Juniper BNG CUPS Controller CLI Operational Commands

Name of a filter that has been configured with the filter statement at the [edit firewall] hierarchy level

Name of the BNG User Plane.

The routing instance state:

• Connected—The node is connected to the network.

• Isolated—The node is isolated from the rest of the network.

Interface associated with the subscriber. The router or switch displays subscribers whose interface matches or begins with the specified interface.

The * character indicates a continuation of addresses for the same session.

Subscriber IP address or VLAN ID associated with the subscriber in the form tpid.vlan-id

No IP address or VLAN ID is assigned to an L2TP tunnel-switched session. For these subscriber sessions the value is Tunnel-switched.

Name of subscriber.

Logical system and routing instance associated with the subscriber.

Subscriber client type (DHCP, FWA, GRE, L2TP, PPP, PPPoE, STATIC-INTERFACE, VLAN).

Subscriber IPv4 address.

Subscriber IP netmask.

This field displays 255.255.255.255 by default. For tunneled or terminated PPP subscribers only, this field displays the actual value of Framed-IP-Netmask when the SDB_FRAMED_PROTOCOL attribute in the session database is equal to AUTHD_FRAMED_PROTOCOL_PPP. This occurs in the use case where the LNS generates access-internal routes when it receives Framed-IP-Netmask from RADIUS during authorization. When it receives Framed-Pool from RADIUS, the pool mask is ignored and the default /32 mask is used.

IP address of primary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IP address of secondary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IPv6 address of primary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IPv6 address of secondary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IP addresses for the DNS server, displayed in order of configuration.

This field is displayed with the extensive option only when the addresses are derived from the access profile or the global access configuration.

IPv6 addresses for the DNS server, displayed in order of configuration.

This field is displayed with the extensive option only when the addresses are derived from the access profile or the global access configuration.

IP address of primary WINS server.

IP address of secondary WINS server.

Subscriber IPv6 address, or multiple addresses.

Subscriber IPv6 prefix. If you are using DHCPv6 prefix delegation, this is the delegated prefix.

IPv6 prefix obtained through NDRA.

Subscriber IPv6 address pool. The IPv6 address pool is used to allocate IPv6 prefixes to the DHCPv6 clients.

Length of the network portion of the IPv6 address.

Length of the subscriber IPv6 prefix.

Logical system associated with the subscriber.

Routing instance associated with the subscriber.

(Enhanced subscriber management for MX Series routers) Name of the enhanced subscriber management logical interface, in the form demux0.nnnn (for example, demux0.3221225472), to which access-internal and framed subscriber routes are mapped.

Whether the subscriber interface is Static or Dynamic.

Internally generated name of the dynamic ACI or ALI interface set used by the subscriber session. The prefix of the name indicates the string received in DHCP or PPPoE control packets on which the interface set is based. For ALI interface sets, the prefix indicates that the value is configured as a trusted option to identify the subscriber line.

The name of the interface set uses one of the following prefixes:

• aci—ACI; for example, aci-1033-demux0.3221225524. This is the only prefix allowed for ACI interface sets.

• ari—ARI; for example, ari-1033-demux0.3221225524.

• aci+ari—Both the ACI and ARI; for example, aci+ari-1033-demux0.3221225524.

• noids—Neither the ACI nor the ARI were received; for example, noids-1033-demux0.3221225524.

Besides dynamic ACI and ALI interface sets, this field can be an interface set based on a substring of the ARI string. This occurs when the dynamic profile includes the predefined variable $junos-pon-id-interface-set-name, and the profile is applied for a passive optical network (PON). The ARI string is inserted by the optical line terminal (OLT). The final substring in the string, unique for the PON, identifies individual subscriber circuits, and is used as the name of the interface set.

Interface type of the ACI interface set: Dynamic. This is the only ACI interface set type currently supported.

Identifier of the dynamic ACI interface set entry in the session database.

Name of the underlying interface for the subscriber session.

Dynamic profile used for the subscriber.

Version number of the dynamic profile used for the subscriber.

MAC address associated with the subscriber.

Current state of the subscriber session (Init, Configured, Active, Terminating, Tunneled).

Current state of the L2TP session, Tunneled or Tunnel-switched. When the value is Tunnel-switched, two entries are displayed for the subscriber; the first entry is at the LNS interface on the LTS and the second entry is at the LAC interface on the LTS.

Name of the L2TP tunnel switch profile that initiates tunnel switching.

IP address of the local gateway (LAC).

IP address of the remote peer (LNS).

Forwarding flow identifier.

VLAN ID associated with the subscriber in the form tpid.vlan-id.

Stacked VLAN ID associated with the subscriber in the form tpid.vlan-id.

RADIUS accounting ID associated with the subscriber.

For the dhcp client type, option 82 agent circuit ID associated with the subscriber. The ID is displayed as an ASCII string unless the value has nonprintable characters, in which case it is displayed in hexadecimal format.

For the vlan-oob client type, the agent circuit ID or access-loop circuit identifier that identifies the subscriber line based on the subscriber-facing DSLAM interface on which the subscriber request originates.

For the dhcp client type, option 82 agent remote ID associated with the subscriber. The ID is displayed as an ASCII string unless the value has nonprintable characters, in which case it is displayed in hexadecimal format.

For the vlan-oob client type, the agent remote ID or access-loop remote identifier that identifies the subscriber line based on the NAS-facing DSLAM interface on which the subscriber request originates.

Value of the $junos-aggregation-interface-set-name predefined variable; one of the following:

• When the hierarchical-access-network-detection option is configured for the access lines and the value of the Access-Aggregation-Circuit-ID-ASCII attribute (TLV 0x0003) received either in the ANCP Port Up message or PPPoE PADR IA tags begins with a # character, then the variable takes the value of the remainder of the string after the # character.

• When the hierarchical-access-network-detection option is not configured, or if the sting does not begin with the # character, then the variable takes the value specified with the predefined-variable-defaults statement.

Actual transmitted subscriber accounting statistics by session ID or interface. Service accounting statistics are not included. These statistics do not include overhead bytes or dropped packets; they are the accurate statistics used by RADIUS. The statistics are counted when the actual-transmit-statistics statement is included in the dynamic profile.

IP address used by the DHCP relay agent.

Date and time at which the subscriber logged in.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCPv6 options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCP options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCPv6 options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCPv6 options.

Actual downstream traffic shaping rate for the subscriber, in kilobits per second.

Input service set in access dynamic profile.

Output service set in access dynamic profile.

PCEF profile in access dynamic profile.

PCC rule or rulebase used in dynamic profile.

Values for variables that are passed into the dynamic profile from RADIUS.

Time at which the first family in this service became active.

Name of the filter applied by the dynamic profile to IPv4 packets that fail the RPF check.

Name of the filter applied by the dynamic profile to IPv6 packets that fail the RPF check.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCP options, as defined in RFC 2132.

ID number for a subscriber session.

For DHCPv6 subscribers on a PPPoE network, displays the session ID of the underlying PPPoE interface.

Number of service sessions (that is, a service activated using RADIUS CoA) associated with the subscribers.

ID number for a subscriber service session.

Service session profile name.

Number of seconds of access provided to the subscriber before the session is automatically terminated.

Number of seconds subscriber can be idle before the session is automatically terminated.

Name of the pool used for DHCPv6 prefix delegation.

Length of the prefix configured for the IPv6 delegated address pool.

Address assigned by the Framed-Ipv6-Prefix AAA attribute. This field is displayed only when the predefined variable $junos-ipv6-address is used in the dynamic profile.

Interface ID assigned by the Framed-Interface-Id AAA attribute.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv4 input filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv4 output filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv6 input filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv6 output filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the IPv4 input filter (client or service session).

Name assigned to the IPv4 output filter (client or service session).

Name assigned to the IPv6 input filter (client or service session).

Name assigned to the IPv6 output filter (client or service session).

Name assigned to the logical interface input filter (client or service session).

Name assigned to the logical interface output filter (client or service session).

PPPoE subscriber’s access line type reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute DSL-Type (0x0091). The DSL type is one of the following types: ADSL, ADSL2, ADSL2+, OTHER, SDSL, VDSL, or VDSL2.

Mode type of the PPPoE subscriber’s access line determined by the PPPoE daemon based on the received subattribute DSL-Type (0x0091):

• Cell—When the DSL line type is one of the following: ADSL, ADSL2, or ADSL2+.

• Frame—When the DSL line type is one of the following: OTHER, SDSL, VDSL, or VDSL2.

The value is stored in the subscriber session database.

Number of bytes added to or subtracted from the actual downstream cell or frame overhead to account for the technology overhead of the DSL line type. The value is determined by the PPPoE daemon based on the received subattribute DSL-Type (0x0091). The value is stored in the subscriber session database.

Unadjusted upstream data rate for the PPPoE subscriber’s access line reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute Actual-Net-Data-Rate-Upstream (0x0081).

Unadjusted downstream data rate for the PPPoE subscriber’s access line reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute Actual-Net-Data-Rate-Downstream (0x0082).

Adjusted downstream data rate for the PPPoE subscriber’s access line, calculated by the PPPoE daemon and stored in the subscriber session database.

Adjusted upstream data rate for the PPPoE subscriber’s access line, calculated by the PPPoE daemon and stored in the subscriber session database.

Tunnel endpoint identifier on the BNG for the GTP-U user plane tunnel to the eNodeB. The identifier is allocated by the BNG.

A fully qualified local TEID-C consists of this identifier and the GTPU Tunnel Local IP address value.

Tunnel endpoint identifier on the BNG for the GTP-C control plane tunnel to the MME. The identifier is allocated by the BNG.

A fully qualified local TEID-C consists of this identifier and the GTPC Local IP address value.

Tunnel endpoint identifier on the eNodeB for the GTP-U user plane tunnel to the BNG. The identifier is allocated by the eNodeB.

A fully qualified remote TEID-U consists of this identifier and the GTPU Tunnel Remote IP address value.

Tunnel endpoint identifier on the MME for the GTP-C control plane tunnel to the BNG. The identifier is allocated by the MME.

A fully qualified remote TEID-C consists of this identifier and the GTPC Remote IP address value.

IP address of the S1-U interface on the eNodeB for the GTP-U tunnel endpoint.

A fully qualified remote TEID-U consists of this address and the Remote TEID-U value.

IP address of the S1-U interface on the BNG for the GTP-U tunnel endpoint.

A fully qualified local TEID-U consists of this address and the Local TEID-U value

IP address of the S11 interface on the MME for the GTP-C tunnel endpoint.

A fully qualified remote TEID-C consists of this address and the Remote TEID-C value.

IP address of the S11 interface on the BNG for the GTP-C tunnel endpoint.

A fully qualified local TEID-C consists of this address and the Local TEID-C value.

Access point name (APN) for the user equipment. The APN corresponds to the connection and service parameters that the subscriber’s mobile device can use for connecting to the carrier’s gateway to the Internet.

Name of the tenant system. You can create multiple tenant system administrators for a tenant system with different permission levels based on your requirements.

ID number for the BNG User Plane that the subscriber belongs to.

Name of the BNG User Plane that the subscriber belongs to.

The BNG User Plane that the subscriber belongs to with its port number and whether it is configured as active or backup.

Name of the routing instance. When a custom routing instance is created for a tenant system, all the interfaces defined in that tenant system are added to that routing instance.

Configured name for a specific variation of a base dynamic profile. IT’s presence indicates that the profile configuration is different from that of the base profile. The value is conveyed to the RADIUS server during authentication in the Client-Profile-Name VSA (26–4874–174).

BNG CUPS Controller instance.

The subscriber group that the subscriber belongs to.

The associated BNG CUPS Controller.

The list of broadband edge devices.

Subscriber IPv4 address.

Name of subscriber.

Routing instance associated with the subscriber.

ID number for a subscriber session.

Lists whether the device is configured as active or backup.

BNG User Plane name.

BNG CUPS Controller name.

Subscriber group name.

Number of subscribers summarized by state. The summary information includes the following:

• Init—Number of subscriber currently in the initialization state.

• Configured—Number of configured subscribers.

• Active—Number of active subscribers.

• Terminating—Number of subscribers currently terminating.

• Terminated—Number of terminated subscribers.

• Total—Total number of subscribers for all states.

Number of subscribers summarized by client type. Client types can include DHCP, GRE, L2TP, PPP, PPPoE, STATIC-INTERFACE, and VLAN. Also displays the total number of subscribers for all client types (Total).

The associated BNG CUPS Controller.

The list of broadband edge devices.

Subscriber IPv4 address.

Name of subscriber.

Routing instance associated with the subscriber.

ID number for a subscriber session.

Lists whether the device is configured as active or backup.

Name of the interface.

Address of the routing device that has been elected to send membership queries.

State of the interface: Up or Down.

How long until the IGMP querier is declared to be unreachable, in seconds.

IGMP version being used on the interface: 1 , 2 , or 3.

Number of groups on the interface.

Configured threshold at which a warning message is generated.

This threshold is based on a percentage of groups received on the interface. If the number of groups received reaches the configured threshold, the device generates a warning message.

Time (in seconds) between consecutive log messages.

The SSM map policy applied to the IGMP interface..

State of the immediate leave option:

• On—Indicates that the router removes a host from the multicast group as soon as the router receives a leave group message from a host associated with the interface.

• Off—Indicates that after receiving a leave group message, instead of removing a host from the multicast group immediately, the router sends a group query to determine if another receiver responds.

State of the promiscuous mode option:

• On—Indicates that the router can accept IGMP reports from subnetworks that are not associated with its interfaces.

• Off—Indicates that the router can accept IGMP reports only from subnetworks that are associated with its interfaces.

State of IGMP, which, by default, takes place on the Routing Engine for MX Series routers but can be distributed to the Packet Forwarding Engine to provide faster processing of join and leave events.

• On—distributed IGMP is enabled.

State of the passive mode option:

• On—Indicates that the router can run IGMP on the interface but not send or receive control traffic such as IGMP reports, queries, and leaves.

• Off—Indicates that the router can run IGMP on the interface and send or receive control traffic such as IGMP reports, queries, and leaves.

The passive statement enables you to selectively activate up to two out of a possible three available query or control traffic options. When enabled, the following options appear after the on state declaration:

• send-general-query—The interface sends general queries.

• send-group-query—The interface sends group-specific and group-source-specific queries.

• allow-receive—The interface receives control traffic.

The group policy applied to the IGMP interface.

Name of the interface.

Number of router advertisements sent and the elapsed time since they were sent.

Number of solicitation messages received.

Number of router advertisements received.

Names of interfaces from which router advertisements have been received and the elapsed time since the last one was received.

Managed address configuration flag: 0 (stateless) or 1 (stateful).

Other stateful configuration flag: 0 (stateless) or 1 (stateful).

Time that a node identifies a neighbor as reachable after receiving a reachability confirmation, in milliseconds.

Default lifetime, in seconds: from 0 seconds to 18.2 hours. A setting of 0 indicates that the router is not a default router.

Time between retransmitted Neighbor Solicitation messages, in milliseconds.

Configured current hop limit.

Name and length of the prefix.

How long the prefix remains valid for onlink determination.

How long the prefix generated by stateless autoconfiguration remains preferred.

Onlink flag: 0 (not onlink) or 1 (onlink).

Autonomous address configuration flag: 0 (not autonomous) or 1  (autonomous).

Configured interface as upstream interface for RA proxy

Configured interface as downstream interface for RA proxy.

Downstream interface for RA proxy.

RA receive only mode is enabled.

Proxy blackout timer interval is the time interval for which the interface must not be used as a proxy interface. Proxy functionality is disabled on that interface.

Preference to select configured or proxied parameters for downstream interface

error

Displays the details of the error.

Name of the interface.

Address of the router that has been elected to send membership queries.

State of the interface: Up or Down.

How long until the MLD querier is declared to be unreachable, in seconds.

MLD version being used on the interface: 1 or 2.

Number of groups on the interface.

State of the passive mode option:

• On—Indicates that the router can run IGMP or MLD on the interface but not send or receive control traffic such as IGMP or MLD reports, queries, and leaves.

• Off—Indicates that the router can run IGMP or MLD on the interface and send or receive control traffic such as IGMP or MLD reports, queries, and leaves.

The passive statement enables you to selectively activate up to two out of a possible three available query or control traffic options. When enabled, the following options appear after the on state declaration:

• send-general-query—The interface sends general queries.

• send-group-query—The interface sends group-specific and group-source-specific queries.

• allow-receive—The interface receives control traffic

Configured threshold at which a warning message is generated.

This threshold is based on a percentage of groups received on the interface. If the number of groups received reaches the configured threshold, the device generates a warning message.

State of the immediate leave option:

• On—Indicates that the router removes a host from the multicast group as soon as the router receives a multicast listener done message from a host associated with the interface.

• Off—Indicates that after receiving a multicast listener done message, instead of removing a host from the multicast group immediately, the router sends a group query to determine if another receiver responds.

State of MLD, which, by default, takes place on the Routing Engine for MX Series routers but can be distributed to the Packet Forwarding Engine to provide faster processing of join and leave events.

• On—distributed MLD is enabled.

State of the promiscuous mode option:

• On—Indicates that the router can accept MLD reports from subnetworks that are not associated with its interfaces.

• Off—Indicates that the router can accept MLD reports only from subnetworks that are associated with its interfaces.

All levels

detail extensive none

All levels

All levels

detail extensive none

detail extensive none

detail extensive none

detail extensive none

All levels

detail extensive none

detail extensive none

All levels

detail extensive none

detail extensive none

detail extensive none

extensive

Name of the PPPoE underlying logical interface.

Index number of the logical interface, which reflects its initialization sequence.

Name of the physical interface or aggregated Ethernet bundle.

Stacked VLAN ID, also known as the outer tag.

VLAN ID, also know as the inner tag.

Virtual path identifier value for the PPPoE client.

Virtual circuit identifier value for the PPPoE client.

State of PPPoE short-cycle protection, also known as PPPoE subscriber session lockout, on the underlying interface:

• circuit-id—Filters PPPoE client sessions by their agent circuit identifier (ACI) value when configured for short-cycle protection

• mac-address—Filters PPPoE client sessions by their unique media access control (MAC) address when configured for short-cycle protection

• off—Short-cycle protection not configured for PPPoE client sessions

Enabling short-cycle protection temporarily prevents (locks out) a failed or short-lived (short-cycle) PPPoE subscriber session from reconnecting to the router for a default or configurable period of time.

Displays the PPPoE lockout time range, the number of PPPoE clients in lockout condition, and the number of PPPoE clients in a lockout grace period:

• Min—Minimum lockout time, in seconds, configured on the PPPoE underlying interface.

• Max—Maximum lockout time, in seconds, configured on the PPPoE underlying interface.

• Total clients in lockout—Number of PPPoE clients currently undergoing lockout.

• Total clients in lockout grace period—Number of PPPoE clients currently in a lockout grace period. A lockout grace period occurs when the time between lockout events is greater than either 15 minutes or the maximum lockout time.

MAC source address or agent circuit idenfiier (ACI) value of the PPPoE client.

Current lockout time, in seconds; displays 0 (zero) if the PPPoE client is not undergoing lockout.

Time elapsed into the lockout period, in seconds; displays 0 (zero) if the PPPoE client is not undergoing lockout

Lockout time, in seconds, that the router uses for the next lockout event; displays a nonzero value if the PPPoE client is currently in a lockout grace period.

none

none

none

none

none

none

none

none

none

none

none

none

none

none

none

Total number of active PPPoE sessions and the number of packets sent and received during the PPPoE session, categorized by packet type and packet errors:

• PADI—PPPoE Active Discovery Initiation packets.

• PADO—PPPoE Active Discovery Offer packets.

• PADR—PPPoE Active Discovery Request packets.

• PADS—PPPoE Active Discovery Session-Confirmation packets.

• PADT—PPPoE Active Discovery Termination packets.

• Service name error—Packets for which the Service-Name request could not be honored.

• AC system error—Packets for which the access concentrator experienced an error in performing the host request. For example, the host had insufficient resources to create a virtual circuit.

• Generic error—Packets that indicate an unrecoverable error occurred.

• Malformed packets—Malformed or short packets that caused the packet handler to discard the frame as unreadable.

• Unknown packets—Unrecognized packets.

Information about timeouts that occurred during the PPPoE session (not displayed for M120, M320, and MX Series routers):

• PADI—No PADR packet has been received within the timeout period. (This value is always zero and is not supported.)

• PADO—No PPPoE Active Discovery Offer packet has been received within the timeout period.

• PADR—No PADS packet has been received within the timeout period.

All levels

All levels

All levels

detail extensive

detail extensive

detail extensive

detail extensive

detail extensive none

detail extensive

detail extensive none

detail extensive none

detail extensive

detail extensive

detail extensive none

detail extensive

detail extensive

extensive

extensive

extensive

extensive

extensive

All levels

All levels

All levels

All levels

All levels

All levels

All levels

All levels

detail

detail

detail

detail

Summary

Summary

detail

detail

detail

All levels

Summary

Summary

Summary

Summary

Summary

Summary

Summary

Summary

Summary

Summary

Name of the BNG User Plane.

Name of the routing instance.

The routing instance state:

• Connected—The node is connected to the network.

• Isolated—The node is isolated from the rest of the network.

The BNG User Plane for which the information is being displayed.

Statistics for packets received.

Statistics for packets sent.

Statistics for visibility into packet drops from the queue.

Includes connection packets, flow control, and messages and packets sent to and received from the daemon.

Event Rate Analyzer discards. For DHCP and PPPoE in advanced subscriber management, ERA packet discard counts are included for Discover, Solicit, and PADI packets .

Statistics for Layer 3 packets.

PPPoE Active Discovery Initiation (PADI) packets.

PADI is the first step in the PPPoE establishment protocol.

PPPoE Active Discovery Request packets.

Point-to-Point Protocol packets.

Number of router solicitations sent or received.

Router solicitations are sent to prompt all on-link routers to send it router advertisements.

Number of router advertisements sent or received.