Table Of Contents
show call admission statistics
show ppp subscriber statistics
subscriber authorization enable
test virtual-template subinterface
show access-list template
To display information about access control lists (ACLs), use the show access-list template command in privileged EXEC mode.
show access-list template {summary | aclname | exceed number | tree}
Syntax Description
Command Modes
Privileged EXEC#
Command History
12.2(27)SBKA
This command was introduced on the Cisco 10000 series router.
Cisco IOS XE Release 2.4
This command was implemented on the Cisco ASR 1000 series routers.
Examples
This section provides examples of the different forms of the show access-list template command.
show access-list template summary
The following example shows output from the show access-list template summary command:
Router# show access-list template summaryMaximum rules per template ACL = 100Templates active = 1Number of ACLs those templates represent = 50Number of tree elements = 1Output from this command includes:
•
Maximum number of rules per template ACL
•
•
show access-list template aclname
The following example shows output from the show access-list template aclname command:
Router# show access-list template 4Temp_1073741891108Showing data for 4Temp_10737418911084Temp_1073741891108 peer_ip used is 172.17.2.62,is a parent, attached acl count = 98currentCRC = 59DAB725Router# show access-list template 4Temp_1342177340101Showing data for 4Temp_13421773401014Temp_1342177340101 idb's ip peer = 172.17.2.55,parent is 4Temp_1073741891108, user account attached to parent = 98currentCRC = 59DAB725Output from this display includes:
•
•
•
•
show access-list template exceed number
The following example shows output from the show access-list template exceed number command:
Router# show access-list template exceed 49ACL name OrigCRC Count CalcCRC4Temp_#120795960097 104FB543 50 104FB543Table 10 describes the significant fields shown in the display.
show access-list template tree
The following example shows output from the show access-list template tree command:
Router# show access-list template treeACL name OrigCRC Count CalcCRC4Temp_1073741891108 59DAB725 98 59DAB725Table 11 describes the significant fields shown in the display.
show atm svc ppp
To display information about each switched virtual circuit (SVC) configured for PPP over ATM, use the show atm svc ppp command in privileged EXEC mode.
show atm svc ppp
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Examples
The following is sample output from the show atm svc ppp command:
Router# show atm svc pppATM Int. VCD/Name VPI VCI Type VCSt VA VASt2/0.1 10 0 60 SVC UP 1 UPTable 12 describes the fields shown in the display.
show call admission statistics
To monitor the global Call Admission Control (CAC) configuration parameters and the behavior of CAC, use the show call admission statistics command in user EXEC or privileged EXEC mode.
show call admission statistics
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Privileged EXECCommand History
Examples
The following is sample output from the show call admission statistics command:
Router# show call admission statisticsTotal Call admission charges: 0, limit 25Total calls rejected 12, accepted 51Load metric: charge 0, unscaled 0Table 13 describes the significant fields shown in the display.
Related Commands
show ccm clients
To display information about cluster control manager (CCM) clients on high availability (HA), dual route processor systems use the show ccm clients command in privileged EXEC mode.
show ccm clients
Syntax Description
This command has no arguments or keywords.
Command Default
No default behavior or values.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The CCM manages the capability to synchronize session bringup on the standby processor of a dual route processor HA system. Use the show ccm clients command to display information about CCM clients.
Examples
The following is sample output from the show ccm clients command on a Cisco 10000 series router active processor:
Router# show ccm clientsCCM bundles sent since peer up:Sync Session 0Update Session 0Active Bulk Sync 0Session Down 0ISSU client msgs 0Unknown msgs 0Client events sent since peer up:PPP 0PPPoE 0PPPoA 0AAA 0PPP SIP 0LTERM 0AC 0Virtual Template 0The following is sample output from the show ccm clients command on a Cisco 10000 series router standby processor:
Router# show ccm clientsCCM bundles rcvd since last boot:Sync Session 8Update Session 0Active Bulk Sync 1Session Down 8ISSU client msgs 59Unknown msgs 0Client events extracted since last boot:PPP 72PPPoE 50PPPoA 0AAA 32PPP SIP 0LTERM 8AC 0Table 14 describes the significant fields shown in the display. Any data not described in Table 23 is used for Cisco internal debugging purposes.
Related Commands
show ccm queues
Displays CCM queue statistics.
show ccm sessions
Displays CCM session information.
show ccm queues
To display cluster control manager (CCM) queue statistics for high availability (HA) dual route processor systems, use the show ccm queues command in privileged EXEC mode.
show ccm queues
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The CCM manages the capability to synchronize session bringup on the standby processor of a redundant processor HA system. Use the show ccm queues command to display queue statistics for CCM sessions on active and standby processors. This command is generally used only by Cisco engineers for internal debugging of CCM processes.
Examples
The following is sample output from the show ccm queues command. No field descriptions are provided because command output is used for Cisco internal debugging purposes only.
Router# show ccm queues9 Event Queuessize max kicks starts false suspends ticks(ms)4 CCM 0 2 13 13 0 0 20Event NamesEvents Queued MaxQueued Suspends usec/evt max/evt1 4 Sync Session 0 0 0 0 0 02 4 Sync Client 0 0 0 0 0 03 4 Update 0 0 0 0 0 04 4 Session Down 0 0 0 0 0 05 4 Bulk Sync Begi 0 0 0 0 0 06 4 Bulk Sync Cont 0 0 0 0 0 07 4 Bulk Sync End 1 0 1 0 53 538 4 Going Active 0 0 0 0 0 09 4 Going Standby 1 0 1 0 10 1010 4 Standby Presen 0 0 0 0 0 011 4 Standby Gone 0 0 0 0 0 013 4 CP Message 18 0 2 0 156 57314 4 Recr Session 0 0 0 0 0 015 4 Recr Update 0 0 0 0 0 016 4 Recr Sess Down 0 0 0 0 0 017 4 ISSU Session N 1 0 1 0 283 28318 4 ISSU Peer Comm 0 0 0 0 0 0Related Commands
show ccm clients
Displays CCM client information
show ccm sessions
Displays CCM session information
show ccm sessions
To display information about cluster control manager (CCM) sessions on high availability (HA) dual route processor systems, use the show ccm sessions command in privileged EXEC mode.
show ccm sessions
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The CCM manages the capability to synchronize session bringup on the standby processor of a redundant processor HA system. Use the show ccm sessions command to display information on CCM sessions on active and standby processors, and also to display information on subscriber redundancy policies configured using the subscriber redundancy command.
Examples
The following is sample output from the show ccm sessions command on the active processor of a Cisco 10000 series router:
Router# show ccm sessionsGlobal CCM state: CCM HA Active - Dynamic SyncGlobal ISSU state: Compatible, Clients Cap 0x0Number of sessions in state Down: 0Number of sessions in state Not Ready: 0Number of sessions in state Ready: 0Number of sessions in state Dyn Sync: 0Timeout: Timer Type Delay Remaining Starts CPU Limit CPU Last------------ -------- --------- --------- --------- --------Rate 00:00:01 - 2 - -Dynamic CPU 00:00:10 - 0 90 0The following is sample output from the show ccm sessions command on the standby processor of a Cisco 10000 series router:
Router# show ccm sessionsGlobal CCM state: CCM HA Standby - CollectingGlobal ISSU state: Compatible, Clients Cap 0xFFECurrent Bulk Sent Bulk Rcvd----------- ----------- -----------Number of sessions in state Down: 0 0 0Number of sessions in state Not Ready: 0 0 0Number of sessions in state Ready: 0 0 0Number of sessions in state Dyn Sync: 0 0 0Timeout: Timer Type Delay Remaining Starts CPU Limit CPU Last------------ -------- --------- ----------- --------- --------Rate 00:00:01 - 0 - -Dynamic CPU 00:00:10 - 0 90 0Bulk Time Li 00:08:00 - 0 - -RF Notif Ext 00:00:20 - 0 - -Table 15 describes the significant fields shown in the display. Any data not described in Table 23 is used for Cisco internal debugging purposes.
Related Commands
show ccm clients
Displays CCM client information.
show ccm queues
Displays CCM queue information.
subscriber redundancy
Configures subscriber session redundancy policies.
show controllers shdsl
To display the status of the controller configured for single-pair high-bit-rate digital subscriber line (SHDSL) mode, use the show controllers shdsl command in privileged EXEC mode.
Cisco HWIC-4SHDSL and HWIC-2SHDSL
show controllers shdsl slot-number/subslot-number/port-number {brief | detailed}
Cisco IAD2420
show controller shdsl number
Syntax Description
Defaults
Controller number
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command is used to display the controller mode, the controller number, and associated statistics.
Examples
Cisco HWIC-4SHDSL and HWIC-2SHDSL
The following example displays the status of a Cisco HWIC-4SHDSL controller in slot 0, subslot 2, port 0 on a Cisco access router:
Router# show controllers shdsl 0/2/0 briefController SHDSL 0/2/0 is UPHardware is HWIC-4SHDSL, rev 2 on slot 0, hwic slot 2Capabilities: IMA, M-pair, 2/4 wire, Annex A, B, F & G, CPE terminationcdb=0x43EB384C, plugin=0x43DE9410, ds=0x43E9A1C4 base=0xB8000000FPGA Version is REL.3.4.0, NIOSII FW:Ver 2.6, status RunningSDC-16i HW:Rev 1.2, status UP, FW:Ver 1.2-1.1.3__57, status RunningSDFE-4 HW:Rev 1.2, status UP, FW:Ver 1.1-1.5.2__001 , status RunningNIOSII Firmware image: SystemSDC16i Firmware image: SystemSDFE4 Firmware image: SystemNumber of pairs 4, number of groups configured 1Ignored CLI cmds(0), Event buffer: in use(0), failed(0)Group (0) is Not configured.Group (1) info:Type: M-pair over g.shdsl, status: Configure FirmwareInterface: ATM0/2/1, hwidb: 0x43F04EA0, UTOPIA phy 1Configured/active num links: 2/0, bit map: 0x3/0x0Line termination: CPE, line mode: M-pair, Annex-B, PMMS disabledLine coding: 16-TCPAM, configured/actual rate: 4608/0 kbpsSHDSL wire-pair (0) is in DSL DOWN stateSHDSL wire-pair (1) is in DSL config stateRouter#Cisco IAD2420 Series
The following example displays the status of the controller that is configured for SHDSL mode on a Cisco IAD2420 series IAD:
Router# show controller shdsl 0SHDSL 0 controller UPSLOT 3: Globespan xDSL controller chipsetFrame mode: Serial ATMConfigured Line rate: 1160KbpsLine Re-activated 0 times after system bootupLOSW Defect alarm: NoneCRC per second alarm: NoneLine termination: CPEFPGA Revision: 9Related Commands
show cwmp map
To display the Cisco WAN Management Protocol (CWMP) map information, use the show cwmp map command in privileged EXEC mode.
show cwmp map {hosttable | landevice | lanethernetinterface | routetable | wanconnectiondevice | wandevice}
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is sample output from the show cwmp map hosttable command, which shows the object parameter values:
Device# show cwmp map hosttableHost ID IP Address Source MAC Address LeaseTimeRemaining HostName1 172.17.0.2 DHCP 0063.6973.636f.2d61. 86255 iou1326162.622e.6363.3030.2e38.3430.312d.4574.312f.30The following is sample output from the show cwmp map landevice command, which shows the mapping between the interfaces available in the customer premises equipment (CPE) and the instance number of the object InternetGatewayDevice.LANDevice:
Note
Device# show cwmp map landeviceCWMP LAN Id Interface2 Ethernet0/13 Ethernet0/24 Ethernet0/35 Ethernet1/06 Ethernet1/17 Ethernet1/28 Ethernet1/3The following is example output from the show cwmp map lanethernetinterface command, which shows the mapping between the instance of the object, InternetGatewayDevice.LANDevice. and InternetGatewayDevice.LANDevice.i.LANEthernetInterfaceConfig. This display shows all the Layer 2 switch ports grouped under a Layer 3 interface (a VLAN interface).
Device# show cwmp map lanethernetinterfaceCWMP LAN Id CWMP LAN Ether Id InterfaceThe following is example output from the show cwmp map routetable command, which shows the static IP routes configured in the CPE. This display provides the values of the parameters of the object, InternetGatewayDevice.Layer3Forwarding.Forwarding.
Device# show cwmp map routetableCWMP Id Enable Dest Address Dest Mask Gateway Address Met Interface1 TRUE 0.0.0.0 0.0.0.0 172.16.0.2 1The following is example output from the show cwmp map wandevice command, which shows the mapping between the interface in CPE and the instance number of the interface specified in the TR-069 Agent. This is equivalent to the CWMP object instances, InternetGatewayDevice.WANDevice.
Note
Device# show cwmp map wandeviceCWMP WAN Id Interface1 Ethernet0/0The following is example output from the show cwmp map wanconnectiondevice command, which shows the instance numbers of the object InternetGatewayDevice.WANDevice.i. and InternetGatewayDevice.WANDevice.i.WANConnectionDevice.j. This command also shows the associated interface in the CPE and connection type used. The connection type value is one of the following:
•
•
•
•
•
•
This command also shows the VPI and VCI values of the ATM interface represented by the object, InternetGatewayDevice.WANDevice.i.WANConnectionDevice.j.
Device# show cwmp map wanconnectiondeviceCWMP WAN Id CWMP WAN Conn Id Interface VPI VCI Type1 1 Ethernet0/0 IPoEshow cwmp methods
To display the TR-069 Agent supported remote procedure call (RPC) methods and vendor profile methods, use the show cwmp methods command in privileged EXEC mode.
show cwmp methods
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is sample output from the show cwmp methods command:
Device# show cwmp methodsCWMP RPC Methods Supported:GetRPCMethodsSetParameterValuesGetParameterValuesGetParameterNamesSetParameterAttributesGetParameterAttributesAddObjectDeleteObjectRebootDownloadUploadX_00000C_SetConfigurationX_00000C_ShowStatusshow cwmp parameter
To display the TR-069 Agent (also called the Cisco WAN Management Protocol [CWMP]) parameter information, use the show cwmp parameter command in privileged EXEC mode.
show cwmp parameter {parameter-name | all | notify {active | all | forceactive | passive}}
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is sample output from the show cwmp parameter parameter-name command, which displays the value for the specified parameter:
Device# show cwmp parameter InternetGatewayDevice.ManagementServer.URLParameter = InternetGatewayDevice.ManagementServer.URLValue = http://iou131.cisco.com/cwmp-1-0/testacsThe following is sample output from the show cwmp parameter all command, which displays all of the parameter names supported by the TR-069 Agent:
Device# show cwmp parameter allInternetGatewayDeviceLANDeviceNumberOfEntriesWANDeviceNumberOfEntriesWANDeviceWANConnectionNumberOfEntriesWANCommonInterfaceConfigWANAccessTypeLayer1UpstreamMaxBitRateLayer1DownstreamMaxBitRatePhysicalLinkStatusTotalBytesSentTotalBytesReceivedTotalPacketsSentTotalPacketsReceivedWANConnectionDeviceWANIPConnectionNumberOfEntriesWANPPPConnectionNumberOfEntriesWANIPConnectionEnableConnectionStatusPossibleConnectionTypesConnectionTypeNameUptimeLastConnectionErrorAddressingTypeExternalIPAddressSubnetMaskDefaultGatewayDNSEnabledDNSServersMACAddressConnectionTriggerWANPPPConnectionEnableConnectionStatusNameUptimeLastConnectionErrorUsernamePasswordExternalIPAddressX_00000C_SubnetMaskDNSEnabledDNSServersMACAddressTransportTypePPPoEACNamePPPoEServiceNameWANDSLLinkConfigEnableLinkStatusLinkTypeAutoConfigDestinationAddressATMTransmittedBlocksATMReceivedBlocksAAL5CRCErrorsATMCRCErrorsWANEthernetInterfaceConfigEnableStatusMACAddressMaxBitRateDuplexModeStatsBytesSentBytesReceivedPacketsSentPacketsReceivedWANDSLInterfaceConfigEnableStatusUpstreamCurrRateDownstreamCurrRateUpstreamMaxRateDownstreamMaxRateUpstreamNoiseMarginDownstreamNoiseMarginUpstreamAttenuationDownstreamAttenuationUpstreamPowerDownstreamPowerATURVendorATURCountryATUCVendorATUCCountryTotalStartShowtimeStartStatsTotalCellDelinLinkRetrainInitErrorsInitTimeoutsLossOfFramingErroredSecsSeverelyErroredSecsFECErrorsATUCFECErrorsHECErrorsATUCHECErrorsCRCErrorsATUCCRCErrorsShowtimeCellDelinLinkRetrainInitErrorsInitTimeoutsLossOfFramingErroredSecsSeverelyErroredSecsFECErrorsATUCFECErrorsHECErrorsATUCHECErrorsCRCErrorsATUCCRCErrorsWANDSLConnectionManagementConnectionServiceNumberOfEntriesConnectionServiceWANConnectionDeviceWANConnectionServiceDestinationAddressLinkTypeNameLANDeviceLANEthernetInterfaceNumberOfEntriesLANUSBInterfaceNumberOfEntriesLANWLANConfigurationNumberOfEntriesLANHostConfigManagementDHCPServerConfigurableDHCPServerEnableDHCPRelayMinAddressMaxAddressReservedAddressesSubnetMaskDNSServersDomainNameIPRoutersIPInterfaceNumberOfEntriesIPInterfaceEnableIPInterfaceIPAddressIPInterfaceSubnetMaskIPInterfaceAddressingTypeHostsHostNumberOfEntriesHostIPAddressAddressSourceLeaseTimeRemainingMACAddressHostNameLANEthernetInterfaceConfigEnableStatusMACAddressMaxBitRateDuplexModeStatsBytesSentBytesReceivedPacketsSentPacketsReceivedDeviceInfoManufacturerManufacturerOUIModelNameDescriptionSerialNumberHardwareVersionSoftwareVersionSpecVersionProvisioningCodeUpTimeDeviceLogManagementServerURLUsernamePasswordPeriodicInformEnablePeriodicInformIntervalPeriodicInformTimeParameterKeyConnectionRequestURLConnectionRequestUsernameConnectionRequestPasswordUpgradesManagedLANConfigSecurityConfigPasswordLayer3ForwardingDefaultConnectionServiceForwardNumberOfEntriesForwardingEnableStatusDestIPAddressDestSubnetMaskSourceIPAddressSourceSubnetMaskGatewayIPAddressInterfaceForwardingMetricIPPingDiagnosticsDiagnosticsStateInterfaceHostNumberOfRepetitionsTimeoutDataBlockSizeSuccessCountFailureCountAverageResponseTimeMinimumResponseTimeMaximumResponseTimeTimeNTPServer1NTPServer2NTPServer3NTPServer4NTPServer5CurrentLocalTimeLocalTimeZoneLocalTimeZoneNameDaylightSavingsUsedDaylightSavingsStartDaylightSavingsEndTraceRouteDiagnosticsDiagnosticsStateHostTimeoutMaxHopCountResponseTimeNumberOfRouteHopsRouteHopsHopHostThe following is sample output from the show cwmp parameter notify active command, which displays all of the parameters in which the notification attribute is set to active:
Device# show cwmp parameter notify activeActive Notification:InternetGatewayDevice.DeviceInfo.SoftwareVersionInternetGatewayDevice.DeviceInfo.ProvisioningCodeInternetGatewayDevice.ManagementServer.ConnectionRequestURLInternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddres sInternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceIPAddre ssInternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceSubnetM askInternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceAddress ingTypeThe following is sample output from the show cwmp parameter notify all command, which displays all of the parameters in which the notification attribute is set:
Device# show cwmp parameter notify allActive Notification:InternetGatewayDevice.DeviceInfo.SoftwareVersionInternetGatewayDevice.DeviceInfo.ProvisioningCodeInternetGatewayDevice.ManagementServer.ConnectionRequestURLInternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddres sInternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceIPAddre ssInternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceSubnetM askInternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceAddress ingTypePassive Notification:InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.EnableThe following is sample output from the show cwmp parameter notify forceactive command, which displays all of the forceactive parameters in the TR-069 Agent:
Device# show cwmp parameter notify forceactiveForced Active Notification:InternetGatewayDevice.DeviceInfo.SoftwareVersionInternetGatewayDevice.DeviceInfo.ProvisioningCodeInternetGatewayDevice.ManagementServer.ConnectionRequestURLInternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddres sThe following is sample output from the show cwmp parameter notify passive command, which displays all of the parameters in which the notification attribute is set to passive:
Device# show cwmp parameter notify passivePassive Notification:InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.Enableshow cwmp persistent
To display all of the persistent Cisco WAN Management Protocol (CWMP) parameters stored in the NVRAM by the TR-069 Agent, use the show cwmp persistent command in privileged EXEC mode.
show cwmp persistent data
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is sample output from the show cwmp persistent data command:
Device# show cwmp persistent dataInternetGatewayDevice.ManagementServer.URLInternetGatewayDevice.ManagementServer.UsernameInternetGatewayDevice.ManagementServer.PasswordInternetGatewayDevice.ManagementServer.PeriodicInformEnableInternetGatewayDevice.ManagementServer.PeriodicInformIntervalInternetGatewayDevice.ManagementServer.PeriodicInformTimeInternetGatewayDevice.ManagementServer.ParameterKeyInternetGatewayDevice.ManagementServer.ConnectionRequestURLInternetGatewayDevice.ManagementServer.ConnectionRequestUsernameInternetGatewayDevice.ManagementServer.ConnectionRequestPasswordInternetGatewayDevice.ManagementServer.UpgradesManagedshow cwmp session
To display the TR-069 Agent session information, use the show cwmp session command in privileged EXEC mode.
show cwmp session
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is sample output from the show cwmp session command when a successful session is established between the TR-069 Agent and the auto-configuration server (ACS):
Device# show cwmp sessionCWMP Agent status: EnabledNo CWMP Session currently runningManagement Server: http://iou131.cisco.com/cwmp-1-0/testacsConnection Request URL: http://172.16.0.1/00000C/388280450/cwmpLast successful connection request at time: 10:46:47 PST Tue Jun 17 2008Last successful session at time: 10:46:48 PST Tue Jun 17 2008Last failed session at time: 10:42:48 PST Tue Jun 17 2008The following is sample output from the show show cwmp session command when a session is unable to connect between the TR-069 Agent and the ACS:
Device# show cwmp sessionCWMP Agent status: EnabledCWMP Session currently runningManagement Server for this session: http://iou131.cisco.com/cwmp-1-0/testacsHold Requests for this session: 0Max-Envelopes from ACS for this session: 1Number of outstanding requests: 1Requests outstanding over the session:InformInformRequests to be sent over the session: 0Management Server: http://iou131.cisco.com/cwmp-1-0/testacsConnection Request URL: http://172.16.0.1/00000C/388280450/cwmpLast successful connection request at time:Last successful session at time: 10:39:05 PST Tue Jun 17 2008Last failed session at time: 10:42:03 PST Tue Jun 17 2008Session retry count: 1show dsl interface atm
To display information specific to the asymmetric digital subscriber line (ADSL) for a specified ATM interface, use the show dsl interface atm command in EXEC mode.
show dsl interface atm number
Syntax Description
Command Modes
EXEC
Command History
Usage Guidelines
Use this command to display the status or results of a line test and to get information on port status, alarms, configured and actual transmission rates, and transmission errors.
The output from this command appears the same as the output from the show controller atm command on Cisco 1400 series routers.
Examples
ADSL: Example
The following example shows sample output from the show dsl interface atm command for a CPE device that is configured for ADSL:
Router# show dsl interface atm0Alcatel 20150 chipset informationATU-R (DS) ATU-C (US)Modem Status: Showtime (DMTDSL_SHOWTIME)DSL Mode: ITU G.992.1 (G.DMT)ITU STD NUM: 0x01 0x1Vendor ID: 'ALCB' 'ALCB'Vendor Specific: 0x0000 0x0000Vendor Country: 0x00 0x0FCapacity Used: 85% 98%Noise Margin: 13.5 dB 7.0 dBOutput Power: 9.5 dBm 12.0 dBmAttenuation: 1.5 dB 3.5 dBDefect Status: None NoneLast Fail Code: NoneSelftest Result: 0x00Subfunction: 0x15Interrupts: 5940 (0 spurious)PHY Access Err: 0Activations: 1SW Version: 3.670FW Version: 0x1A04Interleave Fast Interleave FastSpeed (kbps): 0 8128 0 864Reed-Solomon EC: 0 0 0 0CRC Errors: 0 0 0 7Header Errors: 0 0 0 2Bit Errors: 0 0BER Valid sec: 0 0BER Invalid sec: 0 0DMT Bits Per Bin00: 0 0 0 0 0 0 0 7 6 7 9 A B C C C10: C C C C C C B B B B A 9 A 9 0 020: 0 0 0 0 0 0 2 2 3 4 4 5 6 6 7 730: 7 8 8 8 9 9 9 A A A A A A B B B40: B B B B B B B B B B B A B B B B50: B B B B B B B B B B B B 2 B B B60: B B B B B B B B B B B B B B B B70: B B B B B B B B B B B B B B B B80: B B B B B B B B B B B B B B B B90: B B B B B B B B B B B B B B B BA0: B B B B B B B B B B B B B B B BB0: B B B B B B B B B B B B A B A AC0: A A A A A A A A A A A A A A A AD0: A A A A A A A A A A A 9 9 9 9 9E0: 9 9 9 9 9 9 9 9 9 9 9 9 8 8 8 8F0: 8 8 8 8 8 8 7 7 7 7 6 6 5 5 4 4Table 16 describes the significant fields shown in the display.
G.SHDSL: Example
The following example shows sample output for the show dsl interface atm command for a CPE device that is configured for G.SHDSL:
Router# show dsl interface atm 0/0Globespan G.SHDSL Chipset InformationEquipment Type: Customer PremiseOperating Mode: G.SHDSLClock Rate Mode: Auto rate selection ModeReset Count: 1Actual rate: 2320 KbpsModem Status: DataNoise Margin: 42 dBLoop Attenuation: 0.0 dBTransmit Power: 13.5 dBReceiver Gain: 204.8000 dBLast Activation Status:No FailureCRC Errors: 0Chipset Version: 1Firmware Version: R1.0Table 17 describes the significant fields shown in the display.
Related Commands
dsl operating-mode
Modifies the operating mode of the digital subscriber line for an ATM interface.
show ip http client cookie
To display the HTTP client cookies, use the show ip http client cookie command in privileged EXEC mode.
show ip http client cookie {brief | summary} [domain cookie-domain | name cookie-name | session session-name]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is example output from the show ip http client cookie brief command:
Device# show ip http client cookie briefHTTP client cookies of session HTTP CFS :HTTP client cookies of session CWMP_CLIENT :For expanded output please use 'summary' option for displayName Value Ver Domain Pathcookie8 8 1 172.17.0.2 /cwmp-1-0/cookie7 7 1 172.17.0.2 /cwmp-1-0/cookie3 3 1 172.16.0.2 /cwmp-1-0/cookie2 2 1 172.16.0.2 /cwmp-1-0/cookie1 1 1 172.16.0.2 /cwmp-1-0/HTTP client cookies of session cwmp_test_client :The following is example output from the show ip http client cookie brief domain command:
Device# show ip http client cookie brief domain 172.16.0.2HTTP client cookies of domain 172.16.0.2 :For expanded output please use 'summary' option for displayName Value Ver Domain Pathcookie3 3 1 172.16.0.2 /cwmp-1-0/cookie2 2 1 172.16.0.2 /cwmp-1-0/cookie1 1 1 172.16.0.2 /cwmp-1-0/The following is example output from the show ip http client cookie brief name command:
Device# show ip http client cookie brief name cookie3HTTP client cookies of name cookie3 :For expanded output please use 'summary' option for displayName Value Ver Domain Pathcookie3 3 1 172.16.0.2 /cwmp-1-0/The following is example output from the show ip http client cookie brief session command:
Device# show ip http client cookie brief session CWMP_CLIENTHTTP client cookies of session CWMP_CLIENT :For expanded output please use 'summary' option for displayName Value Ver Domain Pathcookie8 8 1 172.17.0.2 /cwmp-1-0/cookie7 7 1 172.17.0.2 /cwmp-1-0/cookie3 3 1 172.16.0.2 /cwmp-1-0/cookie2 2 1 172.16.0.2 /cwmp-1-0/cookie1 1 1 172.16.0.2 /cwmp-1-0/The following is example output from the show ip http client cookie summary command:
Device# show ip http client cookie summaryHTTP client cookies of session HTTP CFS :HTTP client cookies of session CWMP_CLIENT :Name : cookie8Value : 8Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie7Value : 7Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie3Value : 3Version : 1Domain : 172.16.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie2Value : 2Version : 1Domain : 172.16.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie1Value : 1Version : 1Domain : 172.16.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :HTTP client cookies of session cwmp_test_client :The following is example output from the show ip http client cookie summary domain command:
Device# show ip http client cookie summary domain 172.17.0.2HTTP client cookies of domain 172.17.0.2 :Name : cookie8Value : 8Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie7Value : 7Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :The following is example output from the show ip http client cookie summary name command:
Device# show ip http client cookie summary name cookie7HTTP client cookies of name cookie7 :Name : cookie7Value : 7Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :The following is example output from the show ip http client cookie summary session command:
Device# show ip http client cookie summary session CWMP_CLIENTHTTP client cookies of session CWMP_CLIENT :Name : cookie8Value : 8Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie7Value : 7Version : 1Domain : 172.17.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie3Value : 3Version : 1Domain : 172.16.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie2Value : 2Version : 1Domain : 172.16.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :Name : cookie1Value : 1Version : 1Domain : 172.16.0.2 (default)Path : /cwmp-1-0/ (default)Secure : noMax-Age : 600Port :Comment :CommentURL :show mpf cpu
To display the average CPU utilization over a duration of the last 5 seconds, the last 1 minute, and the last 5 minutes when Multi-Processor Forwarding (MPF) is enabled on the second CPU, use the show mpf cpu command in user EXEC or privileged EXEC mode.
show mpf cpu [history]
Syntax Description
history
(Optional) Displays graphical output of the second CPU utilization over the last 60 seconds, the last 60 minutes, and the last 72 hours.
Command Default
No default behavior or values.
Command Modes
User EXEC
Privileged EXECCommand History
Examples
The following example shows that the average utilization of the second CPU is 33 percent for the last 5 seconds, 25 percent for the last minute, and 30 percent for the last 5 minutes:
Router# show mpf cpuCPU utilization for five seconds: 33%; one minute: 25%; five minutes: 30%The following example shows graphical output of utilization of the second CPU for the last 60 seconds (percentage of CPU use per second), the last 60 minutes (percentage of CPU use per minute), and the last 72 hours (percentage of CPU use per hour).
Router# show mpf cpu historyslns 12:12:40 AM Saturday Nov 18 2000 UTC 3333333333333333333333333333333333333333333333333333333333 333333333333333333333333333333333333333333333333333333333310090807060504030 ***************************20 ***************************10 ***************************0....5....1....1....2....2....3....3....4....4....5....5....0 5 0 5 0 5 0 5 0 5CPU% per second (last 60 seconds) 3333333333333333333333333333333333333333333333333333333333 333333333333333333333333333333333333333333333333333333333310090807060504030 #################20 #################10 #################0....5....1....1....2....2....3....3....4....4....5....5....0 5 0 5 0 5 0 5 0 5CPU% per minute (last 60 minutes)* = maximum CPU% # = average CPU%16080100 *90 *80 *70 **60 **50 **40 ##30 ##20 ##10 ##0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.0 5 0 5 0 5 0 5 0 5 0 5 0CPU% per hour (last 72 hours)* = maximum CPU% # = average CPU%Related Commands
show mpf interface
To display Multi-Processor Forwarding (MPF) packet counter information on each physical interface, use the show mpf interface command in user EXEC or privileged EXEC mode.
show mpf interface [interface-name-and-number] [dot1q-vlan-num]
Syntax Description
Command Default
No default behavior or values.
Command Modes
User EXEC
Privileged EXECCommand History
Usage Guidelines
This command is supported for physical interfaces and subinterfaces. There is no support for the virtual access interface (VAI).
You can display the interface count information for a specific Gigabit Ethernet interface by specifying the interface name and number. To display interface information for a specified subinterface only, you must use the 802.1Q VLAN number for the subinterface because the MPF software does not recognize the subinterface number.
Using the show mpf interface command without arguments displays the interface information for all Gigabit Ethernet interfaces and subinterfaces.
Using the clear mpf interface command resets the interface packet counters shown in the show mpf interface command output.
Examples
The following example using the show mpf interface command without arguments displays interface information about up or down state, type of counter (receiving or transmitting packet or bytes), and count number for packets or bytes for all Gigabit Ethernet interfaces (only GigabitEthernet0/1 in this example) and subinterfaces:
Router# show mpf interfaceName Index State Counter CountGi0/1 0 up RX packets 1004RX bytes 158632TX packets 5004Name Index State Counter CountTX bytes 790632RX punts 32961TX punts 85972Gi0/1 1 upGi0/1.100 100 up RX packets 1004RX bytes 158632TX packets 5004TX bytes 790632RX punts 25Gi0/1.101 101 upGi0/1.102 102 upGi0/1.105 105 upGi0/1.106 106 upGi0/1.107 107 upGi0/1.200 200 upGi0/1.201 201 up RX punts 29Gi0/1.202 202 upGi0/1.206 206 upGi0/1.2002 602 up RX punts 26114Gi0/1.2004 604 upThe following example specifies interface information for Gigabit Ethernet interface 0/1 subinterface 100. However, all Gigabit Ethernet interface and subinterface information is displayed because MPF does not recognize the subinterface number, unless it is a VLAN number.
Router# show mpf interface GigabitEthernet0/1.100Name Index State Counter CountGi0/1 0 up RX packets 1004RX bytes 158632TX packets 5004TX bytes 790632RX punts 32996TX punts 86062Gi0/1 1 upGi0/1.100 100 up RX packets 1004RX bytes 158632TX packets 5004TX bytes 790632RX punts 25Gi0/1.101 101 upGi0/1.102 102 upGi0/1.105 105 upGi0/1.106 106 upGi0/1.107 107 upGi0/1.200 200 upGi0/1.201 201 up RX punts 29Gi0/1.202 202 upGi0/1.206 206 upGi0/1.2002 602 up RX punts 26142Gi0/1.2004 604 upThe following example displays the interface information for VLAN number 100 on Gigabit Ethernet interface 0/1, including up state, receiving packet count, receiving bytes count, transmitting packet count, transmitting byte count, and receiving punt count:
Router# show mpf interface GigabitEthernet0/1 100Name Index State Counter CountGi0/1.100 100 up RX packets 1004RX bytes 158632TX packets 5004TX bytes 790632RX punts 25Table 18 describes the fields shown in the output examples.
Related Commands
show mpf ip exact-route
To display the exact route for a source-destination address IP pair in a Multi-Processor Forwarding (MPF) system, use the show mpf ip exact-route command in user EXEC or privileged EXEC mode.
show mpf ip exact-route [vrf vrf-name] src-ip-addr dst-ip-addr
Syntax Description
Command Default
No default behavior or values.
Command Modes
User EXEC
Privileged EXECCommand History
Usage Guidelines
When you are load balancing per destination, this command shows the exact next hop that is used for a given IP source-destination pair.
Examples
The following sample output displays the exact next hop (10.1.104.1) for the specified source IP address (10.1.1.1) and destination IP address (172.17.249.252):
Router# show mpf ip exact-route 10.1.1.1 172.17.249.25210.1.1.1 -> 172.17.249.252 :GigabitEthernet2/0 (next hop 10.1.104.1)Table 19 describes the significant fields shown in the output example.
Related Commands
show mpf punt
To display the Multi-Processor Forwarding (MPF) punt reason and punt packet count for the chassis, use the show mpf punt command in user EXEC or privileged EXEC mode.
show mpf punt
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Privileged EXECCommand History
Usage Guidelines
The punt reason and punt packet count are collected for each box or chassis, not for each interface. Packets that are punted are directed for Cisco IOS processing and are not accelerated by MPF.
Examples
The following example displays the types of packet, the reasons for the punt, and the punt packet counts for the router chassis.
Router# show mpf puntType Message Countl2tp unknown session errors 7l2tp L2TP control 6ipv4/verify adjacency punt 1ethernet unknown ethernet type 542ppp punts due to unknown protocol 333arp ARP request 6Table 20 describes the fields in the show mpf punt output display.
Related Commands
show ppp interface
To display the IP Control Protocol (IPCP) and Link Control Protocol (LCP) information for all the sessions on an ATM or Gigabit Ethernet interface, use the show ppp interface command in user EXEC or privileged EXEC mode.
show ppp interface interface-number
Syntax Description
Command Modes
User EXEC (>)
Privileged EXEC (#))Command History
Cisco IOS XE Release 2.4
This command was introduced.
Cisco IOS Release 15.0(1)M
This command was integrated into Cisco IOS Release 15.0(1)M.
Usage Guidelines
The show ppp interface command is used to display IPCP and LCP information for all the sessions on an ATM or Gigabit Ethernet interface.
Examples
The following example displays the IPCP and LCP information on the Gigabit Ethernet interface. The output is self-explanatory.
Router# show ppp interface GigabitEthernet 0/1/0.101Gi0/1/0.101 No PPP serial contextPPP Session Info----------------Interface : Vi2.1PPP ID : 0x26000001Phase : UPStage : Local TerminationPeer Name : user_01@domain_3Peer Address : 12.0.0.1Control Protocols: LCP[Open] CHAP+ IPCP[Open]Session ID : 1AAA Unique ID : 12SSS Manager ID : 0x25000003SIP ID : 0x7B000002PPP_IN_USE : 0x15Vi2.1 LCP: [Open]Our Negotiated OptionsVi2.1 LCP: MRU 1492 (0x010405D4)Vi2.1 LCP: AuthProto CHAP (0x0305C22305)Vi2.1 LCP: MagicNumber 0x21F4CD31 (0x050621F4CD31)Peer's Negotiated OptionsVi2.1 LCP: MRU 1492 (0x010405D4)Vi2.1 LCP: MagicNumber 0x4A51A20E (0x05064A51A20E)Vi2.1 IPCP: [Open]Our Negotiated OptionsVi2.1 IPCP: Address 10.0.0.1 (0x03060A000001)Peer's Negotiated OptionsVi2.1 IPCP: Address 12.0.0.1 (0x03060C000001)Related Commands
ppp bap
Displays the BAP configuration settings and run-time status for a multilink bundle.
ppp queues
Monitors the number of requests processed by each AAA background process.
show ppp subscriber statistics
To display PPP subscriber statistics, use the show ppp subscriber statistics command in privileged EXEC mode.
show ppp subscriber statistics
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command is useful for obtaining events and statistics for PPP subscribers. Use the show ppp subscriber statistics command to display a cumulative count of PPP subscriber events and statistics, and to display an incremental count since the clear ppp subscriber statistics command was last issued.
Examples
The following is sample output from the show ppp subscriber statistics command:
Router# show ppp subscriber statisticsPPP Subscriber Events TOTAL SINCE CLEAREDEncap 32011 32011DeEncap 16002 16002CstateUp 173 173CstateDown 36 36FastStart 0 0LocalTerm 7 7LocalTermVP 0 0MoreKeys 173 173Forwarding 0 0Forwarded 0 0SSSDisc 0 0SSMDisc 0 0PPPDisc 167 167PPPBindResp 173 173PPPReneg 3 3RestartTimeout 169 169>PPP Subscriber Statistics TOTAL SINCE CLEAREDIDB CSTATE UP 16008 16008IDB CSTATE DOWN 40 40APS UP 0 0APS UP IGNORE 0 0APS DOWN 0 0READY FOR SYNC 10 10Table 21 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.
Related Commands
show pppatm session
To display information on PPP over ATM (PPPoA) sessions, use the show pppatm session command in privileged EXEC mode.
show pppatm session [interface atm interface-number.subinterface-number]
Syntax Description
Command Default
If no keywords or arguments are provided, information for all PPPoA sessions is displayed.
Command Modes
Privileged EXEC (#)
Command History
12.2(13)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
This command is used for obtaining detailed information on PPPoA sessions and the interfaces on which they are running.
If a subinterface number is given in the command, the output is a report of the PPPoA sessions in the subinterface. If a main interface number is given, the output has the report for each individual subinterface of that main interface. If no interface is given, the output contains the report for each ATM interface on the router.
Examples
The following example shows how to display information for PPPoA sessions on ATM interface 8/0/0.12345678:
Router# show pppatm session atm8/0/0.123456781 session in LCP_NEGOTIATION (LCP) State1 session totalUniq ID ATM-Intf VPI/VCI Encap VT VA VA-st State8001 8/0/0.12345678 0/32035 SNAP 10 N/A N/A LCPTable 22 describes the significant fields shown in the display.
Related Commands
show pppatm statistics
To display PPP over ATM (PPPoA) statistics, use the show pppatm statistics command in privileged EXEC mode.
show pppatm statistics
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show pppatm statistics command to obtain statistics for PPPoA sessions. This command gives a total count of PPPoA events since the clear pppatm statistics command was last issued.
Examples
The following example displays PPPoA statistics:
Router# show pppatm statistics4000 : Context Allocated events3999 : SSS Request events7998 : SSS Msg events3999 : PPP Msg events3998 : Up Pending events3998 : Up Dequeued events3998 : Processing Up events3999 : Vaccess Up events3999 : AAA unique id allocated events3999 : No AAA method list set events3999 : AAA gets nas port details events3999 : AAA gets retrived attrs events68202 : AAA gets dynamic attrs events3999 : Access IE allocated eventsTable 23 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.
Related Commands
show pppatm summary
To display PPP over ATM (PPPoA) session counts, use the show pppatm summary command in privileged EXEC mode.
show pppatm summary [interface atm interface-number[.subinterface-number]]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(13)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
This command is useful for obtaining session counts, the state of the PPPoA sessions, and the interfaces on which they are running.
This command gives a summary of the number of PPPoA sessions in each state and the session information of each individual session. If a subinterface number is given in the command, the output is a summary report of the PPPoA sessions in the subinterface. If a main interface number is given, the output will have the summary reports for each individual subinterface of that main interface as shown in the Examples section. If no interface is given, the output will contain the summary reports for each ATM interface on the router.
Examples
The following example displays PPPoA session counts and states for ATM interface 5/0:
Router# show pppatm summary interface atm 5/0ATM5/0.3:0 sessions totalATM5/0.6:1 in PTA (PTA) State1 sessions totalVPI VCI Conn ID PPPoA ID SSS ID PPP ID AAA ID VT VA/SID State6 101 11 DA000009 BB000013 E5000017 C 1 1.1 PTAMost of the fields displayed by the show pppatm summary command are self-explanatory. Table 24 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.
Related Commands
show pppatm trace
To display a sequence of PPP over ATM (PPPoA) events, errors, and state changes when the debug pppatm command is enabled, use the show pppatm trace command in privileged EXEC mode.
show pppatm trace [error | event | state] interface atm interface-number[.subinterface-number] vc {[vpi/]vci | virtual-circuit-name}
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(13)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
When the debug pppatm command has been enabled, this command displays messages from the specified permanent virtual circuit (PVC). If only one debug pppatm command keyword is supplied in the command, the report will display only the sequence of events for that particular debug type.
Examples
The following example traces the debugging messages supplied by the debug pppatm command on PVC 101. The report is used by Cisco technical personnel for diagnosing system problems.
Router# debug pppatm trace interface atm 1/0.10 vc 101Router# debug pppatm state interface atm 1/0.10 vc 101Router# debug pppatm event interface atm 1/0.10 vc 101Router# show pppatm trace interface atm 1/0.10 vc 101Event = DisconnectingEvent = AAA gets dynamic attrsEvent = AAA gets dynamic attrsEvent = SSS CleanupState = DOWNEvent = Up PendingEvent = Up DequeuedEvent = Processing UpEvent = Access IE allocatedEvent = Set Pkts to SSSEvent = AAA gets retrieved attrsEvent = AAA gets nas port detailsEvent = AAA gets dynamic attrsEvent = AAA gets dynamic attrsEvent = AAA unique id allocatedEvent = No AAA method list setEvent = SSS RequestState = NAS_PORT_POLICY_INQUIRYEvent = SSS MsgState = PPP_STARTEvent = PPP MsgState = LCP_NEGOTIATIONEvent = PPP MsgEvent = Access IE get nas portEvent = AAA gets dynamic attrsEvent = AAA gets dynamic attrsEvent = PPP MsgEvent = Set Pkts to SSSState = FORWARDEDRelated Commands
show pppoe derived
To display the cached PPP over Ethernet (PPPoE) configuration that is derived from the subscriber profile for a specified PPPoE profile, use the show pppoe derived command in privileged EXEC mode.
show pppoe derived group group-name
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
A subscriber profile can be configured locally on the router or remotely on a AAA server. The PPPoE configuration that is derived from a subscriber profile is cached locally under the PPPoE profile. Use the show pppoe derived command to display the cached PPPoE configuration that is derived from the subscriber profile for a specified PPPoE profile.
A subscriber profile contains a list of PPPoE service names. The PPPoE server will advertise the service names that are listed in the subscriber profile to each PPPoE client connection that uses the configured PPPoE profile. A subscriber profile is assigned to a PPPoE profile by using the service profile command in BBA group configuration mode.
Examples
The following example shows the PPPoE configuration for PPPoE profile "sp_group_a" that is derived from subscriber profile "abc". The services "isp_xyz", "isp_aaa", and "isp_bbb" will be advertised to each PPPoE client connection that uses PPPoE profile "sp_group_a".
Router# show pppoe derived group sp_group_aDerived configuration from subscriber profile 'abc':Service names:isp_xyz, isp_aaa, isp_bbbRelated Commands
show pppoe redundancy
To display PPP over Ethernet (PPPoE) events and statistics, use the show pppoe redundancy command in privileged EXEC mode.
show pppoe redundancy
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command is useful for obtaining statistics and events for PPPoE sessions. This command gives a cumulative count of PPPoE events and statistics, and an incremental count since the last time the clear pppoe redundancy command was issued.
Examples
The following is sample output from the show pppoe redundancy command:
Router# show pppoe statisticsPPPoE Events TOTAL SINCE CLEARED------------------------------ ------------- -------------INVALID 0 0PRE-SERVICE FOUND 0 0PRE-SERVICE NONE 0 0SSS CONNECT LOCAL 16002 16002SSS FORWARDING 0 0SSS FORWARDED 0 0SSS MORE KEYS 16002 16002SSS DISCONNECT 0 0CONFIG UPDATE 0 0STATIC BIND RESPONSE 16002 16002PPP FORWARDING 0 0PPP FORWARDED 0 0PPP DISCONNECT 0 0PPP RENEGOTIATION 0 0SSM PROVISIONED 16002 16002SSM UPDATED 16002 16002SSM DISCONNECT 0 0>PPPoE Statistics TOTAL SINCE CLEARED------------------------------ ------------- -------------SSS Request 16002 16002SSS Response Stale 0 0SSS Disconnect 0 0PPPoE Handles Allocated 16002 16002PPPoE Handles Freed 0 0Dynamic Bind Request 16002 16002Static Bind Request 16002 16002Table 25 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.
SSS
Related Commands
show pppoe relay context all
To display PPP over Ethernet (PPPoE) relay contexts created for relaying PPPoE Active Discovery (PAD) messages, use the show pppoe relay context all command in privileged EXEC mode.
show pppoe relay context all
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
12.3(4)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
Use this command to display relay contexts created for relaying PAD messages.
Examples
The following is sample output from the show pppoe relay context all command:
Router# show pppoe relay context allTotal PPPoE relay contexts 1UID ID Subscriber-profile State25 18 Profile-1 RELAYEDTable 26 describes the significant fields shown in the show pppoe relay context all command output.
Related Commands
clear pppoe relay context
Clears PPPoE relay contexts created by PAD messages.
show pppoe session
Displays information about currently active PPPoE sessions.
show pppoe session
To display information about currently active PPP over Ethernet (PPPoE) sessions, use the show pppoe session command in user EXEC or privileged EXEC mode.
show pppoe session [all | interface type number | packets]
Syntax Description
Command Modes
User EXEC (>)
Privileged EXEC (#)Command History
Examples
Single Session: Example
The following is sample output from the show pppoe session command:
Router# show pppoe session1 session in FORWARDED (FWDED) State1 session total
PPPoE Session with IWF and ppp-max-payload Tag Example
The following is sample output from the show pppoe session command when there is an IWF session and the ppp-max-payload tag is accepted in the discovery frame (available in Cisco IOS Release 12.2(31)SB2):
Router# show pppoe session1 session in LOCALLY_TERMINATED (PTA) State1 session total. 1 session of it is IWF type
Table 27 describes the significant fields shown in the displays.
show pppoe session all: Example
The following example shows information per session for the show pppoe session all command.
Router# show pppoe session allTotal PPPoE sessions 1session id: 21local MAC address: 0006.52a4.901e, remote MAC address: 0001.c9f2.a81evirtual access interface: Vi2.1, outgoing interface: Et1/2, IWFPPP-Max-Payload tag: 150015942 packets sent, 15924 received224561 bytes sent, 222948 receivedRelated Commands
show pppoe statistics
To display PPP over Ethernet (PPPoE) events and statistics, use the show pppoe statistics command in privileged EXEC mode.
show pppoe statistics
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command is useful for obtaining statistics and events for PPPoE sessions. Use the show pppoe statistics command to display a cumulative count of PPPoE events and statistics, and to display an incremental count since the last time the clear pppoe statistics command was issued.
Examples
The following is sample output from the show pppoe statistics command:
Router# show pppoe statisticsPPPoE Events TOTAL SINCE CLEARED------------------------------ ------------- -------------INVALID 0 0PRE-SERVICE FOUND 0 0PRE-SERVICE NONE 0 0SSS CONNECT LOCAL 16002 16002SSS FORWARDING 0 0SSS FORWARDED 0 0SSS MORE KEYS 16002 16002SSS DISCONNECT 0 0CONFIG UPDATE 0 0STATIC BIND RESPONSE 16002 16002PPP FORWARDING 0 0PPP FORWARDED 0 0PPP DISCONNECT 0 0PPP RENEGOTIATION 0 0SSM PROVISIONED 16002 16002SSM UPDATED 16002 16002SSM DISCONNECT 0 0>PPPoE Statistics TOTAL SINCE CLEARED------------------------------ ------------- -------------SSS Request 16002 16002SSS Response Stale 0 0SSS Disconnect 0 0PPPoE Handles Allocated 16002 16002PPPoE Handles Freed 0 0Dynamic Bind Request 16002 16002Static Bind Request 16002 16002Table 28 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.
Related Commands
show pppoe throttled mac
To display information about MAC addresses from which PPP over Ethernet (PPPoE) sessions are throttled, that is, not currently accepted, use the show pppoe throttled mac command in privileged EXEC mode.
show pppoe throttled mac
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
PPPoE connection throttling limits the number of PPPoE session requests that can be made from a MAC address within a specified period of time. Use the show pppoe throttled mac command to display MAC addresses and ingress ports of users that exceed connection throttling limits configured using the sessions throttle command.
Examples
The following is sample output from the show pppoe throttled mac command:
Router# show pppoe throttled macMAC(s) throttledMAC Ingress Port00c1.00aa.006c ATM1/0/0.101007c.009e.0070 ATM1/0/0.1010097.009d.007a ATM1/0/0.101008c.0077.0082 ATM1/0/0.10100b5.00a8.009f ATM1/0/0.10100a4.0088.00b5 ATM1/0/0.101Table 29 describes the significant fields shown in the display.
Related Commands
sessions throttle
Configures PPPoE connection throttling in BBA-group configuration mode.
show sss session
To display Subscriber Service Switch session status, use the show sss session command in privileged EXEC mode.
show sss session [all]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(13)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
Use this command to verify correct operation of PPP connections in the Subscriber Service Switch environment.
Examples
The following sample output from the show sss session command provides a basic report of Subscriber Service Switch session activity:
Router# show sss sessionCurrent SSS Information: Total sessions 9Uniq ID Type State Service Identifier Last Chg9 PPPoE/PPP connected VPDN nobody3@cisco.com 00:02:3610 PPPoE/PPP connected VPDN nobody3@cisco.com 00:01:5211 PPPoE/PPP connected VPDN nobody3@cisco.com 00:01:523 PPPoE/PPP connected VPDN user3@cisco.com 2d21h6 PPPoE/PPP connected Local Term user1 00:03:357 PPPoE/PPP connected Local Term user2 00:03:358 PPPoE/PPP connected VPDN nobody3@cisco.com 00:02:362 PPP connected Local Term user5 00:05:064 PPP connected VPDN nobody2@cisco.com 00:06:52The following sample output from the show sss session all command provides a more extensive report of Subscriber Service Switch session activity:
Router# show sss session allCurrent SSS Information: Total sessions 9SSS session handle is 40000013, state is connected, service is VPDNUnique ID is 9SIP subscriber access type(s) are PPPoE/PPPIdentifier is nobody3@cisco.comLast Changed 00:02:49Root SIP Handle is DF000010, PID is 49AAA unique ID is 10Current SIP options are Req Fwding/Req FwdedSSS session handle is B0000017, state is connected, service is VPDNUnique ID is 10SIP subscriber access type(s) are PPPoE/PPPIdentifier is nobody3@cisco.comLast Changed 00:02:05Root SIP Handle is B9000015, PID is 49AAA unique ID is 11Current SIP options are Req Fwding/Req FwdedSSS session handle is D6000019, state is connected, service is VPDNUnique ID is 11SIP subscriber access type(s) are PPPoE/PPPIdentifier is nobody3@cisco.comLast Changed 00:02:13Root SIP Handle is D0000016, PID is 49AAA unique ID is 12Current SIP options are Req Fwding/Req FwdedSSS session handle is 8C000003, state is connected, service is VPDNUnique ID is 3SIP subscriber access type(s) are PPPoE/PPPIdentifier is user3@cisco.comLast Changed 2d21hRoot SIP Handle is D3000002, PID is 49AAA unique ID is 3Current SIP options are Req Fwding/Req FwdedSSS session handle is BE00000B, state is connected, service is Local TermUnique ID is 6SIP subscriber access type(s) are PPPoE/PPPIdentifier is user1Last Changed 00:03:56Root SIP Handle is A9000009, PID is 49AAA unique ID is 7Current SIP options are Req Fwding/Req FwdedSSS session handle is DC00000D, state is connected, service is Local TermUnique ID is 7SIP subscriber access type(s) are PPPoE/PPPIdentifier is user2Last Changed 00:03:57Root SIP Handle is 2C00000A, PID is 49AAA unique ID is 8Current SIP options are Req Fwding/Req FwdedSSS session handle is DB000011, state is connected, service is VPDNUnique ID is 8SIP subscriber access type(s) are PPPoE/PPPIdentifier is nobody3@cisco.comLast Changed 00:02:58Root SIP Handle is 1000000F, PID is 49AAA unique ID is 9Current SIP options are Req Fwding/Req FwdedSSS session handle is 3F000007, state is connected, service is Local TermUnique ID is 2SIP subscriber access type(s) are PPPIdentifier is user5Last Changed 00:05:30Root SIP Handle is 8A000009, PID is 92AAA unique ID is 1Current SIP options are Req Fwding/Req FwdedSSS session handle is 97000005, state is connected, service is VPDNUnique ID is 4SIP subscriber access type(s) are PPPIdentifier is nobody2@cisco.comLast Changed 00:07:16Root SIP Handle is 32000000, PID is 92AAA unique ID is 5Current SIP options are Req Fwding/Req FwdedMost of the fields displayed by the show sss session and show sss session all commands are self-explanatory. Table 30 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.
Related Commands
show vpdn session
Displays session information about the L2TP and L2F protocols, and PPPoE tunnels in a VPDN.
show vpdn session
To display session information about active Layer 2 sessions for a virtual private dialup network (VPDN), use the show vpdn session command in privileged EXEC mode.
show vpdn session [l2f | l2tp | pptp] [all | packets | sequence | state [filter]]
Syntax Description
l2f
(Optional) Displays information about Layer 2 Forwarding (L2F) calls only.
l2tp
(Optional) Displays information about Layer 2 Tunnel Protocol (L2TP) calls only.
pptp
(Optional) Displays information about Point-to-Point Tunnel Protocol (PPTP) calls only.
all
(Optional) Displays extensive reports about active sessions.
packets
(Optional) Displays information about packet and byte counts for sessions.
sequence
(Optional) Displays sequence information for sessions.
state
(Optional) Displays state information for sessions.
filter
(Optional) One of the filter parameters defined in Table 31.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show vpdn session command to display information about all active sessions using L2TP, L2F, and PPTP.
The output of the show vpdn session command displays PPPoE session information as well. PPPoE is supported on ATM permanent virtual connections (PVCs) compliant with RFC 1483 only. PPPoE is not supported on Frame Relay and any other LAN interfaces such as FDDI and Token Ring.
Reports and options for this command depend upon the configuration in which it is used. Use the command-line question mark (?) help function to display options available with the show vpdn session command.
Table 31 defines the filter parameters available to refine the output of the show vpdn session command. You may use any one of the filter parameters in place of the filter argument.
Examples
The show vpdn session command provides reports on call activity for all active sessions. The following output is from a device carrying active L2TP, L2F, and PPPoE sessions:
Router# show vpdn sessionL2TP Session Information Total tunnels 1 sessions 4LocID RemID TunID Intf Username State Last Chg Uniq ID4 691 13695 Se0/0 nobody2@cisco.com est 00:06:00 45 692 13695 SSS Circuit nobody1@cisco.com est 00:01:43 86 693 13695 SSS Circuit nobody1@cisco.com est 00:01:43 93 690 13695 SSS Circuit nobody3@cisco.com est 2d21h 3L2F Session Information Total tunnels 1 sessions 2CLID MID Username Intf State Uniq ID1 2 nobody@cisco.com SSS Circuit open 101 3 nobody@cisco.com SSS Circuit open 11%No active PPTP tunnelsPPPoE Session Information Total tunnels 1 sessions 7PPPoE Session InformationUID SID RemMAC OIntf Intf SessionLocMAC VASt state3 1 0030.949b.b4a0 Fa2/0 N/A CNCT_FWDED0010.7b90.08406 2 0030.949b.b4a0 Fa2/0 Vi1.1 CNCT_PTA0010.7b90.0840 UP7 3 0030.949b.b4a0 Fa2/0 Vi1.2 CNCT_PTA0010.7b90.0840 UP8 4 0030.949b.b4a0 Fa2/0 N/A CNCT_FWDED0010.7b90.08409 5 0030.949b.b4a0 Fa2/0 N/A CNCT_FWDED0010.7b90.084010 6 0030.949b.b4a0 Fa2/0 N/A CNCT_FWDED0010.7b90.084011 7 0030.949b.b4a0 Fa2/0 N/A CNCT_FWDED0010.7b90.0840Table 32 describes the significant fields shown in the show vpdn session display.
The show vpdn session packets command provides reports on call activity for all the currently active sessions. The following output is from a device carrying an active PPPoE session:
Router# show vpdn session packets%No active L2TP tunnels%No active L2F tunnelsPPPoE Session Information Total tunnels 1 sessions 1PPPoE Session InformationSID Pkts-In Pkts-Out Bytes-In Bytes-Out1 202333 202337 2832652 2832716Table 33 describes the significant fields shown in the show vpdn session packets command display.
The show vpdn session all command provides extensive reports on call activity for all the currently active sessions. The following output is from a device carrying active L2TP, L2F, and PPPoE sessions:
Router# show vpdn session allL2TP Session Information Total tunnels 1 sessions 4Session id 5 is up, tunnel id 13695Call serial number is 3355500002Remote tunnel name is User03Internet address is 10.0.0.63Session state is established, time since change 00:03:5352 Packets sent, 52 received2080 Bytes sent, 1316 receivedLast clearing of "show vpdn" counters neverSession MTU is 1464 bytesSession username is nobody@cisco.comInterfaceRemote session id is 692, remote tunnel id 58582UDP checksums are disabledSSS switching enabledNo FS cached header information availableSequencing is offUnique ID is 8Session id 6 is up, tunnel id 13695Call serial number is 3355500003Remote tunnel name is User03Internet address is 10.0.0.63Session state is established, time since change 00:04:2252 Packets sent, 52 received2080 Bytes sent, 1316 receivedLast clearing of "show vpdn" counters neverSession MTU is 1464 bytesSession username is nobody@cisco.comInterfaceRemote session id is 693, remote tunnel id 58582UDP checksums are disabledSSS switching enabledNo FS cached header information availableSequencing is offUnique ID is 9Session id 3 is up, tunnel id 13695Call serial number is 3355500000Remote tunnel name is User03Internet address is 10.0.0.63Session state is established, time since change 2d21h48693 Packets sent, 48692 received1947720 Bytes sent, 1314568 receivedLast clearing of "show vpdn" counters neverSession MTU is 1464 bytesSession username is nobody2@cisco.comInterfaceRemote session id is 690, remote tunnel id 58582UDP checksums are disabledSSS switching enabledNo FS cached header information availableSequencing is offUnique ID is 3Session id 4 is up, tunnel id 13695Call serial number is 3355500001Remote tunnel name is User03Internet address is 10.0.0.63Session state is established, time since change 00:08:40109 Packets sent, 3 received1756 Bytes sent, 54 receivedLast clearing of "show vpdn" counters neverSession MTU is 1464 bytesSession username is nobody@cisco.comInterface Se0/0Remote session id is 691, remote tunnel id 58582UDP checksums are disabledIDB switching enabledFS cached header information:encap size = 36 bytes4500001C BDDC0000 FF11E977 0A00003E0A00003F 06A506A5 00080000 0202E4D602B30000Sequencing is offUnique ID is 4L2F Session Information Total tunnels 1 sessions 2MID: 2User: nobody@cisco.comInterface:State: openPackets out: 53Bytes out: 2264Packets in: 51Bytes in: 1274Unique ID: 10Last clearing of "show vpdn" counters neverMID: 3User: nobody@cisco.comInterface:State: openPackets out: 53Bytes out: 2264Packets in: 51Bytes in: 1274Unique ID: 11Last clearing of "show vpdn" counters never%No active PPTP tunnelsPPPoE Session Information Total tunnels 1 sessions 7PPPoE Session InformationSID Pkts-In Pkts-Out Bytes-In Bytes-Out1 48696 48696 681765 13146572 71 73 1019 10433 71 73 1019 10434 61 62 879 15675 61 62 879 15676 55 55 791 13637 55 55 795 1363The significant fields shown in the show vpdn session all command display are similar to those defined in Table 32 and Table 33.
Related Commands
shutdown (PVC range)
To deactivate a permanent virtual circuit (PVC) range, use the shutdown command in PVC range configuration mode. To reactivate a PVC range, use the no form of this command.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Defaults
PVC range is active.
Command Modes
PVC range configuration
Command History
12.1(5)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Examples
In the following example, a PVC range called "range1" is deactivated:
interface atm 6/0.110 multipointrange range1 pvc 100 4/199shutdownRelated Commands
range pvc
Defines a range of ATM PVCs.
show pppatm summary
Deactivates an individual PVC within a PVC range.
shutdown (PVC-in-range)
To deactivate an individual permanent virtual circuit (PVC) within a PVC range, use the shutdown command in PVC-in-range configuration mode. To reactivate an individual PVC within PVC range, use the no form of this command.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Defaults
The PVC is active.
Command Modes
PVC-in-range configuration
Command History
12.1(5)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Examples
In the following example, "pvc1" within the PVC range called "range1" is deactivated:
interface atm 6/0.110 multipointrange range1 pvc 100 4/199pvc-in-range pvc1 7/104shutdownRelated Commands
pvc-in-range
Configures an individual PVC within a PVC range.
shutdown (PVC range)
Deactivates a PVC range.
subscriber access
To configure a network access server (NAS) to enable Subscriber Service Switch (SSS) to preauthorize the NAS port identifier (NAS-Port-ID) string before authorizing the domain name, use the subscriber access command in global configuration mode. To disable SSS preauthorization, use the no form of this command.
subscriber access {pppoe | pppoa} pre-authorize nas-port-id [default | list-name] [send username]
no subscriber access {pppoe | pppoa} pre-authorize nas-port-id
Syntax Description
Defaults
Preauthorization is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
The NAS-Port-ID string is used to locate the first service record, which may contain one of three attributes, as follows:
•
This filtered service key then locates the final service. See the vpdn authorize domain command for more information.
•
•
Once NAS port authorization has taken place, normal authorization, which is usually the domain authorization, continues.
Logical Line ID
The LLID is an alphanumeric string of 1 to 253 characters that serves as the logical identification of a subscriber line. The LLID is maintained in a RADIUS server customer profile database and enables users to track their customers on the basis of the physical lines on which customer calls originate. Downloading the LLID is also referred to as "preauthorization" because it occurs before normal virtual private dialup network (VPDN) authorization downloads layer two tunnel protocol (L2TP) information.
This command enables LLID and SSS querying only for PPP over Ethernet over ATM (PPPoEoATM) and PPP over Ethernet over VLAN (PPPoEoVLAN or Dot1Q) calls; all other calls, such as ISDN, are not supported.
Per-NAS-Port Session Limits for PPPoE
Use this command to configure SSS preauthorization on the L2TP Access Concentrator (LAC) so that the PPPoE per-NAS-port session limit can be downloaded from the customer profile database. To use PPPoE per-NAS-port session limits, you must also configure the PPPoE Session-Limit per NAS-Port Cisco attribute-value pair in the user profile.
Examples
The following example signals SSS to preauthorize the NAS-Port-ID string before authorizing the domain name. This policy applies only to sessions that have a PPPoE access type.
aaa new-modelaaa group server radius sg-llidserver 172.20.164.106 auth-port 1645 acct-port 1646aaa group server radius sg-groupserver 172.20.164.106 auth-port 1645 acct-port 1646aaa authentication ppp default group radiusaaa authorization confg-commandsaaa authorization network default group sg-groupaaa authorization network mlist_llid group sg-llidaaa session-id common!username s7200_2 password 0 labusername s5300 password 0 labusername sg-group password 0 labvpdn enable!vpdn-group 2request-dialinprotocol 12tpdomain group.cominitiate-to ip 10.1.1.1local name s7200-2!vpdn-group 3accept dialinprotocol pppoevirtual-template 1!! Signals Subscriber Service Switch to preauthorize the NAS-Port-ID string before! authorizing the domain name.subscriber access pppoe pre-authorize nas-port-id mlist-llid!interface Loopback0ip address 10.1.1.2 255.255.255.0!interface Loopback1ip address 10.1.1.1 255.255.255.0!interface Ethernet1/0ip address 10.2.2.2 255.255.255.0 secondaryip address 10.0.58.111 255.255.255.0no cdp enable!interface ATM4/0no ip addressno atm ilmi-keepalive!interface ATM4/0.1 point-to-pointpvc 1/100encapsulation aa15snapprotocol pppoe!interface virtual-template1no ip unnumbered Loopback0no peer default ip addressppp authentication chap!radius-server host 172.20.164.120 auth-port 1645 acct-port 1646 key rad123radius-server host 172.20.164.106 auth-port 1645 acct-port 1646 key rad123ip radius source-interface Loopback1The following example is identical to the previous example except that it also adds support for sending the PPP authenticating username with the preauthorization in the Connect-Info attribute. This example also includes command-line interface (CLI) suppression on the LLID if the username that is used to authenticate has a domain that includes #184.
aaa new-modelaaa group server radius sg-llidserver 172.31.164.106 auth-port 1645 acct-port 1646aaa group server radius sg-groupserver 172.31.164.106 auth-port 1645 acct-port 1646aaa authentication ppp default group radiusaaa authorization confg-commandsaaa authorization network default group sg-groupaaa authorization network mlist-llid group sg-llidaaa session-id common!username s7200-2 password 0 labusername s5300 password 0 labusername sg-group password 0 labvpdn enable!vpdn-group 2request-dialinprotocol 12tpdomain domain1.comdomain domain1.com#184initiate-to ip 10.1.1.1local name s7200-2l2tp attribute clid mask-method right * 255 match #184!vpdn-group 3accept dialinprocotol pppoevirtual-template 1!subscriber access pppoe pre-authorize nas-port-id mlist-llid send username!Related Commands
subscriber authorization enable
To enable Subscriber Service Switch type authorization, use the subscriber authorization enable command in global configuration mode. To disable the Subscriber Service Switch authorization, use the no form of this command.
subscriber authorization enable
no subscriber authorization enable
Syntax Description
This command has no arguments or keywords.
Defaults
Authorization is disabled.
Command Modes
Global configuration
Command History
12.2(13)T
This feature was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
The subscriber authorization enable command triggers Subscriber Service Switch type authorization for local termination, even if virtual private dialup network (VPDN) and Stack Group Bidding Protocol (SGBP) are disabled.
Examples
The following example enables Subscriber Service Switch type authorization:
subscriber authorization enableRelated Commands
subscriber profile
To define a Subscriber Service Switch (SSS) policy for searches of a subscriber profile database, use the subscriber profile command in global configuration mode. To change or disable the SSS policy, use the no form of this command.
subscriber profile profile-name
no subscriber profile profile-name
Syntax Description
profile-name
A unique string, which can represent (but is not limited to) keys such as a domain, dialed number identification service (DNIS), port name, or PPP over Ethernet (PPPoE) service name.
Defaults
No default profile name
Command Modes
Global configuration
Command History
Usage Guidelines
This command is used to locally search the subscriber profile database for authorization data when an authentication, authorization, and accounting (AAA) network authorization method list is configured. Make sure that the aaa authorization network default local global configuration command is included in the configuration—do not use the aaa authorization network default command without the local keyword.
Examples
The following example provides virtual private dialup network (VPDN) service to users in the domain cisco.com, and uses VPDN group group 1 to obtain VPDN configuration information:
!subscriber profile cisco.comservice vpdn group 1The following example provides VPDN service to DNIS 1234567, and uses VPDN group 1 to obtain VPDN configuration information:
!subscriber profile dnis:1234567service vpdn group 1The following example provides VPDN service using a remote tunnel (used on the multihop node), and uses VPDN group 1 to obtain VPDN configuration information:
!subscriber profile host:lacservice vpdn group 1Related Commands
subscriber redundancy
To configure broadband subscriber session redundancy policy for synchronization between high availability (HA) active and standby processors, use the subscriber redundancy command in global configuration mode. To delete the policy, use the no form of this command.
subscriber redundancy [{bulk | dynamic} limit cpu percentage delay seconds allow value] [delay seconds] [rate sessions seconds]
no subscriber redundancy
Syntax Description
Command Default
Subscriber redundancy policy applies default values.
Command Modes
Global configuration
Command History
Usage Guidelines
Cisco IOS HA functionality for broadband protocols and applications allows for stateful switchover (SSO) and in service software upgrade (ISSU) features that minimize planned and unplanned downtime and failures. HA uses the cluster control manager (CCM) to manage the capability to synchronize subscriber session bring up on the standby processor of a redundant processor system. Use the subscriber redundancy bulk command to create and modify redundancy policy used during bulk (startup) synchronization. Use the subscriber redundancy dynamic command to tune subscriber redundancy policies that throttle dynamic synchronization by monitoring CPU usage and sync rates. Use the subscriber redundancy delay command to establish session duration minimums for synchronization and manage dynamic syncing of short duration calls. Use the subscriber redundancy rate command to throttle the number of sessions to be synchronized per period.
Examples
The following example configures a 10 second delay when CPU usage exceeds 90 percent during bulk synchronization, after which 25 sessions will be synced before the CCM again checks CPU usage:
Router(config)# subscriber redundancy bulk limit cpu 90 delay 10 allow 25The following example configures a minimum session duration of 15 seconds before dynamic synchronization to the standby processor:
Router(config)# subscriber redundancy dynamic 15The following example configures 2000 sessions to be synchronized per second during bulk and dynamic synchronization:
Router(config)# subscriber redundancy rate 2000 1Related Commands
sw-module heap fp
To fine-tune the Multi-Processor Forwarding (MPF) heap memory allocation required for specific session scaling and application needs, use the sw-module heap fp command in global configuration mode. To return the setting to the default (32 MB), use the no form of the command.
sw-module heap fp [megabytes]
no sw-module heap fp
Syntax Description
megabytes
(Optional) The heap size in megabytes (MB) for the MPF processor. The default size is 32 MB.
Command Default
The default heap memory allocation size is 32 MB.
Command Modes
Global configuration
Command History
Usage Guidelines
The default heap size is 32 MB if you do not specify otherwise. Once you have changed and saved the MPF heap memory configuration, reboot the router for the MPF memory size adjustment to take effect.
The following table lists the recommended heap memory size by type of deployment and number of sessions configured:
Table 34 Recommended Heap Memory Sizes
PTA/LAC/LNS
8000 and over
80 MB
Examples
The following example sets or changes the MPF heap memory size in a router to 80 MB:
Router(config)# sw-module heap fp 80Related Commands
tag ppp-max-payload
To establish a range for the PPP maximum payload to be accepted by the Broadband Remote Access Server (BRAS), use the tag ppp-max-payload command under a virtual template in BBA group configuration mode. To disable the effect of this command, use the tag ppp-max-payload deny command.
tag ppp-max-payload [minimum value maximum value] [deny]
Syntax Description
Command Default
The physical interface default maximum transmission unit (MTU) value is used.
Command Modes
BBA group configuration
Command History
Usage Guidelines
The value of the ppp-max-payload tag accepted from a client cannot exceed the physical interface MTU minus 8 bytes (PPP over Ethernet [PPPoE] encapsulation plus PPP encapsulation). That is, the maximum accepted value of this tag from any client is limited to the minimum of physical interface MTU minus 8 and the maximum value configured by the tag ppp-max-payload maximum value.
This maximum value cap set under the BBA group can be critical to network operation because the physical interface default MTU can be extremely high (for example, 4470 octets for an ATM interface) and the BRAS administrator may not want to negotiate such a high maximum receive unit (MRU) for a session. The minimum value limitation is required to protect the BRAS against excessive fragmentation loads due to PPPoE clients negotiating too low a value for the MRU.
Examples
The following example shows the PPP-Max-Payload and IWF PPPoE Tag Support feature enabled to accept ppp-max-payload tag values from 1492 to 1892, limits the number of sessions per MAC address to 2000 when the IWF is present, and verifies that the PPP session can accept 1500-byte packets in both directions:
bba-group pppoe globalvirtual-template 1sessions per-mac limit 1sessions per-mac iwf limit 2000tag ppp-max-payload minimum 1492 maximum 1892interface Virtual-Template1ppp lcp echo mru verify minimum 1500Related Commands
bba-group pppoe
Enters BBA group configuration mode and defines a PPPoE profile.
test virtual-template subinterface
To determine if a virtual template can support the creation of subinterfaces, use the test virtual-template subinterface command in privileged EXEC mode.
test virtual-template template subinterface
Syntax Description
Defaults
No default behavior or values
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command tests the specified virtual template to determine if it can support the creation of virtual access subinterfaces. If the virtual template cannot support subinterfaces, this command lists the commands that are configured on the virtual template and that are incompatible with subinterfaces.
Examples
The following example tests virtual template 1 to determine if it can support subinterfaces. The output shows that the traffic-shape rate 50000 8000 8000 1000 command that is configured on virtual
template 1 prevents the virtual template from being able to support subinterfaces.Router# test virtual-template 1 subinterfaceSubinterfaces cannot be created using Virtual-Template1Interface specific commands:traffic-shape rate 50000 8000 8000 1000Related Commands
debug vtemplate subinterface
Displays debug messages relating to virtual access subinterfaces.
virtual-template subinterface
Enables the creation of virtual access subinterfaces.
vendor-tag circuit-id service
To enable processing of the PPPoE Vendor-Specific tag in a PPPoE Active Discovery Request (PADR) packet, which extracts the Circuit-Id part of the tag and sends it to a AAA server as the NAS-Port-Id attribute in RADIUS access requests, use the vendor-tag circuit-id service command in BBA group configuration mode. To disable the command function (default), use the no form of this command.
vendor-tag circuit-id service
no vendor-tag circuit-id service
Syntax Description
This command has no argument or keywords.
Command Default
This command is disabled.
Command Modes
BBA group configuration
Command History
12.4(4)T
This command was introduced.
12.2(28)SB
This command was integrated into Cisco IOS Release 12.2(28)SB.
Usage Guidelines
When this command is not enabled and the Broadband Remote Access Server (BRAS) receives a packet with the Vendor-Specific tag attached, the tag is ignored and the session is allowed to come up. The Vendor-Specific tag is extracted and processed for its Circuit-Id part when the vendor-tag circuit-id service command is enabled in BBA group configuration mode. Once the command is configured, the BRAS processes incoming PADR packets and sends the Circuit-Id tag to the AAA server as a NAS-Port-Id RADIUS attribute.
Examples
In the following example, outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Session-confirmation (PADS) packets are configured to retain the incoming Vendor-Specific Line-Id tag:
bba-group pppoe pppoe-tagsessions per-mac limit 50vendor-tag circuit-id serviceinterface FastEthernet0/0.1encapsulation dot1Q 120pppoe enable group pppoe-tagRelated Commands
vendor-tag circuit-id strip
Removes an incoming Vendor-Specific Line-Id tag from outgoing PADO and PADR packets.
vendor-tag circuit-id strip
Note
To remove the incoming Vendor-Specific Line-ID tag from outgoing PPPoE Active Discovery Offer and Request (PADO and PADR) packets, use the vendor-tag circuit-id strip command in BBA group configuration mode. To disable the command function, use the no form of this command.
vendor-tag circuit-id strip
no vendor-tag circuit-id strip
Syntax Description
This command has no arguments or keywords.
Command Default
This command's functionality is disabled. In the default condition, outgoing packets from the Broadband Remote Access Server (BRAS) have a digital subscriber line access multiplexer (DSLAM) inserted Remote-ID tag when the vendor-tag remote-id service command is configured.
Command Modes
BBA group configuration
Command History
Usage Guidelines
Outgoing packets from the Broadband Remote Access Server (BRAS) will have a digital subscriber line access multiplexer (DSLAM) inserted Line-ID tag when the vendor-tag circuit-id service command is configured. The DSLAM must remove the tag from the PADO packets. If the DSLAM cannot remove the tag, the BRAS must remove it before sending out the packets. When the vendor-tag circuit-id strip command is configured, the BRAS removes the incoming Vendor-Specific Line-ID tag from the outgoing packets.
Outgoing PADO and PADS packets from the BRAS will have the DSLAM-inserted Circuit-ID tag. The DSLAM must remove the tag from PADO and PADS packets. If the DSLAM cannot remove the tag, the BRAS must remove it before sending the packets out, and this is accomplished using the vendor-tag circuit-id strip command.
Examples
In the following example, the BRAS removes incoming Vendor-Specific Line-ID tags from outgoing PADO and PADS packets:
bba-group pppoe pppoe-rm-tagsessions per-mac limit 50vendor-tag circuit-id servicevendor-tag circuit-id stripinterface FastEthernet0/0.1encapsulation dot1Q 120pppoe enable group pppoe-tagRelated Commands
vendor-tag remote-id service
To enable processing of the PPPoE Vendor-Specific tag in a PPPoE Active Discovery Request (PADR) packet, which extracts the Remote-ID part of the tag and sends it to an AAA server as the NAS-Port-ID attribute in RADIUS access requests, use the vendor-tag remote-id service command in BBA group configuration mode. To disable the command function, use the no form of this command.
vendor-tag remote-id service
no vendor-tag remote-id service
Syntax Description
This command has no argument or keywords.
Command Default
This command's functionality is disabled. In this default condition, when the Broadband Remote Access Server (BRAS) receives a packet with the vendor-specific tag attached, the tag is ignored and the session is allowed to come up.
Command Modes
BBA group configuration (config-bba-group)#
Command History
12.2(31)SB2
This command was introduced.
Cisco IOS XE 2.3.0
This command was integrated. This command is supported on ASR 1000 series.
Usage Guidelines
When this command is not enabled and the BRAS receives a packet with the Vendor-Specific tag attached, the tag is ignored and the session is allowed to come up. The Vendor-Specific tag is extracted and processed for its Remote-ID part when the vendor-tag remote-id service command is enabled in BBA group configuration mode. When the command is configured, the BRAS processes incoming PADR packets and sends the Remote-ID tag to the AAA server as a NAS-Port-ID RADIUS attribute.
Examples
In the following example, outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Session-Confirmation (PADS) packets are configured to retain the incoming Vendor-Specific Line-ID tag:
Router(config-bba-group)# bba-group pppoe pppoe-tagRouter(config-bba-group)# sessions per-mac limit 50Router(config-bba-group)# vendor-tag remote-id serviceRouter(config-bba-group)# interface FastEthernet0/0.1Router(config-bba-group)# encapsulation dot1Q 120Router(config-bba-group)# pppoe enable group pppoe-tagRelated Commands
vendor-tag strip
Removes an incoming Vendor-Specific Line-ID tag from outgoing PADO and PADR packets.
vendor-tag strip
To remove the incoming Vendor-Specific Line-ID tag from outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Request (PADR) packets, use the vendor-tag strip command in BBA group configuration mode. To disable the command function, use the no form of this command.
