LI service mirroring

LI target traffic

The LI target traffic is replicated by a service mirror that uses subscriber information as the match criteria. The LI service mirroring has a higher priority than non-LI mirroring. The LI service mirroring must be configured by an LI user with LI privileges and is hidden from users without LI permissions.

LI mirror sources

Only one mirror source, which can contain one or many LI source entries, can be associated with one mirror destination service. LI takes priority over debug mirror sources.

In the configuration of an LI source, when an LI user specifies that an entry must be used as an LI entry, it is hidden from all non-LI users.

LI filter policies

LI filter policies are used to filter out traffic to non-LI users for LI mirror services; these filters can only be viewed and configured by LI users.

Both non-LI filter entries and special purpose LI filter entries can be referenced in an LI mirror source. LI filters are associated with non-LI filters, and entries created in the LI filters are inserted into the associated non-LI filter before the filter is applied. A LI filter block reservation can be configured to reserve a range of entries in the non-LI filter into which the LI entries are inserted. See To configure a Block Reservation policy for more information.

LI filter policies include:

If a filter entry is associated with an LI source, the filter and the filter entry cannot be modified or deleted. unless the LI filter lock is configured. The filter lock configuration controls the behaviour of filters when they are used for LI. See To configure the LI filter lock for more information.

LI for NAT

LI for NAT mirrors the traffic of configured subscribers to a mirror-destination. All traffic for the specified subscriber, including traffic associated with static port forwarding, is mirrored. See To configure LI on a specific NAT subscriber for more information.