Subscriber Management Operational Commands

Subscriber Management operational commands allow you to monitor and verify subscriber sessions established through access protocols such as PPPoE, IPoE, and L2TP. These commands provide information about subscriber states, subscriber session, interface bindings, authentication status and so on.

The following diagram provides a hierarchical view of the subscriber management operational commands used to monitor subscriber sessions across all access types (PPPoE, IPoE, and L2TP).

ngaccess cli2 subscriberd op
Figure 1. Subscriber Management Operational Commands

Subscriber Show Commands

The show commands provide information about subscribers that include subscriber states, counts, subscriber history, subscriber pools, subscriber redundancy detailed session attributes, and termination codes. You can use various filters to narrow down to the specific details.

Syntax:

show subscriber
show subscriber count
show subscriber detail
show subscriber filter <option>
show subscriber history
show subscriber pool
show subscriber redundancy
show subscriber vlan-profile

The following table provides command options and descriptions.

Attribute Description

<cr>

Displays a summary of all active subscribers.

count

Displays aggregated total number of subscribers.

detail

Displays detailed information for all subscribers.

filter

Displays subscribers that match specified filter criteria.

history

Displays information about terminated subscribers, session details and termination reasons.

pool

Displays local address pool information, including allocation status.

redundancy

Displays subscriber redundancy details.

<subscriber-id>

Displays information for a specific subscriber.

vlan-profile

Displays configured VLAN profiles associated with subscribers.

The following example displays the subscribers and their details.

supervisor@rtbrick: op> show subscriber
Subscriber-Id           Interface         VLAN       Type    State
72339069014638594       ifp-0/1/5         201:201    PPPoE   ESTABLISHED
72339069014638595       ifp-0/1/5         201:202    PPPoE   ESTABLISHED
72339069014638596       ifp-0/1/5         201:203    PPPoE   ESTABLISHED
72339069014638597       ifp-0/1/5         201:204    PPPoE   ESTABLISHED
72339069014638598       ifp-0/1/5         201:205    PPPoE   ESTABLISHED

Subscriber Details for a Specific Subscriber

These show commands provide information about status of subscribers across various access technologies. You can view the information about state transitions, from initial session setup through active and termination phases. The commands allow you to verify the status of the subscriber sessions. The state ESTABLISHED means that the session is fully operational.

The following commands are applicable to all types of subscribers that include PPPoE, L2TP, and IPoE.

Syntax:

show subscriber <subscriber-id>
show subscriber <subscriber-id> access-line
show subscriber <subscriber-id> accounting
show subscriber <subscriber-id> accounting origin
show subscriber <subscriber-id> acl
show subscriber <subscriber-id> acl <acl_name>
show subscriber <subscriber-id> acl <acl_name> type [l3v4 | l3v6]
show subscriber <subscriber-id> detail
show subscriber <subscriber-id> igmp
show subscriber <subscriber-id> qos

The following table provides command options and descriptions.

Attribute Description

<cr>

Displays a summary of the specified subscriber, including session and state information.

access-line

Displays access line details such as interface, VLAN, and physical connectivity information associated with the subscriber.

accounting

Displays accounting-related information, including usage counters and session statistics for the subscriber.

acl

Displays the details related to ACL filters applied to the subscriber.

detail

Displays detailed subscriber information, including session parameters and state.

qos

Displays QoS configuration and statistics applied to the subscriber.

The various subscriber states are explained in the table and diagram below.

State Description

INIT

Initial subscriber state.

AUTHENTICATING

Authenticate the subscriber using the configured method.

ADDRESS ALLOCATION

Allocate (RADIUS or pool) and validate (DAD) addresses.

TUNNEL SETUP

Setup tunnel resources (L2TP or L2X).

IFL SETUP

Create subscriber IFL with corresponding QoS resources.

FULL

Wait for subscriber to be in forwarding state. Inform underlying protocols (PPPoED or IPoED) to continue with session setup.

ACCOUNTING

Start subscriber accounting and wait for response.

ESTABLISHED

The subscriber becomes ESTABLISHED after response to RADIUS Accounting-Request-Start if RADIUS accounting is enabled otherwise immediately after FULL.

TERMINATING

The subscriber remains in this state until all resources are freed and accounting stopped. This means that subscriber remain in this state until response to RADIUS Accounting-Request-Stop if RADIUS accounting is enabled.

The following diagram illustrates the subscriber session life cycle. It shows the sequence of states from initialization through authentication, resource allocation, and finally to an established or terminating state.

ngaccess subscriberd fsm
Figure 2. Subscriber States

Example for the list of subscribers and their details.

supervisor@rtbrick: op> show subscriber
Subscriber-Id           Interface         VLAN       Type    State
72339069014638594       ifp-0/1/5         201:201    PPPoE   ESTABLISHED
72339069014638595       ifp-0/1/5         201:202    PPPoE   ESTABLISHED
72339069014638596       ifp-0/1/5         201:203    PPPoE   ESTABLISHED
72339069014638597       ifp-0/1/5         201:204    PPPoE   ESTABLISHED
72339069014638598       ifp-0/1/5         201:205    PPPoE   ESTABLISHED

Example for the specified subscriber details.

supervisor@rtbrick: op> show subscriber 72339069014638594
Subscriber-Id: 72339069014638594
    Type: PPPoE
    State: ESTABLISHED
    Created: Tue Jul 14 18:08:22 GMT +0000 2026
    Interface: ifp-0/1/5
    Outer VLAN: 201 (802.1q)
    Inner VLAN: 201
    Client MAC: 02:00:00:00:00:01
    Server MAC: 5c:07:58:79:0f:06
    IFL: ppp-0/1/5/72339069014638594
    Username: 1@pppoe
    Agent-Remote-Id: DEU.RTBRICK.1
    Agent-Circuit-Id: 0.0.0.0/0.0.0.0 eth 0:1
    Access-Profile: PPPoE_ACCESS_PROFILE
    AAA-Profile: PPPoE_AAA

Subscriber Count Show Commands

You can view the total number of of PPPoE, L2TP, IPoE, and L2BSA subscribers in the different states such as 'Setup', 'Established', and 'Terminating' using the subscriber count command. This command provides information per interface and a total summary based on subscriber type.

Syntax:

show subscriber count brief
show subscriber count interface <interface>

The following table provides command options and descriptions.

Attribute Description

count brief

Displays a summary count of subscribers.

count interface <interface>

Displays subscriber count for the specified interface.

Examples:

The following example for subscriber count output displays the total number of subscribers on the system and categorizes them by state (Setup, Established, Terminating, and Standby) and by access type such as PPPoE, L2TP, and IPoE.

supervisor@rtbrick: op> show subscriber count
                       Total        Setup        Established  Terminating  Standby
Summary                5            0            5            0            0
  PPPoE                5            0            5            0            0
  L2TP                 0            0            0            0            0
  IPoE                 0            0            0            0            0
  L2BSA                0            0            0            0            0
  Test                 0            0            0            0            0
ifp-0/1/5              5            0            5            0            0
  PPPoE                5            0            5            0            0
  L2TP                 0            0            0            0            0
  IPoE                 0            0            0            0            0
  L2BSA                0            0            0            0            0
  Test                 0            0            0            0            0

The command show subscriber count brief provides a filter to the existing subscriber count command, excluding lines with zero counts.

supervisor@rtbrick: op> show subscriber count brief
                       Total        Setup        Established  Terminating  Standby
Summary                5            0            5            0            0
  PPPoE                5            0            5            0            0
ifp-0/1/5              5            0            5            0            0
  PPPoE                5            0            5            0            0

Example for subscriber count for specified interface. The output displays subscriber statistics specifically for the selected interface, including total sessions and their states.

supervisor@rtbrick.net: op> show subscriber count interface ifp-0/1/24
                       Total        Setup        Established  Terminating  Standby
ifp-0/1/24             5621         939          0            4682         0
  PPPoE                614          434          0            180          0
  L2TP                 179          0            0            179          0
  IPoE                 4828         505          0            4323         0
  L2BSA                0            0            0            0            0
  Test                 0            0            0            0            0

Subscriber Filter Show Commands

The show subscriber filter commands provide subscriber information using specific criteria such as interface, VLAN, MAC address, username, and session attributes. It allows you to quickly identify and analyze subscriber sessions.

Syntax:

show subscriber filter agent-circuit-id-regex <agent-circuit-id-regex>
show subscriber filter agent-remote-id-regex <agent-remote-id-regex>
show subscriber filter count
show subscriber filter detail
show subscriber filter inner-vlan [1 - 4094]
show subscriber filter interface <interface>
show subscriber filter interface-regex <interface-regex>
show subscriber filter mac <mac>
show subscriber filter mac-regex <mac-regex>
show subscriber filter outer-vlan [1 - 4094]
show subscriber filter redundancy-session-id <rd-session-id>
show subscriber filter state [INIT | AUTHENTICATING | ADDRESS_ALLOCATION | TUNNEL_SETUP | IFL_SETUP | FULL | ACCOUNTING | ESTABLISHED | TERMINATING | STANDBY | ESTABLISHED_NO_FWD | STANDBY_FWD]
show subscriber filter type [PPPoE | L2TP | IPoE | L2BSA]
show subscriber filter username-regex <username-regex>

The following table provides the command options and descriptions.

Attribute Description

<agent-circuit-id-regex>

Filters subscribers based on a regular expression match of the agent circuit ID.

<agent-remote-id-regex>

Filters subscribers based on a regular expression match of the agent remote ID.

count

Displays the total number of subscribers matching the applied filter criteria.

detail

Displays detailed information for subscribers matching the applied filter criteria.

inner-vlan

Filters subscribers based on the specified inner VLAN ID. Range 1 - 4094.

<interface>

Filters subscribers associated with the specified interface.

<interface-regex>

Filters subscribers whose interface names match the specified regular expression.

<mac>

Filters subscribers based on the specified MAC address.

<mac-regex>

Filters subscribers whose MAC addresses match the specified regular expression.

outer-vlan

Filters subscribers based on the specified outer VLAN ID. Range [1 - 4094].

<rd-session-id>

Filters subscribers based on the specified redundancy session ID.

state

Filters subscribers based on their current operational state. Supported options include INIT, AUTHENTICATING, ADDRESS_ALLOCATION, TUNNEL_SETUP, IFL_SETUP, FULL, ACCOUNTING, ESTABLISHED, TERMINATING, STANDBY, ESTABLISHED_NO_FWD, and STANDBY_FWD.

type

Filters subscribers based on the access type. Supported values are PPPoE, L2TP, IPoE, and L2BSA.

<username-regex>

Filters subscribers whose usernames match the specified regular expression.

The following example displays a filtered list of subscribers that are in the ESTABLISHED state, including their interface, VLAN, and session type details.

supervisor@rtbrick.net: op> show subscriber filter state ESTABLISHED
Subscriber-Id           Interface         VLAN       Type    State
72339069014638594       ifp-0/0/0      1000:100   PPPoE   ESTABLISHED
72339069014638595       ifp-0/0/0      1001:100   PPPoE   ESTABLISHED
72339069014638596       ifp-0/0/0      100:0      PPPoE   ESTABLISHED
72339069014638597       ifp-0/0/0      1100:0     PPPoE   ESTABLISHED
72339069014638598       ifp-0/0/1      1000:100   PPPoE   ESTABLISHED
72339069014638599       ifp-0/0/1      1001:100   PPPoE   ESTABLISHED
72339069014638600       ifp-0/0/1      100:0      PPPoE   ESTABLISHED
72339069014638601       ifp-0/0/1      1100:0     PPPoE   ESTABLISHED
216454257090494465      ifp-0/0/0      1001:500   IPoE    ESTABLISHED
216454257090494466      ifp-0/0/0      500:0      IPoE    ESTABLISHED
216454257090494467      ifp-0/0/0      1500:0     IPoE    ESTABLISHED
216454257090494468      ifp-0/0/1      1000:500   IPoE    ESTABLISHED
216454257090494469      ifp-0/0/1      1001:500   IPoE    ESTABLISHED
216454257090494470      ifp-0/0/1      500:0      IPoE    ESTABLISHED
216454257090494471      ifp-0/0/1      1500:0     IPoE    ESTABLISHED
216454257090494472      ifp-0/0/0      1000:500   IPoE    ESTABLISHED

Subscriber History Show Commands

The show subscriber history commands provides details about past subscriber sessions, including the events, previously established states and so on. It allows you to query path records based on options such as interface, VLAN, MAC address, username, and so on.

Syntax:

show subscriber history
show subscriber history <subscriber-id>
show subscriber history filter agent-circuit-id-regex <agent-circuit-id-regex>
show subscriber history filter agent-remote-id-regex <agent-remote-id-regex>
show subscriber history filter count
show subscriber history filter inner-vlan <1-4094>
show subscriber history filter interface <interface>
show subscriber history filter interface-regex <interface-regex>
show subscriber history filter mac <mac>
show subscriber history filter mac-regex <mac-regex>
show subscriber history filter outer-vlan <1-4094>
show subscriber history filter type <PPPoE | L2TP | IPoE | Test | L2BSA>
show subscriber history filter username-regex <username-regex>

The following table provides command options and descriptions.

Attribute Description

history

Displays historical information for all subscriber sessions, including past states and lifecycle events.

history <subscriber-id>

Displays historical details for a specific subscriber.

<agent-circuit-id-regex>

Filters subscriber history based on a regular expression match of the agent circuit ID.

<agent-remote-id-regex>

Filters subscriber history based on a regular expression match of the agent remote ID.

count

Displays the total number of historical subscriber entries for the applied filter criteria.

inner-vlan

Filters subscriber history based on the specified inner VLAN ID. Range 1 - 4094.

<interface>

Filters subscriber history related to the specified interface.

<interface-regex>

Filters subscriber history whose interface names match the specified regular expression.

<mac>

Filters subscriber history based on the specified MAC address.

<mac-regex>

Filters subscriber history whose MAC addresses match the specified regular expression.

outer-vlan

Filters subscriber history based on the specified outer VLAN ID. Range 1 - 4094.

type

Filters subscriber history based on the access type. Supported values are PPPoE, L2TP, IPoE, and L2BSA.

<username-regex>

Filters subscriber history whose usernames match the specified regular expression.

The following command shows termination codes that provides the reasons why subscribers are terminated for the last 24 hours and up to 4000 subscribers.

supervisor@rtbrick: op> show l2tp session history
Subscriber-Id           Local TID  Local SID  Terminate Code
72339069014638612            2911      27258  L2TP Tunnel Down
72339069014638610            9844      12077  L2TP Tunnel Down
72339069014638609            9844      29446  L2TP Tunnel Down
72339069014638611            9844      39942  L2TP Tunnel Down
72339069014638613           48786      64050  L2TP Tunnel Down
72339069014638614            2911      49382  Clear Session Force
72339069014638615            9844       9621  Clear Session Force
72339069014638616            9844      11781  Clear Session Force
72339069014638617            9844      20058  Clear Session Force
72339069014638618           48786      57267  Clear Session Force

Subscriber Pool Show Commands

The show subscriber pool commands provide information about IPv4 and IPv6 address pool utilization and allocation details. It helps you to monitor pool usage, address assignment, and analyze address allocation statistics.

Syntax:

show subscriber pool ipv4 <pool>
show subscriber pool ipv4 <pool> allocation
show subscriber pool ipv6 <pool>
show subscriber pool ipv6 <pool> allocation
show subscriber pool summary

The following table provides command options and descriptions.

Attribute Description

ipv4 <pool>

Displays information about the specified IPv4 address pool.

ipv4 <pool> allocation

Displays allocation information for the specified IPv4 pool.

ipv6 <pool>

Displays information about the specified IPv6 address pool.

ipv6 <pool> allocation

Displays allocation information for the specified IPv6 pool.

summary

Displays a summary of all IPv4 and IPv6 subscriber pools.

The usage of local address pools can be monitored using the show subscriber pool commands as shown in the following example.

Rather than using recommended IP addresses for technical documents, the document shows actual IP pool ranges. 
supervisor@rtbrick: op> show subscriber pool summary
Pool Name                        AFI  Usage           Range
IPv4_ADDRESS_POOL                IPv4 0/10            198.51.100.101 - 198.51.100.110
IPv4_ADDRESS_POOL_VRF            IPv4 0/10            198.51.100.111 - 198.51.100.120
IPv6_ADDRESS_POOL                IPv6 0/16            2001:db8:101:101::/64 - 2001:db8:101:110::/64
IPv6_PD_ADDRESS_POOL             IPv6 0/3841          2001:db8:201::/56 - 2001:db8:210::/56

The following example output displays the IPv4 address pool, including its address range, allocation usage, and the next linked pool for overflow.

supervisor@rtbrick: op> show subscriber pool ipv4 IPv4_ADDRESS_POOL
Pool Name: IPv4_ADDRESS_POOL
    AFI: IPv4
    Usage: 0/10
    Range: 198.51.100.101 - 198.51.100.110

The following example output displays the IPv4 address pool, showing its address range, current allocation usage, and the next pool in the chaining sequence.

supervisor@rtbrick: op> show subscriber pool ipv4 IPv4_ADDRESS_POOL_VRF
Pool Name: IPv4_ADDRESS_POOL_VRF
    AFI: IPv4
    Usage: 0/10
    Range: 198.51.100.111 - 198.51.100.120

The following example output lists detailed allocation entries for pool-B, including subscriber IDs, allocation timestamps, and the assigned IP addresses.

supervisor@rtbrick: op> show subscriber pool ipv4 IPv4_ADDRESS_POOL allocation
Subscriber-Id          Timestamp                            Address/Prefix
72339069014638606      Tue Jul 14 18:09:03 GMT +0000 2026   198.51.100.101
72339069014638605      Tue Jul 14 18:09:03 GMT +0000 2026   198.51.100.102
72339069014638604      Tue Jul 14 18:09:03 GMT +0000 2026   198.51.100.103
72339069014638608      Tue Jul 14 18:09:03 GMT +0000 2026   198.51.100.104
72339069014638607      Tue Jul 14 18:09:03 GMT +0000 2026   198.51.100.105

The following example output shows information for an IPv6 subscriber pool.

supervisor@rtbrick.net: op> show subscriber pool ipv6 ipoe_v6_pool3
Pool Name: ipoe_v6_pool3
    AFI: IPv6
    Usage: 0/40
    Range: fc65:1:1:b::/64 - fc65:1:1:32::/64

Subscriber Redundancy Show Commands

The show subscriber redundancy commands provide information about subscriber distribution across redundancy peers, assignment, failover behavior, and event history. These commands enable you to monitor redundancy states.

Syntax:

show subscriber redundancy distribution filter assignment [local | remote]
show subscriber redundancy distribution filter count
show subscriber redundancy distribution filter interface <interface>
show subscriber redundancy distribution filter lag <lag>
show subscriber redundancy distribution filter redundancy-session-id <rd-session-id>
show subscriber redundancy distribution filter subscriber-id <subscriber-id>
show subscriber redundancy distribution history redundancy-session-id <rd-session-id>
show subscriber redundancy distribution history subscriber-id <subscriber-id>
show subscriber redundancy distribution summary
show subscriber redundancy events redundancy-session-id <redundancy-session-id>
show subscriber redundancy events subscriber-id <subscriber-id>

Attribute Description

distribution

Displays subscriber distribution across redundancy peers.

[local | remote]

Filters distribution output based on whether the subscriber is locally or remotely assigned.

count

Displays the total number of subscribers matching the applied filter criteria.

<interface>

Filters subscriber distribution based on the specified interface.

<lag>

Filters subscriber distribution based on the specified LAG interface.

<rd-session-id>

Filters distribution entries based on the redundancy session ID.

<subscriber-id>

Filters distribution entries based on the subscriber ID.

history

Displays distribution history of subscribers across redundancy peers.

<rd-session-id>

Displays distribution details for the specified redundancy session ID.

<subscriber-id>

Displays distribution details for the specified subscriber ID.

summary

Displays a summary of subscriber distribution across redundancy peers.

events

Displays redundancy-related information such as failover, switchover, and so on.

<redundancy-session-id>

Displays subscriber redundancy events for the specified redundancy session ID.

<subscriber-id>

Displays redundancy events for the specified subscriber ID.

IPoE Show Commands

The IPoE show commands provide details of IPoE subscriber sessions, redundancy, subscriber state, count, and so on. The following diagram depicts a structured or hierarchical view of the operational commands available for IPoE subscribers.

ngaccess cli2 ipoed op
Figure 3. IPoE Operational Commands

IPoE Subscriber Show Commands

The IPoE subscriber show commands provide summary and detailed information about subscriber sessions, including total counts, per-subscriber details, errors, and traffic statistics.

show ipoe subscriber
show ipoe subscriber count
show ipoe subscriber detail
show ipoe subscriber errors
show ipoe subscriber statistics

Option Description

subscriber

Displays a summary of all IPoE subscribers.

count

Displays the total number of IPoE subscribers.

detail

Displays detailed information for all IPoE subscribers.

errors

Displays error statistics related to IPoE subscribers.

subscriber statistics

Displays aggregated statistics for all IPoE subscribers.

IPoE Subscriber Details for Specific Subscriber

The IPoE subscriber show commands provide summary and detailed information traffic statistics details for a specified subscriber.

Syntax

show ipoe subscriber <subscriber-id>
show ipoe subscriber <subscriber-id> detail
show ipoe subscriber <subscriber-id> statistics

The following table provides command options and descriptions.

Option Description

subscriber <subscriber-id>

Displays information for a specific IPoE subscriber.

<subscriber-id> detail

Displays detailed information for a specific IPoE subscriber.

<subscriber-id> statistics

Displays statistics for a specific IPoE subscriber.

The following output displays detailed information for a specific IPoE subscriber, including interface attributes, DHCPv4 and DHCPv6 lease details, gateway information, and subscriber state.

supervisor@rtbrick: op> show ipoe subscriber 216454257090494465 detail
Subscriber-Id: 216454257090494465
    State: ESTABLISHED
    Uptime: Tue Jul 14 18:10:46 GMT +0000 2026 (0:00:04.535701)
    Interface: ifp-0/1/5
    Outer VLAN: 201 (802.1q)
    Inner VLAN: 201
    Client MAC: 02:00:00:00:00:01
    Gateway Interface: lo-0/0/1/0
    Gateway Instance: default
    Gateway MAC: 5c:07:58:79:0f:06
    Gateway IPv4: 198.51.100.11/255.255.255.255
    Agent-Remote-Id: DEU.RTBRICK.1
    Agent-Circuit-Id: 0.0.0.0/0.0.0.0 eth 0:1
    Access-Profile: IPoE_ACCESS_PROFILE
    AAA-Profile: IPoE_AAA
    DHCPv4:
        Mode: server
        Server Identifier: 198.51.100.11
        State: Bound
        Address: 198.51.100.105/255.255.255.255
        Primary DNS: 203.0.113.201
        Secondary DNS: 203.0.113.202
        Lease Created: Tue Jul 14 18:10:46 GMT +0000 2026 (0:00:04.552294)
        Lease Time: 60 seconds
        Lease Expire: 56 seconds
    DHCPv6:
        Mode: server
        State: Bound
        Client DUID: 00030001020000000001
        Server DUID: 0003001b5e0758fffe790f06
        IA_NA:
            Address: 2001:db8:101:105::
            IAID: 16777216
            Active: True
        IA_PD:
            Prefix: 2001:db8:201:400::/56
            IAID: 33554432
            Active: True
        Primary DNS: 2001:db8:201:1::201
        Secondary DNS: 2001:db8:202:1::202
        Lease Created: Tue Jul 14 18:10:46 GMT +0000 2026 (0:00:04.553767)
        Lease Time (Lifetime): 60 seconds
        Lease Expire: 56 seconds
        Preferred Lifetime: 60 seconds

The following output displays protocol statistics for an individual IPoE subscriber session, including DHCP, DHCPv6, and ICMPv6 message counters.

supervisor@rtbrick.net: op> show ipoe subscriber 216454257090494515 statistics
IPoE subscriber 216454257090494515 session statistics
DHCP packets received                       : 2
DHCP discover packets received              : 1
DHCP request packets received               : 1
DHCP packets sent                           : 2
DHCP offer packets sent                     : 1
DHCP ack packets sent                       : 1
DHCPv6 packets received                     : 1
DHCPv6 solicit packets received             : 1
DHCPv6 relay-forward packets received       : 1
DHCPv6 packets sent                         : 1
DHCPv6 reply packets sent                   : 1
DHCPv6 relay-reply packets sent             : 1
ICMPv6 router solicitation received         : 1
ICMPv6 neighbor solicitation received       : 1
ICMPv6 solicited router solicitation sent   : 1
ICMPv6 neighbor advertisement sent          : 1

The following output provides statistics for all IPoE subscribers, including DHCP, DHCPv6, and ICMPv6.

supervisor@rtbrick.net: op> show ipoe subscriber statistics
IPoE global subscriber statistics
DHCP packets received                       : 170
DHCP discover packets received              : 60
DHCP request packets received               : 60
DHCP release packets received               : 50
DHCP packets sent                           : 120
DHCP offer packets sent                     : 60
DHCP ack packets sent                       : 60
DHCPv6 packets received                     : 110
DHCPv6 solicit packets received             : 60
DHCPv6 release packets received             : 50
DHCPv6 relay-forward packets received       : 110
DHCPv6 packets sent                         : 110
DHCPv6 reply packets sent                   : 110
DHCPv6 relay-reply packets sent             : 110
ICMPv6 router solicitation received         : 60
ICMPv6 neighbor solicitation received       : 60
ICMPv6 solicited router solicitation sent   : 60
ICMPv6 neighbor advertisement sent          : 60

The following output a summary of all IPoE subscribers, including interface, VLAN, MAC, subscriber stat details, and DHCPv4/DHCPv6 status.

supervisor@rtbrick: op> show ipoe subscriber detail
Subscriber-Id           Interface         VLAN       MAC                State           DHCPv4      DHCPv6
216454257090494467      ifp-0/1/5         201:203    02:00:00:00:00:03  ESTABLISHED     Bound       Bound
216454257090494469      ifp-0/1/5         201:205    02:00:00:00:00:05  ESTABLISHED     Bound       Bound
216454257090494468      ifp-0/1/5         201:204    02:00:00:00:00:04  ESTABLISHED     Bound       Bound
216454257090494466      ifp-0/1/5         201:202    02:00:00:00:00:02  ESTABLISHED     Bound       Bound
216454257090494465      ifp-0/1/5         201:201    02:00:00:00:00:01  ESTABLISHED     Bound       Bound

The following output displays error and exception counters related to IPoE subscriber processing.

supervisor@rtbrick.net: op> show ipoe subscriber errors
No config found             : 0
No IFL found                : 0
No gateway address found    : 0
No subscriber found         : 10
Subscriber limit reached    : 0
Interface get failure       : 0
Interface down              : 0
Internal error              : 0
Subscriber not up           : 200
No chassis-id config found  : 0
Invalid redundancy state    : 0
VLAN encapsulation mismatch : 0
Relay server not configured : 0
Dropped min elapsed         : 0

IPoE Subscriber Filter Show Commands

You can view IPoE subscriber details using criteria such as interface, VLAN, MAC address, session state, and redundancy identifiers.

show ipoe subscriber filter count
show ipoe subscriber filter detail
show ipoe subscriber filter inner-vlan [1 - 4094]
show ipoe subscriber filter interface <interface>
show ipoe subscriber filter interface-regex <interface-regex>
show ipoe subscriber filter mac <mac>
show ipoe subscriber filter mac-regex <mac-regex>
show ipoe subscriber filter outer-vlan [1 - 4094]
show ipoe subscriber filter redundancy-session-id <rd-session-id>
show ipoe subscriber filter state [INIT | WAIT | ESTABLISHED | TERMINATING | TERMINATED | STANDBY]

The following table provides command options and descriptions.

Option Description

count

Displays the number of subscribers matching the applied filter criteria.

detail

Displays detailed information for subscribers matching the applied filter criteria.

inner-vlan

Displays subscribers matching the specified inner VLAN ID. VLAN ID range: 1 - 4094.

<interface>

Displays subscribers associated with the specified interface.

<interface-regex>

Displays subscribers matching the specified interface regular expression.

<mac>

Displays subscribers matching the specified MAC address.

<mac-regex>

Displays subscribers matching the specified MAC address pattern.

outer-vlan

Displays subscribers matching the specified outer VLAN ID. VLAN ID range: 1 - 4094.

<rd-session-id>

Displays subscribers matching the specified redundancy session ID.

state

Displays information a for the specified state of the subscriber. Supported values include INIT, WAIT, ESTABLISHED, TERMINATING, TERMINATED, and STANDBY`

statistics

Displays aggregated statistics for all IPoE subscribers.

<subscriber-id>

Displays information for a specific IPoE subscriber.

<subscriber-id> detail

Displays detailed information for a specific IPoE subscriber.

<subscriber-id> statistics

Displays statistics for a specific IPoE subscriber.

The following example shows the detailed view for IPoE subscribers.

supervisor@rtbrick: op> show ipoe subscriber detail
Subscriber-Id           Interface         VLAN       MAC                State           DHCPv4      DHCPv6
216454257090494467      ifp-0/1/5         201:203    02:00:00:00:00:03  ESTABLISHED     Bound       Bound
216454257090494469      ifp-0/1/5         201:205    02:00:00:00:00:05  ESTABLISHED     Bound       Bound
216454257090494468      ifp-0/1/5         201:204    02:00:00:00:00:04  ESTABLISHED     Bound       Bound
216454257090494466      ifp-0/1/5         201:202    02:00:00:00:00:02  ESTABLISHED     Bound       Bound
216454257090494465      ifp-0/1/5         201:201    02:00:00:00:00:01  ESTABLISHED     Bound       Bound

The following example shows the detailed per subscriber information.

supervisor@rtbrick: op> show ipoe subscriber 216454257090494465 detail
Subscriber-Id: 216454257090494465
    State: ESTABLISHED
    Uptime: Tue Jul 14 18:10:46 GMT +0000 2026 (0:00:04.535701)
    Interface: ifp-0/1/5
    Outer VLAN: 201 (802.1q)
    Inner VLAN: 201
    Client MAC: 02:00:00:00:00:01
    Gateway Interface: lo-0/0/1/0
    Gateway Instance: default
    Gateway MAC: 5c:07:58:79:0f:06
    Gateway IPv4: 198.51.100.11/255.255.255.255
    Agent-Remote-Id: DEU.RTBRICK.1
    Agent-Circuit-Id: 0.0.0.0/0.0.0.0 eth 0:1
    Access-Profile: IPoE_ACCESS_PROFILE
    AAA-Profile: IPoE_AAA
    DHCPv4:
        Mode: server
        Server Identifier: 198.51.100.11
        State: Bound
        Address: 198.51.100.105/255.255.255.255
        Primary DNS: 203.0.113.201
        Secondary DNS: 203.0.113.202
        Lease Created: Tue Jul 14 18:10:46 GMT +0000 2026 (0:00:04.552294)
        Lease Time: 60 seconds
        Lease Expire: 56 seconds
    DHCPv6:
        Mode: server
        State: Bound
        Client DUID: 00030001020000000001
        Server DUID: 0003001b5e0758fffe790f06
        IA_NA:
            Address: 2001:db8:101:105::
            IAID: 16777216
            Active: True
        IA_PD:
            Prefix: 2001:db8:201:400::/56
            IAID: 33554432
            Active: True
        Primary DNS: 2001:db8:201:1::201
        Secondary DNS: 2001:db8:202:1::202
        Lease Created: Tue Jul 14 18:10:46 GMT +0000 2026 (0:00:04.553767)
        Lease Time (Lifetime): 60 seconds
        Lease Expire: 56 seconds
        Preferred Lifetime: 60 seconds

PPPoE Show Commands

This section describes the operational commands for PPPoE sessions. You can view PPPoE session states, session establishment details, and detailed protocol-level information such as PPP negotiation, authentication, and so on.

This diagram provides the hierarchical view of the operational commands specific to PPPoE sessions.

ngaccess cli2 pppoed op
Figure 4. PPPoE Operational Commands

PPPoE Session Show Commands

These show commands provide information about PPPoE discovery, session state, protection mechanisms, and MTU profiles. You can view session details, filtering of sessions based on various parameters for all PPPoE sessions, including statistics and error conditions.

PPPoE Session Details

The show commands display summary information and total count of active PPPoE sessions.

Syntax:

show pppoe session
show pppoe session count

The following table provides command options and descriptions.

Attribute Description

<cr>

Without any option, it displays a summary of all PPPoE sessions.

count

Displays the total number of PPPoE sessions.

The following output provides a summary of all PPPoE subscriber sessions, showing interface details, VLAN information, client MAC addresses, and the current session state.

supervisor@rtbrick: op> show pppoe session
Subscriber-Id           Interface         VLAN       MAC                State
72339069014638599       ifp-0/1/5         201:201    02:00:00:00:00:01  ESTABLISHED
72339069014638600       ifp-0/1/5         201:202    02:00:00:00:00:02  ESTABLISHED
72339069014638601       ifp-0/1/5         201:203    02:00:00:00:00:03  ESTABLISHED
72339069014638602       ifp-0/1/5         201:204    02:00:00:00:00:04  ESTABLISHED
72339069014638603       ifp-0/1/5         201:205    02:00:00:00:00:05  ESTABLISHED

The following output provides a summary of all PPPoE subscriber sessions for specified subscriber ID.

supervisor@rtbrick: op> show pppoe session 72339069014638599
Subscriber-Id: 72339069014638599
    State: ESTABLISHED
    Uptime: Tue Jul 14 18:08:30 GMT +0000 2026 (0:00:12.633818)
    Interface: ifp-0/1/5
    Outer VLAN: 201 (802.1q)
    Inner VLAN: 201
    Client MAC: 02:00:00:00:00:01
    Server MAC: 5c:07:58:79:0f:06
    Session-Id: 6
    Access-Profile: PPPoE_ACCESS_PROFILE
    AAA-Profile: PPPoE_AAA

The following output displays detailed information for a specific PPPoE subscriber session, including VLANs, authentication details, negotiated PPP parameters, and access profiles.

supervisor@rtbrick: op> show pppoe session 72339069014638599 detail
Subscriber-Id: 72339069014638599
    State: ESTABLISHED
    Uptime: Tue Jul 14 18:08:30 GMT +0000 2026 (0:00:13.498657)
    Interface: ifp-0/1/5
    Outer VLAN: 201 (802.1q)
    Inner VLAN: 201
    Client MAC: 02:00:00:00:00:01
    Server MAC: 5c:07:58:79:0f:06
    Session-Id: 6
    Agent-Remote-Id: DEU.RTBRICK.1
    Agent-Circuit-Id: 0.0.0.0/0.0.0.0 eth 0:1
    Access-Profile: PPPoE_ACCESS_PROFILE
    AAA-Profile: PPPoE_AAA
    PPP LCP:
        State: OPENED
        Negotiated Protocols: PAP, IPCP, IP6CP
        Negotiated Parameters: MRU, AUTH, MAGIC
        Magic Number: 2742098270 Peer: 1
        MRU: 1492 Peer: 1492
        MTU: 1492 Profile: __default_pppoe__
        Echo Interval: 10 seconds
    PAP Authentication:
        State: COMPLETED
        Username: 1@pppoe
        Reply Message: User on CBNG1
    PPP IPCP:
        State: OPENED
        Instance: default
        Peer IP Address: 198.51.100.106
        Local IP Address: 198.51.100.11
        Primary DNS: 203.0.113.201 Assigned: True
        Secondary DNS: 203.0.113.202 Assigned: True
    PPP IP6CP:
        State: OPENED
        Instance: default
        Interface Identifier: 95f6:7fd7:f30f:6ec0
        Peer Interface Identifier: 0200:00ff:fe00:0001
    IPv6:
        RA Interval: 30 seconds
        RA Prefix: 2001:db8:101:106::/64
        Delegated Prefix (DHCPv6): 2001:db8:201:500::/56 Assigned: True
        Primary DNS: 2001:db8:201:1::201
        Secondary DNS: 2001:db8:202:1::202
    Control Traffic Statistics:
        Ingress: 11 packets 819 bytes
        Egress: 11 packets 817 bytes

The following output displays protocol-level statistics for a PPPoE subscriber session, including PPP negotiation events and authentication message counters.

supervisor@rtbrick: op> show pppoe session statistics
PPPoE global session statistics
LCP configure-request received                        : 10
LCP configure-ack received                            : 10
LCP terminate-request received                        : 5
LCP terminate-ack received                            : 5
LCP echo-reply received                               : 5
LCP configure-request sent                            : 10
LCP configure-ack sent                                : 10
LCP terminate-request sent                            : 5
LCP terminate-ack sent                                : 5
LCP echo-request sent                                 : 5
LCP MRU negotiation successful                        : 10
LCP magic number negotiation successful               : 10
IPCP configure-request received                       : 20
IPCP configure-ack received                           : 10
IPCP configure-request sent                           : 10
IPCP configure-ack sent                               : 10
IPCP configure-nak sent                               : 10
IP6CP configure-request received                      : 10
IP6CP configure-ack received                          : 10
IP6CP configure-request sent                          : 10
IP6CP configure-ack sent                              : 10
PAP authentication-request received                   : 10
PAP authentication-ack sent                           : 10
ICMPv6 router-solicitation received                   : 10
ICMPv6 router-advertisement sent                      : 10
DHCPv6 solicit received                               : 10
DHCPv6 reply sent                                     : 10

The following output provides a summary of the total number of PPPoE sessions.

supervisor@rtbrick.net: op> show pppoe session count

Global:
    Total:                 10
    Established:            5
    Tunnelled:              5

Interface hostif-0/0/1:
    Total:                 10
    Established:            5
    Tunnelled:              5

Session Filter Show Commands

The show commands provide details of PPPoE sessions based on specific filter criteria such as VLANs, interface, MAC address, and session state.

Syntax:

show pppoe session filter count
show pppoe session filter detail
show pppoe session filter inner-vlan <value>
show pppoe session filter interface <interface>
show pppoe session filter interface-regex <interface-regex>
show pppoe session filter mac <mac>
show pppoe session filter mac-regex <mac-regex>
show pppoe session filter outer-vlan <value>
show pppoe session filter state [LINKING | AUTHENTICATING | NETWORKING | ESTABLISHED | TUNNELLED | TERMINATING | TERMINATED]

The following table provides command options and descriptions.

Attribute Description

count

Displays the total number of PPPoE sessions matching the applied filter criteria.

detail

Displays detailed information for PPPoE sessions matching the filter criteria.

inner-vlan <value>

Filters PPPoE sessions based on the specified inner VLAN ID.

interface <interface>

Filters PPPoE sessions associated with the specified interface.

interface-regex <interface-regex>

Filters PPPoE sessions using a regular expression match on interface names.

mac <mac>

Filters PPPoE sessions based on the specified MAC address.

mac-regex <mac-regex>

Filters PPPoE sessions using a regular expression match on MAC addresses.

outer-vlan <value>

Filters PPPoE sessions based on the specified outer VLAN ID.

state [LINKING | AUTHENTICATING | NETWORKING | ESTABLISHED | TUNNELLED | TERMINATING | TERMINATED]

Filters PPPoE sessions based on their current state.

The following table provides various states and descriptions.

State Description

LINKING

PPP LCP setup.

AUTHENTICATING

PPP authentication (PAP or CHAP).

NETWORKING

PPP IPCP (IPv4) and IP6CP (IPv6) setup.

ESTABLISHED

The PPPoE session becomes established if at least one NCP (IPCP or IP6CP) is established (state OPEN).

TUNNELLED

This state indicates that a PPPoE session is tunnelled via L2TPv2.

TERMINATING

PPP session teardown.

TERMINATED

PPPoE session terminated.

If PPPoE session remain in state TERMINATED, the subscriber state should be checked. Typically, this happens if RADIUS Accounting-Request-Stop is still pending.

PPPoE Subscriber Details for a Specific Subscriber

The show commands provides summary, detailed information, and statistics for PPPoE session of a specific subscriber.

Syntax:

show pppoe session <subscriber-id>
show pppoe session <subscriber-id> detail
show pppoe session <subscriber-id> statistics

The following table provides command options and descriptions.

Attribute Description

<subscriber-id>

Displays a summary of the specified PPPoE session, including session state, identifiers, and associated details.

<subscriber-id> detail

Displays detailed PPPoE session information for the specified subscriber, including negotiation parameters and session attributes.

<subscriber-id> statistics

Displays statistics for the specified PPPoE subscriber, including packet and byte counters.

PPPoE Session Show Commands

The show commands provides detailed information and statistics for all PPPoE sessions.

Syntax:

show pppoe session detail
show pppoe session statistics

The following table provides command options and descriptions.

Attribute Description

detail

Displays detailed information for all PPPoE sessions.

statistics

Displays protocol-level statistics for all PPPoE sessions, including packet and byte counters.
Session statistics are available globally and per session.

Example:

show pppoe session statistics
show pppoe session 72339069014638601 statistics

The following example shows the aggregated PPPoE session control-plane statistics across all sessions on the device. The output provides counters for PPP negotiation for LCP, IPCP, and IP6CP.

supervisor@rtbrick: op> show pppoe session statistics
LCP configure-request received                        : 10
LCP configure-ack received                            : 10
LCP terminate-request received                        : 5
LCP terminate-ack received                            : 5
LCP echo-reply received                               : 5
LCP configure-request sent                            : 10
LCP configure-ack sent                                : 10
LCP terminate-request sent                            : 5
LCP terminate-ack sent                                : 5
LCP echo-request sent                                 : 5
LCP MRU negotiation successful                        : 10
LCP magic number negotiation successful               : 10
IPCP configure-request received                       : 20
IPCP configure-ack received                           : 10
IPCP configure-request sent                           : 10
IPCP configure-ack sent                               : 10
IPCP configure-nak sent                               : 10
IP6CP configure-request received                      : 10
IP6CP configure-ack received                          : 10
IP6CP configure-request sent                          : 10
IP6CP configure-ack sent                              : 10
PAP authentication-request received                   : 10
PAP authentication-ack sent                           : 10
ICMPv6 router-solicitation received                   : 10
ICMPv6 router-advertisement sent                      : 10
DHCPv6 solicit received                               : 10
DHCPv6 reply sent                                     : 10

The following example shows the PPPoE session statistics for a specific session. It displays protocol message statistics for an individual PPPoE session identified by the session ID.

supervisor@rtbrick: op> show pppoe session 72339069014638599 statistics
PPPoE subscriber 72339069014638599 session statistics
LCP configure-request received                        : 1
LCP configure-ack received                            : 1
LCP echo-reply received                               : 1
LCP configure-request sent                            : 1
LCP configure-ack sent                                : 1
LCP echo-request sent                                 : 1
LCP MRU negotiation successful                        : 1
LCP magic number negotiation successful               : 1
IPCP configure-request received                       : 2
IPCP configure-ack received                           : 1
IPCP configure-request sent                           : 1
IPCP configure-ack sent                               : 1
IPCP configure-nak sent                               : 1
IP6CP configure-request received                      : 1
IP6CP configure-ack received                          : 1
IP6CP configure-request sent                          : 1
IP6CP configure-ack sent                              : 1
PAP authentication-request received                   : 1
PAP authentication-ack sent                           : 1
ICMPv6 router-solicitation received                   : 1
ICMPv6 router-advertisement sent                      : 1
DHCPv6 solicit received                               : 1
DHCPv6 reply sent                                     : 1

For PPPoE sessions the state should be ESTABLISHED if local terminated or TUNNELLED for L2TPv2 tunnelled sessions.

supervisor@rtbrick: op> show pppoe session
Subscriber-Id           Interface         VLAN       MAC                State
72339069014638599       ifp-0/1/5         201:201    02:00:00:00:00:01  ESTABLISHED
72339069014638600       ifp-0/1/5         201:202    02:00:00:00:00:02  ESTABLISHED
72339069014638601       ifp-0/1/5         201:203    02:00:00:00:00:03  ESTABLISHED
72339069014638602       ifp-0/1/5         201:204    02:00:00:00:00:04  ESTABLISHED
72339069014638603       ifp-0/1/5         201:205    02:00:00:00:00:05  ESTABLISHED
Alternatively, use show pppoe session detail which shows further details like username, Agent-Remote-Id (Line-Id) or Agent-Circuit-Id if screen width is large enough to print all those information.

The detail command shows the states of the session and all sub-protocols with extensive information and negotiated parameters.

supervisor@rtbrick: op> show pppoe session 72339069014638599 detail
Subscriber-Id: 72339069014638599
    State: ESTABLISHED
    Uptime: Tue Jul 14 18:08:30 GMT +0000 2026 (0:00:13.498657)
    Interface: ifp-0/1/5
    Outer VLAN: 201 (802.1q)
    Inner VLAN: 201
    Client MAC: 02:00:00:00:00:01
    Server MAC: 5c:07:58:79:0f:06
    Session-Id: 6
    Agent-Remote-Id: DEU.RTBRICK.1
    Agent-Circuit-Id: 0.0.0.0/0.0.0.0 eth 0:1
    Access-Profile: PPPoE_ACCESS_PROFILE
    AAA-Profile: PPPoE_AAA
    PPP LCP:
        State: OPENED
        Negotiated Protocols: PAP, IPCP, IP6CP
        Negotiated Parameters: MRU, AUTH, MAGIC
        Magic Number: 2742098270 Peer: 1
        MRU: 1492 Peer: 1492
        MTU: 1492 Profile: __default_pppoe__
        Echo Interval: 10 seconds
    PAP Authentication:
        State: COMPLETED
        Username: 1@pppoe
        Reply Message: User on CBNG1
    PPP IPCP:
        State: OPENED
        Instance: default
        Peer IP Address: 198.51.100.106
        Local IP Address: 198.51.100.11
        Primary DNS: 203.0.113.201 Assigned: True
        Secondary DNS: 203.0.113.202 Assigned: True
    PPP IP6CP:
        State: OPENED
        Instance: default
        Interface Identifier: 95f6:7fd7:f30f:6ec0
        Peer Interface Identifier: 0200:00ff:fe00:0001
    IPv6:
        RA Interval: 30 seconds
        RA Prefix: 2001:db8:101:106::/64
        Delegated Prefix (DHCPv6): 2001:db8:201:500::/56 Assigned: True
        Primary DNS: 2001:db8:201:1::201
        Secondary DNS: 2001:db8:202:1::202
    Control Traffic Statistics:
        Ingress: 11 packets 819 bytes
        Egress: 11 packets 817 bytes

PPPoE Discovery Show Commands

These commands provide visibility into PPPoE discovery-phase operations, including packet statistics, error conditions, and protection mechanisms applied to incoming discovery traffic.

Syntax:

show pppoe discovery errors
show pppoe discovery packets
show pppoe discovery protection
show pppoe discovery protection filter count
show pppoe discovery protection filter inner-vlan <value>
show pppoe discovery protection filter interface <interface-name>
show pppoe discovery protection filter interface-regex <interface-regex>
show pppoe discovery protection filter mac <mac>
show pppoe discovery protection filter mac-regex <mac-regex>
show pppoe discovery protection filter outer-vlan <value>

The following table provides command options and descriptions.

Attribute Description

errors

Displays PPPoE discovery error statistics.

packets

Displays PPPoE discovery packet statistics.

protection

Displays PPPoE discovery protection information and status.

protection filter count

Displays the total number of entries matching the PPPoE discovery protection filter criteria.

inner-vlan <value>

Filters PPPoE discovery protection entries based on the specified inner VLAN ID.

<interface-name>

Filters PPPoE discovery protection entries for the specified interface.

<interface-regex>

Filters PPPoE discovery protection entries using a regular expression match on interface names.

<mac>

Filters PPPoE discovery protection entries based on the specified MAC address.

<mac-regex>

Filters PPPoE discovery protection entries using a regular expression match on MAC addresses.

outer-vlan <value>

Filters PPPoE discovery protection entries based on the specified outer VLAN ID.
The PPPoE discovery statistics are helpful if session setup fails in initial PPPoE tunnel setup before actual PPP negotiation is starting.

The following output provides a summary of PPPoE discovery packet activity, displaying the count of each packet type (PADI, PADO, PADR, PADS, PADT) received and sent by the system.

supervisor@rtbrick: op> show pppoe discovery packets
Packet           Received         Sent
PADI             10               0
PADO             0                10
PADR             10               0
PADS             0                10
PADT             5                5

The following output provides statistics for PPPoE discovery packet drops and errors in various conditions.

supervisor@rtbrick: op> show pppoe discovery errors
PADI Drop No Config            : 0
PADI Drop Session Protection   : 0
PADI Drop Session Limit        : 0
PADI Drop Outstanding Limit    : 0
PADI Drop Dup Session          : 0
PADI Drop Interface Down       : 0
PADI Drop VLAN Encap Mismatch  : 0
PADI Drop Redundancy State     : 0
PADR Drop No Config            : 0
PADR Drop Wrong MAC            : 0
PADR Drop Interface Down       : 0
PADR Drop Session Protection   : 0
PADR Drop Session Limit        : 0
PADR Drop Outstanding Limit    : 0
PADR Drop Bad Cookie           : 0
PADR Drop Bad Session          : 0
PADR Drop Duplicate Session    : 0
PADR Drop No Subscriber-Id     : 0
PADR Drop VLAN Encap Mismatch  : 0
PADR Drop Redundancy State     : 0
PADT Drop No Session           : 0
PADT Drop Wrong MAC            : 0
PADX Decode Error              : 0
PADX Internal Error            : 0
PADX Interface Get Failure     : 0
PADX Unsupported VLAN Count    : 0
PADX No chassis-id config found: 0

The following example provides the status of PPPoE discovery protection for subscriber interfaces and VLANs, including the number of connection attempts and the last termination reason.

supervisor@rtbrick: op> show pppoe discovery protection
Interface         VLAN      MAC               Status   Attempts    Last Terminate Code
ifp-0/1/5         201:201   02:00:00:00:00:01 OK       1           PPPoE LCP Terminate Request Received
ifp-0/1/5         201:202   02:00:00:00:00:02 OK       1           PPPoE LCP Terminate Request Received
ifp-0/1/5         201:203   02:00:00:00:00:03 OK       1           PPPoE LCP Terminate Request Received
ifp-0/1/5         201:204   02:00:00:00:00:04 OK       1           PPPoE LCP Terminate Request Received
ifp-0/1/5         201:205   02:00:00:00:00:05 OK       1           PPPoE LCP Terminate Request Received

If PPPoE session protection is enabled in access configuration profile, short lived or failed sessions will be logged in the PPPoE session protection table (local.pppoe.session.protection). Every session not established for at least 60 seconds per default is considered as failed or short lived session. This will block new sessions on this IFP and VLAN’s for one second per default which increase exponential with any further failed session until the max time of per default 300 seconds is reached. The interval is reset after 900 seconds without failed sessions.

The PPPoE session protection table include also last subscriber-id and terminate code which indicates the reason for session failures.

If status OK indicates that new session are accepted where BLOCKED means that sessions will be rejected.

PPPoE MTU Profile Show Commands

This show command displays configured PPPoE MTU profiles and their associated parameters.

Syntax:

show pppoe mtu-profile

The following table provides command options and descriptions.

Attribute Description

<cr>

Displays configured PPPoE MTU profiles and their associated parameters.

The following output displays the configured PPPoE MTU profiles and the number of exact and best-match profile selections.

supervisor@rtbrick.net: op> show pppoe mtu-profile
Profile                           MTU       Exact Match       Best Match
__default_pppoe__                 1492      55                0

L2TP Show Commands

The L2TP operational commands provide information about the state of L2TP sessions. These commands are applicable to L2TP-based subscribers and enable you to monitor L2TP tunnels, sessions, and associated subscribers.

The following diagram shows the operational command structure and heirarchy for L2TP tunnels and sessions.

ngaccess cli2 l2tpd op
Figure 5. L2TP Operational Commands

L2TP Subscriber Show Commands

The L2TP subscriber show commands provide information about individual session using the global unique subscriber ID of L2TP subscribers.

Syntax:

show l2tp subscriber
show l2tp subscriber <subscriber-id>

The following table provides command options and descriptions.

Option Description

<cr>

Displays summary information for all L2TP subscribers.

<subscriber-id>

Displays detailed information for the specified L2TP subscriber.

L2TP Tunnel

The L2TP tunnel show commands provide visibility into tunnel operations which include tunnel establishment, history, active sessions, and traffic statistics. It allows you to monitor tunnel health state.

Syntax:

show l2tp tunnel
show l2tp tunnel history
show l2tp tunnel history <sequence>
show l2tp tunnel sessions
show l2tp tunnel statistics
show l2tp tunnel [1 - 65535]
show l2tp tunnel [1 - 65535] detail
show l2tp tunnel [1 - 65535] statistics

The following table provides command options and descriptions.

Option Description

<cr>

Displays summary information for all active L2TP tunnels.

history

Displays historical records of L2TP tunnel events and state changes.

history <sequence>

Displays records of L2TP tunnel events for the specified sequence number.

sessions

Displays all active L2TP sessions associated with the tunnel.

statistics

Displays aggregated statistics for all L2TP tunnels.

tunnel 1 - 65535

Displays summary information for the specified L2TP tunnel ID.

tunnel 1 - 65535 detail

Displays detailed operational information for the specified L2TP tunnel ID.

tunnel 1 - 65535 statistics

Displays statistics for the specified L2TP tunnel ID.

The following example provides information about the corresponding tunnels.

supervisor@rtbrick: op> show l2tp tunnel sessions
Role  Local TID  Peer TID  State         Preference  Sessions  Established  Peer Name
LAC        9844         1  ESTABLISHED        10000         3            3  LNS1
LAC       48786         2  ESTABLISHED        10000         1            1  LNS1
LAC        2911         3  ESTABLISHED        10000         1            1  LNS1

The following output provides a high-level summary of L2TP tunnels, total number of tunnels and the sessions successfully established on the device.

supervisor@rtbrick: op> show l2tp tunnel statistics
L2TP global tunnel statistics
Tunnel created              : 3
Tunnel initialized          : 3
Session created             : 5
SCCRQ sent                  : 3
SCCCN sent                  : 3
ICRQ sent                   : 5
ICCN sent                   : 5
SCCRP received              : 3
ZLB received                : 5
ICRP received               : 5

This following example provides the view of signaling activity specifically for L2TP tunnel '65244', detailing the control messages used to maintain that specific connection.

supervisor@rtbrick: op> show l2tp tunnel 9844 statistics
L2TP tunnel 9844 statistics
Session created             : 3
SCCRQ sent                  : 1
SCCCN sent                  : 1
ICRQ sent                   : 3
ICCN sent                   : 3
SCCRP received              : 1
ZLB received                : 1
ICRP received               : 3

L2TP Session Show Commands

The L2TP session show commands provide information about individual session within an L2TP tunnel which include session history and state.

Syntax:

show l2tp session history <subscriber-id>
show l2tp session requests <subscriber-id>
show l2tp session <1 - 65535>
show l2tp session <1 - 65535> <1 - 65535>

show l2tp session
show l2tp session history
show l2tp session history <subscriber-id>
show l2tp session requests
show l2tp session requests <subscriber-id>
show l2tp session <1-65535>
show l2tp session <1-65535> <1-65535>

The following table provides command options and descriptions.

Option Description

<cr>

Displays summary information for all active L2TP sessions.

history

Displays historical records of L2TP session events and state changes.

history <subscriber-id>

Displays historical L2TP session records for the specified subscriber ID.

requests

Displays pending or processed L2TP session requests.

requests <subscriber-id>

Displays L2TP session requests for the specified subscriber ID.

session <1- 65535>

Displays information for the specified L2TP session ID.

<1-65535> <1-65535>

Displays information for the specified L2TP tunnel ID and session ID combination.
For L2TPv2 tunnelled PPPoE sessions, the globally unique subscriber ID can be used to retrieve detailed session-level information.

The following output displays a summary of all L2TP subscriber sessions currently present on the system, including the subscriber ID and the operational state of each session.

supervisor@rtbrick.net: op> show l2tp subscriber
Subscriber-Id           State
72339069014638658       ESTABLISHED
72339069014638657       ESTABLISHED
72339069014638654       ESTABLISHED
72339069014638655       ESTABLISHED
72339069014638656       ESTABLISHED

The following output displays detailed information for a specific L2TP subscriber, including tunnel and session identifiers, and connection state.

supervisor@rtbrick: op> show l2tp subscriber 72339069014638609
Subscriber-Id: 72339069014638609
    State: ESTABLISHED
    Local TID: 9844
    Local SID: 29446
    Peer TID: 1
    Peer SID: 2
    Call Serial Number: 1
    TX Speed: 16384000 bps
    RX Speed: 1024000 bps
    CSUN: disabled

The following example provides the list of L2TP session terminations with subscriber identifiers and associated tunnel IDs

supervisor@rtbrick: op> show l2tp session history
Subscriber-Id           Local TID  Local SID  Terminate Code
72339069014638612            2911      27258  L2TP Tunnel Down
72339069014638610            9844      12077  L2TP Tunnel Down
72339069014638609            9844      29446  L2TP Tunnel Down
72339069014638611            9844      39942  L2TP Tunnel Down
72339069014638613           48786      64050  L2TP Tunnel Down
72339069014638614            2911      49382  Clear Session Force
72339069014638615            9844       9621  Clear Session Force
72339069014638616            9844      11781  Clear Session Force
72339069014638617            9844      20058  Clear Session Force
72339069014638618           48786      57267  Clear Session Force

L2TP Result and Disconnect Codes Show Commands

The following example displays a list of previously terminated L2TP tunnels, including tunnel identifiers, timestamps, and termination code.

The received result (RFC2661) and disconnect (RFC3145) code and message from CDN and StopCCN will be stored similar to the subscriber terminate history table for 24 hours and up to 1000 records.

supervisor@rtbrick: op> show l2tp tunnel history
Sequence  Local TID  Peer TID  Timestamp                             Terminate Code
       1       2911         3  Tue Jul 14 18:13:32 GMT +0000 2026    Admin Request
       2       9844         1  Tue Jul 14 18:13:32 GMT +0000 2026    Admin Request
       3      48786         2  Tue Jul 14 18:13:32 GMT +0000 2026    Admin Request

The following example provides information about a specific tunnel history entry, including local and peer parameters.

supervisor@rtbrick: op> show l2tp tunnel history 3
Local TID: 48786 Peer TID: 2
    Terminate Code: Admin Request
    Timestamp: Tue Jul 14 18:13:32 GMT +0000 2026
    Local Address: 198.51.100.11
    Peer Address: 192.0.2.2
    Peer Name: LNS1
    Tunnel-Client-Auth-ID: BNG
    Tunnel-Server-Auth-ID: LNS3

The following example provides information about L2TP if found for the corresponding subscriber.

supervisor@rtbrick: op> show subscriber history
Subscriber-Id           Type    Timestamp                             Terminate Code
72339069014638594       PPPoE   Tue Jul 14 18:08:29 GMT +0000 2026    Clear Session Force
72339069014638595       PPPoE   Tue Jul 14 18:08:29 GMT +0000 2026    Clear Session Force
72339069014638596       PPPoE   Tue Jul 14 18:08:29 GMT +0000 2026    Clear Session Force
72339069014638597       PPPoE   Tue Jul 14 18:08:29 GMT +0000 2026    Clear Session Force
72339069014638598       PPPoE   Tue Jul 14 18:08:29 GMT +0000 2026    Clear Session Force

The following example shows information related to L2TP tunnel and session establishment. The output includes statistics for tunnel creation, initialization, and control messages exchanged during the L2TP control-plane signaling process.

supervisor@rtbrick: op> show l2tp tunnel statistics
L2TP global tunnel statistics
Tunnel created              : 3
Tunnel initialized          : 3
Session created             : 5
SCCRQ sent                  : 3
SCCCN sent                  : 3
ICRQ sent                   : 5
ICCN sent                   : 5
SCCRP received              : 3
ZLB received                : 5
ICRP received               : 5

L2TP Cross-Connect Show Commands

L2TP cross-connect show commands display information about L2TP cross-connect sessions.

Syntax:

show forwarding l2tp cross-connect
show forwarding l2tp cross-connect detail
show forwarding l2tp cross-connect summary
show forwarding l2tp cross-connect filter type (PPPoE-L2TP | L2TP-PPPoE)
show forwarding l2tp cross-connect filter type (PPPoE-L2TP | L2TP-PPPoE) detail

The following table provides command options and descriptions.

Option Description

<cr>

Without any option, it displays information about all L2TP cross connect sessions.

detail

Displays detailed information for each L2TP cross-connect session.

summary

Displays a high-level summary of L2TP cross-connect sessions.

type (PPPoE-L2TP | L2TP-PPPoE)

PPPoE-L2TP option displays only sessions with L2TP to PPPoE direction. PPPoE-L2TP option displays only sessions with PPPoE to L2TP direction.

type (PPPoE-L2TP | L2TP-PPPoE) detail

Displays detailed information for the L2TP sessions for the specified direction.

The following example displays statistics of L2TP cross-connect sessions. It includes total, ingress and egress, and success and failure counts.

supervisor@rtbrick.net: cfg> show forwarding l2tp-cross-connect summary
Total cross connects: 30
Ingress cross connects: 30
Egress cross connects: 0
Success cross connects: 30
Failed cross connects: 0

The following example displays displays a list of L2TP cross-connect sessions with their name, direction, type, and status.

supervisor@rtbrick: op> show l2tp tunnel statistics
L2TP global tunnel statistics
Tunnel created              : 3
Tunnel initialized          : 3
Session created             : 5
SCCRQ sent                  : 3
SCCCN sent                  : 3
ICRQ sent                   : 5
ICCN sent                   : 5
SCCRP received              : 3
ZLB received                : 5
ICRP received               : 5
supervisor@rtbrick.net: cfg> show forwarding l2tp-cross-connect
Name                                  Direction     Type               Status
L2TP-TO-PPPOE-XC-72339069014638594    ingress       L2TP to PPPoE      Download success
L2TP-TO-PPPOE-XC-72339069014638595    ingress       L2TP to PPPoE      Download success
L2TP-TO-PPPOE-XC-72339069014638596    ingress       L2TP to PPPoE      Download success
L2TP-TO-PPPOE-XC-72339069014638597    ingress       L2TP to PPPoE      Download success
L2TP-TO-PPPOE-XC-72339069014638598    ingress       L2TP to PPPoE      Download success
PPPOE-TO-L2TP-XC-72339069014638604    ingress       PPPoE to L2TP      Download success
PPPOE-TO-L2TP-XC-72339069014638605    ingress       PPPoE to L2TP      Download success
PPPOE-TO-L2TP-XC-72339069014638606    ingress       PPPoE to L2TP      Download success
PPPOE-TO-L2TP-XC-72339069014638607    ingress       PPPoE to L2TP      Download success
PPPOE-TO-L2TP-XC-72339069014638608    ingress       PPPoE to L2TP      Download success

The following example displays detailed information for each L2TP cross-connect session, including source and destination ports along with status.

supervisor@rtbrick.net: cfg> show forwarding l2tp-cross-connect detail
Name                                  Direction     Type               Source Port         Destination Port    Status
L2TP-TO-PPPOE-XC-72339069014638594    ingress       L2TP to PPPoE      1276167002          2550189302          Download success
L2TP-TO-PPPOE-XC-72339069014638595    ingress       L2TP to PPPoE      1276167003          2550189304          Download success
PPPOE-TO-L2TP-XC-72339069014638600    ingress       PPPoE to L2TP      1277165588          2550189315          Download success
PPPOE-TO-L2TP-XC-72339069014638601    ingress       PPPoE to L2TP      1277165589          2550189317          Download success
PPPOE-TO-L2TP-XC-72339069014638602    ingress       PPPoE to L2TP      1277165590          2550189319          Download success
PPPOE-TO-L2TP-XC-72339069014638603    ingress       PPPoE to L2TP      1277165591          2550189321          Download success
PPPOE-TO-L2TP-XC-72339069014638604    ingress       PPPoE to L2TP      1277165592          2550189323          Download success