Monitoring the Point-to-Point over Ethernet Client
The show vpdn command displays information about the PPPoE traffic on the Security
Appliance. Without any other keywords, this command displays information about the
PPPoE tunnels and sessions, such as in the following:
pix515a# show vpdn
Table 14-6 ip address Command Parameters
Parameter Description
interface-name The name of the outside interface on the Security Appliance
ip-address The IP address assigned to the Security Appliance’s outside interface
netmask The subnet mask assigned to the Security Appliance’s outside interface
setroute Configures the Security Appliance to use the default gateway parameter that the
DHCP or PPPoE server returns as the default route
440 Chapter 14: Configuring Access VPNs
%No active L2TP tunnels
PPPoE Tunnel and Session Information (Total tunnels=1 sessions=1)
Tunnel id 0, 1 active sessions
time since change 4294967 secs
Remote MAC Address 00:02:3B:02:32:2E
9005625 packets sent, 11376588 received, 1755681415 bytes sent, -407696198 received
Remote MAC is 00:02:3B:02:32:2E
Session state is SESSION_UP
Time since event change 4294967 secs, interface outside
PPP interface id is 1
9005625 packets sent, 1265856 received, 1755681415 bytes sent, 865125131 received
pix515a#
To view the information only on your VPDN sessions, you can add the session keyword to
the show vpdn command, as in the following:
pix515a# show vpdn session
%No active L2TP tunnels
PPPoE Tunnel and Session Information (Total tunnels=1 sessions=1)
Remote MAC is 00:02:3B:02:32:2E
Session state is SESSION_UP
Time since event change 4294967 secs, interface outside
PPP interface id is 1
9005664 packets sent, 1265894 received, 1755684373 bytes sent, 865127247 received
pix515a#
To view the information only on your VPDN tunnels, you can add the tunnel keyword to the
show vpdn command, as in the following:
pix515a# show vpdn tunnel
%No active L2TP tunnels
PPPoE Tunnel and Session Information (Total tunnels=1 sessions=1)
Tunnel id 0, 1 active sessions
time since change 4294967 secs
Remote MAC Address 00:02:3B:02:32:2E
9005704 packets sent, 11376666 received, 1755687225 bytes sent, -407691806 received
pix515a#
You can use the show vpdn pppinterface command when a PPPoE connection is established
to view the address of the AC. If the Security Appliance cannot locate the AC, the address
displayed is 0.0.0.0. The syntax for this command is as follows:
show vpdn pppinterface [id interface_name]
Dynamic Host Configuration Protocol Server Configuration 441
The output of the show vpdn pppinterface command is similar to the following:
pix515a# show vpdn pppinterface
PPP virtual interface id = 1
PPP authentication protocol is PAP
Server ip address is 214.8.252.151
Our ip address is 88.235.123.14
Transmitted Pkts: 1002469, Received Pkts: 1265984, Error Pkts: 0
MPPE key strength is None
MPPE_Encrypt_Pkts: 0, MPPE_Encrypt_Bytes: 0
MPPE_Decrypt_Pkts: 0, MPPE_Decrypt_Bytes: 0
Rcvd_Out_Of_Seq_MPPE_Pkts: 0
pix515a#
To view the local usernames, you use the show vpdn username command, and the show vpdn
group command displays the configured VPDN groups. The syntax for these commands is
as follows:
show vpdn
show vpdn username [specific-name]
show vpdn group [specific-group-name]
To view the IP address assigned by the PPPoE server on an established PPPoE session, you
use the show ip address command using the interface on which PPPoE is enabled. The syntax
for this command is as follows:
show ip address interface-name pppoe
Finally, you can debug the PPPoE packets processed by the Security Appliance with the debug
pppoe command. The syntax for this command is as follows:
debug pppoe {event | error | packet}