Service Activator
Web Application Gateway Client
Installing the Gateway Client
Starting the Gateway Client
Connecting to the Gateway
Running Methods and Scripts
Gateway Client for PCs
Requirements
Installing the Gateway Client
Starting the Gateway Client
Customizing the Default Settings
Using the Gateway SOAP Client
Sample Scripts
API for Dynamic Service Activator
Public SOAP Interfaces of Web Applications
Methods for the Dynamic Service Activator Web Service Interface
Format of the Subscriber's URI
Subscription Attributes
SOAP Fault Codes for Dynamic Service Activator
Web Service Interface for PCMM
SRC PCMM Web Service Interface Methods
Configuring PCMM Policies and Parameter Substitutions
Configuring Classify-Traffic Conditions for Dynamic Service Activator
Configuring FlowSpec Actions for Dynamic Service Activator
Service Class Name Action
DOCSIS Action
Configuring Username Token Profile
Configuring Services That Are Available for PCMM Clients
PCMM Available Services Fields
Providing Threat Mitigation Services with the Threat Mitigation Application
Overview of the Threat Mitigation Application
Before You Install the Threat Mitigation Application
Sample Implementation
Installing and Initially Configuring the Threat Mitigation Application
Before You Start
Installing and Initially Configuring the Threat Mitigation Application Software
Configuring Threat Mitigation
Configuring a Database to Store Attack and Response Data
Configuring Attack Types in the Database
Configuring Actions in the Database
Configuring Candidate Actions in the Database
Configuring the Threat Mitigation Application
Configuring Connections to the Directory
Configuring Logging
Configuring the SRC-TMP
Deploying the Threat Mitigation Application
Applying Services to Manage Threats
Classifying Subscribers and Interfaces
Example: Subscriber Classification Scripts
Example: Interface Classification Scripts for JUNOS Routing Platforms
Example: Interface Classification Scripts for JUNOSe Routers
Managing Threats with the SRC-TMP
Overview of the SRC-TMP
About the Record Servlet
Configuring and Deploying the SRC-TMP
Using the NIC Resolver for the SRC-TMP
Accessing the SRC-TMP
Managing Attacks Requiring Action
Managing Attacks Pending Service Activation
Managing Attacks Pending Service Deactivation
Managing Attacks with Activated Services
Enabling Actions from NetScreen-Security Manager
Before You Configure Scripts
Configuring Scripts
Providing Application-Level Session Tracking and QoS Control
Overview of Application-Level Session Tracking and QoS Control
Benefits of Application-Level Session Tracking and QoS Control
Integration of the SRC Software and the Ellacoya DPI Platform
Ellacoya Networks DPI Platform
Juniper Networks Platforms
IPSCS Service Offers and Service Bundles
Mapping Service Offers and Service Bundles to SRC Concepts
Synchronization Between the SRC Software and the Ellacoya System
Collecting Accounting Data
Subscriber Login and Logout in a DPI Environment
Service Activation and Deactivation in a DPI Environment
Loading the Sample Data for the DPI
Configuring the SRC Software for DPI Integration
Setting Up Script Services for DPI
Adding a Service Scope
Creating a DPI Script Service
Configuring the Script Service
Configuring a Virtual Router Object for DPI
Configuring Subscriptions to DPI Services
Configuring the Ellacoya DPI Platform for Integration
Provisioning the IPSCS
Service Bundles
Service Offers
Traffic-Accounting Profiles
Configuring the SLE
Synchronizing System Clocks
Overview of Controlling Volume Usage with the SRC-VTA
Overview of the SRC-VTA
Types of VTAs
Terminology
VTA Service and Subscriber Accounts
VTA Sessions
Managing Subscriber Accounts with Portals
Volume-Based Services
SRC-VTA Architecture and Connections to SRC Components
How the SRC-VTA Works
Events
Event Attributes
Event Handlers
Actions
Processors
Database Engine Processor
Mail Processor
SAE Proxy Processor
Script Runner Processor
SRC-VTA Operation
Identifying Subscribers, SAEs, and Sessions
Managing VTA Accounts and Sessions
Managing Subscriber Sessions and Service Sessions
Example: Limiting Subscriber Access Based on Account Balances
Installing and Initially Configuring the SRC-VTA
Before You Install the SRC-VTA
Installing the SRC-VTA and Running the Configuration Script
Using JavaScript Programs in VTA Configurations
Related Configuration Tasks
Configuring a Database to Store Account and Session Data
Configuring the J2EE Application Server
Creating Deployment Descriptors
Troubleshooting Database Deadlocks
Configuring VTA Services and Policies
Configuring Subscribers and Subscriptions to VTA Services
Accessing the J2EE Application Server's Client Libraries
Specifying How the SRC-VTA Loads Configurations from the Directory
Properties in ejb-jar.xml file
Configuring the SAE to Send Tracking Events to the SRC-VTA
Specifying Tracking Plug-Ins for Enterprise Subscribers on JUNOS Routing Platforms
Using NICs with the SRC-VTA
Configuring a NIC
Configuring NIC Proxies for the VTA
Renaming a VTA
Renaming the VTA
Modifying the Renaming Rules
Configuring the SRC-VTA with VTA Configuration Manager
Installing VTA Configuration Manager
Running VTA Configuration Manager
Loading and Importing VTA Configurations
Loading a Configuration from a Directory
Inheritance of Properties in Parent and Child Nodes
Connecting to the Directory Fields
Importing a VTA Configuration from a Local File
Accessing the VTA Configuration
Configuring the SRC-VTA to Manage Database Accounts
Configuring Scripts That Update Accounts
Configuring the SRC-VTA to Manage Subscriber Accounts
Configuring a Usage Metric for Service Accounts
Defining a Formula for Determining Network Resource Usage
Sample Formulas for Usage Metrics
Configuring an Interim Accounting Interval for Service Accounts
Adjusting the Interim Accounting Interval for a Service
Configuring Actions for the Database Engine Processor
Action Fields for the Database Engine Processor
Setting Up the SRC-VTA to Send E-Mail Notifications
Configuring the SRC-VTA to Send E-Mail Notifications
Configuring the SAE Proxy Processor
Configuring Actions for the SAE Proxy Processor
Configuring the SRC-VTA to Run Scripts
Configuring JavaScript Programs
JavaScript Fields
Configuring External Scripts
External Script Fields
Configuring VTA Actions to Run Scripts
Configuring Events
Configuring Event Handlers
Event Handler Fields
Configuring Identifiers for Subscribers and Sessions
Subscriber ID and Lookup Fields
Using One VTA Account for Multiple Subscriber Sessions
Logging Event Messages for the SRC-VTA
Logging Events Messages to a Text File
File Logging Fields
Logging Events Messages to a System Logging Server
System Logging Fields
Validating VTA Configurations
Saving VTA Configurations to a Directory or Local File
Committing a VTA Configuration to a Directory
Exporting a VTA Configuration to a Local File
Managing Subscriber Accounts with VTA Portals
Overview of Managing Subscriber Accounts with VTA Portals
Automatic Login of Subscribers
Configuring Web Applications for the SRC-VTA
Properties for VTA Portals
Managing Subscriber Accounts with the Administrator Portal
Accessing the Administrator Portal
Viewing Subscriber Accounts
Replenishing Periodic Accounts
Deleting Information from the VTA's Database
Testing the VTA Configuration
Allowing Subscribers to Manage Their Accounts with the Subscriber Portal
Accessing the Subscriber Portal
Viewing Information About the Account
Purchasing a Periodic Account
Suspending a Periodic Account
Purchasing Extra Bandwidth
Example of a Bucket VTA
Overview of Bucket VTA Example
Events for Bucket VTA
Event Handlers for Bucket VTA
GetBucket Event Handler
RefillBucketWithBehavingRate Event Handler
UpdateBehavingUsage Event Handler
ToMisbehaving Event Handler
Database Engine Processor for Bucket VTA
Account Update Scripts
Subscriber Account
Service Accounts
SAE Proxy Processor for Bucket VTA
Actions for Bucket VTA
GetBucketBalance Action
CalcUsage Action
UpdateBucketForBehaving Action
RefillBucketWithBehavingRate Action
StartMisbehavingService Action
StopBehavingService Action
Index