Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Subscriber Management] How to check the policing rate of a subscriber session

0

0

Article ID: KB29706 KB Last Updated: 18 Jun 2015Version: 1.0
Summary:

This article provides commands to check the policing rate and policed rate of a subscriber session.

Symptoms:

Two subscribers are tested for 5m upload/download speed:

Filter / Policer name used
Service_test_Sym_in - test_in
Service_test_Sym_out - test_out
ge-1/0/4 is the uplink port.

_in uses the normal policer: only one FPC will be used for ingress (subscribers upload).
_out uses a shared-bandwidth-policer: two FPCs will be used for egress (subscribers download).

In both download/upload directions, the subscriber should not exceed 5m bandwidth.

200m of traffic is pushed from subscribers to uplink (100m per subscriber as seen in the input bps of the pp0 interface).
200m of traffic is pushed from uplink to subscribers (100m per subscriber as seen in the input bps of the ge-1/0/4 interface).

Only 5m goes out per subscriber, as seen in the output bps of the pp0 interface. Only 10m goes out on the uplink (5m per subscriber) as seen in the output bps of ge-1/0/4. The pp0 interface will not show the policed rate in the input direction.

These statistics are taken before the PFE's police action, so in production routers it might not be possible to compare the rate against the uplink traffic.

To check the PFE's programming and confirm the policing rate, please refer to KB29705 - How to check the programming of PFE for a normal policer and shared-bandwidth-policer of a subscriber session.
Cause:

Solution:

To review more details of the subscriber session from the CLI, use the following commands:

test@ERX-MX480-1-RE0> show subscribers
Interface      IP Address/VLAN ID User Name    LS:RI
pp0.1073764922 44.160.1.1         xyz1@mx.com default:default
pp0.1073764923 44.160.1.2         xyz2@mx.com default:default


test@ERX-MX480-1-RE0> show subscribers extensive
Type: PPPoE
User Name: xyz1@mx.com  
IP Address: 44.160.1.1
Primary DNS Address: 41.160.0.36
Secondary DNS Address: 41.160.0.37
Logical System: default
Routing Instance: default
Interface: pp0.1073764922
Interface type: Dynamic
Underlying Interface: demux0.100
Dynamic Profile Name: PPPoE-Default
MAC Address: aa:bb:cc:00:00:00
Session Timeout (seconds): 520000
Idle Timeout (seconds): 86400
State: Active
Radius Accounting ID: 23099
Session ID: 23099
VLAN Id: 100
Login Time: 2014-11-19 14:48:56 IST
IPv4 Input Filter Name: Service_test_Sym_in-pp0.1073764922-in
IPv4 Output Filter Name: Service_test_Sym_out-pp0.1073764922-out

Type: PPPoE
User Name: xyz2@mx.com 
IP Address: 44.160.1.2
Primary DNS Address: 41.160.0.36
Secondary DNS Address: 41.160.0.37
Logical System: default
Routing Instance: default
Interface: pp0.1073764923
Interface type: Dynamic
Underlying Interface: demux0.100
Dynamic Profile Name: PPPoE-Default
MAC Address: 1c:95:6c:41:00:00
Session Timeout (seconds): 520000
Idle Timeout (seconds): 86400
State: Active
Radius Accounting ID: 23100
Session ID: 23100
VLAN Id: 100
Login Time: 2014-11-19 14:48:56 IST
IPv4 Input Filter Name: Service_test_Sym_in-pp0.1073764923-in
IPv4 Output Filter Name: Service_test_Sym_out-pp0.1073764923-out


test@ERX-MX480-1-RE0> configure
Entering configuration mode

[edit]
test@ERX-MX480-1-RE0# edit groups abcdefg-XON firewall  

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show filter Service_test_Sym_in
interface-specific;
term 1 {
   then {
     policer test_in;
     loss-priority high;
     forwarding-class BRONZE;
   }
}

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show policer Service_test_Sym_in

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show policer test_in
filter-specific;
if-exceeding {
    bandwidth-limit 5m;
    burst-size-limit 350k;
}
then discard;

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show filter Service_test_Sym_out
interface-specific;
term 1 {
    then {
        policer test_out;
        loss-priority high;
        forwarding-class BRONZE;
    }
}

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show policer test_out
filter-specific;
shared-bandwidth-policer;
if-exceeding {
     bandwidth-limit 5m;
     burst-size-limit 350k;
}
then discard;

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# top

[edit]
test@ERX-MX480-1-RE0# quit
Exiting configuration mode


test@ERX-MX480-1-RE0> show subscribers
Interface      IP Address/VLAN ID User Name   LS:RI
pp0.1073764922 44.160.1.1      xyz1@mx.com   default:default
pp0.1073764923 44.160.1.2      xyz2@mx.com   default:default


test@ERX-MX480-1-RE0> show interfaces ge-1/0/4 extensive |match bps
Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, BPDU Error: None, MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Enabled, Auto-negotiation: Enabled,
Input bytes : 1550849512682 190880872 bps >>> 200m of traffic is pushed from uplink to subscribers
Output bytes : 626506607 9990776 bps >>> only 10m goes out (5m per subscriber) of uplink
% bps % usec
Input bytes : 1550847587438 190880872 bps
Output bytes : 623867739 9990776 bps


test@ERX-MX480-1-RE0> show interfaces pp0.1073764922 extensive |match bps
Input bytes : 332394349 93783112 bps >>> 100m of traffic is pushed in ingress
Output bytes : 18087753 4994656 bps >>> Only 5m makes out of ppp interface
Input Filters: Service_test_Sym_in-pp0.1073764922-in
Output Filters: Service_test_Sym_out-pp0.1073764922-out


test@ERX-MX480-1-RE0> show interfaces pp0.1073764923 extensive |match bps
Input bytes : 402907174 94487240 bps
Output bytes : 21818216 4994832 bps
Input Filters: Service_test_Sym_in-pp0.1073764923-in
Output Filters: Service_test_Sym_out-pp0.1073764923-out
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search