Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Verifying Configuration and Status of Dynamic Subscribers and Associated Sessions, Services, and Firewall Filters

Purpose

Verify configuration and status of dynamic subscribers, sessions, services, and firewall filters.

You can display information about subscribers in different ways, depending on the options you use with the show subscriber command. You can use details from one set of output with another command to display more detailed information of interest.

Action

• To display basic information for all subscribers:
  user@host> show subscribers

  Interface IP Address/VLAN ID User Name LS:RI
  demux0.1073741824 0x8100.1500 0x8100.2900 test1@test.com default:testnet
  demux0.1073741825 0x8100.1500 0x8100.2901 test1@test.com default:testnet
  demux0.1073741826 0x8100.1500 0x8100.2902 test1@test.com default:testnet
  demux0.1073741827 0x8100.1500 0x8100.2903 test1@test.com default:testnet
  demux0.1073741826 172.16.200.6 test1@test.com default:testnet
  demux0.1073741827 172.16.200.7 test1@test.com default:testnet
  demux0.1073741824 172.16.200.8 test1@test.com default:testnet
  demux0.1073741825 172.16.200.9 test1@test.com default:testnet
  demux0.1073741828 0x8100.1500 0x8100.2910 test1@test.com default:default
  demux0.1073741828 20.20.0.2 test1@test.com default:default
  

• To display more detailed information about a particular subscriber interface:
  user@host> show subscribers interface demux0.1073741826 extensive

  Type: VLAN
  User Name: test1@test.com
  Logical System: default
  Routing Instance: testnet
  Interface: demux0.1073741826
  Interface type: Dynamic
  Dynamic Profile Name: profile-vdemux-relay-23qos
  MAC Address: 00:00:6e:56:01:04
  State: Active
  Radius Accounting ID: 12
  Session ID: 12
  Stacked VLAN Id: 0x8100.1500
  VLAN Id: 0x8100.2902
  Login Time: 2011-10-20 16:21:59 EST
  
  Type: DHCP
  User Name: test1@test.com
  IP Address: 172.16.200.6
  IP Netmask: 255.255.255.0
  Logical System: default
  Routing Instance: testnet
  Interface: demux0.1073741826
  Interface type: Static
  MAC Address: 00:00:6e:56:01:04
  State: Active
  Radius Accounting ID: 21
  Session ID: 21
  Login Time: 2011-10-20 16:24:33 EST
  Service Sessions: 2
  
  Service Session ID: 25
  Service Session Name: SUB-QOS
  State: Active
  
  Service Session ID: 26
  Service Session Name: service-cb-content
  State: Active
  IPv4 Input Filter Name: content-cb-in-demux0.1073741826-in
  IPv4 Output Filter Name: content-cb-out-demux0.1073741826-out
  

• To display traffic information for firewall filters.
  user@host> show firewall

  ...
  Filter: content-cb-in-demux0.1073741826-in 
  Counters:
  Name 				Bytes 	Packets
  __junos-dyn-service-counter 	84336      1004
  
  Filter: content-cb-out-demux0.1073741826-out 
  Counters:
  Name 				Bytes   Packets
  __junos-dyn-service-counter 	    0	      0
  ...
  

• To display detailed information for all subscribers:
  user@host> show subscribers detail
  user@host> show subscribers extensive

Meaning

The output examples in this section show increasingly detailed information about dynamically created subscriber interfaces, including how many there are, what they are, and their characteristics; how many service sessions are active and what they are; whether firewall filters are attached to the sessions and what those filters are; and how much, if any, traffic is being filtered.

In the sample output shown here, the show subscriber command lists all the subscriber logical interfaces, including demux0.1073741826. You then display details about that interface and its associated subscribers with the show subscribers interface demux0.1073741826 extensive command. The Service Session Name fields for service sessions 25 and 26 in that output show two services are active on the interface, SUB-QOS and service-cb-content. The IPv4 Input Filter Name and the IPv4 Output Filter Name fields show that two filters have been applied to the service-cb-content session: content-cb-in-demux0.1073741826-in and content-cb-out-demux0.1073741826-out. You then use the show firewalls command to list the filters and see how much, if any, traffic is being filtered.