TechLibrary

DTCP-Initiated Secure Policy Traffic Mirroring
DTCP-Initiated Subscriber Secure Policy Overview Subscriber Secure Policy Traffic Mirroring Architecture Using DTCP DTCP-Initiated Traffic Mirroring Interfaces DTCP-Initiated Traffic Mirroring Process Subscriber Secure Policy Support for IPv4 Multicast Traffic DTCP Messages Used for Subscriber Secure Policy DTCP Traffic Mirroring Triggers Packet Header for Mirrored Traffic Sent to Mediation Device Subscriber Secure Policy and L2TP LNS Subscribers

DTCP-Initiated Secure Policy Traffic Mirroring

DTCP-Initiated Subscriber Secure Policy Overview

Subscriber Secure Policy Traffic Mirroring Architecture Using DTCP

DTCP-Initiated Traffic Mirroring Interfaces

DTCP-Initiated Traffic Mirroring Process

Subscriber Secure Policy Support for IPv4 Multicast Traffic

DTCP Messages Used for Subscriber Secure Policy

DTCP Traffic Mirroring Triggers

Packet Header for Mirrored Traffic Sent to Mediation Device

Subscriber Secure Policy and L2TP LNS Subscribers

Configuration Overview and Guidelines
Configuring DTCP-Initiated Subscriber Secure Policy Mirroring Overview Guidelines for Configuring Subscriber Secure Policy Mirroring

Configuration Overview and Guidelines

Configuring DTCP-Initiated Subscriber Secure Policy Mirroring Overview

Guidelines for Configuring Subscriber Secure Policy Mirroring

Configuration Tasks
Configuring Tunnel Interfaces for Subscriber Secure Policy Mirroring Configuring Support for Subscriber Secure Policy Mirroring Configuring the Mediation Device as a User on the Router Configuring a DTCP-over-SSH Connection to the Mediation Device Example: Configuring Traffic That Is Mirrored Using DTCP-Initiated Subscriber Secure Policy Configuring the Mediation Device to Provision Traffic Mirroring Enabling Subscriber Secure Policy Mirroring for IPv4 Multicast Traffic

Configuration Tasks

Configuring Tunnel Interfaces for Subscriber Secure Policy Mirroring

Configuring Support for Subscriber Secure Policy Mirroring

Configuring the Mediation Device as a User on the Router

Configuring a DTCP-over-SSH Connection to the Mediation Device

Example: Configuring Traffic That Is Mirrored Using DTCP-Initiated Subscriber Secure Policy

Configuring the Mediation Device to Provision Traffic Mirroring

Enabling Subscriber Secure Policy Mirroring for IPv4 Multicast Traffic

DTCP Messages Sent From Mediation Device
ADD DTCP DELETE DTCP DISABLE DTCP ENABLE DTCP LIST DTCP

DTCP Messages Sent From Mediation Device

Examples
Example: Using DTCP Messages to Trigger, Verify, and Disable Traffic Mirroring for Subscribers

Configuration Statements
[edit services radius-flow-tap] Hierarchy Level apply-groups apply-groups-except authentication authentication-order authentication-server bandwidth class (Login) class (User) connection-limit destination-address destination-port drop-policy dscp flow-tap-dtcp forwarding-class fpc from interfaces inet inet6 login multicast-interception permissions policy profile protocol radius radius-flow-tap radius-server rate-limit source-address source-ipv4-address source-port ssh tunnel-services uid user

Configuration Statements

[edit services radius-flow-tap] Hierarchy Level

authentication-server

multicast-interception

Reporting Intercept Related Information for Subscriber Secure Policy
Intercept-Related Events Transmitted to the Mediation Device SNMP Traps for Subscriber Secure Policy LAES Compliance Configuring SNMPv3 Traps for Subscriber Secure Policy Mirroring

Reporting Intercept Related Information for Subscriber Secure Policy

SNMP Traps for Subscriber Secure Policy LAES Compliance

Configuring SNMPv3 Traps for Subscriber Secure Policy Mirroring

Terminating Subscriber Secure Policy Traffic Mirroring Sessions
Terminating DTCP-Initiated Subscriber Traffic Mirroring Sessions

Example
Example: SNMPv3 Traps Configuration for Subscriber Secure Policy Mirroring

Troubleshooting
Acquiring Troubleshooting Information
Collecting Subscriber Access Logs Before Contacting Juniper Technical Support
Knowledge Base
http://kb.juniper.net/

Acquiring Troubleshooting Information
Collecting Subscriber Access Logs Before Contacting Juniper Technical Support

Knowledge Base
http://kb.juniper.net/

Supported Platforms

MX Series

Downloads

Download this page: DTCP-Initiated Subscriber Secure Policy