mirror

Syntax

To mirror a specified trigger type:

mirror triggerType [hex] triggerValue { ip | ipv6 | l2tp } secure-policy-list policyName

no mirror triggerType [hex] triggerValue { ip | ipv6 | l2tp }

To mirror the agent-circuit-id or agent-remote-id trigger types, when the hex variant is used:

mirror triggerType hex triggerValue { ip | ipv6 | l2tp } secure-policy-list policyName

no mirror triggerType hex triggerValue { ip | ipv6 | l2tp }

To mirror the dhcp-option-82 trigger type:

mirror dhcp-option-82 agent-circuit-id triggerValue1 agent-remote-id triggerValue2 ip secure-policy-list policyName

no mirror dhcp-option-82 agent-circuit-id triggerValue1 agent-remote-id triggerValue2 ip

To mirror the dhcp-option-82 trigger type, when the hex variant is used:

mirror dhcp-option-82 hex triggerValue ip secure-policy-list policyName

no mirror dhcp-option-82 hex triggerValue ip

Release Information

Command introduced before JunosE Release 7.1.0.
nas-port-id keyword added in JunosE Release 7.1.0.

IPv6 support added in JunosE Release 10.1.0.

hex keyword added in JunosE Release 11.1.0.

Description

Enables packet mirroring based on the specified trigger and specifies the secure policy to attach to the subscriber's interface. The no version disables packet mirroring for the subscriber and removes the trigger configuration.

Note: The hex variant is applicable only for agent-circuit-id, agent-remote-id, and dhcp-option-82 trigger types. If the hex variant is used then the triggerValue must be a hexadecimal number.

Options

• triggerType—One of the following RADIUS attributes
  • acct-session-id—Acct-Session-Id, RADIUS attribute [44]
  • agent-circuit-id—Agent Circuit ID, RADIUS attribute [26–1], Vendor ID 3561
  • agent-remote-id—Agent Remote ID, RADIUS attribute [26–2], Vendor ID 3561
  • calling-station-id—Calling-Station-Id, RADIUS attribute [31]
  • dhcp-option-82—DHCP Option 82, RADIUS attribute [26–159], Vendor ID 4874
  • ip-address—Framed-IP-Address, RADIUS attribute [8]; associated with the virtual router where the command is issued, RADIUS VSA [26-1]
  • nas-port-id—NAS-Port-Id, RADIUS attribute [87]
  • username—User-Name, RADIUS attribute [1]; associated with the virtual router where the command is issued, RADIUS VSA [26-1]
• triggerValue—Value of the triggerType (the specified RADIUS attribute) that identifies the subscriber
• ip—Configures mirroring for an IP subscriber
• ipv6—Configures mirroring for an IPv6 subscriber
• l2tp—Configures mirroring for an L2TP subscriber
• policyName—Secure policy to attach to the subscriber's interface

Mode

Global Configuration