Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All
     

    Related Documentation

     

    Monitoring PPP Interfaces

    Purpose

    Display information about the PPP interfaces, selectively. You can also filter the display for specific information such as interface type, data type, configured protocol, or interface state.

    Note: You can filter the display for specific PPP interfaces on the basis of EAP, PAP, and CHAP protocols only if the data type category is set to statistics. If the data type category is set to keywords other than statistics or statistics is used with other data type categories, information of all PPP interfaces is displayed even though you have filtered the display on the basis of EAP, PAP, and CHAP protocols.

    Note: When a parity error is detected in the user accounting statistics and the router is not enabled to perform actions after parity error detection, an error message is displayed for those accounting statistics (displayed as “Authentication Statistics” in the output) instead of the corrupted statistics details. For more information about the parity error check mechanism and system operations on detecting corruption, see Detection of Corruption in the Statistics FPGA and System Operations on Detecting Corruption.

    Action

    To display detailed information for a specific IP interface:

    host1#show ppp interface gig 2/1/7.1.1 full
    PPP interface GigabitEthernet 2/1/7.1.1 is up
    Interface administrative status is open
    Configured network protocol is IPCP
    IPCP protocol configuration
       configured                     true
       administrative-status          open
       ip-address                     6.6.6.6
       dns-precedence                 local
       wins-precedence                local
       ipcp-netmask-option            disabled
       ipcp-lockout            disabled
       max-negotiations            30
       ipcp prompt-option dns         enabled
    IPCP protocol status
       operational-status             up
    IPCP negotiated options           local               peer
       ip-address                     11.1.1.1           11.1.1.2
       ip-address-mask                none                none
       primary-dns-address            none                none
       secondary-dns-address          none                none
       primary-wins-address           none                none
       secondary-wins-address         none                none
    IPV6CP Protocol Configuration
       configured                     false
       administrative-status          open
       ipv6-interfaceId                     0.0.0.0
       max-negotiations            30
    IPV6CP protocol status
       operational-status             not present
    OSINLCP protocol configuration
       configured                     false
       administrative-status          open
    OSINLCP protocol status
       operational-status             not present
      Interface statistics              in                   out
       packets                        0                       0
       octets                         14515                  11296
       errors                         0                       0
       discards                       0                       0 
       policed                        0                       0
    LCP protocol configuration
       max-receive-unit               use lower layer
       authentication                 
       magic-number                   enabled
       magic-number-mismatch          reject 
       keepalive-timer                30 seconds
       restart-timer                  3 seconds
       max-terminate                  2
       max-configure                  10
       max-failure                    5
       passive-mode                   disabled
    LCP protocol status
       link-status                    network
    LCP negotiated options            local               peer
       max-receive-unit               1492                1492
       authentication                 none                chap
       magic-number                   0x3e51ca08          0x740bbf81
       accm                           none                none
       pfc                            none                none
       acfc                           none                none
    LCP protocol statistics
       in-keepalive-requests          11
       out-keepalive-requests         11
       in-keepalive-replies           11
       out-keepalive-replies          11
       keepalive-failures             0
       max-renegotiation terminates   0
    IP protocol statistics  
       max-renegotiation-terminates   0
    IPv6 protocol statistics  
       max-renegotiation-terminates   0
    Authentication configuration
       authenticate-retry             0
       authentication-router          ''
       aaa-profile          ''
    Authentication status
       grant                          true
       session-timeout                none
       inactivity-timeout             none
       monitor—ingress-only           false
       accounting-timeout             none
       peer-ip-address                none
       peer-ip-address-mask           none
       peer-primary-dns-address       none
       peer-secondary-dns-address     none
       peer-primary-wins-address      none
       peer-secondary-wins-address    none
       peer-ipv6–interface-id         none
    Authentication statistics
       up-time                        0 seconds
       in-octets                      0
       out-octets                     0
       in-packets                     0
       out-packets                    0
    PAP protocol configuration
       request-timeout                20 seconds
    CHAP protocol configuration
       name                           ''
       challenge-retry                10
       challenge-timeout              4 seconds
       minimum-challenge-length       16
       maximum-challenge-length       32
       minimum-rechallenge-timeout    0 seconds
       maximum-rechallenge-timeout    0 seconds
    EAP Protocol Configuration
       request-retry                5
       request-timeout              3 seconds
    

    To display detailed information for a specific IPv6 interface:

    host1#show ppp interface fastEthernet 12/0.1.1 full
    PPP interface FastEthernet 12/0.1.1 is lowerDown
    
    Interface administrative status is open
    Configured network protocol is IPV6CP
    IPCP protocol configuration
       configured                     false
       administrative-status          open
       ip-address                     0.0.0.0
       dns-precedence                 local
       wins-precedence                local
       ipcp-netmask-option            disabled
       ipcp-lockout-option            enabled
       max-negotiations               10
    IPCP protocol status
       operational-status             not present
    IPV6CP protocol configuration
       configured                     true
       administrative-status          open
       ipv6-interfaceId               90:1a00:140:4b39
    IPV6CP protocol status
       operational-status             down 
       terminate-reason               link down
    
    OSINLCP protocol configuration
       configured                     false
       administrative-status          open
    OSINLCP protocol status
       operational-status             not present
    Interface statistics              in                   out
       packets                        0                    0
       octets                         1163                 706
       errors                         0                    0
       discards                       153482               0 
    LCP protocol configuration
       max-receive-unit               use lower layer
       authentication                 none
       magic-number                   enabled
       magic-number-mismatch          reject 
       keepalive-timer                30 seconds
       restart-timer                  3 seconds
       max-terminate                  2
       max-configure                  10
       max-failure                    5
       passive-mode                   disabled
    LCP protocol status
       link-status                    initial
    LCP protocol statistics
       in-keepalive-requests          11
       out-keepalive-requests         11
       in-keepalive-replies           11
       out-keepalive-replies          11
       keepalive-failures             0
    Authentication configuration
       authenticate-retry             0
       authentication-router          ''
       aaa-profile                    ''
    Authentication status
       grant                          false
       terminate-reason               lower layer down
    PAP protocol configuration
       request-timeout                20 seconds
    CHAP protocol configuration
       name                           ''
       challenge-retry                10
       challenge-timeout              4 seconds
       minimum-challenge-length       16
       maximum-challenge-length       32
       minimum-rechallenge-timeout    0 seconds
       maximum-rechallenge-timeout    0 seconds

    To display the reason for termination when the operational status of the interface is down:

    host1#show ppp interface
    PPP interface pos 0/1:1 is lowerDown
    PPP interface pos 4/0:1 is lowerDown
    PPP interface pos 12/1:1 is lowerDown
    3 ppp interfaces found 
    PPP interface serial 0/0:1/1 is Up 
    PPP interface serial 0/0:1/2 is Down (administrative disable)

    To display information about the PPP interface statistics for IPCP:

    host1#show ppp interface fastEthernet 2/0.1 statistics ip
    PPP interface FastEthernet 2/0.1 is up
    LCP protocol statistics
       in-keepalive-requests          833
       out-keepalive-requests         830
       in-keepalive-replies           830
       out-keepalive-replies          833
       keepalive-failures             0
       max-renegotiation-terminates   10
    

    Meaning

    Table 1 lists the show ppp interface command output fields.

    Table 1: show ppp interface Output Fields

    Field Name

    Field Description

    inactivity-timeout

    Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout.

    monitor-ingress-only

    Indicates whether the router monitors only ingress traffic for the configured idle (inactivity) timeout period; true (router monitors only ingress traffic) or false (router monitors both ingress traffic and egress traffic).

    PPP interface

    Interface type, interface specifier, and status (up, down, lowerDown, not present, passive, or tunnel). For more information about specifying the physical interface on which you want to configure PPP, see Interface Types and Specifiers in JunosE Command Reference Guide.

    accounting-timeout

    Accounting timeout in seconds; frequency of accounting updates to the authentication server

    Interface alias

    Alias or description of the PPP interface

    Interface administrative status

    Indicates whether the interface is administratively enabled (open), which means that the no ppp shutdown command is operational; or administratively disabled (closed), which means that the ppp shutdown command is operational.

    Configured network protocol

    Indicates the network protocol configured on the interface

    Baseline status

    Indicates whether a statistics baseline is set.

    Interface statistics

    PPP interface statistics:

    • packets—Number of packets received (in) or transmitted (out) on the interface
    • octets—Number of octets received (in) or transmitted (out) on the interface
    • errors—Number of errors received (in) or transmitted (out) on the interface
    • discards—Number of packets discarded on receipt (in) or discarded before they were transmitted (out); for more information about the discards counter, see Broadband Remote Access Support for PPP Overview
    • policed—Number of packets received (in) and marked as per the rates configured for the interface; for more information, see Broadband Remote Access Support for PPP Overview

    IPCP protocol configuration

    PPP IPCP configuration information:

    • configured—IPCP is configured on this interface (true or false)
    • administrative-status—IPCP administrative status (open or closed)
    • ip-address—Address to be used for negotiation of the local IP address option
    • dns-precedence—Used to resolve conflicts during negotiation of DNS addresses; “local” indicates that the local side takes precedence and the no ppp peer dns command is operative; “peer” indicates that the remote side takes precedence and the ppp peer dns command is operative
    • wins-precedence—Used to resolve conflicts during negotiation of WINS addresses; “local” indicates that the local side takes precedence and the no ppp peer wins command is operative; “peer” indicates that the remote side takes precedence and the ppp peer wins command is operative
    • ipcp-netmask-option—Controls negotiation of the IPCP netmask option; disabled = do not negotiate, enabled = negotiate
    • ipcp-lockout-option—Terminates an invalid subscriber entry and prevents additional IPCP negotiations (enabled or disabled)
    • max-negotiations—Maximum number of renegotiation attempts that the router accepts before terminating a PPP session
    • ipcp prompt-option dns—Prompts the CPE (Customer Premises Equipment) to negotiate the IPCP primary and secondary DNS options that are locally available with the broadband remote access server (enabled or disabled)

    IPv6CP protocol configuration

    PPP IPv6 configuration information:

    • configured—IPv6CP is configured on this interface (true or false)
    • administrative-status—IPv6CP administrative status (open or closed)
    • ipv6-interfaceId—Address to be used for negotiation of local IPv6 address option

    IPCP protocol status

    IPCP status:

    • operational-status—IPCP operational status (up, down, not present, or not present no resources)
    • terminate-reason—Reason for termination of IPCP service

    IPv6CP protocol status

    IPCPv6 status:

    • operational-status—IPv6CP operational status (up, down, not present, or not present no resources)
    • terminate-reason—Reason for termination of IPv6CP service

    IPCP negotiated options

    Shows the following negotiated addresses for the local and remote (peer) side of the link:

    • ip-address—IP address
    • ip-address-mask—IP address mask
    • primary-dns-address—Primary DNS address
    • secondary-dns-address—Secondary DNS address
    • primary-wins-address—Primary WINS address
    • secondary-wins-address—Secondary WINS address

    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

    OSINLCP protocol configuration

    OSINLCP configuration information:

    • configured—OSINLCP is configured on this interface (true or false)
    • administrative-status—OSINLCP administrative status (open or closed)

    OSINLCP protocol status

    OSINLCP status:

    • operational-status—OSINLCP operational status (up, down, not present, or not present no resources)
    • terminate-reason—Reason for termination of OSINLCP service

    OSINLCP negotiated options

    OSINLCP negotiated options:

    • npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link

    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

    MPLSNLCP protocol configuration

    MPLSNLCP configuration information:

    • configured—MPLSNLCP is configured on this interface (true or false)
    • administrative-status—MPLSNLCP administrative status (open or closed)

    MPLSNLCP protocol status

    MPLSNLCP protocol status

    • operational-status—MPLSNLCP operational status (up, down, not present, or not present no resources)
    • terminate-reason—Reason for termination of MPLSNLCP service

    MPLSNLCP negotiated options

    MPLSNLCP negotiated options:

    • npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link

    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

    LCP protocol configuration

    • max-receive-unit—Controls negotiation of the local MRU option; “use lower layer” indicates that the MRU of the layer below PPP defines the MRU to be negotiated; “disabled” indicates that the MRU option is not to be negotiated. A numeric value indicates the MRU value to be negotiated
    • authentication—Controls the negotiation of the local authentication option; “none” indicates do not negotiate; “chap” indicates negotiate chap; “pap” indicates negotiate pap; “chap/pap” indicates negotiate chap and, if it is rejected, negotiate pap; “pap/chap” indicates negotiate pap and, if it is rejected, negotiate chap.
    • magic-number—Controls whether the local magic number is negotiated: enabled (negotiate), or disabled (do not negotiate)
    • magic-number-mismatch—Indicates whether the router is configured to ignore the LCP peer magic number and retain the PPP connection when the peer has not negotiated an LCP magic number: ignore (ignore the peer magic number mismatch and retain the PPP connection), or reject (router terminates the PPP connection if it detects a peer magic number mismatch)
    • keepalive-timer—Rate of LCP echo requests
    • restart-timer—Retry frequency during LCP, IPCP, OSINLCP, and MPLS negotiations
    • max-terminate—Maximum number of terminate requests
    • max-configure—Maximum number of configure requests
    • max-failure—Maximum number of configure NAKs
    • passive-mode—Forces a PPP interface into a passive mode before LCP negotiation begins; “disabled” means do not wait for peer; “enabled” means wait for peer to initiate negotiation

    LCP protocol status

    • link-status—Overall status of LCP negotiations, including the following states: Initial (idle), Starting (ready to negotiate), Authenticate (authenticating), and Network (LCP is up)

    LCP negotiated options

    Shows the following negotiated values for the local and remote (peer) side of the link:

    • max-receive unit—Maximum receive unit, in octets
    • authentication—Authentication method (none, pap, or chap)
    • magic-number—Magic number
    • pfc—PFC (none or enabled)
    • acfc—ACFC (none or enabled)

    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

    LCP Endpoint Discriminator options

    • local discriminator class—Endpoint discriminator type, format, and address space for the local and remote (peer) router
    • local endpoint discriminator—Endpoint discriminator value for the local router within the specified class
    • peer discriminator class—Endpoint discriminator type, format, and address space for the remote router
    • peer endpoint discriminator—Endpoint discriminator value for the remote router within the specified class

    LCP protocol statistics

    Shows the following statistics for the life of the interface (since system boot or interface creation, whichever is later):

    • in-keepalive-requests—Number of received keepalive requests (LCP Echo Requests)
    • out-keepalive-requests—Number of transmitted keepalive requests
    • in-keepalive-replies—Number of received keepalive replies
    • out-keepalive-replies—Number of transmitted keepalive replies
    • keepalive-failures—Number of keepalive failures reported on the interface
    • max-renegotiation-terminates—Number of renegotiation terminations for the PPP session

    IP protocol statistics

    • max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.

    IPv6 protocol statistics

    • max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.

    Authentication configuration

    • authenticate-retry—Maximum number of authentication retries configured using the ppp max-bad-auth command
    • authentication-router—Virtual router for the authentication virtual router context

    Authentication status

    • grant—Authentication status (true = access granted, false = access not granted)
    • session-timeout—Session timeout, in seconds; session is terminated at expiration
    • inactivity-timeout—Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout
    • accounting-timeout—Accounting timeout in seconds; frequency of accounting updates to the authentication server
    • peer-ip-address—IP address to be used in negotiation of peer IP address
    • peer-ip-address-mask—IP address mask to be used in negotiation of the peer IP address mask
    • peer-primary-dns-address—IP address to be used in negotiation of the peer primary DNS address
    • peer-secondary-dns-address—IP address to be used in negotiation of the peer secondary DNS address
    • peer-primary-wins-address—IP address to be used in negotiation of the peer primary WINS address
    • peer-secondary-wins-address—IP address to be used in negotiation of the peer secondary WINS address

      Note: The command displays the authentication status as “none” for any parameters not provided by the authentication server.

    • peer-ipv6–interface-id—IPv6 interface Identifier of the peer returned in an authentication grant from the RADIUS server

    Authentication statistics

    Shows statistics accumulated since the session was established

    • up-time—Time the session has been up, in seconds
    • in-octets—Number of octets received on the interface
    • out-octets—Number of octets transmitted out the interface
    • in-packets—Number of packets received on the interface
    • out-packets—Number of packets transmitted out the interface

    PAP protocol configuration

    • request-timeout—Maximum time, in seconds, to wait for an authentication request packet

    CHAP protocol configuration

    • name—Name to be used in challenge packets
    • challenge-retry—Maximum number of challenge packets to be transmitted
    • challenge-timeout—Frequency, in seconds, of challenge packet retransmission
    • minimum-challenge-length—Minimum length of challenge packet
    • maximum-challenge-length—Maximum length of challenge packet; the size of the challenge used for each challenge packet is a random number between minimum-challenge-length and maximum-challenge-length
    • minimum-rechallenge-timeout—Minimum time, in seconds, before initiating a rechallenge to peer
    • maximum-rechallenge-timeout—Maximum time, in seconds, before initiating a rechallenge to peer; the actual time before a rechallenge is a random number between minimum-rechallenge-timeout and maximum-rechallenge-timeout

    EAP protocol configuration

    • request-retry—Maximum number of authentication requests retried before returning a deny
    • request-timeout—Maximum time, in seconds, to wait for an authentication request packet

    Operational Status

    If the operational status is down for a specific interface, one of the following termination reasons may appear within parentheses:

    • administrative disable—Interface has been administratively disabled, which means that the ppp shutdown command is in effect. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    • administrative logout—Interface has been administratively logged out, which means that the logout subscriber command has been issued. This applies to an interface only.
    • no upper interface—No upper layer is configured. This applies to an interface only.
    • authentication failure—Authentication is required and has failed. This applies to an interface only.
    • no local xxx—local option, xxx, is required and could not be negotiated (for example, IP address). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    • no peer xxx—Remote peer option, xxx, is required and could not be negotiated (for example, authentication). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    • keepalive drop count exceeded—Keepalive drop count has been exceeded. This applies to an interface only.
    • session timeout—Session timeout period has expired. This applies to an interface only.
    • inactivity timeout—Inactivity timeout period has expired. This applies to an interface only.
    • address lease expired—Address lease period has expired. This applies to an interface only.
    • not configured—Protocol is not configured on the interface. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
    • link down—Link is down and the protocol is not operationally up. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
    • lower layer down—Lower protocol layer is down. This applies to an interface only.
    • max configure exceeded—Maximum number of configure requests was exceeded while negotiations were in progress. This means that there was no response from the peer, or the peer refused to negotiate. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    • peer requested termination—Remote peer requested termination of the connection, which means that a terminate request was received while the session was in an open state. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
     

    Related Documentation

     

    Published: 2014-08-14