[Contents] [Prev] [Next] [Index] [Report an Error]

Directing Subscriber Traffic to IDP for Monitoring

You can direct all traffic to IDP by placing an IDP sensor in the network paths through which all incoming and outgoing subscriber traffic passes. In this case, you do not need to configure the SRC software to direct subscriber traffic to an IDP sensor.

If you do plan to direct subsets of subscriber traffic to an IDP sensor, how you do so depends on your network configuration. Table 8 lists ways in which you route subscriber traffic to an IDP sensor.

Table 8: Network Configuration and Forwarding Method

For This Network Configuration	Use This Method to Forward Subscriber Traffic
JUNOSe routers as subscriber access routers No JUNOS routing platforms as core routers	Policy-based routing from the JUNOSe router
JUNOSe routers as subscriber access routers and JUNOS routing platforms as core routers	Mirroring from the JUNOS routing platform

For This Network Configuration

Use This Method to Forward Subscriber Traffic

JUNOSe routers as subscriber access routers

No JUNOS routing platforms as core routers

Policy-based routing from the JUNOSe router

JUNOSe routers as subscriber access routers

and

JUNOS routing platforms as core routers

Mirroring from the JUNOS routing platform

Note: Use mirroring from JUNOS routing platform(s) if you are sure that most, or all, of the subscriber traffic traverses those routers. When you mirror traffic to IDP, IDP monitors only the subscriber traffic that traverses a JUNOS routing platform.

For policy-based routing from JUNOSe routers, a service is activated on subscriber interfaces for each subscriber IP address, and on each core interface. For mirroring on JUNOS routing platforms, a service is activated only one time for a router or for a set of routers. If your configuration includes a JUNOS routing platform, we recommend that you use mirroring to direct subscriber traffic to IDP.

[Contents] [Prev] [Next] [Index] [Report an Error]