To Next Page

To Previous Page

Configuring RADIUS-Based Mirroring ! 173

Chapter 6: Packet Mirroring

mirror nas-port-id

! Use to configure a packet mirroring session that is based on the NAS Port ID

attribute (RADIUS attribute 87) associated with an IP subscriber, and to specify

the secure policy that is attached to the subscriber’s interface.

! This command is visible only to authorized users—the mirror-enable

command must be enabled prior to using this command.

! Use the ip keyword to specify an IP subscriber or the l2tp keyword for an L2TP

subscriber.

! Use one of the following formats to identify a subscriber for packet mirroring:

! atm slot / port .sub-interface : vpi.vci

! FastEthernet slot / port [ .sub-interface [ :vlan ] ]

! FastEthernet slot / port [ .sub-interface [ :sub-vlan-vlan ] ]

! GigabitEthernet slot / port [ .sub-interface [ :vlan ] ]

! GigabitEthernet slot / port [ .sub-interface [ :sub-vlan-vlan ] ]

! serial slot / port [ :sonetPath [ sonetTributary(x/x/x) [ /fractionalInterface ] ] ]

! ip :local ip :peer ip :local tid :peer tid :local sid :peer sid :call serial number

! Example

host1(config)#mirror nas-port-id atm 2/1.2:0.42 ip secure-policy-list

securePolicyIp

! Use the no version to disable packet mirroring and remove the trigger

configuration that is based on the subscriber’s Acct-Session-ID.

radius server

! Use to specify the IP address of the RADIUS server and enter RADIUS

configuration mode.

! The dynamic-request server is used during RADIUS-initiated mirroring of a user

who is already logged in.

! Example

host1(config)#radius dynamic-request server 192.168.5.3

host1(config-radius)#

! Use the no version to remove the RADIUS server.

udp-port

! Use to configure the UDP port that the router uses to communicate with the

RADIUS server and to receive change of authorization messages.

! Specify a port number in the range 1–65535.

! Example

host1(config)#radius dynamic-request server 192.168.5.3

host1(config-radius)#udp-port 1645

! Use the no version to set the port number to the default value, 1700.

Juniper E Series Configuration Guide

Other manuals for Juniper E Series