Configuring Radius-Based Mirroring; Radius Attributes Used For Packet Mirroring - Juniper E320 Configuration Manual

Configuring RADIUS-Based Mirroring

RADIUS-based packet mirroring enables you to mirror traffic related to a specific
user, without regard to how often the user logs on or off, or which E-series router or
interface the user uses. RADIUS-based mirroring is particularly appropriate for large
networks, because you can use a single RADIUS server to provision mirroring on
multiple E-series routers in a service provider's network. RADIUS-based mirroring is
useful when debugging network problems related to mobile users, who do not
always log on to a particular router.
You configure RADIUS-based mirroring independent of the actual mirroring
session—you can configure the mirroring parameters at any time. RADIUS-based
mirroring uses RADIUS and VSAs, rather than CLI commands, to specify the user
whose traffic is to be mirrored. The VSAs specify attributes that are carried in
Access-Accept messages and change-of-authorization messages from the RADIUS
dynamic-request server to the E-series router.
NOTE:
interfaces, which might not be authenticated through RADIUS. To mirror static
interfaces, you must use CLI-based mirroring.
NOTE:
the LAC uses domain maps to create tunnels or if authentication is disabled for
both LAC and PPP termination.

RADIUS Attributes Used for Packet Mirroring

Table 28
identify a user whose traffic is to be mirrored. A packet mirroring session starts
when the router receives a RADIUS packet that contains mirroring attribute and
then applies the mirroring configuration to the appropriate interface. For example,
packet mirroring starts when a logon request occurs that contains a specified
User-Name attribute.
The triggers also enable RADIUS-initiated mirroring to start when the user is already
logged in.
Table 28: RADIUS Attributes Used as Packet Mirroring Triggers
Standard Number
[1]
[8]
[26-1]
[31]
[44]
[87]
You cannot use RADIUS-initiated packet mirroring to mirror static
RADIUS-based packet mirroring is not supported on LAC L2TP sessions if
lists the packet mirroring triggers. The triggers are RADIUS attributes that
Attribute Name
User-Name
Framed-IP-Address
Virtual-Router-Name
Calling-Station-ID
Acct-Session-ID
Nas-Port-ID
Chapter 6: Packet Mirroring
Configuring RADIUS-Based Mirroring
! 165