number: Maximum number of links that can be used for transmitting multicast or broadcast packets, in the range of 0 to 128. A value of 0 indicates that the transmission of multicast or broadcast packets is not supported.

Description

Use broadcast-limit link to set the maximum number of links that can be used for transmitting multicast packets or broadcast packets for the VT.

Use undo broadcast-limit link to restore the default.

By default, the maximum number of links that can be used for transmitting multicast or broadcast packets is 30 for a VT.

For a VT containing multiple links, the system performance may decrease if all the links of the VT are engaged in multicast or broadcast packet transmission. You can use the broadcast-limit link command to limit the number of links that are capable of multicast or broadcast packet transmission.

Examples

# Set the maximum number of links that are capable of multicast or broadcast packets transmission to 100 for VT 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] broadcast-limit link 100

default

Syntax

default

View

VT interface view

Default level

2: System level

Parameters

None

Description

Use default to restore the default setting of the VT interface.

Examples

# Restore the default setting of interface VT 10.

<Sysname> system-view

[Sysname] interface virtual-template 10

[Sysname-Virtual-Template10] default

This command will restore the default settings. Continue? [Y/N]:y

description

Syntax

description text

undo description

View

VT interface view

Default level

2: System level

Parameters

text: Interface description, a case-sensitive string of 1 to 80 characters.

Description

Use description to set the description for the VT interface.

Use undo description to restore the default.

By default, a VT interface is described in the form of interface name Interface, for example, Virtual-Template1 Interface.

Examples

# Set the description for interface VT 10 to virtual-interface.

<Sysname> system-view

[Sysname] interface virtual-template 10

[Sysname-Virtual-Template10] description virtual-interface

display interface virtual-template

Syntax

display interface virtual-template number [ brief ] [ | { begin | exclude | include } regular-expression ]

display interface [ virtual-template ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

number: Number of an existing VT interface.

brief: Displays brief interface information. If you do not specify this keyword, this command displays detailed interface information.

down: Displays information about interfaces in the DOWN state and the causes. If you do not specify this keyword, this command displays information about interfaces in all states.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display interface virtual-template to display information about a VT interface.

If you do not specify the virtual-template keyword, this command displays information about all interfaces on the device.

If you specify the virtual-template keyword without the number argument, this command displays information about all existing VT interfaces.

Related commands: interface virtual-template.

Examples

# Display detailed information about VT 1.

<Sysname> display interface virtual-template 1

Virtual-Template1 current state: UP

Line protocol current state: UP (spoofing)

Description: Virtual-Template1 Interface

The Maximum Transmit Unit is 1500, Hold timer is 10(sec)

Internet Address is 6.1.1.2/8 Primary

Link layer protocol is PPP

LCP initial

Physical is None, baudrate: 64000 bps

Last clearing of counters: Never

Last 300 seconds input: 0 bytes/sec 0 packets/sec

Last 300 seconds output: 6 bytes/sec 0 packets/sec

512 packets input, 43008 bytes, 0 drops

614 packets output, 49636 bytes, 0 drops

# Display brief information about VT 1.

<Sysname> display interface virtual-template 1 brief

The brief information of interface(s) under route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Main IP Description

VT1 UP UP(s) --

Table 1 Command output

Field	Description
current state	Physical state of the interface: · DOWN (Administratively)—The interface was shut down with the shutdown command, that is, is administratively down. · DOWN—The interface is administratively up but physically down. · UP—The interface is both administratively and physically up.
Line protocol current state	Data link layer state: UP or DOWN.
Description	Description string of the interface.
The Maximum Transmit Unit	Maximum transmission unit (MTU) of the interface.
Hold timer	Interval at which the current interface sends keepalive packets.
LCP initial	Link control protocol (LCP) negotiation is complete.
Physical	Physical type of the interface.
Last clearing of counters: Never	Time when statistics on the interface were last cleared. Never indicates that statistics on the interface were never cleared.
Last 300 seconds input: 0 bytes/sec 0 packets/sec Last 300 seconds output: 0 bytes/sec 0 packets/sec	Average rate of input packets and output packets in the last 300 seconds.
0 packets input, 0 bytes, 0 drops	Total number of inbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the inbound packets
0 packets output, 0 bytes, 0 drops	Total number of outbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the outbound packets
The brief information of interface(s) under route mode	Brief information about Layer 3 interfaces.
Link: ADM - administratively down; Stby - standby	Link status: · ADM—The interface has been administratively shut down. To recover its physical state, execute the undo shutdown command. · Stby—The interface is operating as a backup interface. To see the primary interface, use the display standby state command in High Availability Command Reference.
Protocol: (s) - spoofing	If the network layer protocol state of an interface is shown as UP, but its link is an on-demand link or not present at all, its protocol attribute includes the spoofing flag (an s in parentheses).
Interface	Abbreviated interface name.
Link	Physical link state of the interface: · UP—The link is up. · ADM—The link has been administratively shut down. To recover its physical state, execute the undo shutdown command.
Protocol	Protocol connection state of the interface: UP, DOWN, or UP(s).
Main IP	Main IP address of the interface.
Description	Description of the interface.

display virtual-access

Syntax

display virtual-access [ va-number | peer peer-address | user user-name | vt vt-number ] * [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

va-number: VA interface number, ranging from 0 to 65535.

peer peer-address: Specifies the peer IP address of a VA interface, in dotted decimal notation.

user user-name: Specifies the username of a user logging in through a VA interface. This argument is a string of 1 to 80 characters.

vt vt-number: Specifies a VT number, in the range of 0 to 1023.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display virtual-access to display the information about a VA interface or the VA interfaces that are formed based on a VT.

NOTE:

VA interfaces are created automatically by the system. They use the settings of the corresponding VTs. A VA interface can be removed because of failures of lower layer connections or user intervention.

Examples

# Display the information about all the VA interfaces that are formed based on VT 1.

<Sysname> display virtual-access vt 1

Virtual-Template1:0 current state: UP

Line protocol current state: UP

Description: Virtual-Template1:0 Interface

The Maximum Transmit Unit is 1500

Internet protocol processing : disabled

Link layer protocol is PPP

LCP opened

Physical is MP, baudrate: 64000 bps

Last 300 seconds input: 0 bytes/sec 0 packets/sec

Last 300 seconds output: 0 bytes/sec 0 packets/sec

520 packets input, 44132 bytes, 0 drops

527 packets output, 44566 bytes, 4 drops

For the output description, see Table 1.

interface virtual-template

Syntax

interface virtual-template number

undo interface virtual-template number

View

System view

Default level

2: System level

Parameters

number: VT number, in the range of 0 to 1023.

Description

Use interface virtual-template to create a VT interface and enter its view. If the VT interface already exists, you enter its view directly.

Use undo interface virtual-template to remove a VT interface.

To remove a VT, make sure that all the corresponding VA interfaces are removed and the VT interface is not in use.

Examples

# Create interface VT 10.

<Sysname> system-view

[Sysname] interface virtual-template 10

[Sysname-Virtual-Template10]

ip address ppp-negotiate

Syntax

ip address ppp-negotiate

undo ip address ppp-negotiate

View

VT interface view

Default level

2: System level

Parameters

None

Description

Use ip address ppp-negotiate to enable IP address negotiation on the local interface, so that the local interface can accept the IP address allocated by the peer end.

Use undo ip address ppp-negotiate to disable IP address negotiation.

By default, IP address negotiation is disabled.

Related commands: remote address and ppp ipcp remote-address forced.

Examples

# Enable IP address negotiation on interface VT 1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] ip address ppp-negotiate

mtu

Syntax

mtu size

undo mtu

View

VT interface view

Default level

2: System level

Parameters

size: MTU in bytes, in the range of 128 to 1500.

Description

Use mtu to set the MTU size of the interface.

Use undo mtu to restore the default.

By default, the MTU of an interface is 1500 bytes.

Examples

# Set the MTU of VT 10 to 1200 bytes.

<Sysname> system-view

[Sysname] interface virtual-template 10

[Sysname-Virtual-Template10] mtu 1200

ppp account-statistics enable

Syntax

ppp account-statistics enable [ acl { acl-number | name acl-name } ]

undo ppp account-statistics enable

View

VT interface view

Default level

2: System level

Parameters

acl: Generates PPP accounting statistics for traffic that matches the configured ACL. If no ACL is configured, the device generates PPP accounting statistics for all traffic.

acl-number: ACL number, in the range of 2000 to 3999, where:

· 2000 to 2999 are numbers for basic IPv4 ACLs.

· 3000 to 3999 are numbers for advanced IPv4 ACLs.

name acl-name: Specifies an ACL by its name. The acl-name represents the name of an IPv4 ACL, a case-sensitive string that starts with an English letter and contains 1 to 63 characters. To avoid confusion, do not use the English word all as an IPv4 ACL name.

Description

Use ppp account-statistics enable to enable PPP traffic statistics collection.

Use undo ppp account-statistics enable to disable PPP traffic statistics collection.

By default, PPP traffic statistics collection is disabled.

Examples

# Enable PPP traffic statistics collection on interface VT 1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] ppp account-statistics enable

ppp authentication-mode

Syntax

ppp authentication-mode { chap | ms-chap | ms-chap-v2 | pap } * [ [ call-in ] domain isp-name ]

undo ppp authentication-mode

View

VT interface view

Default level

2: System level

Parameters

chap: Uses challenge-handshake authentication protocol (CHAP) authentication.

ms-chap: Uses Microsoft CHAP (MS-CHAP) authentication.

ms-chap-v2: Uses Microsoft CHAP Version 2 (MS-CHAP-V2) authentication.

pap: Uses password authentication protocol (PAP) authentication.

call-in: Authenticates the call-in users only.

domain isp-name: Specifies the domain name for authentication, a string of 1 to 24 characters.

Description

Use ppp authentication-mode to configure the PPP authentication mode.

Use undo ppp authentication-mode to disable PPP authentication.

By default, PPP authentication is disabled.

If you configure the ppp authentication-mode command with the domain keyword specified, you must configure an address pool in the corresponding domain. (You can use the display domain command to display the domain configuration.)

If you configure the ppp authentication-mode command without specifying the domain name, the system checks the username for domain information. If the username contains a domain name, the domain will be used for authentication (If the domain does not exist, the user's access request will be denied). If not, the default domain is used (you can use the domain default command to configure the default domain; if no default domain is configured, the default domain system is used by default).

PPP authentication falls into PAP, CHAP, MS-CHAP, and MS-CHAP-V2 authentication.

· PAP authentication is two-way handshake authentication. The password used is in plain text.

· CHAP authentication is three-way handshake authentication. The password is in cipher text.

· MS-CHAP is a three-way handshake authentication. The password is in cipher text.

· MS-CHAP-V2 is a three-way handshake authentication. The password is in cipher text.

You can configure several authentication modes simultaneously. In addition, you can also use the AAA authentication algorithm list (if defined) to authenticate users.

In any PPP authentication mode, AAA determines whether a user can pass the authentication through a local authentication database or an AAA server.

For more information about creating a local user account, configuring its attributes, creating a domain, and configuring domain attributes, see Security Configuration Guide.

For authentication on a dial-up interface, configure authentication on both the physical interface and the dialer interface. Because when a physical interface receives a DCC call request, it first initiates PPP negotiation and authenticates the dial-in user, and then passes the call to the upper layer protocol.

Related commands: ppp chap user, ppp pap local-user, and ppp chap password; local-user and domain default (Security Command Reference).

Examples

# Configure interface VT 1 to authenticate the peer device by using PAP.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname- Virtual-Template 1] ppp authentication-mode pap domain system

# Configure interface VT 1 to authenticate the peer device by using PAP, CHAP, and MS-CHAP.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] ppp authentication-mode pap chap ms-chap domain system

ppp chap password

Syntax

ppp chap password { cipher | simple } password

undo ppp chap password

View

VT interface view

Default level

2: System level

Parameters

cipher: Displays the password in cipher text.

simple: Displays the password in plain text.

password: Default password for CHAP authentication, a string of 1 to 48 characters. When the simple keyword is used, this password is in plain text. When the cipher keyword is used, this password can either be in cipher text or in plain text. A password in plain text is a string of no more than 48 characters, such as aabbcc. A password in cipher text has a fixed length of 24 or 64 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!! and VV-F]7R%,TN$C1D*)O<-;<IX)aV\KMFAM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6.N.

Description

Use ppp chap password to set the default password for CHAP authentication.

Use undo ppp chap password to cancel the configuration.

Related commands: ppp authentication-mode chap.

Examples

# Set the default password for CHAP authentication to sysname, which is to be displayed in plain text.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname- Virtual-Template 1] ppp chap password simple sysname

ppp chap user

Syntax

ppp chap user username

undo ppp chap user

View

VT interface view

Default level

2: System level

Parameters

username: Username for CHAP authentication, a case-sensitive string of 1 to 80 characters. The username is sent to the peer device for the local device to be authenticated.

Description

Use ppp chap user to set the username for CHAP authentication.

Use undo ppp chap user to cancel the configuration.

By default, the username for CHAP authentication is null.

To pass CHAP authentication, the username/password of one side must be the local username/password of the peer.

Related commands: ppp authentication-mode.

Examples

# Set the username for CHAP authentication as Root on interface VT 1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] ppp chap user Root

ppp ipcp dns

Syntax

ppp ipcp dns primary-dns-address [ secondary-dns-address ]

undo ppp ipcp dns primary-dns-address [ secondary-dns-address ]

View

VT interface view

Default level

2: System level

Parameters

primary-dns-address: Primary DNS server IP address to be set.

secondary-dns-address: Secondary DNS server IP address to be set.

Description

Use ppp ipcp dns to configure the primary and secondary DNS server IP addresses to be used in PPP negotiation.

Use undo ppp ipcp dns to cancel the configuration.

By default, a device does not allocate DNS server IP addresses for its peer.

When connected through PPP, a device can assign DNS server IP addresses to its peer during PPP negotiation (if the peer requests) for the peer to access the network by domain names.

If a PC is connected to the device through PPP, you can execute the winipcfg command or the ipconfig /all command on the PC to check the DNS server IP addresses assigned by the device.

A device can provide a primary DNS server IP address and a secondary DNS server IP address to its peer.

Examples

# Set the primary DNS server IP address to 100.1.1.1 and the secondary DNS server IP address to 100.1.1.2 on interface VT 1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname- Virtual-Template 1] ppp ipcp dns 100.1.1.1 100.1.1.2

ppp ipcp dns admit-any

Syntax

ppp ipcp dns admit-any

undo ppp ipcp dns admit-any

View

VT interface view

Default level

2: System level

Parameters

None

Description

Use ppp ipcp dns admit-any to configure the device to accept the DNS server IP addresses assigned by the peer even though it does not request the peer for the DNS server IP addresses.

Use undo ppp ipcp dns admit-any to configure the device to deny the DNS server IP addresses assigned by the peer if it does not request the peer for the DNS server IP addresses.

By default, a device does not accept the DNS server IP addresses assigned by the peer if it does not request the peer for the DNS server IP addresses.

You can configure a device to accept the DNS server IP addresses assigned by the peer, through which domain names can be resolved for the device.

Examples

# Configure interface VT 1 of the local device to accept the DNS server IP addresses allocated by the peer.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname- Virtual-Template 1] ppp ipcp dns admit-any

ppp ipcp dns request

Syntax

ppp ipcp dns request

undo ppp ipcp dns request

View

VT interface view

Default level

2: System level

Parameters

None

Description

Use ppp ipcp dns request to enable a device to request its peer for the DNS server IP address actively through a port.

Use undo ppp ipcp dns request to restore the default.

By default, a device does not request its peer for the DNS server IP address actively.

You can configure a device to request its peer (especially in cases where a device is connected to the operator's access server through a dial-up link) for the DNS server address during PPP negotiation to enable domain names to be resolved for the device.

NOTE:

You can check the DNS server IP addresses of a port by displaying information about the port.

Examples

# Enable the device to request its peer for the DNS server IP address actively through interface VT 1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname- Virtual-Template 1] ppp ipcp dns request

ppp ipcp remote-address forced

Syntax

ppp ipcp remote-address forced

undo ppp ipcp remote-address forced

View

VT interface view

Default level

2: System level

Parameters

None

Description

Use ppp ipcp remote-address forced to configure a device to assign an IP address to the peer by force. This command also disables the peer from using a locally configured IP address.

Use undo ppp ipcp remote-address forced to cancel the configuration.

By default, the peer is allowed to use its locally configured IP address. The local end assigns an IP address to the peer only when being explicitly requested to do so. In case the peer already has an IP address, the local end will not assign one to the peer.

To disable the peer from using a locally configured IP address, perform the ppp ipcp remote-address forced command.

Related commands: remote address.

Examples

# Configure an optional IP address 10.0.0.1 on interface VT 1 for the peer.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] remote address 10.0.0.1

# Configure IP address 10.0.0.1 on interface Virtual-Template 2 for the peer and assign the IP address to the peer by force.

<Sysname> system-view

[Sysname] interface Virtual-Template 2

[Sysname-Virtual-Template 2] remote address 10.0.0.1

[Sysname-Virtual-Template 2 ppp ipcp remote-address forced

ppp pap local-user

Syntax

ppp pap local-user username password { cipher | simple } password

undo ppp pap local-user

View

VT interface view

Default level

2: System level

Parameters

username: Username of the local device for PAP authentication, a case-sensitive string of 1 to 80 characters.

cipher: Displays the password in cipher text.

simple: Displays the password in plain text.

password: Password of the local device for PAP authentication, a case-sensitive string of 1 to 48 characters. When the simple keyword is specified, provide this argument in plain text. When the cipher keyword is specified, provide this password in either cipher text or plain text. When provided in plain text, the password can contain no more than 48 characters (such as aabbcc); when provided in cipher text, the password must be fixed to 24 or 64 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!! and VV-F]7R%,TN$C1D*)O<-;<IX)aV\KMFAM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6.N.

Description

Use ppp pap local-user to set the local username and password for PAP authentication.

Use undo ppp pap local-user to cancel the local username and password configured.

By default, the username and the password for PAP authentication are not set.

For the local device to pass PAP authentication on the remote device, make sure that the same username and password configured for the local device are also configured on the remote device with the commands local-user username and password { cipher | simple } password.

Related commands: local-user and password (Security Command Reference).

Examples

# Configure the local username and password for PAP authentication as user1 and pass1 (in plain text).

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] ppp pap local-user user1 password simple pass1

ppp timer negotiate

Syntax

ppp timer negotiate seconds

undo ppp timer negotiate

View

VT interface view

Default level

2: System level

Parameters

seconds: Negotiation timeout time to be set, in the range of 1 to 10 (in seconds). In PPP negotiation, if the local device receives no response from the peer during this period after it sends a packet, the local device sends the last packet again.

Description

Use ppp timer negotiate to set the PPP negotiation timeout time.

Use undo ppp timer negotiate to restore the default.

By default, the PPP negotiation timeout time is three seconds.

Examples

# Set the PPP negotiation timeout time to five seconds.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] ppp timer negotiate 5

remote address

Syntax

remote address { ip-address | pool [ pool-number ] }

undo remote address

View

VT interface view

Default level

2: System level

Parameters

ip-address: IP address to be assigned to the peer device.

pool [ pool-number ]: Specifies the number of the address pool used for assigning an IP address to the peer. The pool-number argument ranges from 0 to 99 and defaults to 0.

Description

Use remote address to set the IP address to be assigned to the peer device or specify the address pool used for assigning an IP address to the peer device.

Use undo remote address to cancel the IP address configured to be assigned to the peer device.

By default, an interface does not assign IP addresses to the peer device.

The remote address command can be used when the local device is configured with an IP address, but the peer has no IP address. To enable the peer device to accept the IP address assigned to it by the local device, you must configure the ip address ppp-negotiate command on the peer device in addition to configuring the remote address command on the local device.

The IP address assigned to the peer device by the local device is not mandatory on the peer device, or the peer device can still use a locally configured IP address even if the local device assigned one to it. To make the IP address assigned by the local device mandatory, you must configure the ppp ipcp remote-address forced command.

After you use the remote address command to assign an IP address to the peer device, you cannot configure the remote address/undo remote address command for the peer again unless the peer releases the assigned IP address. Shut down the port to release the assigned IP address before you configure the remote address/undo remote address command for the peer. However, after you use the command to assign an IP address to the peer from the address pool of the specified domain through AAA authentication, you can configure the command for the peer again. In this case, the original assigned IP address can still work, and the newly assigned IP address is used when the original one is released or used by a new PPP access.

This command does not take effect until the next IPCP negotiation. To make the remote address command take effect, configure the remote address command before the ip address command.

Related commands: ip address ppp-negotiate and ppp ipcp remote-address forced.

Examples

# Specify the IP address to be assigned to the peer device through interface VT 1 as 10.0.0.1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] remote address 10.0.0.1

reset counters interface virtual-template

Syntax

reset counters interface [ virtual-template [ interface-number ] ]

View

User view

Default level

2: System level

Parameters

interface-number: Number of a VT interface.

Description

Use reset counters interface virtual-template to clear statistics on VT interfaces.

Before collecting traffic statistics within a specific period of time on a VT interface, clear the existing statistics.

If you do not specify the virtual-template keyword, this command clears statistics on all interfaces.

If you specify the virtual-template keyword without the interface-number argument, this command clears statistics on all VT interfaces.

Examples

# Clear statistics on interface VT 10.

<Sysname> reset counters interface virtual-template 10

timer hold

Syntax

timer hold seconds

undo timer hold

View

VT interface view

Default level

2: System level

Parameters

seconds: Interval (in seconds) for sending keepalive packets, in the range 0 to 32767. A value of 0 disables keepalive packet sending.

Description

Use timer hold to set the interval for sending keepalive packets.

Use undo timer hold to restore the default, or 10 seconds.

Because a slow link takes a long period of time to transmit large packets, the sending and receiving of keepalives may be delayed so long that one end cannot receive keepalive packets from the peer for a specific number of keepalive periods and shuts down the link. To prevent this, set the interval for sending keepalive packets to a relatively longer length of time.

Examples

# Set the interval for sending keepalive packets to 20 seconds on interface VT 1.

<Sysname> system-view

[Sysname] interface Virtual-Template 1

[Sysname-Virtual-Template 1] timer hold 20

PPPoE server configuration commands

display pppoe-server session

Syntax

display pppoe-server session all [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays all the information about PPPoE sessions.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display pppoe-server session to display information about PPPoE sessions on a device operating as a PPPoE server.

Examples

# Display all the information about PPPoE sessions (assuming that the current device operates as a PPPoE server).

<Sysname> display pppoe-server session all

Total PPPoE Session(s): 2

SID Intf State OIntf RemMAC LocMAC

1 Virtual-Template1:0 UP VLAN1 00e015004100 00e014004300

1 Virtual-Template2:0 UP VLAN1 00e016004100 00e015004300

Table 2 Command output

Field	Description
SID	PPPoE session ID
Intf	VT interface
State	PPPoE session state
OIntf	Corresponding VLAN interface
RemMAC	Peer MAC address
LocMAC	Local MAC address

pppoe-server abnormal-offline-count threshold

Syntax

pppoe-server abnormal-offline-count threshold number

undo pppoe-server abnormal-offline-count threshold

View

System view

Default level

2: System level

Parameters

number: Upper threshold for the PPPoE abnormal offline event count in five minutes, in the range of 0 to 65535.

Description

Use pppoe-server abnormal-offline-count threshold to set the upper threshold for the PPPoE abnormal offline event count in five minutes.

Use undo pppoe-server abnormal-offline-count threshold to restore the default.

By default, the upper threshold for the PPPoE abnormal offline event count in five minutes is 65535.

If the PPPoE abnormal offline event count in the last five minutes exceeds this threshold, the system outputs a trap message.

Examples

# Set the upper threshold for the PPPoE abnormal offline event count in five minutes to 100.

<Sysname> system-view

[Sysname] pppoe-server abnormal-offline-count threshold 100

pppoe-server abnormal-offline-percent threshold

Syntax

pppoe-server abnormal-offline-percent threshold number

undo pppoe-server abnormal-offline-percent threshold

View

System view

Default level

2: System level

Parameters

number: Upper threshold for the PPPoE abnormal offline event percentage, in the range of 0 to 100.

Description

Use pppoe-server abnormal-offline-percent threshold to set the upper threshold for the PPPoE abnormal offline event percentage in five minutes.

Use undo pppoe-server abnormal-offline-percent threshold to restore the default.

By default, the upper threshold for the PPPoE abnormal offline event percentage in five minutes is 100.

If the PPPoE abnormal offline event percentage in the last five minutes exceeds this threshold, the system outputs a trap message.

PPPoE abnormal offline event percentage = 100 x Abnormal offline event count/(Abnormal offline event count + Normal offline event count).

Related commands: pppoe-server normal-offline-percent threshold.

Examples

# Set the upper threshold for the PPPoE abnormal offline event percentage to 10.

<Sysname> system-view

[Sysname] pppoe-server abnormal-offline-percent threshold 10

pppoe-server bind

Syntax

pppoe-server bind virtual-template number

undo pppoe-server bind

View

Interface view

Default level

2: System level

Parameters

virtual template number: Specifies a virtual-template interface number, in the range of 0 to 1023.

Description

Use pppoe-server bind to enable PPPoE on a VLAN interface and bind the VLAN interface to a virtual-template interface.

Use undo pppoe-server bind to disable PPPoE on a VLAN interface.

By default, PPPoE is disabled.

Examples

# Enable PPPoE on interface VLAN-interface 1 and bind the VLAN interface to VT 1.

<Sysname> system-view

[Sysname] interface Vlan-interface 1

[Sysname-Vlan-interface1] pppoe-server bind virtual-template 1

pppoe-server log-information off

Syntax

pppoe-server log-information off

undo pppoe-server log-information off

View

System view

Default level

2: System level

Parameters

None

Description

Use pppoe-server log-information off to disable PPP log displaying on a device operating as a PPPoE server.

Use undo pppoe-server log-information off to enable PPP log displaying on a device operating as a PPPoE server.

By default, PPP log displaying is enabled on a PPPoE server.

With PPP log displaying enabled, large amounts of log information can affect device performance and be a nuisance to users during configuration. You can disable PPP log displaying by using the pppoe-server log-information off command.

Examples

# Disable PPP log displaying.

<Sysname> system-view

[Sysname] pppoe-server log-information off

pppoe-server max-sessions local-mac

Syntax

pppoe-server max-sessions local-mac number

undo pppoe-server max-sessions local-mac

View

System view

Default level

2: System level

Parameters

number: Maximum number of sessions allowed with regard to the local MAC address. The value range depends on your device model. For more information, see About the WX Series Access Controllers Command References.

Description

Use pppoe-server max-sessions local-mac to set the maximum number of PPPoE sessions allowed with regard to the local MAC address on a device operating as a PPPoE server.

Use undo pppoe-server max-sessions local-mac to restore the default.

By default, the maximum number of PPPoE sessions allowed with regard to the local MAC address is 100.

Examples

# Set the maximum number of PPPoE sessions allowed with regard to the local MAC address to 50 (assuming that the device operates as a PPPoE server).

<Sysname> system-view

[Sysname] pppoe-server max-sessions local-mac 50

pppoe-server max-sessions remote-mac

Syntax

pppoe-server max-sessions remote-mac number

undo pppoe-server max-sessions remote-mac

View

System view

Default level

2: System level

Parameters

number: Maximum number of PPPoE sessions allowed by the entire system with regard to a peer MAC address (for centralized devices) or allowed by each I/O card with regard to a peer MAC address (for distributed devices), in the range of 1 to 4096.

Description

Use pppoe-server max-sessions remote-mac to set the maximum number of PPPoE sessions allowed with regard to a peer MAC address.

Use undo pppoe-server max-sessions remote-mac to restore the default.

By default, the maximum number of PPPoE sessions allowed with regard to a peer MAC address is 100.

Examples

# Set the maximum number of PPPoE sessions allowed with regard to a peer MAC address to 50.

<Sysname> system-view

[Sysname] pppoe-server max-sessions remote-mac 50

pppoe-server max-sessions total

Syntax

pppoe-server max-sessions total number

undo pppoe-server max-sessions total

View

System view

Default level

2: System level

Parameters

chassis chassis-number: Specifies a device by its member ID in the IRF fabric.

slot slot-number: Specifies a board by its slot number.

number: Maximum number of PPPoE sessions allowed. The value range for the number argument varies by device model. For more information, see About the WX Series Access Controllers Command References.

Description

Use pppoe-server max-sessions total to set the maximum number of PPPoE sessions allowed.

Use undo pppoe-server max-sessions total to restore the default.

By default, the maximum number of PPPoE sessions allowed varies by device models. For more information, see About the WX Series Access Controllers Command References.

Examples

# Set the maximum number of PPPoE sessions allowed to 3000 in the system.

<Sysname> system-view

[Sysname] pppoe-server max-sessions total 3000

pppoe-server normal-offline-percent threshold

Syntax

pppoe-server normal-offline-percent threshold number

undo pppoe-server normal-offline-percent threshold

View

System view

Default level

2: System level

Parameters

number: Lower threshold for the PPPoE normal offline event percentage, in the range of 0 to 100.

Description

Use pppoe-server normal-offline-percent threshold to set the lower threshold for the PPPoE normal offline event percentage.

Use undo pppoe-server normal-offline-percent threshold to restore the default.

By default, the lower threshold for the PPPoE normal offline event percentage is 0.

If the PPPoE normal offline event percentage in the last five minutes is lower than this threshold, the system outputs a trap message.

PPPoE normal offline event percentage = 100 – PPPoE abnormal offline event percentage.

Related commands: pppoe-server abnormal-offline-percent threshold.

Examples

# Set the lower threshold for the PPPoE normal offline event percentage to 10.

<Sysname> system-view

[Sysname] pppoe-server normal-offline-percent threshold 10

reset pppoe-server

Syntax

reset pppoe-server { all | interface interface-type interface-number | virtual-template number }

View

User view

Default level

2: System level

Parameters

all: Terminates all the PPPoE sessions.

interface interface-type interface-number: Specifies a port by its type and number.

virtual-template number: Specifies a virtual template interface number.

Description

Use reset pppoe-server to terminate a PPPoE session on the server side.

Examples

# Terminate the session established based on interface VT 1.

<Sysname> reset pppoe-server virtual-template 1

03-Layer 2 Command Reference

PPP configuration commands

mtu

ppp chap user

ppp ipcp dns admit-any

ppp ipcp dns request

pppoe-server max-sessions local-mac

pppoe-server max-sessions total

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us