To Next Page

To Previous Page

JUNOSe 7.2.x Policy Management Configuration Guide

162 ! Configuring CLI-Based Packet Mirroring

! Example

host1(config)#mirror acct-session-id atm 2/1.2:0.42:0001048579 ip

secure-policy-list securePolicyIp4

! Use the no version to disable packet mirroring and remove the trigger

configuration that is based on the subscriber’s Acct-Session-ID.

mirror analyzer-ip-address

! Use to configure the mirror action for a classifier group in a secure IP or L2TP

policy list.

! This command is visible only to authorized users—the mirror-enable

command must be enabled prior to using this command.

! Use the analyzer-ip-address keyword to specify the IP address of the analyzer

device.

! Use the analyzer-virtual-router keyword to specify the name of the virtual

router on which the analyzer device is configured.

! Use the analyzer-udp-port keyword to specify that the mirror header is

inserted on all packets. When this keyword is not used, the mirror header is not

inserted on the mirrored packets. See Understanding the Prepended Header on

page 174 for a description of the mirror header.

! Use the mirror-identifier and session-identifier keywords to specify optional

values.

! Example

host1(config)#secure ip policy-list securePolicy2

host1(config-policy-list)#classifier-group *

host1(config-policy-list-classifier-group)#mirror analyzer-ip-address

192.168.103.25 analyzer-virtual-router vrWest6 analyzer-udp-port 6600

mirror-identifier 1 session-identifier 2

! Use the no version to disable the mirror rule.

mirror calling-station-id

! Use to configure a packet mirroring session that is based on the

Calling-Station-ID attribute (RADIUS attribute 31) associated with an IP

subscriber, and to specify the secure policy to attach to the subscriber’s

interface.

! This command is visible only to authorized users—the mirror-enable

command must be enabled prior to using this command.

NOTE: You must include the analyzer-udp-port keyword in L2TP mirror rules; the

intercept header is required for L2TP packet mirroring.

Juniper E Series Configuration Guide

Other manuals for Juniper E Series