[Contents] [Prev] [Next] [Index] [Report an Error]

Classifying Interfaces for IDP Integration

You configure additional entries in the interface classification script to support services for IDP integration.

To add entries to an interface classification script to support IDP integration:

For core interfaces on JUNOSe routers, add an entry to host aggregate service on JUNOSe routers. identify which interfaces to assign a core routing fragment service by specifying an alias for the group of interfaces.
For the forwarding interface on a JUNOS routing platform, add an entry for the default policy for forwarding interfaces. The policy must forward all traffic; otherwise, only traffic mirrored to IDP is forwarded.

To view the sample interface classifications referenced in this section, see the interface classification for the IDP<routername> routers listed under o=Network, o=umc in the sample data.

Example: Interface Classification for Core Interfaces on a JUNOSe Router

You identify which interfaces to assign a core routing fragment service by specifying an alias for the group of interfaces. For example:


            
               # ifAlias=="core" Add a line similar to this one if policy-based
                  routing is being used.
               
               # This alias needs to be the same as the one defined in
                  the subscriber classification script.
               
               # Could add some further rules to manage DHCP subscribers.

You do not define a classification for the router interface. The SAE automatically creates a router interface and a subscriber session for it when the COPS-PR or COPS XDR router drivers are in use.

Example: Interface Classification for the Forwarding Interface on a JUNOS Routing Platform

For JUNOS routing platforms, the default policy for forwarding interfaces must forward all traffic; otherwise, only traffic mirrored to IDP is forwarded. For example:


            
               policyGroupName=forwardIntfDefault,ou=idp,o=Policies,o=UMC
               # manage only forwarding interface on JUNOS routers
               interfaceName=="FORWARDING_INTERFACE"

For general information about classifying interfaces, see Overview of Classification Scripts .

[Contents] [Prev] [Next] [Index] [Report an Error]