This article demonstrates with examples the difference in output between legacy and Next-Generation Broadband Edge Junos OS releases, when traffic is captured for L2TP-enabled subscribers on the access-facing MX-LAC interface.

 

In legacy Junos OS releases, information beyond the Authentication phase is considered as data traffic from the MX-LAC perspective. Therefore, this information is not shown when traffic is captured directly on the interface. However, it is observed that capturing traffic up to the Network Control Protocol (NCP) phase on MX-LAC is helpful for checking functionality, and troubleshooting problems related to subscriber connectivity, which is possible only with the Next-Generation Broadband Edge software.

 

Legacy

In legacy Junos OS releases, when traffic is captured on the access interface by using the monitor traffic interface <interface-name> command on MX-LAC, or when tcpdump is captured from the shell directly on the access-facing interface while connecting the L2TP-enabled subscribers, only information up to the Authentication phase is available. The rest of the control traffic is tunneled and sent to the L2TP network server (LNS) for session establishment. It is not shown in the output.

Example: Capturing traffic information on the access-facing interface in legacy Junos OS Subscriber Management releases: ​

MX-BNG> monitor traffic interface xe-2/0/0
19:29:53.216694  In PPPoE  [ses 1]LCP, Conf-Request (0x01), id 1, length 16
19:29:53.216699  In PPPoE  [ses 1]LCP, Conf-Request (0x01), id 1, length 16
19:29:53.217345 Out PPPoE  [ses 1]LCP, Conf-Request (0x01), id 197, length 20
19:29:53.217466 Out PPPoE  [ses 1]LCP, Conf-Ack (0x02), id 1, length 16
19:29:53.218204  In PPPoE  [ses 1]LCP, Conf-Nack (0x03), id 197, length 11
19:29:53.218210  In PPPoE  [ses 1]LCP, Conf-Nack (0x03), id 197, length 11
19:29:53.218550 Out PPPoE  [ses 1]LCP, Conf-Request (0x01), id 198, length 21
19:29:53.219154  In PPPoE  [ses 1]LCP, Conf-Ack (0x02), id 198, length 21
19:29:53.219158  In PPPoE  [ses 1]LCP, Conf-Ack (0x02), id 198, length 21
19:29:53.219539 Out PPPoE  [ses 1]CHAP, Challenge (0x01), id 100, Value efea1218987c5e30f3f2e75d0231f329, Name JUNOS
19:29:53.220239  In PPPoE  [ses 1]CHAP, Response (0x02), id 100, Value 027fe1bfc5cb0489d52b651feaacf199, Name l2tp@jnpr.net

Next-Generation Broadband Edge

In the new Next-Generation Broadband Edge releases, MX-LAC is able to intercept and show control traffic for the L2TP-enabled subscribers up to the Network Control Phase, when traffic is captured directly on the access interface. 

Example: Capturing traffic on the access-facing interface in Junos OS Next-Generation Broadband Edge releases:

MX-NGBNG> monitor traffic interface xe-2/0/0
18:09:30.867164  In PPPoE  [ses 1]LCP, Conf-Request (0x01), id 1, length 16
18:09:30.867167  In PPPoE  [ses 1]LCP, Conf-Request (0x01), id 1, length 16
18:09:30.867748 Out PPPoE  [ses 1]LCP, Conf-Request (0x01), id 121, length 20
18:09:30.867874 Out PPPoE  [ses 1]LCP, Conf-Ack (0x02), id 1, length 16
18:09:30.868376  In PPPoE  [ses 1]LCP, Conf-Ack (0x02), id 121, length 20
18:09:30.868382  In PPPoE  [ses 1]PAP, Auth-Req (0x01), id 85, Peer l2tp@jnpr.net, Name password
18:09:30.868385  In PPPoE  [ses 1]LCP, Conf-Ack (0x02), id 121, length 20
18:09:30.868388  In PPPoE  [ses 1]PAP, Auth-Req (0x01), id 85, Peer l2tp@jnpr.net, Name password         
18:09:31.029474 Out PPPoE  [ses 1]PAP, Auth-ACK (0x02), id 85, Msg Login successful

*****NCP Output******

18:09:31.029565 Out PPPoE  [ses 1]IPCP, Conf-Request (0x01), id 0, length 12
18:09:31.032252  In PPPoE  [ses 1]IPCP, Conf-Request (0x01), id 1, length 12
18:09:31.032259  In PPPoE  [ses 1]IP6CP, Conf-Request (0x01), id 1, length 16
18:09:31.032265  In PPPoE  [ses 1]IPCP, Conf-Ack (0x02), id 0, length 12
18:09:31.032268  In PPPoE  [ses 1]IPCP, Conf-Request (0x01), id 1, length 12
18:09:31.032271  In PPPoE  [ses 1]IP6CP, Conf-Request (0x01), id 1, length 16                  
18:09:31.032276  In PPPoE  [ses 1]IPCP, Conf-Ack (0x02), id 0, length 12
18:09:31.033176 Out PPPoE  [ses 1]IPCP, Conf-Nack (0x03), id 1, length 12
18:09:31.033260 Out PPPoE  [ses 1]LCP, Prot-Reject (0x08), id 0, length 22
18:09:31.037213  In PPPoE  [ses 1]IPCP, Conf-Request (0x01), id 2, length 12
18:09:31.037217  In PPPoE  [ses 1]IPCP, Conf-Request (0x01), id 2, length 12
18:09:31.037930 Out PPPoE  [ses 1]IPCP, Conf-Ack (0x02), id 2, length 12