virtual-access [ interface-number ]: Specifies an existing VA interface by its number. If you do not specify the virtual-access keyword, the command displays information about all interfaces except VA interfaces on the device. If you specify the virtual-access keyword without the interface-number argument, the command displays information about all VA interfaces.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays interface description information. This keyword does not apply to VA interfaces because VA interfaces do not support description configuration.

down: Displays information about interfaces in physically down state and the causes. If you do not specify this keyword, the command displays information about all interfaces.

Examples

# Display information about Virtual-Access 1.

<Sysname> display interface virtual-access 1

Virtual-Access1

Current state: UP

Line protocol state: UP

Description: Virtual-Access1 Interface

Bandwidth: 1920kbps

Maximum transmission unit: 1500

Hold timer: 10 seconds, retry times: 5

Internet address: 122.1.1.1/24 (primary)

Link layer protocol: PPP

LCP: opened, MP: opened, IPCP: opened

Physical: MP, baudrate: 1920000 bps

Main interface: Virtual-Template1

Output queue - Urgent queuing: Size/Length/Discards 0/100/0

Output queue - Protocol queuing: Size/Length/Discards 0/500/0

Output queue - FIFO queuing: Size/Length/Discards 0/75/0

Last link flapping: Never

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 2 packets, 24 bytes, 0 drops

Output: 2 packets, 24 bytes, 0 drops

# Display brief information about Virtual-Access 1.

<Sysname> display interface virtual-access 1 brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Primary IP Description

VA1 DOWN DOWN --

# Display brief information about VA interfaces in physically down state and the causes.

<Sysname> display interface virtual-access brief down

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Interface Link Cause

VA1 DOWN Not connected

Table 1 Command output

Field	Description
Current state	Physical and administrative states of the interface: · DOWN—The interface is administratively up but physically down. · UP—The interface is both administratively and physically up.
Line protocol state	Data link layer state: UP or DOWN.
Description	Interface description.
Bandwidth	Expected bandwidth of the interface.
Hold timer	Interval at which the interface sends keepalive packets.
retry times	Keepalive retry limit. The interface determines that its peer has been down if it does not receive a keepalive response when the keepalive retry limit is reached.
Internet protocol processing: Disabled	The interface cannot process IP packets currently.
Internet address: ip-address/mask-length (Type)	IP address of the interface and type of the address in parentheses. Possible IP address types include: · Primary—Manually configured primary IP address. · Sub—Manually configured secondary IP address. If the interface has both primary and secondary IP addresses, the primary IP address is displayed. If the interface has only secondary IP addresses, the lowest secondary IP address is displayed. · DHCP-allocated—DHCP allocated IP address. For more information, see DHCP client configuration in Layer 3—IP Services Configuration Guide. · BOOTP-allocated—BOOTP allocated IP address. For more information, see BOOTP client configuration in Layer 3—IP Services Configuration Guide. · PPP-negotiated—IP address assigned by a PPP server during PPP negotiation. For more information, see PPP configuration in Layer 2—WAN Access Configuration Guide. · Unnumbered—IP address borrowed from another interface. · MAD—IP address assigned to an IRF member device for MAD on the interface. For more information, see IRF configuration in Virtual Technologies Configuration Guide. · MTunnel—IP address of the multicast tunnel interface (MTI), which is the same as the IP address of the MVPN source interface. For more information, see multicast VPN configuration in IP Multicast Configuration Guide.
LCP: opened, MP: opened, IPCP: opened	The PPP connection has been successfully established.
Physical	Physical type of the interface.
Main interface	VT interface associated with the VA interface.
Output queue - Urgent queuing: Size/Length/Discards 0/100/0 Output queue - Protocol queuing: Size/Length/Discards 0/500/0 Output queue - FIFO queuing: Size/Length/Discards 0/75/0	Traffic statistics of the interface output queues.
Last link flapping	The amount of time that has elapsed since the most recent physical state change of the interface. This field displays Never if the interface has been physically down since device startup.
Last clearing of counters: Never	Last time when statistics on the interface were cleared. Never indicates that statistics on the interface were never cleared.
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec	Average rate of input packets and output packets in the last 300 seconds.
Input: 2 packets, 24 bytes, 0 drops	Total number of inbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the inbound packets.
Output: 2 packets, 24 bytes, 0 drops	Total number of outbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the outbound packets.
Brief information on interfaces in route mode	Brief information about Layer 3 interfaces.
Link: ADM - administratively down; Stby - standby	Link status: · ADM—The interface has been administratively shut down. To recover its physical state, execute the undo shutdown command. · Stby—The interface is a backup interface. To see the primary interface, use the display interface-backup state command in High Availability Command Reference.
Protocol: (s) - spoofing	Indicates the line protocol is UP, but the physical link is an on-demand link or is not present.
Interface	Abbreviated interface name.
Link	Physical link state of the interface: · UP—The interface is physically up. · DOWN—The interface is physically down.
Protocol	Line protocol state: · UP—The line protocol is up. · DOWN—The line protocol is down. · UP(s)—The line protocol is up, but the physical link is an on-demand link or is not present.
Primary IP	Primary IP address of the interface.
Description	Interface description configured by using the description command. This field does not apply to VA interfaces because VA interfaces do not support description configuration.
Cause	Cause for the physical state of the interface to be Down. Not connected indicates no physical link exists (possibly because the network cable is disconnected or faulty).

‌

Related commands

reset counters interface virtual-access

display ip pool

Use display ip pool to display PPP address pools.

Syntax

display ip pool [ pool-name | group group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

pool-name: Specifies a PPP address pool by its name, a case-sensitive string of 1 to 31 characters.

group group-name: Displays PPP address pools in a group specified by its name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

If you do not specify any parameters, the command displays brief information about all PPP address pools.

If you specify an address pool, the command displays detailed information about the specified PPP address pool.

Examples

# Display brief information about all PPP address pools.

<Sysname> display ip pool

Group name: a

Pool name Start IP address End IP address Free In use

aaa1 1.1.1.1 1.1.1.5 5 0

aaa2 1.1.1.6 1.1.1.10 5 0

Group name: b

Pool name Start IP address End IP address Free In use

bbb 1.1.2.1 1.1.2.5 4 1

2.2.2.1 2.2.2.5 5 0

# Display brief information about the PPP address pools in group a.

<Sysname> display ip pool group a

Group name: a

Pool name Start IP address End IP address Free In use

aaa1 1.1.1.1 1.1.1.5 5 0

aaa2 1.1.1.6 1.1.1.10 5 0

# Display detailed information about PPP address pool bbb.

<Sysname> display ip pool bbb

Group name: b

Pool name Start IP address End IP address Free In use

bbb 1.1.2.1 1.1.2.5 4 1

2.2.2.1 2.2.2.5 5 0

In use IP addresses:

IP address Interface

1.1.2.1 Virtual-Template1

Table 2 Command output

Field	Description
Free	Number of free IP addresses.
In use	Number of IP addresses that have been assigned.
In use IP addresses	Information about the IP addresses that have been assigned.
Interface	Local interface that requests the IP address for the peer interface.

‌

Related commands

ip pool

display ppp access-user

Use display ppp access-user to display PPP user information.

Syntax

display ppp access-user { domain domain-name | interface interface-type interface-number [ count ] | ip-address ipv4-address | ipv6-address ipv6-address| username user-name | user-type { lac | lns | pppoa| pppoe } [ count ] }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

domain domain-name: Displays information about PPP access users coming online through an ISP domain specified by its name, a case-sensitive string of 1 to 255 characters.

interface interface-type interface-number: Displays brief information about PPP users on the specified interface.

ip-address ipv4-address: Displays detailed information about the PPP user specified by its IPv4 address.

ipv6-address ipv6-address: Displays detailed information about the PPP user specified by its IPv6 address.

username user-name: Displays detailed information about the PPP user specified by its username, a case-sensitive string of 1 to 80 characters.

user-type: Displays brief information about online users of the specified type.

lac: Displays brief information about L2TP users for an LAC.

lns: Displays brief information about L2TP users for an LNS.

pppoa: Displays brief information about PPPoA users.

pppoe: Displays brief information about PPPoE users.

count: Displays the total number of PPP users matching the specified criterion.

Usage guidelines

Brief information about a PPP user includes the following:

· Brief name of the VA interface.

· Username.

· MAC address.

· IPv4 address, IPv6 address, or IPv6 prefix of the PPP user.

Detailed information about a PPP user includes the following:

· Brief name of the VA interface.

· User ID.

· Username.

· Authentication information.

· Uplink and downlink traffic.

· Access start time of the PPP user.

Examples

# Display brief information about PPP users on GigabitEthernet 1/0.

<Sysname> display ppp access-user interface gigabitethernet 1/0

Interface Username MAC address IP address IPv6 address IPv6 PDPrefix

VA0 user1@dm1 0001-0101-9101 192.168.100.173 - -

VA1 user2@dm2 0001-0101-9101 192.168.80.173 2000::1 -

# Display the total number of PPP users on GigabitEthernet 1/0.

<Sysname> display ppp access-user interface gigabitethernet 1/0 count

Total users: 2

Table 3 Command output

Field	Description
Interface	Name of the VA interface corresponding to the user.
Username	Username of the user. A hyphen (-) means that the user does not need authentication.
MAC address	MAC address of the user. A hyphen (-) means that the user is not a PPPoE user.
IP address	IP address of the user. A hyphen (-) means that no IP address is assigned to the user.
IPv6 address	‌IPv6 address of the user. A hyphen (-) means that no IPv6 address is assigned to the user.
IPv6 PD prefix	‌IPv6 prefix of the user. A hyphen (-) means that no IPv6 prefix is assigned to the user.
Total users	Total number of PPP users.

‌

# Display detailed information about the PPP user whose IP address is 50.50.50.3.

<Sysname> display ppp access-user ip-address 50.50.50.3

Basic:

Interface: VA0

User ID: 0x28000002

Username: user1@hrss

Domain: hrss

Access interface: RAGG2

Service-VLAN/Customer-VLAN: -/-

MAC address: 0000-0000-0001

IP address: 50.50.50.3

IPv6 address: -

IPv6 PD prefix: -

VPN instance: 123

Access type: PPPoE

Authentication type: CHAP

AAA:

Authentication state: Authenticated

Authorization state: Authorized

Realtime accounting switch: Open

Realtime accounting interval: 60s

Accounting start time: 2013-1-19 2:42:3:382

Online time(hh:mm:ss): 0:7:34

Accounting state: Accounting

Idle cut: 0 sec 0 byte

Session timeout: 12000 s

Time remained: 8000 s

Traffic quota: -

Traffic remained: -

Redirect WebURL: http://6.6.6.6

ACL&QoS:

User profile: profile123 (active)

User group profile: -

Inbound CAR: CIR 64000bps PIR 640000bps CBS 500bit

Outbound CAR: CIR 64000bps PIR 640000bps CBS 500bit

NAT:

Global IP address: 111.8.0.200

Port block: 28744-28748

Flow Statistic:

IPv4 uplink packets/bytes: 7/546

IPv4 downlink packets/bytes: 0/0

IPv6 uplink packets/bytes: 0/0

IPv6 downlink packets/bytes: 0/0

ITA:

Level-1 uplink packets/bytes: 100/128000

downlink packets/bytes: 200/256000

Level-2 uplink packets/bytes: 100/128000

downlink packets/bytes: 200/256000

Table 4 Command output

Field	Description
Basic	Basic information.
Interface	Brief name of the VA interface that corresponds to the user.
Username	Username of the user. A hyphen (-) means that the user does not need authentication.
Domain	ISP domain name for authentication. A hyphen (-) means that no ISP domain is specified for authentication.
Access interface	Name of the access interface of the user.
Service-VLAN/Customer-VLAN	Service provider VLAN and customer VLAN information of the user. A hyphen (-) means that no VLAN information is available.
IP address	IP address of the user. A hyphen (-) means that no IP address is assigned to the user.
IPv6 address	‌IPv6 address of the user. A hyphen (-) means that no IPv6 address is assigned to the user.
IPv6 PD prefix	‌Delegated IPv6 prefix of the user. A hyphen (-) means that no delegated IPv6 prefix is assigned to the user.
VPN instance	‌VPN instance to which the user belongs. A hyphen (-) means that the user is not bound to any VPN instance.
Access type	Access type of the user: · PPPoE. · PPPoA. · L2TP.
Authentication type	Authentication type of the user: · PAP. · CHAP. · MS-CHAP. · MS-CHAP-V2.
Authentication state	Authentication state of the user: · Idle—The user has not been authenticated. · Authenticating—The user is being authenticated. · Authenticated—The user has been authenticated.
Authorization state	Authorization state of the user: · Idle—The user has not been authorized. · Authorizing—The user is being authorized. · Authorized—The user has been authorized.
Realtime accounting switch	· Open—The switch is on. · Closed—The switch is off.
Realtime accounting interval	Realtime accounting interval in seconds. A hyphen (-) means that no real-time accounting interval is authorized.
Login time	Time when the user accessed the device through PPP.
Accounting start time	Time when accounting started. A hyphen (-) means that no accounting is performed on the user.
Online time(hh:mm:ss)	Online duration of the current login.
Accounting state	Accounting state of the user: · Accounting—Accounting is on. · Stop—Accounting stops.
Idle cut	Traffic threshold for logging off the user in idle state. If the traffic is less than the threshold within the specified period, the user is forcibly logged off.
Session timeout	Authorization time for the user, in seconds. A hyphen (-) means that no authorization time is specified for the user.
Time remained	Remaining time for the user to stay online, in seconds. A hyphen (-) means that no authorization time is specified for the user.
Traffic quota	Authorized traffic quota for the user, in bytes. A hyphen (-) means that no traffic quota is authorized to the user.
Traffic remained	Remaining traffic for the user, in bytes. A hyphen (-) means that no traffic quota is authorized to the user.
Redirect WebURL	Redirect Web URL address for the user. A hyphen (-) means that no redirect Web URL address is specified for the user.
User profile	Name of the authorized user profile. The hyphen (-) means that no user profile is authorized. The user profile has two states: · active—The authorized user profile is successfully issued. · inactive—The authorized user profile fails to be issued.
User group profile	Name of the authorized user group profile. The hyphen (-) means that no user group profile is authorized. The user group profile has two states: · active—The authorized user group profile is successfully issued. · inactive—The authorized user group profile fails to be issued.
Inbound CAR	Authorized inbound CAR parameters, which contain the CIR (in bps), the PIR (in bps), and the CBS (in bits).
Outbound CAR	Authorized outbound CAR parameters, which contain the CIR (in bps), the PIR (in bps), and the CBS (in bits).
Global IP address	Global IP address of the user. This field is displayed if NAT444 is used. For information about NAT444, see Layer 3—IP Services Configuration Guide.
Port block	Port block of the user, from the start port to the end port. This field is displayed if NAT444 is used.
IPv4 uplink packets/bytes	Number of packets and bytes for IPv4 uplink traffic.
IPv4 downlink packets/bytes	Number of packets and bytes for IPv4 downlink traffic.
IPv6 uplink packets/bytes	‌Number of packets and bytes for IPv6 uplink traffic.
IPv6 downlink packets/bytes	‌Number of packets and bytes for IPv6 downlink traffic.
Level-n uplink packets/bytes downlink packets/bytes	Number of packets and bytes for uplink traffic at accounting level n. The value for n depends on the traffic level command, and its value range is 1 to 8.

‌

Related commands

reset ppp access-user

display ppp packet statistics

Use display ppp packet statistics to display PPP negotiation packet statistics.

Syntax

In standalone mode:

display ppp packet statistics

In IRF mode:

display ppp packet statistics [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays PPP negotiation packet statistics for all IRF member devices. (In IRF mode.)

Examples

# (In standalone mode.) Display PPP negotiation packet statistics for slot 2 of IRF member device 1.

<Sysname> display ppp packet statistics

PPP packet statistics:

-------------------------------LCP------------------------------------

SEND_LCP_CON_REQ : 0 RECV_LCP_CON_REQ : 0

SEND_LCP_CON_NAK : 0 RECV_LCP_CON_NAK : 0

SEND_LCP_CON_REJ : 0 RECV_LCP_CON_REJ : 0

SEND_LCP_CON_ACK : 0 RECV_LCP_CON_ACK : 0

SEND_LCP_CODE_REJ : 0 RECV_LCP_CODE_REJ : 0

SEND_LCP_PROT_REJ : 0 RECV_LCP_PROT_REJ : 0

SEND_LCP_TERM_REQ : 0 RECV_LCP_TERM_REQ : 0

SEND_LCP_TERM_ACK : 0 RECV_LCP_TERM_ACK : 0

SEND_LCP_ECHO_REQ : 0 RECV_LCP_ECHO_REQ : 0

SEND_LCP_ECHO_REP : 0 RECV_LCP_ECHO_REP : 0

SEND_LCP_FAIL : 0

-------------------------------IPCP-----------------------------------

SEND_IPCP_CON_REQ : 0 RECV_IPCP_CON_REQ : 0

SEND_IPCP_CON_NAK : 0 RECV_IPCP_CON_NAK : 0

SEND_IPCP_CON_REJ : 0 RECV_IPCP_CON_REJ : 0

SEND_IPCP_CON_ACK : 0 RECV_IPCP_CON_ACK : 0

SEND_IPCP_CODE_REJ : 0 RECV_IPCP_CODE_REJ : 0

SEND_IPCP_PROT_REJ : 0 RECV_IPCP_PROT_REJ : 0

SEND_IPCP_TERM_REQ : 0 RECV_IPCP_TERM_REQ : 0

SEND_IPCP_TERM_ACK : 0 RECV_IPCP_TERM_ACK : 0

SEND_IPCP_FAIL : 0

-------------------------------IPV6CP---------------------------------

SEND_IPV6CP_CON_REQ : 0 RECV_IPV6CP_CON_REQ : 0

SEND_IPV6CP_CON_NAK : 0 RECV_IPV6CP_CON_NAK : 0

SEND_IPV6CP_CON_REJ : 0 RECV_IPV6CP_CON_REJ : 0

SEND_IPV6CP_CON_ACK : 0 RECV_IPV6CP_CON_ACK : 0

SEND_IPV6CP_CODE_REJ : 0 RECV_IPV6CP_CODE_REJ : 0

SEND_IPV6CP_PROT_REJ : 0 RECV_IPV6CP_PROT_REJ : 0

SEND_IPV6CP_TERM_REQ : 0 RECV_IPV6CP_TERM_REQ : 0

SEND_IPV6CP_TERM_ACK : 0 RECV_IPV6CP_TERM_ACK : 0

SEND_IPV6CP_FAIL : 0

-------------------------------OSICP---------------------------------

SEND_OSICP_CON_REQ : 0 RECV_OSICP_CON_REQ : 0

SEND_OSICP_CON_NAK : 0 RECV_OSICP_CON_NAK : 0

SEND_OSICP_CON_REJ : 0 RECV_OSICP_CON_REJ : 0

SEND_OSICP_CON_ACK : 0 RECV_OSICP_CON_ACK : 0

SEND_OSICP_CODE_REJ : 0 RECV_OSICP_CODE_REJ : 0

SEND_OSICP_PROT_REJ : 0 RECV_OSICP_PROT_REJ : 0

SEND_OSICP_TERM_REQ : 0 RECV_OSICP_TERM_REQ : 0

SEND_OSICP_TERM_ACK : 0 RECV_OSICP_TERM_ACK : 0

SEND_OSICP_FAIL : 0

-------------------------------MPLSCP---------------------------------

SEND_MPLSCP_CON_REQ : 0 RECV_MPLSCP_CON_REQ : 0

SEND_MPLSCP_CON_NAK : 0 RECV_MPLSCP_CON_NAK : 0

SEND_MPLSCP_CON_REJ : 0 RECV_MPLSCP_CON_REJ : 0

SEND_MPLSCP_CON_ACK : 0 RECV_MPLSCP_CON_ACK : 0

SEND_MPLSCP_CODE_REJ : 0 RECV_MPLSCP_CODE_REJ : 0

SEND_MPLSCP_PROT_REJ : 0 RECV_MPLSCP_PROT_REJ : 0

SEND_MPLSCP_TERM_REQ : 0 RECV_MPLSCP_TERM_REQ : 0

SEND_MPLSCP_TERM_ACK : 0 RECV_MPLSCP_TERM_ACK : 0

SEND_MPLSCP_FAIL : 0

--------------------------------AUTH ----------------------------------

SEND_PAP_AUTH_REQ : 0 RECV_PAP_AUTH_REQ : 0

SEND_PAP_AUTH_ACK : 0 RECV_PAP_AUTH_ACK : 0

SEND_PAP_AUTH_NAK : 0 RECV_PAP_AUTH_NAK : 0

SEND_CHAP_AUTH_CHALLENGE : 0 RECV_CHAP_AUTH_CHALLENGE : 0

SEND_CHAP_AUTH_RESPONSE : 0 RECV_CHAP_AUTH_RESPONSE : 0

SEND_CHAP_AUTH_ACK : 0 RECV_CHAP_AUTH_ACK : 0

SEND_CHAP_AUTH_NAK : 0 RECV_CHAP_AUTH_NAK : 0

SEND_PAP_AUTH_FAIL : 0 SEND_CHAP_AUTH_FAIL : 0

# (In IRF mode.) Display PPP negotiation packet statistics for slot 1.

<Sysname> display ppp packet statistics slot 1

PPP packet statistics in slot 1:

-------------------------------LCP------------------------------------

SEND_LCP_CON_REQ : 0 RECV_LCP_CON_REQ : 0

SEND_LCP_CON_NAK : 0 RECV_LCP_CON_NAK : 0

SEND_LCP_CON_REJ : 0 RECV_LCP_CON_REJ : 0

SEND_LCP_CON_ACK : 0 RECV_LCP_CON_ACK : 0

SEND_LCP_CODE_REJ : 0 RECV_LCP_CODE_REJ : 0

SEND_LCP_PROT_REJ : 0 RECV_LCP_PROT_REJ : 0

SEND_LCP_TERM_REQ : 0 RECV_LCP_TERM_REQ : 0

SEND_LCP_TERM_ACK : 0 RECV_LCP_TERM_ACK : 0

SEND_LCP_ECHO_REQ : 0 RECV_LCP_ECHO_REQ : 0

SEND_LCP_ECHO_REP : 0 RECV_LCP_ECHO_REP : 0

SEND_LCP_FAIL : 0

-------------------------------IPCP-----------------------------------

SEND_IPCP_CON_REQ : 0 RECV_IPCP_CON_REQ : 0

SEND_IPCP_CON_NAK : 0 RECV_IPCP_CON_NAK : 0

SEND_IPCP_CON_REJ : 0 RECV_IPCP_CON_REJ : 0

SEND_IPCP_CON_ACK : 0 RECV_IPCP_CON_ACK : 0

SEND_IPCP_CODE_REJ : 0 RECV_IPCP_CODE_REJ : 0

SEND_IPCP_PROT_REJ : 0 RECV_IPCP_PROT_REJ : 0

SEND_IPCP_TERM_REQ : 0 RECV_IPCP_TERM_REQ : 0

SEND_IPCP_TERM_ACK : 0 RECV_IPCP_TERM_ACK : 0

SEND_IPCP_FAIL : 0

-------------------------------IPV6CP---------------------------------

SEND_IPV6CP_CON_REQ : 0 RECV_IPV6CP_CON_REQ : 0

SEND_IPV6CP_CON_NAK : 0 RECV_IPV6CP_CON_NAK : 0

SEND_IPV6CP_CON_REJ : 0 RECV_IPV6CP_CON_REJ : 0

SEND_IPV6CP_CON_ACK : 0 RECV_IPV6CP_CON_ACK : 0

SEND_IPV6CP_CODE_REJ : 0 RECV_IPV6CP_CODE_REJ : 0

SEND_IPV6CP_PROT_REJ : 0 RECV_IPV6CP_PROT_REJ : 0

SEND_IPV6CP_TERM_REQ : 0 RECV_IPV6CP_TERM_REQ : 0

SEND_IPV6CP_TERM_ACK : 0 RECV_IPV6CP_TERM_ACK : 0

SEND_IPV6CP_FAIL : 0

-------------------------------OSICP---------------------------------

SEND_OSICP_CON_REQ : 0 RECV_OSICP_CON_REQ : 0

SEND_OSICP_CON_NAK : 0 RECV_OSICP_CON_NAK : 0

SEND_OSICP_CON_REJ : 0 RECV_OSICP_CON_REJ : 0

SEND_OSICP_CON_ACK : 0 RECV_OSICP_CON_ACK : 0

SEND_OSICP_CODE_REJ : 0 RECV_OSICP_CODE_REJ : 0

SEND_OSICP_PROT_REJ : 0 RECV_OSICP_PROT_REJ : 0

SEND_OSICP_TERM_REQ : 0 RECV_OSICP_TERM_REQ : 0

SEND_OSICP_TERM_ACK : 0 RECV_OSICP_TERM_ACK : 0

SEND_OSICP_FAIL : 0

-------------------------------MPLSCP---------------------------------

SEND_MPLSCP_CON_REQ : 0 RECV_MPLSCP_CON_REQ : 0

SEND_MPLSCP_CON_NAK : 0 RECV_MPLSCP_CON_NAK : 0

SEND_MPLSCP_CON_REJ : 0 RECV_MPLSCP_CON_REJ : 0

SEND_MPLSCP_CON_ACK : 0 RECV_MPLSCP_CON_ACK : 0

SEND_MPLSCP_CODE_REJ : 0 RECV_MPLSCP_CODE_REJ : 0

SEND_MPLSCP_PROT_REJ : 0 RECV_MPLSCP_PROT_REJ : 0

SEND_MPLSCP_TERM_REQ : 0 RECV_MPLSCP_TERM_REQ : 0

SEND_MPLSCP_TERM_ACK : 0 RECV_MPLSCP_TERM_ACK : 0

SEND_MPLSCP_FAIL : 0

--------------------------------AUTH ----------------------------------

SEND_PAP_AUTH_REQ : 0 RECV_PAP_AUTH_REQ : 0

SEND_PAP_AUTH_ACK : 0 RECV_PAP_AUTH_ACK : 0

SEND_PAP_AUTH_NAK : 0 RECV_PAP_AUTH_NAK : 0

SEND_CHAP_AUTH_CHALLENGE : 0 RECV_CHAP_AUTH_CHALLENGE : 0

SEND_CHAP_AUTH_RESPONSE : 0 RECV_CHAP_AUTH_RESPONSE : 0

SEND_CHAP_AUTH_ACK : 0 RECV_CHAP_AUTH_ACK : 0

SEND_CHAP_AUTH_NAK : 0 RECV_CHAP_AUTH_NAK : 0

SEND_PAP_AUTH_FAIL : 0 SEND_CHAP_AUTH_FAIL : 0

Table 5 Command output

Field	Description
LCP	LCP packet statistics. · SEND_LCP_CON_REQ—Number of sent link configuration request packets. · RECV_LCP_CON_REQ—Number of received link configuration request packets. · SEND_LCP_CON_NAK—Number of sent link configuration NAK packets. · RECV_LCP_CON_NAK—Number of received link configuration NAK packets. · SEND_LCP_CON_REJ—Number of sent link configuration reject packets. · RECV_LCP_CON_REJ—Number of received link configuration reject packets. · SEND_LCP_CON_ACK—Number of sent link configuration ACK packets. · RECV_LCP_CON_ACK—Number of received link configuration ACK packets. · SEND_LCP_CODE_REJ—Number of sent link configuration code reject packets. · RECV_LCP_CODE_REJ—Number of received link configuration code reject packets. · SEND_LCP_PROT_REJ—Number of sent link configuration protocol reject packets. · RECV_LCP_PROT_REJ—Number of received link configuration protocol reject packets. · SEND_LCP_TERM_REQ—Number of sent link termination request packets. · RECV_LCP_TERM_REQ—Number of received link termination request packets. · SEND_LCP_TERM_ACK—Number of sent link termination ACK packets. · RECV_LCP_TERM_ACK—Number of received link termination ACK packets. · SEND_LCP_ECHO_REQ—Number of sent LCP echo request packets. · RECV_LCP_ECHO_REQ—Number of received LCP echo request packets. · SEND_LCP_ECHO_REP—Number of sent LCP echo reply packets. · RECV_LCP_ECHO_REP—Number of received LCP echo reply packets. · SEND_LCP_FAIL—Number of sent link failure packets.
IPCP	IPCP packet statistics. · SEND_IPCP_CON_REQ—Number of sent IP address negotiation request packets. · RECV_IPCP_CON_REQ—Number of received IP address negotiation request packets. · SEND_IPCP_CON_NAK—Number of sent IP address negotiation NAK packets. · RECV_IPCP_CON_NAK—Number of received IP address negotiation NAK packets. · SEND_IPCP_CON_REJ—Number of sent IP address negotiation reject packets. · RECV_IPCP_CON_REJ—Number of received IP address negotiation reject packets. · SEND_IPCP_CON_ACK—Number of sent IP address negotiation ACK packets. · RECV_IPCP_CON_ACK—Number of received IP address negotiation ACK packets. · SEND_IPCP_CODE_REJ—Number of sent IP address negotiation code reject packets. · RECV_IPCP_CODE_REJ—Number of received IP address negotiation code reject packets. · SEND_IPCP_PROT_REJ—Number of sent IP address negotiation protocol reject packets. · RECV_IPCP_PROT_REJ—Number of received IP address negotiation protocol reject packets. · SEND_IPCP_TERM_REQ—Number of sent IP address negotiation termination request packets. · RECV_IPCP_TERM_REQ—Number of received IP address negotiation termination request packets. · SEND_IPCP_TERM_ACK—Number of sent IP address negotiation termination ACK packets. · RECV_IPCP_TERM_ACK—Number of received IP address negotiation termination ACK packets. · SEND_IPCP_FAIL—Number of sent IP address negotiation failure packets.
IPV6CP	‌IPv6CP packet statistics. · SEND_IPV6CP_CON_REQ—Number of sent IPv6 address negotiation request packets. · RECV_IPV6CP_CON_REQ—Number of received IPv6 address negotiation request packets. · SEND_IPV6CP_CON_NAK—Number of sent IPv6 address negotiation NAK packets. · RECV_IPV6CP_CON_NAK—Number of received IPv6 address negotiation NAK packets. · SEND_IPV6CP_CON_REJ—Number of sent IPv6 address negotiation reject packets. · RECV_IPV6CP_CON_REJ—Number of received IPv6 address negotiation reject packets. · SEND_IPV6CP_CON_ACK—Number of sent IPv6 address negotiation ACK packets. · RECV_IPV6CP_CON_ACK—Number of received IPv6 address negotiation ACK packets. · SEND_IPV6CP_CODE_REJ—Number of sent IPv6 address negotiation code reject packets. · RECV_IPV6CP_CODE_REJ—Number of received IPv6 address negotiation code reject packets. · SEND_IPV6CP_PROT_REJ—Number of sent IPv6 address negotiation protocol reject packets. · RECV_IPV6CP_PROT_REJ—Number of received IPv6 address negotiation protocol reject packets. · SEND_IPV6CP_TERM_REQ—Number of sent IPv6 address negotiation termination request packets. · RECV_IPV6CP_TERM_REQ—Number of received IPv6 address negotiation termination request packets. · SEND_IPV6CP_TERM_ACK—Number of sent IPv6 address negotiation termination ACK packets. · RECV_IPV6CP_TERM_ACK—Number of received IPv6 address negotiation termination ACK packets. · SEND_IPV6CP_FAIL—Number of sent IPv6 address negotiation failure packets.
OSICP	OSICP packet statistics. · SEND_OSICP_CON_REQ—Number of sent OSI address negotiation request packets. · RECV_OSICP_CON_REQ—Number of received OSI address negotiation request packets. · SEND_OSICP_CON_NAK—Number of sent OSI address negotiation NAK packets. · RECV_OSICP_CON_NAK—Number of received OSI address negotiation NAK packets. · SEND_OSICP_CON_REJ—Number of sent OSI address negotiation reject packets. · RECV_OSICP_CON_REJ—Number of received OSI address negotiation reject packets. · SEND_OSICP_CON_ACK—Number of sent OSI address negotiation ACK packets. · RECV_OSICP_CON_ACK—Number of received OSI address negotiation ACK packets. · SEND_OSICP_CODE_REJ—Number of sent OSI address negotiation code reject packets. · RECV_OSICP_CODE_REJ—Number of received OSI address negotiation code reject packets. · SEND_OSICP_PROT_REJ—Number of sent OSI address negotiation protocol packets. · RECV_OSICP_PROT_REJ—Number of received OSI address negotiation protocol reject packets. · SEND_OSICP_TERM_REQ—Number of sent OSI address negotiation termination request packets. · RECV_OSICP_TERM_REQ—Number of received OSI address negotiation termination request packets. · SEND_OSICP_TERM_ACK—Number of sent OSI address negotiation termination ACK packets. · RECV_OSICP_TERM_ACK—Number of received OSI address negotiation termination ACK packets. · SEND_OSICP_FAIL—Number of sent OSI address negotiation failure packets.
‌MPLSCP	MPLSCP packet statistics. · SEND_MPLSCP_CON_REQ—Number of sent MPLS address negotiation request packets. · RECV_MPLSCP_CON_REQ—Number of received MPLS address negotiation request packets. · SEND_MPLSCP_CON_NAK—Number of sent MPLS address negotiation NAK packets. · RECV_MPLSCP_CON_NAK—Number of received MPLS address negotiation NAK packets. · SEND_MPLSCP_CON_REJ—Number of sent MPLS address negotiation reject packets. · RECV_MPLSCP_CON_REJ—Number of received MPLS address negotiation reject packets. · SEND_MPLSCP_CON_ACK—Number of sent MPLS address negotiation ACK packets. · RECV_MPLSCP_CON_ACK—Number of received MPLS address negotiation ACK packets. · SEND_MPLSCP_CODE_REJ—Number of sent MPLS address negotiation code reject packets. · RECV_MPLSCP_CODE_REJ—Number of received MPLS address negotiation code reject packets. · SEND_MPLSCP_PROT_REJ—Number of sent MPLS address negotiation protocol packets. · RECV_MPLSCP_PROT_REJ—Number of received MPLS address negotiation protocol reject packets. · SEND_MPLSCP_TERM_REQ—Number of sent MPLS address negotiation termination request packets. · RECV_MPLSCP_TERM_REQ—Number of received MPLS address negotiation termination request packets. · SEND_MPLSCP_TERM_ACK—Number of sent MPLS address negotiation termination ACK packets. · RECV_MPLSCP_TERM_ACK—Number of received MPLS address negotiation termination ACK packets. · SEND_MPLSCP_FAIL—Number of sent MPLS address negotiation failure packets.
AUTH	Authentication packet statistics. · SEND_PAP_AUTH_REQ—Number of sent PAP authentication request packets. · RECV_PAP_AUTH_REQ—Number of received PAP authentication request packets. · SEND_PAP_AUTH_ACK—Number of sent PAP authentication ACK packets. · RECV_PAP_AUTH_ACK—Number of received PAP authentication ACK packets. · SEND_PAP_AUTH_NAK—Number of sent PAP authentication NAK packets. · RECV_PAP_AUTH_NAK—Number of received PAP authentication NAK packets. · SEND_CHAP_AUTH_CHALLENGE—Number of sent CHAP authentication request packets. · RECV_CHAP_AUTH_CHALLENGE—Number of received CHAP authentication request packets. · SEND_CHAP_AUTH_RESPONSE—Number of sent CHAP authentication response packets. · RECV_CHAP_AUTH_RESPONSE—Number of received CHAP authentication response packets. · SEND_CHAP_AUTH_ACK—Number of sent CHAP authentication ACK packets. · RECV_CHAP_AUTH_ACK—Number of received CHAP authentication ACK packets. · SEND_CHAP_AUTH_NAK—Number of sent CHAP authentication NAK packets. · RECV_CHAP_AUTH_NAK—Number of received CHAP authentication NAK packets. · SEND_PAP_AUTH_FAIL—Number of sent PAP authentication failure packets. · SEND_CHAP_AUTH_FAIL—Number of sent CHAP authentication failure packets.

‌

Related commands

reset ppp packet statistics

ip address ppp-negotiate

Use ip address ppp-negotiate to enable IP address negotiation on an interface, so that the interface can accept the IP address allocated by the server.

Use undo ip address ppp-negotiate to restore the default.

Syntax

ip address ppp-negotiate

undo ip address ppp-negotiate

Default

IP address negotiation is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

If you execute the ip address ppp-negotiate and ip address commands multiple times, the most recent configuration takes effect.

Examples

# Enable IP address negotiation on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ip address ppp-negotiate

Related commands

ip address (Layer 3—IP Services Command Reference)

remote address

ip pool

Use ip pool to configure a PPP address pool.

Use undo ip pool to remove a PPP address pool or an IP address range of the PPP address pool.

Syntax

ip pool pool-name start-ip-address [ end-ip-address ] [ group group-name ]

undo ip pool pool-name [ start-ip-address [ end-ip-address ] ]

Default

No PPP address pool is configured.

Views

System view

Predefined user roles

network-admin

Parameters

pool-name: Specifies a name for the PPP address pool to be created, a case-sensitive string of 1 to 31 characters.

start-ip-address [ end-ip-address ]: Specifies an IP address range. If you do not specify the end-ip-address argument, the PPP address pool has only the start IP address.

group group-name: Specifies a group by its name to which the PPP address pool belongs. The group name is a case-sensitive string of 1 to 31 characters. If you do not specify this option, the group name is default (the default group).

Usage guidelines

The system supports multiple address spaces that each correspond to a VPN instance. The same IP addresses can exist in different address spaces.

Each address space is represented by a group. One group can contain multiple PPP address pools, but one PPP address pool can belong to only one group.

One PPP address pool can contain multiple IP address ranges. You can execute this command multiple times to specify multiple IP address ranges for a PPP address pool. A PPP address pool can contain a maximum of 65535 IP addresses, and so can an IP address range.

IP address ranges in different groups can be overlapping, but those in the same group cannot.

Changes to a PPP address pool do not affect assigned IP addresses. For example, if you delete a PPP address pool from which an IP address has been assigned, the IP address can still be used.

When assigning IP address to users through a PPP address pool, make sure the PPP address pool excludes the gateway IP address of the PPP address pool.

Examples

# Configure PPP address pool aaa that contains IP addresses 129.102.0.1 through 129.102.0.10 for group a.

<Sysname> system-view

[Sysname] ip pool aaa 129.102.0.1 129.102.0.10 group a

Related commands

display ip pool

ip pool gateway

Use ip pool gateway to configure a gateway address for a PPP address pool.

Use undo ip pool gateway to remove the gateway address for the specified PPP address pool.

Syntax

ip pool pool-name gateway ip-address [ vpn-instance vpn-instance-name ]

undo ip pool pool-name gateway

Default

A PPP address pool is not configured with a gateway address.

Views

System view

Predefined user roles

network-admin

Parameters

pool-name: Specifies an existing PPP address pool by its name, a case-sensitive string of 1 to 31 characters.

ip-address: Specifies a gateway address for the PPP address pool.

vpn-instance vpn-instance-name: Specifies an existing MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the specified gateway belongs to the public network.

Usage guidelines

An interface on a BRAS must have an IP address before it can assign an IP address from a PPP or DHCP address pool to a client. This command enables interfaces that have no IP address to use a gateway address for IPCP negotiation and address allocation.

When you configure a gateway address for a PPP address pool, follow these restrictions and guidelines:

· If you also specify an IP address for an interface, the interface uses its own IP address to perform IPCP negotiation.

· You can specify only one gateway address for a PPP address pool. Different PPP address pools must have different gateway addresses (different combinations of ip-address and vpn-instance-name).

· You can specify any gateway address for a PPP address pool.

Examples

# Specify gateway address 1.1.1.1 for PPP address pool aaa.

<Sysname> system-view

[Sysname] ip pool aaa gateway 1.1.1.1

Related commands

ip pool

nas-port-type

Use nas-port-type to configure the NAS-Port-Type attribute on a VT interface.

Use undo nas-port-type to restore the default.

Syntax

nas-port-type { 802.11 | adsl-cap | adsl-dmt | async | cable | ethernet | g.3-fax | idsl | isdn-async-v110 | isdn-async-v120 | isdn-sync | piafs | sdsl | sync | virtual | wireless-other | x.25 | x.75 | xdsl }

undo nas-port-type

Default

The NAS-Port-Type attribute is determined by the service type and link type of the PPP user, as shown in Table 6.

Table 6 Default NAS-Port-Type attribute

Service type	Link type	NAS-Port-Type attribute
PPPoE	VEth interface	xdsl
PPPoE	Other interfaces	ethernet
PPPoA	Any	xdsl
L2TP	Any	virtual

‌

Views

VT interface view

Predefined user roles

network-admin

Parameters

802.11: Specifies IEEE 802.11. The code value is 19.

adsl-cap: Specifies asymmetric DSL, Carrierless Amplitude Phase. The code value is 12.

adsl-dmt: Specifies asymmetric DSL, Discrete Multi-Tone. The code value is 13.

async: Specifies async. The code value is 0.

cable: Specifies cable. The code value is 17.

ethernet: Specifies Ethernet. The code value is 15.

g.3-fax: Specifies G.3 Fax. The code value is 10.

idsl: Specifies ISDN Digital Subscriber Line. The code value is 14.

isdn-async-v110: Specifies ISDN Async V.110. The code value is 4.

isdn-async-v120: Specifies ISDN Async V.120. The code value is 3.

isdn-sync: Specifies ISDN Sync. The code value is 2.

piafs: Specifies PHS Internet Access Forum Standard. The code value is 6.

sdsl: Specifies symmetric DSL. The code value is 11.

sync: Specifies sync. The code value is 1.

virtual: Specifies virtual. The code value is 5.

wireless-other: Specifies wireless–other. The code value is 18.

x.25: Specifies X.25. The code value is 8.

x.75: Specifies X.75. The code value is 9.

xdsl: Specifies Digital Subscriber Line of unknown type. The code value is 16.

Usage guidelines

The NAS-Port-Type attribute is used for RADIUS authentication and accounting. For more information about the NAS-Port-Type attribute, see RFC 2865.

This command does not affect existing users.

Examples

# Set the NAS-Port-Type attribute to sync for Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] nas-port-type sync

ppp access-user log enable

Use ppp access-user log enable to enable PPP user logging.

Use undo ppp access-user log enable to disable PPP user logging.

Syntax

ppp access-user log enable [ abnormal-logout | failed-login | normal-logout | successful-login ] *

undo ppp access-user log enable [ abnormal-logout | failed-login | normal-logout | successful-login ] *

Default

Logging is disabled for PPP users.

Views

System view

Predefined user roles

network-admin

Parameters

successful-login: Specifies login success logs.

failed-login: Specifies login failure logs.

normal-logout: Specifies normal logout logs.

abnormal-logout: Specifies abnormal logout logs.

Usage guidelines

IMPORTANT:

Typically, disable this feature to prevent excessive PPP log output.

‌

The PPP user logging feature enables the device to generate PPP logs and send them to the information center. Logs are generated after a user comes online, goes offline, or fails to come online. A log entry contains information such as the username, IP address, interface name, inner VLAN, outer VLAN, MAC address, and failure causes. For information about the log destination and output rule configuration in the information center, see Network Management and Monitoring Configuration Guide.

When you execute this command without specifying any keyword, this command enables or disables logging for login successes, login failures, normal logouts, and abnormal logouts.

In a VSRP environment, no log is output when the access interface of a user goes down. For more information about VSRP, see VSRP in High Availability Configuration Guide.

Examples

# Enable PPP user logging.

<Sysname> system-view

[Sysname] ppp access-user log enable

ppp account-statistics enable

Use ppp account-statistics enable to enable PPP accounting on an interface.

Use undo ppp account-statistics enable to disable PPP accounting on an interface.

Syntax

ppp account-statistics enable [ acl { acl-number | name acl-name } ]

undo ppp account-statistics enable

Default

PPP accounting is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

acl: Specifies an ACL to match traffic. If no ACL is specified, the device generates statistics for all PPP traffic.

acl-number: Specifies an ACL by its number in the range of 2000 to 3999, where:

· 2000 to 2999 are numbers for basic IPv4 and IPv6 ACLs.

· 3000 to 3999 are numbers for advanced IPv4 and IPv6 ACLs.

If the specified ACL number corresponds to an IPv4 ACL and an IPv6 ACL, both ACLs take effect.

name acl-name: Specifies an ACL by its name, a case-insensitive string of 1 to 63 characters that start with an alphabetical character. To avoid confusion, do not use all as an ACL name.

Examples

# Enable PPP accounting on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp account-statistics enable

ppp acfc local-request

Use ppp acfc local-request to configure an interface to send ACFC requests by including the ACFC option in outbound LCP negotiation requests.

Use undo ppp acfc local-request to restore the default.

Syntax

ppp acfc local-request

undo ppp acfc local-request

Default

An interface does not include the ACFC option in outbound LCP negotiation requests.

Views

Interface view

Predefined user roles

network-admin

Examples

# Configure Virtual-Template 1 to send ACFC requests to the peer in PPP negotiation.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp acfc local-request

ppp acfc remote-reject

Use ppp acfc remote-reject to configure an interface to reject ACFC requests received from the remote peer.

Use undo ppp acfc remote-reject to restore the default.

Syntax

ppp acfc remote-reject

undo ppp acfc remote-reject

Default

An interface accepts ACFC requests received from the remote peer, and it performs ACFC on frames sent to the peer.

Views

Interface view

Predefined user roles

network-admin

Examples

# Configure Virtual-Template 1 to reject ACFC requests received from the remote peer.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp acfc remote-reject

ppp authentication-mode

Use ppp authentication-mode to configure PPP authentication on an interface.

Use undo ppp authentication-mode to restore the default.

Syntax

ppp authentication-mode { chap | ms-chap | ms-chap-v2 | pap } * [ [ call-in ] domain { isp-name | default enable isp-name } ]

undo ppp authentication-mode

Default

PPP authentication is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

chap: Uses CHAP authentication.

ms-chap: Uses MS-CHAP authentication.

ms-chap-v2: Uses MS-CHAP-V2 authentication.

pap: Uses PAP authentication.

call-in: Authenticates the call-in users only. This keyword can be configured when the local end acts as the receiving end of DDR calls. For more information about DDR, see Layer 2—WAN Access Configuration Guide.

domain isp-name: Specifies the ISP domain name for authentication, a case-insensitive string of 1 to 255 characters. The ISP domain name cannot be d, de, def, defa, defau, defaul, or default.

default enable isp-name: Specifies the default ISP domain name for authentication, a case-insensitive string of 1 to 255 characters.

Usage guidelines

PPP authentication includes the following categories:

· PAP—Two-way handshake authentication. The password is in plain text or cipher text.

· CHAP—Three-way handshake authentication. The password is in plain text or cipher text.

· MS-CHAP—Three-way handshake authentication. The password is in cipher text.

· MS-CHAP-V2—Three-way handshake authentication. The password is in cipher text.

You can configure multiple authentication modes.

In any PPP authentication mode, AAA determines whether a user can pass the authentication through a local authentication database or an AAA server. For more information about AAA authentication, see Security Configuration Guide.

If multiple ISP domains are available, the ISP domains are used in the following order:

1. ISP domain specified by the domain isp-name option in this command.

Associate a PPP address pool with this ISP domain for address allocation if necessary.

2. ISP domain contained in the username.

If the ISP domain does not exist on the local device, the user's access request is denied.

3. ISP domain specified by the domain default enable isp-name option in this command.

4. Default system ISP domain.

You can use the domain default command to configure the default system ISP domain. If no system default ISP domain is configured, ISP domain system is used.

For authentication on a dialup interface, configure authentication on both the physical interface and the dialer interface. When a physical interface receives a DDR call request, it first initiates PPP negotiation and authenticates the dial-in user. Then it passes the call to the upper layer protocol.

Examples

# Configure Virtual-Template 1 to authenticate the peer by using PAP.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp authentication-mode pap

# Configure Virtual-Template 1 to authenticate the peer by using PAP and CHAP.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp authentication-mode pap chap

Related commands

domain default (Security Command Reference)

local-user (Security Command Reference)

ppp chap password

ppp chap user

ppp pap local-user

ppp chap password

Use ppp chap password to set the password for CHAP authentication on an interface.

Use undo ppp chap password to restore the default.

Syntax

ppp chap password { cipher | simple } string

undo ppp chap password

Default

No password is set for CHAP authentication on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its encrypted form is a case-sensitive string of 1 to 373 characters.

Examples

# Set the password for CHAP authentication to plaintext password sysname on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp chap password simple sysname

Related commands

ppp authentication-mode

ppp chap user

Use ppp chap user to set the username for CHAP authentication on an interface.

Use undo ppp chap user to restore the default.

Syntax

ppp chap user username

undo ppp chap user

Default

The username for CHAP authentication is null on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

username: Specifies the username for CHAP authentication, a case-sensitive string of 1 to 80 characters. The username is sent to the peer for the local device to be authenticated.

Usage guidelines

To pass CHAP authentication, the username/password of one side must be the local username/password on the peer.

Examples

# Set the username for CHAP authentication to Root on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp chap user Root

Related commands

ppp authentication-mode

ppp compression iphc enable

Use ppp compression iphc enable to enable IPHC on an interface.

Use undo ppp compression iphc enable to disable IPHC on an interface.

Syntax

ppp compression iphc enable [ nonstandard ]

undo ppp compression iphc enable

Default

IPHC is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

nonstandard: Specifies the nonstandard encapsulation format. If you do not specify this keyword, packets are encapsulated in standard format. You must specify this keyword when the device communicates with a non-H3C device. If you specify this keyword, this command enables RTP header compression.

Usage guidelines

IPHC includes RTP header compression and TCP header compression.

Enabling or disabling IPHC enables or disables both RTP header compression and TCP header compression.

To use IPHC, you must enable it on both sides of a PPP link.

When you enable IPHC on a dialer or ISDN interface, the setting does not immediately take effect. For the setting to take effect, execute the shutdown and then undo shutdown commands on the interface or its bound physical interface.

Examples

# Enable IPHC on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp compression iphc enable

ppp compression iphc rtp-connections

Use ppp compression iphc rtp-connections to set the maximum number of connections for which an interface can perform RTP header compression.

Use undo ppp compression iphc rtp-connections to restore the default.

Syntax

ppp compression iphc rtp-connections number

undo ppp compression iphc rtp-connections

Default

An interface can perform RTP header compression for a maximum of 16 connections.

Views

Interface view

Predefined user roles

network-admin

Parameters

number: Specifies the maximum number of connections for which an interface can perform RTP header compression. The value range for this argument is 3 to 1000:

· When the number argument is set to a value less than or equal to 256, packets are compressed in the format of COMPRESSED RTP 8.

· When the number argument is set to a value greater than 256, packets are compressed in the format of COMPRESSED RTP 16.

Usage guidelines

RTP is a connection-oriented protocol. An interface can accommodate multiple RTP connections.

RTP header compression occupies memory resources for maintaining connection information. This command can limit memory resources used by compression. For example, if you set the limit to 3, RTP header compression only applies to a maximum of three RTP connections.

After you execute this command, you must shut down and then bring up the interface to make the command take effect.

You can configure this command only when IPHC is enabled. The configuration is removed after IPHC is disabled.

Examples

# Set the maximum number of connections for which Virtual-Template 1 can perform RTP header compression to 10.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp compression iphc enable

[Sysname-Virtual-Template1] ppp compression iphc rtp-connections 10

Related commands

ppp compression iphc enable

ppp compression iphc tcp-connections

Use ppp compression iphc tcp-connections to set the maximum number of connections for which an interface can perform TCP header compression.

Use undo ppp compression iphc tcp-connections to restore the default.

Syntax

ppp compression iphc tcp-connections number

undo ppp compression iphc tcp-connections

Default

An interface can perform TCP header compression for a maximum of 16 connections.

Views

Interface view

Predefined user roles

network-admin

Parameters

number: Specifies the maximum number of connections for which an interface can perform TCP header compression. The value range for this argument is 3 to 256.

Usage guidelines

TCP is a connection-oriented protocol. A link can accommodate multiple TCP connections.

TCP header compression occupies memory resources for maintaining connection information. This command can limit memory resources used by compression. For example, if you set the limit to 3, TCP header compression only applies to a maximum of three TCP connections.

After you execute this command, you must shut down and then bring up the interface to make the command take effect.

You can configure this command only when IPHC is enabled and packets are encapsulated in standard format. The configuration is removed after IPHC is disabled or packets are encapsulated in nonstandard format.

Examples

# Set the maximum number of connections for which Virtual-Template 1 can perform TCP header compression to 10.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp compression iphc enable

[Sysname-Virtual-Template1] ppp compression iphc tcp-connections 10

Related commands

ppp compression iphc enable

ppp ipcp dns

Use ppp ipcp dns to configure the primary and secondary DNS server IP addresses to be allocated in PPP negotiation on an interface.

Use undo ppp ipcp dns to delete the primary and secondary DNS server IP addresses to be allocated in PPP negotiation on an interface.

Syntax

ppp ipcp dns primary-dns-address [ secondary-dns-address ]

undo ppp ipcp dns primary-dns-address [ secondary-dns-address ]

Default

The DNS server IP addresses to be allocated in PPP negotiation are not configured on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

primary-dns-address: Specifies a primary DNS server IP address.

secondary-dns-address: Specifies a secondary DNS server IP address.

Usage guidelines

A device can assign DNS server IP addresses to its peer during PPP negotiation when the peer initiates requests.

To check the allocated DNS server IP addresses, execute the winipcfg or ipconfig /all command on the host.

Examples

# Set the primary and secondary DNS server IP addresses to 100.1.1.1 and 100.1.1.2 for the peer on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp ipcp dns 100.1.1.1 100.1.1.2

ppp ipcp dns admit-any

Use ppp ipcp dns admit-any to configure an interface to accept the DNS server IP addresses assigned by the peer even though it does not request DNS server IP addresses from the peer.

Use undo ppp ipcp dns admit-any to restore the default.

Syntax

ppp ipcp dns admit-any

undo ppp ipcp dns admit-any

Default

An interface does not accept the DNS server IP addresses assigned by the peer if it does not request DNS server IP addresses from the peer.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

You can configure an interface to accept the DNS server IP addresses assigned by the peer, through which domain names can be resolved for the device.

Typically, the server assigns a DNS server address to a client in PPP negotiation only when the client is configured with the ppp ipcp dns request command. Some servers, however, forcibly assign DNS server addresses to clients. You must configure the ppp ipcp dns admit-any command on the client devices to accept the DNS server addresses.

Examples

# Configure Virtual-Template 1 to accept DNS server IP addresses allocated by the peer.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp ipcp dns admit-any

Related commands

ppp ipcp dns request

Use ppp ipcp dns request to enable an interface to actively request the DNS server IP address from its peer.

Use undo ppp ipcp dns request to restore the default.

Syntax

ppp ipcp dns request

undo ppp ipcp dns request

Default

An interface does not actively request the DNS server IP address from its peer.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

If a device is connected to a provider's access server through a PPP link, you can use this command. Then, the device can obtain the specified DNS server IP address from the access server during IPCP negotiation.

You can check the DNS server IP addresses by displaying information about the interface.

Examples

# Enable Virtual-Template 1 to actively request the DNS server IP address from its peer.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp ipcp dns request

ppp ipcp remote-address match

Use ppp ipcp remote-address match to enable the IP segment match feature for PPP IPCP negotiation on an interface.

Use undo ppp ipcp remote-address match to restore the default.

Syntax

ppp ipcp remote-address match

undo ppp ipcp remote-address match

Default

The IP segment match feature is disabled for PPP IPCP negotiation on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command enables the local interface to check whether its IP address and the IP address of the remote interface are in the same network segment. If they are not, IPCP negotiation fails.

Examples

# Enable the IP segment match feature on Dialer 1.

<Sysname> system-view

[Sysname] interface dialer 1

[Sysname-Dialer1] ppp ipcp remote-address match

ppp ip-pool route

Use ppp ip-pool route to configure a PPP address pool route.

Use undo ppp ip-pool route to remove a PPP address pool route.

Syntax

ppp ip-pool route ip-address { mask-length | mask } [ vpn-instance vpn-instance-name ]

undo ppp ip-pool route ip-address { mask-length | mask } [ vpn-instance vpn-instance-name ]

Default

No PPP address pool route is configured.

Views

System view

Predefined user roles

network-admin

Parameters

ip-address: Specifies the destination IP address of the PPP address pool route, in dotted decimal notation.

mask-length: Specifies a mask length for the IP address, in the range of 0 to 32.

mask: Specifies a mask for the IP address, in dotted decimal notation.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the PPP address pool route applies to the public network.

Usage guidelines

The BRAS uses PPP address pool routes to control downlink traffic forwarding.

After you configure a PPP address pool route, the BRAS generates a static blackhole route destined for the specified network. All traffic matching the blackhole route is discarded. When a legal user logs in, the BRAS adds a host route destined for the specified network. In addition, the BRAS uses a dynamic routing protocol to redistribute the PPP address pool route to the upstream device.

Figure 1 Network diagram for the PPP address pool route

Make sure the destination network of the PPP address pool route includes the PPP address pool. You can execute this command multiple times to configure multiple PPP address pool routes.

Examples

# Configure the PPP address pool route as 2.2.2.2/24.

<Sysname> system-view

[Sysname] ppp ip-pool route 2.2.2.2 24

ppp lcp delay

Use ppp lcp delay to set the LCP negotiation delay timer.

Use undo ppp lcp delay to restore the default.

Syntax

ppp lcp delay milliseconds

undo ppp lcp delay

Default

PPP starts LCP negotiation immediately after the physical layer comes up.

Views

Interface view

Predefined user roles

network-admin

Parameters

milliseconds: Specifies the LCP negotiation delay timer in the range of 1 to 10000 milliseconds.

Usage guidelines

If two ends of a PPP link vary greatly in the LCP negotiation packet processing rate, configure this command on the end with a higher processing rate. The LCP negotiation delay timer prevents frequent LCP negotiation packet retransmission. After the physical layer comes up, PPP starts LCP negotiation when the delay timer expires. If PPP receives LCP negotiation packets before the delay timer expires, it starts LCP negotiation immediately.

Examples

# Set the LCP negotiation delay timer to 130 milliseconds.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp lcp delay 130

ppp pap local-user

Use ppp pap local-user to set the local username and password for PAP authentication on an interface.

Use undo ppp pap local-user to restore the default.

Syntax

ppp pap local-user username password { cipher | simple } string

undo ppp pap local-user

Default

The local username and password for PAP authentication are blank on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

username: Specifies the username of the local device for PAP authentication, a case-sensitive string of 1 to 80 characters.

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its encrypted form is a case-sensitive string of 1 to 373 characters.

Usage guidelines

For the local device to pass PAP authentication on the peer, make sure the username and password configured for the local device are also configured on the peer. You can configure the peer's username and password by using the local-user username and password { cipher | simple } string commands, respectively.

Examples

# Set the local username and password for PAP authentication to user1 and plaintext pass1 on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp pap local-user user1 password simple pass1

Related commands

local-user (Security Command Reference)

password (Security Command Reference)

ppp pfc local-request

Use ppp pfc local-request to configure an interface to send PFC requests by including the PFC option in outbound LCP negotiation requests.

Use undo ppp pfc local to restore the default.

Syntax

ppp pfc local-request

undo ppp pfc local-request

Default

An interface does not include the PFC option in outbound LCP negotiation requests.

Views

Interface view

Predefined user roles

network-admin

Examples

# Configure Virtual-Template 1 to send PFC requests during PPP negotiation.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp pfc local-request

ppp pfc remote-reject

Use ppp pfc remote-reject to configure an interface to reject PFC requests received from the remote peer.

Use undo ppp pfc remote to restore the default.

Syntax

ppp pfc remote-reject

undo ppp pfc remote-reject

Default

An interface accepts PFC requests received from the remote peer, and it performs PFC on frames sent to the peer.

Views

Interface view

Predefined user roles

network-admin

Examples

# Configure Virtual-Template 1 to reject PFC requests received from the remote peer.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp pfc remote-reject

ppp timer negotiate

Use ppp timer negotiate to set the PPP negotiation timeout time on an interface.

Use undo ppp timer negotiate to restore the default.

Syntax

ppp timer negotiate seconds

undo ppp timer negotiate

Default

The PPP negotiation timeout time is 3 seconds on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

seconds: Specifies the negotiation timeout time in the range of 1 to 10 seconds.

Usage guidelines

In PPP negotiation, if the local device receives no response from the peer during the timeout time after it sends a packet, the local device sends the last packet again.

Examples

# Set the PPP negotiation timeout time to 5 seconds on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp timer negotiate 5

remote address

Use remote address to configure an interface to assign an IP address to the client.

Use undo remote address to restore the default.

Syntax

remote address { ip-address | pool pool-name }

undo remote address

Default

An interface does not assign an IP address to the client.

Views

Interface view

Predefined user roles

network-admin

Parameters

ip-address: Specifies the IP address to be assigned to the client.

pool pool-name: Specifies a PPP or DHCP address pool by its name from which an IP address is assigned to the client. The pool name is a case-sensitive string of 1 to 31 characters.

Usage guidelines

This command can be used when the local interface is configured with an IP address, but the peer has no IP address. To enable the peer to accept the IP address assigned by the local interface (server), you must configure the ip address ppp-negotiate command on the peer to make the peer act as a client.

This command enables the local interface to forcibly assign an IP address to the peer. If the peer is not configured with the ip address ppp-negotiate command but configured with an IP address, the peer will not accept the assigned IP address. This results in an IPCP negotiation failure.

PPP supports IP address assignment from a PPP or DHCP address pool, but the PPP address pool takes precedence over the DHCP address pool. For example, if you use a pool name that identifies both a PPP address pool and a DHCP address pool, the system uses only the PPP address pool for address assignment.

To make the configuration of the remote address command take effect, configure this command before the ip address command, which triggers IPCP negotiation. If you configure the remote address command after the ip address command, the server assigns an IP address to the client during the next IPCP negotiation.

After you use the remote address command to assign an IP address to the client, you can configure the remote address command again or the undo remote address command for the peer. However, the new configuration does not take effect until the next IPCP negotiation.

Examples

# Specify the IP address to be assigned to the client as 10.0.0.1 on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] remote address 10.0.0.1

# Configure Virtual-Template 1 to assign an IP address from address pool aaa to the client.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] remote address pool aaa

Related commands

ip address ppp-negotiate

ip pool

remote address dhcp client-identifier

Use remote address dhcp client-identifier username to configure the DHCP client IDs for PPP users acting as DHCP clients.

Use undo remote address dhcp client-identifier to restore the default.

Syntax

remote address dhcp client-identifier { callingnum | username }

undo remote address dhcp client-identifier

Default

No DHCP client IDs are configured for PPP users acting as DHCP clients.

Views

Interface view

Predefined user roles

network-admin

Parameters

callingnum: Uses the calling numbers as the DHCP client IDs. The calling numbers are carried in the calling number AVPs in L2TP negotiation packets. A calling number is formed by the user MAC address and the VLAN to which the user belongs. For example, if the MAC address of a user is 000f-e235-dc71, and the inner VLAN and outer VLAN of the user are VLAN 1 and VLAN 2, respectively, the calling number of the user is 000f-e235-dc71-00010002.

username: Uses the PPP usernames as the DHCP client IDs.

Usage guidelines

By default, a PPP client randomly selects a DHCP client ID when the PPP client requests an IP address through DHCP. In this case, the DHCP server cannot assign specific IP addresses to specific clients based on client IDs. For the DHCP server to assign specific IP addresses to specific clients based on client IDs, use this command to configure the calling numbers or usernames as the DHCP client IDs.

When PPP usernames are used as the DHCP client IDs, make sure different users use different PPP usernames to come online.

Examples

# Use the PPP usernames as the DHCP client IDs for PPP users acting as DHCP clients on Virtual-template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] remote address dhcp client-identifier username

reset counters interface virtual-access

Use reset counters interface virtual-access to clear statistics on VA interfaces.

Syntax

reset counters interface [ virtual-access [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

Parameters

virtual-access: Clears statistics on VA interfaces.

interface-number: Specifies an existing VA interface by its number.

Usage guidelines

Before collecting traffic statistics regularly on a VA interface, clear the existing statistics.

If you do not specify the virtual-access keyword, the command clears statistics on all interfaces.

If you specify the virtual-access keyword without the interface-number argument, the command clears statistics on all VA interfaces.

If you specify both virtual-access and interface-number, the command clears statistics on the specified VA interface.

Examples

# Clear statistics on Virtual-Access 10.

<Sysname> reset counters interface virtual-access 10

Related commands

display interface virtual-access

reset ppp access-user

Use reset ppp access-user to log off a PPP user.

Syntax

reset ppp access-user { ip-address ipv4-address [ vpn-instance ipv4-vpn-instance-name ] | ipv6-address ipv6-address [ vpn-instance ipv6-vpn-instance-name ] | username user-name }

Views

User view

Predefined user roles

network-admin

Parameters

ip-address ipv4-address: Specifies a PPP user by its IPv4 address.

ipv6-address ipv6-address: Specifies a PPP user by its IPv6 address.

vpn-instance ipv4-vpn-instance-name: Specifies a PPP user by the VPN to which the user belongs. The ipv4-vpn-instance-name argument specifies the name of the IPv4 MPLS L3VPN instance, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the specified user belongs to the public network.

vpn-instance ipv6-vpn-instance-name: Specifies a PPP user by the VPN to which the user belongs. The ipv6-vpn-instance-name argument specifies the name of the IPv6 MPLS L3VPN instance, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the specified user belongs to the public network.

username user-name: Specifies a PPP user by username, a case-sensitive string of 1 to 80 characters.

Usage guidelines

This command takes effect only on the current login for a PPP user. The user can come online after it is logged off.

Examples

# Log off the PPP user at 192.168.100.2.

<Sysname> reset ppp access-user ip-address 192.168.100.2

Related commands

display ppp access-user

reset ppp compression iphc

Use reset ppp compression iphc to clear IPHC statistics.

Syntax

reset ppp compression iphc [ rtp | tcp ] [ interface interface-type interface-number ]

Views

User view

Predefined user roles

network-admin

Parameters

rtp: Clears IPHC RTP header compression statistics.

tcp: Clears IPHC TCP header compression statistics.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command clears IPHC statistics on all interfaces.

Usage guidelines

If neither rtp nor tcp is specified, this command clears both RTP header compression and TCP header compression statistics.

Examples

# Clear IPHC statistics on all interfaces.

<Sysname> reset ppp compression iphc

Related commands

display ppp compression iphc

reset ppp packet statistics

Use reset ppp packet statistics to clear PPP negotiation packet statistics.

Syntax

In standalone mode:

reset ppp packet statistics

In IRF mode:

reset ppp packet statistics [ slot slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears PPP negotiation packet statistics for all IRF member devices. (In IRF mode.)

Examples

# (In standalone mode.) Clear PPP negotiation packet statistics.

<Sysname> reset ppp packet statistics

# (In IRF mode.) Clear PPP negotiation packet statistics for slot 2.

<Sysname> reset ppp packet statistics slot 2

Related commands

display ppp packet statistics

timer-hold

Use timer-hold to set the keepalive interval on an interface.

Use undo timer-hold to restore the default.

Syntax

timer-hold seconds

undo timer-hold

Default

The keepalive interval is 10 seconds on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

seconds: Specifies the interval for sending keepalive packets, in the range of 0 to 32767 seconds. The value 0 disables an interface from sending keepalive packets. In this case, the interface can respond to keepalive packets from the peer.

Usage guidelines

An interface sends keepalive packets at keepalive intervals to detect the availability of the peer. If the interface receives no response to keepalive packets when the keepalive retry limit is reached, it determines that the link fails and reports a link layer down event.

To set the keepalive retry limit, use the timer-hold retry command.

On a slow link, increase the keepalive interval to prevent false shutdown of the interface. This situation might occur when keepalive packets are delayed because a large packet is being transmitted on the link.

Examples

# Set the keepalive interval to 20 seconds on Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] timer-hold 20

Related commands

timer-hold retry

Use timer-hold retry to set the keepalive retry limit on an interface.

Use undo timer-hold retry to restore the default.

Syntax

timer-hold retry retries

undo timer-hold retry

Default

The keepalive retry limit is 5 on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

retries: Specifies the maximum number of keepalive attempts in the range of 1 to 255.

Usage guidelines

To set the keepalive interval, use the timer-hold command.

On a slow link, increase the keepalive retry limit to prevent false shutdown of the interface. This situation might occur when keepalive packets are delayed because a large packet is being transmitted on the link.

Examples

# Set the keepalive retry limit to 10 for Virtual-Template 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] timer-hold retry 10

Related commands

timer-hold

PPPoE commands

PPPoE client commands

dialer diagnose

Use dialer diagnose to configure DDR to operate in diagnostic mode.

Use undo dialer diagnose to restore the default.

Syntax

dialer diagnose [ interval interval ]

undo dialer diagnose

Default

DDR operates in non-diagnostic mode.

Views

Dialer interface view

Predefined user roles

network-admin

Parameters

interval: Specifies the diagnostic interval in the range of 5 to 65535 seconds. The default is 120 seconds.

Usage guidelines

This command takes effect only when a dialer interface is used with PPPoE client applications.

In diagnostic mode, the device performs the following operations:

· Dials a PPPoE connection immediately after the device configurations are complete.

· Automatically terminates the connection.

· Starts the auto-dial timer after a configurable diagnostic interval.

· Redials a connection when the auto-dial timer expires.

By establishing and terminating PPPoE sessions periodically, you can monitor the operating status of the PPPoE link.

In diagnostic mode, the link idle-timeout timer is ignored.

Examples

# Configure Dialer 1 to operate in diagnostic mode, with a diagnostic interval of 300 seconds.

<Sysname> system-view

[Sysname] interface dialer 1

[Sysname-Dialer1] dialer diagnose interval 300

Related commands

dialer timer autodial

dialer timer idle

display pppoe-client session packet

Use display pppoe-client session packet to display the protocol packet statistics for a PPPoE session.

Syntax

display pppoe-client session packet [ dial-bundle-number number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. The value range for the number argument is 0 to 1023. If you do not specify this option, the command displays the protocol packet statistics for all PPPoE sessions.

Usage guidelines

To display the data packet statistics for a PPPoE session, use the display interface virtual-access command to display information about the specified VA interface.

Examples

# Display the protocol packet statistics for all PPPoE sessions.

<Sysname> display pppoe-client session packet

Bundle: 1 Interface: GE1/0

InPackets: 19 OutPackets: 19

InBytes: 816 OutBytes: 816

InDrops: 0 OutDrops: 0

Bundle: 2 Interface: GE1/0

InPackets: 18 OutPackets: 18

InBytes: 730 OutBytes: 730

InDrops: 0 OutDrops: 0

Table 7 Command output

Field	Description
Bundle	Dialer bundle to which a PPPoE session belongs.
Interface	Ethernet interface where the PPPoE session is present.
InPackets	Number of packets received.
OutPackets	Number of packets transmitted.
InBytes	Number of bytes received.
OutBytes	Number of bytes transmitted.
InDrops	Number of discarded incoming packets.
OutDrops	Number of discarded outgoing packets.

‌

Related commands

display interface virtual-access

reset pppoe-client session packet

display pppoe-client session summary

Use display pppoe-client session summary to display summary PPPoE session information.

Syntax

display pppoe-client session summary [ dial-bundle-number number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Examples

# Display summary information for all PPPoE sessions.

<Sysname> display pppoe-client session summary

Bundle ID Interface VA RemoteMAC LocalMAC State

1 1 GE1/0 VA0 00e0-1400-4300 00e0-1500-4100 SESSION

2 1 GE2/0 VA1 00e0-1500-4300 00e0-1600-4100 SESSION

Table 8 Command output

Field	Description
Bundle	Dialer bundle to which the PPPoE session belongs.
Interface	Ethernet interface where the PPPoE session is present.
VA	Virtual access interface created for the PPPoE session.
RemoteMAC	MAC address of the remote end.
LocalMAC	MAC address of the local end.
State	PPPoE session state: · IDLE—Initialization state. · PADI SENT—A PPPoE Active Discovery Initiation (PADI) packet has been sent, and a PPPoE Active Discovery Offer (PADO) packet is being expected. · PADR SENT—A PPPoE Active Discovery Request (PADR) packet has been sent, and a PPPoE Active Discovery Session-confirmation (PADS) packet is being expected. · SESSION—The PPPoE session has been successfully established.

‌

pppoe-client

Use pppoe-client to establish a PPPoE session and specify the dialer bundle corresponding to the session.

Use undo pppoe-client to remove a PPPoE session.

Syntax

pppoe-client dial-bundle-number number [ no-hostuniq ]

undo pppoe-client dial-bundle-number number

Default

No PPPoE session is established.

Views

Layer 3 Ethernet interface/subinterface view

VEth interface/subinterface view

VLAN interface view

Layer 3 aggregate interface/subinterface view

Predefined user roles

network-admin

Parameters

dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. A dialer bundle number uniquely identifies a PPPoE session. It can also be used as a PPPoE session ID. The value range for this argument is 0 to 1023.

no-hostuniq: Configures the client not to carry the Host-Uniq field in discovery packets. If you do not specify this keyword, the client carries the Host-Unique field. The Host-Unique field uniquely identifies a PPPoE client when an interface is configured with multiple PPPoE sessions. When the PPPoE server receives a packet with this field, it must include this field unmodified in the response packet. The device identifies the PPPoE client where the response packet belongs based on the Host-Unique field in the response packet.

Examples

# Establish a PPPoE session on GigabitEthernet 1/0.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0

[Sysname-GigabitEthernet1/0] pppoe-client dial-bundle-number 1

# Establish a PPPoE session on Virtual-Ethernet 0.

<Sysname> system-view

[Sysname] interface virtual-ethernet 0

[Sysname-Virtual-Ethernet0] pppoe-client dial-bundle-number 1

# Establish a PPPoE session on VLAN-Interface 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] pppoe-client dial-bundle-number 1

reset pppoe-client

Use reset pppoe-client to reset a PPPoE session corresponding to a dialer bundle.

Syntax

reset pppoe-client { all | dial-bundle-number number }

Views

User view

Predefined user roles

network-admin

Parameters

all: Resets all the PPPoE sessions.

dial-bundle-number number: Specifies a dialer bundle by its number. The value range for this argument is 0 to 1023.

Usage guidelines

A PPPoE session in permanent mode and terminated by this command will be established again when the auto dial timer expires.

A PPPoE session in on-demand mode and terminated by this command will be established again only when there is a need for data transmission.

Examples

# Reset all PPPoE sessions.

<Sysname> reset pppoe-client all

Related commands

dialer timer autodial

reset pppoe-client session packet

Use reset pppoe-client session packet to reset the protocol packet statistics for a PPPoE session.

Syntax

reset pppoe-client session packet [ dial-bundle-number number ]

Views

User view

Predefined user roles

network-admin

Parameters

dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session. The value range for this argument is 0 to 1023. If you do not specify this option, the command resets the protocol packet statistics for all PPPoE sessions.

Examples

# Reset the protocol packet statistics for all PPPoE sessions.

<Sysname> reset pppoe-client session packet

Related commands

display pppoe-client session packet

05-Layer 2—WAN Access Command Reference

PPP commands

ppp acfc local-request

ppp acfc remote-reject

ppp ipcp dns admit-any

ppp ipcp dns request

ppp ipcp remote-address match

ppp lcp delay

ppp pfc remote-reject

display pppoe-client session packet

reset pppoe-client

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us