# Monitoring PPP Interfaces

Use the following versions of the show ppp interface command to monitor PPP interfaces:

- show ppp interface
- show ppp interface summary

You can set a statistics baseline for PPP interfaces using the baseline ppp commands. Use the optional delta keyword with PPP show commands to show baselined statistics.

You can use the output filtering feature of the show command to include or exclude lines of output based on a text string that you specify. Refer to the show Commands in JunosE System Basics Configuration Guide, for details.

| Note: The E120 and E320 routers output for monitor and show commands is identical to output from other E Series routers, except that the E120 and E320 routers output also includes information about the adapter identifier in the interface specifier (slot/adapter/port).

baseline ppp interface

- Use to establish a baseline for PPP statistics on an interface.
- The router implements the baseline by reading and storing the statistics at the time the baseline is set, then subtracting this baseline whenever baseline-related statistics are retrieved.
- Use the optional delta keyword with PPP show commands to show baselined statistics.
- Examples
  host1#baseline ppp interface atm 3/3.20 host1#baseline ppp interface atm 3/0/3.20
- There is no no version.
- See baseline ppp interface.

show ppp interface

- Use to display selective PPP interface information.
- You can filter the command display for characteristics of particular interest, such as interface type, data type, configured protocol, or interface state.
- Field descriptions
  - inactivity-timeout—Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout
  - monitor-ingress-only—Indicates whether the router monitors only ingress traffic for the configured idle (inactivity) timeout period; true (router monitors only ingress traffic) or false (router monitors both ingress traffic and egress traffic)
  - PPP interface—Interface type, interface specifier, and status (up, down, lowerDown, not present, passive, or tunnel). For more information about specifying the physical interface on which you want to configure PPP, see Interface Types and Specifiers in JunosE Command Reference Guide.
  - accounting-timeout—Accounting timeout in seconds; frequency of accounting updates to the authentication server
  - Interface alias—Alias or description of the PPP interface
  - Interface administrative status—Indicates whether the interface is administratively enabled (open), meaning that the no ppp shutdown command is operational; or administratively disabled (closed), which means that the ppp shutdown command is operational
  - Configured network protocol—Indicates the network protocol configured on the interface
  - Baseline status—Indicates whether a statistics baseline is set
  - Interface statistics
    - packets—Number of packets received (in) or transmitted (out) on the interface
    - octets—Number of octets received (in) or transmitted (out) on the interface
    - errors—Number of errors received (in) or transmitted (out) on the interface
    - discards—Number of packets discarded on receipt (in) or discarded before they were transmitted (out); for more information about the discards counter, see Rate Limiting for PPP Control Packets
    - policed—Number of packets received (in) and marked as per the rates configured for the interface; for more information, see Rate Limiting for PPP Control Packets
  - IPCP protocol configuration
    - configured—IPCP is configured on this interface (true or false)
    - administrative-status—IPCP administrative status (open or closed)
    - ip-address—Address to be used for negotiation of the local IP address option
    - dns-precedence—Used to resolve conflicts during negotiation of DNS addresses; “local” indicates that the local side takes precedence and the no ppp peer dns command is operative; “peer” indicates that the remote side takes precedence and the ppp peer dns command is operative
    - wins-precedence—Used to resolve conflicts during negotiation of WINS addresses; “local” indicates that the local side takes precedence and the no ppp peer wins command is operative; “peer” indicates that the remote side takes precedence and the ppp peer wins command is operative
    - ipcp-netmask-option—Controls negotiation of the IPCP netmask option; disabled = do not negotiate, enabled = negotiate
    - ipcp-lockout-option—Terminates an invalid subscriber entry and prevents additional IPCP negotiations (enabled or disabled)
    - max-negotiations—Maximum number of renegotiation attempts that the router accepts before terminating a PPP session
    - ipcp prompt-option dns—Prompts the CPE (Customer Premises Equipment) to negotiate the IPCP primary and secondary DNS options that are locally available with the broadband remote access server (enabled or disabled)
  - IPV6CP protocol configuration
    - configured—IPv6CP is configured on this interface (true or false)
    - administrative-status—IPv6CP administrative status (open or closed)
    - ipv6-interfaceId—Address to be used for negotiation of local IPv6 address option
  - IPCP protocol status
    - operational-status—IPCP operational status (up, down, not present, or not present no resources)
    - terminate-reason—Reason for termination of IPCP service
  - IPV6CP protocol status
    - operational-status—IPv6CP operational status (up, down, not present, or not present no resources)
    - terminate-reason—Reason for termination of IPv6CP service
  - IPCP negotiated options—Shows the following negotiated addresses for the local and remote (peer) side of the link
    - ip-address—IP address
    - ip-address-mask—IP address mask
    - primary-dns-address—Primary DNS address
    - secondary-dns-address—Secondary DNS address
    - primary-wins-address—Primary WINS address
    - secondary-wins-address—Secondary WINS address

      | Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

  - OSINLCP protocol configuration
    - configured—OSINLCP is configured on this interface (true or false)
    - administrative-status—OSINLCP administrative status (open or closed)
  - OSINLCP protocol status
    - operational-status—OSINLCP operational status (up, down, not present, or not present no resources)
    - terminate-reason—Reason for termination of OSINLCP service
  - OSINLCP negotiated options
    - npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link

      | Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

  - MPLSNLCP protocol configuration
    - configured—MPLSNLCP is configured on this interface (true or false)
    - administrative-status—MPLSNLCP administrative status (open or closed)
  - MPLSNLCP protocol status
    - operational-status—MPLSNLCP operational status (up, down, not present, or not present no resources)
    - terminate-reason—Reason for termination of MPLSNLCP service
  - MPLSNLCP negotiated options
    - npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link

      | Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

  - LCP protocol configuration
    - max-receive-unit—Controls negotiation of the local MRU option; “use lower layer” indicates that the MRU of the layer below PPP defines the MRU to be negotiated; “disabled” indicates that the MRU option is not to be negotiated. A numeric value indicates the MRU value to be negotiated
    - authentication—Controls the negotiation of the local authentication option; “none” indicates do not negotiate; “chap” indicates negotiate chap; “pap” indicates negotiate pap; “chap/pap” indicates negotiate chap and, if it is rejected, negotiate pap; “pap/chap” indicates negotiate pap and, if it is rejected, negotiate chap.
    - magic-number—Controls whether the local magic number is negotiated: enabled (negotiate), or disabled (do not negotiate)
    - magic-number-mismatch—Indicates whether the router is configured to ignore the LCP peer magic number and retain the PPP connection when the peer has not negotiated an LCP magic number: ignore (ignore the peer magic number mismatch and retain the PPP connection), or reject (router terminates the PPP connection if it detects a peer magic number mismatch)
    - keepalive-timer—Rate of LCP echo requests
    - restart-timer—Retry frequency during LCP, IPCP, OSINLCP, and MPLS negotiations
    - max-terminate—Maximum number of terminate requests
    - max-configure—Maximum number of configure requests
    - max-failure—Maximum number of configure NAKs
    - passive-mode—Forces a PPP interface into a passive mode before LCP negotiation begins; “disabled” means do not wait for peer; “enabled” means wait for peer to initiate negotiation
  - LCP protocol status
    - link-status—Overall status of LCP negotiations, including the following states: Initial (idle), Starting (ready to negotiate), Authenticate (authenticating), and Network (LCP is up)
  - LCP negotiated options—Shows the following negotiated values for the local and remote (peer) side of the link:
    - max-receive unit—Maximum receive unit, in octets
    - authentication—Authentication method (none, pap, or chap)
    - magic-number—Magic number
    - pfc—PFC (none or enabled)
    - acfc—ACFC (none or enabled)

      | Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.

  - LCP Endpoint Discriminator options
    - local discriminator class—Endpoint discriminator type, format, and address space for the local and remote (peer) router
    - local endpoint discriminator—Endpoint discriminator value for the local router within the specified class
    - peer discriminator class—Endpoint discriminator type, format, and address space for the remote router
    - peer endpoint discriminator—Endpoint discriminator value for the remote router within the specified class
  - LCP protocol statistics—Shows the following statistics for the life of the interface (since system boot or interface creation, whichever is later)
    - in-keepalive-requests—Number of received keepalive requests (LCP Echo Requests)
    - out-keepalive-requests—Number of transmitted keepalive requests
    - in-keepalive-replies—Number of received keepalive replies
    - out-keepalive-replies—Number of transmitted keepalive replies
    - keepalive-failures—Number of keepalive failures reported on the interface
    - max-renegotiation-terminates—Number of renegotiation terminations for the PPP session
  - IP protocol statistics
    - max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.
  - IPv6 protocol statistics
    - max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.
  - Authentication configuration
    - authenticate-retry—Maximum number of authentication retries configured using the ppp max-bad-auth command
    - authentication-router—Virtual router for the authentication virtual router context
  - Authentication status
    - grant—Authentication status (true = access granted, false = access not granted)
    - session-timeout—Session timeout, in seconds; session is terminated at expiration
    - inactivity-timeout—Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout
    - accounting-timeout—Accounting timeout in seconds; frequency of accounting updates to the authentication server
    - peer-ip-address—IP address to be used in negotiation of peer IP address
    - peer-ip-address-mask—IP address mask to be used in negotiation of the peer IP address mask
    - peer-primary-dns-address—IP address to be used in negotiation of the peer primary DNS address
    - peer-secondary-dns-address—IP address to be used in negotiation of the peer secondary DNS address
    - peer-primary-wins-address—IP address to be used in negotiation of the peer primary WINS address
    - peer-secondary-wins-address—IP address to be used in negotiation of the peer secondary WINS address

      | Note: The command displays the authentication status as “none” for any parameters not provided by the authentication server.

    - peer-ipv6–interface-id—IPv6 interface Identifier of the peer returned in an authentication grant from the RADIUS server
  - Authentication statistics—Shows statistics accumulated since the session was established
    - up-time—Time the session has been up, in seconds
    - in-octets—Number of octets received on the interface
    - out-octets—Number of octets transmitted out the interface
    - in-packets—Number of packets received on the interface
    - out-packets—Number of packets transmitted out the interface
  - PAP protocol configuration
    - request-timeout—Maximum time, in seconds, to wait for an authentication request packet
  - CHAP protocol configuration
    - name—Name to be used in challenge packets
    - challenge-retry—Maximum number of challenge packets to be transmitted
    - challenge-timeout—Frequency, in seconds, of challenge packet retransmission
    - minimum-challenge-length—Minimum length of challenge packet
    - maximum-challenge-length—Maximum length of challenge packet; the size of the challenge used for each challenge packet is a random number between minimum-challenge-length and maximum-challenge-length
    - minimum-rechallenge-timeout—Minimum time, in seconds, before initiating a rechallenge to peer
    - maximum-rechallenge-timeout—Maximum time, in seconds, before initiating a rechallenge to peer; the actual time before a rechallenge is a random number between minimum-rechallenge-timeout and maximum-rechallenge-timeout
  - EAP protocol configuration
    - request-retry—Maximum number of authentication requests retried before returning a deny
    - request-timeout—Maximum time, in seconds, to wait for an authentication request packet
  - If the operational status is down for a specific interface, one of the following termination reasons might appear in parentheses:
    - administrative disable—Interface has been administratively disabled, which means that the ppp shutdown command is in effect. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    - administrative logout—Interface has been administratively logged out, which means that the logout subscriber command has been issued. This applies to an interface only.
    - no upper interface—No upper layer is configured. This applies to an interface only.
    - authentication failure—Authentication is required and has failed. This applies to an interface only.
    - no local xxx—local option, xxx, is required and could not be negotiated (for example, IP address). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    - no peer xxx—Remote peer option, xxx, is required and could not be negotiated (for example, authentication). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    - keepalive drop count exceeded—Keepalive drop count has been exceeded. This applies to an interface only.
    - session timeout—Session timeout period has expired. This applies to an interface only.
    - inactivity timeout—Inactivity timeout period has expired. This applies to an interface only.
    - address lease expired—Address lease period has expired. This applies to an interface only.
    - not configured—Protocol is not configured on the interface. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
    - link down—Link is down and the protocol is not operationally up. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
    - lower layer down—Lower protocol layer is down. This applies to an interface only.
    - max configure exceeded—Maximum number of configure requests was exceeded while negotiations were in progress. This means that there was no response from the peer, or the peer refused to negotiate. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
    - peer requested termination—Remote peer requested termination of the connection, which means that a terminate request was received while the session was in an open state. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
- Example 1—Provides detailed output for a particular IP interface

      host1#show ppp interface gig 2/1/7.1.1 full
      PPP interface GigabitEthernet 2/1/7.1.1 is upp
      Interface administrative status is open
      Configured network protocol is IPCP
      IPCP protocol configuration
         configured                     true
         administrative-status          open
         ip-address                     6.6.6.6
         dns-precedence                 local
         wins-precedence                local
         ipcp-netmask-option            disabled
         ipcp-lockout            disabled
         max-negotiations            30
         ipcp prompt-option dns         enabled
      IPCP protocol status
         operational-status             up
      IPCP negotiated options           local               peer
         ip-address                     11.1.1.1           11.1.1.2
         ip-address-mask                none                none
         primary-dns-address            none                none
         secondary-dns-address          none                none
         primary-wins-address           none                none
         secondary-wins-address         none                none
      IPV6CP Protocol Configuration
         configured                     false
         administrative-status          open
         ipv6-interfaceId                     0.0.0.0
         max-negotiations            30
      IPV6CP protocol status
         operational-status             not present
      OSINLCP protocol configuration
         configured                     false
         administrative-status          open
      OSINLCP protocol status
         operational-status             not present
        Interface statistics              in                   out
         packets                        0                       0
         octets                         14515                  11296
         errors                         0                       0
         discards                       0                       0
         policed                        0                       0
      LCP protocol configuration
         max-receive-unit               use lower layer
         authentication
         magic-number                   enabled
         magic-number-mismatch          reject
         keepalive-timer                30 seconds
         restart-timer                  3 seconds
         max-terminate                  2
         max-configure                  10
         max-failure                    5
         passive-mode                   disabled
      LCP protocol status
         link-status                    network
      LCP negotiated options            local               peer
         max-receive-unit               1492                1492
         authentication                 none                chap
         magic-number                   0x3e51ca08          0x740bbf81
         accm                           none                none
         pfc                            none                none
         acfc                           none                none
      LCP protocol statistics
         in-keepalive-requests          11
         out-keepalive-requests         11
         in-keepalive-replies           11
         out-keepalive-replies          11
         keepalive-failures             0
         max-renegotiation terminates   0
      IP protocol statistics
         max-renegotiation-terminates   0
      IPv6 protocol statistics
         max-renegotiation-terminates   0
      Authentication configuration
         authenticate-retry             0
         authentication-router          ''
         aaa-profile          ''
      Authentication status
         grant                          true
         session-timeout                none
         inactivity-timeout             none
         monitor—ingress-only           false
         accounting-timeout             none
         peer-ip-address                none
         peer-ip-address-mask           none
         peer-primary-dns-address       none
         peer-secondary-dns-address     none
         peer-primary-wins-address      none
         peer-secondary-wins-address    none
         peer-ipv6–interface-id         none
      Authentication statistics
         up-time                        0 seconds
         in-octets                      0
         out-octets                     0
         in-packets                     0
         out-packets                    0
      PAP protocol configuration
         request-timeout                20 seconds
      CHAP protocol configuration
         name                           ''
         challenge-retry                10
         challenge-timeout              4 seconds
         minimum-challenge-length       16
         maximum-challenge-length       32
         minimum-rechallenge-timeout    0 seconds
         maximum-rechallenge-timeout    0 seconds
      EAP Protocol Configuration
         request-retry                5
         request-timeout              3 seconds

- Example 2—Provides detailed output for a particular IPv6 interface

      host1#show ppp interface fastEthernet 12/0.1.1 full
      PPP interface FastEthernet 12/0.1.1 is lowerDown

      Interface administrative status is open
      Configured network protocol is IPV6CP
      IPCP protocol configuration
         configured                     false
         administrative-status          open
         ip-address                     0.0.0.0
         dns-precedence                 local
         wins-precedence                local
         ipcp-netmask-option            disabled
         ipcp-lockout-option            enabled
         max-negotiations               10
      IPCP protocol status
         operational-status             not present

      IPV6CP protocol configuration
         configured                     true
         administrative-status          open
         ipv6-interfaceId               90:1a00:140:4b39
      IPV6CP protocol status
         operational-status             down
         terminate-reason               link down

      OSINLCP protocol configuration
         configured                     false
         administrative-status          open
      OSINLCP protocol status
         operational-status             not present

      Interface statistics              in                   out
         packets                        0                    0
         octets                         1163                 706
         errors                         0                    0
         discards                       153482               0

      LCP protocol configuration
         max-receive-unit               use lower layer
         authentication                 none
         magic-number                   enabled
         magic-number-mismatch          reject
         keepalive-timer                30 seconds
         restart-timer                  3 seconds
         max-terminate                  2
         max-configure                  10
         max-failure                    5
         passive-mode                   disabled
      LCP protocol status
         link-status                    initial
      LCP protocol statistics
         in-keepalive-requests          11
         out-keepalive-requests         11
         in-keepalive-replies           11
         out-keepalive-replies          11
         keepalive-failures             0
      Authentication configuration
         authenticate-retry             0
         authentication-router          ''
         aaa-profile                    ''
      Authentication status
         grant                          false
         terminate-reason               lower layer down
      PAP protocol configuration
         request-timeout                20 seconds
      CHAP protocol configuration
         name                           ''
         challenge-retry                10
         challenge-timeout              4 seconds
         minimum-challenge-length       16
         maximum-challenge-length       32
         minimum-rechallenge-timeout    0 seconds
         maximum-rechallenge-timeout    0 seconds

- Example 3—Displays a termination reason (administrative disable) when the operational status of the interface is down

      host1#show ppp interface
      PPP interface pos 0/1:1 is lowerDown
      PPP interface pos 4/0:1 is lowerDown
      PPP interface pos 12/1:1 is lowerDown
      3 ppp interfaces found
      PPP interface serial 0/0:1/1 is Up
      PPP interface serial 0/0:1/2 is Down (administrative disable)

- Example 4—Displays information about the PPP interface statistics for IPCP

      host1#show ppp interface fastEthernet 2/0.1 statistics ip
      PPP interface FastEthernet 2/0.1 is up
      LCP protocol statistics
         in-keepalive-requests          833
         out-keepalive-requests         830
         in-keepalive-replies           830
         out-keepalive-replies          833
         keepalive-failures             0
         max-renegotiation-terminates   10

- See show ppp interface.

show ppp interface summary

- Use to display a summary of all the multilinked and nonmultilinked PPP interfaces configured on the router.
- Field descriptions
  - PPP Status—Nonmultilinked PPP interfaces
  - Configuration status—Indicates the configuration state of the PPP interface, IPCP, IPv6CP , OSINLCP, or MPLS
    - configured—Interface or protocol is configured
    - notConfigured—Interface or protocol is not configured
  - Administrative status—Indicates the administrative state of the PPP interface, IPCP, IPv6CP , OSINLCP, or MPLS
    - open—Interface or protocol is administratively enabled
    - closed—Interface or protocol is administratively disabled
  - Operational status (Interface)—Indicates the operational state of the PPP interface
    - up—Interface is operational
    - down—Interface is not operational because of a problem in the PPP layer
    - lowerDown—Interface is not operational because a lower layer in the protocol stack is down
    - notPresent—Interface is not operational because the hardware is unavailable
    - passive—Interface is waiting for the peer to send an LCP confReq message
    - tunnel—Interface is being redirected through a tunnel
  - Operational status (Ip, Ipv6, Osi. Mpls)—Indicates the operational state of the IPCP, IPv6CP, OSINLCP, or MPLS protocol
    - up—Protocol is operational
    - down—Protocol is not operational because of a problem in the PPP layer
    - notPresent—Protocol is not operational because it does not exist
    - noResources—Protocol is not operational because it does not exist due to a lack of resources
  - PPP Multilink Status—Multilinked PPP interfaces
- Example

      host1#show ppp interface summary
      PPP Status
      Configuration status     configured notConfigured
         Interface             4000       n/a
         Ip                    4000       0
         Ipv6                  0          4000
         Osi                   0          4000
         Mpls                  0          4000
      Administrative status    open       closed
         Interface             4000       0
         Ip                    4000       0
         Ipv6                  4000       0
         Osi                   4000       0
         Mpls                  4000       0
      Operational status       up         down       notPresent noResources
         Interface             4000       0          0          n/a
         Ip                    4000       0          0          0
         Ipv6                  0          0          4000       0
         Osi                   0          0          4000       0
         Mpls                  0          0          4000       0
      Operational status       lowerDown  passive    tunnel
         Interface             0          0          0

      PPP Multilink Status
      Configuration status     configured notConfigured
         Link Interface        8000       n/a
         Network Interface     2000       n/a
         Ip                    2000       0
         Ipv6                  0          2000
         Osi                   0          2000
         Mpls                  0          2000
      Administrative status    open       closed
         Link Interface        8000       0
         Network Interface     2000       0
         Ip                    2000       0
         Ipv6                  2000       0
         Osi                   2000       0
         Mpls                  2000       0
      Operational status       up         down       notPresent noResources
         Link Interface        8000       0          0          n/a
         Network Interface     2000       0          0          n/a
         Ip                    2000       0          0          0
         Ipv6                  0          0          2000       0
         Osi                   0          0          2000       0
         Mpls                  0          0          2000       0
      Operational status       lowerDown  passive    tunnel
         Link Interface        0          0          0
         Network Interface     0          0          0

- See show ppp interface summary.

show ppp peer-ip-address-optional

- Use to display whether an IP address is required in a client request for an IPCP negotiation
- Field descriptions
  - Ppp peer-ip-address-optional—Indicates whether the peer IP address is optional in the IPCP configuration request.
- Example

      host1#show ppp peer-ip-address-optional
      Ppp peer ip address optional: enabled

- See show ppp peer-ip-address-optional.