No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
PPPoE Configuration Commands

PPPoE Configuration Commands

Command Support

Only X series cards support PPPoE.

display interface virtual-template

Function

The display interface virtual-template command displays the status about virtual templates.

Format

display interface virtual-template [ vt-number | main ]

Parameters

Parameter Description Value
vt-number Displays status of a virtual template with the specified number.

If this parameter is not specified, the status of all virtual templates is displayed.

The virtual template number must already exist on the device.
main Displays status and traffic statistics about a VT interface.

A VT interface has no sub-interfaces. Status and traffic statistics about a VT interface are displayed whether you specify the main parameter or not.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To monitor status of a virtual template or locate faults on an interface, you can use this command.

Example

# Display the status of a virtual template.

<HUAWEI> display interface virtual-template 1
Virtual-Template1 current state : UP
Line protocol current state :UP (spoofing)
Description:                                                                    
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)             
Internet Address is 10.12.12.12/24                                              
Physical is None, baudrate is 64000 bps                                         
Current system time: 2013-12-28 13:46:30+08:00                                  
    Last 300 seconds input rate 0 bits/sec, 0 packets/sec                       
    Last 300 seconds output rate 0 bits/sec, 0 packets/sec                      
    Realtime 27 seconds input rate 0 bits/sec, 0 packets/sec                    
    Realtime 27 seconds output rate 0 bits/sec, 0 packets/sec                   
    Input: 0 packets,0 bytes                                                    
           0 unicast,0 broadcast,0 multicast                                    
           0 errors,0 unknownprotocol                                           
    Output:0 packets,0 bytes                                                    
           0 unicast,0 broadcast,0 multicast                                    
           0 errors                                                             
    Input bandwidth utilization  :    0%                                        
    Output bandwidth utilization :    0%  
Table 13-119  Description of the display interface virtual-template command output

Item

Description

Virtual-Template1 current state

Current physical status of the virtual template interface. The physical status of a virtual template interface is always Up after it is created.

Line protocol current state

Link-layer protocol status of the virtual template interface. The link-layer protocol status of a virtual template interface is always Up (spoofing) after it is created.

Description

Purpose of the interface.

Route Port

Layer 3 interface.

NOTE:
A virtual template interface cannot be switched to a Layer 2 interface.

The Maximum Transmit Unit is

Maximum Transmission Unit (MTU) of the interface. The default MTU of a serial port is 1500 bytes. Packets of which size is greater than the MTU are fragmented before being transmitted. If non-fragmentation is configured, the oversized packets are discarded.

Hold timer is

Polling interval.

Internet Address is

IP address assigned to the interface. If no IP address is assigned to the interface, the system displays "Internet protocol processing: disabled."

Physical is None

No physical device. The logical interfaces are invisible physically.

baudrate is

Baud rate of the interface.

Current system time

Current system time.

If a time zone is configured and the daylight saving time begins, the time is displayed in format YYYY-MM-DD HH:MM:SS UTC±HH:MM DST.

Last 300 seconds input rate

Last 300 seconds output rate

Rates of receiving and sending bytes and packets on the interface in the last 300 seconds.

Realtime 27 seconds input rate

Realtime 27 seconds output rate

Real-time rate of receiving and sending packets in the passing 27 seconds.

The number of seconds is variable according to the interval between two display commands. The maximum value is the statistics collection interval of the previous record. The information is displayed only for logical interfaces.

Input

Number of packets and bytes received by the interface.

The meanings of fields are as follows:
  • packets, bytes: total number of packets or bytes. The number of packets include the total number of unicast, broadcast, and multicast packets.
  • unicast, broadcast, multicast: number of unicast, broadcast, or multicast packets.
  • errors: number of discarded packets.
  • unknownprotocol: number of packets of unknown protocols.

Output

Number of packets and bytes sent by the interface.

The meanings of fields are as follows:
  • packets, bytes: total number of packets or bytes. The number of packets include the total number of unicast, broadcast, and multicast packets.
  • unicast, broadcast, multicast: number of unicast, broadcast, or multicast packets.
  • errors: number of discarded packets.

Input bandwidth utilization

Percentage of the incoming packet rate to the total bandwidth.

Output bandwidth utilization

Percentage of the outgoing packet rate to the total bandwidth.

display ppp chasten

Function

The display ppp chasten command displays information about the currently silent PPPoE users.

Format

display ppp chasten

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the ppp connection chasten command to configure the silence function to restrict the connection requests of PPPoE users. This prevents unauthorized users from obtaining passwords of authorized users through brute force attacks. You can run the display ppp chasten command to view information about the currently silent PPPoE users.

Example

# Display information about the currently silent PPPoE users.

<HUAWEI> display ppp chasten
Block PPPoE (MAC Address) User:                                              
 (1):0010-9400-1110                                                             
 (2):0010-9400-1109                                                             
 (3):0010-9400-1108                                                             
 (4):0010-9400-0002 
 Total 4 chasten user, 4 printed
Table 13-120  Description of the display ppp chasten command output

Item

Description

Block PPPoE (MAC Address) User

MAC address of the currently silent user.

display ppp item ipcp

Function

The display ppp item ipcp command displays NCP negotiation information of an online PPPoE user with a specified user index.

Format

display ppp item ipcp index

Parameters

Parameter Description Value
index Displays NCP negotiation information of an online PPPoE user with the specified user index. The value is an integer that ranges from 0 to 65535. The index must belong to an online PPPoE user.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

The NCP protocol family includes IPCP and BCP. IPCP is the most widely used protocol. NCP implements network parameter negotiation. IPCP allows PPPoE clients to obtain IP addresses or IP address segment for network access.

This command displays the NCP negotiation information of online PPPoE users. Before using this command, check the indexes of the PPPoE users.

Prerequisites

The indexes of online PPPoE users have been checked by using the display pppoe item command.

Example

# Display NCP negotiation information of an online PPPoE with user index 2.

<HUAWEI> display ppp item ipcp 2
  ------------------------------------------------------------------------      
                    IPCP information of PPP user's item                         
  -------------------------- IPCP state machine  -------------------------      
  Protocol ID                     :0x8021                                       
  State                           :Opened                                       
  Packet ID                       :0                                            
  Nak loops                       :0                                            
  Config request timeout time     :3                                            
  --------------------------- IPCP want option  --------------------------      
  Negotiate IP address          :Y        Use old IP address            :N      
  Ask peer to send IP address   :Y                                              
  Negotiate primary DNS address :N        Request primary DNS address   :N      
  Negotiate primary NBNS address:N        Request primary NBNS address  :N      
  Negotiate second DNS address  :N        Request second DNS address    :N      
  Negotiate second NBNS address :N        Request second NBNS address   :N      
  Accept primary DNS address    :N        Accept second DNS address     :N      
  Accept primary NBNS address   :N        Accept second NBNS address    :N      
  Our IP address                :192.168.1.1                                    
  Peer IP address               :192.168.255.243                                
  Primary DNS address           :0.0.0.0                                        
  Primary NBNS address          :0.0.0.0                                        
  Second DNS address            :0.0.0.0                                        
  Second NBNS address           :0.0.0.0                                        
  ----------------------------- IPCP got option  -------------------------      
  Negotiate IP address          :Y        Use old IP address            :N      
  Ask peer to send IP address   :Y                                              
  Negotiate primary DNS address :N        Request primary DNS address   :N      
  Negotiate primary NBNS address:N        Request primary NBNS address  :N      
  Negotiate second DNS address  :N        Request second DNS address    :N      
  Negotiate second NBNS address :N        Request second NBNS address   :N      
  Accept primary DNS address    :N        Accept second DNS address     :N      
  Accept primary NBNS address   :N        Accept second NBNS address    :N      
  Our IP address                :192.168.1.1                                    
  Peer IP address               :192.168.255.243                                
  Primary DNS address           :0.0.0.0                                        
  Primary NBNS address          :0.0.0.0                                        
  Second DNS address            :0.0.0.0                                        
  Second NBNS address           :0.0.0.0                                        
  ---------------------------- IPCP allow option -------------------------      
  Negotiate IP address          :N        Use old IP address            :N      
  Ask peer to send IP address   :Y                                              
  Negotiate primary DNS address :Y        Request primary DNS address   :Y      
  Negotiate primary NBNS address:Y        Request primary NBNS address  :Y      
  Negotiate second DNS address  :Y        Request second DNS address    :Y      
  Negotiate second NBNS address :Y        Request second NBNS address   :Y      
  Accept primary DNS address    :Y        Accept second DNS address     :Y      
  Accept primary NBNS address   :Y        Accept second NBNS address    :Y      
  Our IP address                :0.0.0.0                                        
  Peer IP address               :0.0.0.0                                        
  Primary DNS address           :192.168.1.1                                    
  Primary NBNS address          :0.0.0.0                                        
  Second DNS address            :192.168.1.2                                    
  Second NBNS address           :0.0.0.0                                        
  ---------------------------- IPCP peer option --------------------------      
  Negotiate IP address          :Y        Use old IP address            :N      
  Ask peer to send IP address   :N                                              
  Negotiate primary DNS address :Y        Request primary DNS address   :N      
  Negotiate primary NBNS address:N        Request primary NBNS address  :N      
  Negotiate second DNS address  :Y        Request second DNS address    :N      
  Negotiate second NBNS address :N        Request second NBNS address   :N      
  Accept primary DNS address    :N        Accept second DNS address     :N      
  Accept primary NBNS address   :N        Accept second NBNS address    :N      
  Our IP address                :0.0.0.0                                        
  Peer IP address               :192.168.255.243                                
  Primary DNS address           :192.168.1.1                                    
  Primary NBNS address          :0.0.0.0                                        
  Second DNS address            :192.168.1.2                                    
  Second NBNS address           :0.0.0.0                                        
  ------------------------------------------------------------------------ 
Table 13-121  Description of the display ppp item ipcp command output

Item

Description

IPCP state machine

IPCP negotiation state machine.

Protocol ID

IPCP protocol number.

State

IPCP negotiation status.

Packet ID

IPCP packet ID.

Nak loops

Number of option renegotiation times.

Config request timeout time

Timeout interval of Echo request packets used in IPCP negotiation, in seconds.

IPCP want option

Options that the local end requires to negotiate with the remote end.

Negotiate IP address

Whether the IP address is negotiated.

Use old IP address

Whether the original IP address is used.

Ask peer to send IP address

Whether the local end requests the remote end to send the IP address.

Negotiate primary DNS address

Whether the primary DNS address is negotiated.

Request primary DNS address

Whether the local end requests the remote end to send the primary DNS address.

Negotiate primary NBNS address

Whether the primary NBNS address is negotiated.

Request primary NBNS address

Whether the local end requests the remote end to send the primary NBNS address.

Negotiate second DNS address

Whether the secondary DNS address is negotiated.

Request second DNS address

Whether the local end requests the remote end to send the secondary DNS address.

Negotiate second NBNS address

Whether the secondary NBNS address is negotiated.

Request second NBNS address

Whether the local end requests the remote end to send the secondary NBNS address.

Accept primary DNS address

Whether the primary DNS address is accepted.

Accept second DNS address

Whether the secondary DNS address is accepted.

Accept primary NBNS address

Whether the primary NBNS address is accepted.

Accept second NBNS address

Whether the secondary NBNS address is accepted.

Our IP address

IP address of the local end.

Peer IP address

IP address of the remote end.

Primary DNS address

Primary DNS address.

Primary NBNS address

Primary NBNS address.

Second DNS address

Secondary DNS address.

Second NBNS address

Secondary NBNS address.

IPCP got option

Option obtained by the local end through negotiation.

IPCP allow option

Options that the local end allows to negotiate with the remote end.

IPCP peer option

Option of the remote end obtained by the local end through negotiation.

display ppp item

Function

The display ppp item command displays PPP negotiation information of an online PPPoE user with a specified user index.

Format

display ppp item index

Parameters

Parameter Description Value
index Displays PPP negotiation information of an online PPPoE user with the specified user index. The value is an integer that ranges from 0 to 65535. The index must belong to an online PPPoE user.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command displays the PPP negotiation information of online PPPoE users. Before using this command, check the indexes of the PPPoE users.

Prerequisites

The indexes of online PPPoE users have been checked by using the display pppoe item command.

Example

# Display PPP negotiation information of an online PPPoE with user index 8232.

<HUAWEI> display ppp item 8232
  ------------------------------------------------------------------------      
               Basic information of PPP user's item                             
  ------------------------------------------------------------------------      
  Address negotiation      :N                                                   
  Interface                :GigabitEthernet3/1/6                                
  Phase                    :Network                                             
  User ID                  :56251                                               
  Login user name          :wlan                                                
  PPP index                :539500584                                           
  Source IP address        :192.168.225.231                                     
  Gateway                  :192.168.1.1                                         
  Primary DNS              :192.168.1.1                                         
  Second DNS               :192.168.1.2                                         
  Primary NBNS             :0.0.0.0                                             
  Second NBNS              :0.0.0.0                                             
  Down flag                :N                                                   
  Send flag                :N                                                   
  Session ID               :8233                                                
  MTU                      :1492                                                
  Down retransmit times    :3                                                   
  NCP state                :Opened                                              
  UCM down ack flag        :N                                                   
  Trace ID                 :4294967295                                          
  Virtual template name    :Virtual-Template5                                   
  LCP renegotiate flag     :N                                                   
  Magic number             :50422316                                            
  Got mask(negotiated)     :255.255.255.0                                       
  ------------------------------------------------------------------------      
                                                                                
  -------------------------BEGING OF Config-------------------------------      
  Auth CHAP                :Y        Auth PAP                    :N             
  Auth auto                :N                                                   
  MTU                      :1500     MRU                         :1492          
  Negotiate timeout        :3        Keep-alive time             :0             
  Keep-alive transmit times:1        Authentication mode         :CHAP          
  -------------------------END OF Config----------------------------------    
Table 13-122  Description of the display ppp item command output

Item

Description

Address negotiation

Whether address negotiation is enabled.

Interface

Interface name.

Phase

Current PPP negotiation stage.

User ID

User ID.

Login user name

Login user name.

PPP index

Internal index of PPP control block.

Source IP address

IP address allocated to the user after the user is authenticated.

Gateway

User gateway.

Primary DNS

Primary DNS address allocated to the user after the user is authenticated.

Second DNS

Secondary DNS address allocated to the user after the user is authenticated.

Primary NBNS

Primary NBNS address allocated to the user after the user is authenticated.

Second NBNS

Secondary NBNS address allocated to the user after the user is authenticated.

Down flag

A flag indicating that a user goes offline.

Send flag

Data sending flag.

Session ID

Session ID.

MTU

Maximum transmission unit.

Down retransmit times

Number of times the user sends Down packets.

NCP state

NCP negotiation status.

UCM down ack flag

A UCM down ACK is received.

Trace ID

Message tracing ID.

Virtual template name

Virtual template name.

LCP renegotiate flag

LCP renegotiation flag.

Magic number

Magic number.

Got mask(negotiated)

Mask indicating a successful IPCP negotiation.

Auth CHAP

Whether CHAP authentication is used.

To configure the CHAP authentication, see ppp authentication-mode.

Auth PAP

Whether PAP authentication is used.

To configure the PAP authentication, see ppp authentication-mode.

Auth auto

Whether auto-negotiation authentication is used.

To configure the auto-negotiation authentication, see ppp authentication-mode.

MTU

Maximum transmission unit.

MRU

Maximum receive unit.

To configure the maximum receive unit, see ppp mru.

Negotiate timeout

Negotiation timeout interval, in seconds.

Keep-alive time

PPP layer 2 keepalive detection interval, in seconds.

Keep-alive transmit times

Timeout interval of PPP layer 2 keepalive detection.

Authentication mode

Authentication method used by PPPoE users.

To configure the authentication method, see ppp authentication-mode.

display ppp item lcp

Function

The display ppp item lcp command displays LCP negotiation information of an online PPPoE user with a specified user index.

Format

display ppp item lcp index

Parameters

Parameter Description Value
index Displays LCP negotiation information of an online PPPoE user with the specified user index. The value is an integer that ranges from 0 to 65535. The index must belong to an online PPPoE user.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command displays the LCP negotiation information of online PPPoE users. Before using this command, check the indexes of the PPPoE users.

Prerequisites

The indexes of online PPPoE users have been checked by using the display pppoe item command.

Example

# Display LCP negotiation information of an online PPPoE with user index 8232.

<HUAWEI> display ppp item lcp 8232
  -------------------------------------------------------------------------     
                     LCP information of PPP user's item                         
  -------------------------- LCP state machine  ---------------------------     
  Protocol ID                     :0xc021                                       
  State                           :Opened                                       
  Echo retransmit times           :1                                            
  Echo timeout time               :0                                            
  Nak loops                       :0                                            
  Config request timeout time     :3                                            
  -------------------------- LCP want option  -----------------------------     
  Negotiate MRU           :Y        Negotiate magic number :Y                   
  Negotiate PAP           :N        Negotiate CHAP         :Y                   
  MRU                     :1492     Magic number           :0                   
  Num loops               :0        CHAP type              :MD5                 
  --------------------------- LCP got option ------------------------------     
  Negotiate MRU           :N        Negotiate magic number :Y                   
  Negotiate PAP           :N        Negotiate CHAP         :Y                   
  MRU                     :1492     Magic number           :50422316            
  Num loops               :0        CHAP type              :MD5                 
  -------------------------- LCP allow option -----------------------------     
  Negotiate MRU           :Y        Negotiate magic number :Y                   
  Negotiate PAP           :N        Negotiate CHAP         :Y                   
  MRU                     :1500     Magic number           :0                   
  Num loops               :0        CHAP type              :MD5                 
  ---------------------------- LCP peer option ----------------------------     
  Negotiate MRU           :N        Negotiate magic number :N                   
  Negotiate PAP           :N        Negotiate CHAP         :N                   
  MRU                     :0        Magic number           :0                   
  Num loops               :0        CHAP type              :-                   
  -------------------------------------------------------------------------   
Table 13-123  Description of the display ppp item lcp command output

Item

Description

LCP state machine

LCP negotiation state machine.

Protocol ID

LCP protocol number.

State

LCP negotiation status.

Echo retransmit times

Maximum number of times an Echo request packet can be retransmitted.

Echo timeout time

Timeout interval of Echo request packets used in LCP negotiation, in seconds.

Nak loops

Number of option renegotiation times.

Config request timeout time

Timeout interval of Echo request packets used in LCP negotiation, in seconds.

LCP want option

Options that the local end requires to negotiate with the remote end.

Negotiate MRU

Whether the MRU is negotiated.

Negotiate magic number

Whether the magic number is negotiated.

Negotiate PAP

Whether the PAP is negotiated.

Negotiate CHAP

Whether the CHAP is negotiated.

To configure the CHAP authentication, see ppp authentication-mode.

MRU

Maximum receive unit.

To configure the maximum receive unit, see ppp mru.

Magic number

Magic number.

Num loops

Number of loops, which identifies a loopback.

CHAP type

CHAP encryption.

LCP got option

Option obtained by the local end through negotiation.

LCP allow option

Options that the local end allows to negotiate with the remote end.

LCP peer option

Option of the remote end obtained by the local end through negotiation.

display ppp statistics

Function

The display ppp statistics command displays information about PPP negotiation during PPPoE user authentication.

Format

display ppp statistics

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command displays statistics about PPP negotiation during PPPoE user authentication, including number of sent and received PPP packets.

The statistics help you locate and rectify failures in PPPoE authentication.

Follow-up Procedure

You can check PPP negotiation statistics to find out the error packets. Then run the reset ppp statistics command to clear the statistics. Run the display ppp statistics command again to check whether the fault is rectified.

Example

# Display statistics about PPP negotiation during PPPoE user authentication.

<HUAWEI> display ppp statistics
  ------------------------------------------------                              
            PPP Message Statistics                                              
  ------------------------------------------------                              
  Send authentication request message: 0                                        
  Receive authentication ack message : 0                                        
  Send up request message            : 0                                        
  Receive up response message        : 0                                        
  Send ppp cut request message       : 0                                        
  Receive CM cut ack message         : 0                                        
  Receive CM cut command message     : 0                                        
  Send cut ack message               : 0                                        
  Send ppp check command message     : 0                                        
  Receive CM check command message   : 0                                        
  Send bind fail message times       : 0                                        
  Discard for chasten                : 0                                        
  Discard for fast dial              : 0                                        
  Discard for too long password      : 0
  Report up counts                   : 0                                        
  Report down counts                 : 0                                        
  ------------------------------------------------  
Table 13-124  Description of the display ppp statistics command output

Item

Description

Send authentication request message

Number of authentication request messages sent during PPP negotiation.

Receive authentication ack message

Number of authentication response messages received during PPP negotiation.

Send up request message

Number of access request messages sent during PPP negotiation.

Receive up response message

Number of access response messages received during PPP negotiation.

Send ppp cut request message

Number of disconnection request messages sent during PPP negotiation.

Receive CM cut ack message

Number of disconnection response messages received during PPP negotiation.

Receive CM cut command message

Number of command line disconnection messages received during PPP negotiation.

Send cut ack message

Number of disconnection response messages sent during PPP negotiation.

Send ppp check command message

Number of entry synchronization request messages sent during PPP negotiation.

Receive CM check command message

Number of entry synchronization response messages received during PPP negotiation.

Send bind fail message times

Number of binding failure messages sent during PPP negotiation.

Discard for chasten

Number of packets discarded by the chasten feature.

Discard for fast dial

Number of packets discarded by the fast dial feature.

Discard for too long password

Number of packets discarded by the too long password feature.

Report up counts

Number of access messages.

Report down counts

Number of disconnection messages.

display pppoe item

Function

The display pppoe item command displays PPPoE negotiation information of an online PPPoE user with a specified session ID.

Format

display pppoe item index

Parameters

Parameter

Description

Value

index

Displays PPPoE negotiation information of an online PPPoE user with the specified session ID.

The value is an integer that ranges from 1 to 65534. The session ID must already exist on the device.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command displays the PPPoE negotiation information of online PPPoE users. Before using this command, check the session IDs of the PPPoE users.

Prerequisites

The display access-user command is executed to display information about online users, in which you need to find out the PPPoE user IDs. Then the display access-user user-id user-id command is executed with the PPPoE user IDs specified to display the session IDs of the users.

Example

# Display information about the PPPoE user with session ID 8233.

<HUAWEI> display pppoe item 8233
  -------------------------------------------                                   
     PPPoE user item  detail information                                        
  -------------------------------------------                                   
  User MAC           : 0011-2233-5566                                           
  Device MAC         : 00e0-fc33-2220                                           
  Received packets   : 8                                                        
  Received octets    : 174                                                      
  Received discards  : 0                                                        
  Send packets       : 9                                                        
  Send octets        : 157                                                      
  Send discards      : 0                                                        
  Session ID         : 8233                                                     
  PPP user index     : 8232                                                     
  Session state      : Session                                                  
  Used               : Y                                                        
  Trace ID           : 4294967295                                               
  User vlan          : 202                                                      
  Interface          : GigabitEthernet3/1/6                                     
  Config trunk ID    : 255                                                      
  -------------------------------------------   
Table 13-125  Description of the display pppoe item command output

Item

Description

User MAC

User MAC address.

Device MAC

Device MAC address.

Received packets

Number of received packets.

Received octets

Number of received bytes.

Received discards

Number of packets that are discarded after being received.

Send packets

Number of sent packets.

Send octets

Number of sent bytes.

Send discards

Number of packets that are discarded before being sent.

Session ID

Session ID in PPPoE header.

PPP user index

PPP user index.

Session state

Session negotiation status.

Used

Usage status.

Trace ID

Service tracing ID.

User vlan

User VLAN ID.

Interface

Interface name.

Config trunk ID

Trunk ID of the user.

display pppoe statistics

Function

The display pppoe statistics command displays information about PPPoE negotiation during PPPoE user authentication.

Format

display pppoe statistics

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command displays statistics about PPPoE negotiation during PPPoE user authentication, including number of sent and received PPPoE packets.

The statistics help you locate and rectify failures in PPPoE authentication.

Follow-up Procedure

You can check PPPoE negotiation statistics to find out the error packets. Then run the reset pppoe statistics command to clear the statistics. Run the display pppoe statistics command again to check whether the fault is rectified.

Example

# Display statistics about PPPoE negotiation during PPPoE user authentication.

<HUAWEI> display pppoe statistics
  ------------------------------------------------- 
          PPPoE Statistics information               
  ------------------------------------------------- 
  Total session counts                : 1          
  Active session counts               : 1       
  Discard session packet counts       : 0     
  Receive session packet counts       : 45    
  Discard PADI packet counts          : 0       
  Receive PADI packet counts          : 1    
  Discard PADR packet counts          : 0    
  Receive PADR packet counts          : 1     
  Receive PADT packet counts          : 0       
  Send PADO packet counts             : 1        
  Send PADS packet counts             : 1        
  Send PADT packet counts             : 0       
  Receive packet counts               : 2        
  Discard packet counts               : 0        
  ------------------------------------------------- 
                PPPoE Variable                       
  ------------------------------------------------- 
  MAC hash used number                : 1           
  MAC session hash used number        : 1            
  -------------------------------------------------
Table 13-126  Description of the display pppoe statistics command output

Item

Description

Total session counts

Total number of sessions, including the deleted sessions.

Active session counts

Number of online sessions.

Discard session packet counts

Number of discarded session packets.

Receive session packet counts

Number of received session packets.

Discard PADI packet counts

Number of discarded PADI packets.

Receive PADI packet counts

Number of received PADI packets.

Discard PADR packet counts

Number of discarded PADR packets.

Receive PADR packet counts

Number of received PADR packets.

Receive PADT packet counts

Number of received PADT packets.

Send PADO packet counts

Number of sent PADO packets.

Send PADS packet counts

Number of sent PADS packets.

Send PADT packet counts

Number of sent PADT packets.

Receive packet counts

Total number of received packets.

Discard packet counts

Total number of discarded packets.

MAC hash used number

Number of entries in the MAC hash table.

MAC session hash used number

Number of entries in the MAC session hash table.

domain ppp force

Function

The domain ppp force command configures a forcible domain for a user.

The undo domain ppp force command deletes the configured forcible domain.

By default, no forcible domain is configured.

Format

domain name domain-name ppp force

undo domain name domain-name ppp force

Parameters

Parameter

Description

Value

name domain-name

Specifies the name of a forcible domain.

The value must be an existing domain name on the device.

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

During authentication, if the user name entered by a user does not contain a domain name, the user will be authenticated in the default domain; if the user name contains a domain name, the user will be authenticated in the specified domain.

If the user names entered by many users do not contain domain names, excess users are authenticated in the default domain, making the authentication scheme inflexible. If all users on an interface need to use the same AAA scheme when the user names entered by some users contain domain name and those entered by other users do not, the device also cannot meet such requirement. To address this issue, you can configure a forcible domain. Then all users on the interface will be authenticated in the forcible domain no matter whether the user names entered by the users contain domain names.

Prerequisites

A domain has been created using the domain (AAA view) command.

Precautions

This function takes effect only for users who go online after this function is successfully configured.

Example

# Configure the forcible domain huawei on the VLANIF 10 interface view.

<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] domain huawei
[HUAWEI-aaa-domain-huawei] quit
[HUAWEI-aaa] quit
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] domain name huawei ppp force
Related Topics

domain ppp

Function

The domain ppp command configures the default domain for users.

The undo domain ppp command deletes the configured default domain.

By default, no default group is configured for users.

NOTE:

This command is only supported in the unified NAC mode.

Format

domain name domain-name ppp

undo domain name domain-name ppp

Parameters

Parameter

Description

Value

name domain-name

Specifies the name of the default domain.

The value must be an existing domain name on the device.

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The device uses domains to manage users. During user authentication, the device assigns users to specified domains based on the domain names contained in user names. In actual scenarios, the user names entered by users do not contain domain names. To address this issue, you can configure the default domain on the device. After that, the device can assign the users that do not provide domain names to the default domain for authentication.

Prerequisites

A domain has been created using the domain (AAA view) command.

Precautions

To configure the default domain on a specified interface, run the domain ppp command; to configure the global default domain, run the domain (system view) command. If you configure the default domain on an interface and the global default domain concurrently, the default domain takes effect for users on the specified interface and the global default domain takes effect for users on other interfaces.

This function takes effect only for users who go online after this function is successfully configured.

Example

# Configure the default domain huawei on the interface VLANIF10.

<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] domain huawei
[HUAWEI-aaa-domain-huawei] quit
[HUAWEI-aaa] quit
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] domain name huawei ppp
Related Topics

interface virtual-template

Function

The interface virtual-template command creates a virtual template and displays the virtual template view.

The undo interface virtual-template command deletes a virtual template.

By default, no virtual template exists.

Format

interface virtual-template vt-number

undo interface virtual-template vt-number

Parameters

Parameter Description Value
vt-number Specifies the number of a virtual template. The value is an integer that ranges from 0 to 1023.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

A virtual template contains the negotiation parameters required for PPPoE authentication, including authentication methods, negotiation timeout interval, and maximum receive unit (MRU) on interfaces. After a virtual template is created, the physical status and link layer status of the interface are Up.

Example

# Create virtual template 1.

<HUAWEI> system-view
[HUAWEI] interface virtual-template 1
[HUAWEI-Virtual-Template1]

ppp authentication-mode

Function

The ppp authentication-mode command configures the authentication method for PPPoE users.

The undo ppp authentication-mode command restores the default authentication method.

By default, the authentication method for PPPoE users is CHAP.

Format

ppp authentication-mode { auto | chap | pap }

undo ppp authentication-mode

Parameters

Parameter Description Value
auto

Indicates that auto-negotiation authentication is used. That is, the PPPoE server selects CHAP or PAP authentication depending on the authentication method supported by the client.

-
chap

Indicates that CHAP authentication is used for users. In this method, password are transmitted in cipher text.

-
pap

Indicates that PAP authentication is used for users. In this method, user name and password are transmitted in plain text.

NOTE:

To ensure security, PAP authentication is not recommended.

-

Views

Virtual template view

Default Level

2: Configuration level

Usage Guidelines

When auto-negotiation authentication is configured, the server uses CHAP authentication first. If the client does not support CHAP authentication, the server performs PAP authentication. If the client supports neither CHAP nor PAP authentication, authentication fails.

Whether PPPoE authentication is successful is irrelevant to authentication method. The users are authenticated by the local AAA module or by the RADIUS or HWTACACS server.

Example

# Set the authentication method to CHAP on virtual template 1.

<HUAWEI> system-view
[HUAWEI] interface virtual-template 1
[HUAWEI-Virtual-Template1] ppp authentication-mode chap

ppp connection chasten

Function

The ppp connection chasten command configures the chasten function for PPPoE users.

The undo ppp connection chasten command disables the chasten function for PPPoE users.

By default, the chasten function is enabled.

Format

ppp connection chasten request-sessions request-period blocking-period

undo ppp connection chasten

Parameters

Parameter Description Value
request-sessions Specifies the maximum number of authentication failures before a PPPoE user is blocked by the device. The value is an integer that ranges from 1 to 10000, the default value is 10.
request-period Specifies the period in which the PPPoE user can send connection requests. It is an integer that ranges from 1 to 3600, in seconds, the default value is 60 seconds.
blocking-period Specifies the period in which the device rejects the connection requests from the user. It is an integer that ranges from 1 to 3600, in seconds, the default value is 60 seconds.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Restricting the user access attempts can prevent attackers from using the brute-force method to guess the passwords of authorized users. If a user consecutively fails in authentication N times, the user is rejected by the device for a period of time. This reduces the possibility that the user successfully guesses the password. When the user consecutively fails in authentication request-session times within request-period, the device rejects the connection requests from this user until the blocking period expires.

Example

# Configure the device to block a PPPoE user 1000 seconds after the user consecutively fails in authentication 100 times within 500 seconds.

<HUAWEI> system-view
[HUAWEI] ppp connection chasten 100 500 1000

ppp keepalive

Function

The ppp keepalive command sets the handshake interval and maximum retransmission times of handshake packets.

The undo ppp keepalive command restores the default handshake interval and maximum retransmission times of handshake packets.

By default, the handshake function is enabled, the handshake timeout interval is 40s, and maximum retransmission times of handshake packets is 2.

Format

ppp keepalive { interval interval-time | retransmit times } *

undo ppp keepalive { interval [ interval-time ] | retransmit [ times ] } *

Parameters

Parameter Description Value
interval interval-time

Sets the interval for sending handshake packets to users.

It is an integer that ranges from 0, 20 to 65535, in seconds. The value 0 indicates that the device does not send handshake packets to users. The default value is 40.
retransmit times

Sets the maximum retransmission times of handshake packets.

The value is an integer that ranges from 1 to 10. The default value is 2.

Views

Virtual template view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To monitor online status of PPPoE users, the device periodically sends handshake packets to the users. If a user responds within the timeout interval, the device considers that the user is online. If a user does not respond within the timeout interval after the retransmission times of handshake packets reaches the maximum, the device considers that the user is offline.

On a network that is unstable or poses low requirement on delay, set the interval and retransmission times to relatively larger values. However, you should note that if the values are too large, the device may fail to detect link faults timely.

If the values of handshake interval and retransmission times are too small, PPPoE users may be frequently disconnected when network congestion occurs.

Example

# On virtual template 1, set the handshake interval to 40 seconds and maximum retransmission times of handshake packets to 4.

<HUAWEI> system-view
[HUAWEI] interface virtual-template 1
[HUAWEI-Virtual-Template1] ppp keepalive interval 40 retransmit 4

ppp mru

Function

The ppp mru command sets the maximum receive unit (MRU) for PPP negotiation.

The undo ppp mru command restores the default MRU value.

By default, the MRU for PPP negotiation is 1492 bytes.

Format

ppp mru mru

undo ppp mru

Parameters

Parameter Description Value
mru

Specifies the MRU for PPP negotiation.

The value is an integer that ranges from 1024 to 9600.

Views

Virtual template view

Default Level

2: Configuration level

Usage Guidelines

The ppp mru command is used to adjust the MRU values used by the local and remote interfaces so that the size of packets sent by the remote interface can be controlled.

Example

# On virtual template 1, set the MRU to 1400 bytes.

<HUAWEI> system-view
[HUAWEI] interface virtual-template 1
[HUAWEI-Virtual-Template1] ppp mru 1400

ppp timer negotiate

Function

The ppp timer negotiate command sets the timeout interval of PPPoE negotiation.

The undo ppp timer negotiate command restores the default timeout interval of PPP negotiation.

By default, the PPPoE negotiation timeout interval is 3s.

Format

ppp timer negotiate seconds

undo ppp timer negotiate

Parameters

Parameter Description Value
seconds Specifies the PPPoE negotiation timeout interval. The value ranges from 1 to 10, in seconds. The default value is 3.

Views

Virtual template view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

This command specifies the timeout interval of PPPoE negotiation. If the device does not receive the response from the remote end within this timeout interval, the device retransmits the packet.

Configuration Impact

If you run this command multiple times in the same view, only the latest configuration takes effect.

Example

# On virtual template 1, set the timeout interval of PPPoE negotiation to 5s.

<HUAWEI> system-view
[HUAWEI] interface virtual-template 1
[HUAWEI-Virtual-Template1] ppp timer negotiate 5

pppoe-server bind virtual-template

Function

The pppoe-server bind virtual-template command binds a virtual template to an interface.

The undo pppoe-server bind virtual-template command unbinds a virtual template from an interface.

By default, no virtual template is bound to an interface.

Format

pppoe-server bind virtual-template vt-number

undo pppoe-server bind virtual-template

Parameters

Parameter Description Value
vt-number Specifies the number of a virtual template. The value is an integer that ranges from 0 to 1023.

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The PPPoE authentication configuration takes effect only after the virtual template is bound to a VLANIF interface.

Prerequisites

A virtual template has been created by using the interface virtual-template command.

Precautions

The cards configured in limiting-mac mode do not support user access.

Example

# Bind virtual template 1 to VLANIF10.

<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] pppoe-server bind virtual-template 1

reset ppp statistics

Function

The reset ppp statistics command clears statistics about PPP negotiation during PPPoE user authentication.

Format

reset ppp statistics

Parameters

None

Views

All views

Default Level

3: Management level

Usage Guidelines

This command clears statistics about PPP negotiation during PPPoE user authentication, including number of sent and received PPP packets.

After service re-deploy is complete or a fault has been rectified, run the reset ppp statistics command to clear statistics, collect related statistics again, and then run the display ppp statistics command to check whether authentication works normally and whether packets are successfully sent and received.

Example

# Clear PPP packet statistics.

<HUAWEI> reset ppp statistics

reset pppoe statistics

Function

The reset pppoe statistics command clears statistics about PPPoE negotiation during PPPoE user authentication.

Format

reset pppoe statistics

Parameters

None

Views

All views

Default Level

3: Management level

Usage Guidelines

This command clears statistics about PPPoE statistics, include the number of successful and failed authentications and information about sent and received packets.

After service re-deploy is complete or a fault has been rectified, run the reset pppoe statistics command to clear statistics, collect related statistics again, and then run the display pppoe statistics command to check whether authentication works normally and whether packets are successfully sent and received.

NOTE:

The MAC hash used number and MAC session hash used number statistics will not be deleted so that you can check the accumulative usage information of the hash table on the device.

Example

# Clear PPPoE packet statistics.

<HUAWEI> reset pppoe statistics

traffic-pppoe

Function

The traffic-pppoe command configures an interface to allow only PPPoE packets to pass through.

The undo traffic-pppoe command cancels the configuration.

By default, an interface allows all types of packets to pass through.

NOTE:

X series cards do not support the configuration.

Format

traffic-pppoe { any | source-address } { any | destination-address }

undo traffic-pppoe { any | source-address } { any | destination-address }

Parameters

Parameter

Description

Value

{ any | source-address }

Indicates that an interface allows PPPoE packets with a specified source MAC address to pass through.
  • any indicates that PPPoE packets with any source MAC address can pass through the interface.
  • source-address indicates that PPPoE packets with a specified source MAC address can pass through the interface.

The value of source-address is in the format H-H-H. An H contains 1 to 4 hexadecimal digits.

{ any | destination-address }

Indicates that an interface allows PPPoE packets with a specified destination MAC address to pass through.
  • any indicates that PPPoE packets with any destination MAC address can pass through the interface.
  • destination-address indicates that PPPoE packets with a specified destination MAC address can pass through the interface.

The value of destination-address is in the format H-H-H. An H contains 1 to 4 hexadecimal digits.

Views

GE interface view, XGE interface view, 40GE interface view, 100GE interface view, port group view, Eth-Trunk interface view

Default Level

2: Configuration level

Usage Guidelines

If you run the traffic-pppoe any any command on an interface, the interface allows only PPPoE packets to pass through and discards other packets.

A Layer 2 interface cannot be set to allow only PPPoE packets to pass through after the Layer 2 interface is changed to Layer 3 mode.

Example

# Configure GE1/0/1 to allow only PPPoE packets to pass through.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] traffic-pppoe any any

# Configure GE1/0/1 to allow only PPPoE packets with source MAC address 1-1-1 to pass through.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] traffic-pppoe 1-1-1 any
Translation
Download
Updated: 2019-04-09

Document ID: EDOC1100065659

Views: 114325

Downloads: 83

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next