show interfaces (View Aggregated Ethernet)

Physical interface

Name of the physical interface and state of the interface.

Enabled

State of the physical interface.

Interface index

Index number of the physical interface, which reflects its initialization sequence.

SNMP ifIndex

SNMP index number for the physical interface.

Generation

Unique number for use by Juniper Networks technical support only.

Link-level type

Encapsulation being used on the physical interface.

MTU

Maximum transmission unit size on the physical interface.

Speed

Speed at which the interface is running.

Loopback

Loopback status: Enabled or Disabled. If loopback is enabled, type of loopback: Local or Remote.

Source filtering

Source filtering status: Enabled or Disabled.

Flow control

Flow control status: Enabled or Disabled.

Minimum links needed

Number of child links that must be operational for the aggregate interface to be operational.

Device flags

Information about the physical device.

Interface flags

Information about the interface.

Current address

Configured MAC address.

Hardware address

Hardware MAC address.

Last flapped

Date, time, and how long ago the interface went from down to up or up to down. The format is Last flapped: year-month-day hours:minutes:seconds timezone (hours:minutes:seconds ago). For example, Last flapped: 2002-04-26 10:52:40 PDT (04:33:20 ago).

Input Rate

Input rate in bits per second (bps) and packets per second (pps).

Output Rate

Output rate in bps and pps.

Statistics last cleared

Time when the statistics for the interface were last set to zero.

Traffic statistics

Number and rate of bytes and packets received and transmitted on the physical interface.

• Input bytes—Number of bytes received on the interface.

• Output bytes—Number of bytes transmitted on the interface.

• Input packets—Number of packets received on the interface

• Output packets—Number of packets transmitted on the interface.

IPv6 transit statistics

Number of IPv6 transit bytes and packets received and transmitted on the physical interface if IPv6 statistics tracking is enabled.

• Input bytes—Number of bytes received on the interface.

• Output bytes—Number of bytes transmitted on the interface.

• Input packets—Number of packets received on the interface.

• Output packets—Number of packets transmitted on the interface.

Input errors

Input errors on the interface:

• Errors—Sum of incoming frame terminates and frame check sequence (FCS) errors.

• Drops—Number of packets dropped by the input queue of the I/O Manager ASIC. If the interface is saturated, this number increments once for every packet that is dropped by the ASIC's RED mechanism.

• Framing errors—Number of packets received with an invalid FCS.

• Runts—Number of frames received that are smaller than the runt threshold.

• Giants—Number of frames received that are larger than the giant threshold.

• Policed discards—Number of frames that the incoming packet match code discarded because they were not recognized or not of interest. Usually, this field reports protocols that the Junos OS does not handle.

• Resource errors—Sum of transmit drops.

Output errors

Output errors on the interface. The following paragraphs explain the counters whose meaning might not be obvious:

• Carrier transitions —Number of times the interface has gone from down to up. This number does not normally increment quickly, increasing only when the cable is unplugged, the far-end system is powered down and then up, or another problem occurs. If the number of carrier transitions increments quickly (perhaps once every 10 seconds), the cable, the far-end system, or the PIC is malfunctioning.

• Errors—Sum of the outgoing frame terminates and FCS errors.

• Drops—Number of packets dropped by the output queue of the I/O Manager ASIC. If the interface is saturated, this number increments once for every packet that is dropped by the ASIC's RED mechanism.

• MTU errors—Number of packets whose size exceeded the MTU of the interface.

• Resource errors—Sum of transmit drops.

Egress queues

Total number of egress queues supported on the specified interface

Queue counters

CoS queue number and its associated user-configured forwarding class name.

• Queued packets—Number of queued packets.

• Transmitted packets—Number of transmitted packets.

• Dropped packets—Number of packets dropped by the ASIC's RED mechanism.

Logical interface

Name of the logical interface.

Index

Index number of the logical interface (which reflects its initialization sequence).

SNMP ifIndex

SNMP interface index number of the logical interface.

Generation

Unique number for use by Juniper Networks technical support only.

Flags

Information about the logical interface.

VLAN-Tag

Tag Protocol Identifier (TPID) and VLAN identifier.

Demux

IP demultiplexing (demux) value that appears if this interface is used as the demux underlying interface. The output is one of the following:

• Source Family Inet

• Destination Family Inet

Encapsulation

Encapsulation on the logical interface.

Statistics

Information about the number of packets, packets per second, number of bytes, and bytes per second on this aggregate interface.

• Bundle—Information about input and output bundle rates.

• Link—(detail and extensive only) Information about specific links in the aggregate, including link state and input and output rates.

LACP info

Link Aggregation Control Protocol (LACP) information for each aggregated interface.

• Role can be one of the following:

  • Actor—Local device participating in LACP negotiation.

  • Partner—Remote device participating in LACP negotiation.

• System priority—Priority assigned to the system (by management or administrative policy), encoded as an unsigned integer.

• System identifier—Actor or partner system ID, encoded as a MAC address.

• Port priority—Priority assigned to the port by the actor or partner (by management or administrative policy), encoded as an unsigned integer.

• Port number—Port number assigned to the port by the actor or partner, encoded as an unsigned integer.

• Port key—Operational key value assigned to the port by the actor or partner, encoded as an unsigned integer.

LACP Statistics

LACP statistics for each aggregated interface.

• LACP Rx—LACP received counter that increments for each normal hello.

• LACP Tx—Number of LACP transmit packet errors logged.

• Unknown Rx—Number of unrecognized packet errors logged.

• Illegal Rx—Number of invalid packets received.

Marker Statistic

(detail and extensive only) Information about 802.3ad marker protocol statistics on the specified links.

• Marker Rx—Number of valid marker PDUs received on this aggregation port.

• Resp Tx—Number of marker response PDUs transmitted on this aggregation port.

• Unknown Rx—Number of frames received that either carry the slow protocols Ethernet type value (43B.4) but contain an unknown protocol data unit (PDU), or are addressed to the slow protocols group MAC address (43B.3) but do not carry the slow protocols Ethernet type.

• Illegal Rx—Number of frames received that carry the slow protocols Ethernet type value (43B.4) but contain a badly formed PDU or an illegal value of protocol subtype (43B.4).

Flow Statistics

Flow statistics for each aggregated interface.

Flow Input statistics

Statistics for packets received by the flow module.

Flow Output statistics

Statistics for packets sent by the flow module.

Flow error statistics (Packets dropped due to)

Packet drop statistics for the flow module.

• Address spoofing—Packet dropped when the screen module detected address spoofing.

• Authentication failed—Packet dropped because the IPsec Encapsulating Security Payload (ESP) or Authentication Header (AH) authentication failed.

• Incoming NAT errors—Packet dropped because the source NAT rule search failed, an invalid source NAT binding was found, or the NAT allocation failed.

• Invalid zone received packet—This counter is not currently in use.

• Multiple user authentications—Packet dropped if it matches more than one policy that specifies user authentication. (Sometimes packets are looped through the system more than once. Each time a packet passes through the system, that packet must be permitted by a policy.)

• Multiple incoming NAT—Packet dropped if source NAT is specified more than once. (Sometimes packets are looped through the system more than once.)

• No parent for a gate—This counter is not currently in use.

• No one interested in self packets—This counter is incremented for one of the following reasons:

  • The outbound interface is a self interface, but the packet is not marked as a to-self packet and the destination address is in a source NAT pool.

  • No service is interested in the to-self packet

  • When a zone has ident-reset service enabled, the TCP RST to IDENT request for port 113 is sent back and this counter is incremented.

Flow error statistics (Packets dropped due to)

Packet drop statistics for the flow module (continued).

• No minor session—Packet dropped because no minor sessions are available and a minor session was requested. Minor sessions are allocated for storing additional TCP state information.

• No more sessions—Packet dropped because there were no more free sessions available.

• No NAT gate—This counter is not currently in use.

• No route present—Packet dropped because a valid route was not available to forward the packet.

• No SA for incoming SPI—Packet dropped because the incoming IPsec packet's security parameter index (SPI) does not match any known SPI.

• No tunnel found—Packet dropped because a valid tunnel could not be found.

• No session for a gate—Packet dropped by an ALG.

• No zone or NULL zone binding—Packet dropped because its incoming interface was not bound to any zone.

• Policy denied—The error counter is incremented for one of the following reasons:

  • Source or destination NAT (or both) has occurred and policy says to drop the packet.

  • Policy specifies user authentication, which failed.

  • Policy was configured to deny this packet.

• Security association not active—Packet dropped because an IPsec packet was received for an inactive SA.

• TCP sequence number out of window—TCP packet with a sequence number failed the TCP sequence number check that was received.

• Syn-attack protection—Packet dropped because of SYN attack protection or SYN cookie protection.

• User authentication errors—Packet dropped because policy requires authentication; however:

  • Only Telnet, FTP, and HTTP traffic can be authenticated.

  • The corresponding authentication entry could not be found, if web-auth is specified.

  • The maximum number of authenticated sessions per user was exceeded.

protocol-family

Protocol family configured on the logical interface.

Protocol

Protocol family configured on the logical interface.

MTU

Maximum transmission unit size on the logical interface.

Maximum labels

Maximum number of MPLS labels configured for the MPLS protocol family on the logical interface.

Generation

Unique number for use by Juniper Networks technical support only.

Route Table

Routing table in which the logical interface address is located. For example, 0 refers to the routing table inet.0.

Flags

Information about protocol family flags.

Mac-Validate Failures

Number of MAC address validation failures for packets and bytes. This field is displayed when MAC address validation is enabled for the logical interface.

Addresses, Flags

Information about address flags.

Destination

IP address of the remote side of the connection.

Local

IP address of the logical interface.

Broadcast

Broadcast address of the logical interface.

Policer

Policer to be evaluated when packets are received or transmitted on the interface.

Generation

Unique number for use by Juniper Networks technical support only.

BFD View

Number of child interfaces that bind with an Aggregated Ethernet and the details about each of the child interface.