Configuring Packet-Mirroring Support in an SRC Network

To support packet mirroring in an SRC network, configure a script service that can be activated to set up RADIUS-based packet-mirroring policies on a JUNOSe router. The script service defines the parameters needed to mirror subscriber traffic, such as the address of the subscriber or the analyzer device. This script service is activated for the subscriber whose traffic should be mirrored.

You must have preconfigured RADIUS-based packet mirroring on JUNOSe routers. The JUNOSe software provides RADIUS-based packet mirroring, which allows the router to create dynamic secure policies for the mirroring operation. The RADIUS administrator can configure and manage interface mirroring services that are activated by means of CoA.

To set up the SRC software for packet mirroring:

• Create a script service for packet mirroring.

  The SRC software includes a sample script service that you can configure to send dynamic RADIUS requests to the JUNOSe router. You can use the sample service definition and customize it for your environment by modifying the service substitutions.

  See Configuring Parameters for the Script Service for Packet Mirroring.

• Configure subscriptions to the packet-mirroring service.

  You can set up the subscriptions to activate immediately on login.

  See Configuring Subscriptions (SRC CLI).

• (Optional) Configure the maximum number of RADIUS peers.

  See Specifying Maximum Number of RADIUS Peers with the SRC CLI.

Related Topics

• Overview of Packet Mirroring Services
• Example: Using the Sample Packet-Mirroring Application
• For information about configuring RADIUS-based packet mirroring on the JUNOSe router, see the JUNOSe Policy Management Configuration Guide
• For information about dynamic RADIUS requests, see RFC 3576—Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS) (July 2003)

Copyright © 2008, Juniper Networks, Inc. All Rights Reserved. Trademark Notice.