TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Verifying Configuration and Status of Dynamic Subscribers and Associated Sessions, Services, and Firewall Filters

Purpose

Verify configuration and status of dynamic subscribers, sessions, services, and firewall filters.

You can display information about subscribers in different ways, depending on the options you use with the show subscriber command. You can use details from one set of output with another command to display more detailed information of interest.

Action

To display basic information for all subscribers:

user@host> show subscribers

Interface IP Address/VLAN ID User Name LS:RI
demux0.1073741824 0x8100.1500 0x8100.2900 test1@test.com default:testnet
demux0.1073741825 0x8100.1500 0x8100.2901 test1@test.com default:testnet
demux0.1073741826 0x8100.1500 0x8100.2902 test1@test.com default:testnet
demux0.1073741827 0x8100.1500 0x8100.2903 test1@test.com default:testnet
demux0.1073741826 172.16.200.6 test1@test.com default:testnet
demux0.1073741827 172.16.200.7 test1@test.com default:testnet
demux0.1073741824 172.16.200.8 test1@test.com default:testnet
demux0.1073741825 172.16.200.9 test1@test.com default:testnet
demux0.1073741828 0x8100.1500 0x8100.2910 test1@test.com default:default
demux0.1073741828 20.20.0.2 test1@test.com default:default

To display more detailed information about a particular subscriber interface:

user@host> show subscribers interface demux0.1073741826 extensive

Type: VLAN
User Name: test1@test.com
Logical System: default
Routing Instance: testnet
Interface: demux0.1073741826
Interface type: Dynamic
Dynamic Profile Name: profile-vdemux-relay-23qos
MAC Address: 00:00:6e:56:01:04
State: Active
Radius Accounting ID: 12
Session ID: 12
Stacked VLAN Id: 0x8100.1500
VLAN Id: 0x8100.2902
Login Time: 2011-10-20 16:21:59 EST

Type: DHCP
User Name: test1@test.com
IP Address: 172.16.200.6
IP Netmask: 255.255.255.0
Logical System: default
Routing Instance: testnet
Interface: demux0.1073741826
Interface type: Static
MAC Address: 00:00:6e:56:01:04
State: Active
Radius Accounting ID: 21
Session ID: 21
Login Time: 2011-10-20 16:24:33 EST
Service Sessions: 2

Service Session ID: 25
Service Session Name: SUB-QOS
State: Active

Service Session ID: 26
Service Session Name: service-cb-content
State: Active
IPv4 Input Filter Name: content-cb-in-demux0.1073741826-in
IPv4 Output Filter Name: content-cb-out-demux0.1073741826-out

To display traffic information for firewall filters.

user@host> show firewall

...
Filter: content-cb-in-demux0.1073741826-in 
Counters:
Name 				Bytes 	Packets
__junos-dyn-service-counter 	84336      1004

Filter: content-cb-out-demux0.1073741826-out 
Counters:
Name 				Bytes   Packets
__junos-dyn-service-counter 	    0	      0
...

Instead of issuing successive commands to track the details for one subscriber interface, you can choose to display detailed information for all subscribers. However, the more subscribers you have, the more tedious it becomes to look through all the results for particular items of interest.

To display detailed information for all subscribers:
user@host> show subscribers detail
user@host> show subscribers extensive

Meaning

The output examples in this section show increasingly detailed information about dynamically created subscriber interfaces, including how many there are, what they are, and their characteristics; how many service sessions are active and what they are; whether firewall filters are attached to the sessions and what those filters are; and how much, if any, traffic is being filtered.

In the sample output shown here, the show subscriber command lists all the subscriber logical interfaces, including demux0.1073741826. You then display details about that interface and its associated subscribers with the show subscribers interface demux0.1073741826 extensive command. The Service Session Name fields for service sessions 25 and 26 in that output show two services are active on the interface, SUB-QOS and service-cb-content. The IPv4 Input Filter Name and the IPv4 Output Filter Name fields show that two filters have been applied to the service-cb-content session: content-cb-in-demux0.1073741826-in and content-cb-out-demux0.1073741826-out. You then use the show firewalls command to list the filters and see how much, if any, traffic is being filtered.