Monitoring PPP Interfaces

Purpose

Display information about the PPP interfaces, selectively. You can also filter the display for specific information such as interface type, data type, configured protocol, or interface state.

Note: You can filter the display for specific PPP interfaces on the basis of EAP, PAP, and CHAP protocols only if the data type category is set to statistics. If the data type category is set to keywords other than statistics or statistics is used with other data type categories, information of all PPP interfaces is displayed even though you have filtered the display on the basis of EAP, PAP, and CHAP protocols.

Note: When a parity error is detected in the user accounting statistics and the router is not enabled to perform actions after parity error detection, an error message is displayed for those accounting statistics (displayed as “Authentication Statistics” in the output) instead of the corrupted statistics details. For more information about the parity error check mechanism and system operations on detecting corruption, see Detection of Corruption in the Statistics FPGA and System Operations on Detecting Corruption.

Action

To display detailed information for a specific IP interface:

host1#show ppp interface gig 2/1/7.1.1 full
PPP interface GigabitEthernet 2/1/7.1.1 is up
Interface administrative status is open
Configured network protocol is IPCP
IPCP protocol configuration
   configured                     true
   administrative-status          open
   ip-address                     6.6.6.6
   dns-precedence                 local
   wins-precedence                local
   ipcp-netmask-option            disabled
   ipcp-lockout            disabled
   max-negotiations            30
   ipcp prompt-option dns         enabled
IPCP protocol status
   operational-status             up
IPCP negotiated options           local               peer
   ip-address                     11.1.1.1           11.1.1.2
   ip-address-mask                none                none
   primary-dns-address            none                none
   secondary-dns-address          none                none
   primary-wins-address           none                none
   secondary-wins-address         none                none
IPV6CP Protocol Configuration
   configured                     false
   administrative-status          open
   ipv6-interfaceId                     0.0.0.0
   max-negotiations            30
IPV6CP protocol status
   operational-status             not present
OSINLCP protocol configuration
   configured                     false
   administrative-status          open
OSINLCP protocol status
   operational-status             not present
  Interface statistics              in                   out
   packets                        0                       0
   octets                         14515                  11296
   errors                         0                       0
   discards                       0                       0 
   policed                        0                       0
LCP protocol configuration
   max-receive-unit               use lower layer
   authentication                 
   magic-number                   enabled
   magic-number-mismatch          reject 
   keepalive-timer                30 seconds
   restart-timer                  3 seconds
   max-terminate                  2
   max-configure                  10
   max-failure                    5
   passive-mode                   disabled
LCP protocol status
   link-status                    network
LCP negotiated options            local               peer
   max-receive-unit               1492                1492
   authentication                 none                chap
   magic-number                   0x3e51ca08          0x740bbf81
   accm                           none                none
   pfc                            none                none
   acfc                           none                none
LCP protocol statistics
   in-keepalive-requests          11
   out-keepalive-requests         11
   in-keepalive-replies           11
   out-keepalive-replies          11
   keepalive-failures             0
   max-renegotiation terminates   0
IP protocol statistics  
   max-renegotiation-terminates   0
IPv6 protocol statistics  
   max-renegotiation-terminates   0
Authentication configuration
   authenticate-retry             0
   authentication-router          ''
   aaa-profile          ''
Authentication status
   grant                          true
   session-timeout                none
   inactivity-timeout             none
   monitor—ingress-only           false
   accounting-timeout             none
   peer-ip-address                none
   peer-ip-address-mask           none
   peer-primary-dns-address       none
   peer-secondary-dns-address     none
   peer-primary-wins-address      none
   peer-secondary-wins-address    none
   peer-ipv6–interface-id         none
Authentication statistics
   up-time                        0 seconds
   in-octets                      0
   out-octets                     0
   in-packets                     0
   out-packets                    0
PAP protocol configuration
   request-timeout                20 seconds
CHAP protocol configuration
   name                           ''
   challenge-retry                10
   challenge-timeout              4 seconds
   minimum-challenge-length       16
   maximum-challenge-length       32
   minimum-rechallenge-timeout    0 seconds
   maximum-rechallenge-timeout    0 seconds
EAP Protocol Configuration
   request-retry                5
   request-timeout              3 seconds

To display detailed information for a specific IPv6 interface:

host1#show ppp interface fastEthernet 12/0.1.1 full
PPP interface FastEthernet 12/0.1.1 is lowerDown

Interface administrative status is open
Configured network protocol is IPV6CP
IPCP protocol configuration
   configured                     false
   administrative-status          open
   ip-address                     0.0.0.0
   dns-precedence                 local
   wins-precedence                local
   ipcp-netmask-option            disabled
   ipcp-lockout-option            enabled
   max-negotiations               10
IPCP protocol status
   operational-status             not present
IPV6CP protocol configuration
   configured                     true
   administrative-status          open
   ipv6-interfaceId               90:1a00:140:4b39
IPV6CP protocol status
   operational-status             down 
   terminate-reason               link down

OSINLCP protocol configuration
   configured                     false
   administrative-status          open
OSINLCP protocol status
   operational-status             not present
Interface statistics              in                   out
   packets                        0                    0
   octets                         1163                 706
   errors                         0                    0
   discards                       153482               0 
LCP protocol configuration
   max-receive-unit               use lower layer
   authentication                 none
   magic-number                   enabled
   magic-number-mismatch          reject 
   keepalive-timer                30 seconds
   restart-timer                  3 seconds
   max-terminate                  2
   max-configure                  10
   max-failure                    5
   passive-mode                   disabled
LCP protocol status
   link-status                    initial
LCP protocol statistics
   in-keepalive-requests          11
   out-keepalive-requests         11
   in-keepalive-replies           11
   out-keepalive-replies          11
   keepalive-failures             0
Authentication configuration
   authenticate-retry             0
   authentication-router          ''
   aaa-profile                    ''
Authentication status
   grant                          false
   terminate-reason               lower layer down
PAP protocol configuration
   request-timeout                20 seconds
CHAP protocol configuration
   name                           ''
   challenge-retry                10
   challenge-timeout              4 seconds
   minimum-challenge-length       16
   maximum-challenge-length       32
   minimum-rechallenge-timeout    0 seconds
   maximum-rechallenge-timeout    0 seconds

To display the reason for termination when the operational status of the interface is down:

host1#show ppp interface
PPP interface pos 0/1:1 is lowerDown
PPP interface pos 4/0:1 is lowerDown
PPP interface pos 12/1:1 is lowerDown
3 ppp interfaces found 
PPP interface serial 0/0:1/1 is Up 
PPP interface serial 0/0:1/2 is Down (administrative disable)

To display information about the PPP interface statistics for IPCP:

host1#show ppp interface fastEthernet 2/0.1 statistics ip
PPP interface FastEthernet 2/0.1 is up
LCP protocol statistics
   in-keepalive-requests          833
   out-keepalive-requests         830
   in-keepalive-replies           830
   out-keepalive-replies          833
   keepalive-failures             0
   max-renegotiation-terminates   10

Meaning

Table 22 lists the show ppp interface command output fields.

Table 22: show ppp interface Output Fields

Field Name

Field Description

inactivity-timeout

Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout.

monitor-ingress-only

Indicates whether the router monitors only ingress traffic for the configured idle (inactivity) timeout period; true (router monitors only ingress traffic) or false (router monitors both ingress traffic and egress traffic).

PPP interface

Interface type, interface specifier, and status (up, down, lowerDown, not present, passive, or tunnel). For more information about specifying the physical interface on which you want to configure PPP, see Interface Types and Specifiers in JunosE Command Reference Guide.

accounting-timeout

Accounting timeout in seconds; frequency of accounting updates to the authentication server

Interface alias

Alias or description of the PPP interface

Interface administrative status

Indicates whether the interface is administratively enabled (open), which means that the no ppp shutdown command is operational; or administratively disabled (closed), which means that the ppp shutdown command is operational.

Configured network protocol

Indicates the network protocol configured on the interface

Baseline status

Indicates whether a statistics baseline is set.

Interface statistics

PPP interface statistics:

  • packets—Number of packets received (in) or transmitted (out) on the interface
  • octets—Number of octets received (in) or transmitted (out) on the interface
  • errors—Number of errors received (in) or transmitted (out) on the interface
  • discards—Number of packets discarded on receipt (in) or discarded before they were transmitted (out); for more information about the discards counter, see Broadband Remote Access Support for PPP Overview
  • policed—Number of packets received (in) and marked as per the rates configured for the interface; for more information, see Broadband Remote Access Support for PPP Overview

IPCP protocol configuration

PPP IPCP configuration information:

  • configured—IPCP is configured on this interface (true or false)
  • administrative-status—IPCP administrative status (open or closed)
  • ip-address—Address to be used for negotiation of the local IP address option
  • dns-precedence—Used to resolve conflicts during negotiation of DNS addresses; “local” indicates that the local side takes precedence and the no ppp peer dns command is operative; “peer” indicates that the remote side takes precedence and the ppp peer dns command is operative
  • wins-precedence—Used to resolve conflicts during negotiation of WINS addresses; “local” indicates that the local side takes precedence and the no ppp peer wins command is operative; “peer” indicates that the remote side takes precedence and the ppp peer wins command is operative
  • ipcp-netmask-option—Controls negotiation of the IPCP netmask option; disabled = do not negotiate, enabled = negotiate
  • ipcp-lockout-option—Terminates an invalid subscriber entry and prevents additional IPCP negotiations (enabled or disabled)
  • max-negotiations—Maximum number of renegotiation attempts that the router accepts before terminating a PPP session
  • ipcp prompt-option dns—Prompts the CPE (Customer Premises Equipment) to negotiate the IPCP primary and secondary DNS options that are locally available with the broadband remote access server (enabled or disabled)

IPv6CP protocol configuration

PPP IPv6 configuration information:

  • configured—IPv6CP is configured on this interface (true or false)
  • administrative-status—IPv6CP administrative status (open or closed)
  • ipv6-interfaceId—Address to be used for negotiation of local IPv6 address option

IPCP protocol status

IPCP status:

  • operational-status—IPCP operational status (up, down, not present, or not present no resources)
  • terminate-reason—Reason for termination of IPCP service

IPv6CP protocol status

IPCPv6 status:

  • operational-status—IPv6CP operational status (up, down, not present, or not present no resources)
  • terminate-reason—Reason for termination of IPv6CP service

IPCP negotiated options

Shows the following negotiated addresses for the local and remote (peer) side of the link:

  • ip-address—IP address
  • ip-address-mask—IP address mask
  • primary-dns-address—Primary DNS address
  • secondary-dns-address—Secondary DNS address
  • primary-wins-address—Primary WINS address
  • secondary-wins-address—Secondary WINS address

Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

OSINLCP protocol configuration

OSINLCP configuration information:

  • configured—OSINLCP is configured on this interface (true or false)
  • administrative-status—OSINLCP administrative status (open or closed)

OSINLCP protocol status

OSINLCP status:

  • operational-status—OSINLCP operational status (up, down, not present, or not present no resources)
  • terminate-reason—Reason for termination of OSINLCP service

OSINLCP negotiated options

OSINLCP negotiated options:

  • npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link

Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

MPLSNLCP protocol configuration

MPLSNLCP configuration information:

  • configured—MPLSNLCP is configured on this interface (true or false)
  • administrative-status—MPLSNLCP administrative status (open or closed)

MPLSNLCP protocol status

MPLSNLCP protocol status

  • operational-status—MPLSNLCP operational status (up, down, not present, or not present no resources)
  • terminate-reason—Reason for termination of MPLSNLCP service

MPLSNLCP negotiated options

MPLSNLCP negotiated options:

  • npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link

Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

LCP protocol configuration

  • max-receive-unit—Controls negotiation of the local MRU option; “use lower layer” indicates that the MRU of the layer below PPP defines the MRU to be negotiated; “disabled” indicates that the MRU option is not to be negotiated. A numeric value indicates the MRU value to be negotiated
  • authentication—Controls the negotiation of the local authentication option; “none” indicates do not negotiate; “chap” indicates negotiate chap; “pap” indicates negotiate pap; “chap/pap” indicates negotiate chap and, if it is rejected, negotiate pap; “pap/chap” indicates negotiate pap and, if it is rejected, negotiate chap.
  • magic-number—Controls whether the local magic number is negotiated: enabled (negotiate), or disabled (do not negotiate)
  • magic-number-mismatch—Indicates whether the router is configured to ignore the LCP peer magic number and retain the PPP connection when the peer has not negotiated an LCP magic number: ignore (ignore the peer magic number mismatch and retain the PPP connection), or reject (router terminates the PPP connection if it detects a peer magic number mismatch)
  • keepalive-timer—Rate of LCP echo requests
  • restart-timer—Retry frequency during LCP, IPCP, OSINLCP, and MPLS negotiations
  • max-terminate—Maximum number of terminate requests
  • max-configure—Maximum number of configure requests
  • max-failure—Maximum number of configure NAKs
  • passive-mode—Forces a PPP interface into a passive mode before LCP negotiation begins; “disabled” means do not wait for peer; “enabled” means wait for peer to initiate negotiation

LCP protocol status

  • link-status—Overall status of LCP negotiations, including the following states: Initial (idle), Starting (ready to negotiate), Authenticate (authenticating), and Network (LCP is up)

LCP negotiated options

Shows the following negotiated values for the local and remote (peer) side of the link:

  • max-receive unit—Maximum receive unit, in octets
  • authentication—Authentication method (none, pap, or chap)
  • magic-number—Magic number
  • pfc—PFC (none or enabled)
  • acfc—ACFC (none or enabled)

Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

LCP Endpoint Discriminator options

  • local discriminator class—Endpoint discriminator type, format, and address space for the local and remote (peer) router
  • local endpoint discriminator—Endpoint discriminator value for the local router within the specified class
  • peer discriminator class—Endpoint discriminator type, format, and address space for the remote router
  • peer endpoint discriminator—Endpoint discriminator value for the remote router within the specified class

LCP protocol statistics

Shows the following statistics for the life of the interface (since system boot or interface creation, whichever is later):

  • in-keepalive-requests—Number of received keepalive requests (LCP Echo Requests)
  • out-keepalive-requests—Number of transmitted keepalive requests
  • in-keepalive-replies—Number of received keepalive replies
  • out-keepalive-replies—Number of transmitted keepalive replies
  • keepalive-failures—Number of keepalive failures reported on the interface
  • max-renegotiation-terminates—Number of renegotiation terminations for the PPP session

IP protocol statistics

  • max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.

IPv6 protocol statistics

  • max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.

Authentication configuration

  • authenticate-retry—Maximum number of authentication retries configured using the ppp max-bad-auth command
  • authentication-router—Virtual router for the authentication virtual router context

Authentication status

  • grant—Authentication status (true = access granted, false = access not granted)
  • session-timeout—Session timeout, in seconds; session is terminated at expiration
  • inactivity-timeout—Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout
  • accounting-timeout—Accounting timeout in seconds; frequency of accounting updates to the authentication server
  • peer-ip-address—IP address to be used in negotiation of peer IP address
  • peer-ip-address-mask—IP address mask to be used in negotiation of the peer IP address mask
  • peer-primary-dns-address—IP address to be used in negotiation of the peer primary DNS address
  • peer-secondary-dns-address—IP address to be used in negotiation of the peer secondary DNS address
  • peer-primary-wins-address—IP address to be used in negotiation of the peer primary WINS address
  • peer-secondary-wins-address—IP address to be used in negotiation of the peer secondary WINS address

    Note: The command displays the authentication status as “none” for any parameters not provided by the authentication server.

  • peer-ipv6–interface-id—IPv6 interface Identifier of the peer returned in an authentication grant from the RADIUS server

Authentication statistics

Shows statistics accumulated since the session was established

  • up-time—Time the session has been up, in seconds
  • in-octets—Number of octets received on the interface
  • out-octets—Number of octets transmitted out the interface
  • in-packets—Number of packets received on the interface
  • out-packets—Number of packets transmitted out the interface

PAP protocol configuration

  • request-timeout—Maximum time, in seconds, to wait for an authentication request packet

CHAP protocol configuration

  • name—Name to be used in challenge packets
  • challenge-retry—Maximum number of challenge packets to be transmitted
  • challenge-timeout—Frequency, in seconds, of challenge packet retransmission
  • minimum-challenge-length—Minimum length of challenge packet
  • maximum-challenge-length—Maximum length of challenge packet; the size of the challenge used for each challenge packet is a random number between minimum-challenge-length and maximum-challenge-length
  • minimum-rechallenge-timeout—Minimum time, in seconds, before initiating a rechallenge to peer
  • maximum-rechallenge-timeout—Maximum time, in seconds, before initiating a rechallenge to peer; the actual time before a rechallenge is a random number between minimum-rechallenge-timeout and maximum-rechallenge-timeout

EAP protocol configuration

  • request-retry—Maximum number of authentication requests retried before returning a deny
  • request-timeout—Maximum time, in seconds, to wait for an authentication request packet

Operational Status

If the operational status is down for a specific interface, one of the following termination reasons may appear within parentheses:

  • administrative disable—Interface has been administratively disabled, which means that the ppp shutdown command is in effect. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  • administrative logout—Interface has been administratively logged out, which means that the logout subscriber command has been issued. This applies to an interface only.
  • no upper interface—No upper layer is configured. This applies to an interface only.
  • authentication failure—Authentication is required and has failed. This applies to an interface only.
  • no local xxx—local option, xxx, is required and could not be negotiated (for example, IP address). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  • no peer xxx—Remote peer option, xxx, is required and could not be negotiated (for example, authentication). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  • keepalive drop count exceeded—Keepalive drop count has been exceeded. This applies to an interface only.
  • session timeout—Session timeout period has expired. This applies to an interface only.
  • inactivity timeout—Inactivity timeout period has expired. This applies to an interface only.
  • address lease expired—Address lease period has expired. This applies to an interface only.
  • not configured—Protocol is not configured on the interface. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
  • link down—Link is down and the protocol is not operationally up. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
  • lower layer down—Lower protocol layer is down. This applies to an interface only.
  • max configure exceeded—Maximum number of configure requests was exceeded while negotiations were in progress. This means that there was no response from the peer, or the peer refused to negotiate. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  • peer requested termination—Remote peer requested termination of the connection, which means that a terminate request was received while the session was in an open state. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.

Related Documentation