Verifying Configuration and Status of Dynamic Subscribers and Associated Sessions, Services, and Firewall Filters
Purpose
Verify configuration and status of dynamic subscribers, sessions, services, and firewall filters.
You can display information about subscribers in different ways, depending on the options you use with the show subscriber command. You can use details from one set of output with another command to display more detailed information of interest.
Action
To display basic information for all subscribers:
user@host> show subscribers Interface IP Address/VLAN ID User Name LS:RI demux0.1073741824 0x8100.1500 0x8100.2900 user@test.com default:testnet demux0.1073741825 0x8100.1500 0x8100.2901 user@test.com default:testnet demux0.1073741826 0x8100.1500 0x8100.2902 user@test.com default:testnet demux0.1073741827 0x8100.1500 0x8100.2903 user@test.com default:testnet demux0.1073741826 172.16.200.6 user@test.com default:testnet demux0.1073741827 172.16.200.7 user@test.com default:testnet demux0.1073741824 172.16.200.8 user@test.com default:testnet demux0.1073741825 172.16.200.9 user@test.com default:testnet demux0.1073741828 0x8100.1500 0x8100.2910 user@test.com default:default demux0.1073741828 20.20.0.2 user@test.com default:default
To display more detailed information about a particular subscriber interface:
user@host> show subscribers interface demux0.1073741826 extensive Type: VLAN User Name: user@test.com Logical System: default Routing Instance: testnet Interface: demux0.1073741826 Interface type: Dynamic Dynamic Profile Name: profile-vdemux-relay-23qos MAC Address: 00:00:5e:00:53:04 State: Active Radius Accounting ID: 12 Session ID: 12 Stacked VLAN Id: 0x8100.1500 VLAN Id: 0x8100.2902 Login Time: 2011-10-20 16:21:59 EST Type: DHCP User Name: user@test.com IP Address: 172.16.200.6 IP Netmask: 255.255.255.0 Logical System: default Routing Instance: testnet Interface: demux0.1073741826 Interface type: Static MAC Address: 00:00:5e:00:53:04 State: Active Radius Accounting ID: 21 Session ID: 21 Login Time: 2011-10-20 16:24:33 EST Service Sessions: 2 Service Session ID: 25 Service Session Name: SUB-QOS State: Active Service Session ID: 26 Service Session Name: service-cb-content State: Active IPv4 Input Filter Name: content-cb-in-demux0.1073741826-in IPv4 Output Filter Name: content-cb-out-demux0.1073741826-out
To display traffic information for firewall filters.
user@host> show firewall ... Filter: content-cb-in-demux0.1073741826-in Counters: Name Bytes Packets __junos-dyn-service-counter 84336 1004 Filter: content-cb-out-demux0.1073741826-out Counters: Name Bytes Packets __junos-dyn-service-counter 0 0 ...
Instead of issuing successive commands to track the details for one subscriber interface, you can choose to display detailed information for all subscribers. However, the more subscribers you have, the more tedious it becomes to look through all the results for particular items of interest.
To display detailed information for all subscribers:
user@host> show subscribers detail
user@host> show subscribers extensive
Meaning
The output examples in this section show increasingly detailed information about dynamically created subscriber interfaces, including how many there are, what they are, and their characteristics; how many service sessions are active and what they are; whether firewall filters are attached to the sessions and what those filters are; and how much, if any, traffic is being filtered.
In the sample output shown here, the show subscriber command lists all the subscriber logical interfaces, including demux0.1073741826. You then display details about that interface and its associated subscribers with the show subscribers interface demux0.1073741826 extensive command. The Service Session Name fields for service sessions 25 and 26 in that output show two services are active on the interface, SUB-QOS and service-cb-content. The IPv4 Input Filter Name and the IPv4 Output Filter Name fields show that two filters have been applied to the service-cb-content session: content-cb-in-demux0.1073741826-in and content-cb-out-demux0.1073741826-out. You then use the show firewalls command to list the filters and see how much, if any, traffic is being filtered.