Configuring Radius-Based Mirroring; Radius-Based Mirroring Overview - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - POLICY MANAGEMENT CONFIGURATION GUIDE 2010-10-04 Configuration Manual

CHAPTER 12

Configuring RADIUS-Based Mirroring

RADIUS-Based Mirroring Overview

Copyright © 2010, Juniper Networks, Inc.
Packet mirroring enables you to send a copy of a packet to an external host for analysis.
Packet mirroring has many uses, including traffic debugging and troubleshooting user
networking problems.
This chapter contains the following sections:
RADIUS-Based Mirroring Overview on page 233
RADIUS Attributes Used for Packet Mirroring on page 234
RADIUS-Based Packet Mirroring Dynamically Created Secure Policies on page 235
RADIUS-Based Packet Mirroring MLPPP Sessions on page 235
RADIUS-Based Mirroring Sequence of Events on page 236
Configuring Router to Start Mirroring When User Logs On on page 237
Configuring Router to Mirror Users Already Logged In on page 238
RADIUS-based packet mirroring enables you to mirror traffic related to a specific user,
without regard to how often the user logs in or out, or which E Series router or interface
the user uses. RADIUS-based mirroring is particularly appropriate for large networks,
because you can use a single RADIUS server to provision mirroring on multiple E Series
routers in a service provider's network. RADIUS-based mirroring is useful when debugging
network problems related to mobile users, who do not always log in to a particular router.
You configure RADIUS-based mirroring independent of the actual mirroring session—you
can configure the mirroring parameters at any time. RADIUS-based mirroring uses RADIUS
and VSAs, rather than CLI commands, to specify the user whose traffic is to be mirrored.
The VSAs specify attributes that are carried in Access-Accept messages and
change-of-authorization messages from the RADIUS dynamic-request server to the
E Series router.
NOTE: You cannot use RADIUS-based packet mirroring to mirror static
interfaces, which might not be authenticated through RADIUS. To mirror
static interfaces, you must use CLI-based mirroring.
233