Chapter 12 Configuring Radius-Based Mirroring - Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual

Chapter 12
Configuring RADIUS-Based Mirroring
RADIUS-Based Mirroring Overview
Packet mirroring enables you to send a copy of a packet to an external host for
analysis. Packet mirroring has many uses, including traffic debugging and
troubleshooting user networking problems.
This chapter contains the following sections:
RADIUS-Based Mirroring Overview on page 239
RADIUS Attributes Used for Packet Mirroring on page 240
RADIUS-Based Packet Mirroring Dynamically Created Secure Policies on page 241
RADIUS-Based Packet Mirroring MLPPP Sessions on page 241
RADIUS-Based Mirroring Sequence of Events on page 242
Configuring RADIUS-Based Mirroring on page 243
Configuring Router to Start Mirroring When User Logs On on page 245
Configuring Router to Mirror Users Already Logged In on page 245
RADIUS-based packet mirroring enables you to mirror traffic related to a specific
user, without regard to how often the user logs in or out, or which E Series router or
interface the user uses. RADIUS-based mirroring is particularly appropriate for large
networks, because you can use a single RADIUS server to provision mirroring on
multiple E Series routers in a service provider's network. RADIUS-based mirroring
is useful when debugging network problems related to mobile users, who do not
always log in to a particular router.
You configure RADIUS-based mirroring independent of the actual mirroring
session you can configure the mirroring parameters at any time. RADIUS-based
mirroring uses RADIUS and VSAs, rather than CLI commands, to specify the user
whose traffic is to be mirrored. The VSAs specify attributes that are carried in
Access-Accept messages and change-of-authorization messages from the RADIUS
dynamic-request server to the E Series router.
NOTE: You cannot use RADIUS-based packet mirroring to mirror static interfaces,
which might not be authenticated through RADIUS. To mirror static interfaces, you
must use CLI-based mirroring.
RADIUS-Based Mirroring Overview
239