show subscribers

Interface associated with the subscriber. The router or switch displays subscribers whose interface matches or begins with the specified interface.

The * character indicates a continuation of addresses for the same session.

Subscriber IP address or VLAN ID associated with the subscriber in the form tpid.vlan-id

No IP address or VLAN ID is assigned to an L2TP tunnel-switched session. For these subscriber sessions the value is Tunnel-switched.

Name of subscriber.

Logical system and routing instance associated with the subscriber.

Subscriber client type (DHCP, FWA, GRE, L2TP, PPP, PPPoE, STATIC-INTERFACE, VLAN).

Subscriber IPv4 address.

Subscriber IP netmask.

This field displays 255.255.255.255 by default. For tunneled or terminated PPP subscribers only, this field displays the actual value of Framed-IP-Netmask when the SDB_FRAMED_PROTOCOL attribute in the session database is equal to AUTHD_FRAMED_PROTOCOL_PPP. This occurs in the use case where the LNS generates access-internal routes when it receives Framed-IP-Netmask from RADIUS during authorization. When it receives Framed-Pool from RADIUS, the pool mask is ignored and the default /32 mask is used.

IP address of primary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IP address of secondary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IPv6 address of primary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IPv6 address of secondary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IP addresses for the DNS server, displayed in order of configuration.

This field is displayed with the extensive option only when the addresses are derived from the access profile or the global access configuration.

IPv6 addresses for the DNS server, displayed in order of configuration.

This field is displayed with the extensive option only when the addresses are derived from the access profile or the global access configuration.

IP address of primary WINS server.

IP address of secondary WINS server.

Subscriber IPv6 address, or multiple addresses.

Subscriber IPv6 prefix. If you are using DHCPv6 prefix delegation, this is the delegated prefix.

IPv6 prefix obtained through NDRA.

Subscriber IPv6 address pool. The IPv6 address pool is used to allocate IPv6 prefixes to the DHCPv6 clients.

Length of the network portion of the IPv6 address.

Length of the subscriber IPv6 prefix.

Logical system associated with the subscriber.

Routing instance associated with the subscriber.

(Enhanced subscriber management for MX Series routers) Name of the enhanced subscriber management logical interface, in the form demux0.nnnn (for example, demux0.3221225472), to which access-internal and framed subscriber routes are mapped.

Whether the subscriber interface is Static or Dynamic.

Internally generated name of the dynamic ACI or ALI interface set used by the subscriber session. The prefix of the name indicates the string received in DHCP or PPPoE control packets on which the interface set is based. For ALI interface sets, the prefix indicates that the value is configured as a trusted option to identify the subscriber line.

The name of the interface set uses one of the following prefixes:

• aci—ACI; for example, aci-1033-demux0.3221225524. This is the only prefix allowed for ACI interface sets.

• ari—ARI; for example, ari-1033-demux0.3221225524.

• aci+ari—Both the ACI and ARI; for example, aci+ari-1033-demux0.3221225524.

• noids—Neither the ACI nor the ARI were received; for example, noids-1033-demux0.3221225524.

Besides dynamic ACI and ALI interface sets, this field can be an interface set based on a substring of the ARI string. This occurs when the dynamic profile includes the predefined variable $junos-pon-id-interface-set-name, and the profile is applied for a passive optical network (PON). The ARI string is inserted by the optical line terminal (OLT). The final substring in the string, unique for the PON, identifies individual subscriber circuits, and is used as the name of the interface set.

Interface type of the ACI interface set: Dynamic. This is the only ACI interface set type currently supported.

Identifier of the dynamic ACI interface set entry in the session database.

Name of the underlying interface for the subscriber session.

Dynamic profile used for the subscriber.

Version number of the dynamic profile used for the subscriber.

MAC address associated with the subscriber.

Current state of the subscriber session (Init, Configured, Active, Terminating, Tunneled).

Current state of the L2TP session, Tunneled or Tunnel-switched. When the value is Tunnel-switched, two entries are displayed for the subscriber; the first entry is at the LNS interface on the LTS and the second entry is at the LAC interface on the LTS.

Name of the L2TP tunnel switch profile that initiates tunnel switching.

IP address of the local gateway (LAC).

IP address of the remote peer (LNS).

Forwarding flow identifier.

VLAN ID associated with the subscriber in the form tpid.vlan-id.

Stacked VLAN ID associated with the subscriber in the form tpid.vlan-id.

RADIUS accounting ID associated with the subscriber.

For the dhcp client type, option 82 agent circuit ID associated with the subscriber. The ID is displayed as an ASCII string unless the value has nonprintable characters, in which case it is displayed in hexadecimal format.

For the vlan-oob client type, the agent circuit ID or access-loop circuit identifier that identifies the subscriber line based on the subscriber-facing DSLAM interface on which the subscriber request originates.

For the dhcp client type, option 82 agent remote ID associated with the subscriber. The ID is displayed as an ASCII string unless the value has nonprintable characters, in which case it is displayed in hexadecimal format.

For the vlan-oob client type, the agent remote ID or access-loop remote identifier that identifies the subscriber line based on the NAS-facing DSLAM interface on which the subscriber request originates.

Value of the $junos-aggregation-interface-set-name predefined variable; one of the following:

• When the hierarchical-access-network-detection option is configured for the access lines and the value of the Access-Aggregation-Circuit-ID-ASCII attribute (TLV 0x0003) received either in the ANCP Port Up message or PPPoE PADR IA tags begins with a # character, then the variable takes the value of the remainder of the string after the # character.

• When the hierarchical-access-network-detection option is not configured, or if the sting does not begin with the # character, then the variable takes the value specified with the predefined-variable-defaults statement.

Actual transmitted subscriber accounting statistics by session ID or interface. Service accounting statistics are not included. These statistics do not include overhead bytes or dropped packets; they are the accurate statistics used by RADIUS. The statistics are counted when the actual-transmit-statistics statement is included in the dynamic profile.

IP address used by the DHCP relay agent.

Date and time at which the subscriber logged in.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCPv6 options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCP options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCPv6 options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCPv6 options.

Actual downstream traffic shaping rate for the subscriber, in kilobits per second.

Input service set in access dynamic profile.

Output service set in access dynamic profile.

PCEF profile in access dynamic profile.

PCC rule or rulebase used in dynamic profile.

Values for variables that are passed into the dynamic profile from RADIUS.

Time at which the first family in this service became active.

Name of the filter applied by the dynamic profile to IPv4 packets that fail the RPF check.

Name of the filter applied by the dynamic profile to IPv6 packets that fail the RPF check.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for DHCP options, as defined in RFC 2132.

ID number for a subscriber session.

For DHCPv6 subscribers on a PPPoE network, displays the session ID of the underlying PPPoE interface.

Number of service sessions (that is, a service activated using RADIUS CoA) associated with the subscribers.

ID number for a subscriber service session.

Service session profile name.

Number of seconds of access provided to the subscriber before the session is automatically terminated.

Number of seconds subscriber can be idle before the session is automatically terminated.

Name of the pool used for DHCPv6 prefix delegation.

Length of the prefix configured for the IPv6 delegated address pool.

Address assigned by the Framed-Ipv6-Prefix AAA attribute. This field is displayed only when the predefined variable $junos-ipv6-address is used in the dynamic profile.

Interface ID assigned by the Framed-Interface-Id AAA attribute.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv4 input filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv4 output filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv6 input filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv6 output filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the IPv4 input filter (client or service session).

Name assigned to the IPv4 output filter (client or service session).

Name assigned to the IPv6 input filter (client or service session).

Name assigned to the IPv6 output filter (client or service session).

Name assigned to the logical interface input filter (client or service session).

Name assigned to the logical interface output filter (client or service session).

PPPoE subscriber’s access line type reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute DSL-Type (0x0091). The DSL type is one of the following types: ADSL, ADSL2, ADSL2+, OTHER, SDSL, VDSL, or VDSL2.

Mode type of the PPPoE subscriber’s access line determined by the PPPoE daemon based on the received subattribute DSL-Type (0x0091):

• Cell—When the DSL line type is one of the following: ADSL, ADSL2, or ADSL2+.

• Frame—When the DSL line type is one of the following: OTHER, SDSL, VDSL, or VDSL2.

The value is stored in the subscriber session database.

Number of bytes added to or subtracted from the actual downstream cell or frame overhead to account for the technology overhead of the DSL line type. The value is determined by the PPPoE daemon based on the received subattribute DSL-Type (0x0091). The value is stored in the subscriber session database.

Unadjusted upstream data rate for the PPPoE subscriber’s access line reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute Actual-Net-Data-Rate-Upstream (0x0081).

Unadjusted downstream data rate for the PPPoE subscriber’s access line reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute Actual-Net-Data-Rate-Downstream (0x0082).

Adjusted downstream data rate for the PPPoE subscriber’s access line, calculated by the PPPoE daemon and stored in the subscriber session database.

Adjusted upstream data rate for the PPPoE subscriber’s access line, calculated by the PPPoE daemon and stored in the subscriber session database.

Tunnel endpoint identifier on the BNG for the GTP-U user plane tunnel to the eNodeB. The identifier is allocated by the BNG.

A fully qualified local TEID-C consists of this identifier and the GTPU Tunnel Local IP address value.

Tunnel endpoint identifier on the BNG for the GTP-C control plane tunnel to the MME. The identifier is allocated by the BNG.

A fully qualified local TEID-C consists of this identifier and the GTPC Local IP address value.

Tunnel endpoint identifier on the eNodeB for the GTP-U user plane tunnel to the BNG. The identifier is allocated by the eNodeB.

A fully qualified remote TEID-U consists of this identifier and the GTPU Tunnel Remote IP address value.

Tunnel endpoint identifier on the MME for the GTP-C control plane tunnel to the BNG. The identifier is allocated by the MME.

A fully qualified remote TEID-C consists of this identifier and the GTPC Remote IP address value.

IP address of the S1-U interface on the eNodeB for the GTP-U tunnel endpoint.

A fully qualified remote TEID-U consists of this address and the Remote TEID-U value.

IP address of the S1-U interface on the BNG for the GTP-U tunnel endpoint.

A fully qualified local TEID-U consists of this address and the Local TEID-U value

IP address of the S11 interface on the MME for the GTP-C tunnel endpoint.

A fully qualified remote TEID-C consists of this address and the Remote TEID-C value.

IP address of the S11 interface on the BNG for the GTP-C tunnel endpoint.

A fully qualified local TEID-C consists of this address and the Local TEID-C value.

Access point name (APN) for the user equipment. The APN corresponds to the connection and service parameters that the subscriber’s mobile device can use for connecting to the carrier’s gateway to the Internet.

Name of the tenant system. You can create multiple tenant system administrators for a tenant system with different permission levels based on your requirements.

ID number for the BNG User Plane that the subscriber belongs to.

Name of the BNG User Plane that the subscriber belongs to.

Name of the routing instance. When a custom routing instance is created for a tenant system, all the interfaces defined in that tenant system are added to that routing instance.

Configured name for a specific variation of a base dynamic profile. IT’s presence indicates that the profile configuration is different from that of the base profile. The value is conveyed to the RADIUS server during authentication in the Client-Profile-Name VSA (26–4874–174).