Juniper E320 User Manual

Logging Packet Mirroring Information ! 183
Chapter 6: Packet Mirroring
Configuring SNMP Secure Packet Mirroring Traps
To configure SNMP secure traps support, you perform the following tasks on your
E-series router:
1. Enable packet mirroring support.
2. Configure the packet mirroring application to generate traps.
3. (Optional) Verify the packet mirroring trap configuration.
4. (Optional) Configure the SNMP server to support secure logs.
5. Configure the SNMP server to generate packet mirroring traps.
6. Configure the SNMPv3 user for whom packet mirroring traps are generated.
7. Configure the SNMP server to report packet mirroring traps to a remote host.
8. (Optional) Verify the SNMP server’s packet mirroring configuration.
The following example illustrates the procedure to configure SNMP secure packet
mirroring traps support:
host1#mirror-enable
host1#configure terminal
host1(config)#mirror trap-enable
host1(config)#run show mirror trap
Traps are enabled
host1(config)#snmp-server secure-log
host1(config)#snmp-server user fredMirrorUser group mirror authentication md5
fred-md5password privacy des fred-despassword
host1(config)#snmp-server enable traps packetMirror trapFilters notice
host1(config)#snmp-server host 192.168.57.103 version 3 fredMirrorUser
cliSecurityAlert packetMirror trapFilters notice
host1(config)#run show snmp trap
Enabled Categories: CliSecurity, PacketMirror, Sonet
SNMP authentication failure trap is disabled
Trap Source: FastEthernet 6/0, Trap Source Address:192.168.120.78
Trap Proxy: enabled
Global Trap Severity Level: 6 - informational
Address Security String Ver Port Trap Categories
--------------- -------------------------------- --- ----- ----------------
192.168.1.1 host1 v1 162 Cli
192.168.57.103 fredMirrorUser v3 162 CliPacketMirror
192.168.57.162 host2 v3 162 Sonet
Address TrapSeverityFilter Ping Maximum Queue Queue Full
TimeOut QueueSize DrainRate discrd methd
--------------- ------------------ ------- --------- --------- -------------
192.168.1.1 5 - notice 1 32 0 dropLastIn
192.168.57.103 5 - notice 1 32 0 dropLastIn
192.168.57.162 2 - critical 1 32 0 dropLastIn

Juniper E320 Specifications

General

Rack Units	1U
Operating System	JUNOS
Product Type	Router
Routing Protocols	BGP, OSPF, IS-IS, RIP
Memory	4 GB
Redundancy	Power supply
Power Supply	AC

Summary

Chapter 2 Creating Policies

Creating Classifier Control Lists

Explains how to create Classifier Control Lists (CLACLs) to define packet flows.

Creating Policy Lists

Details the process of creating policy lists, which contain rules for policy actions.

Creating Classifier Groups and Policy Rules

Describes how to create classifier groups and policy rules within a policy list.

Merging Policies

Applying Policy Lists to Interfaces and Profiles

Details how to assign policy lists to interfaces and profiles for traffic management.

Chapter 3 Creating Rate-Limit Profiles

Rate Limits

Hierarchical Rate Limits

One-Rate Rate-Limit Profiles

Details how to create and configure one-rate rate-limit profiles for TCP applications.

Two-Rate Rate-Limits

Explains how to create two-rate rate-limit profiles for tiered rate-limit services.

Chapter 4 Policy Resources

FPGA Hardware Classifiers

Describes FPGA hardware classifiers used for packet classification with hardware assist.

CAM Hardware Classifiers

Software Classifiers

Chapter 5 Monitoring Policy Management

Overview

Setting a Statistics Baseline

Policy Management show Commands

Lists and describes the show commands used to display policy statistics and configurations.

Packet Flow Monitoring

Explains how to use the policy log rule to capture and monitor packet flows.

Chapter 6 Packet Mirroring

Overview

Introduces packet mirroring for traffic analysis, debugging, and troubleshooting.

Configuring CLI-Based Packet Mirroring

Explains how to use CLI commands to configure and manage packet mirroring.

Configuring RADIUS-Based Mirroring

Details how to configure RADIUS-based mirroring for specific users and sessions.

Conflicts Between CLI-Based and RADIUS-Based Configurations

Resolving and Tracking the Analyzer Device’s Address

Optimizing Packet Mirroring Performance

Logging Packet Mirroring Information

Monitoring Packet Mirroring