Monitoring PPP Interfaces

Use the following versions of the show ppp interface command to monitor PPP interfaces:

show ppp interface
show ppp interface summary

You can set a statistics baseline for PPP interfaces using the baseline ppp commands. Use the optional delta keyword with PPP show commands to show baselined statistics.

You can use the output filtering feature of the show command to include or exclude lines of output based on a text string that you specify. Refer to the show Commands in JunosE System Basics Configuration Guide, for details.

Note: The E120 and E320 routers output for monitor and show commands is identical to output from other E Series routers, except that the E120 and E320 routers output also includes information about the adapter identifier in the interface specifier (slot/adapter/port).

baseline ppp interface

Use to establish a baseline for PPP statistics on an interface.
The router implements the baseline by reading and storing the statistics at the time the baseline is set, then subtracting this baseline whenever baseline-related statistics are retrieved.
Use the optional delta keyword with PPP show commands to show baselined statistics.
Examples
host1#baseline ppp interface atm 3/3.20 host1#baseline ppp interface atm 3/0/3.20
There is no no version.
See baseline ppp interface.

show ppp interface

Use to display selective PPP interface information.
You can filter the command display for characteristics of particular interest, such as interface type, data type, configured protocol, or interface state.
Field descriptions
- inactivity-timeout—Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout
- monitor-ingress-only—Indicates whether the router monitors only ingress traffic for the configured idle (inactivity) timeout period; true (router monitors only ingress traffic) or false (router monitors both ingress traffic and egress traffic)
- PPP interface—Interface type, interface specifier, and status (up, down, lowerDown, not present, passive, or tunnel). For more information about specifying the physical interface on which you want to configure PPP, see Interface Types and Specifiers in JunosE Command Reference Guide.
- accounting-timeout—Accounting timeout in seconds; frequency of accounting updates to the authentication server
- Interface alias—Alias or description of the PPP interface
- Interface administrative status—Indicates whether the interface is administratively enabled (open), meaning that the no ppp shutdown command is operational; or administratively disabled (closed), which means that the ppp shutdown command is operational
- Configured network protocol—Indicates the network protocol configured on the interface
- Baseline status—Indicates whether a statistics baseline is set
- Interface statistics
  - packets—Number of packets received (in) or transmitted (out) on the interface
  - octets—Number of octets received (in) or transmitted (out) on the interface
  - errors—Number of errors received (in) or transmitted (out) on the interface
  - discards—Number of packets discarded on receipt (in) or discarded before they were transmitted (out); for more information about the discards counter, see Rate Limiting for PPP Control Packets
  - policed—Number of packets received (in) and marked as per the rates configured for the interface; for more information, see Rate Limiting for PPP Control Packets
- IPCP protocol configuration
  - configured—IPCP is configured on this interface (true or false)
  - administrative-status—IPCP administrative status (open or closed)
  - ip-address—Address to be used for negotiation of the local IP address option
  - dns-precedence—Used to resolve conflicts during negotiation of DNS addresses; “local” indicates that the local side takes precedence and the no ppp peer dns command is operative; “peer” indicates that the remote side takes precedence and the ppp peer dns command is operative
  - wins-precedence—Used to resolve conflicts during negotiation of WINS addresses; “local” indicates that the local side takes precedence and the no ppp peer wins command is operative; “peer” indicates that the remote side takes precedence and the ppp peer wins command is operative
  - ipcp-netmask-option—Controls negotiation of the IPCP netmask option; disabled = do not negotiate, enabled = negotiate
  - ipcp-lockout-option—Terminates an invalid subscriber entry and prevents additional IPCP negotiations (enabled or disabled)
  - max-negotiations—Maximum number of renegotiation attempts that the router accepts before terminating a PPP session
  - ipcp prompt-option dns—Prompts the CPE (Customer Premises Equipment) to negotiate the IPCP primary and secondary DNS options that are locally available with the broadband remote access server (enabled or disabled)
- IPV6CP protocol configuration
  - configured—IPv6CP is configured on this interface (true or false)
  - administrative-status—IPv6CP administrative status (open or closed)
  - ipv6-interfaceId—Address to be used for negotiation of local IPv6 address option
- IPCP protocol status
  - operational-status—IPCP operational status (up, down, not present, or not present no resources)
  - terminate-reason—Reason for termination of IPCP service
- IPV6CP protocol status
  - operational-status—IPv6CP operational status (up, down, not present, or not present no resources)
  - terminate-reason—Reason for termination of IPv6CP service
- IPCP negotiated options—Shows the following negotiated addresses for the local and remote (peer) side of the link
  - ip-address—IP address
  - ip-address-mask—IP address mask
  - primary-dns-address—Primary DNS address
  - secondary-dns-address—Secondary DNS address
  - primary-wins-address—Primary WINS address
  - secondary-wins-address—Secondary WINS address
    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.
- OSINLCP protocol configuration
  - configured—OSINLCP is configured on this interface (true or false)
  - administrative-status—OSINLCP administrative status (open or closed)
- OSINLCP protocol status
  - operational-status—OSINLCP operational status (up, down, not present, or not present no resources)
  - terminate-reason—Reason for termination of OSINLCP service
- OSINLCP negotiated options
  - npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link
    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.
- MPLSNLCP protocol configuration
  - configured—MPLSNLCP is configured on this interface (true or false)
  - administrative-status—MPLSNLCP administrative status (open or closed)
- MPLSNLCP protocol status
  - operational-status—MPLSNLCP operational status (up, down, not present, or not present no resources)
  - terminate-reason—Reason for termination of MPLSNLCP service
- MPLSNLCP negotiated options
  - npdu-alignment—Negotiated NPDU alignment for the local and remote (peer) side of the link
    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.
- LCP protocol configuration
  - max-receive-unit—Controls negotiation of the local MRU option; “use lower layer” indicates that the MRU of the layer below PPP defines the MRU to be negotiated; “disabled” indicates that the MRU option is not to be negotiated. A numeric value indicates the MRU value to be negotiated
  - authentication—Controls the negotiation of the local authentication option; “none” indicates do not negotiate; “chap” indicates negotiate chap; “pap” indicates negotiate pap; “chap/pap” indicates negotiate chap and, if it is rejected, negotiate pap; “pap/chap” indicates negotiate pap and, if it is rejected, negotiate chap.
  - magic-number—Controls whether the local magic number is negotiated: enabled (negotiate), or disabled (do not negotiate)
  - magic-number-mismatch—Indicates whether the router is configured to ignore the LCP peer magic number and retain the PPP connection when the peer has not negotiated an LCP magic number: ignore (ignore the peer magic number mismatch and retain the PPP connection), or reject (router terminates the PPP connection if it detects a peer magic number mismatch)
  - keepalive-timer—Rate of LCP echo requests
  - restart-timer—Retry frequency during LCP, IPCP, OSINLCP, and MPLS negotiations
  - max-terminate—Maximum number of terminate requests
  - max-configure—Maximum number of configure requests
  - max-failure—Maximum number of configure NAKs
  - passive-mode—Forces a PPP interface into a passive mode before LCP negotiation begins; “disabled” means do not wait for peer; “enabled” means wait for peer to initiate negotiation
- LCP protocol status
  - link-status—Overall status of LCP negotiations, including the following states: Initial (idle), Starting (ready to negotiate), Authenticate (authenticating), and Network (LCP is up)
- LCP negotiated options—Shows the following negotiated values for the local and remote (peer) side of the link:
  - max-receive unit—Maximum receive unit, in octets
  - authentication—Authentication method (none, pap, or chap)
  - magic-number—Magic number
  - pfc—PFC (none or enabled)
  - acfc—ACFC (none or enabled)
    Note: The command displays a value of “none” for any negotiated option parameters if the option was not negotiated.
- LCP Endpoint Discriminator options
  - local discriminator class—Endpoint discriminator type, format, and address space for the local and remote (peer) router
  - local endpoint discriminator—Endpoint discriminator value for the local router within the specified class
  - peer discriminator class—Endpoint discriminator type, format, and address space for the remote router
  - peer endpoint discriminator—Endpoint discriminator value for the remote router within the specified class
- LCP protocol statistics—Shows the following statistics for the life of the interface (since system boot or interface creation, whichever is later)
  - in-keepalive-requests—Number of received keepalive requests (LCP Echo Requests)
  - out-keepalive-requests—Number of transmitted keepalive requests
  - in-keepalive-replies—Number of received keepalive replies
  - out-keepalive-replies—Number of transmitted keepalive replies
  - keepalive-failures—Number of keepalive failures reported on the interface
  - max-renegotiation-terminates—Number of renegotiation terminations for the PPP session
- IP protocol statistics
  - max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.
- IPv6 protocol statistics
  - max-renegotiation-terminates—Number of times the link has been terminated since it was created, due to the peer exceeding the maximum renegotiation attempts.
- Authentication configuration
  - authenticate-retry—Maximum number of authentication retries configured using the ppp max-bad-auth command
  - authentication-router—Virtual router for the authentication virtual router context
- Authentication status
  - grant—Authentication status (true = access granted, false = access not granted)
  - session-timeout—Session timeout, in seconds; session is terminated at expiration
  - inactivity-timeout—Inactivity timeout, in seconds; session is terminated if it is not active for specified timeout
  - accounting-timeout—Accounting timeout in seconds; frequency of accounting updates to the authentication server
  - peer-ip-address—IP address to be used in negotiation of peer IP address
  - peer-ip-address-mask—IP address mask to be used in negotiation of the peer IP address mask
  - peer-primary-dns-address—IP address to be used in negotiation of the peer primary DNS address
  - peer-secondary-dns-address—IP address to be used in negotiation of the peer secondary DNS address
  - peer-primary-wins-address—IP address to be used in negotiation of the peer primary WINS address
  - peer-secondary-wins-address—IP address to be used in negotiation of the peer secondary WINS address
    Note: The command displays the authentication status as “none” for any parameters not provided by the authentication server.
  - peer-ipv6–interface-id—IPv6 interface Identifier of the peer returned in an authentication grant from the RADIUS server
- Authentication statistics—Shows statistics accumulated since the session was established
  - up-time—Time the session has been up, in seconds
  - in-octets—Number of octets received on the interface
  - out-octets—Number of octets transmitted out the interface
  - in-packets—Number of packets received on the interface
  - out-packets—Number of packets transmitted out the interface
- PAP protocol configuration
  - request-timeout—Maximum time, in seconds, to wait for an authentication request packet
- CHAP protocol configuration
  - name—Name to be used in challenge packets
  - challenge-retry—Maximum number of challenge packets to be transmitted
  - challenge-timeout—Frequency, in seconds, of challenge packet retransmission
  - minimum-challenge-length—Minimum length of challenge packet
  - maximum-challenge-length—Maximum length of challenge packet; the size of the challenge used for each challenge packet is a random number between minimum-challenge-length and maximum-challenge-length
  - minimum-rechallenge-timeout—Minimum time, in seconds, before initiating a rechallenge to peer
  - maximum-rechallenge-timeout—Maximum time, in seconds, before initiating a rechallenge to peer; the actual time before a rechallenge is a random number between minimum-rechallenge-timeout and maximum-rechallenge-timeout
- EAP protocol configuration
  - request-retry—Maximum number of authentication requests retried before returning a deny
  - request-timeout—Maximum time, in seconds, to wait for an authentication request packet
- If the operational status is down for a specific interface, one of the following termination reasons might appear in parentheses:
  - administrative disable—Interface has been administratively disabled, which means that the ppp shutdown command is in effect. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  - administrative logout—Interface has been administratively logged out, which means that the logout subscriber command has been issued. This applies to an interface only.
  - no upper interface—No upper layer is configured. This applies to an interface only.
  - authentication failure—Authentication is required and has failed. This applies to an interface only.
  - no local xxx—local option, xxx, is required and could not be negotiated (for example, IP address). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  - no peer xxx—Remote peer option, xxx, is required and could not be negotiated (for example, authentication). This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  - keepalive drop count exceeded—Keepalive drop count has been exceeded. This applies to an interface only.
  - session timeout—Session timeout period has expired. This applies to an interface only.
  - inactivity timeout—Inactivity timeout period has expired. This applies to an interface only.
  - address lease expired—Address lease period has expired. This applies to an interface only.
  - not configured—Protocol is not configured on the interface. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
  - link down—Link is down and the protocol is not operationally up. This applies to IPCP, IPv6CP, OSINLCP, and MPLS.
  - lower layer down—Lower protocol layer is down. This applies to an interface only.
  - max configure exceeded—Maximum number of configure requests was exceeded while negotiations were in progress. This means that there was no response from the peer, or the peer refused to negotiate. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.
  - peer requested termination—Remote peer requested termination of the connection, which means that a terminate request was received while the session was in an open state. This applies to an interface, IPCP, IPv6CP, OSINLCP, and MPLS.

Example 1—Provides detailed output for a particular IP interface

host1#show ppp interface gig 2/1/7.1.1 full
PPP interface GigabitEthernet 2/1/7.1.1 is upp
Interface administrative status is open
Configured network protocol is IPCP
IPCP protocol configuration
   configured                     true
   administrative-status          open
   ip-address                     6.6.6.6
   dns-precedence                 local
   wins-precedence                local
   ipcp-netmask-option            disabled
   ipcp-lockout            disabled
   max-negotiations            30
   ipcp prompt-option dns         enabled
IPCP protocol status
   operational-status             up
IPCP negotiated options           local               peer
   ip-address                     11.1.1.1           11.1.1.2
   ip-address-mask                none                none
   primary-dns-address            none                none
   secondary-dns-address          none                none
   primary-wins-address           none                none
   secondary-wins-address         none                none
IPV6CP Protocol Configuration
   configured                     false
   administrative-status          open
   ipv6-interfaceId                     0.0.0.0
   max-negotiations            30
IPV6CP protocol status
   operational-status             not present
OSINLCP protocol configuration
   configured                     false
   administrative-status          open
OSINLCP protocol status
   operational-status             not present
  Interface statistics              in                   out
   packets                        0                       0
   octets                         14515                  11296
   errors                         0                       0
   discards                       0                       0 
   policed                        0                       0
LCP protocol configuration
   max-receive-unit               use lower layer
   authentication                 
   magic-number                   enabled
   magic-number-mismatch          reject 
   keepalive-timer                30 seconds
   restart-timer                  3 seconds
   max-terminate                  2
   max-configure                  10
   max-failure                    5
   passive-mode                   disabled
LCP protocol status
   link-status                    network
LCP negotiated options            local               peer
   max-receive-unit               1492                1492
   authentication                 none                chap
   magic-number                   0x3e51ca08          0x740bbf81
   accm                           none                none
   pfc                            none                none
   acfc                           none                none
LCP protocol statistics
   in-keepalive-requests          11
   out-keepalive-requests         11
   in-keepalive-replies           11
   out-keepalive-replies          11
   keepalive-failures             0
   max-renegotiation terminates   0
IP protocol statistics  
   max-renegotiation-terminates   0
IPv6 protocol statistics  
   max-renegotiation-terminates   0
Authentication configuration
   authenticate-retry             0
   authentication-router          ''
   aaa-profile          ''
Authentication status
   grant                          true
   session-timeout                none
   inactivity-timeout             none
   monitor—ingress-only           false
   accounting-timeout             none
   peer-ip-address                none
   peer-ip-address-mask           none
   peer-primary-dns-address       none
   peer-secondary-dns-address     none
   peer-primary-wins-address      none
   peer-secondary-wins-address    none
   peer-ipv6–interface-id         none
Authentication statistics
   up-time                        0 seconds
   in-octets                      0
   out-octets                     0
   in-packets                     0
   out-packets                    0
PAP protocol configuration
   request-timeout                20 seconds
CHAP protocol configuration
   name                           ''
   challenge-retry                10
   challenge-timeout              4 seconds
   minimum-challenge-length       16
   maximum-challenge-length       32
   minimum-rechallenge-timeout    0 seconds
   maximum-rechallenge-timeout    0 seconds
EAP Protocol Configuration
   request-retry                5
   request-timeout              3 seconds

Example 2—Provides detailed output for a particular IPv6 interface

host1#show ppp interface fastEthernet 12/0.1.1 full
PPP interface FastEthernet 12/0.1.1 is lowerDown

Interface administrative status is open
Configured network protocol is IPV6CP
IPCP protocol configuration
   configured                     false
   administrative-status          open
   ip-address                     0.0.0.0
   dns-precedence                 local
   wins-precedence                local
   ipcp-netmask-option            disabled
   ipcp-lockout-option            enabled
   max-negotiations               10
IPCP protocol status
   operational-status             not present

IPV6CP protocol configuration
   configured                     true
   administrative-status          open
   ipv6-interfaceId               90:1a00:140:4b39
IPV6CP protocol status
   operational-status             down 
   terminate-reason               link down



OSINLCP protocol configuration
   configured                     false
   administrative-status          open
OSINLCP protocol status
   operational-status             not present

Interface statistics              in                   out
   packets                        0                    0
   octets                         1163                 706
   errors                         0                    0
   discards                       153482               0 

LCP protocol configuration
   max-receive-unit               use lower layer
   authentication                 none
   magic-number                   enabled
   magic-number-mismatch          reject 
   keepalive-timer                30 seconds
   restart-timer                  3 seconds
   max-terminate                  2
   max-configure                  10
   max-failure                    5
   passive-mode                   disabled
LCP protocol status
   link-status                    initial
LCP protocol statistics
   in-keepalive-requests          11
   out-keepalive-requests         11
   in-keepalive-replies           11
   out-keepalive-replies          11
   keepalive-failures             0
Authentication configuration
   authenticate-retry             0
   authentication-router          ''
   aaa-profile                    ''
Authentication status
   grant                          false
   terminate-reason               lower layer down
PAP protocol configuration
   request-timeout                20 seconds
CHAP protocol configuration
   name                           ''
   challenge-retry                10
   challenge-timeout              4 seconds
   minimum-challenge-length       16
   maximum-challenge-length       32
   minimum-rechallenge-timeout    0 seconds
   maximum-rechallenge-timeout    0 seconds

Example 3—Displays a termination reason (administrative disable) when the operational status of the interface is down

host1#show ppp interface
PPP interface pos 0/1:1 is lowerDown
PPP interface pos 4/0:1 is lowerDown
PPP interface pos 12/1:1 is lowerDown
3 ppp interfaces found 
PPP interface serial 0/0:1/1 is Up 
PPP interface serial 0/0:1/2 is Down (administrative disable)

Example 4—Displays information about the PPP interface statistics for IPCP

host1#show ppp interface fastEthernet 2/0.1 statistics ip
PPP interface FastEthernet 2/0.1 is up
LCP protocol statistics
   in-keepalive-requests          833
   out-keepalive-requests         830
   in-keepalive-replies           830
   out-keepalive-replies          833
   keepalive-failures             0
   max-renegotiation-terminates   10

See show ppp interface.

show ppp interface summary

Use to display a summary of all the multilinked and nonmultilinked PPP interfaces configured on the router.
Field descriptions
- PPP Status—Nonmultilinked PPP interfaces
- Configuration status—Indicates the configuration state of the PPP interface, IPCP, IPv6CP , OSINLCP, or MPLS
  - configured—Interface or protocol is configured
  - notConfigured—Interface or protocol is not configured
- Administrative status—Indicates the administrative state of the PPP interface, IPCP, IPv6CP , OSINLCP, or MPLS
  - open—Interface or protocol is administratively enabled
  - closed—Interface or protocol is administratively disabled
- Operational status (Interface)—Indicates the operational state of the PPP interface
  - up—Interface is operational
  - down—Interface is not operational because of a problem in the PPP layer
  - lowerDown—Interface is not operational because a lower layer in the protocol stack is down
  - notPresent—Interface is not operational because the hardware is unavailable
  - passive—Interface is waiting for the peer to send an LCP confReq message
  - tunnel—Interface is being redirected through a tunnel
- Operational status (Ip, Ipv6, Osi. Mpls)—Indicates the operational state of the IPCP, IPv6CP, OSINLCP, or MPLS protocol
  - up—Protocol is operational
  - down—Protocol is not operational because of a problem in the PPP layer
  - notPresent—Protocol is not operational because it does not exist
  - noResources—Protocol is not operational because it does not exist due to a lack of resources
- PPP Multilink Status—Multilinked PPP interfaces

Example

host1#show ppp interface summary
PPP Status
Configuration status     configured notConfigured
   Interface             4000       n/a
   Ip                    4000       0
   Ipv6                  0          4000
   Osi                   0          4000
   Mpls                  0          4000
Administrative status    open       closed
   Interface             4000       0
   Ip                    4000       0
   Ipv6                  4000       0
   Osi                   4000       0
   Mpls                  4000       0
Operational status       up         down       notPresent noResources
   Interface             4000       0          0          n/a
   Ip                    4000       0          0          0
   Ipv6                  0          0          4000       0
   Osi                   0          0          4000       0
   Mpls                  0          0          4000       0
Operational status       lowerDown  passive    tunnel
   Interface             0          0          0

PPP Multilink Status
Configuration status     configured notConfigured
   Link Interface        8000       n/a
   Network Interface     2000       n/a
   Ip                    2000       0
   Ipv6                  0          2000
   Osi                   0          2000
   Mpls                  0          2000
Administrative status    open       closed
   Link Interface        8000       0
   Network Interface     2000       0
   Ip                    2000       0
   Ipv6                  2000       0
   Osi                   2000       0
   Mpls                  2000       0
Operational status       up         down       notPresent noResources
   Link Interface        8000       0          0          n/a
   Network Interface     2000       0          0          n/a
   Ip                    2000       0          0          0
   Ipv6                  0          0          2000       0
   Osi                   0          0          2000       0
   Mpls                  0          0          2000       0
Operational status       lowerDown  passive    tunnel
   Link Interface        0          0          0
   Network Interface     0          0          0

See show ppp interface summary.

show ppp peer-ip-address-optional

Use to display whether an IP address is required in a client request for an IPCP negotiation
Field descriptions
- Ppp peer-ip-address-optional—Indicates whether the peer IP address is optional in the IPCP configuration request.

Example

host1#show ppp peer-ip-address-optional
Ppp peer ip address optional: enabled

See show ppp peer-ip-address-optional.