Show commands#
Show system information
Summary#
| Command | Description |
|---|---|
show |
Show system information |
show accounting |
Show accounting backend status and unpublished records |
show address-pools |
Show dynamic address pools: show address-pools [<name>] |
show address-pools reservations |
Show IPv6 blocks held for IPoE lines whose session has ended: show address-pools reservations [<pool>] |
show alarms |
Show active alarms |
show captures |
Show active packet captures |
show cgn |
Show CG-NAT (NAT44) information |
show cgn bindings |
Show CG-NAT bindings: show cgn bindings [<inside-ip>] |
show cgn groups |
Show CG-NAT IP groups and pool utilisation |
show cgn summary |
Show CG-NAT status and counters |
show cgn translations |
Show a subscriber's live CG-NAT translations: show cgn translations <inside-ip> [vrf <name>] [protocol tcp|udp|icmp] [port <n>] [limit <n>] |
show circuits |
Show CPE GRE/BGP circuits with tunnel and BGP session state |
show circuits vrf |
Show circuits in one customer VRF |
show configuration |
Show running configuration |
show dataplane |
Show the data plane's own forwarding state |
show dataplane drops |
Show drops by reason/stage; urpf shows source-check reasons and armed samples |
show dataplane drops all |
Include the counters that are at zero |
show dataplane drops urpf |
Show uRPF failure reasons counted by the data plane |
show dataplane drops urpf samples |
Show retained header samples from an armed uRPF sampler |
show dataplane load |
Show how busy each forwarding worker is, port rates and NIC drops, and pools and tables against their limits |
show dataplane mpls |
Show what the data plane does with an MPLS label: show dataplane mpls <label> |
show dataplane route |
Show what the data plane itself would do with a destination: show dataplane route <address> [vrf <name>] |
show ipsec |
Show IPsec (strongSwan) status |
show ipsec peer |
Show one IPsec peer in detail |
show l2-circuits |
Show access circuits handed off to a wholesaler at layer 2 (VXLAN): action and deny reason, line, VNI, hand-off VLAN, remote, egress and counters |
show l2-circuits drops |
Show the frames the layer-2 cross-connects dropped, by reason |
show licensing |
Show licensing status |
show licensing telemetry |
Show the exact telemetry payload the box will send |
show protocols |
Show protocol information |
show protocols bgp |
Show BGP information |
show protocols bgp neighbor |
Show BGP neighbor detail |
show protocols bgp summary |
Show BGP peer summary |
show protocols frr-residue |
Show what FRR still holds that the configuration no longer generates |
show protocols isis |
Show IS-IS information |
show protocols isis adjacencies |
Show IS-IS adjacencies |
show protocols l2tp |
Show L2TP information |
show protocols l2tp recovery |
Show planned-restart adoption, rejection and liveness counters |
show protocols l2tp switched |
Show L2TP calls switched to another LNS |
show protocols l2tp tunnels |
Show L2TP tunnels |
show protocols ospf |
Show OSPF information |
show protocols ospf adjacencies |
Show OSPF adjacencies (OSPFv2 and OSPFv3) |
show protocols pppoe |
Show PPPoE information |
show protocols pppoe statistics |
Show PPPoE statistics |
show punt |
Show the punt rules installed in the data plane, their counters and the class budgets |
show radius |
Show RADIUS information |
show radius servers |
Show RADIUS server status |
show route |
Show the IPv4 routing table (default VRF) |
show route vrf |
Show the IPv4 routing table for a VRF |
show source-vrf |
Show source-VRF classification information |
show source-vrf rules |
Show programmed source-VRF classification rules |
show subscribers |
Show subscriber information |
show subscribers local |
Show locally-defined subscribers (no external auth server) |
show subscribers sessions |
Show subscriber sessions |
show subscribers source |
Show the subscriber source and its last refresh |
show subscribers summary |
Show subscriber summary |
show subscribers unclaimed |
Show unclaimed (guest) sessions on access NNIs |
show system |
Show system information |
show system disks |
Show drive SMART health and filesystem state |
show system environment |
Show hardware sensors, memory errors, CPU throttling and the BMC event log |
show system hardware |
Show hardware inventory |
show system interfaces |
Show network interfaces |
show system raid |
Show hardware RAID controller and drive health |
show system restart-pending |
Show committed configuration changes that take effect only after a restart, and which restart |
show system status |
Show system status |
show system uptime |
Show system uptime |
show system version |
Show system version |
show vrfs |
Show configured VRFs and live session counts |
show web-ui |
Show Web UI information |
show web-ui auth |
Show Web UI authentication configuration |
show web-ui auth sessions |
Show active Web UI sessions |
Commands#
show accounting#
Show accounting backend status and unpublished records
Example
user@bng> show accounting
Driver: mock
Not published (no service id): does not apply to this driver - only the Service Bus driver needs a service id to publish a record; this one accounts every session.
show address-pools#
Show dynamic address pools: show address-pools [<name>]
Accepts an optional positional argument <name> — show one pool's subnets
Example
user@bng> show address-pools
Pool Family VRF Hands out Subnets Used/Size Held Util Failures
------------------ -------- --------- --------- -------------------- --------- ---- ---- --------
residential-v4 ipv4 (default) /32 100.64.16.0/20 0/0 0 0% 0
residential-v6-wan ipv6-wan (default) /64 2a0e:9f81:8000::/52* 0/0 0 0% 0
residential-v6-pd ipv6-pd (default) /56 2a0e:9f81:9000::/44* 0/0 0 0% 0
* announced into BGP
Held: IPv6 blocks reserved for IPoE lines whose session has ended (counted in Used)
show address-pools reservations#
Show IPv6 blocks held for IPoE lines whose session has ended: show address-pools reservations [<pool>]
Accepts an optional positional argument <pool> — only this pool's reservations
Example
show alarms#
Show active alarms
Example
user@bng> show alarms
Severity Alarm ID Instance Age Detail
-------- ------------- -------- ----------- -----------------------------------------------------------------------
MAJOR cgn.pool.high public-a 7d 03:14:09 CG-NAT IP group 'public-a' is 94% allocated (7712 of 8192 port blocks).
1 active alarm(s).
(lifetime: 1 raised, 0 cleared, 0 events, 0 events dropped)
show captures#
Show active packet captures
Example
user@bng> show captures
Session ID Destination IP Max Packets Max Duration Started
---------- -------------- ----------- ------------ --------------------
40213 10.20.2.50 unlimited unlimited 2026-08-03T10:24:00Z
1 active captures
show cgn bindings#
Show CG-NAT bindings: show cgn bindings [<inside-ip>]
Accepts an optional positional argument <inside-ip> — filter to one inside (subscriber) IPv4 address; also shows how full each of its port blocks is
show cgn groups#
Show CG-NAT IP groups and pool utilisation
Example
user@bng> show cgn groups
Group Outside VRF Public subnets Chunk Port cap Bindings Chunks used/total
----------- ----------- ---------------- ----- -------- -------- -----------------
residential (default) 45.84.203.224/28 512 2048 0 -
show cgn summary#
Show CG-NAT status and counters
Example
user@bng> show cgn summary
Enabled: yes
Running: no (activates at startup)
Active bindings: 0 / 8192
auto-learned: 0
Max flows: 2000000
IP groups: 1
Subscriber packets CG-NAT refused ('show dataplane drops' explains each):
cgn-untranslatable: 0
cgn-unsupported: 0
cgn-no-binding: 0
cgn-setup-rate: 0
cgn-capacity: 0
cgn-hairpin: 0
cgn-blocked: 0
show cgn translations#
Show a subscriber's live CG-NAT translations: show cgn translations <inside-ip> [vrf <name>] [protocol tcp|udp|icmp] [port <n>] [limit <n>]
Accepts an optional positional argument <inside-ip> — the subscriber's inside IPv4 address
| Parameter | Type | Required | Accepted values | Description |
|---|---|---|---|---|
vrf |
String | no | — | Inside VRF, when the address is used in more than one ('default' = the global table) |
protocol |
String | no | — | Only this protocol: tcp, udp or icmp |
port |
UInt32 | no | — | Only translations whose inside, public or remote port is this |
limit |
UInt32 | no | — | Rows to show per binding (default 200, at most 1000) |
show circuits#
Show CPE GRE/BGP circuits with tunnel and BGP session state
show circuits vrf#
Show circuits in one customer VRF
Accepts an optional positional argument <name> — customer VRF name (as configured in routing.vrfs)
show configuration#
Show running configuration
Accepts an optional positional argument <section> — configuration section (e.g., protocols, system)
Example
user@bng> show configuration routing
routing {
asn 208802;
routerId 45.84.203.1;
hostname bng1.man1;
peers {
[0] {
address 45.84.203.2;
description pe1.man1;
vpnOnly false;
bfd true;
}
[1] {
address 45.84.203.3;
description pe2.man1;
vpnOnly false;
bfd true;
}
}
vrfs {
[0] {
name business;
tableId 2100;
rd 208802:2100;
importRt {
208802:2100;
}
exportRt {
208802:2100;
}
gatewayIp 45.84.203.15;
gatewayIpv6 ;
l2tpEndpointIp null;
originateDefaultRoute false;
cgnIpGroup null;
localAs null;
bgpAsn null;
circuitDefaultRouteOnly false;
}
[1] {
name wholesale;
tableId 2200;
rd 208802:2200;
importRt {
208802:2200;
}
exportRt {
208802:2200;
}
gatewayIp 100.72.0.1;
gatewayIpv6 ;
l2tpEndpointIp null;
originateDefaultRoute false;
cgnIpGroup null;
localAs null;
bgpAsn null;
circuitDefaultRouteOnly false;
}
}
routerId6 2a0e:9f81:8000::1;
enableVrfIpv6 true;
localInterfaces null;
staticRoutes null;
cgnPoolOriginations null;
originateDefaultRoute false;
managementNetwork null;
igp {
protocol isis;
interfaces {
ens3f0;
ens3f1;
}
isis {
net 49.0001.0450.8420.3001.00;
level level-2-only;
}
ospf null;
interfaceList {
ens3f0;
ens3f1;
}
loopbackInterfaces [];
coreInterfaces {
ens3f0;
ens3f1;
}
isIsis true;
isOspf false;
isNone false;
rendersIgp true;
isisOrDefault {
net 49.0001.0450.8420.3001.00;
level level-2-only;
}
ospfOrDefault {
area 0.0.0.0;
interfaceAreas null;
enableOspfv3 null;
}
}
isisNet null;
isisInterfaces null;
greTunnelListeners null;
cpeGreCircuits null;
subscriberPoolOriginations null;
effectiveIgp {
protocol isis;
interfaces {
ens3f0;
ens3f1;
}
isis {
net 49.0001.0450.8420.3001.00;
level level-2-only;
}
ospf null;
interfaceList {
ens3f0;
ens3f1;
}
loopbackInterfaces [];
coreInterfaces {
ens3f0;
ens3f1;
}
isIsis true;
isOspf false;
isNone false;
rendersIgp true;
isisOrDefault {
net 49.0001.0450.8420.3001.00;
level level-2-only;
}
ospfOrDefault {
area 0.0.0.0;
interfaceAreas null;
enableOspfv3 null;
}
}
}
show dataplane drops#
Show drops by reason/stage; urpf shows source-check reasons and armed samples
Example
user@bng> show dataplane drops
Forwarding drops by reason (since the data plane started)
Name Packets Meaning
----------- ------- -----------------------------------------------------------------------------------------------------------
total 812 every forwarding-decision drop; the reasons below are subsets of it
urpf 40 source address failed the subscriber's reverse-path check (spoofed, or an address the session does not own)
rate-limit 21 over the subscriber's rate — QoS policing, expected when a subscriber fills their plan
no-session 702 no active session on the subscriber circuit, or (from the core) none owning the destination address
ttl-expired 31 TTL / hop limit ran out here; time-exceeded is returned where possible (traceroute does this)
too-big 6 larger than the egress MTU and not fragmentable (DF set, or IPv6); too-big is returned to the sender
other 12 total minus every reason above (and drops from before a data-plane restart) — the stages below say where
Forwarding drops by pipeline stage
Name Packets Meaning
------------------ ------- -------------------------------------------------------------------------------------------
subscriber-ingress 61 from subscribers toward the core: uRPF, policing, no route, blackhole, empty next-hop group
core-downstream 751 from the core toward subscribers, including traffic for an address no session owns
Outside the forwarding decision (not in total)
Name Packets Meaning
------------------------- ------- -----------------------------------------------------------------------------------------------------
punt-rate 1290 a punt rule's own rate limit discarded traffic for the box (show punt has the rule)
tunnel-fragments 2 fragmented L2TP datagrams that could not be reassembled, so were lost — the reassembly table says why
port 1 (ens1f1) rx-missed 37 the NIC dropped on receive: its ring overflowed because the workers fell behind
L2TP outer reassembly (since the data plane started; 0 datagrams in progress)
Name Packets Meaning
---------------- ------- ---------------------------------------------------------------------------
reassembled 1834 outer-fragmented L2TP datagrams to this box put back together and passed on
fragments-joined 1834 later fragments copied into a datagram being reassembled
timeout 2 datagrams given up: a piece did not arrive within the timeout
Peers sending fragmented L2TP (outer source)
Peer VRF Reassembled Failed
---------- ------- ----------- ------
192.0.2.10 default 1834 2
Counters at zero are not shown; 'show dataplane drops all' lists every one.
show dataplane drops all#
Include the counters that are at zero
Example
user@bng> show dataplane drops all
Forwarding drops by reason (since the data plane started)
Name Packets Meaning
------------------ ------- -------------------------------------------------------------------------------------------------------------------------------------------
total 812 every forwarding-decision drop; the reasons below are subsets of it
urpf 40 source address failed the subscriber's reverse-path check (spoofed, or an address the session does not own)
rate-limit 21 over the subscriber's rate — QoS policing, expected when a subscriber fills their plan
mpls-ttl 0 MPLS transport label arrived with its TTL expired
tunnel-mtu 0 L2TP downstream frame larger than the egress MTU — check the uplink MTU
ip-checksum 0 the NIC reported a corrupt IPv4 header checksum
blocked 0 the subscriber is hard-blocked
destination-scope 0 a subscriber sent to a destination that is not routable off-link (loopback, link-local, multicast)
source-routing 0 a subscriber packet carried a source-routing option or header (hardening is enabled)
cgn-untranslatable 0 CG-NAT cannot translate it: a TCP/UDP source port of 0, or a transport header cut short
cgn-unsupported 0 CG-NAT does not translate it: a protocol other than TCP/UDP/ICMP, an unmatched ICMP error
cgn-no-binding 0 the subscriber has no active CG-NAT binding, or its IP group is not active (show cgn bindings)
cgn-setup-rate 0 over the subscriber's CG-NAT new-flow rate limit
cgn-capacity 0 CG-NAT had no room for a new flow: ports, flow cap or a full table (show cgn summary says which)
cgn-hairpin 0 to another subscriber's public address, and CG-NAT could not translate or deliver it there
cgn-no-mapping 0 from the core to a CG-NAT pool address with no mapping — unsolicited inbound, normally background noise
no-session 702 no active session on the subscriber circuit, or (from the core) none owning the destination address
malformed 0 a header that does not parse, or a frame shorter than its headers say
encap-mismatch 0 not PPPoE on a PPPoE session's circuit, or a PPPoE session id that is not the session's
unhandled-protocol 0 neither IP nor PPPoE and no punt rule wants it — LLDP, STP and the like on an access port
ttl-expired 31 TTL / hop limit ran out here; time-exceeded is returned where possible (traceroute does this)
too-big 6 larger than the egress MTU and not fragmentable (DF set, or IPv6); too-big is returned to the sender
no-route 0 no route for the destination in its VRF, or a blackhole route (show dataplane route)
no-next-hop 0 the route's next-hop group is empty or its member is unusable (show dataplane route)
mpls-label 0 an MPLS label with no pop entry, or a label stack not handled (show dataplane mpls)
tx-failed 0 could not be built or queued for transmit: no headroom, or the egress port refused it
tunnel-peer 0 L2TP data for a live session from an address, port or VRF that is not its tunnel's
subscriber-nd 0 IPv6 Neighbour Discovery from a subscriber that would have been forwarded: fragmented, or to a routable destination with nothing to take it
cgn-fragment 0 a later fragment through CG-NAT whose first fragment was not translated here just before it (lost, out of order, or the cache was full)
cgn-blocked 0 refused by the IP group's outbound block policy: a blocked port or destination prefix (show configuration cgn)
other 12 total minus every reason above (and drops from before a data-plane restart) — the stages below say where
Forwarding drops by pipeline stage
Name Packets Meaning
------------------ ------- -------------------------------------------------------------------------------------------
unknown 0 a drop not attributed to a stage
subscriber-to-self 0 subscriber traffic addressed to the box itself that it did not accept
network-to-self 0 core-side traffic addressed to the box that it did not accept
l2tp-leg-tx 0 could not transmit on an L2TP leg (not counted in total)
l2tp-switch 0 L2TP tunnel-switched traffic (LAC to onward LNS)
l2tp-upstream 0 L2TP data arriving from a LAC
subscriber-ingress 61 from subscribers toward the core: uRPF, policing, no route, blackhole, empty next-hop group
core-downstream 751 from the core toward subscribers, including traffic for an address no session owns
punt-delivery 0 a punt that could not be delivered to the kernel or the control plane
nd-punt-rate 0 IPv6 neighbour discovery over its punt limit
kernel-punt-tap 0 the kernel punt TAP refused the frame (queue full, device down)
ppp-control-punt 0 PPP control over its punt limit, or the punt ring was full
l2-control-punt 0 IS-IS / LLC over its punt limit
punt-early-shed 0 a subscriber punt flood shed before the rule scan (budget already spent)
Outside the forwarding decision (not in total)
Name Packets Meaning
---------------------------- ------- ------------------------------------------------------------------------------------------------------------------------------------
punt-rate 1290 a punt rule's own rate limit discarded traffic for the box (show punt has the rule)
unresolved-next-hop 0 the next hop had no MAC address and the packet could not be handed to the kernel to resolve it
unresolved-to-kernel 0 no MAC address for the next hop: handed to the kernel to forward and resolve (not a drop here; rising with traffic lost: 'ip neigh')
tx-refused 0 the NIC or backend refused a frame the data plane built (TX ring full, oversized)
tunnel-fragments 2 fragmented L2TP datagrams that could not be reassembled, so were lost — the reassembly table says why
fib-writes-refused 0 route writes the data plane rejected (not packets): those routes follow their covering route instead
port 0 (ens1f0) rx-missed 0 the NIC dropped on receive: its ring overflowed because the workers fell behind
port 0 (ens1f0) rx-no-buffer 0 receive failed for want of a packet buffer
port 0 (ens1f0) rx-errors 0 frames the NIC received in error
port 0 (ens1f0) tx-errors 0 frames the NIC failed to transmit
port 1 (ens1f1) rx-missed 37 the NIC dropped on receive: its ring overflowed because the workers fell behind
port 1 (ens1f1) rx-no-buffer 0 receive failed for want of a packet buffer
port 1 (ens1f1) rx-errors 0 frames the NIC received in error
port 1 (ens1f1) tx-errors 0 frames the NIC failed to transmit
L2TP outer reassembly (since the data plane started; 0 datagrams in progress)
Name Packets Meaning
------------------ ------- ---------------------------------------------------------------------------------------------------
reassembled 1834 outer-fragmented L2TP datagrams to this box put back together and passed on
fragments-joined 1834 later fragments copied into a datagram being reassembled
timeout 2 datagrams given up: a piece did not arrive within the timeout
evicted 0 datagrams given up to make room: the reassembly table was full
source-cap 0 datagrams given up: their source already had its share of the table in progress
invalid 0 datagrams given up: overlapping or inconsistent pieces, or a bad UDP length or checksum
too-big 0 datagrams given up: over the size or fragment limit, or larger than the first fragment's buffer
duplicate 0 exact copies of a piece already held, ignored (the datagram is kept)
no-first-fragment 0 later UDP fragments to the box with nothing to join (RADIUS / DNS replies too), passed on as before
peer-untracked 0 outcomes for a source the per-peer table had no row for
early-tail-held 0 later fragments held for a first fragment that had not yet arrived
early-tail-claimed 0 held later fragments a first fragment then took
early-tail-lost 0 held later fragments given up: no first fragment took them in time, or room
id-reuse 0 first fragments held beside another datagram with the same IP ID
checksum-mismatch 0 pairings refused: the rebuilt UDP checksum did not verify (never delivered)
Peers sending fragmented L2TP (outer source)
Peer VRF Reassembled Failed
---------- ------- ----------- ------
192.0.2.10 default 1834 2
show dataplane drops urpf#
Show uRPF failure reasons counted by the data plane
show dataplane drops urpf samples#
Show retained header samples from an armed uRPF sampler
show dataplane load#
Show how busy each forwarding worker is, port rates and NIC drops, and pools and tables against their limits
show dataplane mpls#
Show what the data plane does with an MPLS label: show dataplane mpls <label>
Accepts an optional positional argument <label> — mPLS label (0-1048575)
Example
user@bng> show dataplane mpls 24010
Data-plane label 24010: pop, then forward the inner packet in VRF business (id 1)
show dataplane route#
Show what the data plane itself would do with a destination: show dataplane route <address> [vrf <name>]
Accepts an optional positional argument <destination> — destination address (IPv4 or IPv6)
| Parameter | Type | Required | Accepted values | Description |
|---|---|---|---|---|
vrf |
String | no | — | VRF to look in: a configured name, or a data-plane VRF id (default: the global table) |
Example
user@bng> show dataplane route 100.64.12.37 vrf internet
Data-plane lookup: 100.64.12.37 in VRF internet (id 1)
Own address: no
Subscriber address: 100.64.12.37/32 -> session 40213 (slot 0, active), alice@example.net
Subscriber prefix: no
FIB: 0.0.0.0/0 -> next-hop group 12
next-hop group 12: 2 members, source MAC 02:00:00:00:00:01
0: via 10.0.0.1 port 1 (ens3f1) MAC 00:11:22:33:44:0a no labels weight 1
1: via 10.0.0.2 port 1 (ens3f1) MAC 00:11:22:33:44:0b labels 16001 (transport), 24005 (vpn) weight 1
From the core: delivered to subscriber session 40213
From a subscriber: forwarded through next-hop group 12 (one of 2 members per flow)
show ipsec#
Show IPsec (strongSwan) status
show ipsec peer#
Show one IPsec peer in detail
Accepts an optional positional argument <name> — peer name
show l2-circuits#
Show access circuits handed off to a wholesaler at layer 2 (VXLAN): action and deny reason, line, VNI, hand-off VLAN, remote, egress and counters
show l2-circuits drops#
Show the frames the layer-2 cross-connects dropped, by reason
show licensing#
Show licensing status
show licensing telemetry#
Show the exact telemetry payload the box will send
show protocols bgp neighbor#
Show BGP neighbor detail
Accepts an optional positional argument <address> — neighbor IPv4 address
show protocols bgp summary#
Show BGP peer summary
show protocols frr-residue#
Show what FRR still holds that the configuration no longer generates
show protocols isis adjacencies#
Show IS-IS adjacencies
Example
user@bng> show protocols isis adjacencies
Neighbor Interface Level State Hold SNPA
-------- --------- ----- ----- ---- --------------
pe1.man1 ens3f0 L2 Up 27s a8d0.e5f2.1c44
pe2.man1 ens3f1 L2 Up 24s a8d0.e5f2.2c44
show protocols l2tp recovery#
Show planned-restart adoption, rejection and liveness counters
show protocols l2tp switched#
Show L2TP calls switched to another LNS
show protocols l2tp tunnels#
Show L2TP tunnels
Accepts an optional positional argument <id> — tunnel ID
show protocols ospf adjacencies#
Show OSPF adjacencies (OSPFv2 and OSPFv3)
Example
user@bng> show protocols ospf adjacencies
Neighbor Interface Proto State Pri Dead Address
----------- --------- ------ ------ --- ---- -------------------------
45.84.203.2 ens3f0 OSPFv2 Full/- 1 33s 45.84.203.4
45.84.203.2 ens3f0 OSPFv3 Full/- 1 35s fe80::aad0:e5ff:fef2:1c44
show protocols pppoe statistics#
Show PPPoE statistics
Example
user@bng> show protocols pppoe statistics
PPPoE sessions: 3
locally terminated: 2
via L2TP (LAC/LNS): 1
Walled garden: 0
With a service plan: 3
Per service VLAN:
101 3
show punt#
Show the punt rules installed in the data plane, their counters and the class budgets
Example
user@bng> show punt
Punt classes (counters since the data plane started)
Class Admitted Refused Rules Budget
---------- -------- ------- ----- ----------------------------------------------------------------------------------------------------------
routing 184166 0 3 20000 pps box-wide
management 9120 0 1 2000 pps box-wide
subscriber 730152 1290 2 per-circuit 100, per-port 5000, per-peer 2000, global 20000, aggregate 20000 pps, divided across 4 workers
default 12044 0 1 per-port 5000, aggregate 20000 pps, divided across 4 workers
Punt rules: 7 of 256 installed, in evaluation order (first match wins)
ID Prio Match To Class Limit Matched Punted Dropped Description
--- ---- ------------------------------------------------------- ------------- ---------- --------- ------- ------ ------- -----------------------
100 100 ipv4 udp dport 67 on subscriber control-plane subscriber 5000 pps 412907 411617 1290 DHCPv4 from subscribers
110 110 pppoe-discovery on subscriber control-plane subscriber 5000 pps 318535 318535 0 PPPoE discovery
690 690 ipv4 tcp dport 179 from 192.0.2.2/32 to-self on network kernel routing - 18211 18211 0 BGP from 192.0.2.2
700 700 ipv4 tcp dport 179 to-self on network drop routing - 37 0 37 BGP from anyone else
850 850 arp on network kernel routing 5000 pps 165955 165955 0 ARP (core)
880 880 ipv4 tcp dport 22 to-self on network kernel management 2000 pps 9120 9120 0 SSH
900 900 ipv4 to-self kernel default 10000 pps 12044 12044 0 IPv4 to self
Class is where a match is charged when it arrives on a network port; anything from a
subscriber port is charged to subscriber. Refused includes a rule's own limit.
show radius servers#
Show RADIUS server status
Example
user@bng> show radius servers
Host Port Weight Status Failures Requests
---------- ---- ------ ------ -------- --------
10.20.2.20 1812 10 ALIVE 0 0
10.20.2.21 1812 10 ALIVE 0 0
Total: 2 servers, 2 alive, 0 dead
show route#
Show the IPv4 routing table (default VRF)
show route vrf#
Show the IPv4 routing table for a VRF
Accepts an optional positional argument <name> — vRF name (as configured in routing.vrfs)
show source-vrf rules#
Show programmed source-VRF classification rules
show subscribers local#
Show locally-defined subscribers (no external auth server)
Example
user@bng> show subscribers local
Type Subscriber IPv4 IPv6 VRF Plan Down/Up (kbit) Status
---- ---------------------------------- ---- ---- --- --------- -------------- ----------------------------------
ppp noc-test-line@fibre.netavo.com - - - Fibre 900 900000/110000 offline
ppp field-engineer-1@fibre.netavo.com - - - Fibre 500 500000/75000 offline
ppp field-engineer-2@fibre.netavo.com - - - Fibre 500 500000/75000 offline
ppp probe-man-central@fibre.netavo.com - - - Fibre 150 150000/30000 offline
ppp probe-trafford@fibre.netavo.com - - - Fibre 150 150000/30000 offline
ppp alice@example.net - - - default 100000/50000 online 7d 03:14:09 (session 40213)
ppp acme-ltd@example.net - - - default 100000/50000 online 7d 03:14:09 (session 40215)
7 local subscribers (2 online)
show subscribers sessions#
Show subscriber sessions
Accepts an optional positional argument <id> — session ID
Example
user@bng> show subscribers sessions
Session ID Type Subscriber IPv4 VRF Uptime Bytes (up/down) Pkts (up/down)
---------- ---- -------------------- ------------ ----------- ----------- --------------- --------------
40213 ppp alice@example.net 100.64.12.37 residential 7d 03:14:09 0B/0B 0/0
40214 ppp bob@example.net 100.64.12.38 residential 7d 03:14:09 0B/0B 0/0
40215 ppp acme-ltd@example.net 100.64.12.39 residential 7d 03:14:09 0B/0B 0/0
40216 ipoe 0a:1b:2c:3d:4e:5f 100.64.20.11 residential 7d 03:14:09 0B/0B 0/0
4 sessions displayed
show subscribers source#
Show the subscriber source and its last refresh
Example
user@bng> show subscribers source
No subscriber source configured — serving subscribers declared in the configuration.
Set auth.database.connection-string to load them from SQL.
show subscribers summary#
Show subscriber summary
Example
user@bng> show subscribers summary
Total sessions: 4
IPoE sessions: 1
PPPoE sessions: 3
Per-VRF counts:
residential: 4
Refused bring-ups: 0
show subscribers unclaimed#
Show unclaimed (guest) sessions on access NNIs
Example
show system disks#
Show drive SMART health and filesystem state
show system environment#
Show hardware sensors, memory errors, CPU throttling and the BMC event log
show system hardware#
Show hardware inventory
Example
user@bng> show system hardware
CPU
Model: AMD EPYC 9124 16-Core Processor
Topology: 1 socket(s), 16 core(s), 32 thread(s), 1 NUMA node(s)
Memory
Total: 137.4G
NUMA 0: 137.4G
Hugepages: 1048576kB — 12 free of 16
Board
System: Supermicro AS -1115SV-WTNRT
BIOS: American Megatrends International, LLC. 2.1 10/17/2024
Network adapters
PCI Vendor Model Driver NUMA
------------ ----------------- --------------------------------------- -------- ----
0000:41:00.0 Intel Corporation Ethernet Controller X710 for 10GbE SFP+ vfio-pci 0
0000:41:00.1 Intel Corporation Ethernet Controller X710 for 10GbE SFP+ vfio-pci 0
0000:41:00.2 Intel Corporation Ethernet Controller X710 for 10GbE SFP+ vfio-pci 0
0000:81:00.0 Intel Corporation Ethernet Controller E810-C for QSFP vfio-pci 0
0000:81:00.1 Intel Corporation Ethernet Controller E810-C for QSFP vfio-pci 0
0000:07:00.0 Intel Corporation I210 Gigabit Network Connection igb 0
Filesystems
Mount Type Total Available
----- ---- ------ ---------
/ ext4 471.4G 441.3G
show system interfaces#
Show network interfaces
Example
user@bng> show system interfaces
Interface Role Owner State Speed MTU MAC PCI
------------ ---------- ---------- ------- ------- ----- ----------------- ------------
0000:41:00.0 subscriber dataplane up 10000M 1500 - 0000:41:00.0
0000:41:00.1 subscriber dataplane up 10000M 1500 - 0000:41:00.1
0000:41:00.2 subscriber dataplane up 10000M 1500 - 0000:41:00.2
0000:81:00.0 network dataplane up 100000M 9100 - 0000:81:00.0
0000:81:00.1 network dataplane up 100000M 9100 - 0000:81:00.1
eno1 management kernel-vrf up 1000M 1500 ac:1f:6b:8e:4c:d2 0000:07:00.0
lo loopback kernel unknown - 65536 00:00:00:00:00:00 -
show system raid#
Show hardware RAID controller and drive health
show system restart-pending#
Show committed configuration changes that take effect only after a restart, and which restart
show system status#
Show system status
Example
user@bng> show system status
System status: active
Version: 0.1.0
Active sessions: 4
IPoE: 1
PPPoE: 3
FIB sync: not running
show system uptime#
Show system uptime
Example
show system version#
Show system version
Example
show vrfs#
Show configured VRFs and live session counts
Example
user@bng> show vrfs
VRF Table RD Import RT Export RT Sessions
--------- ----- ----------- ----------- ----------- --------
business 2100 208802:2100 208802:2100 208802:2100 0
wholesale 2200 208802:2200 208802:2200 208802:2200 0
show web-ui auth#
Show Web UI authentication configuration
show web-ui auth sessions#
Show active Web UI sessions