Simplicity SA2200 Spezifikationen

V1(WL1700-MS)Command ReferenceNWA-027517-001ISSUE 1.0

CLI ConventionsChapter 2Using the Command-Line Interface6CLI ConventionsBe aware of the following UNIVERGE WL Control System CLI conventions for comma

Chapter 8IP Services Commands96DNS set ip dns on page 116set ip dns domain on page 117set ip dns server on page 118show ip dns on page 164clear ip dns

clear interfaceChapter 8IP Services Commands97clear interfaceRemoves an IP interface.Syntax clear interface vlan-id ipDefaults None.Access Enabl

clear ip aliasChapter 8IP Services Commands98Usage If the interface you want to remove is configured as the system IP address, removing the address

clear ip dns domainChapter 8IP Services Commands99l show ip alias on page 163clear ip dns domainRemoves the default DNS domain name.Syntax clear ip

clear ip routeChapter 8IP Services Commands100Examples The following command removes DNS server 10.10.10.69 from a UNIVERGE WL Controller configurati

clear ip telnetChapter 8IP Services Commands101Examples The following command removes the route to destination 10.10.10.68/24 through router 10.10.10

clear ntp serverChapter 8IP Services Commands102clear ntp serverRemoves an NTP server from a UNIVERGE WL Controller configuration.Syntax clear ntp s

clear snmp communityChapter 8IP Services Commands103Examples To reset the NTP interval to the default value, type the following command:PROMPT# clear

clear snmp notify targetChapter 8IP Services Commands104Syntax clear snmp notify profile profile-nameDefaults None.Access Enabled.Examples The

clear snmp usmChapter 8IP Services Commands105See Also l set snmp notify target on page 137l show snmp notify target on page 174clear snmp usmClears

CLI ConventionsChapter 2Using the Command-Line Interface7Syntax NotationThe UNIVERGE WL Control System CLI uses standard syntax notation:l Bold monosp

clear system ip-addressChapter 8IP Services Commands106See Also l clear timezone on page 107l set summertime on page 151l set timedate on page 154l

clear timezoneChapter 8IP Services Commands107See Also l set system ip-address on page 153l show system on page 40clear timezoneClears the time offs

pingChapter 8IP Services Commands108Syntax ping host [count num-packets] [dnf] [flood] [interval time] [size size] Defaults l count—5.l dnf—Disabl

set arpChapter 8IP Services Commands109A UNIVERGE WL Controller cannot ping itself. UNIVERGE WL Control System does not support this.A UNIVERGE WL Con

set arp agingtimeChapter 8IP Services Commands110Examples The following command adds a static ARP entry that maps IP address 10.10.10.1 to MAC addres

set interfaceChapter 8IP Services Commands111See Also l set arp on page 109l show arp on page 156set interfaceConfigures an IP interface on a VLAN.S

set interface dhcp-clientChapter 8IP Services Commands112The following command configures IP interface 10.10.20.10 255.255.255.0 on VLAN mauve:PROMPT#

set interface dhcp-serverChapter 8IP Services Commands113Examples The following command enables the DHCP client on VLAN corpvlan:PROMPT# set interfac

set interface dhcp-serverChapter 8IP Services Commands114Defaults The DHCP server is enabled by default.Access Enabled.Usage By default, all add

set interface statusChapter 8IP Services Commands115l set ip dns server on page 118l show dhcp-server on page 159set interface statusAdministratively

CLI ConventionsChapter 2Using the Command-Line Interface8In addition, the CLI does not support the use of international characters such as the accente

set ip dnsChapter 8IP Services Commands116Syntax set ip alias name ip-addrDefaults None.Access Enabled.Examples The following command configure

set ip dns domainChapter 8IP Services Commands117See Also l clear ip dns domain on page 99l clear ip dns server on page 99l set ip dns domain on pag

set ip dns serverChapter 8IP Services Commands118See Also l clear ip dns domain on page 99l clear ip dns server on page 99l set ip dns on page 116l

set ip https serverChapter 8IP Services Commands119success: change accepted.PROMPT# set ip dns server 10.10.30.69/24 secondarysuccess: change accepted

set ip routeChapter 8IP Services Commands120l set ip telnet on page 125l set ip telnet server on page 126l show ip https on page 165l show ip telnet o

set ip routeChapter 8IP Services Commands121Usage UNIVERGE WL Control System can use a static route only if a direct route in the route table resolv

set ip snmp serverChapter 8IP Services Commands122The following command adds an explicit route from a UNIVERGE WL Controller to any host on the 192.16

set ip sshChapter 8IP Services Commands123l set snmp community on page 130l set snmp usm on page 146l set snmp notify profile on page 132l show snmp c

set ip ssh serverChapter 8IP Services Commands124set ip ssh serverDisables or reenables the SSH server on a UNIVERGE WL Controller.Syntax set ip ssh

set ip telnetChapter 8IP Services Commands125set ip telnetChanges the TCP port number on which a UNIVERGE WL Controller listens for Telnet management

CLI ConventionsChapter 2Using the Command-Line Interface9For example, the address 10.0.0.0 and mask 0.255.255.255 match all IP addresses that begin wi

set ip telnet serverChapter 8IP Services Commands126set ip telnet serverEnables the Telnet server on a UNIVERGE WL Controller.Syntax set ip telnet s

set ntpChapter 8IP Services Commands127set ntpEnables or disables the NTP client on a UNIVERGE WL Controller.Syntax set ntp {enable | disable}Defaul

set ntp serverChapter 8IP Services Commands128set ntp serverConfigures a UNIVERGE WL Controller to use an NTP server.Syntax set ntp server ip-addrDe

set ntp update-intervalChapter 8IP Services Commands129set ntp update-intervalChanges how often a UNIVERGE WL Control System sends queries to the NTP

set snmp communityChapter 8IP Services Commands130set snmp communityConfigures a community string for SNMPv1 or SNMPv2c. Syntax set snmp community n

set snmp communityChapter 8IP Services Commands131Usage SNMP community strings are passed as clear text in SNMPv1 and SNMPv2c. UNIVERGE WL Control S

set snmp notify profileChapter 8IP Services Commands132set snmp notify profileConfigures an SNMP notification profile. A notification profile is a nam

set snmp notify profileChapter 8IP Services Commands133notification-type Name of the notification type:• APBootTraps—Generated when a UNIVERGE WL Acce

set snmp notify profileChapter 8IP Services Commands134notification-type(cont.)• CounterMeasureStopTraps—Generated when UNIVERGE WL Control System sto

set snmp notify profileChapter 8IP Services Commands135Defaults A default notification profile (named default) is already configured on the UNIVERGE

CLI ConventionsChapter 2Using the Command-Line Interface10MAC Address GlobsA media access control (MAC) address glob is a similar method for matching

set snmp notify profileChapter 8IP Services Commands136Examples The following command changes the action in the default notification profile from dro

set snmp notify targetChapter 8IP Services Commands137See Also l clear snmp notify profile on page 103l set ip snmp server on page 122l set snmp com

set snmp notify targetChapter 8IP Services Commands138target-num ID for the target. This ID is local to the UNIVERGE WL Controller and does not need t

set snmp notify targetChapter 8IP Services Commands139SNMPv3 with TrapsTo configure a notification target for traps from SNMPv3, use the following com

set snmp notify targetChapter 8IP Services Commands140SNMPv2c with InformsTo configure a notification target for informs from SNMPv2c, use the followi

set snmp notify targetChapter 8IP Services Commands141SNMPv2c with TrapsTo configure a notification target for traps from SNMPv2c, use the following c

set snmp notify targetChapter 8IP Services Commands142SNMPv1 with TrapsTo configure a notification target for traps from SNMPv1, use the following com

set snmp protocolChapter 8IP Services Commands143This command configures target 1 at IP address 10.10.40.9. The target SNMP engine ID is based on its

set snmp securityChapter 8IP Services Commands144Defaults All SNMP versions are disabled by default.Access Enabled.Usage SNMP requires the UNIVE

set snmp securityChapter 8IP Services Commands145Syntax set snmp security {unsecured | authenticated | encrypted | auth-req-unsec-notify}Defaults

CLI ConventionsChapter 2Using the Command-Line Interface11To match all VLANs, use the double-asterisk (**) wildcard characters with no delimiters. To

set snmp usmChapter 8IP Services Commands146set snmp usmCreates a USM user for SNMPv3. Syntax set snmp usm usm-username snmp-engine-id {ip ip-addr |

set snmp usmChapter 8IP Services Commands147usm-username Name of the SNMPv3 user. Specify between 1 and 32 alphanumeric characters, with no spaces.snm

set snmp usmChapter 8IP Services Commands148access {read-only | read-notify | notify-only | read-write | notify-read-write}Specifies the access level

set snmp usmChapter 8IP Services Commands149auth-type {none | md5 | sha} {auth-pass-phrase string | auth-key hex-string}Specifies the authentication t

set snmp usmChapter 8IP Services Commands150Defaults No SNMPv3 users are configured by default. When you configure an SNMPv3 user, the default acces

set summertimeChapter 8IP Services Commands151success: change accepted.See Also l clear snmp usm on page 105l set ip snmp server on page 122l set sn

set summertimeChapter 8IP Services Commands152Defaults If you do not specify a start and end time, the system implements the time change starting at

set system ip-addressChapter 8IP Services Commands153set system ip-addressConfigures the system IP address. The system IP address determines the inter

set timedateChapter 8IP Services Commands154set timedateSets the time of day and date on the UNIVERGE WL Controller.Syntax set timedate {date mmm dd

set timezoneChapter 8IP Services Commands155l show timedate on page 176l show timezone on page 177set timezoneSets the number of hours, and optionally

Command-Line EditingChapter 2Using the Command-Line Interface12Command-Line EditingUNIVERGE WL Control System editing functions are similar to those o

show arpChapter 8IP Services Commands156l show timedate on page 176l show timezone on page 177show arpDisplays the ARP table.Syntax show arp [ip-add

show dhcp-clientChapter 8IP Services Commands157See Also l set arp on page 109l set arp agingtime on page 110show dhcp-clientDisplays DHCP client in

show dhcp-clientChapter 8IP Services Commands158Examples The following command displays DHCP client information:PROMPT# show dhcp-clientInterface: co

show dhcp-serverChapter 8IP Services Commands159See Also set interface dhcp-client on page 112show dhcp-serverDisplays UNIVERGE WL Control System DH

show dhcp-serverChapter 8IP Services Commands160Status: UPAddress Range: 10.0.0.1-10.0.0.253Interface: default(1)Status: UPAddress Range: 10.10.20.2-1

show interfaceChapter 8IP Services Commands161See Also set interface dhcp-server on page 113show interfaceDisplays the IP interfaces configured on t

show interfaceChapter 8IP Services Commands162Syntax show interface [vlan-id]Defaults If you do not specify a VLAN ID, interfaces for all VLANs ar

show ip aliasChapter 8IP Services Commands163See Also l clear interface on page 97l set interface on page 111l set interface status on page 115show

show ip dnsChapter 8IP Services Commands164l set ip alias on page 115show ip dnsDisplays the DNS servers used by the UNIVERGE WL Controller.Syntax s

show ip httpsChapter 8IP Services Commands165See Also l clear ip dns domain on page 99l clear ip dns server on page 99l set ip dns on page 116l set

Command-Line EditingChapter 2Using the Command-Line Interface13History BufferThe history buffer stores the last 63 commands you entered during a termi

show ip httpsChapter 8IP Services Commands166See Also l clear ip telnet on page 101l set ip https server on page 119l set ip telnet on page 125l set

show ip routeChapter 8IP Services Commands167show ip routeDisplays the IP route table on the UNIVERGE WL Controller.Syntax show ip route [destinatio

show ip routeChapter 8IP Services Commands168Table 21. Output for show ip routeField DescriptionDestination/Mask IP address and subnet mask of the rou

show ip telnetChapter 8IP Services Commands169See Also l clear ip route on page 100l set interface on page 111l set ip route on page 120l show inter

show ntpChapter 8IP Services Commands170Examples The following command shows the status and port number for the Telnet management interface to the UN

show ntpChapter 8IP Services Commands171Examples To display NTP information for a UNIVERGE WL Controller, type the following command:PROMPT> show

show ntpChapter 8IP Services Commands172See Also l clear ntp server on page 102l clear summertime on page 105l clear timezone on page 107l set ntp o

show snmp communityChapter 8IP Services Commands173l set summertime on page 151l set timezone on page 155l show timezone on page 177show snmp communit

show snmp notify targetChapter 8IP Services Commands174l clear snmp notify profile on page 103l set snmp notify profile on page 132show snmp notify ta

show snmp usmChapter 8IP Services Commands175l show snmp community on page 173l show snmp counters on page 173l show snmp notify profile on page 173l

Using CLI HelpChapter 2Using the Command-Line Interface14Using CLI HelpThe CLI provides online help. To see the full range of commands available at yo

show timedateChapter 8IP Services Commands176See Also l clear summertime on page 105l clear timezone on page 107l set summertime on page 151l set ti

show timezoneChapter 8IP Services Commands177l show timezone on page 177show timezoneShows the time offset for the real-time clock from UTC on a UNIVE

telnetChapter 8IP Services Commands178Defaults UNIVERGE WL Control System attempts to establish Telnet connections with TCP port 23 by default.Acces

tracerouteChapter 8IP Services Commands179See Also l clear sessions on page 531l show sessions on page 534tracerouteTraces the route from the UNIVER

tracerouteChapter 8IP Services Commands180l ttl—30l wait—5000Access All.Usage To stop a traceroute command that is in progress, press Ctrl+C.Examp

tracerouteChapter 8IP Services Commands181See Also ping on page 107Table 24. Error Messages for tracerouteField Description!N No route to host. The

tracerouteChapter 8IP Services Commands182

AAA Commands1839AAA CommandsUse authentication, authorization, and accounting (AAA) commands to provide a secure network connection and a record of us

Chapter 9AAA Commands184set usergroup on page 238clear usergroup on page 198set user group on page 237clear user group on page 197clear usergroup attr

clear accountingChapter 9AAA Commands185clear accountingRemoves accounting services for specified wireless users with administrative access or network

Understanding Command DescriptionsChapter 2Using the Command-Line Interface15dns show DNS statushttps show ip httpsroute Show ip route tabletelnet

clear authentication adminChapter 9AAA Commands186l show accounting statistics on page 243clear authentication adminRemoves an authentication rule for

clear authentication consoleChapter 9AAA Commands187l show aaa on page 240clear authentication consoleRemoves an authentication rule for administrativ

clear authentication dot1xChapter 9AAA Commands188l show aaa on page 240clear authentication dot1xRemoves an 802.1X authentication rule.Syntax clear

clear authentication last-resortChapter 9AAA Commands189clear authentication last-resortDeprecated in WL1700-MS of UNIVERGE WL Control System V1. The

clear authentication webChapter 9AAA Commands190clear authentication webRemoves a Web Authentication rule.Syntax clear authentication web {ssid ssid

clear mac-userChapter 9AAA Commands191Defaults None.Access Enabled.Usage To determine the index numbers of location policy rules, use the show l

clear mac-user attrChapter 9AAA Commands192See Also l set mac-usergroup attr on page 230l set mac-user attr on page 222l show aaa on page 240clear m

clear mac-user groupChapter 9AAA Commands193clear mac-user groupRemoves a user profile from a MAC user group in the local database on the UNIVERGE WL

clear mac-usergroup attrChapter 9AAA Commands194Syntax clear mac-usergroup group-nameDefaults None.Access Enabled.Usage To remove a user from

clear mobility-profileChapter 9AAA Commands195Defaults None.Access Enabled.Usage To remove the group itself, use the clear mac-usergroup command

LIABILITY DISCLAIMERNEC Infrontia Corporation reserves the right to change the specifica-tions, functions, or features, at any time, without notice.NE

Understanding Command DescriptionsChapter 2Using the Command-Line Interface16

clear userChapter 9AAA Commands196clear userRemoves a user profile from the local database on the UNIVERGE WL Controller, for a user with a password.(

clear user groupChapter 9AAA Commands197Syntax clear user username attr attribute-nameDefaults None.Access Enabled.Examples The following comma

clear usergroupChapter 9AAA Commands198Usage Removing the user from the group removes the group name from the user profile, but does not delete eith

clear usergroup attrChapter 9AAA Commands199See Also l clear usergroup attr on page 199l set usergroup on page 238l show aaa on page 240clear usergr

set accounting {admin | console}Chapter 9AAA Commands200set accounting {admin | console}Sets up accounting services for specified wireless users with

set accounting {dot1x | mac | web | last-resort}Chapter 9AAA Commands201Defaults Accounting is disabled for all users by default.Access Enabled.Us

set accounting {dot1x | mac | web | last-resort}Chapter 9AAA Commands202Syntax set accounting {dot1x | mac | web | last-resort} {ssid ssid-name} {us

set authentication adminChapter 9AAA Commands203Defaults Accounting is disabled for all users by default.Access Enabled.Usage For network users

set authentication adminChapter 9AAA Commands204Syntax set authentication admin user-globmethod1 [method2] [method3] [method4]user-glob Single user

set authentication adminChapter 9AAA Commands205Defaults By default, authentication is deactivated for all admin users. The default authentication m

Access Commands173Access CommandsUse access commands to control access to the UNIVERGE WL Control System (CLI). This chapter presents access commands

set authentication consoleChapter 9AAA Commands206See Also l clear authentication admin on page 186l set authentication console on page 206l set aut

set authentication consoleChapter 9AAA Commands207Defaults By default, authentication is deactivated for all console users, and the default authenti

set authentication consoleChapter 9AAA Commands208Access Enabled..Usage You can configure different authentication methods for different groups of

set authentication dot1xChapter 9AAA Commands209set authentication dot1xConfigures authentication and defines how it is performed for specified wirele

set authentication dot1xChapter 9AAA Commands210protocol Protocol used for authentication. Specify one of the following:• eap-tls—EAP with Transport L

set authentication dot1xChapter 9AAA Commands211Defaults By default, authentication is unconfigured for all clients on the UNIVERGE WL Controller. C

set authentication last-resortChapter 9AAA Commands212If the username does not match an authentication rule for the SSID the user is attempting to acc

set authentication macChapter 9AAA Commands213set authentication macConfigures authentication and defines where it is performed for specified non-802.

set authentication macChapter 9AAA Commands214If you specify multiple authentication methods in the set authentication mac command, UNIVERGE WL Contro

set authentication webChapter 9AAA Commands215set authentication webConfigures an authentication rule that allows a user to log into the network using

quitChapter 3Access Commands18Syntax enableAccess All.Usage UNIVERGE WL Control System displays a password prompt to challenge you with the enab

set authentication webChapter 9AAA Commands216You can configure a rule either for wireless access to an SSID. If the rule is for wireless access to an

set location policyChapter 9AAA Commands217set location policyCreates and enables a location policy on a UNIVERGE WL Controller. A location policy ena

set location policyChapter 9AAA Commands218Condition options—UNIVERGE WL Control System takes the action specified by the rule if all conditions in th

set location policyChapter 9AAA Commands219Defaults By default, users are permitted VLAN access and assigned security ACLs according to the VLAN-Nam

set location policyChapter 9AAA Commands220Examples The following command denies network access to all users at *.theirfirm.com, causing them to fail

set mac-userChapter 9AAA Commands221set mac-userConfigures a user profile in the local database on the UNIVERGE WL Controller for a user who can authe

set mac-user attrChapter 9AAA Commands222set mac-user attrAssigns an authorization attribute in the local database on the UNIVERGE WL Controller to a

set mac-user attrChapter 9AAA Commands223Table 25. Authentication Attributes for Local Users Attribute Description Valid Value(s)encryption-type Type

set mac-user attrChapter 9AAA Commands224filter-id(network access mode only)Security access control list (ACL), to permit or deny traffic received (in

set mac-user attrChapter 9AAA Commands225service-type Type of access the user is requesting.One of the following numbers:• 2—Framed; for network user

set enablepassChapter 3Access Commands19set enablepassSets the password that provides enabled access (for configuration and monitoring) to the UNIVERG

set mac-user attrChapter 9AAA Commands226start-date Date and time at which the user becomes eligible to access the network.UNIVERGE WL Control System

set mac-user attrChapter 9AAA Commands227time-of-day(network access mode only)Day(s) and time(s) during which the user is permitted to log into the ne

set mac-user attrChapter 9AAA Commands228time-of-day(network access mode only)(cont.)To allow access only on weekdays between 9 a.m and 5 p.m., and on

set mac-user attrChapter 9AAA Commands229Examples The following command assigns input access control list (ACL) acl-03 to filter packets from a user

set mac-usergroup attrChapter 9AAA Commands230The following command restricts a user at MAC address 06:05:04:03:02:01 to network access between 7 p.m.

set mobility-profileChapter 9AAA Commands231You can assign attributes to individual MAC users and to MAC user groups. If attributes are configured for

set mobility-profileChapter 9AAA Commands232Defaults No default Mobility Profile exists on the UNIVERGE WL Controller. If you do not assign Mobility

set mobility-profileChapter 9AAA Commands233Examples The following commands create the Mobility Profile magnolia, which restricts user access to ap 2

set mobility-profile modeChapter 9AAA Commands234set mobility-profile modeEnables or disables the Mobility Profile feature on the UNIVERGE WL Controll

set userChapter 9AAA Commands235set userConfigures a user profile in the local database on the UNIVERGE WL Controller for a user with a password.(To c

set enablepassChapter 3Access Commands20

set user attrChapter 9AAA Commands236Examples The following command creates a user profile for user Nin in the local database, and assigns the passwo

set user groupChapter 9AAA Commands237Usage To change the value of an attribute, enter set user attr with the new value. To delete an attribute, use

set usergroupChapter 9AAA Commands238Syntax set user username group group-nameDefaults None.Access Enabled.Usage UNIVERGE WL Control System do

set usergroupChapter 9AAA Commands239Syntax set usergroup group-name attr attribute-name valueDefaults None.Access Enabled.Usage To change the

set web-portalChapter 9AAA Commands240set web-portalGlobally enables or disables Web Authentication on a UNIVERGE WL Controller.Syntax set web-porta

show aaaChapter 9AAA Commands241Access Enabled.Examples To display all current AAA settings, type the following command:PROMPT# show aaaDefault Val

show aaaChapter 9AAA Commands242Table 26. show aaa OutputField DescriptionDefault Values RADIUS default values for all parameters.authport UDP port on

show accounting statisticsChapter 9AAA Commands243See Also l set accounting {admin | console} on page 200l set authentication admin on page 203l set

show accounting statisticsChapter 9AAA Commands244(To display RADIUS accounting records, see the documentation for your RADIUS server.)Syntax show a

show accounting statisticsChapter 9AAA Commands245Table 27. show accounting statistics OutputField DescriptionDate and time Date and time of the accou

System Services Commands214System Services CommandsUse system services commands to configure and monitor system information for a UNIVERGE WL Controll

show location policyChapter 9AAA Commands246See Also l clear accounting on page 185l set accounting {admin | console} on page 200l show aaa on page

show mobility-profileChapter 9AAA Commands247show mobility-profileDisplays the named Mobility Profile. If you do not specify a Mobility Profile name,

show mobility-profileChapter 9AAA Commands248

Mobility Domain Commands24910Mobility Domain CommandsUse Mobility Domain commands to configure and manage Mobility Domain groups.A Mobility Domain is

clear mobility-domainChapter 10Mobility Domain Commands250clear mobility-domainClears all Mobility Domain configuration and information from a UNIVERG

set mobility-domain memberChapter 10Mobility Domain Commands251Access Enabled.Usage This command has no effect if the UNIVERGE WL Controller membe

set mobility-domain mode member seed-ipChapter 10Mobility Domain Commands252success: change accepted.PROMPT# set mobility-domain member 192.168.1.9suc

set mobility-domain mode seed domain-nameChapter 10Mobility Domain Commands253mode is: memberseed IP is: 192.168.1.8See Also l clear mobility-domain

show mobility-domain configChapter 10Mobility Domain Commands254l show mobility-domain on page 254show mobility-domain configDisplays the configuratio

show mobility-domainChapter 10Mobility Domain Commands255Examples To display Mobility Domain status, type the following command:PROMPT# show mobility

clear banner motdChapter 4System Services Commands22clear banner motdDeletes the message-of-the-day (MOTD) banner that is displayed before the login p

show mobility-domainChapter 10Mobility Domain Commands256

Network Domain Commands25711Network Domain CommandsUse Network Domain commands to configure and manage Network Domain groups.A Network Domain is a gro

clear network-domainChapter 11Network Domain Commands258clear network-domainClears all Network Domain configuration and information from a UNIVERGE WL

clear network-domain peerChapter 11Network Domain Commands259Defaults None.Access Enabled.Usage This command has no effect if the UNIVERGE WL Co

clear network-domain seed-ipChapter 11Network Domain Commands260Examples The following command clears the Network Domain peer configuration for peer

set network-domain mode member seed-ipChapter 11Network Domain Commands261set network-domain mode member seed-ipSets the IP address of a Network Domai

set network-domain peerChapter 11Network Domain Commands262success: change accepted.See Also l clear network-domain on page 258l show network-domain

set network-domain mode seed domain-nameChapter 11Network Domain Commands263set network-domain mode seed domain-nameCreates a Network Domain by settin

show network-domainChapter 11Network Domain Commands264Syntax show network-domainDefaults None.Access Enabled.Examples The output of the comman

show network-domainChapter 11Network Domain Commands265Table 29. show network-domain OutputField Description Output if UNIVERGE WL Controller is the N

clear promptChapter 4System Services Commands23Access All.Examples To clear the history buffer, type the following command:PROMPT# clear historysuc

show network-domainChapter 11Network Domain Commands266See Also l clear network-domain on page 258l set network-domain mode member seed-ip on page 2

AP Commands26712AP CommandsUse AP commands to configure and manage AP. Be sure to do the following before using the commands:l Define the country-spec

Chapter 12AP Commands268set ap radio radio-profile on page 296set ap auto radiotype on page 281set ap upgrade-firmware on page 300External Antenna set

Chapter 12AP Commands269set radio-profile rts-threshold on page 323Authentication andEncryptionset service-profile attr on page 334set service-profile

Chapter 12AP Commands270set service-profile cac-mode on page 341set service-profile cac-session on page 342set service-profile static-cos on page 360s

clear ap radioChapter 12AP Commands271clear ap radioDisables an AP radio and resets it to its factory default settings.show auto-tune neighbors on pag

clear ap radioChapter 12AP Commands272Syntax clear ap ap-number radio {1 | 2 | all}Defaults The clear ap radio command resets the radio to the def

clear ap boot-configurationChapter 12AP Commands273Access EnabledUsage When you clear a radio, UNIVERGE WL Control System performs the following a

clear ap boot-configurationChapter 12AP Commands274Defaults None.Access Enabled.Usage When the static IP configuration is cleared for a UNIVERGE

clear radio-profileChapter 12AP Commands275clear radio-profileRemoves a radio profile or resets one of the profile’s parameters to its default value.S

clear systemChapter 4System Services Commands24Syntax clear system [contact | countrycode | idle-timeout | ip-address | location | name]Defaults N

clear service-profileChapter 12AP Commands276The following commands disable the radios using radio profile rptest and remove the profile:PROPMT# set r

reset apChapter 12AP Commands277l clear radio-profile on page 275l set radio-profile mode on page 316l show service-profile on page 413reset apRestart

set ap autoChapter 12AP Commands278Usage Table 31 lists the configurable profile parameters and their defaults. The only parameter that requires con

set ap auto modeChapter 12AP Commands279Examples The following command creates a profile for automatic UNIVERGE WL Access Points configuration:PROPMT

set ap auto persistentChapter 12AP Commands280Usage You must use the set ap auto command to create the profile before you can enable it.Examples Th

set ap auto radiotypeChapter 12AP Commands281Defaults None. Access Enabled.Usage To display the UNIVERGE WL Access Points numbers assigned to Au

set ap biasChapter 12AP Commands282l set ap auto on page 277l set ap auto mode on page 279l set ap auto persistent on page 280set ap biasChanges the b

set ap blinkChapter 12AP Commands283and one of the UNIVERGE WL Controllers has 3 active UNIVERGE WL Access Points while the other UNIVERGE WL Controll

set ap boot-configuration ipChapter 12AP Commands284Defaults LED blink mode is disabled by default.Access Enabled.Usage Changing the LED blink m

set ap boot-configuration switchChapter 12AP Commands285If the manually assigned IP information is incorrect, the UNIVERGE WL Access Points uses DHCP

helpChapter 4System Services Commands25l show system on page 40helpDisplays a list of commands that can be used to configure and monitor the UNIVERGE

set ap boot-configuration switchChapter 12AP Commands286Defaults By default UNIVERGE WL Access Points use the process described in “Default UNIVERGE

set ap boot-configuration vlanChapter 12AP Commands287See Also l clear ap boot-configuration on page 273l set ap boot-configuration ip on page 284l

set ap fingerprintChapter 12AP Commands288See Also l clear ap boot-configuration on page 273l set ap boot-configuration ip on page 284l set ap boot-

set ap force-image-downloadChapter 12AP Commands289If a UNIVERGE WL Access Point is already installed and operating, you can use the show ap status co

set ap nameChapter 12AP Commands290Usage A change to the forced image download option takes place the next time the UNIVERGE WL Access Point is rest

set ap radio antennatypeChapter 12AP Commands291Examples The following command changes the name of the AP 1 to techpubs:PROPMT# set ap 1 name techpu

set ap radio auto-tune max-powerChapter 12AP Commands292Defaults All radios use the internal antenna by default, if the UNIVERGE WL Access Points mo

set ap radio channelChapter 12AP Commands293Defaults The default maximum power setting that RF Auto-Tuning can set on a radio is the highest setting

set ap radio channelChapter 12AP Commands294Defaults The default channel depends on the radio type:l The default channel number for 802.11b/g is 6.l

set ap radio modeChapter 12AP Commands295set ap radio modeEnables or disables a radio on an AP.Syntax set ap {ap-number | auto} radio {1 | 2} mode {

ContentsiContents1 Introducing the UNIVERGE WL System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1UNIVERGE WL System . . . . . . . . .

historyChapter 4System Services Commands26historyDisplays the command history buffer for the current CLI session.Syntax historyDefaults None.Acces

set ap radio radio-profileChapter 12AP Commands296set ap radio radio-profileAssigns a radio profile to an AP radio and enables or disables the radio.S

set ap radio tx-powerChapter 12AP Commands297l set radio-profile mode on page 316l show radio-profile on page 408set ap radio tx-powerSets the transmi

set ap securityChapter 12AP Commands298Examples The following command configures the transmit power on the 802.11a radio on the AP connected 3:PROPMT

set ap securityChapter 12AP Commands299Defaults The default setting is optional.Access Enabled.Usage This parameter applies to all UNIVERGE WL A

set ap upgrade-firmwareChapter 12AP Commands300set ap upgrade-firmwareDisables or reenables automatic upgrade of an AP boot firmware.Syntax set ap a

set radio-profile auto-tune channel-configChapter 12AP Commands301Syntax set radio-profile name active-scan {enable | disable}Defaults Active scan

set radio-profile auto-tune channel-configChapter 12AP Commands302Defaults Dynamic channel assignment is enabled by default. Access Enabled.Usage

set radio-profile auto-tune channel-holddownChapter 12AP Commands303set radio-profile auto-tune channel-holddownSets the minimum number of seconds a r

set radio-profile auto-tune channel-intervalChapter 12AP Commands304set radio-profile auto-tune channel-intervalSets the interval at which RF Auto-Tun

set radio-profile auto-tune power-configChapter 12AP Commands305set radio-profile auto-tune power-configEnables or disables dynamic power tuning (RF A

set auto-configChapter 4System Services Commands27Usage A network administrator at the corporate office can preconfigure the UNIVERGE WL Controller

set radio-profile auto-tune power-intervalChapter 12AP Commands306set radio-profile auto-tune power-intervalSets the interval at which RF Auto-Tuning

set radio-profile beacon-intervalChapter 12AP Commands307set radio-profile beacon-intervalChanges the rate at which each AP radio in a radio profile a

set radio-profile countermeasuresChapter 12AP Commands308UNIVERGE WL Access Points radios can also issue countermeasures against interfering devices.

set radio-profile dtim-intervalChapter 12AP Commands309success: change accepted.Note that when you issue this command, countermeasures are then issued

set radio-profile frag-thresholdChapter 12AP Commands310See Also l set radio-profile mode on page 316l show radio-profile on page 408set radio-profi

set radio-profile max-rx-lifetimeChapter 12AP Commands311The frag-threshold does not change the RTS threshold, which specifies the maximum length of a

set radio-profile max-tx-lifetimeChapter 12AP Commands312See Also l set radio-profile mode on page 316l set radio-profile max-tx-lifetime on page 31

set radio-profile max-voip-bwChapter 12AP Commands313set radio-profile max-voip-bwSpecifies the amount of bandwidth to reserve for active NEC handset

set radio-profile max-voip-bwChapter 12AP Commands314See Also l set radio-profile max-voip-sessions on page 315l set service-profile cac-mode on pag

set radio-profile max-voip-sessionsChapter 12AP Commands315set radio-profile max-voip-sessionsSpecifies the amount of bandwidth to reserve for active

set auto-configChapter 4System Services Commands28The IP address and DNS information are configured independently. You can configure the combination o

set radio-profile modeChapter 12AP Commands316min-client-rate: 11.0 Mb/seffective bandwidth: 6000 Kb/sSee Also l set radio-profile max-voip-bw on pa

set radio-profile modeChapter 12AP Commands317Table 33. Defaults for Radio Profile ParametersParameterDefault ValueRadio Behavior When Parameter Set T

set radio-profile modeChapter 12AP Commands318max-voip-bw 3000 Reserves an aggregate of 3000 Kbps on each radio for NEC VoIP sessions. Note: This para

set radio-profile modeChapter 12AP Commands319Access Enabled.Usage Use the command without any optional parameters to create new profile. If the r

set radio-profile preamble-lengthChapter 12AP Commands320The following commands disable the radios that use radio profile rp1, change the beacon inter

set radio-profile qos-modeChapter 12AP Commands321If a client associated with an 802.11b/g radio uses long preambles for unicast traffic, the UNIVERGE

set radio-profile rate-enforcementChapter 12AP Commands322Access Enabled.Usage If you plan to use SVP, you also must configure an ACL to mark CoS

set radio-profile rts-thresholdChapter 12AP Commands323l Mandatory –– Valid 802.11 transmit rates that clients must support in order to associate with

set radio-profile service-profileChapter 12AP Commands324Syntax set radio-profile name rts-threshold thresholdDefaults The default RTS threshold f

set radio-profile service-profileChapter 12AP Commands325Defaults A radio profile does not have a service profile associated with it by default. In

set banner motdChapter 4System Services Commands29set banner motdConfigures the banner string that is displayed before the beginning of each login pro

set radio-profile service-profileChapter 12AP Commands326cac-mode none Does not limit the number of active user sessions based on Call Admission Contr

set radio-profile service-profileChapter 12AP Commands327dhcp-restrict disable Does not restrict a client’s traffic to only DHCP traffic while the cli

set radio-profile service-profileChapter 12AP Commands328psk-phrase No passphrase definedUses dynamically generated keys rather than statically config

set radio-profile service-profileChapter 12AP Commands329tkip-mc-time 60000 Uses Michael countermeasures for 60,000 ms (60 seconds) following detectio

set radio-profile service-profileChapter 12AP Commands330web-portal-acl portalaclNote: This is the default only if the fallthru type on the service pr

set radio-profile service-profileChapter 12AP Commands331Access Enabled.Usage You must configure the service profile before you can map it to a ra

set radio-profile service-profileChapter 12AP Commands332l set service-profile cac-session on page 342l set service-profile cipher-ccmp on page 343l s

set service-profile active-call-idle-timeoutChapter 12AP Commands333l set service-profile wep active-unicast-index on page 370l set service-profile we

set service-profile attrChapter 12AP Commands334Usage The active-call idle timeout applies only to active voice sessions (on-hook calls) on an SSID

set service-profile attrChapter 12AP Commands335Access Enabled.Usage To change the value of a default attribute for a service profile, use the set

set lengthChapter 4System Services Commands30Defaults Configuration messages are enabled.Access Enabled.Usage This command remains in effect for

set service-profile auth-dot1xChapter 12AP Commands336The following command limits the days and times when users accessing the SSID managed by service

set service-profile auth-fallthruChapter 12AP Commands337If you disable 802.1X authentication of WPA clients, the only method available for authentica

set service-profile auth-fallthruChapter 12AP Commands338Defaults The default fallthru authentication type is none. If a username does not match a u

set service-profile auth-pskChapter 12AP Commands339Examples The following command sets the fallthru authentication type for SSIDS managed by the ser

set service-profile beaconChapter 12AP Commands340See Also l set service-profile auth-dot1x on page 336l set service-profile psk-raw on page 355l se

set service-profile cac-modeChapter 12AP Commands341l set service-profile ssid-name on page 359l set service-profile ssid-type on page 359l show servi

set service-profile cac-sessionChapter 12AP Commands342l set service-profile cac-session on page 342l show service-profile on page 413set service-prof

set service-profile cipher-ccmpChapter 12AP Commands343set service-profile cipher-ccmpEnables Counter with Cipher Block Chaining Message Authenticatio

set service-profile cipher-wep104Chapter 12AP Commands344Syntax set service-profile name cipher-tkip {enable | disable}Defaults When the WPA IE is

set service-profile cipher-wep104Chapter 12AP Commands345Defaults 104-bit WEP encryption is disabled by default.Access Enabled.Usage To use 104-

set licenseChapter 4System Services Commands31set license Installs an upgrade license key on a UNIVERGE WL Controller.set promptChanges the CLI prompt

set service-profile cipher-wep40Chapter 12AP Commands346set service-profile cipher-wep40Enables dynamic Wired Equivalent Privacy (WEP) with 40-bit key

set service-profile cosChapter 12AP Commands347See Also l set service-profile cipher-ccmp on page 343l set service-profile cipher-tkip on page 343l

set service-profile dhcp-restrictChapter 12AP Commands348set service-profile dhcp-restrictEnables or disables DHCP Restrict on a service profile. DHCP

set service-profile idle-client-probingChapter 12AP Commands349set service-profile idle-client-probingDisables or reenables periodic keepalives from U

set service-profile keep-initial-vlanChapter 12AP Commands350set service-profile keep-initial-vlanConfigures UNIVERGE WL Access Point radios managed b

set service-profile long-retry-countChapter 12AP Commands351set service-profile long-retry-countChanges the long retry threshold for a service profile

set service-profile no-broadcastChapter 12AP Commands352l ARP requests—If the SSID has clients with IP addresses that the UNIVERGE WL Controller does

set service-profile proxy-arpChapter 12AP Commands353l show service-profile on page 413set service-profile proxy-arpDisables or reenables proxy ARP. W

set service-profile psk-phraseChapter 12AP Commands354l set service-profile no-broadcast on page 351l show service-profile on page 413set service-prof

set service-profile psk-rawChapter 12AP Commands355l set service-profile auth-psk on page 339l set service-profile psk-raw on page 355l set service-pr

set system contactChapter 4System Services Commands32See Also l clear prompt on page 23l set system name on page 38l show config on page 600set syst

set service-profile rsn-ieChapter 12AP Commands356See Also l set mac-user attr on page 222l set service-profile auth-psk on page 339l set service-pr

set service-profile shared-key-authChapter 12AP Commands357l set service-profile auth-psk on page 339l set service-profile cipher-ccmp on page 343l se

set service-profile short-retry-countChapter 12AP Commands358See Also l set radio-profile mode on page 316l set service-profile cipher-tkip on page

set service-profile ssid-nameChapter 12AP Commands359set service-profile ssid-nameConfigures the SSID name in a service profile.Syntax set service-p

set service-profile static-cosChapter 12AP Commands360Syntax set service-profile name ssid-type [clear | crypto]Defaults The default SSID type is

set service-profile tkip-mc-timeChapter 12AP Commands361l For traffic from clients to the network, the UNIVERGE WL Access Points marks the DSCP value

set service-profile transmit-ratesChapter 12AP Commands362Syntax set service-profile name tkip-mc-time wait-timeDefaults The default countermeasur

set service-profile transmit-ratesChapter 12AP Commands363mandatory rate-list Set of data transmission rates that clients are required to support in o

set service-profile transmit-ratesChapter 12AP Commands364Defaults This command has the following defaults:l mandatory:l 11a—6.0,12.0,24.0l 11b—5.5,

set service-profile user-idle-timeoutChapter 12AP Commands365Access Enabled.Usage If you disable a rate, you cannot use the rate as a mandatory ra

set system countrycodeChapter 4System Services Commands33set system countrycodeDefines the country-specific IEEE 802.11 regulations to enforce on the

set service-profile web-portal-formChapter 12AP Commands366Access Enabled.Usage The user idle timeout does not apply to active voice sessions (on-

set service-profile web-portal-formChapter 12AP Commands367Usage It is recommended that you create a subdirectory for the custom page and place all

set service-profile web-portal-session-timeoutChapter 12AP Commands368l set web-portal on page 240l show service-profile on page 413set service-profil

set service-profile wep active-multicast-indexChapter 12AP Commands369Examples The following command allows Web Portal Web Authentication sessions to

set service-profile wep active-unicast-indexChapter 12AP Commands370set service-profile wep active-unicast-indexSpecifies the static Wired-Equivalent

set service-profile wep key-indexChapter 12AP Commands371set service-profile wep key-indexSets the value of one of four static Wired-Equivalent Privac

set service-profile wpa-ieChapter 12AP Commands372set service-profile wpa-ieEnables the WPA information element (IE) in wireless frames. The WPA IE ad

show ap acl hitsChapter 12AP Commands373show ap acl hitsshow ap acl mapshow ap acl resource-usageshow ap arpNote. This command is not supported.Note.

show ap configChapter 12AP Commands374show ap configDisplays global and radio-specific settings for an AP.Syntax show ap config [ap-number [radio {1

show ap configChapter 12AP Commands375Table 35. Output for show ap configField DescriptionAP Index number that identifies the UNIVERGE WL Access Point

set system countrycodeChapter 4System Services Commands34Israel IL Italy IT Japan JP Liechtenstein LILuxembourg LU Malaysia MY Mexico MX Netherlands N

show ap configChapter 12AP Commands376mode Radio state:• Enabled• Disabledchannel Channel number.antennatype External antenna model, if applicable.tx

show ap configChapter 12AP Commands377See Also l set ap on page 54l set ap bias on page 282l set ap fingerprint on page 288l set ap name on page 290

show ap countersChapter 12AP Commands378show ap countersDisplays AP and radio statistics counters.Syntax show ap counters [ap-number [radio {1 | 2}]

show ap countersChapter 12AP Commands379 6.0: 0 0 0 0 0 0 0 0 51 9.0: 0 0 0 0 1 172 0 0 5311.0: 0 0 0 0 17 998 0 0 3512.0: 0 0 0 0 0 0 0 0 2618.0: 0 0

show ap countersChapter 12AP Commands380TKIP Pkt Replays Number of TKIP packets that were resent to the UNIVERGE WL Access Points by a client. A low v

show ap countersChapter 12AP Commands381Radio Adjusted Tx Pwr Current power level set on the radio. If RF Auto-Tuning of power is enabled, this value

show ap countersChapter 12AP Commands382MultiBytDrop Number of multicast bytes dropped by the radio due to a buffer overflow on the UNIVERGE WL Access

show ap countersChapter 12AP Commands383Transmit Retries Number of times the radio retransmitted a unicast packet because it was not acknowledged. The

show ap countersChapter 12AP Commands384See Also show sessions network on page 536TxUniByte Number of unicast bytes transmitted by the radio.TxMulti

show ap fdbChapter 12AP Commands385show ap fdbshow ap qos-statsDisplays statistics for UNIVERGE WL Access Points forwarding queues. Syntax show ap q

set system idle-timeoutChapter 4System Services Commands35Defaults The factory default country code is None.Access Enabled.Usage You must set th

show ap etherstatsChapter 12AP Commands386show ap etherstatsDisplays Ethernet statistics for an Ethernet port on a UNIVERGE WL Access Point.Syntax s

show ap etherstatsChapter 12AP Commands387Examples The following command displays Ethernet statistics for the Ethernet ports on UNIVERGE WL Access Po

show ap etherstatsChapter 12AP Commands388RxOverruns Number of frames known to be lost due to a temporary lack of hardware resources.RxDiscards Number

show ap groupChapter 12AP Commands389show ap groupDisplays configuration information and load-balancing status for AP groups.Syntax show ap group [n

show ap statusChapter 12AP Commands390See Also l show ap config on page 374show ap statusDisplays AP and radio status information.Syntax show ap s

show ap statusChapter 12AP Commands391Defaults None.Access Enabled.Examples The following command displays the status of an AP:PROPMT# show ap st

show ap statusChapter 12AP Commands392Table 40. Output for show ap statusField DescriptionAP Identifier for the UNIVERGE WL Access Points on the UNIVE

show ap statusChapter 12AP Commands393State State of the AP:• init—The AP has been recognized by the UNIVERGE WL Controller but has not yet begun boot

show ap statusChapter 12AP Commands394CPU info Specifications and identification of the CPU.Uptime Amount of time since the AP booted using this link.

show ap statusChapter 12AP Commands395Radio 1 typeRadio 2 type(cont.)• Radar Detected indicates that DFS has detected radar on the channel. When this

UNIVERGE WL Command ReferenceVersion 1.0ii3 Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

set system ip-addressChapter 4System Services Commands36Access Enabled.Usage This command applies to all types of CLI management sessions: console

show ap statusChapter 12AP Commands396bssid, ssid SSIDs configured on the radio and their BSSIDs.load balance Whether RF load balancing is enabled for

show ap vlanChapter 12AP Commands397show ap vlanshow auto-tune attributesDisplays the current values of the RF attributes RF Auto-Tuning uses to decid

show auto-tune attributesChapter 12AP Commands398Access Enabled.Examples The following command displays RF attribute information for radio 1 on the

show auto-tune neighborsChapter 12AP Commands399l set radio-profile auto-tune channel-config on page 301l set radio-profile auto-tune channel-holddown

show auto-tune neighborsChapter 12AP Commands400Information is displayed for a radio if the radio sends beacon frames or responds to probe requests. E

show ap boot-configurationChapter 12AP Commands401l show auto-tune attributes on page 397l show radio-profile on page 408show ap boot-configurationDis

show ap boot-configurationChapter 12AP Commands402Table 44. Output for show ap boot-configurationField DescriptionAP UNIVERGE WL Access Points number.

show ap connectionChapter 12AP Commands403show ap connectionDisplays the system IP address of the UNIVERGE WL Controller that booted a UNIVERGE WL Acc

show ap connectionChapter 12AP Commands404If a UNIVERGE WL Access Points is configured on this UNIVERGE WL Controller (or another UNIVERGE WL Controll

show ap globalChapter 12AP Commands405See Also l show ap config on page 374l show ap global on page 405l show ap unconfigured on page 407show ap glo

set system locationChapter 4System Services Commands37See Also l clear system on page 23l set interface on page 111l show system on page 40set syste

show ap globalChapter 12AP Commands406To show information only for UNIVERGE WL Access Points that have active connections, use the show ap connection

show ap unconfiguredChapter 12AP Commands407See Also l set ap on page 54l set ap bias on page 282l show ap config on page 374l show ap connection on

show radio-profileChapter 12AP Commands408See Also l show ap connection on page 403l show ap global on page 405show radio-profileDisplays radio prof

show radio-profileChapter 12AP Commands409Syntax show radio-profile {name | ?}Defaults None.Access Enabled.Usage UNIVERGE WL Control System co

show radio-profileChapter 12AP Commands410Max Rx Lifetime Number of milliseconds that a frame scheduled to be transmitted by a radio in the radio prof

show radio-profileChapter 12AP Commands411Tune Power Interval Interval, in seconds, at which RF Auto-Tuning decides whether to change the power level

show radio-profileChapter 12AP Commands412See Also l set radio-profile active-scan on page 300l set radio-profile auto-tune channel-config on page 3

show service-profileChapter 12AP Commands413l set radio-profile auto-tune power-interval on page 306l set radio-profile beacon-interval on page 307l s

show service-profileChapter 12AP Commands414Enforce SODA checks: yes SODA remediation ACL:Custom success web-page: Custom failure web-page:Custom logo

show service-profileChapter 12AP Commands415DHCP restrict Indicates whether DHCP Restrict is enabled. When this feature is enabled, UNIVERGE WL Contro

set system nameChapter 4System Services Commands38set system nameChanges the name of the UNIVERGE WL Controller from the default system name and also

show service-profileChapter 12AP Commands416Enforce SODA checks Whether a client is allowed access to the network after it has downloaded and run the

show service-profileChapter 12AP Commands417COS CoS value assigned by the UNIVERGE WL Access Points to all user traffic, if static CoS is enabled. (If

show service-profileChapter 12AP Commands418Web Portal ACL Name of the ACL used to filter traffic for Web Portal users associated with this service pr

show service-profileChapter 12AP Commands419WEP Multicast Index Index of the static WEP key used to encrypt multicast traffic on an encrypted SSID.Sha

show service-profileChapter 12AP Commands420See Also l set service-profile attr on page 334l set service-profile auth-dot1x on page 336l set service

show service-profileChapter 12AP Commands421l set service-profile cipher-wep104 on page 344l set service-profile cipher-wep40 on page 346l set service

show service-profile cac sessionChapter 12AP Commands422show service-profile cac sessionDisplays current session counts on all UNIVERGE WL Access Poin

show voip max-sessionsChapter 12AP Commands423show voip max-sessionsDisplays the number of sessions and per-session bandwidth that can be supported by

show voip summaryChapter 12AP Commands424See Also l set radio-profile max-voip-bw on page 313l set radio-profile max-voip-sessions on page 315show v

show voip summaryChapter 12AP Commands425Table 52 describes the fields in this display.Table 52. Output for show voip summaryField DescriptionPort UNI

show banner motdChapter 4System Services Commands39show banner motdShows the banner that was configured with the set banner motd command.Syntax show

show voip summaryChapter 12AP Commands426See Also l set radio-profile max-voip-bw on page 313l set radio-profile max-voip-sessions on page 315

IGMP Snooping Commands42713IGMP Snooping CommandsUse Internet Group Management Protocol (IGMP) snooping commands to configure and manage multicast tra

clear igmp statisticsChapter 13IGMP Snooping Commands428clear igmp statisticsClears IGMP statistics counters on one VLAN or all VLANs on a UNIVERGE WL

set igmp lmqiChapter 13IGMP Snooping Commands429success: change accepted.See Also show igmp on page 438set igmp lmqiChanges the IGMP last member que

set igmp mrouterChapter 13IGMP Snooping Commands430set igmp mrouterAdds or removes a port in a UNIVERGE WL Controller list of ports on which it forwar

set igmp mrsol mrsiChapter 13IGMP Snooping Commands431Defaults Multicast router solicitation is disabled on all VLANs by default.Access Enabled.Ex

set igmp oqiChapter 13IGMP Snooping Commands432See Also set igmp mrsol on page 430set igmp oqiChanges the IGMP other-querier-present interval timer

set igmp proxy-reportChapter 13IGMP Snooping Commands433l set igmp querier on page 436l set igmp mrouter on page 430l set igmp rv on page 437set igmp

set igmp qiChapter 13IGMP Snooping Commands434Syntax set igmp qi seconds [vlan vlan-id]Defaults The default query interval is 125 seconds.Access

set igmp qriChapter 13IGMP Snooping Commands435set igmp qriChanges the IGMP query response interval timer on one VLAN or all VLANs on a UNIVERGE WL Co

show systemChapter 4System Services Commands40The overall field shows the CPU load as a percentage from the time the UNIVERGE WL Controller was booted

set igmp querierChapter 13IGMP Snooping Commands436set igmp querierEnables or disables the IGMP pseudo-querier on a UNIVERGE WL Controller , on one VL

set igmp rvChapter 13IGMP Snooping Commands437Syntax set igmp receiver port port-list {enable | disable}Defaults By default, no ports are static m

show igmpChapter 13IGMP Snooping Commands438Defaults The default robustness value for all VLANs is 2.Access Enabled.Examples The following exampl

show igmpChapter 13IGMP Snooping Commands439Port Mrouter-IPaddr Mrouter-MAC Type TTL---- --------------- ----------------- ----- -----10 192.28.7.5 00

show igmpChapter 13IGMP Snooping Commands440Table 53. Output for show igmpField DescriptionVLAN VLAN name. UNIVERGE WL Control System displays informa

show igmpChapter 13IGMP Snooping Commands441Type How the UNIVERGE WL Controller learned that the port is a multicast router port:• conf — Static multi

show igmpChapter 13IGMP Snooping Commands442See Also l show igmp mrouter on page 443l show igmp querier on page 444l show igmp receiver-table on pag

show igmp mrouterChapter 13IGMP Snooping Commands443show igmp mrouterDisplays the multicast routers in a UNIVERGE WL Controller subnet, on one VLAN or

show igmp querierChapter 13IGMP Snooping Commands444See Also l set igmp mrouter on page 430l show igmp mrouter on page 443show igmp querierDisplays

show igmp querierChapter 13IGMP Snooping Commands445Defaults None.Access Enabled.Examples The following command displays querier information for

show systemChapter 4System Services Commands41Table 2. show system Output Field DescriptionProduct Name UNIVERGE WL Controller model number.System Nam

show igmp receiver-tableChapter 13IGMP Snooping Commands446See Also set igmp querier on page 436show igmp receiver-tableDisplays the receivers to wh

show igmp receiver-tableChapter 13IGMP Snooping Commands447Examples The following command displays all multicast receivers in VLAN orange:PROMT# show

show igmp statisticsChapter 13IGMP Snooping Commands448See Also set igmp receiver on page 436show igmp statisticsDisplays IGMP statistics.Syntax s

show igmp statisticsChapter 13IGMP Snooping Commands449Mrouter-Sol 50 101 0DVMRP 4 4 0PIM V1 0 0 0PIM V2 0 0 0Topology notifications: 0Packets with un

show igmp statisticsChapter 13IGMP Snooping Commands450IGMP message type Type of IGMP message, continued:• Mrouter-Term—Multicast router termination m

show igmp statisticsChapter 13IGMP Snooping Commands451See Also clear igmp statistics on page 428Packets with unknown IGMP typeNumber of multicast p

show igmp statisticsChapter 13IGMP Snooping Commands452

Security ACL Commands45314Security ACL CommandsUse security ACL commands to configure and monitor security access control lists (ACLs). Security ACLs

clear security aclChapter 14Security ACL Commands454clear security aclClears a specified security ACL, an access control entry (ACE), or all security

clear security aclChapter 14Security ACL Commands455set security acl ip acl_135 (hits #2 0)---------------------------------------------------------1.

show systemChapter 4System Services Commands42Fan status Operating status of the three WL5100 cooling fans:• OK—Fan is operating.• Failed—Even as for

clear security acl mapChapter 14Security ACL Commands456clear security acl mapDeletes the mapping between a security ACL and a virtual LAN (VLAN), one

clear security acl mapChapter 14Security ACL Commands457Defaults None.Access Enabled.Usage To clear a security ACL map, type the name of the ACL

commit security aclChapter 14Security ACL Commands458commit security aclSaves a security ACL, or all security ACLs, in the edit buffer to the running

rollback security aclChapter 14Security ACL Commands459See Also l clear security acl on page 454l rollback security acl on page 459l set security ac

set security aclChapter 14Security ACL Commands4603. deny SRC source IP 192.168.1.234 255.255.255.255 enable-hitsPROMPT# rollback security acl acl_122

set security aclChapter 14Security ACL Commands461By ICMP packetsset security acl ip acl-name {permit [cos cos] | deny} icmp {source-ip-addr mask | an

set security aclChapter 14Security ACL Commands462cos cos For permitted packets, a class-of-service (CoS) level for packet handling. Specify a value f

set security aclChapter 14Security ACL Commands463operator port [port2] Operand and port number(s) for matching TCP or UDP packets to the number of th

set security aclChapter 14Security ACL Commands464precedence precedenceFilters packets by precedence level. Specify a value from 0 through 7: • 0—rout

set security aclChapter 14Security ACL Commands465Defaults By default, permitted packets are classified based on DSCP value, which is converted into

show systemChapter 4System Services Commands43See Also l clear system on page 23l set system contact on page 32l set system countrycode on page 33l

set security aclChapter 14Security ACL Commands466The following command creates acl_125 by defining an ACE that denies TCP packets from source IP addr

set security acl mapChapter 14Security ACL Commands467set security acl mapAssigns a committed security ACL to a VLAN, physical port or ports, virtual

set security acl mapChapter 14Security ACL Commands468Defaults None.Access Enabled.Usage Before you can map a security ACL, you must use the com

set security acl hit-sample-rateChapter 14Security ACL Commands469set security acl hit-sample-rateSpecifies the time interval, in seconds, at which th

show security aclChapter 14Security ACL Commands470show security aclDisplays a summary of the security ACLs that are mapped.Syntax show security acl

show security acl editbufferChapter 14Security ACL Commands471show security acl editbufferDisplays a summary of the security ACLs that have not yet be

show security acl hitsChapter 14Security ACL Commands472l show security acl info on page 473show security acl hitsDisplays the number of packets filte

show security acl infoChapter 14Security ACL Commands473show security acl infoDisplays the contents of a specified security ACL or all security ACLs t

show security acl mapChapter 14Security ACL Commands474set security acl ip acl_123 (ACEs 3, add 3, del 0, modified 0)---------------------------------

show security acl resource-usageChapter 14Security ACL Commands475show security acl resource-usageDisplays statistics about the resources used by secu

show tech-supportChapter 4System Services Commands44show tech-supportProvides an in-depth snapshot of the status of the UNIVERGE WL Controller, which

show security acl resource-usageChapter 14Security ACL Commands476Static default action : FalseNo per-user (MAC) mapping : TrueOut mapping : FalseIn m

show security acl resource-usageChapter 14Security ACL Commands477Leaves in secondaryNumber of ACL data entries stored in secondary leaf memory. Sum n

show security acl resource-usageChapter 14Security ACL Commands478Non-IP rules Non-IP security ACE mapping on the UNIVERGE WL Controller: • True—Non-I

show security acl resource-usageChapter 14Security ACL Commands479No VLAN or PORT mappingApplication of security ACLs to UNIVERGE WL Controller VLANs

show security acl resource-usageChapter 14Security ACL Commands480

Cryptography Commands48115Cryptography CommandsA digital certificate is a form of electronic identification for computers. The UNIVERGE WL Controller

crypto ca-certificateChapter 15Cryptography Commands482crypto ca-certificateInstalls a certificate authority’s own PKCS #7 certificate into the UNIVER

crypto certificateChapter 15Cryptography Commands483Defaults None.Access Enabled.Usage The Privacy-Enhanced Mail protocol (PEM) format is used f

crypto certificateChapter 15Cryptography Commands484Syntax crypto certificate {admin | eap | web} PEM-formatted certificateDefaults None.Access

crypto generate keyChapter 15Cryptography Commands485-----BEGIN CERTIFICATE-----MIIBdTCP3wIBADA2MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQOExGjAYBgNVBAMUEXR1Y2

Port Commands455Port CommandsThis chapter presents port commands alphabetically. Use the following table to locate commands in this chapter based on t

crypto generate requestChapter 15Cryptography Commands486Defaults None.Access Enabled.Usage You can overwrite a key by generating another key of

crypto generate requestChapter 15Cryptography Commands487Syntax crypto generate request {admin | eap | web}After type the command, you are prompted

crypto generate requestChapter 15Cryptography Commands488Access Enabled.Usage To use this command, you must already have generated a public-privat

crypto generate self-signedChapter 15Cryptography Commands489crypto generate self-signedGenerates a self-signed certificate for either an administrati

crypto generate self-signedChapter 15Cryptography Commands490Defaults None.Access Enabled.Usage To use this command, you must already have gener

crypto otpChapter 15Cryptography Commands491crypto otpSets a one-time password (OTP) for use with the crypto pkcs12 command. Syntax crypto otp {admi

crypto pkcs12Chapter 15Cryptography Commands492Defaults None.Access Enabled.Usage The password allows the public-private key pair and certificat

crypto pkcs12Chapter 15Cryptography Commands493Defaults The password you enter with the crypto otp command must be the same as the one protecting th

show crypto ca-certificateChapter 15Cryptography Commands494show crypto ca-certificateDisplays information about the certificate authority’s PEM-encod

show crypto certificateChapter 15Cryptography Commands495See Also l crypto ca-certificate on page 482l show crypto certificate on page 495show crypt

Introducing the UNIVERGE WL System11Introducing the UNIVERGE WL SystemThis guide explains how to configure and manage a UNIVERGE WL Wireless Controlle

clear port countersChapter 5Port Commands46Syntax clear ap {ap-number | all}Defaults None.Access Enabled.Examples The following command clears

show crypto certificateChapter 15Cryptography Commands496Access Enabled.Usage You must have generated a self-signed certificate or obtained a cert

show crypto key sshChapter 15Cryptography Commands497show crypto key sshDisplays SSH authentication key information. This command displays the checksu

show crypto key sshChapter 15Cryptography Commands498

RADIUS and Server Groups Commands49916RADIUS and Server Groups CommandsUse RADIUS commands to set up communication between a UNIVERGE WL Controller an

clear radiusChapter 16RADIUS and Server Groups Commands500clear radiusResets parameters that were globally configured for RADIUS servers to their defa

clear radius client system-ipChapter 16RADIUS and Server Groups Commands501success: change accepted.PROMPT# clear radius timeoutsuccess: change accept

clear radius serverChapter 16RADIUS and Server Groups Commands502clear radius serverRemoves the named RADIUS server from the UNIVERGE WL Controller co

set radiusChapter 16RADIUS and Server Groups Commands503Access Enabled.Usage Deleting a server group removes the server group from the configurati

set radiusChapter 16RADIUS and Server Groups Commands504Syntax set radius {deadtime minutes | encrypted-key string | key string | retransmit number

set radiusChapter 16RADIUS and Server Groups Commands505Defaults Global RADIUS parameters have the following default values:l deadtime—0 (zero) minu

clear port nameChapter 5Port Commands47clear port nameRemoves the name assigned to a port.Syntax clear port port-list nameDefaults None.Access E

set radius client system-ipChapter 16RADIUS and Server Groups Commands506set radius client system-ipCauses all RADIUS requests to be sourced from the

set radius serverChapter 16RADIUS and Server Groups Commands507Defaults Default values are listed below:address ip-address IP address of the RADIUS

set radius serverChapter 16RADIUS and Server Groups Commands508l auth-port—UDP port 1812l acct-port—UDP port 1813l timeout—5 secondsl retransmit—3 (th

set server groupChapter 16RADIUS and Server Groups Commands509l set radius on page 503l set server group on page 509l show aaa on page 240set server g

set server group load-balanceChapter 16RADIUS and Server Groups Commands510l show aaa on page 240set server group load-balanceEnables or disables load

set server group load-balanceChapter 16RADIUS and Server Groups Commands511See Also l clear server group on page 502l clear radius server on page 50

set server group load-balanceChapter 16RADIUS and Server Groups Commands512

802.1X Management Commands51317802.1X Management CommandsUse 802. IEEE X management commands to modify the default settings for IEEE 802.1X sessions o

clear dot1x bonded-periodChapter 17802.1X Management Commands514clear dot1x bonded-periodResets the Bonded Auth period to its default value. Syntax

clear dot1x max-reqChapter 17802.1X Management Commands515clear dot1x max-reqResets to the default setting the number of Extensible Authentication Pro

monitor port countersChapter 5Port Commands48Defaults All types of statistics are displayed for ports. UNIVERGE WL Control System refreshes the stat

clear dot1x reauth-maxChapter 17802.1X Management Commands516clear dot1x reauth-maxResets the maximum number of reauthorization attempts to the defaul

clear dot1x timeout auth-serverChapter 17802.1X Management Commands517clear dot1x timeout auth-serverResets to the default setting the number of secon

clear dot1x tx-periodChapter 17802.1X Management Commands518clear dot1x tx-periodResets to the default setting the number of seconds that must elapse

set dot1x key-txChapter 17802.1X Management Commands519Usage Normally, the Bonded Auth period needs to be set only if the network has Bonded Auth cl

set dot1x max-reqChapter 17802.1X Management Commands520Examples Type the following command to enable key transmission:PROMPT# set dot1x key-tx enabl

set dot1x reauthChapter 17802.1X Management Commands521Syntax set dot1x quiet-period secondsDefaults The default is 60 seconds.Access Enabled.Ex

set dot1x reauth-maxChapter 17802.1X Management Commands522l show dot1x on page 526set dot1x reauth-maxSets the number of reauthentication attempts th

set dot1x timeout auth-serverChapter 17802.1X Management Commands523Access Enabled.Usage You also can use the RADIUS session-timeout attribute to

set dot1x timeout supplicantChapter 17802.1X Management Commands524set dot1x timeout supplicantSets the number of seconds that must elapse before the

set dot1x wep-rekeyChapter 17802.1X Management Commands525success: dot1x tx-period set to 300.See Also l clear dot1x tx-period on page 518l show dot

monitor port countersChapter 5Port Commands49For error reporting, the cyclic redundancy check (CRC) errors include misalignment errors. Jumbo packets

set dot1x wep-rekey-periodChapter 17802.1X Management Commands526set dot1x wep-rekey-periodSets the interval for rotating the WEP broadcast and multic

show dot1xChapter 17802.1X Management Commands527Examples Type the following command to display the 802.1X clients:PROMPT# show dot1x clientsMAC Addr

show dot1xChapter 17802.1X Management Commands528Enters Connecting: 709Logoffs While Connecting: 112Enters Authenticating: 467Success While Authentica

show dot1xChapter 17802.1X Management Commands529Reauths While AuthenticatingNumber of times that the UNIVERGE WL Controller state wildcard transition

show dot1xChapter 17802.1X Management Commands530

Session Management Commands53118Session Management CommandsUse session management commands to display and clear administrative and network user sessio

clear sessions networkChapter 18Session Management Commands532Defaults None.Access Enabled.Examples To clear all administrator sessions type the

clear sessions networkChapter 18Session Management Commands533Syntax clear sessions network {user user-glob | mac-addr mac-addr-glob | vlan vlan-glo

show sessionsChapter 18Session Management Commands534To clear session 9, type the following command:Controller# clear sessions network session-id 9SM

show sessionsChapter 18Session Management Commands535Defaults None.Access All, except for show sessions telnet client, which has enabled access.Ex

monitor port countersChapter 5Port Commands50 Table 4. Output for monitor port countersStatistics Option Field DescriptionDisplayed for All OptionsPor

show sessions networkChapter 18Session Management Commands536See Also clear sessions on page 531show sessions networkDisplays summary or verbose inf

show sessions networkChapter 18Session Management Commands537Syntax show sessions network [user user-glob | mac-addr mac-addr-glob | ssid ssid-name

show sessions networkChapter 18Session Management Commands538Usage UNIVERGE WL Control System displays information about network sessions in three t

show sessions networkChapter 18Session Management Commands539EXAMPLE\Havel 13* 10.10.10.40 vlan-eng ap 1/22 sessions match criteria (of 3 total)(Tabl

show sessions networkChapter 18Session Management Commands540EAP Method: NONE, using server 172.16.0.1Session statistics as updated from AP:Unicast pa

show sessions networkChapter 18Session Management Commands541Table 65. Additional show sessions network verbose OutputField DescriptionClient MAC MAC

show sessions networkChapter 18Session Management Commands542now on Shows the following information about the UNIVERGE WL Access Points and radio the

show sessions networkChapter 18Session Management Commands543Vlan-Name(and other attributes if set)Authorization attributes for the user and how they

show sessions networkChapter 18Session Management Commands544State Status of the session:• AUTH, ASSOC REQ—Client is being associated by the 802.1X pr

show sessions networkChapter 18Session Management Commands545Tag System-wide supported VLAN tag type. Session Start Indicates when the session started

monitor port countersChapter 5Port Commands51receive-errors Rx Crc Number of frames received by the port that had the correct length but contained an

show sessions networkChapter 18Session Management Commands546See Also clear sessions network on page 532Number of packets with encryption errorsTota

RF Detection Commands54719RF Detection CommandsUNIVERGE WL Control System automatically performs RF detection scans on enabled and disabled radios to

clear rfdetect attack-listChapter 19RF Detection Commands548clear rfdetect attack-listRemoves a MAC address from the attack list.Syntax clear rfdete

clear rfdetect black-listChapter 19RF Detection Commands549See Also l set rfdetect attack-list on page 552l show rfdetect attack-list on page 559cle

clear rfdetect ssid-listChapter 19RF Detection Commands550Access Enabled.Examples The following command removes BSSID aa:bb:cc:11:22:33 from the ig

rfpingChapter 19RF Detection Commands551Syntax clear rfdetect vendor-list {client mac-addr | all}Defaults None.Access Enabled.Examples The foll

set rfdetect attack-listChapter 19RF Detection Commands552Examples The following command tests the RF link between the UNIVERGE WL Controller and the

set rfdetect black-listChapter 19RF Detection Commands553Syntax set rfdetect attack-list mac-addrDefaults The attack list is empty by default.Acce

set rfdetect ignoreChapter 19RF Detection Commands554Defaults The client black list is empty by default.Access Enabled.Usage In addition to manu

set rfdetect logChapter 19RF Detection Commands555Usage Use this command to identify third-party APs and other devices you are already aware of and

monitor port countersChapter 5Port Commands52collisions Single Coll Total number of frames transmitted that experienced one collision before 64 bytes

set rfdetect signatureChapter 19RF Detection Commands556Usage The log messages for rogues are generated only on the seed and appear only in the seed

set rfdetect ssid-listChapter 19RF Detection Commands557Examples The following command enables UNIVERGE WL Access Points signatures on a UNIVERGE WL

set rfdetect vendor-listChapter 19RF Detection Commands558See Also l clear rfdetect ssid-list on page 550l show rfdetect ssid-list on page 573set rf

show rfdetect attack-listChapter 19RF Detection Commands559The trailing 00:00:00 value is required.See Also l clear rfdetect vendor-list on page 550

show rfdetect clientsChapter 19RF Detection Commands560Examples The following example shows the client black list on UNIVERGE WL Controller:PROPMT# s

show rfdetect clientsChapter 19RF Detection Commands561The following command displays more details about a specific client:PROPMT# show rfdetect clien

show rfdetect clientsChapter 19RF Detection Commands562Type Classification of the rogue device:• rogue—Wireless device that is on the network but is n

show rfdetect countermeasuresChapter 19RF Detection Commands563show rfdetect countermeasuresDisplays the current status of countermeasures against rog

show rfdetect countersChapter 19RF Detection Commands564PROPMT# show rfdetect countermeasuresTotal number of entries: 190Rogue MAC Type Countermeasure

show rfdetect countersChapter 19RF Detection Commands565Syntax show rfdetect countersDefaults None.Access Enabled.Examples The following comman

reset portChapter 5Port Commands53See Also show port counters on page 62reset portResets a port by toggling its link state and Power over Ethernet s

show rfdetect dataChapter 19RF Detection Commands566show rfdetect dataDisplays information about the APs detected by a UNIVERGE WL Controller.Syntax

show rfdetect dataChapter 19RF Detection Commands567See Also l show rfdetect mobility-domain on page 568l show rfdetect visible on page 574Table 71.

show rfdetect ignoreChapter 19RF Detection Commands568show rfdetect ignoreDisplays the BSSIDs of third-party devices that UNIVERGE WL Control System i

show rfdetect mobility-domainChapter 19RF Detection Commands569Usage This command is valid only on the seed UNIVERGE WL Controller of the Mobility D

show rfdetect mobility-domainChapter 19RF Detection Commands570Switch-IPaddress: 10.3.8.103 Port/Radio/Ch: ap 1/1/1 Mac: 00:0b:0e:76:56:82Device-type:

show rfdetect mobility-domainChapter 19RF Detection Commands571Table 72 and Table 73 describe the fields in these displays.Table 72. show rfdetect mob

show rfdetect mobility-domainChapter 19RF Detection Commands572Type Classification of the rogue device:• rogue—Wireless device that is on the network

show rfdetect ssid-listChapter 19RF Detection Commands573See Also l show rfdetect data on page 566l show rfdetect visible on page 574show rfdetect s

show rfdetect visibleChapter 19RF Detection Commands574Syntax show rfdetect vendor-listDefaults None.Access Enabled.Examples The following exam

show rfdetect visibleChapter 19RF Detection Commands575Defaults None.Access Enabled.Usage If a UNIVERGE WL Access Points radio is supporting mo

set apChapter 5Port Commands54Examples The following command resets port 1:PROMPT# reset port 1See Also set port on page 55set apConfigures a UNIVE

show rfdetect visibleChapter 19RF Detection Commands576Table 74 describes the fields in this display.See Also l show rfdetect data on page 566l show

File Management Commands57720File Management CommandsUse file management commands to manage system files and to display software and boot information.

backupChapter 20File Management Commands578backupCreates an archive of UNIVERGE WL Control system files and optionally, user file, in Unix tape archiv

clear boot backup-configurationChapter 20File Management Commands579The maximum supported file size is 32 MB. If the file size of the tarball is too l

clear boot configChapter 20File Management Commands580Syntax clear boot backup-configurationDefaults None.Access Enabled.Examples The following

copyChapter 20File Management Commands581copyPerforms the following copy operations:l Copies a file from a TFTP server to nonvolatile storage.l Copies

copyChapter 20File Management Commands582Usage The filename and file:filename URLs are equivalent. You can use either URL to refer to a file in a UN

deleteChapter 20File Management Commands583The following commands rename test-config to new-config by copying it from one name to the other in the sam

dirChapter 20File Management Commands584Syntax delete urlDefaults None.Access Enabled.Usage You might want to copy the file to a TFTP server a

dirChapter 20File Management Commands585Syntax dir [subdirname] | [file:] | [core:] | [boot0:] | [boot1:]Defaults None. Access Enabled.Examples

set portChapter 5Port Commands55Defaults None. Access Enabled.Examples The following command configures UNIVERGE WL Access Points 1 for UNIVERGE

dirChapter 20File Management Commands586PROMPT# dir old================================================================================file:Filename S

load configChapter 20File Management Commands587Table 75 describes the fields in the dir output.See Also l copy on page 581l delete on page 583load

load configChapter 20File Management Commands588Syntax load config [url]Defaults The default file location is nonvolatile storage. If you do not s

md5Chapter 20File Management Commands589See Also l save config on page 594l show boot on page 597l show config on page 600md5Calculates the MD5 chec

mkdirChapter 20File Management Commands590Syntax mkdir [subdirname]Defaults None. Access Enabled.Examples The following commands create a subdi

reset systemChapter 20File Management Commands591reset systemRestarts a UNIVERGE WL Controller and reboots the software.Syntax reset system [force]D

restoreChapter 20File Management Commands592restoreUnzips a system archive created by the backup command and copies the files from the archive onto th

restoreChapter 20File Management Commands593Usage If a file in the archive has a counterpart on the UNIVERGE WL Controller, the archive version of t

rmdirChapter 20File Management Commands594rmdirRemoves a subdirectory from nonvolatile storage. Syntax rmdir [subdirname]Defaults None. Access E

set boot backup-configurationChapter 20File Management Commands595Defaults By default, UNIVERGE WL Control System saves the running configuration as

DocumentationChapter 1Introducing the UNIVERGE WL System2The UNIVERGE WL System consists of the following components:l UNIVERGE WLMS—A full-featured g

set port duplexChapter 5Port Commands56Defaults All ports are enabled.Access Enabled.Usage A port that is administratively disabled cannot send

set boot configuration-fileChapter 20File Management Commands596Syntax set boot backup-configuration filenameDefaults By default, there is no back

set boot partitionChapter 20File Management Commands597Examples The following command sets the boot configuration file to testconfig1:PROMPT# set boo

show bootChapter 20File Management Commands598Syntax show bootDefaults None.Access Access.Examples The following command shows the boot informa

show bootChapter 20File Management Commands599See Also l clear boot config on page 580l reset system on page 591l set boot configuration-file on pag

show configChapter 20File Management Commands600show configDisplays the configuration running on the UNIVERGE WL Controller.Syntax show config [area

show configChapter 20File Management Commands601area area Configuration area. You can specify one of the following:• aaa• acls•ap• arp• eapol• httpd•

show versionChapter 20File Management Commands602Defaults None.Access Enabled.Usage If you do not use one of the optional parameters, configurat

show versionChapter 20File Management Commands603Examples The following command displays version information for a UNIVERGE WL Controller:PROMPT# sho

show versionChapter 20File Management Commands604Table 77 describes the fields in the show version output.See Also show boot on page 597Table 77. Ou

Trace Commands60521Trace CommandsUse trace commands to perform diagnostic routines. While UNIVERGE WL Control System allows you to run many types of t

set port nameChapter 5Port Commands57Usage This command is allowed only when a current port speed is 10/100Mbps and current negotiation mode is not

clear log traceChapter 21Trace Commands606clear log traceDeletes the log messages stored in the trace buffer.Syntax clear log traceDefaults None.A

save traceChapter 21Trace Commands607To clear the session manager trace, type the following command:PROMPT# clear trace smsuccess: clear trace smSee A

set trace authorizationChapter 21Trace Commands608Syntax set trace authentication [mac-addr mac-address] [port port-num] [user username] [level leve

set trace authorizationChapter 21Trace Commands609Syntax set trace authorization [mac-addr mac-address] [port port-num] [user username] [level level

set trace dot1xChapter 21Trace Commands610set trace dot1xTraces 802.1X sessions.Syntax set trace dot1x [mac-addr mac-address] [port port-num] [user

set trace smChapter 21Trace Commands611set trace smTraces session manager activity. Syntax set trace sm [mac-addr mac-address] [port port-num] [user

show traceChapter 21Trace Commands612Syntax show trace [all]Defaults None.Access Enabled.Examples To view the traces currently running, type th

Snoop Commands61322Snoop CommandsUse snoop commands to monitor wireless traffic, by using a UNIVERGE WL Access Point as a sniffing device. The UNIVERG

clear snoopChapter 22Snoop Commands614clear snoopDeletes a snoop filter.Syntax clear snoop filter-nameDefaults None.Access Enabled.Examples The

clear snoop mapChapter 22Snoop Commands615Examples The following command removes snoop filter snoop2 from radio 2 on UNIVERGE WL Access Points 3:PROP

set port negotiationChapter 5Port Commands58set port negotiationDisables or reenables autonegotiation on gigabit Ethernet or 10/100 Ethernet ports. Sy

set snoopChapter 22Snoop Commands616set snoopConfigures a snoop filter.Syntax set snoop filter-name [condition-list] [observer ip-addr] [snap-length

set snoopChapter 22Snoop Commands617Defaults No snoop filters are configured by default.Access Enabled.Usage Traffic that matches a snoop filter

set snoop mapChapter 22Snoop Commands618The following command configures a snoop filter named snoop2 that matches on all data traffic between the devi

set snoop modeChapter 22Snoop Commands619Usage You can map the same filter to more than one radio. You can map up to eight filters to the same radio

show snoopChapter 22Snoop Commands620Access Enabled.Usage The filter mode is retained even if you disable and reenable the radio, or restart the U

show snoop infoChapter 22Snoop Commands621l set snoop map on page 618l show snoop map on page 621show snoop infoShows the configured snoop filters.Syn

show snoop statsChapter 22Snoop Commands622Defaults None.Access Enabled.Usage To display the mappings for all snoop filters, use the show snoop

show snoop statsChapter 22Snoop Commands623Examples The following command shows statistics for snoop filter snoop1:PROPMT# show snoop stats snoop1Fil

show snoop statsChapter 22Snoop Commands624

System Log Commands62523System Log CommandsUse the system log commands to record information for monitoring and troubleshooting. UNIVERGE WL Control S

set port negotiationChapter 5Port Commands59It is recommended that you do not configure the mode of a UNIVERGE WL Controller port so that one side of

set logChapter 23System Log Commands626Examples To stop sending system logging messages to a server at 192.168.253.11, type the following command:PRO

set logChapter 23System Log Commands627sessions Sets the default log values for Telnet sessions. You can set defaults for the following log parameters

set logChapter 23System Log Commands628Defaults l Events at the error level and higher are logged to the UNIVERGE WL Controller console.l Events at

set log markChapter 23System Log Commands629Examples To log only emergency, alert, and critical system events to the console, type the following comm

show log bufferChapter 23System Log Commands630Defaults Mark messages are disabled by default. When they are enabled, UNIVERGE WL Control System gen

show log bufferChapter 23System Log Commands631Defaults None. Access Enabled.Usage The debug level produces a lot of messages, many of which can

show log configChapter 23System Log Commands632See Also l clear log on page 625l show log config on page 632show log configDisplays log configuratio

show log traceChapter 23System Log Commands633show log traceDisplays system information stored in the nonvolatile log buffer or the trace buffer. Synt

show log traceChapter 23System Log Commands634Defaults None. Access Enabled.Examples Type the following command to see the facilities for which y

show log traceChapter 23System Log Commands635T: Xmtr Mac 00:60:b9:11:58:co Ap 7 Radio 1 Chan 36 RSSI 36 Tech DOT_11A SSID wlan-7 ROGUE Oct 28 1

set port speedChapter 5Port Commands60The slow throughput occurs because the side that is configured for autonegotiation falls back to half-duplex. A

show log traceChapter 23System Log Commands636

Index637IndexBbackup 578Cclear accounting 185clear ap 45clear ap boot-configuration 273clear ap radio 271clear authentication admin 186clear aut

Index638clear trace 606clear user 196clear user attr 196clear user group 197clear usergroup 198clear usergroup attr 199clear vlan 69commit secu

Index639set ap upgrade-firmware 300set arp 109set arp agingtime 110set authentication admin 203set authentication console 206set authentication d

Index640set radio-profile auto-tune channel-config 301set radio-profile auto-tune channel-holddown 303set radio-profile auto-tune channel-interval

Index641set system ip-address 36, 153set system location 37set system name 38set timedate 154set timezone 155set trace authentication 607set tra

Index642show port counters 62show port status 63show qos 92show qos default 93show qos dscp-table 93show radio-profile 408show rfdetect attack-l

UNIVERGE WLCommand Reference (V1)May, 2007ޓISSUE 1.0Publishing OfficeNWA-027517-001NEC Infrontia CorporationData Wireless Networks Division2007 NEC In

set port trapChapter 5Port Commands61Usage It is recommended that you do not configure the mode of a UNIVERGE WL Controller port so that one side of

show port countersChapter 5Port Commands62See Also l set ip snmp server on page 122l set snmp community on page 130l set snmp usm on page 146l set s

show port statusChapter 5Port Commands63Port Status Rx Octets Tx Octets=================================================================1 Up 27965420

show port statusChapter 5Port Commands64See Also l set port on page 55l set port name on page 57l set port negotiation on page 58l set port speed on

VLAN Commands656VLAN CommandsUse virtual LAN (VLAN) commands to configure and manage parameters for individual port VLANs on network ports, and to dis

DocumentationChapter 1Introducing the UNIVERGE WL System3Installationl UNIVERGE WL Installation Guide. Instructions and specifications for installing

clear fdbChapter 6VLAN Commands66clear fdbDeletes an entry from the forwarding database (FDB). Syntax clear fdb {perm | static | dynamic | port port

clear security l2-restrictChapter 6VLAN Commands67Usage You can delete forwarding database entries based on entry type, port, or VLAN. A VLAN name o

clear security l2-restrict countersChapter 6VLAN Commands68Defaults If you do not specify a list of MAC addresses or all, all addresses are removed.

clear vlanChapter 6VLAN Commands69Defaults If you do not specify a VLAN or all, counters for all VLANs are cleared.Access Enabled. Usage To clea

clear vlanChapter 6VLAN Commands70Defaults None.Access Enabled.Usage If you do not specify a port-list, the entire VLAN is removed from the conf

set fdbChapter 6VLAN Commands71set fdbAdds a permanent or static entry to the forwarding database.Syntax set fdb {perm | static} mac-addr port port-

set fdb agingtimeChapter 6VLAN Commands72The following command adds a static entry for MAC address 00:2b:3c:4d:5e:6f on port 1 in the default VLAN:PRO

set security l2-restrictChapter 6VLAN Commands73set security l2-restrictRestricts Layer 2 forwarding between clients in the same VLAN. When you restri

set vlan nameChapter 6VLAN Commands74See Also l clear security l2-restrict on page 67l clear security l2-restrict counters on page 68l show security

set vlan portChapter 6VLAN Commands75Examples The following command assigns the name marigold to VLAN 3:PROMPT# set vlan 3 name marigoldsuccess: chan

DocumentationChapter 1Introducing the UNIVERGE WL System4[ ] (square brackets) Enclose optional parameters in command syntax.{ } (curly brackets) Encl

set vlan tunnel-affinityChapter 6VLAN Commands76The following command adds port 16 to VLAN beige and assigns tag value 86 to the port:PROMPT# set vlan

show fdbChapter 6VLAN Commands77If more than one UNIVERGE WL Controller has the highest affinity value, UNIVERGE WL Control System randomly selects on

show fdbChapter 6VLAN Commands78Defaults None.Access All.Usage To display the entire forwarding database, enter the show fdb command without opt

show fdb agingtimeChapter 6VLAN Commands79See Also l clear fdb on page 66l set fdb on page 71show fdb agingtimeDisplays the aging timeout period for

show fdb countChapter 6VLAN Commands80Defaults None.Access All.Examples The following command displays the aging timeout period for all VLANs:PRO

show roaming stationChapter 6VLAN Commands81Examples The following command lists the number of dynamic entries that the forwarding database contains:

show roaming stationChapter 6VLAN Commands82Table 8 describes the fields in the display. See Also show roaming vlan on page 83Table 8. Output for sh

show roaming vlanChapter 6VLAN Commands83show roaming vlanShows all VLANs in the mobility domain, the UNIVERGE WL Controllers servicing the VLANs, and

show security l2-restrictChapter 6VLAN Commands84show security l2-restrictDisplays configuration information and statistics for Layer 2 forwarding res

show tunnelChapter 6VLAN Commands85See Also l clear security l2-restrict on page 67l clear security l2-restrict counters on page 68l set security l2

Using the Command-Line Interface52Using the Command-Line InterfaceUNIVERGE WL Control System operates a UNIVERGE WL System wireless LAN (WLAN) consist

show vlan configChapter 6VLAN Commands86See Also show vlan config on page 86show vlan configDisplays VLAN information. Syntax show vlan config [vl

show vlan configChapter 6VLAN Commands87Admin VLAN Tunl PortVLAN Name Status State Affin Port Tag State---- ----------- ------ ----- ----- -----------

show vlan configChapter 6VLAN Commands88See Also l clear vlan on page 69l set vlan name on page 74l set vlan port on page 75l set vlan tunnel-affini

Quality of Service Commands897Quality of Service CommandsUse Quality of Service (QoS) commands to configure packet prioritization in UNIVERGE WL Contr

clear qosChapter 7Quality of Service Commands90clear qosResets the UNIVERGE WL Controller mapping of Differentiated Services Code Point (DSCP) values

set qos cos-to-dscp-mapChapter 7Quality of Service Commands91PROPMT# clear qos dscp-to-qos-map 44success: change accepted.set qos cos-to-dscp-mapChang

show qosChapter 7Quality of Service Commands92Syntax set qos dscp-to-cos-map dscp-range cos levelDefaults The defaults are listed by the show qos

show qos dscp-tableChapter 7Quality of Service Commands93Examples The following command displays the default QoS settings:PROPMT# show qos defaultIng

show qos dscp-tableChapter 7Quality of Service Commands94See Also show qos on page 92

IP Services Commands958IP Services CommandsUse IP services commands to configure and manage IP interfaces, management services, the Domain Name Servic