Let’s say the user has an IP address 172.18.24.33, now let’s see the speed:
show subscribers address 172.16.17.249 extensive
show subscribers address 172.16.17.249 extensive
Type: DHCP
User Name: 0027.228c.6bdd
IP Address: 172.16.17.249
IP Netmask: 255.255.224.0
Primary DNS Address: 192.168.5.5
Secondary DNS Address: 192.168.5.6
Logical System: default
Routing Instance: default
Interface: demux0.3222071305
Interface type: Dynamic
Underlying Interface: demux0.3222010822
Dynamic Profile Name: DHCP-IP-Demux2
MAC Address: 00:27:22:8c:6b:dd
State: Active
Radius Accounting ID: 4685415
Session ID: 4685415
PFE Flow ID: 845919
VLAN Id: 726
Login Time: 2023-11-17 09:08:25 EET
Service Sessions: 1
DHCP Options: len 50
35 01 01 3d 07 01 00 27 22 8c 6b dd 39 02 02 40 37 07 01 03
06 0c 0f 1c 2a 3c 0c 75 64 68 63 70 20 31 2e 32 34 2e 32 0c
09 52 6f 63 6b 65 74 20 4d 35
DHCP Header: len 44
01 01 06 00 4a 05 9a 82 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 27 22 8c 6b dd 00 00 00 00 00 00
00 00 00 00
IP Address Pool: 17216
IPv4 Input Filter Name: GREY-TO-NAT-demux0.3222071305-in
IPv4 rpf-check Fail Filter Name: RPF-ALLOW-DHCP
Accounting interval: 600
Service Session ID: 4685416
Service Session Name: svc-global-ipoe
State: Active
Family: inet
Service session type: Service-Profile
IPv4 Input Filter Name: INET_IN_UID4523-demux0.3222071305-in
IPv4 Output Filter Name: INET_OUT_UID4525-demux0.3222071305-out
Service Activation time: 2023-11-17 09:08:25 EET
Dynamic configuration:
INET_IN: INET_IN_UID4523
INET_OUT: INET_OUT_UID4525
POLICER_IN: POLICER_IN_UID4522
POLICER_OUT: POLICER_OUT_UID4524
SPEED_IN: 16155648
SPEED_OUT: 16155648
At the very end we see SPEED_IN / SPEED_OUT 16155648 (value in bytes, which is equal to about 15 Mbit/s).
Let me give you another example, let’s look at the Radius Accounting ID and Session ID of the user:
show subscribers address 172.18.24.33 detail
I got:
Type: DHCP
User Name: 00c9.00bd.00d5
IP Address: 172.18.24.33
IP Netmask: 255.255.224.0
Primary DNS Address: 192.168.5.5
Secondary DNS Address: 192.168.5.6
Logical System: default
Routing Instance: default
Interface: demux0.3221823351
Interface type: Dynamic
Underlying Interface: demux0.3221225482
Dynamic Profile Name: DHCP-IP-Demux
MAC Address: 00:c9:00:bd:00:d5
State: Active
Radius Accounting ID: 1228432
Session ID: 1228432
PFE Flow ID: 597898
VLAN Id: 228
Login Time: 2023-04-12 10:08:17 EEST
Service Sessions: 1
DHCP Options: len 51
35 01 01 39 02 04 00 3d 07 01 c0 c9 e3 bd 2c d5 0c 0a 41 72
63 68 65 72 5f 43 32 30 3c 08 4d 53 46 54 20 35 2e 30 37 0b
01 03 06 0f 2b 2c 2e 2f 21 79 f9
DHCP Header: len 44
01 01 06 00 0b 6e eb 1b 00 00 80 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 c0 c9 e3 bd 2c d5 00 00 00 00 00 00
00 00 00 00
As we can see, they are the same and equal to 1228432, now let’s see what dynamic profile is used by this user and what speed filter is specified for him in this profile:
show dynamic-profile session client-id 1228432
I got:
DHCP-IP-Demux {
interfaces {
demux0 {
unit 3221823351 {
no-traps;
proxy-arp restricted;
demux-options {
underlying-interface demux0.3221225482;
}
family {
inet {
mac-validate strict;
rpf-check fail-filter RPF-ALLOW-DHCP;
demux-source {
172.18.24.33/32;
}
unnumbered-address lo0.0 preferred-source-address 10.10.0.3;
}
}
}
}
}
}
svc-global-ipoe {
interfaces {
demux0 {
unit 3221823351 {
family {
inet {
filter {
input INET_IN_UID1025 precedence 50;
output INET_OUT_UID1027 precedence 50;
}
}
}
}
}
}
firewall {
family {
inet {
filter INET_IN_UID1025 {
interface-specific;
term 1 {
then {
policer POLICER_IN_UID1024;
service-accounting;
accept;
}
}
}
filter INET_OUT_UID1027 {
interface-specific;
term 1 {
then {
policer POLICER_OUT_UID1026;
service-accounting;
accept;
}
}
}
}
}
policer POLICER_IN_UID1024 {
filter-specific;
if-exceeding {
bandwidth-limit 104858624;
burst-size-limit 512k;
}
then discard;
}
policer POLICER_OUT_UID1026 {
filter-specific;
if-exceeding {
bandwidth-limit 104858624;
burst-size-limit 512k;
}
then discard;
}
}
}
As you can see, POLICER_IN and POLICER_OUT have a limit of 104858624 bytes, which is equal to 100 Mbit/s.
You can also see information about the demux interface of this user:
show subscribers interface demux0.3221225482 extensive
Type: VLAN
Logical System: default
Routing Instance: default
Interface: demux0.3221225482
Interface type: Dynamic
Underlying Interface: ae0
Dynamic Profile Name: Auto-VLAN-Demux
State: Active
Session ID: 11
PFE Flow ID: 29
VLAN Id: 228
Login Time: 2023-01-28 02:13:19 EET
See also my articles:
Juniper MX204 setup
Configuring Juniper MX and ABillS