Cisco IOS Broadband Access Aggregation and DSL Command Reference
show access-list template through vpn service

Table Of Contents

show access-list template

show atm svc ppp

show call admission statistics

show ccm clients

show ccm queues

show ccm sessions

show controllers shdsl

show cwmp map

show cwmp methods

show cwmp parameter

show cwmp persistent

show cwmp session

show dsl interface atm

show ip http client cookie

show mpf cpu

show mpf interface

show mpf ip exact-route

show mpf punt

show ppp interface

show ppp subscriber statistics

show pppatm session

show pppatm statistics

show pppatm summary

show pppatm trace

show pppoe derived

show pppoe redundancy

show pppoe relay context all

show pppoe session

show pppoe statistics

show pppoe throttled mac

show sss session

show vpdn session

shutdown (PVC range)

shutdown (PVC-in-range)

subscriber access

subscriber authorization enable

subscriber profile

subscriber redundancy

sw-module heap fp

tag ppp-max-payload

test virtual-template subinterface

vendor-tag circuit-id service

vendor-tag circuit-id strip

vendor-tag remote-id service

vendor-tag strip

virtual-template (BBA group)

virtual-template pre-clone

virtual-template snmp

vlan-id dot1q

vlan-range dot1q

vpdn authorize domain

vpn service


show access-list template

To display information about access control lists (ACLs), use the show access-list template command in privileged EXEC mode.

show access-list template {summary | aclname | exceed number | tree}

Syntax Description

summary

Displays summary information about ACLs.

aclname

Displays information about the specified ACL.

exceed number

Limits the results to template ACLs that replace more than the specified number of individual ACLs.

tree

Provides an easily readable summary of the frequency of use of each of the ACL types that the template ACL function sees.


Command Modes

Privileged EXEC#

Command History

Cisco IOS Release
Description

12.2(27)SBKA

This command was introduced on the Cisco 10000 series router.

Cisco IOS XE Release 2.4

This command was implemented on the Cisco ASR 1000 series routers.


Examples

This section provides examples of the different forms of the show access-list template command.

show access-list template summary

The following example shows output from the show access-list template summary command:

Router# show access-list template summary 

Maximum rules per template ACL = 100
Templates active = 1
Number of ACLs those templates represent = 50
Number of tree elements = 1

Output from this command includes:

Maximum number of rules per template ACL

Number of discovered active templates

Number of ACLs replaced by those templates

show access-list template aclname

The following example shows output from the show access-list template aclname command:

Router# show access-list template 4Temp_1073741891108

	Showing data for 4Temp_1073741891108
	4Temp_1073741891108 peer_ip used is 172.17.2.62,
	is a parent, attached acl count = 98
	currentCRC = 59DAB725


Router# show access-list template 4Temp_1342177340101

	Showing data for 4Temp_1342177340101
	4Temp_1342177340101 idb's ip peer = 172.17.2.55,
	parent is 4Temp_1073741891108, user account attached to parent = 98
	currentCRC = 59DAB725

Output from this display includes:

Peer IP of the interface associated with the named template ACL

Name of the ACL serving as the primary user of the named template ACL

Number of ACLs matching the template of the named template ACL

Current cyclic redundancy check 32-bit (CRC32) value

show access-list template exceed number

The following example shows output from the show access-list template exceed number command:

Router# show access-list template exceed 49
ACL name                          OrigCRC    Count     CalcCRC
4Temp_#120795960097               104FB543   50      104FB543

Table 10 describes the significant fields shown in the display.

Table 10 show access-list template exceed Field Descriptions

Field
Description

ACL Name

Name of the template ACL. Only template ACLs that contain more than the specified number (exceed number) of child ACLs are listed.

OrigCRC

Original CRC32 value

Count

Count of ACLs that match the template ACL

CalcCRC

Calculated CRC32 value


show access-list template tree

The following example shows output from the show access-list template tree command:

Router# show access-list template tree

ACL name						OrigCRC			Count		CalcCRC
4Temp_1073741891108						59DAB725			98		59DAB725

Table 11 describes the significant fields shown in the display.

Table 11 show access-list template tree Field Descriptions

Field
Description

ACL name

Name of an ACL on the Red-Black tree

OrigCRC

Original CRC32 value

Count

Number of users of the ACL

CalcCRC

Calculated CRC32 value


show atm svc ppp

To display information about each switched virtual circuit (SVC) configured for PPP over ATM, use the show atm svc ppp command in privileged EXEC mode.

show atm svc ppp

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(3)T

This command was introduced.


Examples

The following is sample output from the show atm svc ppp command:

Router# show atm svc ppp

ATM Int.       VCD/Name      VPI   VCI  Type   VCSt  VA  VASt 
2/0.1          10             0    60   SVC     UP   1   UP 

Table 12 describes the fields shown in the display.

Table 12 show atm svc ppp Field Descriptions 

Field
Description

ATM Int.

Interface on which the SVC is configured.

VCD/Name

Virtual circuit descriptor (VCD) or name associated with the SVC.

VPI

Virtual path identifier.

VCI

Virtual channel identifier.

Type

Type of virtual circuit.

VCSt

Virtual circuit state.

VA

Virtual access interface number.

VASt

Virtual access interface state.


show call admission statistics

To monitor the global Call Admission Control (CAC) configuration parameters and the behavior of CAC, use the show call admission statistics command in user EXEC or privileged EXEC mode.

show call admission statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

12.3(8)T

This command was introduced.

12.2(18)SXD1

This command was integrated into Cisco IOS Release 12.2(18)SXD1.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

12.2(33)SXH

This command was integrated into Cisco IOS Release 12.2(33)SXH.


Examples

The following is sample output from the show call admission statistics command:

Router# show call admission statistics 

Total Call admission charges: 0, limit 25 
Total calls rejected 12, accepted 51 
Load metric: charge 0, unscaled 0

Table 13 describes the significant fields shown in the display.

Table 13 show call admission statistics Field Descriptions 

Field
Description

Total call admission charges

Percentage of system resources being charged to the system. If you configured a resource limit, SA requests are dropped when this field is equal to that limit.

limit

Maximum allowed number of total call admission charges. Valid values are 0 to 100000.

Total calls rejected

Number of SA requests that were not accepted.

accepted

Number of SA requests that were accepted.

unscaled

Not related to IKE. This value always is 0.


Related Commands

Command
Description

call admission limit

Instructs IKE to drop calls when a specified percentage of system resources are being consumed.

crypto call admission limit

Specifies the maximum number of IKE SA requests allowed before IKE begins rejecting new IKE SA requests.


show ccm clients

To display information about cluster control manager (CCM) clients on high availability (HA), dual route processor systems use the show ccm clients command in privileged EXEC mode.

show ccm clients

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

The CCM manages the capability to synchronize session bringup on the standby processor of a dual route processor HA system. Use the show ccm clients command to display information about CCM clients.

Examples

The following is sample output from the show ccm clients command on a Cisco 10000 series router active processor:

Router# show ccm clients

CCM bundles sent since peer up:
	Sync Session                0
	Update Session              0
	Active Bulk Sync            0
	Session Down                0
	ISSU client msgs            0
	Unknown msgs                0
Client events sent since peer up:
	PPP                         0
	PPPoE                       0
	PPPoA                       0
	AAA                         0
	PPP SIP                     0
	LTERM                       0
	AC                          0
	Virtual Template            0

The following is sample output from the show ccm clients command on a Cisco 10000 series router standby processor:


Router# show ccm clients

CCM bundles rcvd since last boot:
    Sync Session                8
    Update Session              0
    Active Bulk Sync            1
    Session Down                8
    ISSU client msgs            59
    Unknown msgs                0
Client events extracted since last boot:
    PPP                         72
    PPPoE                       50
    PPPoA                       0
    AAA                         32
    PPP SIP                     0
    LTERM                       8
    AC                          0

Table 14 describes the significant fields shown in the display. Any data not described in Table 23 is used for Cisco internal debugging purposes.

Table 14 show ccm clients Field Descriptions 

Field
Description

CCM bundles sent since peer up

Number of the following types of CCM bundles sent by the active processor since bringup on the standby processor :

Sync Session—Synchronization session bundles.

Update Session—Update session bundles.

Active Bulk Sync—Active processor bulk synchronization bundles.

Session Down—Session down bundles.

ISSU client msgs—In service software upgrade (ISSU) bundles.

Unknown msgs—Unknown message bundles.

Client events sent since peer up

Number of the following types of client events sent since bringup on the standby processor:

PPP—Point to point protocol (PPP) client events.

PPPoE—PPP over Ethernet client events.

PPPoA—PPP over ATM client events.

AAA—Authentication, authorization, and accounting (AAA) client events.

PPP SIP—PPP subscriber initiation process (SIP) events.

LTERM—Local termination client events.

AC—Attachment circuit events.

Virtual Template—Virtual template events.

CCM bundles rcvd since last boot

Number of the following types of CCM bundles received by the standby processor since bringup:

Sync Session—Synchronization session bundles.

Update Session—Update session bundles.

Active Bulk Sync—Active processor bulk synchronization bundles.

Session Down—Session down bundles.

ISSU client msgs—InISSU bundles.

Unknown msgs—Unknown message bundles.

Client events extracted since last boot

Number of the following client events extracted since bringup on the standby processor:

PPP—PPP client events.

PPPoE—PPPoE client events.

PPPoA—PPPoAclient events.

AAA—AAA client events.

PPP SIP—PPP SIP events.

LTERM—Local termination client events.

AC—Attachment circuit events.


Related Commands

Command
Description

show ccm queues

Displays CCM queue statistics.

show ccm sessions

Displays CCM session information.


show ccm queues

To display cluster control manager (CCM) queue statistics for high availability (HA) dual route processor systems, use the show ccm queues command in privileged EXEC mode.

show ccm queues

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

The CCM manages the capability to synchronize session bringup on the standby processor of a redundant processor HA system. Use the show ccm queues command to display queue statistics for CCM sessions on active and standby processors. This command is generally used only by Cisco engineers for internal debugging of CCM processes.

Examples

The following is sample output from the show ccm queues command. No field descriptions are provided because command output is used for Cisco internal debugging purposes only.

Router# show ccm queues

9 Event Queues
                 size   max      kicks     starts    false   suspends  ticks(ms)
 4 CCM              0     2         13         13        0          0        20

 Event Names
                          Events  Queued  MaxQueued  Suspends  usec/evt max/evt
 1  4 Sync Session              0        0        0        0         0         0
 2  4 Sync Client               0        0        0        0         0         0
 3  4 Update                    0        0        0        0         0         0
 4  4 Session Down              0        0        0        0         0         0
 5  4 Bulk Sync Begi            0        0        0        0         0         0
 6  4 Bulk Sync Cont            0        0        0        0         0         0
 7  4 Bulk Sync End             1        0        1        0        53        53
 8  4 Going Active              0        0        0        0         0         0
 9  4 Going Standby             1        0        1        0        10        10
10  4 Standby Presen            0        0        0        0         0         0
11  4 Standby Gone              0        0        0        0         0         0
13  4 CP Message               18        0        2        0       156       573
14  4 Recr Session              0        0        0        0         0         0
15  4 Recr Update               0        0        0        0         0         0
16  4 Recr Sess Down            0        0        0        0         0         0
17  4 ISSU Session N            1        0        1        0       283       283
18  4 ISSU Peer Comm            0        0        0        0         0         0

Related Commands

Command
Description

show ccm clients

Displays CCM client information

show ccm sessions

Displays CCM session information


show ccm sessions

To display information about cluster control manager (CCM) sessions on high availability (HA) dual route processor systems, use the show ccm sessions command in privileged EXEC mode.

show ccm sessions

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

The CCM manages the capability to synchronize session bringup on the standby processor of a redundant processor HA system. Use the show ccm sessions command to display information on CCM sessions on active and standby processors, and also to display information on subscriber redundancy policies configured using the subscriber redundancy command.

Examples

The following is sample output from the show ccm sessions command on the active processor of a Cisco 10000 series router:

Router# show ccm sessions

Global CCM state:                                CCM HA Active - Dynamic Sync
Global ISSU state:                               Compatible, Clients Cap 0x0
	Number of sessions in state Down:                0
	Number of sessions in state Not Ready:           0
	Number of sessions in state Ready:               0
	Number of sessions in state Dyn Sync:            0

Timeout: Timer Type   Delay    Remaining Starts    CPU Limit CPU Last
		------------ -------- --------- --------- --------- --------
		Rate         00:00:01 	-         2         -         -       
		Dynamic CPU  00:00:10 	-         0         90        0 

The following is sample output from the show ccm sessions command on the standby processor of a Cisco 10000 series router:

Router# show ccm sessions

Global CCM state:                        CCM HA Standby - Collecting
Global ISSU state:                       Compatible, Clients Cap 0xFFE

                                         Current     Bulk Sent   Bulk Rcvd
                                         ----------- ----------- -----------
Number of sessions in state Down:        0           0           0          
Number of sessions in state Not Ready:   0           0           0          
Number of sessions in state Ready:       0           0           0          
Number of sessions in state Dyn Sync:    0           0           0          

Timeout: Timer Type   Delay    Remaining Starts      CPU Limit CPU Last
         ------------ -------- --------- ----------- --------- --------
         Rate         00:00:01 -         0           -         -       
         Dynamic CPU  00:00:10 -         0           90        0       
         Bulk Time Li 00:08:00 -         0           -         -       
         RF Notif Ext 00:00:20 -         0           -         -       

Table 15 describes the significant fields shown in the display. Any data not described in Table 23 is used for Cisco internal debugging purposes.

Table 15 show ccm sessions Field Descriptions 

Field
Description

Global CCM state

Displays the number and state of CCM sessions on the following processors:

CCM HA Active- Dynamic Sync

CCM HA Standby - Collecting

Global ISSU state

Compatible clients indicates that CCM compatible in service software upgrade (ISSU) clients — that is, ISSU-compatible Cisco IOS versions — are running on both processors.

Current

CCM sessions currently ready for synchronization.

Bulk Sent

CCM sessions sent during bulk synchronization.

Bulk Rcvd

CCM sessions received during bulk synchronization.

Number of sessions in state Down

Sessions in the down state.

Number of sessions in state Not Ready

Sessions in the not ready state.

Number of sessions in state Ready

Sessions in the ready state.

Number of sessions in state Dyn Sync

Sessions in the dynamic synchronization state.

Timeout

Displays statistics for the following timers:

Rate—Monitors the number of sessions to be synchronized per configured time period.

Dynamic CPU—Monitors CPU limit, number of sessions, delay, and allowed calls configured for dynamic synchronization parameters.

Bulk Time Li—Monitors the time limit configured for bulk synchronization.

RF Notif Ext—Monitors redundancy facility(RF) active and standby state progressions and events.

Use the subscriber redundancy command to modify parameters that these timers monitor.

Delay

Timer delay in seconds for bulk and dynamic synchronization for subscriber sessions.

Remaining

Indicates remaining time in seconds before the timer expires.

Starts

Indicates the number of times the timer started.

CPU Limit

CPU usage percentage, a configurable value; default 90 percent.

CPU Last

Indicates the last time in hours, minutes, and seconds that the CPU limit timer was running.


Related Commands

Command
Description

show ccm clients

Displays CCM client information.

show ccm queues

Displays CCM queue information.

subscriber redundancy

Configures subscriber session redundancy policies.


show controllers shdsl

To display the status of the controller configured for single-pair high-bit-rate digital subscriber line (SHDSL) mode, use the show controllers shdsl command in privileged EXEC mode.

Cisco HWIC-4SHDSL and HWIC-2SHDSL

show controllers shdsl slot-number/subslot-number/port-number {brief | detailed}

Cisco IAD2420

show controller shdsl number

Syntax Description

number

SHDSL controller number. The valid controller number for SHDSL mode is 0.

slot-number/

Identifies the slot on the router in which the HWIC is installed. The slash mark is required.

subslot-number/

Identifies the subslot on the router in which the HWIC is installed. The slash mark is required.

port-number

Identifies the port on the router in which the HWIC is installed. By default, the Cisco HWIC-4SHDSL and HWIC-2SHDSL use port number 0.

brief

Provides a summary of the controller's status.

detailed

Provides a detailed report of the controller's status.


Defaults

Controller number

Command Modes

Privileged EXEC

Command History

Release
Modification

12.4(15)T

This command was updated for the Cisco HWIC-4SHDSL and HWIC-2SHDSL running on the Cisco 1841 router and on the Cisco 2800 and 3800 series access routers.

12.2(8)T

This command was introduced on Cisco IAD2420 series.


Usage Guidelines

This command is used to display the controller mode, the controller number, and associated statistics.

Examples

Cisco HWIC-4SHDSL and HWIC-2SHDSL

The following example displays the status of a Cisco HWIC-4SHDSL controller in slot 0, subslot 2, port 0 on a Cisco access router:

Router# show controllers shdsl 0/2/0 brief 

Controller SHDSL 0/2/0 is UP
  Hardware is HWIC-4SHDSL, rev 2 on slot 0, hwic slot 2 
  Capabilities: IMA, M-pair, 2/4 wire, Annex A, B, F & G, CPE termination
  cdb=0x43EB384C, plugin=0x43DE9410, ds=0x43E9A1C4 base=0xB8000000
  FPGA Version is REL.3.4.0, NIOSII FW:Ver 2.6, status Running
  SDC-16i HW:Rev 1.2, status UP, FW:Ver 1.2-1.1.3__57, status Running
  SDFE-4 HW:Rev 1.2, status UP, FW:Ver 1.1-1.5.2__001  , status Running
  NIOSII Firmware image: System
  SDC16i Firmware image: System
  SDFE4  Firmware image: System
  Number of pairs 4, number of groups configured 1
  Ignored CLI cmds(0), Event buffer: in use(0), failed(0)
  Group (0) is Not configured.
  Group (1) info:
        Type: M-pair over g.shdsl, status: Configure Firmware
        Interface: ATM0/2/1, hwidb: 0x43F04EA0, UTOPIA phy 1
        Configured/active num links: 2/0, bit map: 0x3/0x0
        Line termination: CPE, line mode: M-pair, Annex-B, PMMS disabled
        Line coding: 16-TCPAM, configured/actual rate: 4608/0 kbps
        SHDSL wire-pair (0) is in DSL DOWN state
        SHDSL wire-pair (1) is in DSL config state
Router#

Cisco IAD2420 Series

The following example displays the status of the controller that is configured for SHDSL mode on a Cisco IAD2420 series IAD:

Router# show controller shdsl 0

 SHDSL 0 controller UP
 SLOT 3: Globespan xDSL controller chipset
 Frame mode: Serial ATM
 Configured Line rate: 1160Kbps
 Line Re-activated 0 times after system bootup
 LOSW Defect alarm: None
 CRC per second alarm: None
 Line termination: CPE
 FPGA Revision: 9

Related Commands

Command
Description

controller shdsl 0

Configures the controller status and the controller number.


show cwmp map

To display the Cisco WAN Management Protocol (CWMP) map information, use the show cwmp map command in privileged EXEC mode.

show cwmp map {hosttable | landevice | lanethernetinterface | routetable | wanconnectiondevice | wandevice}

Syntax Description

hosttable

Displays host table information.

landevice

Displays LAN device profile information.

lanethernetinterface

Displays LAN Ethernet interface profile information.

routetable

Displays map forwarding table information.

wanconnectiondevice

Displays WAN connection device profile information.

wandevice

Displays WAN device profile information.


Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Examples

The following is sample output from the show cwmp map hosttable command, which shows the object parameter values:

Device# show cwmp map hosttable 

Host ID IP Address      Source  MAC Address          LeaseTimeRemaining  HostName
1       172.17.0.2       DHCP   0063.6973.636f.2d61. 86255               iou132
                                6162.622e.6363.3030. 
                                2e38.3430.312d.4574. 
                                312f.30              

The following is sample output from the show cwmp map landevice command, which shows the mapping between the interfaces available in the customer premises equipment (CPE) and the instance number of the object InternetGatewayDevice.LANDevice:


Note All the L3 Ethernet interfaces that are not configured with the cwmp wan default command and the logical interface (VLAN) of the switch port in the CPE are considered as a landevice.


Device# show cwmp map landevice 

CWMP LAN Id     Interface           
2               Ethernet0/1         
3               Ethernet0/2         
4               Ethernet0/3         
5               Ethernet1/0         
6               Ethernet1/1         
7               Ethernet1/2         
8               Ethernet1/3         

The following is example output from the show cwmp map lanethernetinterface command, which shows the mapping between the instance of the object, InternetGatewayDevice.LANDevice. and InternetGatewayDevice.LANDevice.i.LANEthernetInterfaceConfig. This display shows all the Layer 2 switch ports grouped under a Layer 3 interface (a VLAN interface).

Device# show cwmp map lanethernetinterface 

CWMP LAN Id     CWMP LAN Ether Id       Interface          

The following is example output from the show cwmp map routetable command, which shows the static IP routes configured in the CPE. This display provides the values of the parameters of the object, InternetGatewayDevice.Layer3Forwarding.Forwarding.

Device# show cwmp map routetable 

CWMP Id Enable  Dest Address    Dest Mask       Gateway Address Met     Interface
1       TRUE    0.0.0.0         0.0.0.0         172.16.0.2      1  

The following is example output from the show cwmp map wandevice command, which shows the mapping between the interface in CPE and the instance number of the interface specified in the TR-069 Agent. This is equivalent to the CWMP object instances, InternetGatewayDevice.WANDevice.


Note By default, the ATM interface is considered a wandevice even when the wmp wan command is not configured. L3 Ethernet interfaces are considered as wandevice only when the cwmp wan default command is configured.


Device# show cwmp map wandevice 

CWMP WAN Id     Interface           
1               Ethernet0/0         

The following is example output from the show cwmp map wanconnectiondevice command, which shows the instance numbers of the object InternetGatewayDevice.WANDevice.i. and InternetGatewayDevice.WANDevice.i.WANConnectionDevice.j. This command also shows the associated interface in the CPE and connection type used. The connection type value is one of the following:

IPoE—If TR-069 Agent communicates with ACS via Ethernet Interface

IPoA—IPoA configuration

PPPoA—PPPoA configuration

PPPoE—PPPoE configuration

CIP—CIP configuration

EoA—EoA configuration

This command also shows the VPI and VCI values of the ATM interface represented by the object, InternetGatewayDevice.WANDevice.i.WANConnectionDevice.j.

Device# show cwmp map wanconnectiondevice 

CWMP WAN Id     CWMP WAN Conn Id        Interface               VPI     VCI     Type
1               1                       Ethernet0/0                             IPoE   

show cwmp methods

To display the TR-069 Agent supported remote procedure call (RPC) methods and vendor profile methods, use the show cwmp methods command in privileged EXEC mode.

show cwmp methods

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Examples

The following is sample output from the show cwmp methods command:

Device# show cwmp methods

CWMP RPC Methods Supported:
GetRPCMethods
SetParameterValues
GetParameterValues
GetParameterNames
SetParameterAttributes
GetParameterAttributes
AddObject
DeleteObject
Reboot
Download
Upload
X_00000C_SetConfiguration
X_00000C_ShowStatus

show cwmp parameter

To display the TR-069 Agent (also called the Cisco WAN Management Protocol [CWMP]) parameter information, use the show cwmp parameter command in privileged EXEC mode.

show cwmp parameter {parameter-name | all | notify {active | all | forceactive | passive}}

Syntax Description

parameter-name

A CWMP (TR-069 Agent) parameter.

all

Displays all CWMP (TR-069 Agent) parameters.

notify

Displays a CWMP parameter notification attribute.

active

Displays the CWMP parameters with an active notification attribute.

all

Displays all of the CWMP parameters with a notification attribute.

forceactive

Displays all of the forceactive CWMP parameters.

passive

Displays all of the CWMP parameters with a passive notification attribute.


Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Examples

The following is sample output from the show cwmp parameter parameter-name command, which displays the value for the specified parameter:

Device# show cwmp parameter InternetGatewayDevice.ManagementServer.URL 

Parameter = InternetGatewayDevice.ManagementServer.URL 
Value = http://iou131.cisco.com/cwmp-1-0/testacs 

The following is sample output from the show cwmp parameter all command, which displays all of the parameter names supported by the TR-069 Agent:

Device# show cwmp parameter all

InternetGatewayDevice 
LANDeviceNumberOfEntries 
WANDeviceNumberOfEntries 
WANDevice 
WANConnectionNumberOfEntries 
WANCommonInterfaceConfig 
WANAccessType 
Layer1UpstreamMaxBitRate 
Layer1DownstreamMaxBitRate 
PhysicalLinkStatus 
TotalBytesSent 
TotalBytesReceived 
TotalPacketsSent 
TotalPacketsReceived 
WANConnectionDevice 
WANIPConnectionNumberOfEntries 
WANPPPConnectionNumberOfEntries 
WANIPConnection 
Enable 
ConnectionStatus 
PossibleConnectionTypes 
ConnectionType 
Name 
Uptime 
LastConnectionError 
AddressingType 
ExternalIPAddress 
SubnetMask 
DefaultGateway 
DNSEnabled 
DNSServers 
MACAddress 
ConnectionTrigger 
WANPPPConnection 
Enable 
ConnectionStatus 
Name 
Uptime 
LastConnectionError 
Username 
Password 
ExternalIPAddress 
X_00000C_SubnetMask 
DNSEnabled 
DNSServers 
MACAddress 
TransportType 
PPPoEACName 
PPPoEServiceName 
WANDSLLinkConfig 
Enable 
LinkStatus 
LinkType 
AutoConfig 
DestinationAddress 
ATMTransmittedBlocks 
ATMReceivedBlocks 
AAL5CRCErrors 
ATMCRCErrors 
WANEthernetInterfaceConfig 
Enable 
Status 
MACAddress 
MaxBitRate 
DuplexMode 
Stats 
BytesSent 
BytesReceived 
PacketsSent 
PacketsReceived 
WANDSLInterfaceConfig 
Enable 
Status 
UpstreamCurrRate 
DownstreamCurrRate 
UpstreamMaxRate 
DownstreamMaxRate 
UpstreamNoiseMargin 
DownstreamNoiseMargin 
UpstreamAttenuation 
DownstreamAttenuation 
UpstreamPower 
DownstreamPower 
ATURVendor 
ATURCountry 
ATUCVendor 
ATUCCountry 
TotalStart 
ShowtimeStart 
Stats 
Total 
CellDelin 
LinkRetrain 
InitErrors 
InitTimeouts 
LossOfFraming 
ErroredSecs 
SeverelyErroredSecs 
FECErrors 
ATUCFECErrors 
HECErrors 
ATUCHECErrors 
CRCErrors 
ATUCCRCErrors 
Showtime 
CellDelin 
LinkRetrain 
InitErrors 
InitTimeouts 
LossOfFraming 
ErroredSecs 
SeverelyErroredSecs 
FECErrors 
ATUCFECErrors 
HECErrors 
ATUCHECErrors 
CRCErrors 
ATUCCRCErrors 
WANDSLConnectionManagement 
ConnectionServiceNumberOfEntries 
ConnectionService 
WANConnectionDevice 
WANConnectionService 
DestinationAddress 
LinkType 
Name 
LANDevice 
LANEthernetInterfaceNumberOfEntries 
LANUSBInterfaceNumberOfEntries 
LANWLANConfigurationNumberOfEntries 
LANHostConfigManagement 
DHCPServerConfigurable 
DHCPServerEnable 
DHCPRelay 
MinAddress 
MaxAddress 
ReservedAddresses 
SubnetMask 
DNSServers 
DomainName 
IPRouters 
IPInterfaceNumberOfEntries 
IPInterface 
Enable 
IPInterfaceIPAddress 
IPInterfaceSubnetMask 
IPInterfaceAddressingType 
Hosts 
HostNumberOfEntries 
Host 
IPAddress 
AddressSource 
LeaseTimeRemaining 
MACAddress 
HostName 
LANEthernetInterfaceConfig 
Enable 
Status 
MACAddress 
MaxBitRate 
DuplexMode 
Stats 
BytesSent 
BytesReceived 
PacketsSent 
PacketsReceived 
DeviceInfo 
Manufacturer 
ManufacturerOUI 
ModelName 
Description 
SerialNumber 
HardwareVersion 
SoftwareVersion 
SpecVersion 
ProvisioningCode 
UpTime 
DeviceLog 
ManagementServer 
URL 
Username 
Password 
PeriodicInformEnable 
PeriodicInformInterval 
PeriodicInformTime 
ParameterKey 
ConnectionRequestURL 
ConnectionRequestUsername 
ConnectionRequestPassword 
UpgradesManaged 
LANConfigSecurity 
ConfigPassword 
Layer3Forwarding 
DefaultConnectionService 
ForwardNumberOfEntries 
Forwarding 
Enable 
Status 
DestIPAddress 
DestSubnetMask 
SourceIPAddress 
SourceSubnetMask 
GatewayIPAddress 
Interface 
ForwardingMetric 
IPPingDiagnostics 
DiagnosticsState 
Interface 
Host 
NumberOfRepetitions 
Timeout 
DataBlockSize 
SuccessCount 
FailureCount 
AverageResponseTime 
MinimumResponseTime 
MaximumResponseTime 
Time 
NTPServer1 
NTPServer2 
NTPServer3 
NTPServer4 
NTPServer5 
CurrentLocalTime 
LocalTimeZone 
LocalTimeZoneName 
DaylightSavingsUsed 
DaylightSavingsStart 
DaylightSavingsEnd 
TraceRouteDiagnostics 
DiagnosticsState 
Host 
Timeout 
MaxHopCount 
ResponseTime 
NumberOfRouteHops 
RouteHops 
HopHost 

The following is sample output from the show cwmp parameter notify active command, which displays all of the parameters in which the notification attribute is set to active:

Device# show cwmp parameter notify active 

Active Notification: 
InternetGatewayDevice.DeviceInfo.SoftwareVersion
InternetGatewayDevice.DeviceInfo.ProvisioningCode
InternetGatewayDevice.ManagementServer.ConnectionRequestURL
InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddres
s
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceIPAddre
ss
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceSubnetM
ask
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceAddress
ingType

The following is sample output from the show cwmp parameter notify all command, which displays all of the parameters in which the notification attribute is set:

Device# show cwmp parameter notify all

Active Notification: 
InternetGatewayDevice.DeviceInfo.SoftwareVersion
InternetGatewayDevice.DeviceInfo.ProvisioningCode
InternetGatewayDevice.ManagementServer.ConnectionRequestURL
InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddres
s
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceIPAddre
ss
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceSubnetM
ask
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.IPInterfaceAddress
ingType
Passive Notification: 
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.Enable

The following is sample output from the show cwmp parameter notify forceactive command, which displays all of the forceactive parameters in the TR-069 Agent:

Device# show cwmp parameter notify forceactive 

Forced Active Notification: 
InternetGatewayDevice.DeviceInfo.SoftwareVersion
InternetGatewayDevice.DeviceInfo.ProvisioningCode
InternetGatewayDevice.ManagementServer.ConnectionRequestURL
InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddres
s

The following is sample output from the show cwmp parameter notify passive command, which displays all of the parameters in which the notification attribute is set to passive:

Device# show cwmp parameter notify passive 

Passive Notification: 
InternetGatewayDevice.LANDevice.5.LANHostConfigManagement.IPInterface.1.Enable

show cwmp persistent

To display all of the persistent Cisco WAN Management Protocol (CWMP) parameters stored in the NVRAM by the TR-069 Agent, use the show cwmp persistent command in privileged EXEC mode.

show cwmp persistent data

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Examples

The following is sample output from the show cwmp persistent data command:

Device# show cwmp persistent data

InternetGatewayDevice.ManagementServer.URL
 InternetGatewayDevice.ManagementServer.Username
 InternetGatewayDevice.ManagementServer.Password
 InternetGatewayDevice.ManagementServer.PeriodicInformEnable
 InternetGatewayDevice.ManagementServer.PeriodicInformInterval
 InternetGatewayDevice.ManagementServer.PeriodicInformTime
 InternetGatewayDevice.ManagementServer.ParameterKey
 InternetGatewayDevice.ManagementServer.ConnectionRequestURL
 InternetGatewayDevice.ManagementServer.ConnectionRequestUsername
 InternetGatewayDevice.ManagementServer.ConnectionRequestPassword
 InternetGatewayDevice.ManagementServer.UpgradesManaged

show cwmp session

To display the TR-069 Agent session information, use the show cwmp session command in privileged EXEC mode.

show cwmp session

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Examples

The following is sample output from the show cwmp session command when a successful session is established between the TR-069 Agent and the auto-configuration server (ACS):

Device# show cwmp session 

CWMP Agent status: Enabled 
No CWMP Session currently running 
Management Server: http://iou131.cisco.com/cwmp-1-0/testacs 
Connection Request URL: http://172.16.0.1/00000C/388280450/cwmp 
Last successful connection request at time: 10:46:47 PST Tue Jun 17 2008
Last successful session at time: 10:46:48 PST Tue Jun 17 2008
Last failed session at time: 10:42:48 PST Tue Jun 17 2008

The following is sample output from the show show cwmp session command when a session is unable to connect between the TR-069 Agent and the ACS:

Device# show cwmp session 

CWMP Agent status: Enabled
CWMP Session currently running
Management Server for this session: http://iou131.cisco.com/cwmp-1-0/testacs
Hold Requests for this session: 0
Max-Envelopes from ACS for this session: 1
Number of outstanding requests: 1
Requests outstanding over the session:
Inform
Inform
Requests to be sent over the session: 0
Management Server: http://iou131.cisco.com/cwmp-1-0/testacs
Connection Request URL: http://172.16.0.1/00000C/388280450/cwmp
Last successful connection request at time: 
Last successful session at time: 10:39:05 PST Tue Jun 17 2008
Last failed session at time: 10:42:03 PST Tue Jun 17 2008
Session retry count: 1

show dsl interface atm

To display information specific to the asymmetric digital subscriber line (ADSL) for a specified ATM interface, use the show dsl interface atm command in EXEC mode.

show dsl interface atm number

Syntax Description

number

ATM interface number.


Command Modes

EXEC

Command History

Release
Modification

12.1(3)XJ

The command was introduced on Cisco 1700 series routers.

12.2(2)T

This command was integrated into Cisco IOS Release 12.2(2)T.

12.1(5)YB

Support for this command was added to Cisco 2600 series and Cisco 3600 series routers.

12.1(5)XR1

Support for this command was added to the Cisco IAD2420 series.

12.2(4)T

This command was integrated into Cisco IOS Release 12.2(4)T.


Usage Guidelines

Use this command to display the status or results of a line test and to get information on port status, alarms, configured and actual transmission rates, and transmission errors.

The output from this command appears the same as the output from the show controller atm command on Cisco 1400 series routers.

Examples

ADSL: Example

The following example shows sample output from the show dsl interface atm command for a CPE device that is configured for ADSL:

Router# show dsl interface atm0

Alcatel 20150 chipset information
                ATU-R (DS)                      ATU-C (US)
Modem Status:    Showtime (DMTDSL_SHOWTIME)
DSL Mode:        ITU G.992.1 (G.DMT)
ITU STD NUM:     0x01                            0x1 
Vendor ID:       'ALCB'                          'ALCB'
Vendor Specific: 0x0000                          0x0000
Vendor Country:  0x00                            0x0F
Capacity Used:   85%                             98%
Noise Margin:    13.5 dB                          7.0 dB
Output Power:     9.5 dBm                        12.0 dBm
Attenuation:      1.5 dB                          3.5 dB
Defect Status:   None                            None 
Last Fail Code:  None
Selftest Result: 0x00
Subfunction:     0x15
Interrupts:      5940 (0 spurious)
PHY Access Err:  0
Activations:     1
SW Version:      3.670
FW Version:      0x1A04


                 Interleave             Fast    Interleave              Fast
Speed (kbps):             0             8128             0               864
Reed-Solomon EC:          0                0             0                 0
CRC Errors:               0                0             0                 7
Header Errors:            0                0             0                 2
Bit Errors:               0                0
BER Valid sec:            0                0
BER Invalid sec:          0                0


DMT Bits Per Bin
00: 0 0 0 0 0 0 0 7 6 7 9 A B C C C
10: C C C C C C B B B B A 9 A 9 0 0
20: 0 0 0 0 0 0 2 2 3 4 4 5 6 6 7 7
30: 7 8 8 8 9 9 9 A A A A A A B B B
40: B B B B B B B B B B B A B B B B
50: B B B B B B B B B B B B 2 B B B
60: B B B B B B B B B B B B B B B B
70: B B B B B B B B B B B B B B B B
80: B B B B B B B B B B B B B B B B
90: B B B B B B B B B B B B B B B B
A0: B B B B B B B B B B B B B B B B
B0: B B B B B B B B B B B B A B A A
C0: A A A A A A A A A A A A A A A A
D0: A A A A A A A A A A A 9 9 9 9 9
E0: 9 9 9 9 9 9 9 9 9 9 9 9 8 8 8 8
F0: 8 8 8 8 8 8 7 7 7 7 6 6 5 5 4 4

Table 16 describes the significant fields shown in the display.

Table 16 show dsl interface atm Field Descriptions 

Field
Description

Modem Status

Status of the modem. Possible states include the following:

DMTDSL_INVALID—Error state.

DMTDSL_STOP—Administrative down state.

DMTDSL_INIT—Restarting line.

DMTDSL_CHK_HW—Confirming that required HW exists.

DMTDSL_DLOAD_1—Downloading the init.bin file.

DMTDSL_DLOAD_2—Downloading operational firmware.

DMTDSL_MODE_CHK—Verifying that download was successful.

DMTDSL_DO_OPEN—Issue ADSL_OPEN command.

DMTDSL_RE_OPEN—Cycle the link. Retry open.

DMTDSL_ACTIVATING—Waiting for activation to succeed.

DMTDSL_LOOPBACK—Activation done.

DMTDSL_SHOWTIME—Activation succeeded.

DSL Mode

DSL operating mode.

ITU STD NUM

ITU standard number for the operating mode.

Vendor ID

Vendor identification code.

Vendor Specific

Indicates if this router is specified for a vendor.

Vendor Country

Code for the country where the vendor is located.

Capacity Used

Percentage of the capacity that is being used.

Noise Margin

Noise margin, in decibels.

Output Power

Power output, in decibels.

Attenuation

Attenuation of the signal, in decibels.

Defect Status

Status of defects.

Last Fail Code

Last failure code that was logged.

Selftest Result

Results of the self-test.

Subfunction

Code for the subfunction running.

Interrupts

Code for interrupts used.

PHY Access Err

Number of physical access errors.

Activations

Number of activations of the router.

SW Version

Software version number.

FW Version

Firmware version number.

Speed

The train speed for upstream and downstream. It shows both the interleave and the fast mode.

Reed-Solomon EC

Reed-Solomon error-correction statistics.

CRC Errors

Cyclic redundancy check statistics.

Header Errors

ATM header error reports.

Bit Errors

Total number of bit errors.

BER Valid sec

Bit error rate valid seconds.

BER Invalid sec

Bit error rate invalid seconds.


G.SHDSL: Example

The following example shows sample output for the show dsl interface atm command for a CPE device that is configured for G.SHDSL:

Router# show dsl interface atm 0/0

Globespan G.SHDSL Chipset Information
Equipment Type: Customer Premise
Operating Mode: G.SHDSL
Clock Rate Mode: Auto rate selection Mode
Reset Count: 1
Actual rate: 2320 Kbps
Modem Status: Data
Noise Margin: 42 dB
Loop Attenuation: 0.0 dB
Transmit Power: 13.5 dB
Receiver Gain: 204.8000 dB
Last Activation Status:No Failure
CRC Errors: 0
Chipset Version: 1
Firmware Version: R1.0

Table 17 describes the significant fields shown in the display.

Table 17 show dsl interface atm Field Descriptions 

Field
Description

Equipment Type

Terminal type, which can be one of the following:

Customer Premise (CPE)—This value indicates that the device is connected to a DSLAM. This is the default.

Central Office (CO)—If the devices are connected back-to-back, one of the routers can act as a CO.

Operating Mode

G.SHDSL annex configuration, which can be one of the following values:

A—Operating parameters for North America. This value is the default.

B—Operating parameters for Europe.

Clock Rate Mode

Upstream and downstream bit rate configuration, in kbps. If the upstream and downstream rates have different values, the device will train to lowest of the rates. If the value indicates "Auto rate selection mode", the CO and CPE devices will negotiate the speed and train.

Reset Count

Number of times the G.SHDSL chip has been reset since powering up.

Actual rate

The actual bit rate that the transceiver is using. This rate could be different from the requested (configured) rate.

Modem Status

One of the following values:

Handshake—local transceiver is trying to reach the far-end transceiver.

Training—startup training is in progress.

Data—training was successful.

Received SNR

The received signal-to-noise ratio (SNR), in decibels (dB).

SNR Threshold

SNR threshold below which the router will retrain. The default is 23 dB.

Loop Attenuation

The difference in decibels between the power received at the near-end device and the power transmitted from the far-end device.

Transmit Power

Local STU transmit power, in decibels per milliwatt (dBm).

Receiver Gain

Total receiver gain.

Last Activation Status

Defines the last failure state of the G.SHDSL chip.

CRC Errors

Number of cyclic redundancy check (CRC) errors observed after bootup or resetting of the interface.

Chipset Version

Vendor's chipset version.

Firmware Version

Version of the vendor's chipset firmware.


Related Commands

Command
Description

dsl operating-mode

Modifies the operating mode of the digital subscriber line for an ATM interface.


show ip http client cookie

To display the HTTP client cookies, use the show ip http client cookie command in privileged EXEC mode.

show ip http client cookie {brief | summary} [domain cookie-domain | name cookie-name | session session-name]

Syntax Description

brief

Displays a brief summary of client cookies.

summary

Displays a detailed summary of client cookies.

domain

(Optional) Displays all cookies in a domain

cookie-domain

(Optional) Client cookie domain or host name.

name

(Optional) Displays cookies matching a specific name.

cookie-name

(Optional) Client cookie name.

session

(Optional) Displays cookies specific to a client session.

session-name

(Optional) Client session name.


Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Examples

The following is example output from the show ip http client cookie brief command:

Device# show ip http client cookie brief 

HTTP client cookies of session HTTP CFS :
HTTP client cookies of session CWMP_CLIENT :
For expanded output please use 'summary' option for display
Name            Value                           Ver     Domain                          
Path                          
cookie8          8                              1       172.17.0.2                      
/cwmp-1-0/                    
cookie7          7                              1       172.17.0.2                      
/cwmp-1-0/                    
cookie3          3                              1       172.16.0.2                      
/cwmp-1-0/                    
cookie2          2                              1       172.16.0.2                      
/cwmp-1-0/                    
cookie1          1                              1       172.16.0.2                      
/cwmp-1-0/                    
HTTP client cookies of session cwmp_test_client :

The following is example output from the show ip http client cookie brief domain command:

Device# show ip http client cookie brief domain 172.16.0.2
HTTP client cookies of domain 172.16.0.2 :
For expanded output please use 'summary' option for display
Name            Value                           Ver     Domain                          
Path                          
cookie3          3                              1       172.16.0.2                      
/cwmp-1-0/                    
cookie2          2                              1       172.16.0.2                      
/cwmp-1-0/                    
cookie1          1                              1       172.16.0.2                      
/cwmp-1-0/                    

The following is example output from the show ip http client cookie brief name command:

Device# show ip http client cookie brief name cookie3
HTTP client cookies of name cookie3 :
For expanded output please use 'summary' option for display
Name            Value                           Ver     Domain                          
Path                          
cookie3          3                              1       172.16.0.2                      
/cwmp-1-0/                    

The following is example output from the show ip http client cookie brief session command:

Device# show ip http client cookie brief session CWMP_CLIENT
HTTP client cookies of session CWMP_CLIENT :
For expanded output please use 'summary' option for display
Name            Value                           Ver     Domain                          
Path                          
cookie8          8                              1       172.17.0.2                      
/cwmp-1-0/                    
cookie7          7                              1       172.17.0.2                      
/cwmp-1-0/                    
cookie3          3                              1       172.16.0.2                      
/cwmp-1-0/                    
cookie2          2                              1       172.16.0.2                      
/cwmp-1-0/                    
cookie1          1                              1       172.16.0.2                      
/cwmp-1-0/                    

The following is example output from the show ip http client cookie summary command:

Device# show ip http client cookie summary 

HTTP client cookies of session HTTP CFS :
HTTP client cookies of session CWMP_CLIENT :

Name          : cookie8
Value         :  8 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie7
Value         :  7 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 
Name          : cookie3
Value         :  3 
Version       : 1
Domain        : 172.16.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie2
Value         :  2 
Version       : 1
Domain        : 172.16.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie1
Value         :  1 
Version       : 1
Domain        : 172.16.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 
HTTP client cookies of session cwmp_test_client :

The following is example output from the show ip http client cookie summary domain command:

Device# show ip http client cookie summary domain 172.17.0.2 

HTTP client cookies of domain 172.17.0.2 :

Name          : cookie8
Value         :  8 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie7
Value         :  7 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

The following is example output from the show ip http client cookie summary name command:

Device# show ip http client cookie summary name cookie7

HTTP client cookies of name cookie7 :

Name          : cookie7
Value         :  7 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

The following is example output from the show ip http client cookie summary session command:

Device# show ip http client cookie summary session CWMP_CLIENT

HTTP client cookies of session CWMP_CLIENT :

Name          : cookie8
Value         :  8 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie7
Value         :  7 
Version       : 1
Domain        : 172.17.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 
Name          : cookie3
Value         :  3 
Version       : 1
Domain        : 172.16.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie2
Value         :  2 
Version       : 1
Domain        : 172.16.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

Name          : cookie1
Value         :  1 
Version       : 1
Domain        : 172.16.0.2 (default)
Path          : /cwmp-1-0/ (default)
Secure        : no
Max-Age       : 600
Port          : 
Comment       : 
CommentURL    : 

show mpf cpu

To display the average CPU utilization over a duration of the last 5 seconds, the last 1 minute, and the last 5 minutes when Multi-Processor Forwarding (MPF) is enabled on the second CPU, use the show mpf cpu command in user EXEC or privileged EXEC mode.

show mpf cpu [history]

Syntax Description

history

(Optional) Displays graphical output of the second CPU utilization over the last 60 seconds, the last 60 minutes, and the last 72 hours.


Command Default

No default behavior or values.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

12.3(14)YM2

This command was introduced in Cisco IOS Release 12.3(14)YM2 and supported on the Cisco 7200 VXR and Cisco 7301 routers.

12.4(4)T

This command was integrated into Cisco IOS Release 12.4(4)T.


Examples

The following example shows that the average utilization of the second CPU is 33 percent for the last 5 seconds, 25 percent for the last minute, and 30 percent for the last 5 minutes:

Router# show mpf cpu

CPU utilization for five seconds: 33%; one minute: 25%; five minutes: 30% 

The following example shows graphical output of utilization of the second CPU for the last 60 seconds (percentage of CPU use per second), the last 60 minutes (percentage of CPU use per minute), and the last 72 hours (percentage of CPU use per hour).

Router# show mpf cpu history

slns 12:12:40 AM Saturday Nov 18 2000 UTC 
3333333333333333333333333333333333333333333333333333333333 
3333333333333333333333333333333333333333333333333333333333 
100 
90 
80 
70 
60 
50 
40 
30 ***************************
20 ***************************
10 ***************************
0....5....1....1....2....2....3....3....4....4....5....5.... 
	 	  0 	   5 	   0	   5 	   0 	   5 	  0    5    0    5 
				CPU% per second (last 60 seconds) 
3333333333333333333333333333333333333333333333333333333333 
3333333333333333333333333333333333333333333333333333333333 
100 
90 
80 
70 
60 
50 
40 
30 ################# 
20 ################# 
10 ################# 
0....5....1....1....2....2....3....3....4....4....5....5.... 
		  0 	   5 	  0 	   5 	   0 	   5 	  0 	   5    0 	   5 
					CPU% per minute (last 60 minutes) 
					* = maximum CPU% # = average CPU% 
1 
60 
80 
100 * 
90 * 
80 * 
70 ** 
60 ** 
50 ** 
40 ## 
30 ## 
20 ## 
10 ## 
0....5....1....1....2....2....3....3....4....4....5....5....6....6....7. 
		  0    	    5	    0    5    0    5    0    5    0    5    0    5    0 
					CPU% per hour (last 72 hours)	
					* = maximum CPU% # = average CPU% 

Related Commands

Command
Description

clear mpf interface

Clears MPF packet counts on all physical interfaces.

clear mpf punt

Clears MPF per-box punt reason and count.

ip mpf

Enable MPF on the second CPU of Cisco 7200 VXR and Cisco 7301 routers.

show ip cef exact-route

Displays the exact route for a source-destination IP address pair in CEF.

show mpf interface

Displays MPF packet count information on each physical interface.

show mpf ip exact-route

Displays the exact route for a source-destination IP address pair in an MPF system.

show mpf punt

Displays the MPF punt reason and punt packet count for the chassis.

sw-module heap fp

Fine-tunes the MPF heap memory allocation.


show mpf interface

To display Multi-Processor Forwarding (MPF) packet counter information on each physical interface, use the show mpf interface command in user EXEC or privileged EXEC mode.

show mpf interface [interface-name-and-number] [dot1q-vlan-num]

Syntax Description

interface-name-and-number

(Optional) Displays punt counts for a specified Gigabit Ethernet interface and its slot number and port number.

dotlq-vlan-num

(Optional) Displays punt counts on a specific subinterface by specifying the 802.1Q VLAN number.


Command Default

No default behavior or values.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

12.3(14)YM2

This command was introduced in Cisco IOS Release 12.3(14)YM2 and implemented on the Cisco 7200 VXR and Cisco 7301 routers.

12.4(4)T

This command was integrated into Cisco IOS Release 12.4(4)T.


Usage Guidelines

This command is supported for physical interfaces and subinterfaces. There is no support for the virtual access interface (VAI).

You can display the interface count information for a specific Gigabit Ethernet interface by specifying the interface name and number. To display interface information for a specified subinterface only, you must use the 802.1Q VLAN number for the subinterface because the MPF software does not recognize the subinterface number.

Using the show mpf interface command without arguments displays the interface information for all Gigabit Ethernet interfaces and subinterfaces.

Using the clear mpf interface command resets the interface packet counters shown in the show mpf interface command output.

Examples

The following example using the show mpf interface command without arguments displays interface information about up or down state, type of counter (receiving or transmitting packet or bytes), and count number for packets or bytes for all Gigabit Ethernet interfaces (only GigabitEthernet0/1 in this example) and subinterfaces:

Router# show mpf interface

Name           Index   State       Counter              Count
Gi0/1          0       up          RX packets           1004
                                   RX bytes             158632
                                   TX packets           5004
Name           Index  State        Counter              Count
                                   TX bytes             790632
                                   RX punts             32961
                                   TX punts             85972
Gi0/1          1      up
Gi0/1.100      100    up           RX packets           1004
                                   RX bytes             158632
                                   TX packets           5004
                                   TX bytes             790632
                                   RX punts             25
Gi0/1.101      101    up
Gi0/1.102      102    up
Gi0/1.105      105    up
Gi0/1.106      106    up
Gi0/1.107      107    up
Gi0/1.200      200    up
Gi0/1.201      201    up           RX punts             29
Gi0/1.202      202    up
Gi0/1.206      206    up
Gi0/1.2002     602    up           RX punts             26114
Gi0/1.2004     604    up

The following example specifies interface information for Gigabit Ethernet interface 0/1 subinterface 100. However, all Gigabit Ethernet interface and subinterface information is displayed because MPF does not recognize the subinterface number, unless it is a VLAN number.

Router# show mpf interface GigabitEthernet0/1.100

Name          Index   State     Counter               Count
Gi0/1         0       up        RX packets            1004
                                RX bytes              158632
                                TX packets            5004
                                TX bytes              790632
                                RX punts              32996
                                TX punts              86062
Gi0/1         1       up
Gi0/1.100     100     up        RX packets            1004
                                RX bytes              158632
                                TX packets            5004
                                TX bytes              790632
                                RX punts              25
Gi0/1.101     101     up
Gi0/1.102     102     up
Gi0/1.105     105     up
Gi0/1.106     106     up
Gi0/1.107     107     up
Gi0/1.200     200     up
Gi0/1.201     201     up       RX punts               29
Gi0/1.202     202     up
Gi0/1.206     206     up
Gi0/1.2002    602     up       RX punts               26142
Gi0/1.2004    604     up

The following example displays the interface information for VLAN number 100 on Gigabit Ethernet interface 0/1, including up state, receiving packet count, receiving bytes count, transmitting packet count, transmitting byte count, and receiving punt count:

Router# show mpf interface GigabitEthernet0/1 100

Name          Index   State     Counter               Count
Gi0/1.100     100     up        RX packets            1004
                                RX bytes              158632
                                TX packets            5004
                                TX bytes              790632
                                RX punts              25

Table 18 describes the fields shown in the output examples.

Table 18 show mpf interface Field Descriptions

Field
Description

Name

Gigabit Ethernet interface name and number.

Index

This is for internal use and can be ignored.

State

Up or down state of interface.

Counter

Type of counter.

Count

Number of packets or bytes.

RX packets

Packets received through the Gigabit Ethernet interface and processed by the second CPU, CPU1. These packets are MPF accelerated.

RX bytes

Bytes received and processed by the second CPU, CPU1.

RX punts

Packets received through the Gigabit Ethernet interface and punted by the second CPU, CPU1, to CPU0 for Cisco IOS processing.

RX drop

Packets received through the Gigabit Ethernet interface but dropped by the second CPU, CPU1.

TX packets

MPF accelerated packets transmitted from the Gigabit Ethernet interface using the second CPU, CPU1.

TX bytes

Bytes transmitted by the second CPU, CPU1.

TX punts

Packets transmitted from the second CPU, CPU1. Packets that have been punted to CPU0 and processed by Cisco IOS software are redirected to CPU1 for transmitting from the relevant Gigabit Ethernet interface.

TX drop

Packets that were dropped by the second CPU, CPU1, while in the process of being transmitted from the Gigabit Ethernet interface.


Related Commands

Command
Description

clear mpf interface

Clears MPF packet counts on all physical interfaces.

clear mpf punt

Clears MPF per-box punt reason and count.

ip mpf

Enables MPF on the second CPU of a Cisco 7301 or Cisco 7200 VXR router.

show ip cef exact-route

Displays the exact route for a source-destination IP address pair in CEF.

show mpf cpu

Displays the average CPU utilization when MPF is enabled on the second CPU.

show mpf ip exact-route

Displays the exact route for a source-destination IP address pair in an MPF system.

show mpf punt

Displays the MPF punt reason and punt packet count for the chassis.

sw-module heap fp

Fine-tunes the MPF heap memory allocation.


show mpf ip exact-route

To display the exact route for a source-destination address IP pair in a Multi-Processor Forwarding (MPF) system, use the show mpf ip exact-route command in user EXEC or privileged EXEC mode.

show mpf ip exact-route [vrf vrf-name] src-ip-addr dst-ip-addr

Syntax Description

vrf

(Optional) A Virtual Private Network (VPN) routing and forwarding (VRF) instance.

vrf-name

(Optional) Name assigned to the VRF.

src-ip-addr

Specifies the network source address.

dst-ip-addr

Specifies the network destination address.


Command Default

No default behavior or values.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

12.3(14)YM2

This command was introduced in Cisco IOS Release 12.3(14)YM2 and supported on the Cisco 7200 VXR and Cisco 7301 routers.

12.4(4)T

This command was integrated into Cisco IOS Release 12.4(4)T.


Usage Guidelines

When you are load balancing per destination, this command shows the exact next hop that is used for a given IP source-destination pair.

Examples

The following sample output displays the exact next hop (10.1.104.1) for the specified source IP address (10.1.1.1) and destination IP address (172.17.249.252):

Router# show mpf ip exact-route 10.1.1.1 172.17.249.252

10.1.1.1         -> 172.17.249.252 :GigabitEthernet2/0 (next hop 10.1.104.1)

Table 19 describes the significant fields shown in the output example.

Table 19 show mpf ip exact-route Field Descriptions

Field
Description

10.1.1.1 -> 172.17.249.252

From source 10.1.1.1 IP address to destination IP address 172.17.249.252.

GigabitEthernet2/0 (next hop 10.1.104.1)

Next hop is 10.1.104.1 on GigabitEthernet interface 2/0.


Related Commands

Command
Description

clear mpf interface

Clears MPF packet counts on all physical interfaces.

clear mpf punt

Clears MPF per-box punt reason and count.

ip mpf

Enables MPF on the second CPU of a Cisco 7301 or Cisco 7200 VXR router.

show ip cef exact-route

Displays the exact route for a source-destination IP address pair in CEF.

show mpf cpu

Displays the average CPU utilization when MPF is enabled on the second CPU.

show mpf interface

Displays MPF packet count information on each physical interface.

show mpf punt

Displays the MPF punt reason and punt packet count for the chassis.

sw-module heap fp

Fine-tunes the MPF heap memory allocation.


show mpf punt

To display the Multi-Processor Forwarding (MPF) punt reason and punt packet count for the chassis, use the show mpf punt command in user EXEC or privileged EXEC mode.

show mpf punt

Syntax Description

This command has no arguments or keywords.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

12.3(14)YM2

This command was introduced in Cisco IOS Release 12.3(14)YM2 and implemented on the Cisco 7200 VXR and Cisco 7301 routers.

12.4(4)T

This command was integrated into Cisco IOS Release 12.4(4)T.


Usage Guidelines

The punt reason and punt packet count are collected for each box or chassis, not for each interface. Packets that are punted are directed for Cisco IOS processing and are not accelerated by MPF.

Examples

The following example displays the types of packet, the reasons for the punt, and the punt packet counts for the router chassis.

Router# show mpf punt

		Type 				Message 								Count 
		l2tp 				unknown session errors 									7 
		l2tp 				L2TP control 									6 
		ipv4/verify 				adjacency punt 									1 
		ethernet 				unknown ethernet type 						  		  542 
		ppp 				punts due to unknown protocol 	  333 
		arp 				ARP request 									6 

Table 20 describes the fields in the show mpf punt output display.

Table 20 show mpf punt Field Descriptions

Field
Description

Type

Packet type or encapsulation, such as ARPA, Ethernet, or L2TP.

Message

Reason for punting the packet to Cisco IOS processing.

Count

Punt packet count.


Related Commands

Command
Description

clear mpf interface

Clears MPF packet counts on all physical interfaces.

clear mpf punt

Clears MPF per-box punt reason and count.

ip mpf

Enables MPF on the second CPU of a Cisco 7301 or Cisco 7200 VXR router.

show ip cef exact-route

Displays the exact route for a source-destination IP address pair in CEF.

show mpf cpu

Displays the average CPU utilization when MPF is enabled on the second CPU.

show mpf interface

Displays MPF packet count information on each physical interface.

show mpf ip exact-route

Displays the exact route for a source-destination IP address pair in an MPF system.

sw-module heap fp

Fine-tunes the MPF heap memory allocation.


show ppp interface

To display the IP Control Protocol (IPCP) and Link Control Protocol (LCP) information for all the sessions on an ATM or Gigabit Ethernet interface, use the show ppp interface command in user EXEC or privileged EXEC mode.

show ppp interface interface-number

Syntax Description

interface-number

Specifies a particular ATM or Gigabit Ethernet interface and the interface number.


Command Modes

User EXEC (>)
Privileged EXEC (#))

Command History

Release
Modification

Cisco IOS XE Release 2.4

This command was introduced.

Cisco IOS Release 15.0(1)M

This command was integrated into Cisco IOS Release 15.0(1)M.


Usage Guidelines

The show ppp interface command is used to display IPCP and LCP information for all the sessions on an ATM or Gigabit Ethernet interface.

Examples

The following example displays the IPCP and LCP information on the Gigabit Ethernet interface. The output is self-explanatory.

Router# show ppp interface GigabitEthernet 0/1/0.101

Gi0/1/0.101 No PPP serial context
PPP Session Info
----------------
Interface        : Vi2.1
PPP ID           : 0x26000001
Phase            : UP
Stage            : Local Termination
Peer Name        : user_01@domain_3
Peer Address     : 12.0.0.1
Control Protocols: LCP[Open] CHAP+ IPCP[Open] 
Session ID       : 1
AAA Unique ID    : 12
SSS Manager ID   : 0x25000003
SIP ID           : 0x7B000002
PPP_IN_USE       : 0x15
Vi2.1 LCP: [Open] 
Our Negotiated Options
Vi2.1 LCP:    MRU 1492 (0x010405D4)
Vi2.1 LCP:    AuthProto CHAP (0x0305C22305)
Vi2.1 LCP:    MagicNumber 0x21F4CD31 (0x050621F4CD31)
Peer's Negotiated Options
Vi2.1 LCP:    MRU 1492 (0x010405D4)
Vi2.1 LCP:    MagicNumber 0x4A51A20E (0x05064A51A20E)
Vi2.1 IPCP: [Open] 
Our Negotiated Options
Vi2.1 IPCP:    Address 10.0.0.1 (0x03060A000001)
Peer's Negotiated Options
Vi2.1 IPCP:    Address 12.0.0.1 (0x03060C000001)

Related Commands

Command
Description

ppp bap

Displays the BAP configuration settings and run-time status for a multilink bundle.

ppp queues

Monitors the number of requests processed by each AAA background process.


show ppp subscriber statistics

To display PPP subscriber statistics, use the show ppp subscriber statistics command in privileged EXEC mode.

show ppp subscriber statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

This command is useful for obtaining events and statistics for PPP subscribers. Use the show ppp subscriber statistics command to display a cumulative count of PPP subscriber events and statistics, and to display an incremental count since the clear ppp subscriber statistics command was last issued.

Examples

The following is sample output from the show ppp subscriber statistics command:

Router# show ppp subscriber statistics

PPP Subscriber Events          TOTAL         SINCE CLEARED
Encap                          32011         32011        
DeEncap                        16002         16002        
CstateUp                       173           173          
CstateDown                     36            36           
FastStart                      0             0            
LocalTerm                      7             7            
LocalTermVP                    0             0            
MoreKeys                       173           173          
Forwarding                     0             0            
Forwarded                      0             0            
SSSDisc                        0             0            
SSMDisc                        0             0            
PPPDisc                        167           167          
PPPBindResp                    173           173          
PPPReneg                       3             3            
RestartTimeout                 169           169          
> 
PPP Subscriber Statistics      TOTAL         SINCE CLEARED
IDB CSTATE UP                  16008         16008        
IDB CSTATE DOWN                40            40           
APS UP                         0             0            
APS UP IGNORE                  0             0            
APS DOWN                       0             0            
READY FOR SYNC                 10            10           

Table 21 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.

Table 21 show ppp subscriber statistics Field Descriptions 

Field
Description

PPP Subscriber Events

PPP subscriber event counts.

Encap

Number of times PPP encapsulation occurred.

DeEncap

Number of times PPP deencapsulation occurred.

CstateUp

Number of times PPP interfaces are initialized.

CstateDown

Number of times PPP interfaces were shut down.

FastStart

Number of PPP sessions started by link control protocol (LCP) packets before the interface state was up.

LocalTerm

Number of locally terminated PPP sessions.

LocalTermVP

Number of locally terminated PPP sessions running on virtual profiles.

MoreKeys

Number of PPP sessions in the intermediate state — that is, processing service keys — before a session is forwarded or terminated locally.

Forwarding

Number of PPP sessions in forwarding state.

Forwarded

Number of PPP sessions that have been forwarded.

SSSDisc

Number of PPP sessions disconnected from the subscriber service switch after receiving disconnect notification.

SSMDisc

Number of PPP sessions disconnected from the dataplane after receiving disconnect notification.

PPP BindResp

Number of PPP responses where the interface has been bound to the session.

PPP Reneg

Number of PPP renegotiation events.

Restart Timeout

Occurrences of the restart timer beginning on PPP encapsulated interfaces in the down state.

PPP Subscriber Statistics

PPP subscriber statistic counts.

IDB CSTATE UP

Occurrences of the IDB making the transition to the up state.

IDB CSTATE DOWN

Occurrences of the IDB making the transition to the down state.

APS UP

Occurrences of PPP sessions receiving automatic protection switching (APS) selected events.

APS UP IGNORE

Occurrences of PPP sessions receiving APS selected events when the IDB state was down.

APS DOWN

Occurrences of PPP sessions receiving APS deselected events.

READY FOR SYNC

Number of PPP sessions ready for synchronization.


Related Commands

Command
Description

clear ppp subscriber statistics

Clears PPP subscriber statistics.


show pppatm session

To display information on PPP over ATM (PPPoA) sessions, use the show pppatm session command in privileged EXEC mode.

show pppatm session [interface atm interface-number.subinterface-number]

Syntax Description

interface atm

(Optional) Configures an ATM interface.

interface-number.subinterface-number

Interface number and possibly a subinterface number. A period (.) must precede the optional subinterface number.


Command Default

If no keywords or arguments are provided, information for all PPPoA sessions is displayed.

Command Modes

Privileged EXEC (#)

Command History

Release
Modification

12.2(13)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

This command is used for obtaining detailed information on PPPoA sessions and the interfaces on which they are running.

If a subinterface number is given in the command, the output is a report of the PPPoA sessions in the subinterface. If a main interface number is given, the output has the report for each individual subinterface of that main interface. If no interface is given, the output contains the report for each ATM interface on the router.

Examples

The following example shows how to display information for PPPoA sessions on ATM interface 8/0/0.12345678:

Router# show pppatm session atm8/0/0.12345678

     1 session  in LCP_NEGOTIATION (LCP) State
     1 session  total

Uniq ID  ATM-Intf       VPI/VCI   Encap   VT  VA         VA-st  State
   8001  8/0/0.12345678   0/32035 SNAP    10  N/A        N/A    LCP

Table 22 describes the significant fields shown in the display.

Table 22 show pppatm session Field Descriptions 

Field
Description

Uniq ID

Unique identifier for the PPPoA session.

ATM-Intf

The ATM interface port number.

VPI

Virtual path identifier of the permanent virtual circuit (PVC).

VCI

Virtual channel identifier of the PVC.

Encap

Number of times PPP encapsulation occurred.

VT

Virtual template number used by the session.

VA

Virtual access interface number.

VA-st

Virtual access interface state.

State

PPPoA state of the session.


Related Commands

Command
Description

show pppatm summary

Displays PPPoA session counts.


show pppatm statistics

To display PPP over ATM (PPPoA) statistics, use the show pppatm statistics command in privileged EXEC mode.

show pppatm statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

Use the show pppatm statistics command to obtain statistics for PPPoA sessions. This command gives a total count of PPPoA events since the clear pppatm statistics command was last issued.

Examples

The following example displays PPPoA statistics:

Router# show pppatm statistics

	4000 : Context Allocated events
	3999 : SSS Request events
	7998 : SSS Msg events
	3999 : PPP Msg events
	3998 : Up Pending events
	3998 : Up Dequeued events
	3998 : Processing Up events
	3999 : Vaccess Up events
	3999 : AAA unique id allocated events
	3999 : No AAA method list set events
	3999 : AAA gets nas port details events
	3999 : AAA gets retrived attrs events
	68202 : AAA gets dynamic attrs events
	3999 : Access IE allocated events

Table 23 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.

Table 23 show pppatm statistics Field Descriptions 

Field
Description

Context allocated events

Number of PPPoA events for which a context has been allocated.

SSS request events

Subscriber service switch (SSS) requests.

SSS Msg events

SSS responses

PPP Msg events

PPP responses.

Up Pending events

ATM VC notification of events in queue.

Up dequeued events

ATM VC notification of events removed from queue.

Processing Up events

PPPoA events processed.

Vaccess Up events

Number of events for which the virtual access interface state changed to up.

AAA unique id allocated events

Number of events for which a unique AAA ID was allocated.

No AAA method list set events

Number of events for which no AAA accounting list was configured.

AAA get NAS port details events

Number of NAS port events.

AAA gets retrieved attrs events

Number of AAA retrieved attributes events for incoming and outgoing packets.

AAA gets dynamic attrs events

Number of AAA dynamic attributes events for start/stop packets.

Access IE allocated events

Number of IE (internal ID ) allocated events.


Related Commands

Command
Description

clear pppatm statistics

Clears PPP ATM statistics.


show pppatm summary

To display PPP over ATM (PPPoA) session counts, use the show pppatm summary command in privileged EXEC mode.

show pppatm summary [interface atm interface-number[.subinterface-number]]

Syntax Description

interface atm interface-number.subinterface-number

(Optional) Specifies a particular ATM interface by interface number and possibly a subinterface number. A period (.) must precede the optional subinterface number.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(13)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

This command is useful for obtaining session counts, the state of the PPPoA sessions, and the interfaces on which they are running.

This command gives a summary of the number of PPPoA sessions in each state and the session information of each individual session. If a subinterface number is given in the command, the output is a summary report of the PPPoA sessions in the subinterface. If a main interface number is given, the output will have the summary reports for each individual subinterface of that main interface as shown in the Examples section. If no interface is given, the output will contain the summary reports for each ATM interface on the router.

Examples

The following example displays PPPoA session counts and states for ATM interface 5/0:

Router# show pppatm summary interface atm 5/0

ATM5/0.3:

       0 sessions total

ATM5/0.6:
       1 in PTA (PTA) State

       1 sessions total

VPI     VCI     Conn ID         PPPoA ID        SSS ID          PPP ID        AAA ID   VT      
VA/SID  State
  6     101       11            DA000009       BB000013       E5000017        C        1       
1.1     PTA

Most of the fields displayed by the show pppatm summary command are self-explanatory. Table 24 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.

Table 24 show pppatm summary Field Descriptions

Field
Description

VPI

Virtual path identifier of the permanent virtual circuit (PVC).

VCI

Virtual channel identifier of the PVC.

Conn ID

Unique connection identifier for the PPPoA session. This ID can be correlated with the unique ID in the show vpdn session command output for the forwarded sessions.

PPPoA ID

Internal identifier for the PPPoA session.

SSS ID

Internal identifier in the Subscriber Service Switch.

PPP ID

Internal identifier in PPP.

AAA ID

Authentication, authorization, and accounting (AAA) unique identifier for accounting records.

VT

Virtual template number used by the session.

VA/SID

PPPoA virtual access number for PPP Termination Aggregation (PTA) sessions, and switch identifier for forwarded sessions.

State

PPPoA state of the session.


Related Commands

Command
Description

clear pppatm interface atm

Clears PPP ATM sessions on an ATM interface.

debug pppatm

Enables reports for PPPoA events, errors, and states either globally or conditionally on an interface or VC.

show pppatm trace

Displays a sequence of PPPoA events, errors, and state changes when the debug pppatm command is enabled.


show pppatm trace

To display a sequence of PPP over ATM (PPPoA) events, errors, and state changes when the debug pppatm command is enabled, use the show pppatm trace command in privileged EXEC mode.

show pppatm trace [error | event | state] interface atm interface-number[.subinterface-number] vc {[vpi/]vci | virtual-circuit-name}

Syntax Description

error

(Optional) PPPoA events.

event

(Optional) PPPoA errors.

state

(Optional) PPPoA state.

interface atm interface-number

Specifies a particular ATM interface by interface number.

.subinterface-number

(Optional) Specifies a subinterface number preceded by a period.

vc [vpi/]vci

Virtual circuit (VC) keyword followed by a virtual path identifier (VPI) and virtual channel identifier (VCI). The absence of the "/" and a vpi causes the vpi value to default to 0.

virtual-circuit-name

Name of the VC.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(13)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

When the debug pppatm command has been enabled, this command displays messages from the specified permanent virtual circuit (PVC). If only one debug pppatm command keyword is supplied in the command, the report will display only the sequence of events for that particular debug type.

Examples

The following example traces the debugging messages supplied by the debug pppatm command on PVC 101. The report is used by Cisco technical personnel for diagnosing system problems.

Router# debug pppatm trace interface atm 1/0.10 vc 101
Router# debug pppatm state interface atm 1/0.10 vc 101
Router# debug pppatm event interface atm 1/0.10 vc 101
Router# show pppatm trace interface atm 1/0.10 vc 101

Event = Disconnecting
Event = AAA gets dynamic attrs
Event = AAA gets dynamic attrs
Event = SSS Cleanup
State = DOWN
Event = Up Pending
Event = Up Dequeued
Event = Processing Up
Event = Access IE allocated
Event = Set Pkts to SSS
Event = AAA gets retrieved attrs
Event = AAA gets nas port details
Event = AAA gets dynamic attrs
Event = AAA gets dynamic attrs
Event = AAA unique id allocated
Event = No AAA method list set
Event = SSS Request
State = NAS_PORT_POLICY_INQUIRY
Event = SSS Msg
State = PPP_START
Event = PPP Msg
State = LCP_NEGOTIATION
Event = PPP Msg
Event = Access IE get nas port
Event = AAA gets dynamic attrs
Event = AAA gets dynamic attrs
Event = PPP Msg
Event = Set Pkts to SSS
State = FORWARDED

Related Commands

Command
Description

clear pppatm interface atm

Clears PPP ATM sessions on an ATM interface.

debug pppatm

Enables reports for PPPoA events, errors, and states either globally or conditionally on an interface or VC.

show pppatm summary

Displays PPPoA session counts.


show pppoe derived

To display the cached PPP over Ethernet (PPPoE) configuration that is derived from the subscriber profile for a specified PPPoE profile, use the show pppoe derived command in privileged EXEC mode.

show pppoe derived group group-name

Syntax Description

group group-name

PPPoE profile for which the cached PPPoE configuration will be displayed.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.3(4)T

This command was introduced.


Usage Guidelines

A subscriber profile can be configured locally on the router or remotely on a AAA server. The PPPoE configuration that is derived from a subscriber profile is cached locally under the PPPoE profile. Use the show pppoe derived command to display the cached PPPoE configuration that is derived from the subscriber profile for a specified PPPoE profile.

A subscriber profile contains a list of PPPoE service names. The PPPoE server will advertise the service names that are listed in the subscriber profile to each PPPoE client connection that uses the configured PPPoE profile. A subscriber profile is assigned to a PPPoE profile by using the service profile command in BBA group configuration mode.

Examples

The following example shows the PPPoE configuration for PPPoE profile "sp_group_a" that is derived from subscriber profile "abc". The services "isp_xyz", "isp_aaa", and "isp_bbb" will be advertised to each PPPoE client connection that uses PPPoE profile "sp_group_a".

Router# show pppoe derived group sp_group_a

Derived configuration from subscriber profile 'abc':
Service names: 
   isp_xyz, isp_aaa, isp_bbb

Related Commands

Command
Description

clear pppoe derived

Clears the cached PPPoE configuration of a PPPoE profile and forces the PPPoE profile to reread the configuration from the assigned subscriber profile.

pppoe service

Adds a PPPoE service name to a local subscriber profile.

service profile

Assigns a subscriber profile to a PPPoE profile.

subscriber profile

Defines Subscriber Service Switch policy for searches of a subscriber profile database.


show pppoe redundancy

To display PPP over Ethernet (PPPoE) events and statistics, use the show pppoe redundancy command in privileged EXEC mode.

show pppoe redundancy

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

This command is useful for obtaining statistics and events for PPPoE sessions. This command gives a cumulative count of PPPoE events and statistics, and an incremental count since the last time the clear pppoe redundancy command was issued.

Examples

The following is sample output from the show pppoe redundancy command:

Router# show pppoe statistics

PPPoE Events                   TOTAL         SINCE CLEARED
------------------------------ ------------- -------------
INVALID                        0             0            
PRE-SERVICE FOUND              0             0            
PRE-SERVICE NONE               0             0            
SSS CONNECT LOCAL              16002         16002        
SSS FORWARDING                 0             0            
SSS FORWARDED                  0             0            
SSS MORE KEYS                  16002         16002        
SSS DISCONNECT                 0             0            
CONFIG UPDATE                  0             0            
STATIC BIND RESPONSE           16002         16002        
PPP FORWARDING                 0             0            
PPP FORWARDED                  0             0            
PPP DISCONNECT                 0             0            
PPP RENEGOTIATION              0             0            
SSM PROVISIONED                16002         16002        
SSM UPDATED                    16002         16002        
SSM DISCONNECT                 0             0            
> 
PPPoE Statistics               TOTAL         SINCE CLEARED
------------------------------ ------------- -------------
SSS Request                    16002         16002        
SSS Response Stale             0             0            
SSS Disconnect                 0             0            
PPPoE Handles Allocated        16002         16002        
PPPoE Handles Freed            0             0            
Dynamic Bind Request           16002         16002        
Static Bind Request            16002         16002        

Table 25 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.

Table 25 show pppoe redundancy Field Descriptions 

Field
Description

INVALID

Errors in the segment handling state machine; this field typically displays a zero.

PRE-SERVICE FOUND

PPPoE sessions in the initial state before connection to services.

PRE-SERVICE NONE

PPPoE sessions in the initial state with no service selection.

SSS CONNECT LOCAL

Subscriber service switch (SSS) PPPoE local connections.

SSS FORWARDING

SSS connections in a forwarding state.

SSS FORWARDED

SSS connections that have been forwarded.

SSS MORE KEYS

PPPoE sessions that are in the intermediate state, processing service keys, before a session is forwarded or terminated locally.

SSS DISCONNECT

PPPoE sessions disconnected from the subscriber service switch.

CONFIG UPDATE

 

STATIC BIND RESPONSE

Number of PPPoE responses that the interface is bound to the session.

PPP FORWARDING

PPPoE sessions in the forwarding state.

PPP FORWARDED

Forwarded PPP oE sessions.

PPP DISCONNECT

Disconnected PPPoE sessions.

PPP RENEGOTIATION

PPPoE renegotiation sessions.

SSM PROVISIONED

Dataplane (segment switching manager or SSM) response confirmations.

SSM UPDATED

Dataplane to control plane notifications.

SSM DISCONNECT

Dataplane disconnects.

SSS Request

SSS requests to determine if a call is to be forwarded or locally terminated.

SSS Response Stale

SSS responses received for sessions that are already freed.

SSS Disconnect

SSS disconnect messages to PPPoE sessions.

PPPoE Handles Allocated

Handles assigned for PPPoE sessions.

PPPoE Handles Freed

Handles freed.

Dynamic Bind Request

PPPoE requests to bind interfaces to sessions.

Static Bind Request

PPPoE requests to bind interfaces to sessions


SSS

Related Commands

Command
Description

show pppoe statistics

Display PPPoE statistics.


show pppoe relay context all

To display PPP over Ethernet (PPPoE) relay contexts created for relaying PPPoE Active Discovery (PAD) messages, use the show pppoe relay context all command in privileged EXEC mode.

show pppoe relay context all

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.3(4)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

Use this command to display relay contexts created for relaying PAD messages.

Examples

The following is sample output from the show pppoe relay context all command:

Router# show pppoe relay context all

Total PPPoE relay contexts 1
UID    ID     Subscriber-profile      State
25     18     Profile-1               RELAYED

Table 26 describes the significant fields shown in the show pppoe relay context all command output.

Table 26 show pppoe relay context all Field Descriptions 

Field
Description

Total PPPoE relay contexts

PPPoE relay contexts created for relaying PAD messages.

UID

Unique identifier for the relay context.

ID

PPPoE session identifier for the relay context.

Subscriber-profile

Name of the subscriber profile that is used by the PPPoE group associated with the relay context.

State

Shows the state of the relay context, which will be one of the following:

INVALID—Not valid.

RELFWD—PPPoE relay context was forwarded.

REQ_RELAY—Relay has been requested.


Related Commands

Command
Description

clear pppoe relay context

Clears PPPoE relay contexts created by PAD messages.

show pppoe session

Displays information about currently active PPPoE sessions.


show pppoe session

To display information about currently active PPP over Ethernet (PPPoE) sessions, use the show pppoe session command in user EXEC or privileged EXEC mode.

show pppoe session [all | interface type number | packets]

Syntax Description

all

(Optional) Displays detailed information about the PPPoE session.

interface type number

(Optional) Displays information about the interface on which the PPPoE session is active.

packets

(Optional) Displays packet statistics for the PPPoE session.


Command Modes

User EXEC (>)
Privileged EXEC (#)

Command History

Release
Modification

12.2(4)YG

This command was introduced on the Cisco SOHO 76, 77, and 77H routers.

12.3(4)T

This command was integrated into Cisco IOS Release 12.3(4)T and was enhanced to display information about relayed PPPoE Active Discovery (PAD) messages.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB and support was added for the Cisco 7200, 7301, 7600, and 10000 series platforms.

12.2(31)SB2

This command was integrated into Cisco IOS Release 12.2(31)SB2 and the output following the use of the all keyword was modified to indicate if a session is Interworking Functionality (IWF)-specific or if the tag ppp-max-payload tag is in the discovery frame and accepted.

12.4(15)XF

The output was modified to display Virtual Multipoint Interface (VMI) and PPPoE process-level values.

12.4(15)T

This command was integrated into Cisco IOS Release 12.4(15)T to support VMIs in Mobile Ad Hoc Router-to-Radio Networks (MANETs).

12.2(33)SRC

This command was integrated into Cisco IOS Release 12.2(33)SRC.

Cisco IOS XE Release 2.4

This command was implemented on Cisco ASR 1000 series routers.


Examples

Single Session: Example

The following is sample output from the show pppoe session command:

Router# show pppoe session

     1 session  in FORWARDED (FWDED) State
     1 session  total

Uniq ID
PPPoE 
SID
RemMAC
Port
VT
VA
State
LocMAC
VA-st
26
19
0001.96da.a2c0
Et0/0.1
5
N/A
RELFWD
000c.8670.1006
VLAN:3434

PPPoE Session with IWF and ppp-max-payload Tag Example

The following is sample output from the show pppoe session command when there is an IWF session and the ppp-max-payload tag is accepted in the discovery frame (available in Cisco IOS Release 12.2(31)SB2):

Router# show pppoe session   

     1 session  in LOCALLY_TERMINATED (PTA) State
     1 session  total.  1 session of it is IWF type

Uniq ID
PPPoE 
SID
RemMAC
Port
VT
VA
State
LocMAC
VA-st
Type
26
21
0001.c9f2.a81e
Et1/2
1
Vi2.1
PTA
0006.52a4.901e
UP
IWF

Table 27 describes the significant fields shown in the displays.

Table 27 show pppoe session Field Descriptions 

Field
Description

Uniq ID

Unique identifier for the PPPoE session.

PPPoE SID

PPPoE session identifier.

RemMAC

Remote MAC address.

Port

Port type and number.

VT

Virtual-template interface.

VA

Virtual access interface.

State

Displays the state of the session, which will be one of the following:

FORWARDED

FORWARDING

LCP_NEGOTIATION

LOCALLY_TERMINATED

PPP_START

PTA

RELFWD (a PPPoE session was forwarded for which the Active discovery messages were relayed)

SHUTTING_DOWN

VACCESS_REQUESTED

LocMAC

Local MAC address.


show pppoe session all: Example

The following example shows information per session for the show pppoe session all command.

Router# show pppoe session all

Total PPPoE sessions 1
session id: 21
local MAC address: 0006.52a4.901e, remote MAC address: 0001.c9f2.a81e
virtual access interface: Vi2.1, outgoing interface: Et1/2, IWF
PPP-Max-Payload tag: 1500
    15942 packets sent, 15924 received
    224561 bytes sent, 222948 received

Related Commands

Command
Description

clear pppoe relay context

Clears PPPoE relay contexts created for relaying PAD messages.

show pppoe relay context all

Displays PPPoE relay contexts created for relaying PAD messages.


show pppoe statistics

To display PPP over Ethernet (PPPoE) events and statistics, use the show pppoe statistics command in privileged EXEC mode.

show pppoe statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

This command is useful for obtaining statistics and events for PPPoE sessions. Use the show pppoe statistics command to display a cumulative count of PPPoE events and statistics, and to display an incremental count since the last time the clear pppoe statistics command was issued.

Examples

The following is sample output from the show pppoe statistics command:

Router# show pppoe statistics

PPPoE Events                   TOTAL         SINCE CLEARED
------------------------------ ------------- -------------
INVALID                        0             0            
PRE-SERVICE FOUND              0             0            
PRE-SERVICE NONE               0             0            
SSS CONNECT LOCAL              16002         16002        
SSS FORWARDING                 0             0            
SSS FORWARDED                  0             0            
SSS MORE KEYS                  16002         16002        
SSS DISCONNECT                 0             0            
CONFIG UPDATE                  0             0            
STATIC BIND RESPONSE           16002         16002        
PPP FORWARDING                 0             0            
PPP FORWARDED                  0             0            
PPP DISCONNECT                 0             0            
PPP RENEGOTIATION              0             0            
SSM PROVISIONED                16002         16002        
SSM UPDATED                    16002         16002        
SSM DISCONNECT                 0             0            
> 
PPPoE Statistics               TOTAL         SINCE CLEARED
------------------------------ ------------- -------------
SSS Request                    16002         16002        
SSS Response Stale             0             0            
SSS Disconnect                 0             0            
PPPoE Handles Allocated        16002         16002        
PPPoE Handles Freed            0             0            
Dynamic Bind Request           16002         16002        
Static Bind Request            16002         16002        

Table 28 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.

Table 28 show pppoe statistics Field Descriptions 

Field
Description

INVALID

Errors in the segment handling state machine; this field typically displays a zero.

PRE-SERVICE FOUND

Number of occurrences of PPPoE service policy having been located and configuration data having been read from the external server to the bba-group profile.

PRE-SERVICE NONE

Number of failures of PPPoE service policy profile configuration read from the external server .

SSS CONNECT LOCAL

Subscriber service switch (SSS) connections that received loca l termination directives.

SSS FORWARDING

SSS connections that received forwarding notification.

SSS FORWARDED

SSS connections that received forwarded notification.

SSS MORE KEYS

PPPoE sessions that are in the intermediate state, processing service keys, before a session is forwarded or terminated locally.

SSS DISCONNECT

PPPoE sessions disconnected after receiving a disconnect notification from the subscriber service switch.

CONFIG UPDATE

PPPoE sessions receiving serving policy configuration updates.

STATIC BIND RESPONSE

Number of responses that the interface is bound to the PPP session.

PPP FORWARDING

Number of PPPoE sessions in the forwarding state.

PPP FORWARDED

Number of forwarded PPPoE sessions.

PPP DISCONNECT

PPPoE sessions disconnected after receiving a disconnect message from the state machine.

PPP RENEGOTIATION

PPPoE sessions renegotiated after receiving a renegotiation message from the state machine.

SSM PROVISIONED

Segment switching manager (SSM) response that the dataplane has been initialized.

SSM UPDATED

SSM response that the dataplane has been successfully updated.

SSM DISCONNECT

Dataplane disconnects from PPPoE sessions.

SSS Request

SSS requests to determine if a call is to be forwarded or locally terminated.

SSS Response Stale

SSS responses received for sessions that are already freed.

SSS Disconnect

SSS disconnect messages to PPPoE sessions.

PPPoE Handles Allocated

Handles assigned for PPPoE sessions.

PPPoE Handles Freed

Handles freed for PPPoE sessions.

Dynamic Bind Request

PPPoE requests to start PPP sessions.

Static Bind Request

PPPoE requests to bind interfaces to PPP sessions


Related Commands

Command
Description

clear pppoe statistics

Clears PPPoE statistics.


show pppoe throttled mac

To display information about MAC addresses from which PPP over Ethernet (PPPoE) sessions are throttled, that is, not currently accepted, use the show pppoe throttled mac command in privileged EXEC mode.

show pppoe throttled mac

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(28)SB4A

This command was introduced.

12.2(28)SB6

This command was integrated into Cisco IOS Release 12.2(28)SB6.

12.2(31)SB2

This command was integrated into Cisco IOS Release 12.2(31)SB2.


Usage Guidelines

PPPoE connection throttling limits the number of PPPoE session requests that can be made from a MAC address within a specified period of time. Use the show pppoe throttled mac command to display MAC addresses and ingress ports of users that exceed connection throttling limits configured using the sessions throttle command.

Examples

The following is sample output from the show pppoe throttled mac command:

Router# show pppoe throttled mac

MAC(s) throttled
MAC              Ingress Port
00c1.00aa.006c          ATM1/0/0.101
007c.009e.0070          ATM1/0/0.101
0097.009d.007a          ATM1/0/0.101
008c.0077.0082          ATM1/0/0.101
00b5.00a8.009f          ATM1/0/0.101
00a4.0088.00b5          ATM1/0/0.101

Table 29 describes the significant fields shown in the display.

Table 29 show pppoe throttled mac Field Descriptions

Field
Description

MAC

MAC address whose PPPoE session requests are limited.

Ingress Port

Interface port to which the MAC address attempted to set up a connection.


Related Commands

Command
Description

sessions throttle

Configures PPPoE connection throttling in BBA-group configuration mode.


show sss session

To display Subscriber Service Switch session status, use the show sss session command in privileged EXEC mode.

show sss session [all]

Syntax Description

all

(Optional) Provides an extensive report about the Subscriber Service Switch sessions.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(13)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

Use this command to verify correct operation of PPP connections in the Subscriber Service Switch environment.

Examples

The following sample output from the show sss session command provides a basic report of Subscriber Service Switch session activity:

Router# show sss session

Current SSS Information: Total sessions 9

Uniq ID Type       State         Service      Identifier           Last Chg
9       PPPoE/PPP  connected     VPDN         nobody3@cisco.com        00:02:36
10      PPPoE/PPP  connected     VPDN         nobody3@cisco.com        00:01:52
11      PPPoE/PPP  connected     VPDN         nobody3@cisco.com        00:01:52
3       PPPoE/PPP  connected     VPDN         user3@cisco.com          2d21h   
6       PPPoE/PPP  connected     Local Term   user1                    00:03:35 
7       PPPoE/PPP  connected     Local Term   user2                    00:03:35
8       PPPoE/PPP  connected     VPDN         nobody3@cisco.com        00:02:36
2       PPP        connected     Local Term   user5                    00:05:06
4       PPP        connected     VPDN         nobody2@cisco.com        00:06:52

The following sample output from the show sss session all command provides a more extensive report of Subscriber Service Switch session activity:

Router# show sss session all

Current SSS Information: Total sessions 9

SSS session handle is 40000013, state is connected, service is VPDN
Unique ID is 9
SIP subscriber access type(s) are PPPoE/PPP
Identifier is nobody3@cisco.com
Last Changed 00:02:49
Root SIP Handle is DF000010, PID is 49
AAA unique ID is 10
Current SIP options are Req Fwding/Req Fwded

SSS session handle is B0000017, state is connected, service is VPDN
Unique ID is 10
SIP subscriber access type(s) are PPPoE/PPP
Identifier is nobody3@cisco.com
Last Changed 00:02:05
Root SIP Handle is B9000015, PID is 49
AAA unique ID is 11
Current SIP options are Req Fwding/Req Fwded

SSS session handle is D6000019, state is connected, service is VPDN
Unique ID is 11
SIP subscriber access type(s) are PPPoE/PPP
Identifier is nobody3@cisco.com
Last Changed 00:02:13
Root SIP Handle is D0000016, PID is 49
AAA unique ID is 12
Current SIP options are Req Fwding/Req Fwded

SSS session handle is 8C000003, state is connected, service is VPDN
Unique ID is 3
SIP subscriber access type(s) are PPPoE/PPP
Identifier is user3@cisco.com
Last Changed 2d21h   
Root SIP Handle is D3000002, PID is 49
AAA unique ID is 3
Current SIP options are Req Fwding/Req Fwded

SSS session handle is BE00000B, state is connected, service is Local Term
Unique ID is 6
SIP subscriber access type(s) are PPPoE/PPP
Identifier is user1
Last Changed 00:03:56
Root SIP Handle is A9000009, PID is 49
AAA unique ID is 7
Current SIP options are Req Fwding/Req Fwded

SSS session handle is DC00000D, state is connected, service is Local Term
Unique ID is 7
SIP subscriber access type(s) are PPPoE/PPP
Identifier is user2
Last Changed 00:03:57
Root SIP Handle is 2C00000A, PID is 49
AAA unique ID is 8
Current SIP options are Req Fwding/Req Fwded

SSS session handle is DB000011, state is connected, service is VPDN
Unique ID is 8
SIP subscriber access type(s) are PPPoE/PPP
Identifier is nobody3@cisco.com
Last Changed 00:02:58
Root SIP Handle is 1000000F, PID is 49
AAA unique ID is 9
Current SIP options are Req Fwding/Req Fwded

SSS session handle is 3F000007, state is connected, service is Local Term
Unique ID is 2
SIP subscriber access type(s) are PPP
Identifier is user5
Last Changed 00:05:30
Root SIP Handle is 8A000009, PID is 92
AAA unique ID is 1
Current SIP options are Req Fwding/Req Fwded

SSS session handle is 97000005, state is connected, service is VPDN
Unique ID is 4
SIP subscriber access type(s) are PPP
Identifier is nobody2@cisco.com
Last Changed 00:07:16
Root SIP Handle is 32000000, PID is 92
AAA unique ID is 5
Current SIP options are Req Fwding/Req Fwded

Most of the fields displayed by the show sss session and show sss session all commands are self-explanatory. Table 30 describes the significant fields shown in the displays. Any data not described in Table 23 is used for internal debugging purposes.

Table 30 show sss session Field Descriptions

Field
Description

Uniq ID

The unique identifier used to correlate this particular session with the sessions retrieved from other show commands or debug command traces.

Type

Access protocols relevant to this session.

State

Status of the connection, which can be one of the following states:

connected—The session has been established.

wait-for-req—Waiting for request.

wait-for-auth—Waiting for authorization.

wait-for-fwd—Waiting to be forwarded; for example, waiting for virtual private dialup network (VPDN) service.

Service

Type of service given to the user.

Identifier

A string identifying the user. This identifier may either be the username, or the name used to authorize the session. When show sss session command is used on the LNS, this identifier is optional and may not display the username, or the name used to authorize the session on LNS.

Last Chg

Time interval in in hh:mm:ss since the service for this session was last changed.


Related Commands

Command
Description

show vpdn session

Displays session information about the L2TP and L2F protocols, and PPPoE tunnels in a VPDN.


show vpdn session

To display session information about active Layer 2 sessions for a virtual private dialup network (VPDN), use the show vpdn session command in privileged EXEC mode.

show vpdn session [l2f | l2tp | pptp] [all | packets | sequence | state [filter]]

Syntax Description

l2f

(Optional) Displays information about Layer 2 Forwarding (L2F) calls only.

l2tp

(Optional) Displays information about Layer 2 Tunnel Protocol (L2TP) calls only.

pptp

(Optional) Displays information about Point-to-Point Tunnel Protocol (PPTP) calls only.

all

(Optional) Displays extensive reports about active sessions.

packets

(Optional) Displays information about packet and byte counts for sessions.

sequence

(Optional) Displays sequence information for sessions.

state

(Optional) Displays state information for sessions.

filter

(Optional) One of the filter parameters defined in Table 31.


Command Modes

Privileged EXEC

Command History

Release
Modification

11.2

This command was introduced.

12.1(1)T

This command was enhanced to display Point-to-Point Protocol over Ethernet (PPPoE) session information. The packets and all keywords were added.

12.1(2)T

This command was enhanced to display PPPoE session information on actual Ethernet interfaces.

12.2(13)T

Reports from this command were enhanced with a unique identifier that can be used to correlate a particular session with the session information retrieved from other show commands or debug command traces.

12.3(2)T

The l2f, l2tp, and pptp keywords were added.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.4(11)T

The l2f keyword was removed.


Usage Guidelines

Use the show vpdn session command to display information about all active sessions using L2TP, L2F, and PPTP.

The output of the show vpdn session command displays PPPoE session information as well. PPPoE is supported on ATM permanent virtual connections (PVCs) compliant with RFC 1483 only. PPPoE is not supported on Frame Relay and any other LAN interfaces such as FDDI and Token Ring.

Reports and options for this command depend upon the configuration in which it is used. Use the command-line question mark (?) help function to display options available with the show vpdn session command.

Table 31 defines the filter parameters available to refine the output of the show vpdn session command. You may use any one of the filter parameters in place of the filter argument.

Table 31 Filter Parameters for the show vpdn session Command

Syntax
Description

interface serial number

Filters the output to display only information for sessions associated with the specified serial interface.

number—The serial interface number.

interface virtual-template number

Filters the output to display only information for sessions associated with the specified virtual template.

number—The virtual template number.

tunnel id tunnel-id session-id

Filters the output to display only information for sessions associated with the specified tunnel ID and session ID.

tunnel-id—The local tunnel ID. Valid values range from 1 to 65535.

session-id—The local session ID. Valid values range from 1 to 65535.

tunnel remote-name remote-name local-name

Filters the output to display only information for sessions associated with the tunnel with the specified names.

remote-name—The remote tunnel name.

local-name—The local tunnel name.

username username

Filters the output to display only information for sessions associated with the specified username.

username—The username.


Examples

The show vpdn session command provides reports on call activity for all active sessions. The following output is from a device carrying active L2TP, L2F, and PPPoE sessions:

Router# show vpdn session

L2TP Session Information Total tunnels 1 sessions 4

LocID RemID TunID Intf          Username             State    Last Chg Uniq ID
4     691   13695 Se0/0         nobody2@cisco.com        est    00:06:00  4      
5     692   13695 SSS Circuit   nobody1@cisco.com        est    00:01:43  8      
6     693   13695 SSS Circuit   nobody1@cisco.com        est    00:01:43  9      
3     690   13695 SSS Circuit   nobody3@cisco.com        est    2d21h     3      

L2F Session Information Total tunnels 1 sessions 2

 CLID   MID    Username                   Intf          State   Uniq ID
 1      2      nobody@cisco.com              SSS Circuit   open    10     
 1      3      nobody@cisco.com              SSS Circuit   open    11     

%No active PPTP tunnels

PPPoE Session Information Total tunnels 1 sessions 7

PPPoE Session Information
UID    SID    RemMAC         OIntf          Intf      Session
              LocMAC                        VASt      state  
3      1      0030.949b.b4a0 Fa2/0          N/A       CNCT_FWDED
              0010.7b90.0840                         
6      2      0030.949b.b4a0 Fa2/0          Vi1.1     CNCT_PTA
              0010.7b90.0840               UP         
7      3      0030.949b.b4a0 Fa2/0          Vi1.2     CNCT_PTA
              0010.7b90.0840               UP         
8      4      0030.949b.b4a0 Fa2/0          N/A       CNCT_FWDED
              0010.7b90.0840                         
9      5      0030.949b.b4a0 Fa2/0          N/A       CNCT_FWDED
              0010.7b90.0840                         
10     6      0030.949b.b4a0 Fa2/0          N/A       CNCT_FWDED
              0010.7b90.0840                         
11     7      0030.949b.b4a0 Fa2/0          N/A       CNCT_FWDED
              0010.7b90.0840                         

Table 32 describes the significant fields shown in the show vpdn session display.

Table 32 show vpdn session Field Descriptions 

Field
Description

LocID

Local identifier.

RemID

Remote identifier.

TunID

Tunnel identifier.

Intf

Interface associated with the session.

Username

User domain name.

State

Status for the individual user in the tunnel; can be one of the following states:

est

opening

open

closing

closed

waiting_for_tunnel

The waiting_for_tunnel state means that the user connection is waiting until the main tunnel can be brought up before it moves to the opening state.

Last Chg

Time interval (in hh:mm:ss) since the last change occurred.

Uniq ID

The unique identifier used to correlate this particular session with the sessions retrieved from other show commands or debug command traces.

CLID

A number uniquely identifying the session.

MID

A number uniquely identifying this user in this tunnel.

UID

PPPoE user ID.

SID

PPPoE session ID.

RemMAC

Remote MAC address of the host.

LocMAC

Local MAC address of the router. It is the default MAC address of the router.

OIntf

Outgoing interface.

Intf VASt

Virtual access interface number and state.

Session state

PPPoE session state.


The show vpdn session packets command provides reports on call activity for all the currently active sessions. The following output is from a device carrying an active PPPoE session:

Router# show vpdn session packets
%No active L2TP tunnels
%No active L2F tunnels
PPPoE Session Information Total tunnels 1 sessions 1
PPPoE Session Information
SID     Pkts-In         Pkts-Out        Bytes-In        Bytes-Out
1       202333          202337          2832652         2832716

Table 33 describes the significant fields shown in the show vpdn session packets command display.

Table 33 show vpdn session packets Field Descriptions 

Field
Description

SID

Session ID for the PPPoE session.

Pkts-In

Number of packets coming into this session.

Pkts-Out

Number of packets going out of this session.

Bytes-In

Number of bytes coming into this session.

Bytes-Out

Number of bytes going out of this session.


The show vpdn session all command provides extensive reports on call activity for all the currently active sessions. The following output is from a device carrying active L2TP, L2F, and PPPoE sessions:

Router# show vpdn session all

L2TP Session Information Total tunnels 1 sessions 4

Session id 5 is up, tunnel id 13695
Call serial number is 3355500002
Remote tunnel name is User03
  Internet address is 10.0.0.63
  Session state is established, time since change 00:03:53
    52 Packets sent, 52 received
    2080 Bytes sent, 1316 received
  Last clearing of "show vpdn" counters never
  Session MTU is 1464 bytes
  Session username is nobody@cisco.com
    Interface 
    Remote session id is 692, remote tunnel id 58582
  UDP checksums are disabled
  SSS switching enabled
  No FS cached header information available
  Sequencing is off
  Unique ID is 8

Session id 6 is up, tunnel id 13695
Call serial number is 3355500003
Remote tunnel name is User03
  Internet address is 10.0.0.63
  Session state is established, time since change 00:04:22
    52 Packets sent, 52 received
    2080 Bytes sent, 1316 received
  Last clearing of "show vpdn" counters never
  Session MTU is 1464 bytes
  Session username is nobody@cisco.com
    Interface 
    Remote session id is 693, remote tunnel id 58582
  UDP checksums are disabled
  SSS switching enabled
  No FS cached header information available
  Sequencing is off
  Unique ID is 9

Session id 3 is up, tunnel id 13695
Call serial number is 3355500000
Remote tunnel name is User03
  Internet address is 10.0.0.63
  Session state is established, time since change 2d21h
    48693 Packets sent, 48692 received
    1947720 Bytes sent, 1314568 received
  Last clearing of "show vpdn" counters never
  Session MTU is 1464 bytes
  Session username is nobody2@cisco.com
    Interface 
    Remote session id is 690, remote tunnel id 58582
  UDP checksums are disabled
  SSS switching enabled
  No FS cached header information available
  Sequencing is off
  Unique ID is 3

Session id 4 is up, tunnel id 13695
Call serial number is 3355500001
Remote tunnel name is User03
  Internet address is 10.0.0.63
  Session state is established, time since change 00:08:40
    109 Packets sent, 3 received
    1756 Bytes sent, 54 received
  Last clearing of "show vpdn" counters never
  Session MTU is 1464 bytes
  Session username is nobody@cisco.com
    Interface Se0/0
    Remote session id is 691, remote tunnel id 58582
  UDP checksums are disabled
  IDB switching enabled
  FS cached header information:
    encap size = 36 bytes
    4500001C BDDC0000 FF11E977 0A00003E
    0A00003F 06A506A5 00080000 0202E4D6
    02B30000 
  Sequencing is off
  Unique ID is 4

L2F Session Information Total tunnels 1 sessions 2
MID: 2
User:  nobody@cisco.com
Interface:  
State:  open
Packets out: 53
Bytes out: 2264
Packets in: 51
Bytes in: 1274
Unique ID: 10

  Last clearing of "show vpdn" counters never
MID: 3
User:  nobody@cisco.com
Interface:  
State:  open
Packets out: 53
Bytes out: 2264
Packets in: 51
Bytes in: 1274
Unique ID: 11
Last clearing of "show vpdn" counters never

%No active PPTP tunnels

PPPoE Session Information Total tunnels 1 sessions 7

PPPoE Session Information
SID     Pkts-In         Pkts-Out        Bytes-In        Bytes-Out
1       48696           48696           681765          1314657   
2       71              73              1019            1043      
3       71              73              1019            1043      
4       61              62              879             1567      
5       61              62              879             1567      
6       55              55              791             1363      
7       55              55              795             1363      

The significant fields shown in the show vpdn session all command display are similar to those defined in Table 32 and Table 33.

Related Commands

Command
Description

show sss session

Displays Subscriber Service Switch session status.

show vpdn

Displays basic information about all active VPDN tunnels.

show vpdn domain

Displays all VPDN domains and DNIS groups configured on the NAS.

show vpdn group

Displays a summary of the relationships among VPDN groups and customer/VPDN profiles, or summarizes the configuration of a VPDN group including DNIS/domain, load sharing information, and current session information.

show vpdn history failure

Displays the content of the failure history table.

show vpdn multilink

Displays the multilink sessions authorized for all VPDN groups.

show vpdn redirect

Displays statistics for L2TP redirects and forwards.

show vpdn tunnel

Displays information about active Layer 2 tunnels for a VPDN.


shutdown (PVC range)

To deactivate a permanent virtual circuit (PVC) range, use the shutdown command in PVC range configuration mode. To reactivate a PVC range, use the no form of this command.

shutdown

no shutdown

Syntax Description

This command has no arguments or keywords.

Defaults

PVC range is active.

Command Modes

PVC range configuration

Command History

Release
Modification

12.1(5)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Examples

In the following example, a PVC range called "range1" is deactivated:

interface atm 6/0.110 multipoint
 range range1 pvc 100 4/199
  shutdown

Related Commands

Command
Description

range pvc

Defines a range of ATM PVCs.

show pppatm summary

Deactivates an individual PVC within a PVC range.


shutdown (PVC-in-range)

To deactivate an individual permanent virtual circuit (PVC) within a PVC range, use the shutdown command in PVC-in-range configuration mode. To reactivate an individual PVC within PVC range, use the no form of this command.

shutdown

no shutdown

Syntax Description

This command has no arguments or keywords.

Defaults

The PVC is active.

Command Modes

PVC-in-range configuration

Command History

Release
Modification

12.1(5)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Examples

In the following example, "pvc1" within the PVC range called "range1" is deactivated:

interface atm 6/0.110 multipoint
 range range1 pvc 100 4/199
  pvc-in-range pvc1 7/104
   shutdown

Related Commands

Command
Description

pvc-in-range

Configures an individual PVC within a PVC range.

shutdown (PVC range)

Deactivates a PVC range.


subscriber access

To configure a network access server (NAS) to enable Subscriber Service Switch (SSS) to preauthorize the NAS port identifier (NAS-Port-ID) string before authorizing the domain name, use the subscriber access command in global configuration mode. To disable SSS preauthorization, use the no form of this command.

subscriber access {pppoe | pppoa} pre-authorize nas-port-id [default | list-name] [send username]

no subscriber access {pppoe | pppoa} pre-authorize nas-port-id

Syntax Description

pppoe

Specifies PPP over Ethernet (PPPoE).

pppoa

Specifies PPP over ATM (PPPoATM).

pre-authorize nas-port-id

Signals SSS to preauthorize the NAS-Port-ID string before authorizing the domain name.

default

(Optional) Uses the default method list name instead of the named list-name argument.

list-name

(Optional) Authentication, authorization, and accounting (AAA) authorization configured on the LAC.

send username

(Optional) Specifies to send the authentication username of the session in the Change_Info attribute (attribute 77).


Defaults

Preauthorization is disabled.

Command Modes

Global configuration

Command History

Release
Modification

12.2(8)B

This command was introduced on the Cisco 6400 series, the Cisco 7200 series, and the Cisco 7401 Application Specific Router (ASR).

12.2(13)T

This command was integrated into Cisco IOS Release 12.2(13)T, and the pppoe and pppoa keywords were added.

12.4(2)T

The send username keyword was added.

12.3(14)YM2

This command was integrated into Cisco IOS Release 12.3(14)YM2 and implemented on the Cisco 7301, Cisco 7204VXR, and Cisco 7206VXR routers.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.2(31)SB

This command was integrated into Cisco IOS Release 12.2(31)SB.


Usage Guidelines

The NAS-Port-ID string is used to locate the first service record, which may contain one of three attributes, as follows:

A restricted set of values for the domain substring of the unauthenticated PPP name.

This filtered service key then locates the final service. See the vpdn authorize domain command for more information.

PPPoE session limit.

The logical line ID (LLID).

Once NAS port authorization has taken place, normal authorization, which is usually the domain authorization, continues.

Logical Line ID

The LLID is an alphanumeric string of 1 to 253 characters that serves as the logical identification of a subscriber line. The LLID is maintained in a RADIUS server customer profile database and enables users to track their customers on the basis of the physical lines on which customer calls originate. Downloading the LLID is also referred to as "preauthorization" because it occurs before normal virtual private dialup network (VPDN) authorization downloads layer two tunnel protocol (L2TP) information.

This command enables LLID and SSS querying only for PPP over Ethernet over ATM (PPPoEoATM) and PPP over Ethernet over VLAN (PPPoEoVLAN or Dot1Q) calls; all other calls, such as ISDN, are not supported.

Per-NAS-Port Session Limits for PPPoE

Use this command to configure SSS preauthorization on the L2TP Access Concentrator (LAC) so that the PPPoE per-NAS-port session limit can be downloaded from the customer profile database. To use PPPoE per-NAS-port session limits, you must also configure the PPPoE Session-Limit per NAS-Port Cisco attribute-value pair in the user profile.

Examples

The following example signals SSS to preauthorize the NAS-Port-ID string before authorizing the domain name. This policy applies only to sessions that have a PPPoE access type.

aaa new-model
aaa group server radius sg-llid
 server 172.20.164.106 auth-port 1645 acct-port 1646
aaa group server radius sg-group
 server 172.20.164.106 auth-port 1645 acct-port 1646
aaa authentication ppp default group radius 
aaa authorization confg-commands
aaa authorization network default group sg-group
aaa authorization network mlist_llid group sg-llid
aaa session-id common
!
username s7200_2 password 0 lab
username s5300 password 0 lab
username sg-group password 0 lab
vpdn enable
!
vpdn-group 2
  request-dialin
  protocol 12tp
 domain group.com
 initiate-to ip 10.1.1.1
 local name s7200-2
!
vpdn-group 3
 accept dialin
  protocol pppoe
  virtual-template 1
!
! Signals Subscriber Service Switch to preauthorize the NAS-Port-ID string before
! authorizing the domain name.
subscriber access pppoe pre-authorize nas-port-id mlist-llid
!
interface Loopback0
 ip address 10.1.1.2 255.255.255.0
!
interface Loopback1
 ip address 10.1.1.1 255.255.255.0
!
interface Ethernet1/0
 ip address 10.2.2.2 255.255.255.0 secondary
 ip address 10.0.58.111 255.255.255.0
 no cdp enable
!
interface ATM4/0
 no ip address
 no atm ilmi-keepalive
!
interface ATM4/0.1 point-to-point
 pvc 1/100
  encapsulation aa15snap
  protocol pppoe
!
interface virtual-template1
 no ip unnumbered Loopback0
 no peer default ip address
 ppp authentication chap
!
radius-server host 172.20.164.120 auth-port 1645 acct-port 1646 key rad123
radius-server host 172.20.164.106 auth-port 1645 acct-port 1646 key rad123
ip radius source-interface Loopback1

The following example is identical to the previous example except that it also adds support for sending the PPP authenticating username with the preauthorization in the Connect-Info attribute. This example also includes command-line interface (CLI) suppression on the LLID if the username that is used to authenticate has a domain that includes #184.

aaa new-model
aaa group server radius sg-llid
 server 172.31.164.106 auth-port 1645 acct-port 1646
aaa group server radius sg-group
 server 172.31.164.106 auth-port 1645 acct-port 1646
aaa authentication ppp default group radius 
aaa authorization confg-commands
aaa authorization network default group sg-group
aaa authorization network mlist-llid group sg-llid
aaa session-id common
!
username s7200-2 password 0 lab
username s5300 password 0 lab
username sg-group password 0 lab
vpdn enable
!
vpdn-group 2
 request-dialin
 protocol 12tp
 domain domain1.com
 domain domain1.com#184
 initiate-to ip 10.1.1.1
 local name s7200-2
 l2tp attribute clid mask-method right * 255 match #184
!
vpdn-group 3
 accept dialin
 procotol pppoe
 virtual-template 1
!
subscriber access pppoe pre-authorize nas-port-id mlist-llid send username
!

Related Commands

Command
Description

ip radius source-interface

Forces RADIUS to use the IP address of a specified interface for all outgoing RADIUS packets.

l2tp attribute clid mask-method

Configures a NAS to provide L2TP calling line ID suppression for calls belonging to a VPDN group.

subscriber authorization enable

Enables SSS type authorization.

vpdn authorize domain

Enables domain preauthorization on a NAS.

vpdn l2tp attribute clid mask-method

Configures a NAS to provide L2TP calling line ID suppression globally on the router.


subscriber authorization enable

To enable Subscriber Service Switch type authorization, use the subscriber authorization enable command in global configuration mode. To disable the Subscriber Service Switch authorization, use the no form of this command.

subscriber authorization enable

no subscriber authorization enable

Syntax Description

This command has no arguments or keywords.

Defaults

Authorization is disabled.

Command Modes

Global configuration

Command History

Release
Modification

12.2(13)T

This feature was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

The subscriber authorization enable command triggers Subscriber Service Switch type authorization for local termination, even if virtual private dialup network (VPDN) and Stack Group Bidding Protocol (SGBP) are disabled.

Examples

The following example enables Subscriber Service Switch type authorization:

subscriber authorization enable

Related Commands

Command
Description

subscriber access

Enables Subscriber Service Switch preauthorizationof a NAS port identifier (NAS-Port-ID) string before authorizing the domain name.

vpdn authorize domain

Enables domain preauthorization on a NAS.


subscriber profile

To define a Subscriber Service Switch (SSS) policy for searches of a subscriber profile database, use the subscriber profile command in global configuration mode. To change or disable the SSS policy, use the no form of this command.

subscriber profile profile-name

no subscriber profile profile-name

Syntax Description

profile-name

A unique string, which can represent (but is not limited to) keys such as a domain, dialed number identification service (DNIS), port name, or PPP over Ethernet (PPPoE) service name.


Defaults

No default profile name

Command Modes

Global configuration

Command History

Release
Modification

12.3(4)T

This feature was introduced.


Usage Guidelines

This command is used to locally search the subscriber profile database for authorization data when an authentication, authorization, and accounting (AAA) network authorization method list is configured. Make sure that the aaa authorization network default local global configuration command is included in the configuration—do not use the aaa authorization network default command without the local keyword.

Examples

The following example provides virtual private dialup network (VPDN) service to users in the domain cisco.com, and uses VPDN group group 1 to obtain VPDN configuration information:

!
subscriber profile cisco.com
 service vpdn group 1

The following example provides VPDN service to DNIS 1234567, and uses VPDN group 1 to obtain VPDN configuration information:

!
subscriber profile dnis:1234567
 service vpdn group 1

The following example provides VPDN service using a remote tunnel (used on the multihop node), and uses VPDN group 1 to obtain VPDN configuration information:

!
subscriber profile host:lac
 service vpdn group 1

Related Commands

Command
Description

aaa authorization

Sets parameters that restrict user access to a network.

service deny

Denies service for the SSS policy.

service local

Enables local termination service for the SSS policy.

service relay

Enables relay of PAD messages over an L2TP tunnel.

service vpdn group

Provides VPDN service for the SSS policy.


subscriber redundancy

To configure broadband subscriber session redundancy policy for synchronization between high availability (HA) active and standby processors, use the subscriber redundancy command in global configuration mode. To delete the policy, use the no form of this command.

subscriber redundancy [{bulk | dynamic} limit cpu percentage delay seconds allow value] [delay seconds] [rate sessions seconds]

no subscriber redundancy

Syntax Description

bulk

(Optional) Configures bulk synchronization redundancy policy.

dynamic

(Optional) Configures dynamic synchronization redundancy policy.

limit cpu percent

(Optional) Specifies CPU busy threshold value as a percentage. Range 0 to 100, default 90.

delay seconds

(Optional) Specifies delay in seconds before the CCM component synchronizes sessions after the CPU busy threshold is exceeded.

allow value

(Optional) Specifies the minimum number of sessions to synchronize once the CPU busy threshold is exceeded and the specified delay is met. Range is 1 to 2,147,483,637, default is 25.

delay seconds

(Optional) Specifies minimum amount of time in seconds that a session must be ready before dynamic synchronization occurs. Range is 1 to 33,550.

rate sessions seconds

(Optional) Specifies number of sessions per time period for bulk and dynamic synchronization .

sessions—Range 1 to 32,000, default is 250.

seconds—Range is 1 to 33,550, default is 1.


Command Default

Subscriber redundancy policy applies default values.

Command Modes

Global configuration

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

Cisco IOS HA functionality for broadband protocols and applications allows for stateful switchover (SSO) and in service software upgrade (ISSU) features that minimize planned and unplanned downtime and failures. HA uses the cluster control manager (CCM) to manage the capability to synchronize subscriber session bring up on the standby processor of a redundant processor system. Use the subscriber redundancy bulk command to create and modify redundancy policy used during bulk (startup) synchronization. Use the subscriber redundancy dynamic command to tune subscriber redundancy policies that throttle dynamic synchronization by monitoring CPU usage and sync rates. Use the subscriber redundancy delay command to establish session duration minimums for synchronization and manage dynamic syncing of short duration calls. Use the subscriber redundancy rate command to throttle the number of sessions to be synchronized per period.

Examples

The following example configures a 10 second delay when CPU usage exceeds 90 percent during bulk synchronization, after which 25 sessions will be synced before the CCM again checks CPU usage:

Router(config)# subscriber redundancy bulk limit cpu 90 delay 10 allow 25

The following example configures a minimum session duration of 15 seconds before dynamic synchronization to the standby processor:

Router(config)# subscriber redundancy dynamic 15

The following example configures 2000 sessions to be synchronized per second during bulk and dynamic synchronization:

Router(config)# subscriber redundancy rate 2000 1

Related Commands

Command
Description

show ccm sessions

Displays CCM session information

show ppp subscriber statistics

Displays PPP subscriber statistics

show pppatm statistics

Displays PPPoA statistics

show pppoe statistics

Displays PPPoE statistics


sw-module heap fp

To fine-tune the Multi-Processor Forwarding (MPF) heap memory allocation required for specific session scaling and application needs, use the sw-module heap fp command in global configuration mode. To return the setting to the default (32 MB), use the no form of the command.

sw-module heap fp [megabytes]

no sw-module heap fp

Syntax Description

megabytes

(Optional) The heap size in megabytes (MB) for the MPF processor. The default size is 32 MB.


Command Default

The default heap memory allocation size is 32 MB.

Command Modes

Global configuration

Command History

Release
Modification

12.3(14)YM2

This command was introduced in Cisco IOS Release 12.3(14)YM2 and implemented on the Cisco 7200 VXR and Cisco 7301 routers.

12.4(4)T

This command was integrated into Cisco IOS Release 12.4(4)T.


Usage Guidelines

The default heap size is 32 MB if you do not specify otherwise. Once you have changed and saved the MPF heap memory configuration, reboot the router for the MPF memory size adjustment to take effect.

The following table lists the recommended heap memory size by type of deployment and number of sessions configured:

Table 34 Recommended Heap Memory Sizes

Type of Deployment
Number of Sessions
Recommended Heap Size

PTA/LAC/LNS

8000 and over

80 MB


Examples

The following example sets or changes the MPF heap memory size in a router to 80 MB:

Router(config)# sw-module heap fp 80

Related Commands

Command
Description

clear mpf interface

Clears MPF packet counts on all physical interfaces.

clear mpf punt

Clears MPF per-box punt reason and count.

ip mpf

Enables MPF on the second CPU of a Cisco 7301 or Cisco 7200 VXR router.

show ip cef exact-route

Displays the exact route for a source-destination IP address pair in CEF.

show mpf cpu

Displays the average CPU utilization when MPF is enabled on the second CPU.

show mpf interface

Displays MPF packet count information on each physical interface.

show mpf ip exact-route

Displays the exact route for a source-destination IP address pair in an MPF system.

show mpf punt

Displays the MPF punt reason and punt packet count for the chassis.


tag ppp-max-payload

To establish a range for the PPP maximum payload to be accepted by the Broadband Remote Access Server (BRAS), use the tag ppp-max-payload command under a virtual template in BBA group configuration mode. To disable the effect of this command, use the tag ppp-max-payload deny command.

tag ppp-max-payload [minimum value maximum value] [deny]

Syntax Description

minimum

(Optional) Specifies a minimum number of octets. The default minimum value is 1492.

maximum

(Optional) Specifies a maximum number of octets. The default maximum value is 1500.

value

(Optional) The minimum and maximum number (depending on which keyword precedes the value in the command syntax) of octets that can be accepted by the BRAS.

deny

(Optional) Disables the effect of any values previously entered with the tag ppp-max-payload command.


Command Default

The physical interface default maximum transmission unit (MTU) value is used.

Command Modes

BBA group configuration

Command History

Release
Modification

12.2(31)SB2

This command was introduced.


Usage Guidelines

The value of the ppp-max-payload tag accepted from a client cannot exceed the physical interface MTU minus 8 bytes (PPP over Ethernet [PPPoE] encapsulation plus PPP encapsulation). That is, the maximum accepted value of this tag from any client is limited to the minimum of physical interface MTU minus 8 and the maximum value configured by the tag ppp-max-payload maximum value.

This maximum value cap set under the BBA group can be critical to network operation because the physical interface default MTU can be extremely high (for example, 4470 octets for an ATM interface) and the BRAS administrator may not want to negotiate such a high maximum receive unit (MRU) for a session. The minimum value limitation is required to protect the BRAS against excessive fragmentation loads due to PPPoE clients negotiating too low a value for the MRU.

Examples

The following example shows the PPP-Max-Payload and IWF PPPoE Tag Support feature enabled to accept ppp-max-payload tag values from 1492 to 1892, limits the number of sessions per MAC address to 2000 when the IWF is present, and verifies that the PPP session can accept 1500-byte packets in both directions:

bba-group pppoe global
 virtual-template 1
 sessions per-mac limit 1
 sessions per-mac iwf limit 2000
 tag ppp-max-payload minimum 1492 maximum 1892
 interface Virtual-Template1
 ppp lcp echo mru verify minimum 1500

Related Commands

Command
Description

bba-group pppoe

Enters BBA group configuration mode and defines a PPPoE profile.


test virtual-template subinterface

To determine if a virtual template can support the creation of subinterfaces, use the test virtual-template subinterface command in privileged EXEC mode.

test virtual-template template subinterface

Syntax Description

template

The identifying string of the virtual template to be tested.


Defaults

No default behavior or values

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(13)T

This command was introduced.

12.2(15)B

This command was integrated into Cisco IOS Release 12.2(15)B.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.2(31)SB

This command was integrated into Cisco IOS Release 12.2(31)SB.


Usage Guidelines

This command tests the specified virtual template to determine if it can support the creation of virtual access subinterfaces. If the virtual template cannot support subinterfaces, this command lists the commands that are configured on the virtual template and that are incompatible with subinterfaces.

Examples

The following example tests virtual template 1 to determine if it can support subinterfaces. The output shows that the traffic-shape rate 50000 8000 8000 1000 command that is configured on virtual
template 1 prevents the virtual template from being able to support subinterfaces.

Router# test virtual-template 1 subinterface 

Subinterfaces cannot be created using Virtual-Template1
Interface specific commands: 
traffic-shape rate 50000 8000 8000 1000

Related Commands

Command
Description

debug vtemplate subinterface

Displays debug messages relating to virtual access subinterfaces.

virtual-template subinterface

Enables the creation of virtual access subinterfaces.


vendor-tag circuit-id service

To enable processing of the PPPoE Vendor-Specific tag in a PPPoE Active Discovery Request (PADR) packet, which extracts the Circuit-Id part of the tag and sends it to a AAA server as the NAS-Port-Id attribute in RADIUS access requests, use the vendor-tag circuit-id service command in BBA group configuration mode. To disable the command function (default), use the no form of this command.

vendor-tag circuit-id service

no vendor-tag circuit-id service

Syntax Description

This command has no argument or keywords.

Command Default

This command is disabled.

Command Modes

BBA group configuration

Command History

Release
Modification

12.4(4)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

When this command is not enabled and the Broadband Remote Access Server (BRAS) receives a packet with the Vendor-Specific tag attached, the tag is ignored and the session is allowed to come up. The Vendor-Specific tag is extracted and processed for its Circuit-Id part when the vendor-tag circuit-id service command is enabled in BBA group configuration mode. Once the command is configured, the BRAS processes incoming PADR packets and sends the Circuit-Id tag to the AAA server as a NAS-Port-Id RADIUS attribute.

Examples

In the following example, outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Session-confirmation (PADS) packets are configured to retain the incoming Vendor-Specific Line-Id tag:

bba-group pppoe pppoe-tag
 sessions per-mac limit 50
 vendor-tag circuit-id service
interface FastEthernet0/0.1
 encapsulation dot1Q 120
 pppoe enable group pppoe-tag

Related Commands

Command
Description

vendor-tag circuit-id strip

Removes an incoming Vendor-Specific Line-Id tag from outgoing PADO and PADR packets.


vendor-tag circuit-id strip


Note Effective with Cisco IOS Release 12.2(31)SB2, the vendor-tag circuit-id strip command is replaced by the vendor-tag strip command. The vendor-tag circuit-id strip command may continue to perform its normal function in prior releases, but it is no longer documented. Support for the vendor-tag circuit-id strip command will cease in a future release.


To remove the incoming Vendor-Specific Line-ID tag from outgoing PPPoE Active Discovery Offer and Request (PADO and PADR) packets, use the vendor-tag circuit-id strip command in BBA group configuration mode. To disable the command function, use the no form of this command.

vendor-tag circuit-id strip

no vendor-tag circuit-id strip

Syntax Description

This command has no arguments or keywords.

Command Default

This command's functionality is disabled. In the default condition, outgoing packets from the Broadband Remote Access Server (BRAS) have a digital subscriber line access multiplexer (DSLAM) inserted Remote-ID tag when the vendor-tag remote-id service command is configured.

Command Modes

BBA group configuration

Command History

Release
Modification

12.4(4)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.2(31)SB2

This command was replaced by the vendor-tag strip command.


Usage Guidelines

Outgoing packets from the Broadband Remote Access Server (BRAS) will have a digital subscriber line access multiplexer (DSLAM) inserted Line-ID tag when the vendor-tag circuit-id service command is configured. The DSLAM must remove the tag from the PADO packets. If the DSLAM cannot remove the tag, the BRAS must remove it before sending out the packets. When the vendor-tag circuit-id strip command is configured, the BRAS removes the incoming Vendor-Specific Line-ID tag from the outgoing packets.

Outgoing PADO and PADS packets from the BRAS will have the DSLAM-inserted Circuit-ID tag. The DSLAM must remove the tag from PADO and PADS packets. If the DSLAM cannot remove the tag, the BRAS must remove it before sending the packets out, and this is accomplished using the vendor-tag circuit-id strip command.

Examples

In the following example, the BRAS removes incoming Vendor-Specific Line-ID tags from outgoing PADO and PADS packets:

bba-group pppoe pppoe-rm-tag
 sessions per-mac limit 50
 vendor-tag circuit-id service
 vendor-tag circuit-id strip 
interface FastEthernet0/0.1
 encapsulation dot1Q 120
 pppoe enable group pppoe-tag

Related Commands

Command
Description

vendor-tag circuit-id service

Enables processing of the PPPoE Vendor-Specific tag in a PADR packet so the Circuit-ID part can be sent to a AAA server as the NAS-Port-ID attribute in RADIUS access requests.


vendor-tag remote-id service

To enable processing of the PPPoE Vendor-Specific tag in a PPPoE Active Discovery Request (PADR) packet, which extracts the Remote-ID part of the tag and sends it to an AAA server as the NAS-Port-ID attribute in RADIUS access requests, use the vendor-tag remote-id service command in BBA group configuration mode. To disable the command function, use the no form of this command.

vendor-tag remote-id service

no vendor-tag remote-id service

Syntax Description

This command has no argument or keywords.

Command Default

This command's functionality is disabled. In this default condition, when the Broadband Remote Access Server (BRAS) receives a packet with the vendor-specific tag attached, the tag is ignored and the session is allowed to come up.

Command Modes

BBA group configuration (config-bba-group)#

Command History

Release
Modification

12.2(31)SB2

This command was introduced.

Cisco IOS XE 2.3.0

This command was integrated. This command is supported on ASR 1000 series.


Usage Guidelines

When this command is not enabled and the BRAS receives a packet with the Vendor-Specific tag attached, the tag is ignored and the session is allowed to come up. The Vendor-Specific tag is extracted and processed for its Remote-ID part when the vendor-tag remote-id service command is enabled in BBA group configuration mode. When the command is configured, the BRAS processes incoming PADR packets and sends the Remote-ID tag to the AAA server as a NAS-Port-ID RADIUS attribute.

Examples

In the following example, outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Session-Confirmation (PADS) packets are configured to retain the incoming Vendor-Specific Line-ID tag:

Router(config-bba-group)# bba-group pppoe pppoe-tag
Router(config-bba-group)# sessions per-mac limit 50
Router(config-bba-group)# vendor-tag remote-id service
Router(config-bba-group)# interface FastEthernet0/0.1
Router(config-bba-group)# encapsulation dot1Q 120
Router(config-bba-group)# pppoe enable group pppoe-tag

Related Commands

Command
Description

vendor-tag strip

Removes an incoming Vendor-Specific Line-ID tag from outgoing PADO and PADR packets.


vendor-tag strip

To remove the incoming Vendor-Specific Line-ID tag from outgoing PPPoE Active Discovery Offer (PADO) and PPPoE Active Discovery Request (PADR) packets, use the vendor-tag strip command in BBA group configuration mode. To disable the command function, use the no form of this command.