Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show services pcef subscribers

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show services pcef subscribers
<detail | extensive | summary | terse>
<aci-interface-set-name aci-interface-set-name>
<address address>
<agent-circuit-identifier agent-circuit-identifier-substring>
<client-type client-type>
<count>
<id>
<interface interface>
<logical-system logical-system>
<mac-address mac-address>
<physical-interface physical-interface-name>
<profile-name profile-name>
<routing-instance routing-instance>
<stacked-vlan-id stacked-vlan-id>
<subscriber-state subscriber-state>
<user-name user-name>
<vci vci-identifier>
<vpi vpi-identifier>
<vlan-id vlan-id>

Description

Displays information for Junos OS Subscriber Management subscribers who are a using policy control and enforcement function (PCEF) profile to define the treatment to apply to packets associated with specific applications (for example, Facebook) or to specific service data flows.

Options

detail | extensive | summary | terse

(Optional) Display the specified level of output.

aci-interface-set-name

(Optional) Display all dynamic subscriber sessions that use the specified agent circuit identifier (ACI) interface set. Use the ACI interface set name generated by the router, such as aci-1003-ge-1/0/0.4001, and not the actual ACI value found in the DHCP or PPPoE control packets.

address

(Optional) Display subscribers whose IP address matches the specified address. You must specify the IPv4 or IPv6 address prefix without a netmask (for example, 192.0.2.0). If you specify the IP address as a prefix with a netmask (for example, 192.0.2.0/32), the router displays a message that the IP address is invalid, and rejects the command.

agent-circuit-identifier-substring

(Optional) Display all dynamic subscriber sessions whose ACI value matches the specified substring.

client-type

(Optional) Display subscribers whose client type matches one of the following client types:

  • dhcp—DHCP clients only.

  • dotlx—Dotlx clients only.

  • essm—ESSM clients only.

  • fwauth—FwAuth (authenticated across a firewall) clients only.

  • l2tp—L2TP clients only.

  • mlppp—MLPPP clients only.

  • ppp—PPP clients only.

  • pppoe—PPPoE clients only.

  • static—Static clients only.

  • vlan—VLAN clients only.

  • vpls-pw—VPLS pseudowire clients only.

  • xauth—Xauth clients only.

count

(Optional) Display the count of total subscribers and active subscribers for any specified option. You can use the count option alone or with the address, client-type, interface, logical-system, mac-address, profile-name, routing-instance, stacked-vlan-id, subscriber-state, or vlan-id options.

id

(Optional) Display a specific subscriber session whose session id matches the specified subscriber ID. You can display subscriber IDs by using the show subscribers extensive or the show subscribers interface extensive commands.

interface

(Optional) Display subscribers whose interface matches the specified interface.

logical-system

(Optional) Display subscribers whose logical system matches the specified logical system.

mac-address

(Optional) Display subscribers whose MAC address matches the specified MAC address.

physical-interface-name

(M120, M320, and MX Series routers only) (Optional) Display subscribers whose physical interface matches the specified physical interface.

profile-name

(Optional) Display subscribers whose dynamic profile matches the specified profile name.

routing-instance

(Optional) Display subscribers whose routing instance matches the specified routing instance.

stacked-vlan-id

(Optional) Display subscribers whose stacked VLAN ID matches the specified stacked VLAN ID.

subscriber-state

(Optional) Display subscribers whose subscriber state matches the specified subscriber state (ACTIVE, CONFIGURED, INIT, TERMINATED, or TERMINATING).

user-name

(M120, M320, and MX Series routers only) (Optional) Display subscribers whose username matches the specified subscriber name.

vci-identifier

(MX Series routers with MPCs and ATM MICs with SFP only) (Optional) Display active ATM subscribers whose ATM virtual circuit identifier (VCI) matches the specified VCI identifier. The range of values is 0 through 255.

vpi-identifier

(MX Series routers with MPCs and ATM MICs with SFP only) (Optional) Display active ATM subscribers whose ATM virtual path identifier (VPI) matches the specified VPI identifier. The range of values is 0 through 65,535.

vlan-id

(Optional) Display subscribers whose VLAN ID matches the specified VLAN ID, regardless of whether the subscriber uses a single-tagged or double-tagged VLAN. For subscribers using a double-tagged VLAN, this option displays subscribers where the inner VLAN tag matches the specified VLAN ID. To display only subscribers where the specified value matches only double-tagged VLANs, use the stacked-vlan-id stacked-vlan-id option to match the outer VLAN tag.

Note:

Because of display limitations, logical system and routing instance output values are truncated when necessary.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show services pcef subscribers command. Output fields are listed in the approximate order in which they appear.

Table 1: show services pcef subscribers Output Fields

Field Name

Field Description

Level of Output

Interface

Interface associated with the subscriber.

detail

extensive

terse

IP Address

Subscriber IPv4 or IPv6 address.

detail

extensive

terse

User Name

Name of subscriber.

detail

extensive

terse

Packets

Number of the subscriber’s packets that are processed by a PCEF profile.

  • Input—Input packets.

  • Output—Output packets.

terse

Packet Drops

Number of the subscriber’s packets that were dropped as a result of being processed by a PCEF profile.

  • Input—Input packets.

  • Output—Output packets.

terse

Session ID

ID number for a subscriber service session.

extensive

detail

PFE Flow ID

Variable-based forwarding flow ID.

extensive

detail

PCEF profile

PCEF profile that is assigned to the subscriber.

extensive

detail

Routing Instance

Routing instance associated with the subscriber.

extensive

detail

Service VRF

extensive

detail

Service set

Service set that is performing policy control.

extensive

detail

Input packets

Number of the subscriber’s input packets that are processed by a PCEF profile.

extensive

detail

Input octet

Number of the subscriber’s input octets that are processed by a PCEF profile.

extensive

detail

Output packets

Number of the subscriber’s output packets that are processed by a PCEF profile.

extensive

detail

Output octet

Number of the subscriber’s output octets that are processed by a PCEF profile.

extensive

detail

Input drops

Number of the subscriber’s input packets that were dropped as a result of being processed by a PCEF profile.

extensive

detail

Input drop bytes

Number of the subscriber’s input bytes that were dropped as a result of being processed by a PCEF profile.

extensive

detail

Output drops

Number of the subscriber’s output packets that were dropped as a result of being processed by a PCEF profile.

extensive

detail

Output drop bytes

Number of the subscriber’s output bytes that were dropped as a result of being processed by a PCEF profile.

extensive

detail

Rule count

Number of PCC rules that were applied to subscriber’s traffic.

extensive

detail

Rule information

For each PCC rule that is assigned to the subscriber, the following information appears:

  • Rule name—Name of PCC rule.

  • In sessions—Number of incoming sessions for the subscriber that are processed by the rule.

  • Out sessions—Number of outgoing sessions for the subscriber that are processed by the rule.

  • Input packets—Number of input packets and bytes for the subscriber that are processed by the rule.

  • Output packets—Number of output packets and bytes for the subscriber that are processed by the rule.

  • Input drop packets—Number of input packets and bytes for the subscriber that are dropped by the rule.

  • Output drop packets—Number of output packets and bytes for the subscriber that are dropped by the rule.

extensive

detail

Total subscribers

Total number of subscribers.

summary

Sample Output

show services pcef subscribers terse

content_copy zoom_out_map
user@host> show services pcef subscribers terse             
Interface Name     IP Address   User Name      Packets       Packet Drops
                                           Input   Output   Input  Output
demux0.3221225518  192.0.2.26   pcefuser   4215521 5155789      0  589900

show services pcef subscribers extensive

content_copy zoom_out_map
user@host> show services pcef subscribers extensive             
Session ID: 60
PFE flow ID: 73
Interface: demux0.3221225518
IP address: 192.0.2.26
Username: pcefuser
PCEF profile: pcef-prof-1
Routing Instance: default
Service VRF: 1
Service set: 0
Input packets: 4229161
Input octet: 1632292118
Output packets: 5171863
Output octet: 2199274163
Input drops: 0
Input drop bytes: 0
Output drops: 591751
Output drop bytes: 882496606
Rule count: 2
  Rule information           :
    Rule name                :          limit-fb
    In sessions              :                13680
    Out sessions             :                    0
    Input packets            :              2629243            244119982 bytes
    Output packets           :              3702363           1117717893 bytes
    Input drop packets       :                    0                    0 bytes
    Output drop packets      :               591751            882496606 bytes
    Rule name                :          default
    In sessions              :                84545
    Out sessions             :                    0
    Input packets            :              1599918           1388172136 bytes
    Output packets           :              1469500           1081556270 bytes
    Input drop packets       :                    0                    0 bytes
    Output drop packets      :                    0                    0 bytes

Sample Output

show services pcef subscribers summary

content_copy zoom_out_map
user@host> show services pcef subscribers summary             
Total subscribers: 1

Release Information

Command introduced in Junos OS Release 17.2.

footer-navigation