This article provides commands to check the policing rate and policed rate of a subscriber session.

Two subscribers are tested for 5m upload/download speed:

_in uses the normal policer: only one FPC will be used for ingress (subscribers upload).
_out uses a shared-bandwidth-policer: two FPCs will be used for egress (subscribers download).

In both download/upload directions, the subscriber should not exceed 5m bandwidth.

200m of traffic is pushed from subscribers to uplink (100m per subscriber as seen in the input bps of the pp0 interface).
200m of traffic is pushed from uplink to subscribers (100m per subscriber as seen in the input bps of the ge-1/0/4 interface).

Only 5m goes out per subscriber, as seen in the output bps of the pp0 interface. Only 10m goes out on the uplink (5m per subscriber) as seen in the output bps of ge-1/0/4. The pp0 interface will not show the policed rate in the input direction.

These statistics are taken before the PFE's police action, so in production routers it might not be possible to compare the rate against the uplink traffic.

To review more details of the subscriber session from the CLI, use the following commands:

test@ERX-MX480-1-RE0> show subscribers
Interface      IP Address/VLAN ID User Name    LS:RI
pp0.1073764922 44.160.1.1         [email protected] default:default
pp0.1073764923 44.160.1.2         [email protected] default:default


test@ERX-MX480-1-RE0> show subscribers extensive
Type: PPPoE
User Name: [email protected]  
IP Address: 44.160.1.1
Primary DNS Address: 41.160.0.36
Secondary DNS Address: 41.160.0.37
Logical System: default
Routing Instance: default
Interface: pp0.1073764922
Interface type: Dynamic
Underlying Interface: demux0.100
Dynamic Profile Name: PPPoE-Default
MAC Address: aa:bb:cc:00:00:00
Session Timeout (seconds): 520000
Idle Timeout (seconds): 86400
State: Active
Radius Accounting ID: 23099
Session ID: 23099
VLAN Id: 100
Login Time: 2014-11-19 14:48:56 IST
IPv4 Input Filter Name: Service_test_Sym_in-pp0.1073764922-in
IPv4 Output Filter Name: Service_test_Sym_out-pp0.1073764922-out

Type: PPPoE
User Name: [email protected] 
IP Address: 44.160.1.2
Primary DNS Address: 41.160.0.36
Secondary DNS Address: 41.160.0.37
Logical System: default
Routing Instance: default
Interface: pp0.1073764923
Interface type: Dynamic
Underlying Interface: demux0.100
Dynamic Profile Name: PPPoE-Default
MAC Address: 1c:95:6c:41:00:00
Session Timeout (seconds): 520000
Idle Timeout (seconds): 86400
State: Active
Radius Accounting ID: 23100
Session ID: 23100
VLAN Id: 100
Login Time: 2014-11-19 14:48:56 IST
IPv4 Input Filter Name: Service_test_Sym_in-pp0.1073764923-in
IPv4 Output Filter Name: Service_test_Sym_out-pp0.1073764923-out


test@ERX-MX480-1-RE0> configure
Entering configuration mode

[edit]
test@ERX-MX480-1-RE0# edit groups abcdefg-XON firewall  

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show filter Service_test_Sym_in
interface-specific;
term 1 {
   then {
     policer test_in;
     loss-priority high;
     forwarding-class BRONZE;
   }
}

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show policer Service_test_Sym_in

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show policer test_in
filter-specific;
if-exceeding {
    bandwidth-limit 5m;
    burst-size-limit 350k;
}
then discard;

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show filter Service_test_Sym_out
interface-specific;
term 1 {
    then {
        policer test_out;
        loss-priority high;
        forwarding-class BRONZE;
    }
}

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# show policer test_out
filter-specific;
shared-bandwidth-policer;
if-exceeding {
     bandwidth-limit 5m;
     burst-size-limit 350k;
}
then discard;

[edit groups abcdefg-XON firewall]
test@ERX-MX480-1-RE0# top

[edit]
test@ERX-MX480-1-RE0# quit
Exiting configuration mode


test@ERX-MX480-1-RE0> show subscribers
Interface      IP Address/VLAN ID User Name   LS:RI
pp0.1073764922 44.160.1.1      [email protected]   default:default
pp0.1073764923 44.160.1.2      [email protected]   default:default


test@ERX-MX480-1-RE0> show interfaces ge-1/0/4 extensive |match bps
Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, BPDU Error: None, MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Enabled, Auto-negotiation: Enabled,
Input bytes : 1550849512682 190880872 bps >>> 200m of traffic is pushed from uplink to subscribers
Output bytes : 626506607 9990776 bps >>> only 10m goes out (5m per subscriber) of uplink
% bps % usec
Input bytes : 1550847587438 190880872 bps
Output bytes : 623867739 9990776 bps


test@ERX-MX480-1-RE0> show interfaces pp0.1073764922 extensive |match bps
Input bytes : 332394349 93783112 bps >>> 100m of traffic is pushed in ingress
Output bytes : 18087753 4994656 bps >>> Only 5m makes out of ppp interface
Input Filters: Service_test_Sym_in-pp0.1073764922-in
Output Filters: Service_test_Sym_out-pp0.1073764922-out


test@ERX-MX480-1-RE0> show interfaces pp0.1073764923 extensive |match bps
Input bytes : 402907174 94487240 bps
Output bytes : 21818216 4994832 bps
Input Filters: Service_test_Sym_in-pp0.1073764923-in
Output Filters: Service_test_Sym_out-pp0.1073764923-out