Configuring Scopes When You Use Policy-Based Routing

You configure scopes to define the services to be activated for a specific SRC-managed network. Which scopes you configure depends on how you direct traffic to an IDP sensor.

In a network that contains only JUNOSe routers, you can assign a single scope to one or more JUNOSe routers. Figure 9 shows the scope and JUNOSe router configured in the sample data. This scope also contains the aggregate and fragment services.

Figure 9: Scopes to Support Policy-Based Routing of Traffic to an IDP Sensor

To policy-route traffic from a JUNOSe router to an IDP sensor:

1. Create one JUNOSe point of presence (POP) scope.
2. Assign this scope to all the JUNOSe subscriber access routers that use policy routing. Make sure that these routers appear under o=Networks, o=umc in the directory. You create the aggregate services in this scope.

For a sample JUNOSe POP scope, see l=IDP-JunosePop, o=Scopes, o=umc in the sample data.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.