Sequence Of Events - Juniper E320 Configuration Manual

!

Sequence of Events

Figure 10 on page 167
RADIUS-based mirroring. The tables after the figure describe the events indicated
by the numbers and letters in the figure.
configuration process;
mirroring operation that is initiated when the user logs on; and
page 168
in.
Figure 10: RADIUS-Based Packet Mirroring
To create a RADIUS-based packet mirroring environment, you must complete the
processes listed in
Table 30: Setting Up the RADIUS-Based Packet Mirroring Environment
Process Description
A
B
C
Table 31
place when a user starts a new session.
If you are mirroring an IP session, the packet mirroring operation is enabled or
disabled on the MLPPP bundle as a whole. We recommend that you use the
Account-Session-ID RADIUS attribute rather than the User-Name attribute as
the trigger. Using the Account-Session-ID attribute is more efficient because the
JUNOSe software creates one secure policy that packet mirroring uses for all
links in the MLPPP bundle. If you use the User-Name attribute, a secure policy is
created for the first link, then removed and re-created for every other link.
shows the sequence of events that take place during
Table 31 on page 168
describes the flow of traffic when mirroring a user who is already logged
Requesting authority
A
ISP administration
B
2
RADIUS
server
Mirrored user
Table 30.
The authorized individual requests packet mirroring of the user's traffic and configures
the analyzer device to receive mirrored traffic.
The ISP administration configures VSAs in the user's RADIUS record.
The E-series router administrator configures RADIUS server information and the
analyzer port connection to the analyzer device.
indicates the sequence of steps for a packet mirroring operation that takes
Table 30 on page 167
describes the flow of traffic during a
5
E-series router
4
Analyzer
C
interface
Mirrored
3
interface
1
Configuring RADIUS-Based Mirroring
Chapter 6: Packet Mirroring
describes the
Table 32 on
Analyzer device
Destination
! 167