[Contents] [Prev] [Next] [Index] [Report an Error]

Surveillance Director

The Surveillance Director manages how to direct subscriber traffic to an IDP sensor. It queries the directory for IP pools associated with specified virtual routers and generates classless interdomain routing (CIDR) subnets that include only the set of IP addresses that are assigned to subscribers. You can configure the number of IP addresses to be included in a CIDR subnet. The Surveillance Director uses CIDR subnets because routers can efficiently handle these subnets to match policy rules.

For each CIDR subnet, the Surveillance Director activates a specified aggregate service, and then the aggregate service activates its fragment services to route traffic to an IDP sensor. The configuration for the fragment services determines whether it policy-routes or mirrors traffic.

Table 9 describes the types of fragment services to configure in an aggregate service, and shows where the fragment services are activated.

Table 9: Types of Fragment Services in an Aggregate Service

Fragment Services	Policy	Where Fragment Service Is Activated
Policy-Based Routing
Subscriber-interface fragment	Routes traffic sent by a subscriber to an IDP sensor	JUNOSe routers
Core-interface fragment	Routes traffic destined for a subscriber to an IDP sensor	JUNOSe routers
Mirroring
Router (forwarding)-interface fragment	Mirrors traffic to an IDP sensor	JUNOS routing platforms that transmit subscriber traffic

Traffic for one group of CIDR subnets at a time is sent to an IDP sensor for monitoring. You can configure the length of the interval during which to monitor traffic from CIDR subnet; all traffic for subscribers with IP addresses within the CIDR subnet is monitored during a specified monitoring interval.

The Surveillance Director provides subscriber IDs in the form of a distinguished name (DN) to locate the subscriber session in which to activate a service. The DN is used to locate the SAE that manages the subscriber session in which the aggregate service is activated.

[Contents] [Prev] [Next] [Index] [Report an Error]