Instruction/ maintenance manual of the product WX1200 3Com
Go to page of 646
http://www.3com.com/ Part No. 10015086 Published April 200 6 Wir eless LAN Mobility System W ir eless LAN Switch and Contr oller Command Refer ence WX4400 3CRWX440095A WX1200 3CRWX120695A WXR100 3CRWX.
3Com Corporati on 350 Campus Drive Marlborough, MA USA 01752-3064 Copyright © 2 006, 3Com Corporation. All rights r eserved . No part of this documen tation may be repr oduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without writt en permission fr om 3Com Corporatio n.
C ONTENTS A BOUT T HIS G UIDE Conventions 19 Documentation 20 Documentation Comments 21 1 U SING THE C OMMAND -L INE I NTERFACE Overview 23 CLI Conventions 24 Command Prompt s 24 Syntax Notation 24 T .
3 S YSTEM S ERVICE C OMMANDS Commands by Usage 37 clear banner motd 38 clear history 39 clear promp t 39 clear system 40 display banner mo td 41 display base-information 41 display license 42 display .
display port-gr oup 70 display port poe 71 display port pr eference 72 display port status 73 display port media-type 75 monitor port counters 76 reset port 81 set dap 81 set port 83 set port-group 84.
set vlan name 116 set vlan port 117 set vlan tunnel -affinity 118 6 Q UALITY OF S ERVICE C OMMANDS Commands by Usage 119 clear qos 120 set qos cos-to-dscp-m ap 121 set qos dscp-to-cos-map 122 display .
display ip telnet 148 display ntp 149 display snmp community 151 display snmp counters 152 display snmp notify pr ofile 152 display snmp notify target 152 display snmp stat us 153 display snmp usm 154.
SNMPv2c with T raps 184 SNMPv1 with T raps 184 set snmp protocol 186 set snmp security 187 set snmp usm 188 set summertime 191 set system ip-addr ess 192 set timedate 193 set timezone 194 telnet 195 t.
display mobility-profile 224 set accounting {admin | console} 225 set accounting {d ot1x | mac | web | last-resort} 227 set authentication admin 229 set authentication cons ole 231 set authentication .
clear network-domain seed-ip 277 display network-do main 278 set network-do main mo de member seed-ip 280 set network-do main peer 2 81 set network-do main mode seed domain-name 28 2 11 M ANAGED A CCE.
set {ap | dap} radio auto-tune min-clien t-rate 340 set {ap | da p} radio mode 341 set {ap | da p} radio radio- profile 343 set {ap | da p} radio tx-power 344 set dap security 34 5 set {ap | da p} upg.
set service-pr ofile rsn-ie 383 set service-profile shar ed-key-auth 384 set service-profile ssid-name 384 set service-profile ssid-type 385 set service-profile tkip-mc-time 386 set service-pr ofile w.
13 IGMP S NOOPING C OMMANDS Commands by usage 421 clear igmp statistics 422 display igmp 422 display igmp mrouter 426 display igmp querier 427 display igmp receiver -table 429 display igmp statistics .
15 C RYPTOGRAPHY C OMMANDS Commands by Usage 469 crypto ca-certificate 470 crypto certificate 471 crypto generate key 473 crypto generate request 474 crypto generate self-signed 476 crypto otp 478 cry.
clear dot1x reauth-period 503 clear dot1x timeout auth -server 504 clear dot1x timeout supplicant 504 clear dot1x tx-period 505 display dot1x 505 set dot1x au thcontr ol 508 set dot1x bonded- period 5.
display rfdetect countermeasures 541 display rfdetect counters 542 display rfdetect data 544 display rfdetect ignor e 546 display rfdetect mobility-domain 546 display rfdetect ssid-list 550 display rf.
set boot backu p-configuration 585 set boot conf iguration-file 586 set boot partitio n 587 21 T RACE C OMMANDS Commands by Usage 589 clear log trace 590 clear trace 590 display trace 591 save trace 5.
24 B OOT P ROM PT C OMMANDS Boot Pr ompt Commands by Usage 619 autoboot 620 boot 621 change 623 create 624 delete 625 dhcp 626 diag 627 dir 627 display 628 fver 630 help 631 ls 632 next 633 re set 6 3.
Conventions 19 A BOUT T HIS G UIDE This command refer ence explains Mobility System Softwar e (MSS™) command line interface (CLI) that you enter on a 3Com WXR100 or WX1200 W ir eless Switch or WX4400 W ir eless LAN Controller to configure and manage the Mobility System™ wir eless LAN (WLAN).
20 A BOUT T HIS G UIDE This manual uses the follo wi ng text and syntax conventions: Documentation The MSS documentation set includ es the following documents. Wireless LAN Switch Manage r (3WXM) Release Notes These notes provide information about the system software release, including new features and bug fixes.
Documentation Comments 21 Wireless LAN Switch Ma nager Refere nce Manual This manual shows you how to plan , configure, deploy , and manage a Mobility System wireless LAN (WL AN) using the 3Com Wireless LAN Switch Manage r (3WXM).
22 A BOUT T HIS G UIDE Please note that we can only r esp ond to comments and questions about 3Com product documentation at this e-mail address. Qu estions related to T echnical Support or sales should be di rected in the first insta nce to your network supplier .
1 U SING THE C OMMAND -L INE I NTERFACE This chapter discusse s the 3Com W ireless Switch Manager (3WXM) command-line interface (CLI). Described ar e: CLI conventions (see “CLI Conventions” on.
24 C HAPTER 1: U SING THE C OMMAND -L INE I NTERFACE CLI Conventions Be awar e of the following MSS CL I conventions for command entry: “Command Prompts” on page 24 “Syntax Notation” o.
CLI Conventions 25 A vertical bar ( | ) separates mutually exclusive options within a list of possibilities. For example , you enter either enable or disable , not both, in the following command: .
26 C HAPTER 1: U SING THE C OMMAND -L INE I NTERFACE IP Addr ess and Mask Notation MSS displays IP addresses in dotte d d ecimal notation — for example, 192.
CLI Conventions 27 T able 3 gives exa mples of use r globs. MAC Address Globs A media access control (MAC) address glob is a similar method for matching some authentication, aut horization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC addresses.
28 C HAPTER 1: U SING THE C OMMAND -L INE I NTERFACE VLAN Globs A VLAN glob is a method for matching one of a set of local rules on an wireless LAN switch, known as th e location policy , to one or more users.
Command-Line Editing 29 A hyphen-separated ran ge of port numbers, with no spaces. For example: WX1200# reset port 1-3 Any combination of single numbers, lists, and ranges.
30 C HAPTER 1: U SING THE C OMMAND -L INE I NTERFACE History Buffer Th e history buffer stores the last 63 commands you entered during a terminal session . Y ou can use the Up Arr ow and Down Arr ow keys to select a command that yo u want to repeat fr om the history buffer .
Using CLI Help 31 Using CLI Help The CLI provides online help. T o see the full rang e of commands available at your access level, type the help command.
32 C HAPTER 1: U SING THE C OMMAND -L INE I NTERFACE T o see all the variations, type one of the co mmands followed by a question mark (?). For exampl e: WX1200# display ip ? alias display ip aliases .
2 A CCESS C OMMANDS This chapter describes access comma nds used to control access to the Mobility Software System (MSS) command-line interface (CLI). Commands by Usage This chapter presents access services comma nds alphabetically . Use T able 5 to located commands in this chapter based on their use.
34 C HAPTER 2: A CCESS C OMMAND S enable Places the CLI session in enabled mo de, which pr ovides access to all commands requir ed for configur ing and monitoring the system. Syntax — enable Access — All. History — Introduced in MSS V ersion 3.0.
set enablepass 35 set enablepass Sets the password that provides enabled access (for configuratio n and monitoring) to the WX switch. Syntax — set enablepass Defaults — None. Access — Enabled. History — Introduced in MSS V er sion 3.0. Usage — After typing the set enablepa ss comman d, pr ess Enter .
36 C HAPTER 2: A CCESS C OMMAND S.
3 S YSTEM S ERVICE C OMMANDS Use system services commands to configur e and monito r system information for a WX switch. Commands by Usage This chapter pr esents system service comman ds alphabetically . Use T able 6 to locate commands in this chapt er based on their use.
38 C HAPTER 3: S YSTEM S ERVICE C OMMANDS clear banner motd Deletes the message-of-the-day (MOTD) banner t hat is displayed before the login prompt for each CLI se ssion on the wir eless LAN switch. Syntax — clear banner motd Defaults — None. Access — Enabled.
clear history 39 clear history Deletes the command history buffer for the current CLI session. Syntax — clear history Defaults — None. Access — All. History — Introduced in MSS V er sion 3.0. Examples — T o clear the history buffer , type the following command: WX4400# clear history success: command buffer was flushed.
40 C HAPTER 3: S YSTEM S ERVICE C OMMANDS clear system Clears the system config uration of the specified information. CAUTION: If you change the IP address, any currently configured Mobility Domain operations cease. Y ou must reset the Mobility Domain.
display banner motd 41 display banner motd Shows the banner that was configured with the set banner motd command. Syntax — display banner motd Defaults — None.
42 C HAPTER 3: S YSTEM S ERVICE C OMMANDS See Also display boot on page 573 display config on page 574 display license on page 42 display system on page 43 display version on pag e 576 display license Displays information about the license curr ently installed on the WX switch.
display load 43 display load Displays CPU usa ge on a WX switch. Syntax — display load Defaults — None. Access — Enabled. History — Introduced in MSS V er sion 4.
44 C HAPTER 3: S YSTEM S ERVICE C OMMANDS Examples — T o show system information, type the following command: WX4400# display system ==================================== ========================================= == Product Name: WX4400 System Name: WX-bldg3 System Countrycode: US System Location: first-floor-bld g3 System Contact: tamara@example.
display system 45 System idle timeout Number of seconds MSS allows a CLI management session (console, Telnet, or SSH) to re main idle before terminating the session. (The system idle timeout can be configured using the set system idle-timeou t command.
46 C HAPTER 3: S YSTEM S ERVICE C OMMANDS See Also clear system on page 40 set system contact on page 55 set system countrycode on page 56 set system idle-t imeout on page 58 set system location on page 59 set system name on page 60 help Displays a list of commands that ca n be used to configure and monitor the WX switch.
history 47 crypto Crypto, use 'crypto help' for more inf ormation delete Delete url dir Show list of files on flash device disable Disable privileged mode display Display, use 'display .
48 C HAPTER 3: S YSTEM S ERVICE C OMMANDS See Also clear history on page 39 quickstart Runs a script that interactively helps you configure a new switch. (For more information, see the “CLI quickstart Command” section of the “WX Setup Methods” chapter in the W ireless LAN Switch and Controller Configuration Guide .
set auto-config 49 When the 3WXM server in the corporate ne twork receives the configuration request, the server looks in the curr ently open network plan for a switch configuration with the same model and serial number as the one in the configuration request.
50 C HAPTER 3: S YSTEM S ERVICE C OMMANDS Examples — The following commands stage a WX switch to use the auto-config option. The net work where the switch is installed has a DHCP server , so the swi.
set banner motd 51 See Also crypto generate key on page 473 crypto generate self-signed on page 476 save config on page 584 set interface dhcp-client on page 161 set vlan port on p.
52 C HAPTER 3: S YSTEM S ERVICE C OMMANDS Examples — T o create a banner that says Update meeting at 3 p.m., type the following command: WX4400# set banner motd ^Update meet ing at 3 p.
set length 53 set length Defines the number of lines of CLI output to display between paging pr ompts. MSS di splays the set n umber of lines and waits for you to press any key to display another set, or type q to quit the display .
54 C HAPTER 3: S YSTEM S ERVICE C OMMANDS Usage — The license key is shipped with the switch. T o obtain the activation key , access the 3Com web si te. Each license a nd activation key pair allows the switch to actively manage an additional 24 MAPs.
set system contact 55 Usage — When you first log in for the initial configuration of the WX switch, the CLI provides a WX1200> or WX4400> pr ompt, depending on your model. After you be come enabled by typing enable and giving a suitable password, the WX1200# or WX4400# prompt is displayed.
56 C HAPTER 3: S YSTEM S ERVICE C OMMANDS See Also clear system on page 40 display system on page 43 set system location on page 59 set system name on page 60 set system countrycode Defines the country-specific IEEE 802.11 regulations to enfor ce on the WX switch.
set system countrycode 57 Defaults — The factory default country code is None. Access — Enabled. History — Introduced in MSS V er sion 3.0. Usage — Y ou must set the system count y code to a valid value before using any set ap commands to configure a MAP .
58 C HAPTER 3: S YSTEM S ERVICE C OMMANDS Examples — T o set the country code to Canada, type the following command: WX1200# set system country code CA success: change accepted.
set system ip-address 59 set system ip-address Sets the system IP address so that it can be u sed by various services in the WX switch. CAUTION: Any currently configured Mobilit y Domain operations cease if you change the IP address. If you ch ange the addre ss, you must reset the Mobility Domain.
60 C HAPTER 3: S YSTEM S ERVICE C OMMANDS T o view the system location string, type the disp lay system command. Examples — T o store the location of the WX switch in the WX’ s configuration, type the following command: WX4400# set system location first-floor-bldg3 success: change accepted.
set system name 61 See Also clear system on page 40 display system on page 43 set prompt on page 54 set system contact on page 55 set system location on page 59.
62 C HAPTER 3: S YSTEM S ERVICE C OMMANDS.
4 P ORT C OMMANDS Use port commands to configure a nd manage individual ports and load-sharing port groups. Commands by Usage This chapter presents port command s alphabetically .
64 C HAPTER 4: P ORT C OMMANDS clear dap Removes a Distributed MAP . CAUTION: When you clear a Distributed MAP , MSS ends user sessions that are using the MAP . Syntax — clear dap dap-num dap-num — Number of the Distributed MAP(s) you want to remove.
clear port counters 65 clear port counters Clears port statistics counters and resets them to 0. Syntax — clear port counters Defaults — None. Access — Enabled.
66 C HAPTER 4: P ORT C OMMANDS clear port media-type Disables the copper interface and r e enables the fiber interface on an WX4400 gigabit Ether net port. Syntax — clear port media-type port-list port-list — List of physical ports. MSS disables the copper interface and reenables the fiber interface on all the specified ports.
clear port preference 67 Examples — The following co mmand clears the names of ports 1 through 3: WX4400# clear port 1-3 name See Also display port status on page 73 set port name on page 86 clear port prefer e nce Resets a gigabit Ethernet port on a WX4400 to use the GBIC (fiber) interface for the active link.
68 C HAPTER 4: P ORT C OMMANDS clear port type Removes all configuration settings fr om a port and resets the port as a network port. CAUTION: When you clear a port, MSS ends user sessions that are using the port. Syntax — clear port type port-list port-list — List of physical ports.
display port counters 69 Examples — The following co mmand clears port 5: WX1200# clear port type 5 This may disrupt currently authentic ated users. Are you sure? (y/n) [n] y success: change accepted. See Also set port type ap on p age 91 set port type wired-auth on page 94 display port counters Displays port statistics.
70 C HAPTER 4: P ORT C OMMANDS Examples — The following co mmand shows octet statistics for port 3: WX1200> display port counters octets port 3 Port Status Rx Octets Tx Octets ===================.
display po rt poe 71 See Also clear port-group on page 65 set port-group on page 84 display port poe Displays status information for ports on which Power over Ethernet (PoE) is enabled. Syntax — display port poe [ port-list ] port-list — List of physical ports.
72 C HAPTER 4: P ORT C OMMANDS See Also set port poe on page 87 display port prefer e nce Displays the interface prefer ences set on WX4400 gigabit Ethernet port s. Syntax — display port preference [ port-list ] port-list — List of physical ports.
display port st atus 73 Port Preference ==================================== ======================= 1 GBIC 2 RJ45 3 GBIC 4 GBIC T able 13 describes th e fields in this display . See Also clear port prefer ence on page 67 set port prefer ence on page 88 display port status Displays configuration and status information for ports.
74 C HAPTER 4: P ORT C OMMANDS Examples — The following co mmand displa ys information for all ports on a WX1200 switch: WX1200# display port status Port Name Admin Oper Config Actual Type Media ===.
display port media-type 75 See Also clear port type on page 68 set port on page 83 set port name on page 86 set port negotiation on page 86 set port speed on page 89 set port t.
76 C HAPTER 4: P ORT C OMMANDS ==================================== ======================= 1 GBIC 2 RJ45 3 GBIC 4 GBIC T able describes the fields in this disp lay . See Also clear port media-type on page 66 set port media-type on page 85 monitor port counters Displays and continually updates port statistics.
monitor port counters 77 Defaults — All types of statistics ar e displayed for all ports. MSS refr eshes the statistics every 5 seconds. This interval cannot be configured.
78 C HAPTER 4: P ORT C OMMANDS Examples — The following command starts the port statistics monitor beginning with octet st at istics (the default): WX4400# monitor port counters As soon as you press Enter , MSS clears the window an d displays statistics at the top of th e window .
monitor port counters 79 packets Rx Unicast Number of unicast packets received. This number does not include packets that contain errors. Rx NonUnicast Number of broadcast and multicast packets received. This number does not include packets that contain errors.
80 C HAPTER 4: P ORT C OMMANDS See Also display port counters on page 69 collisions Single Co ll Total number of frames transmitted that experienced one collision before 64 bytes of the frame were transmitted on the network.
reset port 81 reset port Resets a port by toggling its link state and Power over Ethe rnet (PoE) state. Syntax — reset port port-list port-list — List of physical ports. MSS r esets all the specified ports. Defaults — None. Access — Enabled.
82 C HAPTER 4: P ORT C OMMANDS dap-num — Number for the Distributed MAP . The range of valid connection numbers depends on the WX switch model: For a WX4400, you can specify a number from 1 to 256. For a WX1200, you can specify a number from 1 to 30.
set port 83 clear port type on page 68 set port type ap on p age 91 set radio-profile 11g-only on page 347 set system countrycode on page 56 set port Admin istratively disabl es or reenables a port. Syntax — set port { enable | disable } port-list enable — Enables the specified ports.
84 C HAPTER 4: P ORT C OMMANDS set port-group Configur es a load-sharing port group. All ports in the group function as a single logical link. Syntax — set port-group name group-name port-list mode { on | off } name group-name — Alphanumeric string of up to 255 characters , with no spaces.
set port media-type 85 See Also clear port-group on page 65 display port-group on pa ge 70 set port media-type Disables the fiber interface and en ables the coppe r interface on an WX4400 gigabit Ether net port. Syntax — set port media-type port-list rj45 port-list —List of physical p orts.
86 C HAPTER 4: P ORT C OMMANDS set port name Assigns a name to a port. After na ming a port, you can use the port name or number in other CLI commands. Syntax — set port port name name port — Number of a physical port. Y ou can specify only one port.
set port poe 87 Access — Enabled. History — Introduced in MSS V er sion 3.0. Usage — WX1200 10/100 Ethernet ports supp ort half-duplex and full-duplex operation.
88 C HAPTER 4: P ORT C OMMANDS Examples — The following co mmand disa bles PoE on ports 4 and 5, which are connected to a MAP access point: WX1200# set port poe 4,5 disable If you are enabling power on these ports, they must be connected only to approved PoE devices with the correct wiring.
set port speed 89 Examples — The follo wing command sets the pr eference of port 2 on a WX4400 to RJ-45 (copper): WX4400# set port preference 2 rj45 See Also clear port prefer ence on page 67 display port prefer ence on page 72 set port speed Changes the speed of a port.
90 C HAPTER 4: P ORT C OMMANDS set port trap Enables or disab les Simple Networ k Management Prot ocol (SNMP) link up and linkdown traps on an individu al port. Syntax — set port trap port-list { enable | disab le } port-list — List of physical ports.
set port type ap 91 set port type ap Configures an WX switch port for a MAP access point. CAUTION: When you set the po rt type for MAP use, you must specify the PoE state (ena ble or disable) of the port. Use the WX switch’ s PoE to power 3Com MAP access points only .
92 C HAPTER 4: P ORT C OMMANDS MAP access point models AP2750, MP -2 41, and MP-341 have a single radio that can be configured for 802.11a or 802.11b/g. Other MAP models have two radios. On two-ra dio models, one radio is always 802.11a. The other radio is 802.
set port type ap 93 This command does not apply to any gigabit Ether net ports or to ports 7 and 8 on the WX1200 switch. T o manage a MAP access point on a switch model that does not have 10/100 Ethernet port s, use the set dap command to configure a Distributed MAP connection o n the switch.
94 C HAPTER 4: P ORT C OMMANDS The following command resets port 5 by clearing it: WX1200# clear port type 5 This may disrupt currently authentic ated users.
set port type wired-auth 95 Defaults — The default tag-list is null (no tag values). The default number of sessions is 1. The default fa llthru authentication type is none. Access — Enabled. History —Introduced in MSS V ersion 3.0. Op tion for W ebAAA fallthru authentication type changed from web-auth to web-portal in MSS V ersion 4.
96 C HAPTER 4: P ORT C OMMANDS The 802.1X specification prohibits ne tworking devices from forwar ding P AE group address packets, because this would make it possible fo r multiple authenticators to acquire the same client.
5 VLAN C OMMANDS Use virtual LAN (VLAN) c ommands to configure and manage parameters for individual por t VLANs on network ports, and to display information about clients roaming within a mobility domain. Commands by usage This chapter presents VLAN commands alphabet ically .
98 C HAPTER 5: VLAN C OMMANDS clear fdb Deletes an entry fr om the forwarding database (FDB). Syntax — clear fdb { perm | static | dynamic | port port-list } [ vlan vlan-id ] [ tag tag-valu e ] perm — Clears permanent entries. A permanent entry does not age out and remains in the database even after a r eb oot, r eset, or power cycle.
clear security 12-restrict 99 The following command clears all dynamic forwarding database entries that match all VLANs: WX4400# clear fdb dynamic success: change accepted. The following command clears all dynamic forwarding database entries that match ports 3 and 5: WX4400# clear fdb port 3,5 success: change accepted.
100 C HAPTER 5: VLAN C OMMANDS Examples — The follow ing comma nd removes MAC addr ess aa:bb:cc:dd:ee:ff fr om the list of a ddr esses to which clients in VLAN abc_air are allowed to send traffic at Layer 2: WX4400# clear security 12-restrict v lan abc_air permit-mac aa:bb:cc:dd:ee:ff success: change accepted.
clear vlan 101 clear vlan Removes physical or virtual ports from a VLAN or r emoves a VLAN entirely . CAUTION: When you remove a VLAN, MSS co mpletely removes the VLAN from the co nfiguration and also remove s all configuration information that uses the VLAN.
102 C HAPTER 5: VLAN C OMMANDS The following command co mpletely removes VLAN marigold : WX4400# clear vlan marigold This may disrupt user connectivity. Do you wish to continue? (y/n) [n] y success: change accepted. See Also set vlan port on page 117 display vlan config on page 111 display fdb Displays entries in the forwarding database.
display fdb 103 Access — All. History —Introduced in MSS V ersion 3.0. Usage — T o display the entire forwarding database, enter t he display fdb command without option s. T o display only a portion of the d atabase, use optional parameters to specify the types of entries you want to display .
104 C HAPTER 5: VLAN C OMMANDS See Also clear fdb on page 98 set fdb on page 113 display fdb agingtime Displays the aging timeout period for forwarding database entries. Syntax — display fdb agingtime [ vlan vlan-id] vlan vlan-id — VLAN name or number .
display fdb cou nt 105 See Also set fdb agingtime on page 114 display fdb count Lists the number of entries in the forwarding database. Syntax — display fdb count { perm | static | dyna mic } [ vlan vlan-id ] perm — Lists the number of permanent entries.
106 C HAPTER 5: VLAN C OMMANDS display roaming station Shows a list of the stations roaming to the wireless LAN switch thr ough a VLAN tunnel. Syntax — display roaming station [ vlan vlan-id ] [ peer ip-addr ] vlan vlan-id — Output is r estricted to stations using this VLAN.
display roaming station 10 7 See Also display roaming vlan on page 108 State State of the session: Setup — Station is attempting to roam to this WX switch. This switch has asked the WX from which the station is roaming for the station’s session info rmation and is waiting for a reply.
108 C HAPTER 5: VLAN C OMMANDS display roaming vlan Shows all VLANs in the mobility doma in, the WX switches servicing the VLANs, and their tunnel affinity values configured on each switch for the VLANs. Syntax — display roaming vlan Defaults — None.
display security 12-restrict 109 display security 12-restrict Displays configuration in formation and statistics for Layer 2 forwar ding restriction. Syntax — display security 12-restrict [v lan vlan-id | all] vlan-id — VLAN name or number . all — Displays information for all VLANs.
110 C HAPTER 5: VLAN C OMMANDS See Also clear security 12-restrict on page 99 clear security 12-re strict counters on page 100 set security l2-restrict on page 114 display tunnel Shows the tunnels from the wir e less LAN switch wher e you type the command.
display vlan config 111 See Also display vlan config on page 111 display vlan config Shows VLAN information. Syntax — display vlan config [ vlan-id ] vlan-id — VLAN name or number . If you do not specify a VLAN, information for all VLANs is displayed.
112 C HAPTER 5: VLAN C OMMANDS T able 26 describes th e fields in this display . See Also clear security 12-restrict on page 99 set security l2-restrict on page 114 set vlan port on page 117 set vlan tunnel-affinity on page 118 T able 26 Output for display vlan config Field Description VLAN VLAN number.
set fdb 11 3 set fdb Adds a permanent or static en t ry to the forwar ding database. Syntax — set fdb { perm | static } mac-addr port port-list vlan vlan-id [ tag tag-value ] perm — Adds a permanent entry . A permanent entry does not age out and remains in the database even af ter a r eboot, reset, or power cycle.
114 C HAPTER 5: VLAN C OMMANDS See Also clear fdb on page 98 display fdb on page 102 set fdb agingtime Changes th e aging timeout period for dynamic entries in the forwarding database. Syntax — set fdb agingtime vlan-id age seconds vlan-id — VLAN name or number .
set security l2-restrict 115 mode — Enables or disables r estriction of Layer 2 forwarding. {enable | disable} permit-mac mac-addr — MAC addr esses to which clients are [ mac-addr ] allowed to forward data at Layer 2. Y ou can specify up to four a ddre sses.
116 C HAPTER 5: VLAN C OMMANDS set vlan name Creates a VLAN and assigns a number and name to it. Syntax — set vlan vlan-num name name vlan-num — VLAN number . Y ou can specify a number fr om 2 through 4093. name — String up to 16 alpha betic characters long.
set vlan port 117 set vlan port Assigns one or more network ports to a VLAN. Y ou also can add a virtual port to each network port by addi ng a tag value to the networ k port. Syntax — set vlan vlan-id port port-list [ tag ta g-value ] vlan-id — VLAN name or number .
118 C HAPTER 5: VLAN C OMMANDS set vlan tunnel-affinity Changes a wir eless LAN switch’ s pref erability within a mobility domain for tunneling user traffic for a VLAN. When a user r oams to a WX switch that is not a member of the user’ s VLAN, the WX can forward the user traffic by tunneling to another WX switch that is a member of the VLAN.
6 Q UALITY OF S ERVICE C OMMANDS Use Quality of Service (QoS) commands to configure packet prioritization in MSS. Packet prioritization ensures that WX switches and MAP access points give prefer ential treatment to high-priority traf fic such as voice and video.
120 C HAPTER 6: Q UALITY OF S ERVICE C OMM ANDS clear qos Resets the switch’ s mapping of Dif fer entiated Services Code Point (DSCP) values to internal QoS values. The switch’ s inter nal QoS map ensur es that prioritized traffic remains prioritized while transiting through the W X switch.
set qos cos-to-dscp-map 121 set qos cos-to-dscp-map Changes the value to which MSS maps an inter nal QoS value when marking outbound packets. Syntax — set qos cos-to-dscp-map level dscp dscp -value level — Internal CoS value. Y ou can specify a number from 0 to 7.
122 C HAPTER 6: Q UALITY OF S ERVICE C OMM ANDS set qos dscp-to-cos-map Changes the inter nal QoS value to which MSS maps a packet’ s DS CP value when classifying inbound packets. Syntax — set qos dscp-to-cos-map dscp-range cos level dscp-range — Y ou can specify the values as decimal numbers.
display qos 123 display qos Displays the switch’ s QoS settings. Syntax — display qos [default] default — Displays the default mappings. Defaults — None.
124 C HAPTER 6: Q UALITY OF S ERVICE C OMM ANDS display qos dscp-table Displays a table that m aps Dif ferentiated Services Code Point (DS CP) values to their equivalent combinations of IP pr ecedence values and IP To S v a l u e s . Syntax — display qos dscp-table Defaults — None.
7 IP S ERVICES C OMMANDS Use IP services commands to conf igur e and manage IP interfaces, management services, the Domain Name Service (DNS), Network Ti me Protocol (NTP), and aliases, and to ping a host or trace a route. Commands by Usage This chapter presents IP services commands alphabe tically .
126 C HAPTER 7: I P S ERVICES C OMMANDS HTTPS Management set ip https server on page 167 display ip https on page 145 DNS set ip dns on page 164 set ip dns domain on page 165 set ip dns serve r on pag.
clear interface 127 clear interface Removes an IP interface. Syntax — clear interface vlan-id ip vlan-id — VLAN name or number Defaults — None.
128 C HAPTER 7: I P S ERVICES C OMMANDS T opology reporting for dual-homed MAP access points Default source IP addr ess used in unsolicited communications such as AAA accounting reports and SN.
clear ip dns domain 129 clear ip dns domain Removes the default DNS domain name. Syntax — clear ip dns domain Defaults — None. Access — Enabled. History — Introduced in MSS V er sion 3.0. Examples — The following co mmand r emo ves the default DNS domain name from a WX switch: WX1200# clear ip dns domain Default DNS domain name cleared.
130 C HAPTER 7: I P S ERVICES C OMMANDS See Also clear ip dns domain on page 129 display ip dns on page 144 set ip dns on page 164 set ip dns domain on page 165 set ip dns server on page 166 clear ip r oute Removes a r oute from the IP r oute table.
clear ip telnet 13 1 clear ip telnet Resets the T elnet server’ s TCP port number to its default value. A WX switch listens for T elnet management traffic on the T elnet server port. Syntax — clear ip telnet Defaults — The default T elnet port number is 23.
132 C HAPTER 7: I P S ERVICES C OMMANDS Examples — The following co mmand r emoves NTP server 192.168.40.240 from a WX switch configuration: WX4400# clear ntp server 192.
clear snmp community 133 clear snmp community Clears an SNMP community string. Syntax — clear snmp community name comm-string comm-string — Name of the SNMP community you want to clear . Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 4.
134 C HAPTER 7: I P S ERVICES C OMMANDS See Also set snmp notify profile on page 177 display snmp notify pr ofile on page 152 clear snmp notify target Clears an SNMP notifi cation target. Syntax — clear snmp notify target target-num target-num — ID of the target.
clear summertime 135 Examples — The following co mmand clears SNMPv3 user snmpmgr1 : WX1200# clear snmp usm snmpmgr1 success: change accepted. See Also set snmp usm on page 188 display snmp usm on page 154 clear summertime Cl ears the summert ime setting fr om a wireless LAN switch.
136 C HAPTER 7: I P S ERVICES C OMMANDS clear system ip-address Clears the system IP addr ess. CAUTION: Clearing the system IP ad dress disrupts the system tasks that use the address. Syntax — clear system ip-address Defaults — None. Access — Enabled.
display arp 137 History — Introduced in MSS V er sion 3.0. Examples — T o return the WX switch’ s real-time clock to UTC, type the following command: WX4400# clear timezone success: change accepted.
138 C HAPTER 7: I P S ERVICES C OMMANDS T able 29 describes th e fields in this display . See Also set arp on page 158 set arp agingtime on page 159 display dhcp-client Displays DHCP client in formation for all VL ANs. Syntax — display dhcp-client Defaults — None.
display dhcp-client 13 9 Examples — The following co mmand displa ys DHCP client information: WX1200# display dhcp-client Interface: corpvlan(4) Configuration Status: Enabled DHCP State: IF_UP Lease Allocation: 65535 seconds Lease Remaining: 65532 seconds IP Address: 10.
140 C HAPTER 7: I P S ERVICES C OMMANDS display dhcp-server Displays MSS DHCP server information. Syntax — display dhcp-server [interface vlan-i d ] [verbose] interface vlan-id — Displays the IP addresses leased by the specified VLAN. verbose — Displays configuration and status information for the MSS DHCP server .
display dhcp -server 14 1 Default Gateway: 10.10.20.1 DNS Servers: 10.10.20.4 10.10.20 .5 DNS Domain Name: mycorp.com T able 31 and T able 32 describe the fields in these displays. T able 31 Output for display dhcp-server Field Description VLAN VLAN number Name VLAN name Address IP address leased by the server.
142 C HAPTER 7: I P S ERVICES C OMMANDS See Also set interface dhcp-server on page 162 display interface Shows the IP interfaces configured on the wireless LAN switch. Syntax — display interface [ vlan-id ] vlan-id — VLAN name or number . Defaults — If you do not specify a VLAN ID, interfaces for all VLANs are displayed.
display ip alias 143 See Also clear interface on pag e 127 set interface on page 160 set interface dhcp-client on page 161 display ip alias Shows the IP aliases configur ed on the wireless LAN switch. Syntax — display ip alias [ name ] name — Alias string.
144 C HAPTER 7: I P S ERVICES C OMMANDS T able 34 describes th e fields in this display . See Also clear ip alias on page 128 set ip alias on page 164 display ip dns Shows the DNS servers the wir eless LA N switch is configur ed to use. Syntax — display ip dns Defaults — None.
display ip https 145 See Also clear ip dns domain on page 129 clear ip dns server on page 129 set ip dns on page 164 set ip dns domain on page 165 set ip dns server on pa ge 166 display ip https Shows information about the HTTPS management port.
146 C HAPTER 7: I P S ERVICES C OMMANDS See Also clear ip telnet on page 131 display ip telnet on page 148 set ip https server on page 167 set ip telnet on page 171 set ip telnet server on page 172 display ip route Shows the IP route table.
display ip ro ute 147 Usage — When you add an IP inte rface to a VLAN tha t is up, MSS adds direct and local r outes for the interface to the route table.
148 C HAPTER 7: I P S ERVICES C OMMANDS See Also clear ip route on page 130 display interface on page 142 display vlan config on page 111 set interface on page 160 set ip rou te on page 167 display ip telnet Shows information about the T elnet management port.
display ntp 149 Examples — The following comman d shows the status and port number for the T eln et management interface to the WX switch: WX4400> display ip telnet Server Status Port ---------------------------------- Enabled 23 T able 38 describes th e fields in this display .
150 C HAPTER 7: I P S ERVICES C OMMANDS Examples — T o display NTP information for a WX switch , type the following command: WX4400> display ntp NTP client: enabled Current update-interval: 20(secs) Current time: Fri Feb 06 2004, 12:02 :57 Timezone is set to 'PST', offset fro m UTC is -8:0 hours.
display snmp community 151 See Also clear ntp server on page 131 clear summertime on page 135 clear timezone on pa ge 136 display timezone on page 155 set ntp on page 173 set n.
152 C HAPTER 7: I P S ERVICES C OMMANDS See Also clear snmp community on page 133 set snmp community on page 175 display snmp counters Displays SNMP statistics counters . Syntax — display snmp counters Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 4.
display snmp status 153 See Also clear snmp notify target on page 134 set snmp notify target on page 181 display snmp status Displays SNMP version and status infor mation. Syntax — display snmp status Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 4.
154 C HAPTER 7: I P S ERVICES C OMMANDS display snmp usm Displays information about SNMPv3 users. Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 4.0. See Also clear snmp usm on page 134 display snmp usm on page 154 display summertime Shows a wireless LAN switch’ s offs et from its r eal-time clock.
display timedate 155 set timedate on page 193 set timezone on pag e 194 display timedate Shows the date and time of day currently set on a wireless LAN switch’ s real-time clock. Syntax — display timedate Defaults — None. Access — All.
156 C HAPTER 7: I P S ERVICES C OMMANDS Examples — T o display the offset from UTC, type the following command: WX4400# display timezone Timezone set to 'pst', offset from U TC is -8 hours.
ping 157 Because the WX switch adds header in formation, the ICMP packet size is 8 bytes larger than the size you specify . source-ip ip-addr — IP address, in dotted decimal notation, to use as the source IP addr ess in the ping packets. source-ip vlan-name — VLAN name to use as the ping sour ce.
158 C HAPTER 7: I P S ERVICES C OMMANDS set arp Adds an ARP entry to the ARP table. Syntax — set arp { permanent | static | dyn amic } ip-addr mac-addr permanent — Adds a permanent entry . A permanent entry does not age out and remains in the database even after a reboot, re set, or power cycle.
set arp agingtime 15 9 set arp agingtime Changes the aging timeout for dynamic ARP en tries. Syntax — set arp agingtime seconds seconds — Number of seconds an entry can r emain unused before MSS removes the entry . Y o u can sp ecify fr om 0 through 1,000,000.
160 C HAPTER 7: I P S ERVICES C OMMANDS set interface Configures an IP interface on a VLAN. Syntax — set interface vlan-id ip { ip-addr mask | ip-addr/mask-length } vlan-id — VLAN name or number . ip-addr mask — IP addr ess and subnet mask in dotted decimal notation (for example, 10.
set interface dhcp-client 161 See Also clear interface on pag e 127 display interface on page 142 set interface dhcp-client on page 161 set interface dhcp-client Configures the DHCP client on a VLAN, to allow the VLAN to obtain its IP interface from a DHCP server .
162 C HAPTER 7: I P S ERVICES C OMMANDS See Also clear interface on pag e 127 display dhcp-client on page 138 display interface on page 142 set interface dhcp-server Configures the MSS DHCP server .
set interface status 163 Examples — The following command enable s the DHCP server on VLAN red-vlan to s erve addr esses from the 19 2.168.1.5 to 192.168.1.25 range: WX1200# set interface red-vlan ip dh cp-server enable start 192.168.1.5 stop 192.168.
164 C HAPTER 7: I P S ERVICES C OMMANDS set ip alias Configures an alias, which maps a na m e to an IP ad dress. Y ou can use aliases as shortcuts in CLI commands. Syntax — set ip alias name ip-addr name — String of up to 32 alphanumeric characters, with no spaces.
set ip dns domain 165 See Also clear ip dns domain on page 129 clear ip dns server on page 129 display ip dns on page 1 44 set ip dns domain on page 165 set ip dns server on pa ge 166 set ip dns domain Configures a default domain name fo r DNS queries.
166 C HAPTER 7: I P S ERVICES C OMMANDS set ip dns server Specifies a DNS server to use for re solving hostnames you enter in CLI commands. Syntax — set ip dns server ip-addr { primary | se condary } ip-addr — IP addr ess of a DNS server , in dot ted decimal or CIDR notation.
set ip https server 167 set ip https server En ables the HTTPS server on a wireless LAN switch. The HTTPS server is requir ed for Web Manager access to the switch. CAUTION: If you disable the HTTPS ser ver , Web Manager access to the WX switch is also disabled.
168 C HAPTER 7: I P S ERVICES C OMMANDS ip-addr mask — IP address and subnet mask for the r oute destination, in dotted decimal not ation (for example, 10 .10.10.10 255.255.255.0 ). ip-addr/mask-length — IP address and subnet mask length in CIDR format (for example, 10.
set ip snmp server 169 Examples — The following co mmand adds a default r oute that uses gateway 10.5.4.1 and gives the route a cost of 1: WX4400# set ip route default 10.5.4. 1 1 success: change accepted. The following commands add two default routes, and configure MSS to always use the route through 10.
170 C HAPTER 7: I P S ERVICES C OMMANDS History — Introduced in MSS V ersion 3.0. Examples — The following command enables th e SNMP server on a WX switch: WX4400# set ip snmp server enable success: change accepted.
set ip ssh server 17 1 set ip ssh server Disables or reenables the SSH server on a wir eless LAN switch. CAUTION: If you disable the SSH server , SS H access to the WX switch is also disabled. Syntax — set ip ssh server { enable | disable } enable — Enables the SSH server .
172 C HAPTER 7: I P S ERVICES C OMMANDS History —Introduced in MSS V ersion 3.0. Examples — The following co mmand changes the T elnet port number on a WX switch to 5000: WX4400# set ip telnet 5000 success: change accepted.
set ntp 173 display ip https on page 145 display ip telnet on page 148 set ip https server on page 167 set ip telnet on page 171 set ntp Enables or disables the NTP c lient on a wireless LAN switch. Syntax — set ntp { enable | disable } enable — Enables the NTP cli ent.
174 C HAPTER 7: I P S ERVICES C OMMANDS set ntp server Configures a wir eless LAN switch to use an NTP server . Syntax — set ntp server ip-addr ip-addr — IP addr ess of the NTP server , in dotted decimal not ation. Defaults — None. Access — Enabled.
set ntp update-interval 175 set ntp update-interval Changes how often MSS sends queries to the NTP servers for updates. Syntax — set ntp update-interval seconds seconds — Number of seconds between queries. Y ou can specify from 16 thr ough 1,024 seconds.
176 C HAPTER 7: I P S ERVICES C OMMANDS read-notify — Allows an SNMP management application using the string to get object values on the switch but not to set them. The switch can use the string to send notifications. notify-only — Allows the switch to u se the string to send notifications.
set snmp notify profile 177 set ip snmp server on page 169 set snmp notify target on page 181 set snmp notify profile on page 177 set snmp protocol on page 186 set snmp security on page 187 set snmp usm on page 188 display snmp community on page 151 set snmp notify profile Configures an SNMP notification pr ofile.
178 C HAPTER 7: I P S ERVICES C OMMANDS AutoT uneRadioPowerChangeT raps— Gen erated when the RF Auto- T uning feature changes the power set ting on a radio. ClientAssociationFailureT raps— G enerated when a client’ s attempt to associate with a radio fails.
set snmp notify profile 179 MobilityDomainJoinT raps— Gen erated when the WX switch is initially able to contact a mob ility domain seed member , or can contact the seed member after a timeout. MobilityDomainTimeoutT raps— Generated when a timeout occurs after a WX switch has un successfully tried to commu nicate with a seed member .
180 C HAPTER 7: I P S ERVICES C OMMANDS RFDetectUnAuthorizedSsidT raps —Generated when an SSID that is not on the permitted SSID list is detected. all — Sends or drops all notifications. Defaults — A default notification profile (named default ) is alr eady configured in MSS.
set snmp notify target 181 WX1200# set snmp notify profile snmp prof_rfdetect send RFDetectSpoofedMacAPTraps success: change accepted. WX1200# set snmp notify profile snmp prof_rfdetect send RFDetectSpoofedSsidAPTraps success: change accepted.
182 C HAPTER 7: I P S ERVICES C OMMANDS Syntax — set snmp notify target target-num ip-addr [ : udp-port-number ] usm inform user username snmp-engine-id {ip | hex hex-string } [profile profile-name ] [security {unsecured | authenticated | encrypted}] [retries num ] [timeout num ] target-num — ID for the target.
set snmp notify target 183 SNMPv3 with T raps T o configure a notification target for traps from SNMPv3, use the following command: Syntax — set snmp notify t arget target-num ip -addr [ :udp-port-numbe r ] usm trap user username [profile profile-name ] [security {unsecured | authenticated | encrypted}] target-num — ID for the target.
184 C HAPTER 7: I P S ERVICES C OMMANDS ip-addr [ :udp-port-number ] — IP address of the server . Y ou also can specify the UDP port number to send notifications to. community-string — Community string. profile profile-name — Notification pr ofile this SNMP user will use to specify the notification types to send or dr op.
set snmp notify target 185 community-string — Community string. profile profile-name — Notification pr ofile this SNMP user will use to specify the notification types to send or dr op. Defaults — The default UDP port number on the target is 162.
186 C HAPTER 7: I P S ERVICES C OMMANDS set snmp protocol on page 186 set snmp security on page 187 set snmp usm on page 188 display snmp notify target on page 152 set snmp protocol Enables an SNMP pr otocol. MSS supports SNMPv1, SNMPv2c, and SNMPv3.
set snmp security 18 7 set snmp notify target on page 181 set snmp security on page 187 set snmp usm on page 188 display snmp status on page 153 set snmp security Sets the minimum level of securi ty MSS r equires for SNMP message exchanges.
188 C HAPTER 7: I P S ERVICES C OMMANDS See Also set ip snmp server on page 169 set snmp community on page 175 set snmp notify target on page 181 set snmp notify profile on page 177 set snmp protocol on page 186 set snmp usm on page 188 display snmp status on page 153 set snmp usm Creates a USM user for SNMPv3.
set snmp usm 18 9 access {read-only | read-not ify | notify-only | read-write | notify-read-write} — Specifies the access level of the user: read-only —An SNMP mana gement appl ication using the str ing can get (read) object values on the switch but cannot set (write) them.
190 C HAPTER 7: I P S ERVICES C OMMANDS If the encryption type is des , 3des , or aes , you can specify a passphrase or a hexadecimal key . T o specify a passphrase, use the encrypt-pass-phrase string option. The string can be from 8 to 32 alphanumeric charact ers long, with no spaces.
set summertime 191 set summertime Offsets the real-time clock of a wir eless LAN switch by +1 hou r and re turns it to standar d time for da ylight savings time or a similar summertime period that you set.
192 C HAPTER 7: I P S ERVICES C OMMANDS Examples — T o enable summertime and set the summertime time zone to PDT (Pacific Daylight Time ), type the following command: WX1200# set summertime PDT succ.
set timedate 193 Examples — The following co mmands configur e an IP interface on VLAN taupe and configure the interface to be the system IP address: WX4400# set interface taupe ip 10.10 .20.20/24 success: set ip address 10.10.20.20 netmask 255.255.
194 C HAPTER 7: I P S ERVICES C OMMANDS Examples — The following co mmand sets the date to Mar ch 13, 2003 and time to 11:11:12: WX4400# set timedate date feb 29 200 4 time 23:58:00 Time now is: Sun.
telnet 195 Examples — T o set the time zone for Paci fic Standard T ime (PST), type the following command: WX1200# set timezone PST -8 Timezone is set to 'PST', offset fro m UTC is -8:0 hours.
196 C HAPTER 7: I P S ERVICES C OMMANDS Examples — In the following example, an administrator estab lishes a T elnet session with another device and enters a command on the remote device: WX4400# telnet 10.10.10.90 Session 0 pty tty2.d Trying 10.10.
traceroute 197 traceroute T races the route to an IP host. Syntax — traceroute host [ dnf ] [ no-dns ] [ port port-num ] [ queries num ] [ size size ] [ ttl hops ] [ wait ms ] host — IP address, hostname, or alias of the destination h ost. Specify the IP addr ess in dotted decimal notation.
198 C HAPTER 7: I P S ERVICES C OMMANDS Examples — The followin g example traces the route to host server1: WX4400# traceroute server1 traceroute to server1.example.com (1 92.168.22.7), 30 hops max, 38 byte packet s 1 engineering-1.example.com (192.
traceroute 199 See Also ping on page 156 !F Fragmentation needed but Do Not Fragment (DNF) bit was set. !S Source route failed. !A Communication administratively prohibited.
200 C HAPTER 7: I P S ERVICES C OMMANDS.
8 AAA C OMMANDS Use authentication, authorization, and accounting (AAA) commands to provide a secur e network connection and a r ecord of user activity . Location policy commands override an y virtual LAN (VLAN) or security ACL assignment by AAA or the local WX database to help you control access locally .
202 C HAPTER 8: AAA C OMMANDS Local Authorization for Password Users set user on page 258 clear user on page 215 set user attr on page 259 clear user attr on page 216 set usergroup on page 261 clear u.
clear accounting 203 clear accounting Removes accountin g services for specified wir eless users with administrat ive acce ss or network access. Syntax — clear accounting { admin | dot1x } { user- glob } admin — Users with administrative access to the WX switch through a console connection or through a T elnet or Web Manager connection.
204 C HAPTER 8: AAA C OMMANDS clear authentication admin Removes an authentication rule for administrative access through T elnet or Web Manager . Syntax — clear authentication admin user-glob user-glob — A single user or set of users.
clear authentication console 205 clear authentication console Removes an authentication rule fo r administ rative access thr ough the Console. Syntax — clear authentication console user-glob user-glob — A single user or set of users.
206 C HAPTER 8: AAA C OMMANDS clear authentication dot1x Removes an 802.1X authenti cation rule. Syntax — clear authentication dot1x { ssid ssid-name | wired } user-glob ssid ssid-name — SSID name to which th is authentication rule applies. wired — Clears a rule used for access over a WX switc h’ s wired-authentication port.
clear authentication last-resort 207 clear authentication last-resort Removes a last-resort authentication rule. Syntax — clear authentication last-resor t { ssid ssid-name | wired } ssid ssid-name —SSID name to which this authentication rule applies.
208 C HAPTER 8: AAA C OMMANDS clear authentication mac Removes a MAC authentication rule. Syntax — clear authentication mac { ssid ssid-name | wired } mac-addr-glob ssid ssid-name — SSID name to which th is authentication rule applies. wired — Clears a rule used for access over a WX switc h’ s wired-authentication port.
clear authentication proxy 209 clear authentication proxy Removes a proxy rule for thir d-party AP users. Syntax — clear authentication proxy ssid ssid-na me user-glob ssid ssid-name — SSID name to which th is authentication rule applies. user-glob — User -glob associat ed with the rule you ar e removing.
210 C HAPTER 8: AAA C OMMANDS Examples — The following co mmand r emoves W ebAAA for SSID research and usergl ob temp*@thiscorp.com : WX4400# clear authentication web ssi d research temp*@thiscorp.
clear mac-user 211 See Also display location policy on page 224 set location policy on page 244 clear mac-user Removes a user profile from the loca l database on the WX switch, fo r a user who is authenticated by a MAC address. (T o remove a user pr ofile in RADIUS, see the documentation for your RADIUS server .
212 C HAPTER 8: AAA C OMMANDS clear mac-user attr Removes an authorization attribute from the user profile in the local database on the WX switch, for a user who is authenticated by a MAC addr ess. (T o remove an authorization attribute in RADIUS, see the documentation for your RADIUS server .
clear mac-usergroup 213 Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — Removing a MAC user fr om a MAC user group r emoves the group name fr om the user’ s profile, but does not delete the user group from the local WX database.
214 C HAPTER 8: AAA C OMMANDS See Also clear mac-usergroup attr on page 214 display aaa on page 219 set mac-usergroup attr on page 254 clear mac-usergroup attr Removes an authorization attribute fr om a MAC user gr oup in the local database on the WX switch, for a group of users who ar e authenticated by a MAC address.
clear mobility-profile 215 clear mobility-profile Removes a Mobility Profile entir ely . Syntax — clear mobility-profile name name — Name of an existing Mobility Profile. Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.
216 C HAPTER 8: AAA C OMMANDS Examples — The following co mmand delete s the user pr ofile for user Nin: WX4400# clear user Nin success: change accepted.
clear user group 217 clear user group Removes a user with a p asswor d from membership in a user group in the local database on the WX switch. (T o remove a user fr om a user group in RADIUS, see the documentation for your RADIUS server .) Syntax — clear user username group username — Username of a user with a password.
218 C HAPTER 8: AAA C OMMANDS Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — Removing a user group fr om the local WX database does not remove the user pr ofiles of the group’ s members from the database.
display aaa 21 9 Examples — The following command r emoves the members of the user group cardiology fr om a network access time r estriction by deleting the T ime-Of-Day attribute from the gr oup: WX4400# clear usergroup cardiology a ttr time-of-day success: change accepted.
220 C HAPTER 8: AAA C OMMANDS set authentication admin Jose sg3 set authentication console * none set authentication mac ssid mycorp * local set authentication dot1x ssid mycorp Geetha eap-tls set aut.
display aaa 22 1 See Also set accounting {admin | console} on page 225 set authentication admin on page 229 set authentication console on page 231 set authentication dot1x on page 233 deadtime Number of minutes the WX switch waits after determining a RADIUS server is unresponsive before trying to reconnect with this server.
222 C HAPTER 8: AAA C OMMANDS set authentication last-resort on page 236 set authentication mac on page 239 set authentication web on page 242 display accounting statistics Displays the AAA accounting r ecords for wir eless users. The r ecords a re stored in the local database on the WX switch.
display accounting s tatistics 22 3 See Also clear accounting on page 203 display aaa on page 219 set accounting {admin | console} on page 225 Acct-Status-Type Type of accounting record: .
224 C HAPTER 8: AAA C OMMANDS display location policy Displays the list of location policy ru les that make up the location policy on an WX switch. Syntax — display location policy Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.
set accounting {admin | cons ole} 225 Examples — The following co mmand displays the Mobility Profile magnolia : WX1200# display mobility-profile mag nolia Mobility Profiles Name Ports =============.
226 C HAPTER 8: AAA C OMMANDS method1, method2, method3, method4 — At least one of up to four methods that MSS uses to process accounting r ecords. Specify one or more of the following methods in priority order . If the first method does not succeed, MSS tries the second method, and so on.
set accounting {dot1x | mac | web | last-resort} 227 set accounting {dot1x | mac | web | last-resort} Sets up accounting services for spec ified wireless users with network access, and defines the accounting recor ds and wher e they are sent.
228 C HAPTER 8: AAA C OMMANDS method1, method2, method3, method4 — At least one of up to four methods that MSS uses to process accounting r ecords. Specify one or more of the following methods in priority order . If the first method does not succeed, MSS tries the second method, and so on.
set authentication admin 229 set authentication admin Configures authentication and defines where it is performed for specified users with administrat ive access through T elnet or Web Manager .
230 C HAPTER 8: AAA C OMMANDS History —Introduced in MSS V ersion 3.0. The syntax descriptions for the set authentication commands have been separated for clarity . However , the options and behavior for the set authentication admin command are th e same as in previous releases.
set authentication console 231 set authentication mac on page 239 set authentication web on page 242 set authentication console Configures authentication and defines where it is performed for specified users with administrative acce ss through a console connection.
232 C HAPTER 8: AAA C OMMANDS Defaults — By default, authentication is deactivated for all console users, and the default authenticat ion method in a console authentication rule is none . MSS requir es no username or password, by default. These users can press Enter at the prompts for administrative access.
set authenticatio n dot1x 233 set authentication mac on page 239 set authentication web on page 242 set authentication dot1x Configures authentication and defines how and where it is performed for specified wireless or wir ed authenticati on clients who use an IEEE 80 2.
234 C HAPTER 8: AAA C OMMANDS Provides encryption and integrity checking for the connection Cannot be used with RADIUS serv er authentication (requires user information to be in the switch’ s local dat abase) peap-mschapv2 — Protected EAP (PEAP) with Microsoft Challenge Handshake Authentication Prot ocol version 2 (MS-CHAP-V2).
set authenticatio n dot1x 235 Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — Y ou can configure dif ferent authentication methods for differ ent groups of users by “globbing.” (For details, see “User Globs” on page 26.
236 C HAPTER 8: AAA C OMMANDS Examples — The following command configures EAP-TLS authentication in the local WX database for SSID mycorp an d 802.1X c lient Geet ha: WX4400# set authentication dot1x ssi d mycorp Geetha eap-tls local success: change accepted.
set authentication last-resort 237 method1, method2, method3, method4 — At least one of up to four methods that MSS uses to handle authentication. Sp ecify one or mor e of the following methods in priori ty order . MSS applies multiple methods in the order you enter them.
238 C HAPTER 8: AAA C OMMANDS However , if local appears first, followed by a RADIUS server gr oup, MSS overrides any failed searches in the local WX d atabase and sends an authentication request to the server group. MSS uses a last-resort authentication rule under the following con ditions: The client is not denied access by 802.
set authentication mac 239 set authentication mac Configures authentication and defines where it is performed for specified non-802. 1X users with network ac cess thr ough a media access cont rol (MAC) addr ess.
240 C HAPTER 8: AAA C OMMANDS Usage — Y ou can configure dif ferent authentication methods for differ ent groups of MAC addr esses by “globbing .” (For details, see “User Globs, MAC Address Globs, and VLAN Globs” on page 26.
set authentication proxy 241 set authentication proxy Configures a proxy authentication ru le for a third-party AP’ s wire less users. Syntax — set authentication proxy ssid ssid-name user-glob radius-server-group ssid ssid-name — SSID name to which this authentication rule applies.
242 C HAPTER 8: AAA C OMMANDS set authentication web Configures an authentication rule to allow a user to log in to the network using a web page served by the WX sw itch. The rule can be activated if the user is not otherwise gran ted or denied access by 802.
set authentication web 243 Usage — Y ou can configure dif ferent authentication methods for differ ent groups of users by “globbing.” (For details, see “User Globs” on page 26.) Y ou can configure a rule either for wireless access to an SSID, or for wired access through a WX switch’ s wired auth entication port.
244 C HAPTER 8: AAA C OMMANDS display aaa on page 219 set authentication admin on page 229 set authentication console on page 231 set authentication dot1x on page 233 set authentication last-resort on page 236 set location policy Creates and enables a location policy on an WX switch.
set location policy 24 5 Optionally , you can add the suffix .out to the name. Condition options — MSS takes the action specified by the rule if all conditions in the rule are met. Y ou can specify one or more of the following conditions: ssid operator ssid-name — SSID with which the user is associated.
246 C HAPTER 8: AAA C OMMANDS modify rule-number — Replaces the rule in the location policy with the new rule. Specify the numbe r of the existing loca tion policy rule.
set location policy 24 7 Y ou can optionally add the suffixes .in and .out to inacl-na me and outacl-name so that they match the n ames of security ACLs stored in the local WX database. Examples — The following command denies network access to all users at *.
248 C HAPTER 8: AAA C OMMANDS set mac-user Configures a user profile in the local database on the WX switch for a user who can be authenticated by a MAC address, and optionally adds the user to a MAC u ser gr oup. (T o configure a MAC user profile in RADIUS, see the documentation for your RADIUS server .
set mac-user attr 249 set mac-user attr Assigns an authorization attribute in the local database on the WX switch to a user who is authenticated by a MAC address. (T o assign authorization attributes through RADIUS, see the documentation for your RADIUS server .
250 C HAPTER 8: AAA C OMMANDS end-date Date and time after which the user is no longer allowed to be on the network. Date and time, in the following format: YY/MM/DD-HH:MM You can use end-date alone or with start-date . You also can use start-date , end-date , or both in conjunction with time-of-day .
set mac-user attr 251 service-type Type of access the user is requesting. One of the following numbers: 2 —Framed; for network user access 6 —Administrative; for administrative access to the WX switch, with authorization to access the enabled (configuration) mode.
252 C HAPTER 8: AAA C OMMANDS time-of-day (network access mode only) Day(s) and time(s) during which the user is permitted to log into the network. After authorization, the user’s session can last until either the Time-Of-Day range or the Session-Timeout duration (if set) expires, whichever is shorter.
set mac-user attr 253 Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — T o change the value of an at tribute, enter set mac-user attr with the new valu e. T o delete an attr ibute, use clear mac-user attr . Y ou can assign attributes to individual MAC users and to MAC user groups.
254 C HAPTER 8: AAA C OMMANDS Examples — The following co mmand assigns input access contr ol list (ACL) acl-03 to filter the pack ets from a user at MAC address 01:02:03:04:05:06: WX4400# set mac-user 01:02:03:04:05: 06 attr filter-id acl-03.in success: change accepted.
set mobility-profile 255 Usage — T o change the value of an attribute, enter set mac-usergroup attr with the new valu e. T o delete an attribute, use clea r mac-usergroup attr . Y ou can assign attributes to individual MAC users and to MAC user groups.
256 C HAPTER 8: AAA C OMMANDS dap-num — List of Distributed MAP connections through which any user assigned this pr ofile is allowed access. The same Distributed MAP can be used in multiple Mobility Profile port lists. Defaults — No default Mobility Profile exists on the WX switch.
set mobility-profile mode 257 The following comma nd adds port 3 to the magnolia Mobility Pr ofile (which is already assigned to port 2): WX1200# set mobility-profile name ma gnolia port 3 success: change accepted.
258 C HAPTER 8: AAA C OMMANDS See Also clear mobility-profile on page 215 display mobility-pr ofile on page 224 set mobility-profile on page 255 set user Configures a user profile in the local database on the WX switch for a user with a password.
set user attr 25 9 The following command assigns the passwor d chey3nne to the admin user: WX4400# set user admin password chey 3nne success: User admin created The following command change s Nin’ s.
260 C HAPTER 8: AAA C OMMANDS Y ou can assign attributes to individual users and to user gr o ups. If attributes are configured for a user and also for the group the user is in, the attributes assigned to the individual user take precedence for that user .
set usergroup 261 Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — MSS does not requir e users to belong to user groups. To create a u ser gr oup, user the command set usergr oup .
262 C HAPTER 8: AAA C OMMANDS Y ou can assign attributes to individual users and to user gr o ups. If attributes are configured for a user and also for the group the user is in, the attributes assigned to the individual user take precedence for that user .
set web-portal 263 See Also clear authentication proxy on page 209 set service-profile auth-fallthru on page 374 set user on page 258.
264 C HAPTER 8: AAA C OMMANDS.
9 M OBILITY D OMAIN C OMMANDS Use Mobility Domain commands to configure and manage Mobility Domain groups. A Mobility Domain is a system of WX switches and MAP access points working together to support a roaming user (client). One WX swit ch acts as a seed switch, which maintains and distributes a list of IP addresses of the domain members.
266 C HAPTER 9: M OBIL ITY D OMAIN C OMMANDS clear mobility-domain Clears all Mobility Domain configur ation and information fr om a WX switch, regar dless of whether the WX switch is a seed or a member of a Mobility Domain. Syntax — clear mobility-domain Defaults — None.
display mobility -domain config 26 7 Usage — This command has no effect if the WX switch member is not configured as part of a Mobility Domain or the current WX switch is not the seed. Examples — The following command clea rs a Mobility Domain member with the IP address 192.
268 C HAPTER 9: M OBIL ITY D OMAIN C OMMANDS History —Introduced in MSS V ersion 3.0. Examples — T o display Mobility Domain status, type the following command: WX4400# display mobility-domain stat us Mobility Domain name: Pleasanton Member State Status --------------- ------------- -------------- 192.
set mobility-domain member 269 set mobility-domain member On the seed WX switch, adds a memb er to the list of Mobi lity Domain members. If the current WX switch is not configur ed as a seed, this command is re jected. Syntax — set mobility-domain member ip-addr ip-addr — IP addr ess of the Mobility Domain member in dotted decimal notation.
270 C HAPTER 9: M OBIL ITY D OMAIN C OMMANDS set mobility-domain mode member seed-ip On a nonseed WX switch, sets the IP addr ess of the seed WX switch. This command is used on a member WX to configure it as a member . If the WX switch is currently part of another Mobility Domain or using another seed, this command overwrites that configuration.
set mobility-domain mode seed domain-name 271 set mobility-domain mode seed domain-name Creates a Mobility Domain by setting the curr ent WX switch as the seed device and naming the Mobility Domain. Syntax — set mobility-domain mode seed d omain-name mob-domain-name mob-domain-name — Name of the Mobility Domain.
272 C HAPTER 9: M OBIL ITY D OMAIN C OMMANDS.
1 0 N ETWORK D OMAIN C OMMANDS Use Network Domain comman ds to configu re an d manage Net work Domain groups. A Network Domain is a group of geographically dispersed Mobility Domains that share information among themselves over a W AN link.
274 C HAPTER 10: N ETWORK D OMAIN C OMMANDS clear network-domain Clears all Network Domain configuration and information from a WX switch, regar dless of whether the WX switch is a seed or a member of a Network Domain. Syntax — clear network-domain Defaults — None.
clear network-domain mode 275 clear network-domain mode Removes the Network Domain seed or member configuration from the WX switch. Syntax — clear network-domain mode {seed | member} seed — Clears the Network Domain seed configuration from the WX switch.
276 C HAPTER 10: N ETWORK D OMAIN C OMMANDS clear network-domain peer Removes the configuration of a Network Domain peer from a WX switch configured as a Network Domain seed. Syntax — clear network-domain peer { ip-addr | al l} ip-addr — IP address of the Network Domain peer in dotted d ecimal notation.
clear network-domain seed-ip 277 clear network-domain seed-ip Removes the specified Network Doma in seed fr om the WX switch’ s configuration. When you enter th is command, the Network Dom ain TCP connections between the WX switch and the specified Network Domain seed ar e closed.
278 C HAPTER 10: N ETWORK D OMAIN C OMMANDS display network-domain Displays the status of Networ k Doma in seeds and members. Syntax — display network-domain Defaults — None. Access — Enabled. History —Introduced in MSS 4.1. Examples — T o display Network Domain status, type the following command.
display network-domain 279 T able 48 describes th e fields in the display . See Also clear network-domain on page 274 set network-domain m ode member seed- ip on page 280 set network-domai.
280 C HAPTER 10: N ETWORK D OMAIN C OMMANDS set network-domain mode member seed-ip Sets the IP a ddr ess of a Network Doma in seed. This command is used for configuring a WX switch as a memb er of a Network Domain. Y ou can specify multiple Network Domain seeds and configur e one as the primary seed.
set network-domain peer 281 WX1200# se t network-domain mode member seed-i p 192.168.9.254 affinity 7 success: change accepted. See Also clear network-domain on page 274 display network-domain on page 278 set network-domain peer On a Network Domain seed, configures one or mor e WX switches as redundant Network Domain se eds.
282 C HAPTER 10: N ETWORK D OMAIN C OMMANDS set network-domain mode seed domain-name Creates a Network Domain by setting the current WX switch as a seed device and naming the Network Domain. Syntax — set network-domain mode seed do main-name net-domain-name net-domain-name — Name of the Network Domain.
11 M ANAGED A CCESS P OINT C OMMANDS Use MAP access point commands to configur e an d manage MAP acce ss points. Be sure to do the follo wing before using the commands: Define the country-speci fic IEEE 802.1 1 r egulations on the WX switch. (See set system countrycode on page 56.
284 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set {ap | dap} radio auto -tune min-client-rate on page 340 set {ap | dap} rad io mode on page 341 set {ap | dap} rad io radio-profile on page 343 s.
MAP Access Point Commands by Usage 28 5 set service-pr ofile wpa-ie on page 391 set service-pr ofile rsn-i e on page 383 set service-pr ofile cipher -ccmp on pa ge 377 set service-pr ofile cipher -tki.
286 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS clear {ap | dap} radio Disables a MAP radio and resets it to it s factory default settings. Syntax — clear { ap port-list | dap dap-num } radio { 1 | 2 | all } ap port-list — List of ports connected to th e MAP access point(s) on which to reset a radio.
clear {ap | dap} radio 287 Defaults — The clear ap radio command resets the radio to the default settings listed in T able 50 and in T able 66 on page 362.
288 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also set {ap | dap} radio mode on page 341 set {ap | dap} radio radio-pr ofile on page 343 set port type ap on page 91 clear radio-profile Removes a radio profile or resets one of the profile’ s parameters to its default value.
clear service-profile 289 Examples — The following co mmands disable the radios that ar e using radio profile rp1 and reset the beaconed-interval parameter to its default value: WX4400# set radio-profile rp1 mode d isable WX4400# clear radio-profile rp1 beac on-interval success: change accepted.
290 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following co mmands disable the radios that ar e using radio profile rp6 , re move service-pr ofile svcprof6 from rp6 , then clear svcprof6 from the config uration.
display {ap | dap} config 291 Examples — The following example shows configuration inf ormation for a MAP access point on WX port 2: WX1200# display ap config 2 Port 1: AP model: AP2750, POE: ena ble, bias: high, name: MAP01 boot-download-enable: YES load balancing group: non e Radio 1: type: 802.
292 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS name MAP access point name. boot-download- enable State of the firmware upgrade option: YES (automatic upgrades are enabled) NO (automatic upgrades are disabled) load balancing group Names of the MAP load-balancing grou ps to which the MAP access point belongs.
display {ap | dap} config 293 See Also display dap connection on page 313 display dap global on page 314 display dap unconfigur ed on page 31 6 display radio-profile on page 317 se.
294 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS display {ap | dap} counters Displays MAP access point and radio statistics counters. Syntax — display ap counters [ port-list [ radio { 1 | 2 }]] .
display {ap | dap} counters 295 Examples — The following co mmand shows statistics counters for Distributed MAP 7: WX1200# display dap counters 7 Port: 6 radio: 1 ================================= L.
296 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS T able 52 describes the fields in this display . T able 52 Output for display ap counters Field Description DAP Distributed MAP number. Port WX port number (if the MAP is directly connected to the WX and the WX port is configured as a MAP access point).
display {ap | dap} counters 297 CCMP Pkt Transfer Ct Total number of CCMP packets sent and received by the radio. Radio Recv Phy Err Ct Number of times radar caused packet errors. If this counter increments rapidly, there is a problem in the RF environment.
298 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS User Sessions Number of clients currently associated with the radio. Generally, this counter is equ al to the number of sess ions listed for the radio in display se ssions output.
display {ap | dap} counters 299 Noise Floor Received signal strength at which the MAP can no longer distinguish 802.11 packets from ambient RF no ise. A value around -90 or higher is goo d for an 802.11b/g radio. A value around -80 or higher is good for an 802.
300 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also display sessions network on page 525 display {ap | dap} qos-stats Displays statistics fo r MAP forwarding queues.
display {ap | dap} etherstats 301 T able 53 describes th e fields in this display . display {ap | dap} etherstats Displays Ethernet statistics for a MAP’ s Ethernet ports. Syntax — display { ap | dap } etherstats [ port-list | dap-num ] port-list — List of WX switch ports directly connected to t he MAPs for which to d isplay counters.
302 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS T able 54 describes the fields in this display . T able 54 Output of display ap etherstats Field Descri ption RxUnicast Number of unicast frames rece ived. RxMulticast Number of multicast frames received.
display {ap | dap} group 303 display {ap | dap} group Displays configuration in formation and load-balancing status for MAP access point groups. Syntax — display { ap | dap } group [ name ] name — Name of a MAP gr oup or Distributed MAP group.
304 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS display {ap | dap} status Displays MAP access point and radio status information. Syntax — display ap status [terse] [ port-l ist | all [ radio { .
display {ap | dap} status 305 Examples — The follow ing command displays the status of a Distributed MAP: WX4400# display dap status 1 Dap: 1, IP-addr: 10.
306 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS The following command uses the terse option to display brief information for Distributed MAPs: WX4400# display dap status terse Total number of entr.
display {ap | dap} status 307 MAP port MAP port number connec ted to this WX port. State State of the MAP: init — The MAP has been recognized by the WX but has not yet begun booting. booting — The MAP has asked the WX for a boot image. image down loading — The MAP is receiving a boot image from the WX.
308 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Radio 1 type Radio 2 type 802.11 type and configur ation state of the radio. The configure succeed state indicates that the MAP has received configuration parameters for the radio and t he radio is ready to accept client connections.
display auto-tune attributes 309 display auto-tune attributes Displays the current values of the RF attributes RF Auto-T uning uses to decide whether to change channel or po wer settings.
310 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Access — Enabled. History —Introduced in MSS V ersion 3.0. Examples — The following co mmand displa ys RF attribute information for radio 1 on.
display auto-tune neighbors 311 set radio-profile auto-tune channel-interval on page 351 set radio-profile auto-tune power -backoff- timer on page 352 set radio-profile auto-tune power -co.
312 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following co mmand displa ys neighbor information for radio 1 on the directly connected MAP access point on port 2: WX1200# display.
display dap connection 313 display dap connection Displays the system IP address of the WX switch that booted a Distributed MAP . Syntax — display dap connection [ dap-num | serial-id serial-ID ] dap-num — Number of a Distributed MAP for which to display information about it s active connect ion.
314 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS The following command displays connec tion information specifically for a Distributed MAP with serial ID M9DE48B6EAD00 : WX1200# display dap connect.
display dap glob al 315 Usage — Connections are shown only for the Distribu ted MAPs that ar e configured on the WX switch fr om which you enter the command, and only for the Mobility Domain the switch is in. T o show information only for Distributed MAPs that have active connections, use the display dap connection command.
316 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also display {ap | dap} config on page 2 90 display dap connection on page 313 display dap unconfigur ed on page 31 6 set dap on.
display radio-profile 317 T able 62 describes th e fields in this display . See Also display dap connection on page 313 display dap global on page 314 display radio-profile Displays radio pr ofile information. Syntax — display radio-profile { name | ? } name — Displays information ab out the named rad io pr ofile.
318 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Usage — MSS contains a default radio profile. 3Com recommends that you do not change this profile but instead keep the profile for r eference.
display radio-profile 319 Long Retry Limit Number of times a radio in the radio profile can send a long unicast frame without receiving an acknowl edgment. A long unicast frame is a frame that is equal to or longer than the RTS threshold. Long Preamble Indicates whether an 802.
320 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also set radio-profile 11g-only on page 347 set radio-profile auto -tune channel-config on page 349 set radio-profile auto -tune cha.
display service-profile 321 display service-profile Displays service profi le information. Syntax — display service-profile { name | ? } name — Displays information about the named service profile. ? — Displays a list of service profil es.
322 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS beacon Indicates whether the radio se nds beacons, to advertise the SSID: no yes auth-fallthru Secondary (fallthru) encryption type when a user tries to authenticate but the WX swit ch managing the radio does not have an authentication rule with a userglob that matches the username.
display service-profile 323 See Also set service-profile auth-dot1x on page 373 set service-profile auth-fallthru on page 374 set service-profile auth-psk on page 375 set service-profi.
324 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set service-profile ssid-name on page 384 set service-profile ssid-type on page 385 set service-profile tkip-mc-time on page 386 set.
set dap auto 32 5 set dap auto Creates a pr ofile for automatic configuration of Distribut ed MAPs. Syntax — set dap auto Defaults — None. Access — Enabled. History — Introduced in MSS 4.0. Usage — T able 65 lists the config urable pr ofile parameters and their defaults.
326 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following command creates a profile for automatic Distributed MAP configuration: WX1200# set dap auto success: change accepted.
set dap auto mode 327 11a — 802.11a 11b — 802.11b 11g — 802.11g Defaults — The default radio type fo r models AP2750, MP-241, and MP-341, and for the 802.11b /g radios in other models is 802.11g in regulatory domains that support 802.
328 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following co mmand enables the pr ofile for automatic Distributed MAP configuration: WX4400# set dap auto mode enable success: change accepted.
set {ap | dap} bias 329 Access — Enabled. History —Introduced in MSS V ersion 3.0. Option auto added for configuration of the MAP configuration profile. Usage — High bias is preferr ed over low bias. Bias applies only to WX switches that are indir ect ly attached to the MAP thr ough an intermediate Layer 2 or Layer 3 network.
330 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set {ap | dap} blink Enables or disables LED blink mode on a MAP access point to make it easy to identify . When blink mode is enabled on an AP2750, the 11a LED blinks on and off. When blink mode is enabled on an AP7250, the Radio LED flashes r ed and the Power LED flashes green/or ange.
set dap fingerprint 33 1 Usage — Changing the LED blink mode does not alter operation of the MAP access point. Only the behavior of the LEDs is affecte d. Examples — The following co mmand enables LED blink mode on the MAP access points connected to por ts 3 and 4: WX1200# set ap 3-4 blink enable success: change accepted.
332 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following example verifies the fingerprint for Distributed MAP 8: WX4400# set dap 8 fingerprint b4:f9:2a:52:37:58:f4:d0:10:75:43:2f: 45:c9:52:c3 success: change accepted.
set {ap | d ap} name 333 If you use the name none , spelled in any combination of capital or lowercase letters, the specified MAP ac cess point is clear ed fr om all MAP access point groups.
334 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following co mmand ch anges the name of the MAP access point on port 1 to techp ubs : WX1200# set ap 1 name techpubs success: change accepted. See Also display {ap | dap} config on page 2 90 set {ap | dap} radio antennatype Sets the model number for an external antenna.
set {ap | dap} radio auto-tune max-power 335 antennatype { ANT-1360-OUT | ANT5360-OUT | ANT5060 | ANT51 20-OUT | internal } — 802.11a external antenna models: ANT1360-OUT — 360° 802.11b/g antenna ANT5360-OUT — 360° 802.11a antenna ANT5060-OUT — 60° 802.
336 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS dap auto — Sets the ma ximum power fo r radios conf igure d by the MAP configur ation pr ofile. (See set dap auto on page 325.) radio 1 — Radio 1 of the MAP . radio 2 — Radio 2 of the MAP .
set {ap | dap} radio auto-tune max- retransmissions 337 set {ap | dap} radio auto-tune max- retransmissions Sets the maximum percentage of c lient retransmissions a radio can experience before RF Auto-T uning considers changing the channel on the radio.
338 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS The interval is 1000 pack ets. If mor e than the specified percentage of packets within a group of 1000 pa ckets received by the radio are retransmissions, the radio incr eases power .
set {ap | dap} radio channel 339 set {ap | dap} radio channel Sets a MAP radio’ s channel. Syntax — set { ap port-list | dap dap-num } radio { 1 | 2 } channel channel-number ap port-list — List of ports connected to the MAP access points on which to set the channel.
340 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also display {ap | dap} config on page 2 90 set {ap | dap} radio tx-power on page 344 set {ap | dap} radio auto-tune min-client-rate Sets the minimum rate at which a radi o is allowed to transmit traf fic to clients.
set {ap | dap} radio mode 341 Usage — If the data rate for traffic sent by a radio to an ass ociated client falls below the default minimum ra te, the radio increases power , in 1 dBm increments, until all clients ar e at or above the minimum ra te.
342 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS radio 2 — Radio 2 of the MAP . (This option does not apply to single-radio models.) mode enable — Enables a radio. mode disable — Disables a radio. Defaults — MAP access point radios are disabled by default.
set {ap | dap} radio radio-profile 343 set {ap | dap} radio radio-profile Assigns a radio profile to a MAP radi o and enables or disables the radio. Syntax — set { ap port-list | dap dap-num | auto } radio { 1 | 2 } radio-profile name mode { enable | disable } ap port-list — List of ports.
344 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set {ap | dap} radio mode on page 341 set radio-profile mode on page 362 set {ap | dap} radio tx-power Sets a MAP r adio’ s transmit power .
set dap security 345 Examples — The following command configures the transmit power on the 802.11a radio on the MAP access point connected to port 5: WX1200# set ap 5 radio 1 tx-power 10 success: change accepted. The following command configures the channel and tran smit power on the 802.
346 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS History —Introduced in MSS 4.0. Usage — This parameter applies to all Distributed MAPs managed by the switch. If you change the set ting to req ui red , th e s wit ch req uire s Distributed MAPs to have encryption keys.
set radio-profile 11g-only 347 Defaults — Automatic firmware upgrades of MAP access points ar e enabled by default. Access — Enabled. History —Introduced in MSS V ersion 3.
348 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Even when association of 802.11b clients is disabled, if an 802.11b/g radio detects a beacon from an 802.
set radio-profile auto-tune channel-config 349 Defaults — Active scanning is enabled by default. Access — Enabled. History —Introduced in MSS V ersion 4.0. Usage — Y ou can enter this command on any WX switch in the Mobility Domain. The command ta kes ef fect only on that switch.
350 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS RF Auto-T uning of channels on 802.11a radios uses only the bot tom eight channels in the band (36, 40, 44, 48, 52, 56, 60, and 64).
set radio-profile auto-tune channel-interval 351 Usage — The channel holddown applies ev en if RF anomalies occur that normally cause an immediate channel change.
352 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following command sets the channel interval for radios in radio pr ofile rp2 to 2700 seconds (45 minutes): WX4400# set radio-profile rp2 auto-tune channel-interval 2700 success: change accepted.
set radio-profile auto-tune power-config 353 set {ap | dap} radio auto-tune max- r etransmissions on page 337 set radio-profile auto-tune power -config on page 353 set radio-profile auto-t.
354 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set radio-profile auto-tune power -backoff- timer on page 352 set radio-profile auto-tune power -interval on page 354 set radio-profile auto-tune power -interval Sets the interval at which RF Auto-T uning decid es whether to change the power level on radios in a radio profil e.
set radio-profile beacon-interval 35 5 set radio-profile beacon-interval Changes the rate at which each MAP radio in a radio profile advertises its service set identifier (SS ID). Syntax — set radio-profile name beacon-interva l interval name — Radio profile name.
356 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS MAP radios can also issue countermeasures against interfering devices. An interfering device is not part of the 3Com network but also is not a ro gue.
set radio-profile dtim-interval 357 The following command causes ra d ios managed by radio pr ofile radprof3 to issue countermeasures against device s in the WX switch’ s attack list: WX1200# set radio-profile radprof3 countermeasures configu red success: change accepted.
358 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also display radio-profile on page 317 set radio-profile mode on page 362 set radio-profile frag-threshold Changes the fragmentation threshold for th e MAP radios in a radio pr ofile.
set radio-profile long-retry 359 set radio-profile long-retry Changes the long retry threshold for the MAP radios in a radio pr ofile. The long retry threshold specifies th e number of times a radio can send a long unicast frame without receiving an acknowledgment.
360 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set radio-profile max-rx-lifetime Changes the maximu m r eceive threshold for the MAP radios in a radio profile. The maximum r eceive thre shold specifies the number of milliseconds that a frame received by a radio can remain in buffer memory .
set radio-profile max-tx-lifetime 361 set radio-profile max-tx-lifetime Changes the maximum transmit threshold for the MAP radios in a radio profile. The maximum transmit threshold specifies the number of milliseconds that a frame scheduled to be transmitted by a radio can remain in buf fer memory .
362 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set radio-profile mode Creates a new radio profile, or disabl es or reena bles all MAP radios that are using a specific pr ofile. Syntax — set radio-profile name [ mode { enable | disable }] radio-profile name — Radio pr ofile name of up to 16 alphanumer ic characters, with no spaces.
set radio-profile mode 363 Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — Use the command without any optional parameters to cr eate new profile. If the radio profile does not alr eady exist, MSS creates a new radio profile. Use the enable or disable option to enable or disable all the radios using a profile.
364 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following command config ur es a new radio profile named rp1 : WX4400# set radio-profile rp1 success: change accepted.
set radio-profile rts-threshold 365 Usage — Changing the preamble length value af fects only the support advertised by the radio. Regardless of the preamble length setting ( short or long ), an 802.11b/g radio accepts a nd can generat e 802.11b/g frames with either short or long preambles.
366 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS History —Introduced in MSS V ersion 3.0. Usage — Y ou must disable all radios that are using a radio profile befor e you can change pa rameters in t he pr ofile. Use the set radio-profile mode command .
set radio-profile service-profile 367 auth-fallthru web-auth Uses WebAAA for users who do not match an 802.1X or MAC authentication rule for the SSID requeste d by the user. auth-psk disable Does not suppo rt using a preshared key (PSK) to authenticate WPA clients.
368 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — Y ou must configure the service profile before you can map it to a radio profile. Y ou can map the same service profile to mor e than one radio profile.
set radio-profile short-retry 369 set service-profile cipher -ccmp on page 377 set service-profile cipher -tkip on page 378 set service-profile cipher -wep104 on page 379 set service-p.
370 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Usage — Y ou must disable all radios that are using a radio profile befor e you can change pa rameters in t he pr ofile.
set service-profile attr 371 If you plan to use SVP or another non-WMM type of prioritizatio n, you must configure ACLs to tag the packets. (See the “Enabling Prioritization for Legacy V oice over IP” section in the “Configuring and Managing Security ACLs” chapter of the W ireless LAN Switch and Controller Configuration Guide .
372 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS The SSID default attributes ar e applied in addition to any attributes supplied for the user by the RADIUS server or the local database.
set service-profile auth-dot1x 37 3 See Also display service-profile on page 321 display sessions network on page 525 set service-profile auth-dot1x Disables or reenables 802.
374 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also display service-profile on page 321 set service-profile auth-psk on page 375 set service-profile psk-phrase on page 381 set service-profile wpa-ie on page 391 set service-profile auth-fallthru Specifies the au thentication type for users w ho do not match an 802.
set service-profile auth-psk 375 Access — Enabled. History —Introduced in MSS V e rsion 3.0. Option for W ebAAA fallthru authentication type changed from web-auth to web-portal in MSS V ersion 4.1. Usage — The last-resort fallthru authentication type allows any user to access any SSID managed by the service profile.
376 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — This command affects authentication of WP A clients only . T o use PSK au thentication, you also must configure a passphrase or key .
set service-profile cipher-ccmp 37 7 enable — Enables beaconing of the SSID managed by the service profile. disable — Disables beaconing of the SSID managed by the service profile. Defaults — Beaconing is e nabled by default. Access — Enabled.
378 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following co mmand c onfigures service profile sp2 to use CCMP encryption: WX4400# set service-profile sp2 cipher-ccmp enable success: change accepted.
set service-profile cipher-wep104 379 set service-profile tkip-mc-time on page 386 set service-profile wpa-ie on page 391 set service-profile cipher -wep104 Enables dynamic W ir ed Equivalent Privacy (WEP) with 104-bit keys, in a service profile.
380 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS See Also set service-profile cipher -ccmp on page 377 set service-profile cipher -tkip on page 378 set service-profile cipher -wep40 on .
set service-profile psk-phrase 381 Examples — The following co mmand c onfigures service profile sp2 to use 40-bit WEP encryp tion: WX4400# set service-profile sp2 cipher-wep40 enable success: change accepted.
382 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS Examples — The following co mmand c onfigures service profile sp3 to use passphrase “123456789 0123<>?=+&% The quick brown fox jumps o.
set service-profile rsn-ie 383 Examples — The following co mmand c onfigures service profile sp3 to use a raw PSK with PSK clients: WX4400# set service-profile sp3 psk-raw c25d3fe4483e867 d1df96eaacdf8b02451fa0836162e758100f 5f6b87965e59d success: change accepted.
384 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set service-profile shar ed-key-auth Enables shared-key authentication, in a service profile. Use this command only if advised to do so by 3Com. This command does not enable preshare d key (PSK) authentication for W i-Fi Protected Access (WP A).
set service-profile ssid-type 385 Access — Enabled. History —Introduced in MSS V e rsion 3.0. Support added for blank spaces in the SSID name in MSS V ersion 4.
386 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set service-profile tkip-mc-time Changes the length of time that MA P radios use countermeasures if two message integrity code (MIC) f ailur es occur within 60 secon ds.
set service-profile web-portal-form 387 set service-profile web-portal-form Specifies a custom login page to serve to WebAAA users who r equest the SSID managed by the service profile. Syntax — set service-profile name web-portal- form url name — Service pr ofile name.
388 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS file:corpa-login.html 637 bytes Aug 12 2004, 15:42 :26 file:corpa-logo.jpg 1202 bytes Aug 12 2004, 15:57 :11 Total: 1839 bytes used, 20657 7 Kbytes free WX4400# set service-profile corpa-se rvice web-aaa-form corpa-ssid/ corpa-login.
set service-profile wep active-unicast- index 389 See Also set service-profile we p active-unicast- index on page 389 set service-profile wep key-index on page 390 set service-profile wep active-unicast- index Specifies the static W ired-Equivalent Privacy (WEP) key (one of four) to use for encrypting unicast frames.
390 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS set service-profile wep key-index Sets the value of one of four static Wired-Equivalent Privacy (WEP) keys for static WEP encryption. Syntax — set service-profile name wep key-in dex num key value name — Service pr ofile name.
set service-profile wpa-ie 391 set service-profile wpa-ie Enables the WP A information element (IE) in wireless frames. The WP A IE advertises the WP A authentication meth ods and cipher suites supported by radios in the radio profil e mapped to the service profile.
392 C HAPTER 11: M ANAGED A CCESS P OINT C OMM ANDS.
12 STP C OMMANDS Use Spanning T ree Protocol (STP) commands to configure and manage spanning trees on the virtual LANs (VLANs) configured on a wir eless LAN switch or controller , to maintain a loop-free network. STP Commands by Usage This chapter pr esents STP comman d s alphabetically .
394 C HAPTER 12: STP C OMMANDS clear spantree portcost Resets to the default value t he cost of a network port or ports on paths to the STP root bridge in all VLANs on a WX switch. Syntax — clear spantree portcost port-list port-list — List of ports.
clear spantree portpri 39 5 clear spantree portpri Resets to the default value the priority of a network port or ports for selection as part of the path to th e STP root bridge in all VLANs on a wireless LAN switch or contr oller . Syntax — clear spantree portpri port-list port-list — List of ports.
396 C HAPTER 12: STP C OMMANDS vlan vlan-id — VLAN name or number . MSS resets the cost for only the specified VLAN. Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — MSS does not change a port’ s cost for VLANs other than the one(s) you specify .
clear spantree statistics 39 7 History —Introduced in MSS V ersion 3.0. Usage — MSS does not change a port’ s priority for VLANs other than t he one(s) you specify . Examples — The following command r esets the STP priority for p ort 2 in VLAN avocado: WX4400# clear spantree portvlanpri 2 vlan avocado success: change accepted.
398 C HAPTER 12: STP C OMMANDS display spantree Displays STP configuratio n and port-state information. Syntax — display spantree [ port-list | vlan vlan-id ] [ active ] port-list — List of ports. If you do not specify any ports, MSS displays STP information for all ports.
display spantree 399 T able 69 describes th e fields in this display . T able 69 Output for display spantree Field Description VLAN VLAN number. Spanning tree mode In the current software version, the mode is always PVST+, which means Per VLAN Spanning T ree+.
400 C HAPTER 12: STP C OMMANDS See Also display spantree blockedports on page 401 display spantree backbonefast Indicates whether the STP backbone fa st convergence featur e is enabled or disabled. Syntax — display spantree backbonefast Defaults — None.
display spantree blockedports 401 Examples — The following example shows the command out put on a WX switch with backbone fast convergence enabled: WX4400# display spantree backbonefas t Backbonefas.
402 C HAPTER 12: STP C OMMANDS display spantree portfast Displays STP uplink fast convergence information for all network p orts or for one or more network ports . Syntax — display spantree portfast [ port-list ] port-list — List of ports. If you do not specify any ports, MSS displays uplink fast converge nce information for all por ts.
display spantree portvlancost 403 display spantree portvlancost Shows the cost o f a port on a path to the STP root bridge, for each of the port’ s VLANs. Syntax — display spantree portvlancost port-list port-list — List of ports. Defaults — None.
404 C HAPTER 12: STP C OMMANDS Usage — The command displays statistics separately for each port. Examples — The following co mmand shows STP statistics for port 1: WX4400# display spantree statist.
display spantree statistics 405 topology change timer value 0 hold timer INACTIVE hold timer value 0 delay root port timer INACTIVE delay root port timer value 0 delay root port timer restarted is FAL.
406 C HAPTER 12: STP C OMMANDS T able 71 Output for display spantree statis tics Field Descri ption Port Port number. VLAN VLAN ID. Spanning Tree enabled for vlan State of the STP feature on the VLAN. port spanning tree State of the STP feature on the port.
display spantree statistics 407 config_pending I ndicates whether a configured BPDU is to be transmitted on expiration of the hold timer for the port. port_inconsistency Indicates whether the port is in an inconsistent state. config BPDU’s xmitted Number of BPDUs transmitted from the port.
408 C HAPTER 12: STP C OMMANDS hold timer Status of the hold timer. This timer ensures that configured BPDUs are not transmitted too frequently through any bridge port.
display spantree uplinkfast 409 See Also clear spantree stati stics on page 397 display spantree uplinkfast Shows uplink fast convergence infor m ation for one VLAN or all VLANs. Syntax — display spantree uplinkfast [ vlan vlan- id ] vlan vlan-id — VLAN name or number .
410 C HAPTER 12: STP C OMMANDS Examples — The following co mmand shows uplink fast convergence information for all VLANs: WX4400# display spantree uplinkfast VLAN port list ------------------------------------ ------------------------------------ 1 1(fwd),2,3 T able 72 describes th e fields in this display .
set spantree backbonefast 411 Examples — The following co mmand enables STP on all VLANs configured on a WX switch: WX4400# set spantree enable success: change accepted. The following command disables STP on VLAN burgundy: WX4400# set spantree disable vlan bu rgundy success: change accepted.
412 C HAPTER 12: STP C OMMANDS See Also display spantree backbonefast on page 400 set spantree fwddelay Changes the period of time after a topology change that a WX switch which is not the root bridge waits to begin forwar ding Layer 2 traffic on one or all of its configured VLANs.
set spantree maxage 413 vlan vlan-id — VLAN name or number . MS S changes the interval on only the specified VLAN. Defaults — The default hello timer interval is 2 seconds.
414 C HAPTER 12: STP C OMMANDS Examples — The following command changes the maximum acceptable age for root bridge hello packets on all VLANs to 15 seconds: WX4400# set spantree maxage 15 all success: change accepted.
set spantree portfast 415 Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — This command applies only to the defa ult VLAN (V LAN 1).
416 C HAPTER 12: STP C OMMANDS Examples — The following co mmand enab les port fast convergence on ports 2, 5, and 7: WX1200# set spantree portfast port 2 ,4,7 enable success: change accepted.
set spantree portvlancost 417 set spantree portvlancost Changes the cost of a network por t or ports on paths to the STP root bridge for a specific VLAN on a wireless LAN switch. Syntax — set spantree portvlancost port-lis t cost cost { all | vlan vlan-id } port-list — List of ports.
418 C HAPTER 12: STP C OMMANDS set spantree portvlanpri Changes the priority of a network port or ports for selectio n as part of the path to the STP root bridge, on one VLAN or all VLANs. Syntax — set spantree portvlanpri port-list priority value { all | vlan vlan-id } port-list — List of ports.
set spantree priority 419 set spantree priority Changes the STP root bridge priority of a wir eless LAN switch on one or all of its VLANs. Syntax — set spantree priority value { all | v lan vlan-id} priority value — Priority value. Y ou ca n specify a value from 0 through 65,535.
420 C HAPTER 12: STP C OMMANDS History —Introduced in MSS V ersion 3.0. Usage — The uplink fast convergence feature is applicable to bridges that are acting as access switches to the net work cor e (distribution layer) but are not in the core themselves.
13 IGMP S NOOPING C OMMANDS Use Internet Group Management Pr otocol (IGMP) snooping commands to configure and manage multicast traff ic reduction on a WX. Commands by usage This chapter presents IGMP snooping commands alphabetically . Use the T able 74 to locate commands in this chap ter based on their use.
422 C HAPTER 13: IGMP S NOOPING C OMMANDS clear igmp statistics Clears IGMP statistics count ers on one VLAN or all VLANs on a wir eless LAN switch and r esets them to 0. Syntax — clear igmp statistics [ vlan vlan-id ] vlan vlan-id — VLAN name or number .
display igmp 423 router information: Port Mrouter-IPaddr Mrouter-MAC Type TTL ---- --------------- --------------- -- ----- ----- 1 192.28.7.5 00:01:02:03:04:05 dvmrp 17 Group Port Receiver-IP Receiver-MAC TTL --------------- ---- --------------- ----------------- ----- 224.
424 C HAPTER 13: IGMP S NOOPING C OMMANDS T able 75 Output for display igmp Field Descri ption VLAN VLAN name. MSS displays info rmation separately for each VLAN. IGMP is enabled (disabled) IGMP state. Proxy reporting Proxy reporting state. Mrouter solicitation Multicast router solicitation state.
display igmp 425 TTL Number of seconds befo re this entry ages out if not refreshed. For static multicast route r entries, the time-to-live (TTL) value is undef . Static multicast router entries do not age out. Group IP address of a multicast group. The display igmp receiver -table command shows the sa me information as these receiver fields.
426 C HAPTER 13: IGMP S NOOPING C OMMANDS See Also display igmp mrouter on page 426 display igmp querier on page 427 display igmp receiver -table on page 429 display igmp statistic s on page 431 display igmp mrouter Displays the multicast routers in a WX’ s subnet, on one VLAN or all VLANs.
display igmp querier 427 See Also display igmp mrouter on page 426 set igmp mr outer on page 435 display igmp querier Shows information about the active multicast querier , on one VLAN or all VLANs. Queriers are listed separately for each VLAN.
428 C HAPTER 13: IGMP S NOOPING C OMMANDS History — Introduced in MSS V ersion 3.0. Examples — The followin g command displa ys querier information for VLAN orange : WX1200# display igmp querier vlan or ange Querier for vlan orange Port Querier-IP Querier-MAC TTL ---- --------------- --------------- -- ----- 1 193.
display igmp receiver-table 429 See Also set igmp querier on page 441 display igmp receiver -table Displays the receivers to which a WX forwar ds multicast traffic. Y ou can display receivers for all VLANs, a si ngle VLAN, or a group or gr oups identified by group address and network mask.
430 C HAPTER 13: IGMP S NOOPING C OMMANDS The following command lists all r eceivers for multicast groups 237.255.255.1 t hr ough 237.255.255.2 55, in all VLANs: WX1200# display igmp receiver-table group 237.255.255.0/24 VLAN: red Session Port Receiver-IP Receiver-MAC TTL --------------- ---- --------------- ----------------- ----- 237.
display igmp stati stics 431 display igmp statistics Shows IGMP statistics. Syntax — display igmp statistics [ vlan vlan-id ] vlan vlan-id — VLAN name or number . If you do not specify a VLAN, MSS displays IGMP statis tics for all VLANs. Defaults — None.
432 C HAPTER 13: IGMP S NOOPING C OMMANDS T able 79 Output of display igmp statistics Field Description IGMP statistics for vlan VLAN name. Statistics are lis ted separately for each VLAN.
set igmp 433 See Also clear igmp statistics on page 422 set igmp Disables or reenables IGMP snooping on one VLAN or all VLANs on a wireless LAN switch. Syntax — set igmp { enable | disable } [ vlan vlan-id ] enable — Enables IGMP snooping.
434 C HAPTER 13: IGMP S NOOPING C OMMANDS set igmp lmqi Changes the IGMP last member query interval timer on one VLAN or all VLANs on a wirel ess LAN switch.
set igmp mrouter 435 set igmp mrouter Adds or removes a port in a WX’ s list of ports on which it forwards traf fic to multicast routers. Static multicas t ports are immediately added to or removed fr om the list of r outer ports and do not age out.
436 C HAPTER 13: IGMP S NOOPING C OMMANDS set igmp mrsol Enables or disables multicast router solicitation by a WX. Syntax — set igmp mrsol { enable | disable } [ vlan vlan-id ] enable — Enables multicast r outer solicitation. disable — Disables multicast router solicitation.
set igmp oqi 437 Usage — Y ou cannot add MAP access ports or wired authentication ports as stat ic multicast po rts. However , MSS can dy namically add th ese port types to the list of multicast ports based on multicast traffic.
438 C HAPTER 13: IGMP S NOOPING C OMMANDS See Also set igmp lmqi on page 434 set igmp qi on page 439 set igmp qri on page 440 set igmp querier on page 441 set igmp mr outer on page 435 set igmp rv on page 442 set igmp proxy-r eport Disables or reenables proxy r eporting by a WX on one VLAN or all VLANs.
set igmp qi 439 set igmp qi Changes the IGMP query interval ti mer on one VLAN or all VLANs on a WX. Syntax — set igmp qi seconds [ vlan vlan-id ] qi seconds — Number of seconds t hat elapse between general queries sent by the WX when the WX switch is the querier for the subnet.
440 C HAPTER 13: IGMP S NOOPING C OMMANDS set igmp qri Changes the IGMP query r esponse in terval timer on one VLAN or all VLANs on a WX. Syntax — set igmp qri tenth-seconds [ vlan vlan-i d ] qr.
set igmp querier 441 set igmp querier Enables or disables the IGMP pseudo-querier on a WX, on one VLAN or all VLANs. Syntax — set igmp querier { enable | disable } [ vl an vlan-id ] enable — Enables the pseudo-querier . disable — Disables t he pseudo-que rier .
442 C HAPTER 13: IGMP S NOOPING C OMMANDS Defaults — By default, n o ports ar e static multicast receiver ports. Access — Enabled. History — Introduced in MSS V ersion 3.0. Usage — Y ou cannot add MAP access ports or wired authentication ports as static multicast ports.
set igmp rv 443 See Also set igmp oqi on page 437 set igmp qi on page 439 set igmp qri on page 440.
444 C HAPTER 13: IGMP S NOOPING C OMMANDS.
14 S ECURITY ACL C OMMANDS Use security ACL commands to configure and monitor security access control lists (ACLs). Security ACLs filt er packets to restrict or permit network usage by certain users or traffic types, and can assign to packets a class of service (CoS) to define th e pr iority of tr eatment for pac ket filtering.
446 C HAPTER 14: S ECURITY ACL C OMM ANDS clear security acl Clears a specified security ACL, an access contr ol entry (ACE), or all security ACLs, from the edit buffe r . When used with the command commit securi ty acl , clears the ACE fr om the running configuration.
clear security acl map 447 WX4400# display security acl info al l ACL information for all set security acl ip acl_133 (hits #1 0) ------------------------------------ --------------------- 1.
448 C HAPTER 14: S ECURITY ACL C OMM ANDS Syntax — clear security acl map { acl-name | all } { vlan vlan-id | port port-list [ tag tag-value ] | dap dap-num } { in | out } acl-name — Name of an existing security ACL to clear . ACL names start with a letter and ar e case-insensitive.
commit security acl 449 T o clear all physical ports, virtual por ts , and VLANs on a WX switch of the ACLs mapped for incoming and outgoi ng traffic, type the following command: WX4400# clear security acl map all success: change accepted.
450 C HAPTER 14: S ECURITY ACL C OMM ANDS Examples — The following co mmands commit all the security ACLs in the edit buffer to the configuration, display a summary of the committed ACLs, and show t.
display security acl hi ts 451 Examples — T o display a sum mary of the committed security ACLs on a WX switch, type the following command: WX4400# display security acl ACL table ACL Type Class Mapp.
452 C HAPTER 14: S ECURITY ACL C OMM ANDS Examples — T o display the security ACL hits on a WX switch, type the following command: WX4400# display security acl hits ACL hit-counters Index Counter AC.
display security acl map 45 3 Examples — T o display the contents of all security ACLs committed on a WX switch, type the following command: WX4400# display security acl info ACL information for all set security acl ip acl_123 (hits #5 462) ------------------------------------ --------------------- 1.
454 C HAPTER 14: S ECURITY ACL C OMM ANDS Access — Enabled. History — Introduced in MSS V ersion 3.0. Examples — The following command displays the port to which security ACL acl_111 is mapped :.
display security acl resource-usage 455 Examples — T o display security ACL res ource usage, type the following command: WX4400# display security acl resourc e-usage ACL resources Classifier tree co.
456 C HAPTER 14: S ECURITY ACL C OMM ANDS T able 81 Output of display security acl resource-usage Field Description Number of rules Number of security ACEs cu rrently mapped to ports or VLANs. Number of leaf nodes Number of security ACL data en tries stored in the rule tree.
display security acl resource-usage 457 LUdef in use Number of the lookup definition (LUdef) table currently in use for packet handling. Default action pointer Memory address used for packet handling, from which default action data is obtained when necessary.
458 C HAPTER 14: S ECURITY ACL C OMM ANDS rollback security acl Clears changes made to the security ACL edit buf fer since it was last saved. The ACL is rolled back to its state after the last commit security acl command was entered. All uncommit ted ACLs in the edit buf fer are cleared.
set security acl 459 Examples — The following co mmands show the edit buf fer before a rollbac k, clear any change s in the edit buff er to security acl_122 , and show the ed it buf fer after t he r.
460 C HAPTER 14: S ECURITY ACL C OMM ANDS By ICMP packets Syntax — set security acl ip acl-name { perm it [ cos cos ] | deny } icmp { source-ip-addr mask destination -ip-addr mask [ type icmp-type ].
set security acl 461 0 or 3—Best effort. Packets ar e queued in MAP forwar ding queue 3. 4 or 5—Video. Packets are que ued in MAP forwarding queue 2. Use CoS level 4 or 5 for voice over IP (V oIP) packets other than SpectraLink V oice Priority (SVP).
462 C HAPTER 14: S ECURITY ACL C OMM ANDS (For a complete list of TCP and UDP port numbers, see www .iana.org/assign ments/po rt-numbers .) destination-ip-addr mask — IP addr ess and wildcar d mask of the network or host to which the packet is being sent.
set security acl 463 before editbuffer-index — Inserts the new ACE in front of another ACE in the security ACL. Specify the number of the existing ACE in the edit buffer . Index numbers start at 1. (T o display the edit buffer , use display security acl editbuf fer .
464 C HAPTER 14: S ECURITY ACL C OMM ANDS The following command adds an ACE to acl_123 that denies packets from IP addr ess 192.168.2.11: WX4400# s et security acl ip acl_123 deny 192.168.2.11 0.0.0.0 The following command creates acl_125 by defining an ACE that denies TCP packets from sour ce IP addr ess 1 92.
set security acl map 46 5 Syntax — set security acl map acl-name { v l an vlan-id | port port-list [ tag tag-list ] | dap dap-num } { in | out } acl-name — Name of an existing secu rity ACL to map. ACL names start with a letter and ar e case-insensitive.
466 C HAPTER 14: S ECURITY ACL C OMM ANDS See Also clear security acl map on page 447 commit securi ty acl on page 449 set mac-user attr on page 249 set mac-usergroup attr on page 254 .
set security acl hit-sample-rate 46 7 Examples — The first command sets MSS to sample ACL hits every 15 seconds. The second and third commands display the r esults. The results show that 916 packets matching security acl_153 were sent since the ACL was mapped.
468 C HAPTER 14: S ECURITY ACL C OMM ANDS.
15 C RYPTOGRAPHY C OMMANDS Use cryptography commands to co nfigur e and manage certificates and public-private key pairs for system authentication . Depending on your network configurat ion, you must create keys and certificates to authenticate the WX switch to IEEE 802.
470 C HAPTER 15: C RYPTOGRA PHY C OMMANDS crypto ca-certificate Installs a certificate authority’ s own PKCS #7 certificate into the WX certificate and ke y storage area.
crypto certificate 47 1 T o use this command, you must alr eady have obtained a copy of the certificate authority’ s certificate as a PKCS #7 object file. Then do the following: 1 Open the PKCS #7 object file with an ASCII text editor such as Notepad or vi.
472 C HAPTER 15: C RYPTOGRA PHY C OMMANDS PEM-formatted certificate — ASCII text repr esentation of the PKCS #7 certificate, consist ing of up to 5120 characters, that you have obtained from th e certificate authority . Defaults — None. Access — Enabled.
crypto generate key 473 crypto generate key Gener ates an RSA public-private encrypti on key pair that is r equired for a Certificate Signing Request ( CSR) or a self-signed certificate.
474 C HAPTER 15: C RYPTOGRA PHY C OMMANDS See Also display crypto key ssh on page 483 crypto generate re quest Generates a Certificate Signing Reque st (CSR). Thi s command outputs a PEM-formatted PKCS #10 text string that you can cut and paste to another location for delivery to a certificate author ity .
crypto generate request 475 Email Address string — (Optional) Specify your email address, in up to 80 alphanumeric charac ters with no spaces. Unstructured Name string — (Optional) Specify any name, in up to 80 alphanumeric characte rs with no spaces.
476 C HAPTER 15: C RYPTOGRA PHY C OMMANDS hkiG9w0BAQEFAAOBjQAwgYkCgYEA1zatpYSt OjHMa0QJmWHeZPPFGQ9kBEimJKPG bznFjAC780GcZtnJPGqnMnOKj/4NdknonT6N dCd2fBdGbuEFGNMNgZMYKGcV2JIu M32SvpSEOEnMYuidkEzqLQol62.
crypto generate self-signed 47 7 Organizational Unit string — (Optional) Specify the name of the organizational unit, in up to 80 al phanumeric characters with no spaces. Common Name string — Specify a uniqu e name for the WX switch, in up to 80 alphanumeric ch aracters with no spaces.
478 C HAPTER 15: C RYPTOGRA PHY C OMMANDS See Also crypto certificate on page 471 crypto generate key on page 473 crypto otp Sets a one-t ime passwor d (OTP) for use with th e crypto pkcs12 command.
crypto pkcs12 47 9 History —Introduced in MSS V ersion 3.0. W ebaaa option renamed to web in MSS V ersion 4.1. Usage — The password allows the public- private key pair and certificate to be installed together from the same PKCS #12 object file.
480 C HAPTER 15: C RYPTOGRA PHY C OMMANDS Defaults — The password you enter with the crypto otp command must be the same as the one protecting the PKCS # 12 file. Access — Enabled. History —Introduced in MSS V ersion 3.0. Webaaa option renamed to web in MSS V ersion 4.
display crypto ca-certificate 481 display crypto ca-certificate Displays information about the certificate authority’ s PEM-encoded PKCS #7 certificate.
482 C HAPTER 15: C RYPTOGRA PHY C OMMANDS See Also crypto ca-certificate on page 470 display crypto certificate on page 482 display crypto certificate Displays information about one of the cryptographic certificates installed on the WX switch.
display crypto key ssh 48 3 See Also crypto generate self-signed on page 476 display crypto ca-certificate on page 481 display crypto key ssh Displays SSH authentication key info rmation. This comma nd displays the checksum (also called a fingerprint ) of the public SSH authentication key .
484 C HAPTER 15: C RYPTOGRA PHY C OMMANDS.
16 RADIUS AND S ERVER G RO U P C OMMANDS Use RADIUS commands to set up communication between a WX switch and groups of up to four RADIUS servers for re mote authentication, authorization, and accounting (AAA) of administrat ors and network users. Commands by Usage This chapter presents RADIUS commands alp habetically .
486 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS clear radius Resets parameters that were globall y configured for RADIUS servers to their default values.
clear radius client system-ip 487 WX4400# clear radius timeout success: change accepted. See Also set radius on page 490 set radius server on page 494 display aaa on page 219 clear radius .
488 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS clear radius pr oxy client Removes RADIUS proxy client entries for third-party APs. Syntax — clear radius proxy client all Defaults — None. Access — Enabled. History —Introduced in MSS 4.0.
clear radius server 489 clear radius server Removes the named RADIUS server from the WX configuration. Syntax — clear radius server server-name server-name — Name of a RADIUS server con figur ed to perform re mote AAA service s for the W X switch.
490 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS Examples — T o remove the server group sg-77 type the following command: WX4400# clear server group sg-77 success: change accepted.
set radius client system-ip 491 retransmit — 3 (the total number of attempts, including the first attempt) timeout — 5 seconds Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — Y o u can specify only one parameter per command line.
492 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS Usage — The WX system IP addr ess must be set before you use this command. Examples — The followin g command sets the WX system IP address as the address of the RADIUS client: WX4400# set radius client system-ip success: change accepted.
set radius proxy po rt 493 Examples — The following command config ur es a RADIUS pr oxy entry for a thir d-party AP RADIUS client at 10.20.20.9, sending RADIUS traf fic to the default UDP ports 1812 and 1813 on the WX: WX4400# set radius proxy client addr ess 10.
494 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS Examples — The following co mmand maps SSID mycorp to packets received on port 3 or 4, using 802.1Q tag value 104: WX4400# set radius proxy port 3-4 ta g 104 ssid mycorp success: change accepted.
set radius server 495 key string — Password (shared secr et key) the WX switch uses to authenticate to the RADIUS server . Y ou must provide the same password that is defined on the RA DIUS server . The password can be 1 to 32 characters long, with no spaces or tabs.
496 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS Examples — T o set a RADIUS server named RS42 with IP address 198.162.1.1 to use the default acco unt ing and authorization ports with a timeou.
set server group load-balanc e 497 Do not use the same name for a R ADIUS server and a RADIUS server group. Examples — T o set server group shorebirds with members heron , egret , and sandpiper , type the follo wing command: WX1200# set server group shorebirds members heron egret sandpiper success: change accepted.
498 C HAPTER 16: RADIUS AND S ERVER G ROU P C OM MANDS Examples — T o enable load b alancing bet ween the me mbers of serv er group shorebirds , type the following command: WX1200# set server group shorebirds load-balance enable success: change accepted.
17 802.1X M ANAGEMENT C OMMANDS Use 802. IEEE X management commands to modify the default settings for IEEE 802.1X sessions on an WX sw itch. For best r esults, change the settings only if you are awar e of a pr oblem with the WX switch’ s 802.1X performance.
500 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS clear dot1x bonded-period Resets the Bonded Auth™ (bonded authentication) perio d to its default value. The bonded period is the number of seconds MSS retains session information for an authenticated machin e while waiting for an 802.
clear dot1x max-req 50 1 See Also display dot1x on page 505 set dot1x bonded-period on page 509 clear dot1x max- req Resets to the default setting the nu mber of Extensible Authentication Protocol (EAP) r equests that the WX switch r etransmits to a supplicant (client).
502 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS Usage — This command is overridden by the set dot1x authcontrol command. The clear dot1x port-control command r eturns port co ntro l to the method configured. This command applies only to wired authentication ports.
clear dot1x reauth-max 503 clear dot1x re auth-max Resets the maxi mum number of reaut horization attempts to the default setting. Syntax — clear dot1x reauth-max Defaults — The default is 2 attempts. Access — Enabled. History —Introduced in MSS V ersion 3.
504 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS clear dot1x timeout auth-server Resets to the default setting the nu mber of seconds that must elapse before the WX times out a request to a RADIUS server . Syntax — clear dot1x timeout auth-server Defaults — The default is 3 0 seconds.
clear dot1x tx-period 505 clear dot1x tx-period Resets to the default setting the nu mber of seconds that mus t elapse before the WX switch r etransmits an EAP over LAN (EAPoL) packet. Syntax — clear dot1x tx-period Defaults — The default is 5 seconds.
506 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS History —Introduced in MSS V ersion 3.0. Format of 802.1X authentication rule informat ion in display dot1x config output changed in MSS V ersion 3. 2. The rules ar e still listed at the top of the display , but more information is shown for each rule.
display dot1x 507 802.1X parameter setting ---------------- ------- supplicant timeout 30 auth-server timeout 30 quiet period 5 transmit period 5 reauthentication period 3600 maximum requests 2 key tr.
508 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS set dot1x authcontrol Provides a global override mechanism for 802.1X authentication configuration on wired authentication ports. Syntax — set dot1x authcontrol { enable | d isable } enable — Allows all wir ed authentication ports running 802.
set dot1x bonded-period 509 Defaults — By default, authenticati on control for individual wir ed authentication is enabled. Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — This command applies only to wired authentication ports.
510 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS Usage — Normally , the Bonded Auth period needs to be set only if the network has Bonded Auth clients that use dynamic WEP , or use WEP-40 or WEP-104 encryption with WP A or RS N. These clients can be affected by the 802.
set dot1x max-req 511 Examples — T ype the following comma nd to enable key transmission: WX4400# set dot1x key-tx enable success: dot1x key transmission enab led.
512 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS set dot1x port-control Determines the 802.1 X authenticati on behavior on individu al wir ed authentication ports or groups of ports.
set dot1x quiet-period 513 set dot1x quiet-period Sets the number of seconds a W X r emains quiet and does not r espond to a supplicant after a failed authentication. Syntax — set dot1x quiet-period seconds seconds — Specify a value between 0 and 65,535.
514 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS See Also display dot1x on page 505 set dot1x reauth-max on page 514 set dot1x reauth-period on page 515 set dot1x re auth-max Sets the number of reauthentication attempts that the WX switch makes before the supplicant (client) becomes unauthorized.
set dot1x reauth-period 515 set dot1x re auth-period Sets the number of seconds that must elapse before the WX switch attempts reauthentication. Syntax — set dot1x reauth-period seconds seconds — Specify a value between 60 (1 minute) and 1,641,600 (19 days).
516 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS See Also display dot1x on page 505 clear dot1x timeout auth-server on page 504 set dot1x timeout supplicant Sets the number of seconds that must elapse before the WX switch times out an authentication s ession with a supplicant (client).
set dot1x wep-rekey 517 Examples — T ype t he following command to set the number of seconds before the WX switch r etransmits an EAPoL packet to 300: WX4400# set dot1x tx-period 300 success: dot1x tx-period set to 300.
518 C HAPTER 17: 802.1X M ANAGEMENT C OMMANDS set dot1x wep-rekey-period Sets the interval for rotating th e WEP broadcast and multicast keys. Syntax — set dot1x wep-rekey-period second s seconds — Specif y a value between 30 and 1,641,6 00 (19 days).
18 S ESSION M ANAGEMENT C OMMANDS Use session management commands to display and cl ear administrative and ne twork user sessions. Commands by Usage This chapter pr esents session manage ment co mmands al phabetically . Use T able 88 to locate commands in this chap ter based on their use.
520 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.0. Examples — T o clear all administrato r sessions type the following .
clear sessions network 521 clear sessions network Clears all network sessions for a specif ied user name or set of usernames, MAC addr ess or set of MAC addresse s, virtual LAN (VLAN) or set of VLANs, or session ID.
522 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS Examples — T o clear all sessions for MAC address 00:01:02:03:04:05, type the following command: WX4400# clear sessions network mac-a ddr 00:01:02:03:.
display sessions 523 telnet — Displays sessions for all user s with administrative access to the WX switch through a T elnet connection. telnet client — Displays T elnet sessions from the CLI to r emote devices. Defaults — None. Access — All, except for dis play sessions telnet client , which has enabled access.
524 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS T o view information about T elnet client sessions, type the following command: WX4400# display sessions telnet clie nt Session Server Address Server P ort Client Port ------- -------------- -------- ---- ----------- 0 192.
display sessions network 52 5 display sessions network Displays summary or verbose inform ation about all network sessions, or network sessions for a specified user name or set of user names, MAC address or set of MAC addresses, VLAN or set of VLANs, or session ID.
526 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS History —Introduced in MSS V ersion 3.0. Output added to the display network sessions verbose command to indicate the user’ s authorization attributes and whether they were supplied thr o ugh AAA or through configured SSID defaults in a service profile in MSS V ersion 4.
display sessions network 52 7 EXAMPLESingh 12* 10.10.10.30 vlan-eng 3/2 EXAMPLEHavel 13* 10.10.10.40 vlan-eng 1/2 2 sessions match criteria (of 3 tota l) (T able 91 on page 528 describes the summary displays of display sessions network commands.) The following command displays detailed (verbose) session information about user nin@example.
528 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS (T able 92 on page 529 describes th e additional fi elds of the verbose output of display sessions network commands.
display sessions network 52 9 T able 92 Additional display sessions network verbose Output Field Description Client MAC MAC address of the session user. GID Global session ID, a unique session number wi thin a Mobility Domain. State Status of the session: AUTH, ASSOC REQ — Client is being associated by the 802.
530 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS T able 93 display sessions network session-id Output Field Description Global Id A u nique session identifier within the Mob ility Domain. State Status of the session: AUTH, ASSOC REQ — Client is being ass ociated by the 802.
display sessions network 53 1 See Also clear sessions network on page 521 Session Timeout Assigned session timeou t in seconds. Authentication Method Extensible Auth entication Prot ocol (EAP) type used to authenticate the session user, and the IP addr es s of the authentication server.
532 C HAPTER 18: S ESSION M ANAGEMENT C OMMANDS.
19 RF D ETECTION C OMMANDS MSS automatically performs RF detect ion scans on enabled and disabled radios to detect rogue access points. A rogue access point is a BSSID (MAC address associated with an SS ID) that does not belong to a 3Com switch and is not a member of the ignore list configured on the seed switch of the Mobility Domain.
534 C HAPTER 19: RF D ET ECTION C OMMANDS clear rfdetect attack-list Removes a MAC address fr om the attack list. Syntax — clear rfdetect attack-list mac-addr mac-addr — MAC address you want to remove fr om the attack list. Defaults — None. Access — Enabled.
clear rfdetect black-list 535 See Also clear rfdetect attack-list on p age 534 display rfdetect attack-list on page 537 clear rfdetect black-list Removes a MAC address fr om the client black list. Syntax — clear rfdetect black-list mac-addr mac-addr — MAC address you want to remove fr om the black list.
536 C HAPTER 19: RF D ET ECTION C OMMANDS Examples — The f ollowing command removes BSSID aa:b b:cc:11:22:33 from the ignor e list for RF scans: WX1200# clear rfdetect ignore aa:bb: cc:11:22:33 success: aa:bb:cc:11:22:33 is no lon ger ignored.
clear rfdetect vendor-list 537 clear rfdetect vendor -list Removes an entry from the permitted vendor list. Syntax — clear rfdetect vendor-list {client | ap} mac-addr | all client | ap — Specifies whether the entry is for an AP brand or a client brand.
538 C HAPTER 19: RF D ET ECTION C OMMANDS Examples — The following example shows the attack list on WX swit ch: WX1200# display rfdetect attack-list Total number of entries: 1 Attacklist MAC Port/Ra.
display rf detect cli ents 539 display rfdetect clients Displays the wir eless clients detected by a WX switch. Syntax — display rfdetect clients [mac mac-addr ] mac mac-addr — Displays detailed informat ion for a specific client. Defaults — None.
540 C HAPTER 19: RF D ET ECTION C OMMANDS T able 95 display rfdetect clients Output Field Description Client MAC MAC address of t he client. Client Vendor Company that manufactures or sells the client. AP MAC MAC address of the radio with which the rogue client is associated.
display rfdetect countermeasures 541 display rfdetect countermeasures Displays the current status of countermeasures against rogues in the Mobility Domain. Syntax — display rfdetect countermeasure s Defaults — None. Access — Enabled. History —Output no longer lists rogues for which co untermeasur es have not been starte d in MSS V ersion 4.
542 C HAPTER 19: RF D ET ECTION C OMMANDS T able 97 describes the fields in this display . See Also set radio-profile countermeasur es on page 35 5 display rfdetect counters Displays statisti cs for rogue and Intr usion Detection System (IDS) activity detected by the MAPs managed by a WX switch.
display rfdete ct counters 54 3 Examples — The following command sho ws counters for r ogue activity detected by a WX switch: WX4400# display rfdetect counters Type Current Total ------------------------------------ -------------- ------------ ------------ Rogue access points 0 0 Interfering access points 139 1116 Rogue 802.
544 C HAPTER 19: RF D ET ECTION C OMMANDS display rfdetect data Displays all the BSSIDs det ected by an individual WX switch during an RF detection scan. The data includes BSSIDs t ransmitted by other 3Com radios as well as by thir d-party access points.
display rfdetect data 545 See Also display rfdetect mobility-domain on page 546 display rfdetect visible on page 552 T able 98 display rfdetect data Output Field Description BSSID BSSID detected by a MAP radio on this WX switch. Vendor Company that manufactures or se lls the rogue device.
546 C HAPTER 19: RF D ET ECTION C OMMANDS display rfdetect ignore Displays the BSSIDs of third-party devices that MSS ignor es during RF scans. MSS does not gene rate log messages or traps for the devices in the ignore list. Syntax — display rfdetect ignore Defaults — None.
display rfdetect mobility-domain 547 Usage — This command is valid only on the seed switch of the Mobility Domain. T o display rogue information for an individual switch, use the display rfdetect data command on that switch. Only rogues ar e listed.
548 C HAPTER 19: RF D ET ECTION C OMMANDS BSSID: 00:0b:0e:00:7a:8a Vendor: 3Co m SSID: 3com-webaaa Type: intfr Adhoc: no Crypto-types: clear WX-IPaddress: 10.8.121.102 Port/Ra dio/Ch: 3/1/1 Mac: 00:0b:0e:00:0a:6a Device-type: interfering Adhoc: no Crypto-types: clear RSSI: -75 SSID: 3Com-webaaa WX-IPaddress: 10.
display rfdetect mobility-domain 549 T able 99 display rfdetect mobility-domain Output Field Description BSSID MAC address of the SSID used by the detected device. Vendor Company that manufactures or sells the rogue device. Type Classification of th e rogue device: rogue—Wireless device that is not supposed to be on the network.
550 C HAPTER 19: RF D ET ECTION C OMMANDS See Also display rfdetect data on page 544 display rfdetect visible on page 552 display rfdetect ssid-list Displays the entries in the permitted SSID list. Syntax — display rfdetect ssid-list Defaults — None.
display rfdetect vendor-list 551 Examples — The following example shows the permitt ed SSID list on WX switch: WX4400# display rfdetect ssid-list Total number of entries: 3 SSID ----------------- my.
552 C HAPTER 19: RF D ET ECTION C OMMANDS display rfdetect visible Displays the BSSIDs discovered by a specific 3Com radio. The data includes BSSIDs transmitted by othe r 3Com radios as well as by third-party access points.
display rfdetect visible 553 ----------------- ------- ----- --- ---- ------ ----------------------------- --- 00:07:50:d5:cc:91 Cisco intfr 6 -60 i----w r27-cisco1200-2 00:07:50:d5:dc:78 Cisco intfr .
554 C HAPTER 19: RF D ET ECTION C OMMANDS set rfdetect active-scan Disables or reenables active RF dete ction scan ning on a WX switch. W hen active scanning is enabled, the MAP radios managed by the .
set rfdete ct black-list 555 When on-demand countermeasures are enabled (with the set radio-profile countermeasur es configured command) only those devices configured in the attack list are subject to counte rmeasur es.
556 C HAPTER 19: RF D ET ECTION C OMMANDS Examples — The following co mmand adds client MAC addr ess 11:22:33:44:55:66 to t he black list: WX1200# set rfdetect black-list 11:2 2:33:44:55:66 success: MAC 11:22:33:44:55:66 is n ow blacklisted.
set rfdetect countermeasures mac 55 7 set rfdetect countermeasures mac Starts countermeasures against a specific rogue. Syntax — set rfdetect countermeasures mac mac-addr mac-addr — Basic service s et identifier (BSSID) of the rogue. Enter the BSSID in MAC address format, using a colon between each octet (f or example: aa:bb:cc :dd:ee:f f).
558 C HAPTER 19: RF D ET ECTION C OMMANDS See Also clear rfdetect attack-list on p age 534 display rfdetect ignore on page 546 set rf detect countermeasures on page 556 set rfdetect ignore Configures a list of known devices to ignore during an RF scan.
set rfdetect log 55 9 Examples — The following command config ur es MSS to ignore BSSID aa:bb:cc:11:22:33 during RF scans: WX1200# set rfdetect ignore aa:bb:cc:11:22:33 success: MAC aa:bb:cc:11:22:33 is n ow ignored.
560 C HAPTER 19: RF D ET ECTION C OMMANDS set rfdetect signature Enables MAP signatures. A MAP signature is a set of bits in a management frame sent by a MAP tha t identifies that MAP to MSS. If someone attempts to spoof manage ment packets from a 3Com MAP , MSS can detect the spo of attempt.
set rfdetect vendor-list 561 Defaults — The permitted SSID list is empty by default and all SS IDs are allowed. However , after you add an entry to th e list, MSS allows traf fic only for the SSIDs that are on the list. Access — Enabled. History —Introduced in MSS V ersion 4.
562 C HAPTER 19: RF D ET ECTION C OMMANDS Defaults — The permitted vendor list is empty by default and all vendors are allowed. However , after you add an entry to the list, MSS allows only the devices whose OUIs ar e on the list. Access — Enabled.
20 F ILE M ANAGEMENT C OMMANDS Use file management commands to ma nage system files and to display software and boot information. Commands by Usage This chapter presents file management co mmands alphabetically . Use T able 102 to locate commands in this chapter based on their use.
564 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS backup Creates an ar chive of WX system file s and optionally , user file, in Unix tape archive ( tar ) format. Syntax backup system [tftp:/ip-addr/]filename [all | critical] Defaults — All. Access — Enabled.
backup 565 The backup command places the boo t configuration file into the archive. (The boot configuration file is the Configured boot conf iguration in the display boot command’ s output.) If the running config uration contains changes that have not been saved, these changes are not in the boot configuration file and are not archived.
566 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS clear boot backup-configuration Clears the filename specified as the backup configuration file. In the event that MSS cannot read the config uration file at boot time, a backup configuration file is not used.
copy 567 WX4400# reset system force ...... rebooting ...... See Also display config on page 574 reset system on page 582 copy Performs the following co py operations: Copies a file f r om a TF TP se rver to nonvolatile storage. Copies a file from nonvolatile stor age or temporary storage to a TF TP server .
568 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — The filename and file: filename URLs are equivalent. Y ou can use either URL to refer to a file in an WX switch’ s nonvolatile memory .
delete 569 The following commands rename test-config to new-config by copying it from one name to the other in the same location, then deleting test-config : WX4400# copy test-config new-config WX4400# delete test-config success: file deleted. The following command copies file corpa-log in.
570 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS Examples — The follow ing co mmands copy file testconfig to a TF TP server and delete the file from nonvolatile storage: WX4400# copy testconfig tftp://10.1. 1.1/testconfig success: sent 365 bytes in 0.401 sec onds [ 910 bytes/sec] WX4400# delete testconfig success: file deleted.
dir 571 Examples — The following co mmand displays the files in the r oot directory: WX4400# dir ==================================== ========================================= == file: Filename Size.
572 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS The following command limit s the output to the contents of the user fi les area: WX4400# dir file: ==================================== ==================.
display boot 573 See Also copy on page 567 delete on page 569 display boot Displays the system image and configur ation filenames used after the last reboot and configured for use after the next reboot. Syntax — display boot Defaults — None.
574 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS Booted configuration: fil e:configuration Product model: WX T able 105 describes the fields in the display boot ou tput. See Also display version on pag e 576 reset system on page 582 set boot configuration-file on page 586 display config Displays the configuration ru nning on the WX switch.
display config 575 httpd ip ip-config log mobility-domain ntp portconfig portgroup radio-profile rfdetect service-profile sm snmp snoop spantree system trace vlan vlan-fdb If you do not specify a configuration area, nondefault information for all areas is displayed.
576 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS Examples — The following co mmand shows configuration information for VLANs: WX4400# display config area vlan # Configuration nvgen'd at 2004-5-21 19:36:48 # Image 3.
display version 57 7 Flash: 4.1.0.14 - md0a Kernel: 3.0.0#20: Fri May 20 17:43:51 PDT 2005 BootLoader: 4.10 / 4.1.0 The following command displays ad ditional software build information and MAP access point information: WX1200# display version details Mobility System Software, Ve rsion: 4.
578 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS See Also display boot on page 573 load config Load s configuration commands fr om a file and replaces the WX switch’ s running configuration with the commands in the loaded file.
load config 579 If you do not specify a filename, MSS uses the same configuration filename that was used for the previous configuration load. Fo r example, if the WX switch used configuration for the most r ecent configuration load, MSS uses configuration again unle ss you specify a dif ferent filename.
580 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS md5 Calculates the MD5 checksum for a file in the switch’ s nonvolatile storage. Syntax — md5 [boot0: | boot1:] filename boot0: | boot1: — Boot partition into which you copied the file. filename — Name of the file.
mkdir 581 Examples — The following commands crea te a subdirectory called corp2 and display the root dir ectory to verify the result: WX4400# mkdir corp2 success: change accepted.
582 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS reset system Restar ts an WX switch and r eboots the software. Syntax — reset system [ force ] force — Immediately restarts the system and reboots, without comparing the running co nfiguration to the configuration file.
restore 583 res to re Unzips a system archive created by the backup command and copies the files from the ar chive onto the switch. Syntax restore system [tftp:/ip-addr/]filename [al l | critical] Defaults — Critical. Access — Enabled. History —Introduced in MSS V ersion 3.
584 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS See Also backup on page 564 rmdir Removes a subdirectory fr om nonvolatile storage. Syntax — rmdir [ subdirname ] subdirname — Subdirectory name. Specify between 1 and 32 alphanumeric characters , with no spaces.
set boot backup -configuration 585 Access — Enabled. History —Introduced in MSS V ersion 3.0. Usage — If you do not specify a filename , MSS r eplaces the configuration file loaded during the most recent r eboot. T o display th e filename of the configuration file MSS loaded during the most recent reboot, use the display boot command.
586 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS History —Introduced in MSS V ersion 4.1. Examples — The following command specifies a file called backup.cfg as the backup configuration file on th e WX switch: WX1200# set boot backup-configuratio n backup.
set boot partition 587 set boot partition Specifies the boot partiti on in which to look for the system imag e file following the next system reset, softwar e r eload, or power cycle. Syntax — set boot partition { boot0 | boot1 } boot0 — Boot partition 0.
588 C HAPTER 20: F ILE M ANAGEMENT C OMMANDS.
21 T RACE C OMMANDS Use trace commands to perform diag nostic routines. While MSS allows you to run many types of traces, this chapter describes commands for those traces you are most likely to use. Fo r a complete listing of the types of traces MSS allows, type the set trace ? command.
590 C HAPTER 21: T RACE C OMMANDS clear log trace Deletes the log messages stor ed in the trace buffer . Syntax — clear log trace Defaults — None. Access — Enabled.
display trace 591 T o clear the session manag er trace, type the following c ommand: WX4400# clear trace sm success: clear trace sm See Also display trace on page 591 set trace authentication .
592 C HAPTER 21: T RACE C OMMANDS save trace Saves the accumulated trace data for enabled traces to a file in the WX switch’ s nonvolatile storage. Syntax — save trace filename filename — Name for the trace file. T o save the file in a subdirectory , specify the subdir ectory name, then a slash.
set trace authorization 593 Examples — The following co mmand sta rts a trace for information about user jose’ s authentication: WX4400# set trace authentication use r jose success: change accepted. See Also clear trace on page 590 display trace on page 591 set trace authorization T races authorization inf ormation.
594 C HAPTER 21: T RACE C OMMANDS See Also clear trace on page 590 display trace on page 591 set trace dot1x T races 802.1X sessions. Syntax — set trace dot1x [ mac-addr mac-addr ess ] [ port port-num ] [ user username ] [ level level ] mac-addr mac-address — T races a MAC address.
set trace sm 595 set trace sm T races ses sion manager activity . Syntax — set trace sm [ mac-addr mac-address ] [ port port-n um ] [ user username ] [ level level ] mac-addr mac-address — T races a MAC address. Specify a MAC address, using colons to separate the octets (for example, 00:11:22:aa:bb:cc).
596 C HAPTER 21: T RACE C OMMANDS.
2 2 S NOOP C OMMANDS Use snoop commands to monitor wirele ss traffic, by using a Distributed MAP as a sniffing device. The MAP copies the sniffed 802.11 packets and sends the co pies to an obse rver , whic h is typically a protocol analyzer such as Ether eal or T etherea l.
598 C HAPTER 22: S NOOP C OMMANDS clear snoop Deletes a snoop filter . Syntax — clear snoop filter-name filter-name — Name of the snoop filter .
set snoop 599 WX1200# clear snoop map snoop2 dap 3 radio 2 success: change accepted. The following command removes all snoop filter mappings from all radios: WX1200# clear snoop map all success: change accepted.
600 C HAPTER 22: S NOOP C OMMANDS T o match on packets to or from a specific MAC address, use the dest-mac or src-mac option. T o match on both sen d and r eceive traffic for a host address, use the host-mac option. T o match o n a traffic flow (sour ce and destination MAC addresses), use the mac-pair option.
set snoop 601 The MAP that is running a snoop filter forwards snooped packets directly to the observer . This is a one-way commu nication, fr om the MAP to the observer . If the observer is not pres ent, the MAP still sends the snoop packets, which u se bandwidth.
602 C HAPTER 22: S NOOP C OMMANDS set snoop map Maps a snoop filter to a radio on a Distributed MAP . A snoop filter does take effect until you map it to a radio and enab le the filter . Syntax — set snoop map filter-name dap dap-num radio {1 | 2} filter-name — Name of the snoop filter .
set snoop mode 603 set snoop mode Enables a sno op filter . A snoop filter does not take ef fect until you map it to a MAP radio and ena ble the filter . Syntax — set snoop { filter-name | all} mode {enable [stop-after num-pkts ] | disable} filter-name | all — Name of the snoop f ilter .
604 C HAPTER 22: S NOOP C OMMANDS display snoop Displays the MAP radio mapping for all snoop filters. Syntax — display snoop Defaults — None. Access — Enabled. History —Introduced in MSS V ersion 4.0. Usage — T o display the mappings for a specific MAP radio, use the display snoop map command.
display snoop map 605 Examples — The following command shows the snoop filters con figur ed in the examples above: WX1200# display snoop info snoop1: observer 10.
606 C HAPTER 22: S NOOP C OMMANDS display snoop stats Displays stat istics for enabled snoop filters. Syntax — display snoop stats [ filter-name [ dap-num [radio {1 | 2}]]] filter-name — Name of the snoop filter .
display snoop stats 607 T able 109 describes the fields in this display . T able 109 display snoop stats Output Field Description Filter Name of the snoop filter. Dap Distributed MAP containing the ra dio to which the filter is mapped. Radio Radio to which the filter is mapped.
608 C HAPTER 22: S NOOP C OMMANDS.
23 S YSTEM L OG C OMMANDS Use the system log commands to recor d information for monitor ing and troubleshooting. MSS system logs are based on RFC 3164, which defines the log protocol. Commands by Usage This chapter pr esent system log commands alphabetically .
610 C HAPTER 23: S YSTEM L OG C OMMANDS Access — Enabled. History — Introduced in MSS V ersion 3.0. Examples — T o stop sending system logging messag es to a server at 192.168.253.11, type the following command: WX4400# clear log server 192.168.
display log buffer 611 severity severity-level — Displays messages at a severity level greater than or equal to the leve l specified. Specify one of the following: emergency — The WX switch is unusable. alert — Action must be taken immediately .
612 C HAPTER 23: S YSTEM L OG C OMMANDS See Also clear log on page 609 display log config on page 612 display log config Displays log configur ation information. Syntax — display log config Defaults — None. Access — Enabled. History — Introduced in MSS V ersion 3.
display log trace 613 display log trace Displays system information sto r ed in the nonvolatile log buffer or the trace buffer . Syntax — display log trace [{ + | - | / } number- of-messages ] [ facility facility-name ] [ matching s tring ] [ severity severity-level ] trace — Displays the log messa ges in the trace buffer .
614 C HAPTER 23: S YSTEM L OG C OMMANDS Defaults — None. Access — Enabled. History — Introduced in MSS V ersion 3.0. Examples — T ype the following co mmand to see the facilities for which you.
set log 615 Logging state (enabled or disabled) T o override the sessio n defaults for an individual session, type the set log command from within the session and use the current opt ion.
616 C HAPTER 23: S YSTEM L OG C OMMANDS Defaults — The following a re d efaults for the set log commands. Events at the error level and higher are logged to the WX console. Events at the error level and higher are logged to the WX system buffer .
set log mark 617 alert critical error war ning notice info debug interval interval — Interval at which MSS generates the mark messages. Y ou can specify from 1 to 2147483647 seconds. Defaults — Mark messages are disabled by default.
618 C HAPTER 23: S YSTEM L OG C OMMANDS.
24 B OOT P RO M P T C OMMANDS Boot prompt commands enable you to perform basic tasks, including booting a system image file, from the boot prompt (boot>). A CLI session enters the bo ot pr ompt if MSS does not boot successfully or you intentionally interrupt the boot process.
620 C HAPTER 24: B OOT P ROMPT C OMMANDS autoboot Displays or changes the state of the aut oboot option. The autoboot option controls whether a WX switch automat ically boots a system image after initializing the hardwar e, followi ng a system reset or power cycle.
boot 621 boot Loads and executes a system image file. Syntax — boot [ BT= type ] [ DEV= device ] [ FN= fi lename ] [ HA= ip-addr ] [ FL= num ] [ OPT= option ] [ OPT+= option ] BT= type — Boot type: c — Compact flash. Boots using nonvolatile storage or a flash card.
622 C HAPTER 24: B OOT P ROMPT C OMMANDS Usage — If you use an optional para meter , the para meter setting overrides the setting of the same pa rameter in the currently active boot profile. However , the bo ot pr ofile itself is not changed. T o display the currently active boot profile, use the display command.
change 623 change Changes parameters in the currently active boot profile. (For information about boot profiles, see display on page 628.) Syntax — change Defaults — The default boot type is c (compa ct flash).
624 C HAPTER 24: B OOT P ROMPT C OMMANDS The following command enters the configuration mode for the currently active boot profile and configur es the WX switch (in this example, an WXR100) to boot using a TF TP server: boot> change Changing the default configuration i s not recommended.
delete 625 Usage — A WX switch can have up to four boot profiles. The boot profiles ar e stored in slots, number ed 0 thr ough 3. When you create a new profile, the system uses the next available slot for the pr ofile.
626 C HAPTER 24: B OOT P ROMPT C OMMANDS Usage — When yo u type the delete command, the next-lower numbered boot profile becomes the ac tive profile. For example, if the currently active profile is number 3, pr ofile numb er 2 becomes active after you type de lete to delete pr ofile 3.
diag 627 Examples — The following command displays the current setting of the DHCP option: boot> dhcp DHCP is currently enabled. The following command disables the DHCP option: boot> dhcp DHCP is currently disabled. See Also boot on page 621 diag Accesses the dia gnostic mode.
628 C HAPTER 24: B OOT P ROMPT C OMMANDS Defaults — None. Access — Boot prompt. History —Introduced in MSS V ersion 3.0. Usage — T o display the system image software versions, use the fver command. This command does not list the boot code versions.
display 629 A WX switch can have up to four boot profiles, number ed 0 through 3. Only one boot profile can be active at a time. Y ou can create, change, and delete boot profiles. Y ou also can activate ano ther boot pr ofile in place of the currently active one.
630 C HAPTER 24: B OOT P ROMPT C OMMANDS See Also change on page 623 cr eate on page 624 delete on page 625 next on page 633 fver Displays the version of a system image file installed in a specific location on a WX switch.
help 631 Defaults — None. Access — Boot prompt. History —Introduced in MSS V ersion 3.0. Usage — T o display the imag e filenames, use the dir command. This command does not list the boot code versions. T o display the boot code versions, use the version command.
632 C HAPTER 24: B OOT P ROMPT C OMMANDS Examples — The following co mmand displa ys detailed information for the fver command: boot> help fver fver Display the version of the specified device:filename.
next 633 Examples — T o display a list of the commands av ailable at the boot prompt, type the following command: boot> ls ls Display a list of all commands and descriptions. help Display help information for each command. autoboot Display the state of, enable, or disable the autoboot option.
634 C HAPTER 24: B OOT P ROMPT C OMMANDS Examples — T o activate the boot profile in the next slot and display the profile, type the following command: boot> next BOOT Index: 0 BOOT TYPE: c DEVIC.
test 635 3Com WX-4400 Bootstrap/Bootloade r Version 3.0.2 Re lease Compiled on Wed Sep 22 09:18:47 PDT 2004 by Bootstrap 0 version: 3.1 Active Bootloader 0 version: 3. 0.2 Active Bootstrap 1 version: 3.1 Bootloader 1 version: 3. 0.1 WX-4400 Board Revision: 2.
636 C HAPTER 24: B OOT P ROMPT C OMMANDS Examples — The following command displays the current setting of the poweron test flag: boot> test The diagnostic execution flag is not set. See Also boot on page 621 version Displays version informatio n for a WX switch’ s hardwar e and boot code.
A O BTAINING S UPPORT FOR YOUR P R ODUCT Register Y our Product W arranty and other service benefits start from the date of purchase, so it is important to register your product quickly to ensure you get full use of the warranty and other service benefits available to you.
638 A PPENDIX A: O BTAINING S UPPORT FOR YOUR P RODUCT T roubleshoot Online Y ou will find support tools posted on the 3Com web site at http://www.3com.com/ 3Com Knowledgebase helps you troubleshoot 3Com products. This query-based interactive tool is located at http://knowledgebase.
Contact Us 639 T o send a product directly to 3Com for repair , you must first obtain a return authorization number (RMA). Pr oducts sent to 3Com, without authorization numbers clearly marked on the outside of the package, will be returned to the sender unopened, at the sender’ s expense.
640 A PPENDIX A: O BTAINING S UPPORT FOR YOUR P RODUCT From the following countries, you may use the numbers s hown: Austria Belgium Denmark Finland France Germany Hungary Ireland Israel Italy 01 7956.
I NDEX A autoboot 620 B boot 621 C change 623 clear {ap | dap} radio 286 clear accounting 203 clear authentication admin 204 clear authentication console 205 clear authentication dot1x 206 clear authe.
642 I NDEX clear spantree portcost 394 clear spantree portpri 395 clear spantree portvlancost 395 clear spantree portvlanpri 396 clear spantree statistics 397 clear summertime 135 clear system 40 clea.
I NDEX 643 display rfdetect countermeasur es 541 display rfdetect co unters 542 display rfdetect data 544 display rfdetect ignor e 546 display rfdetect mobility-domain 546 display rfdetect ssid-list 5.
644 I NDEX set {ap | dap} radio tx-power 344 set {ap | dap} upgrade-fi rmwar e 346 set acco unting {admin | console} 225 set accountin g {dot1x | mac | web | last-resort} 22 7 set arp 158 set arp ag i.
I NDEX 645 set radio-pr ofile frag- thres hold 358 set radio-profile long-retry 359 set radio-profile m ax-rx-lifetime 360 set radio-profile m ax-tx-lifetime 361 set radio-profile mode 362 set radio-p.
646 I NDEX set usergroup 261 set usergroup attr 261 set vlan name 116 set vlan port 117 set vlan tunnel-affinity 118 set web-portal 262 T telnet 195 test 635 traceroute 197 V version 636.
An important point after buying a device 3Com WX1200 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought 3Com WX1200 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data 3Com WX1200 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, 3Com WX1200 you will learn all the available features of the product, as well as information on its operation. The information that you get 3Com WX1200 will certainly help you make a decision on the purchase.
If you already are a holder of 3Com WX1200, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime 3Com WX1200.
However, one of the most important roles played by the user manual is to help in solving problems with 3Com WX1200. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device 3Com WX1200 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
