Example: Configuring Cli-Based User-Specific Mirroring - Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual

4.
5.

Example: Configuring CLI-Based User-Specific Mirroring

This example shows the configuration of a CLI-based packet mirroring session for
subscribers. . The mirroring session replicates all traffic associated with each user,
and then sends the replicated traffic to the analyzer device.
1.
2.
3.
Attach the secure policy to the interfaces whose traffic you want to mirror. This
example mirrors input traffic at interface ATM 5/0.1 and output traffic at interface
ATM 5/0.2.
host1:vr1(config)#interface atm 5/0.1
host1:vr1(config-if)#ip policy secure-input secureIpPolicy1
host1:vr1(config)#interface atm 5/0.2
host1:vr1(config-if)#ip policy secure-output secureIpPolicy1
Verify the secure policy configuration.
host1# show secure policy-list name secureIpPolicy1
Secure IP Policy secureIpPolicy1
Administrative state: enable
Reference count:
Classifier control list: secClassA
mirror analyzer-ip-address 192.168.125.29 analyzer-virtual-router vr1
Referenced by interface(s):
ATM5/0.1 secure-input policy, virtual-router vr1
ATM5/0.2 secure-output policy, virtual-router vr1
Enable the visibility and use of the packet mirroring CLI commands.
host1#mirror-enable
Create the analyzer interface and the route to the analyzer device.
For L2TP subscribers:
host1(config)# interface tunnel ipsec:mirror3 transport-virtual-router default
host1(config-if)#ip analyzer
host1(config-if)#exit
host1(config)#ip route 192.168.99.2 255.255.255.255 tunnel ipsec:mirror3
For DHCP and PPP subscribers:
host1(config)# interface atm 4/0.1
host1(config-if)#ip address 19.0.0.2 255.255.255.0
host1(config-if)#ip analyzer
host1(config-if)#exit
host1(config)#ip route 19.0.0.2 255.255.255.255 101.101.101.2
Configure the secure policy that forwards the mirrored traffic to the analyzer
device. The classifier-group command uses the default classifier list, which is
indicated by the asterisk character (*).
For L2TP subscribers:
Example: Configuring CLI-Based User-Specific Mirroring
Chapter 11: Configuring CLI-Based Packet Mirroring
Policy Table
------ -----
2
235