show subscribers

Interface associated with the subscriber. The router or the switch displays the subscribers whose interface matches or begins with the specified interface.

The asterisk (*) indicates a continuation of addresses for the same session.

Subscriber IP address or VLAN ID associated with the subscriber in the form tpid.vlan-id

No IP address or VLAN ID is assigned to an L2TP tunnel-switched session. For these subscriber sessions, the value is Tunnel-switched.

Name of subscriber.

Logical system and routing instance associated with the subscriber.

Subscriber client type (DHCP, FWA, GRE, L2TP, PPP, PPPoE, STATIC-INTERFACE, VLAN).

Subscriber IPv4 address.

Subscriber IP netmask.

(MX Series) This field displays 255.255.255.255 by default. For tunneled or terminated PPP subscribers only, this field displays the actual value of Framed-IP-Netmask when the SDB_FRAMED_PROTOCOL attribute in the session database is equal to AUTHD_FRAMED_PROTOCOL_PPP. This occurs in the use case where the L2TP network server (LNS) generates access-internal routes when it receives Framed-IP-Netmask from RADIUS during authorization. When it receives Framed-Pool from RADIUS, the pool mask is ignored and the default /32 mask is used.

IP address of the primary Domain Name System (DNS) server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IP address of the secondary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IPv6 address of the primary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IPv6 address of the secondary DNS server.

This field is displayed with the extensive option only when the address is provided by RADIUS.

IP addresses for the DNS server, displayed in order of configuration.

This field is displayed with the extensive option only when the addresses are derived from the access profile or the global access configuration.

IPv6 addresses for the DNS server, displayed in order of configuration.

This field is displayed with the extensive option only when the addresses are derived from the access profile or the global access configuration.

IP address of the primary Windows Internet Name Service (WINS) server.

IP address of the secondary WINS server.

Subscriber IPv6 address, or multiple addresses.

Subscriber IPv6 prefix. If you are using DHCPv6 prefix delegation, this is the delegated prefix.

IPv6 prefix obtained through Neighbor Discovery Router Advertisement (NDRA).

Subscriber IPv6 address pool. The IPv6 address pool is used to allocate IPv6 prefixes to the DHCPv6 clients.

Length of the network portion of the IPv6 address.

Length of the subscriber IPv6 prefix.

Logical system associated with the subscriber.

Routing instance associated with the subscriber.

(Enhanced subscriber management for the MX Series routers) Name of the enhanced subscriber management logical interface, in the form demux0.nnnn (for example, demux0.3221225472), to which access-internal and framed subscriber routes are mapped.

Subscriber interface (Static or Dynamic)

Internally generated name of the dynamic agent circuit identifier (ACI) or ATM line interface (ALI) interface set used by the subscriber session. The prefix of the name indicates the string received in DHCP or PPPoE control packets on which the interface set is based. For ALI interface sets, the prefix indicates that the value is configured as a trusted option to identify the subscriber line.

The name of the interface set uses one of the following prefixes:

• aci—ACI; for example, aci-1033-demux0.3221225524. This is the only prefix allowed for ACI interface sets.

• ari—ARI or agent remote identifier; for example, ari-1033-demux0.3221225524.

• aci+ari—Both the ACI and the ARI; for example, aci+ari-1033-demux0.3221225524.

• noids—Neither the ACI nor the ARI were received; for example, noids-1033-demux0.3221225524.

Besides dynamic ACI and ALI interface sets, this field can be an interface set based on a substring of the ARI string. This occurs when the dynamic profile includes the predefined variable $junos-pon-id-interface-set-name, and the profile is applied for a passive optical network (PON). The ARI string is inserted by the optical line terminal (OLT). The final substring in the string, unique for the PON, identifies individual subscriber circuits, and is used as the name of the interface set.

Interface type of the ACI interface set: Dynamic. This is the only ACI interface set type currently supported.

Identifier of the dynamic ACI interface set entry in the session database.

Name of the underlying interface for the subscriber session.

Dynamic profile used for the subscriber.

Version number of the dynamic profile used for the subscriber.

MAC address associated with the subscriber.

Current state of the subscriber session (Init, Configured, Active, Terminating, or Tunneled).

Current state of the L2TP session (Tunneled or Tunnel-switched). When the value is Tunnel-switched, two entries are displayed for the subscriber; the first entry is at the L2TP network server (LNS) interface on the L2TP tunnel switch (LTS) and the second entry is at the L2TP access concentrator (LAC) interface on the LTS.

Name of the L2TP tunnel switch profile that initiates tunnel switching.

IP address of the local gateway (LAC).

IP address of the remote peer (LNS).

Forwarding flow identifier.

VLAN ID associated with the subscriber in the form tpid.vlan-id.

Stacked VLAN ID associated with the subscriber in the form tpid.vlan-id.

RADIUS accounting ID associated with the subscriber.

For the dhcp client type, option 82 agent circuit ID associated with the subscriber. The ID is displayed as an ASCII string unless the value has nonprintable characters, in which case it is displayed in the hexadecimal format.

For the vlan-oob client type, the agent circuit ID or access-loop circuit identifier that identifies the subscriber line based on the subscriber-facing DSL access multiplexer (DSLAM) interface on which the subscriber request originates.

For the dhcp client type, option 82 agent remote ID associated with the subscriber. The ID is displayed as an ASCII string unless the value has nonprintable characters, in which case it is displayed in hexadecimal format.

For the vlan-oob client type, the agent remote ID or access-loop remote identifier that identifies the subscriber line based on the network access server (NAS)-facing DSLAM interface on which the subscriber request originates.

Value of the $junos-aggregation-interface-set-name predefined variable. The value is determined based on the following factors:;

• When the hierarchical-access-network-detection option is configured for the access lines and the value of the Access-Aggregation-Circuit-ID-ASCII attribute (TLV 0x0003) received either in the Access Node Control Protocol (ANCP) Port Up message or PPPoE Active Discover Request (PADR) IA tags begins with a # character, then the variable takes the value of the remainder of the string after the # character.

• When the hierarchical-access-network-detection option is not configured, or if the sting does not begin with the # character, then the variable takes the value specified with the predefined-variable-defaults statement.

Actual transmitted subscriber accounting statistics by the session ID or the interface. Service accounting statistics are not included. These statistics do not include overhead bytes or dropped packets; they are the accurate statistics used by RADIUS. The statistics are counted when the actual-transmit-statistics statement is included in the dynamic profile.

IP address used by the DHCP relay agent.

(MX Series routers with MPCs and ATM MICs with SFP only) ATM virtual path identifier (VPI) on the subscriber’s physical interface.

(MX Series routers with MPCs and ATM MICs with SFP only) ATM virtual circuit identifier (VCI) for each VPI configured on the subscriber interface.

Date and time at which the subscriber logged in.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for the DHCPv6 options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for the DHCP options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for the DHCPv6 options.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for the DHCPv6 options.

Actual downstream traffic shaping rate for the subscriber in kilobits per second.

Input service set in access dynamic profile.

Output service set in access dynamic profile.

Policy and charging enforcement function (PCEF) profile in access dynamic profile.

PCC rule or rulebase used in dynamic profile.

Values for variables that are passed into the dynamic profile from RADIUS.

Time at which the first family in this service became active.

Name of the filter applied by the dynamic profile to the IPv4 packets that fail the reverse-path-forwarding (RPF) check.

Name of the filter applied by the dynamic profile to the IPv6 packets that fail the RPF check.

len = number of hex values in the message. The hex values specify the type, length, value (TLV) for the DHCP options, as defined in RFC 2132.

ID number for a subscriber session.

Session ID of the underlying PPPoE interface for the DHCPv6 subscribers on a PPPoE network.

Number of service sessions (that is, a service activated using RADIUS Change of Authorization or CoA) associated with the subscribers.

ID number for a subscriber service session.

Service session profile name.

Number of seconds of access provided to the subscriber before the session is automatically terminated.

Number of seconds for which the subscriber can be idle before the session is automatically terminated.

Name of the pool used for DHCPv6 prefix delegation.

Length of the prefix configured for the IPv6 delegated address pool.

Address assigned by the Framed-Ipv6-Prefix AAA attribute. This field is displayed only when the predefined variable $junos-ipv6-address is used in the dynamic profile.

Interface ID assigned by the Framed-Interface-Id AAA attribute.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv4 input filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the Ascend-Data-Filter (ADF) interface IPv4 output filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the ADF interface IPv6 input filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the ADF interface IPv6 output filter (client or service session). The filter name is followed by the rules (in hexadecimal format) associated with the ADF filter and the decoded rule in Junos OS filter style.

Name assigned to the IPv4 input filter (client or service session).

Name assigned to the IPv4 output filter (client or service session).

Name assigned to the IPv6 input filter (client or service session).

Name assigned to the IPv6 output filter (client or service session).

Name assigned to the logical interface input filter (client or service session).

Name assigned to the logical interface output filter (client or service session).

PPPoE subscriber’s access line type reported by the PPPoE intermediate agent in a PPPoE Active Discovery Initiation (PADI) or PPPoE Active Discovery Offer( PADO) packet in the Vendor-Specific-Tags TLV in subattribute DSL-Type (0x0091). The DSL can be one of the following types: ADSL, ADSL2, ADSL2+, OTHER, SDSL, VDSL, or VDSL2.

Mode type of the PPPoE subscriber’s access line determined by the PPPoE daemon based on the received subattribute DSL-Type (0x0091):

• Cell—When the DSL line type is one of the following: asymmetric digital subscriber line (ADSL), asymmetric digital subscriber line 2 (ADSL2), or asymmetric digital subscriber line 2 plus (ADSL2+).

• Frame—When the DSL line type is one of the following: OTHER, SDSL, VDSL, or VDSL2.

The value is stored in the subscriber session database.

Number of bytes added to or subtracted from the actual downstream cell or frame overhead to account for the technology overhead of the DSL line type. The value is determined by the PPPoE daemon based on the received subattribute DSL-Type (0x0091). The value is stored in the subscriber session database.

Unadjusted upstream data rate for the PPPoE subscriber’s access line reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute Actual-Net-Data-Rate-Upstream (0x0081).

Unadjusted downstream data rate for the PPPoE subscriber’s access line reported by the PPPoE intermediate agent in a PADI or PADO packet in the Vendor-Specific-Tags TLV in subattribute Actual-Net-Data-Rate-Downstream (0x0082).

Adjusted downstream data rate for the PPPoE subscriber’s access line, calculated by the PPPoE daemon and stored in the subscriber session database.

Adjusted upstream data rate for the PPPoE subscriber’s access line, calculated by the PPPoE daemon and stored in the subscriber session database.

Type of access.

Adaptive mode indicates an FN-RG.

Tunnel endpoint identifier (TEID) on the BNG for the GPRS Tunnelling Protocol User Plane (GTP-U) tunnel to the evolved node B (eNodeB). The identifier is allocated by the BNG.

A fully qualified local TEID-C consists of this identifier and the GTPU Tunnel Local IP address value.

Tunnel endpoint identifier on the BNG for the GTP-C control plane tunnel to the Mobility management Entity (MME). The identifier is allocated by the BNG.

A fully qualified local TEID-C consists of this identifier and the GTPC Local IP address value.

Tunnel endpoint identifier on the eNodeB for the GTP-U user plane tunnel to the BNG. The identifier is allocated by the eNodeB.

A fully qualified remote TEID-U consists of this identifier and the GTPU Tunnel Remote IP address value.

Tunnel endpoint identifier on the MME for the GPRS tunneling protocol, control (GTP-C) plane tunnel to the BNG. The identifier is allocated by the MME.

A fully qualified remote TEID-C consists of this identifier and the GTPC Remote IP address value.

IP address of the S1-U interface on the eNodeB for the GPRS tunneling protocol, user plane (GTP-U) tunnel endpoint.

A fully qualified remote TEID-U consists of this address and the Remote TEID-U value.

IP address of the S1-U interface on the BNG for the GTP-U tunnel endpoint.

A fully qualified local TEID-U consists of this address and the Local TEID-U value

IP address of the S11 interface on the MME for the GTP-C tunnel endpoint.

A fully qualified remote TEID-C consists of this address and the Remote TEID-C value.

IP address of the S11 interface on the BNG for the GTP-C tunnel endpoint.

A fully qualified local TEID-C consists of this address and the Local TEID-C value.

Access point name (APN) for the user equipment. The APN corresponds to the connection and service parameters that the subscriber’s mobile device can use for connecting to the carrier’s gateway to the Internet.

Name of the tenant system. You can create multiple tenant system administrators for a tenant system and assign the administrators different permission levels based on your requirements.

Name of the routing instance. When a custom routing instance is created for a tenant system, all the interfaces defined in that tenant system are added to that routing instance.

Configured name for a specific variation of a base dynamic profile. The presence of this name presence indicates that the profile configuration is different from that of the base profile. The value is conveyed to the RADIUS server during authentication in the Client-Profile-Name VSA (26–4874–174).