Motorola WiNG 5.2.6 Especificaciones

Motorola SolutionsWiNG 5.2.6CLI REFERENCE GUIDE

viii WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.22.2 dns-whitelist-mode-commands ...

3 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide• clear counters [all|bridge|router|thread]• clear counters interface [<INTERFACE>|all|

21 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.2.11 nosignature mode commandsNegates a command or resets settings to their default.

WIPS-POLICY 21 - 27ExamplesThe following is the WIPS signature before the execution of the no command:rfs7000-37FABE(config-test-signature-test)#show

21 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.7 useconfig-wips policy config commandEnables device categorization on this WIPS polic

CHAPTER 22 WLAN-QOS-POLICYThis chapter summarizes the WLAN QoS policy in detail.A WLAN QoS policy increases network efficiency by prioritizing data tr

22 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide22.1 wlan-qos-policyTable 22.1 summarizes WLAN QoS policy configuration commands.Table 22.1 w

WLAN-QOS-POLICY 22 - 322.1.1 accelerated-multicastwlan-qos-policyConfigures the accelerated multicast stream address and forwarding QoS classificatio

22 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide22.1.2 classificationwlan-qos-policySpecifies how traffic on this WLAN is classified. This c

WLAN-QOS-POLICY 22 - 5Examplesrfs7000-37FABE(config-wlan-qos-test)#classification wmmrfs7000-37FABE(config-wlan-qos-test)#classification non-wmm video

22 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide22.1.3 multicast-maskwlan-qos-policyConfigure an egress prioritization multicast mask for th

WLAN-QOS-POLICY 22 - 722.1.4 nowlan-qos-policyNegates a command or resets settings to their defaultSupported in the following platforms:• Access Poin

PRIVILEGED EXEC MODE COMMANDS 3 - 15• clear firewall [dhcp snoop-table|dos stats|flows] {on <DEVICE-NAME>}• clear logging {on <DEVICE-NAME>

22 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no rate-limit [client|wlan] [from-air|to-air] [max-burst-size|rate|red-threshold [backgroun

WLAN-QOS-POLICY 22 - 9Related Commandsaccelerated-multicast Configures the accelerated multicast streams address and forwards the QoS classificationcl

22 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide22.1.5 qoswlan-qos-policyEnables QoS on this WLANSupported in the following platforms:• Acc

WLAN-QOS-POLICY 22 - 1122.1.6 rate-limitwlan-qos-policyConfigures the WLAN traffic rate limits using the WLAN QoS policySupported in the following pl

22 - 12 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-wlan-qos-test)#rate-limit wlan from-air max-burst-size 6rfs700

WLAN-QOS-POLICY 22 - 1322.1.7 svp-prioritization wlan-qos-policyEnables WLAN SVP support on this WLAN QoS policy. Enabling SVP enables the wireless c

22 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide22.1.8 voice-prioritization wlan-qos-policyPrioritizes voice clients over other clients (fo

WLAN-QOS-POLICY 22 - 1522.1.9 wmmwlan-qos-policyConfigures 802.11e/wireless multimedia parameters for this WLAN QoS policySupported in the following

22 - 16 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-wlan-qos-test)#wmm background aifsn 7rfs7000-37FABE(config-wla

CHAPTER 23 INTERFACE-RADIO COMMANDSUse the (config-profile-default-RFS4000) instance to configure radio instances associated with the wireless control

3 - 16 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE>clear crypto isakmp sa 111.222.333.01 on rfs7000-37FABErfs7000-37FA

23 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide this radio rf-mode Configure the rf-mode of oper

INTERFACE-RADIO COMMANDS 23 - 323.1 interface-radio InstanceTable 23.1 summarizes interface radio configuration commands.Table 23.1 interface-radio co

23 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guiderifs Configures Reduced Interframe Spacing (RIFS) parameters page 23-40rts-threshold Configur

INTERFACE-RADIO COMMANDS 23 - 523.1.1 aeroscoutinterface-radio InstanceEnables Aeroscout Multicast packet forwardingSupported in the following platfo

23 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.2 aggregationinterface-radio InstanceConfigures 802.11n frame aggregation. Frame aggreg

INTERFACE-RADIO COMMANDS 23 - 7• aggregation ampdu max-aggr-size tx [<0-65535>]• aggregation ampdu min-spacing [0|1|2|4|8|16]• aggregation amsdu

23 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#aggregation ampdu tx-onlyRFS

INTERFACE-RADIO COMMANDS 23 - 923.1.3 airtime-fairnessinterface-radio InstanceEnables equal access for wireless clients based on their airtime usageS

23 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.4 antenna-diversityinterface-radio InstanceTransmits antenna diversity for non-11n tra

INTERFACE-RADIO COMMANDS 23 - 1123.1.5 antenna-gaininterface-radio InstanceConfigures the antenna gain value of the selected radio. Antenna gain defi

PRIVILEGED EXEC MODE COMMANDS 3 - 173.1.7 clockprivileged exec config mode commandsSets a device’s system clockSupported in the following platforms:•

23 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.6 antenna-modeinterface-radio InstanceConfigures the antenna mode (the number of trans

INTERFACE-RADIO COMMANDS 23 - 1323.1.7 beaconinterface-radio InstanceConfigures radio beacon parameters. Beacons are packets sent by the access point

23 - 14 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#beacon dtim-period bss2 20R

INTERFACE-RADIO COMMANDS 23 - 1523.1.8 channelinterface-radio InstanceConfigures a radio’s channel of operationSupported in the following platforms:•

23 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.9 data-ratesinterface-radio InstanceConfigures the 802.11 data rates on this radioSupp

INTERFACE-RADIO COMMANDS 23 - 17ExamplesRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#data-rates b-onlyRFS4000-880DA7(config-profile-defaul

23 - 18 WiNG 5.2.6 Wireless Controller CLI Reference GuideRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#data-rates custom basic-mcs0-7RFS40

INTERFACE-RADIO COMMANDS 23 - 1923.1.10 descriptioninterface-radio InstanceDefines a description for the selected radioSupported in the following pla

23 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.11 dfs-rehomeinterface-radio InstanceReverts to configured home channel once Dynamic F

INTERFACE-RADIO COMMANDS 23 - 2123.1.12 dynamic-chain-selectioninterface-radio InstanceEnables automatic antenna mode selection (single antenna for n

3 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.8 clusterprivileged exec config mode commandsInitiates the cluster context. The cluster

23 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.13 ekahauinterface-radio InstanceEnables Ekahau multicast packet forwardingSupported i

INTERFACE-RADIO COMMANDS 23 - 2323.1.14 guard-intervalinterface-radio InstanceConfigures the 802.11n guard interval. A guard interval ensures distinc

23 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.15 lock-rf-modeinterface-radio InstanceRetains user configured RF mode settings for th

INTERFACE-RADIO COMMANDS 23 - 2523.1.16 max-clientsinterface-radio InstanceConfigures the maximum number of wireless clients allowed to associate wit

23 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.17 meshinterface-radio InstanceUse this command to configure radio mesh parameters. A

INTERFACE-RADIO COMMANDS 23 - 2723.1.18 nointerface-radio InstanceNegates a command or resets settings to their default. When used in the config RFS4

23 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide wireless-client Configure wireless client related parameters wlan

INTERFACE-RADIO COMMANDS 23 - 29antenna-mode Configures the radio antenna mode (the number of transmit and receive antennas)beacon Configure beacon pa

23 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.19 non-unicastinterface-radio InstanceConfigures the handling of non unicast frames on

INTERFACE-RADIO COMMANDS 23 - 31ExamplesRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#non-unicast queue bss 2 3RFS4000-880DA7(config-profil

PRIVILEGED EXEC MODE COMMANDS 3 - 193.1.9 configureprivileged exec config mode commandsEnters the configuration mode. Use this command to enter the c

23 - 32 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.20 off-channel-scaninterface-radio InstanceEnables selected radio’s off channel scanni

INTERFACE-RADIO COMMANDS 23 - 33ExamplesRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#off-channel-scan channel-list 2.4GHz 1RFS4000-880DA7(

23 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.21 placementinterface-radio InstanceDefines the location where the radio is deployedSu

INTERFACE-RADIO COMMANDS 23 - 3523.1.22 powerinterface-radio InstanceConfigures the transmit power on this radioSupported in the following platforms:

23 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.23 preamble-shortinterface-radio InstanceEnables the use of short preamble on this rad

INTERFACE-RADIO COMMANDS 23 - 3723.1.24 probe-responseinterface-radio InstanceConfigures transmission parameters for probe response frames.Supported

23 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.25 radio-share-modeinterface-radio InstanceConfigures the mode of operation, for this

INTERFACE-RADIO COMMANDS 23 - 3923.1.26 rf-modeinterface-radio InstanceConfigures the radio’s RF modeSupported in the following platforms:• Wireless

23 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.27 rifsinterface-radio InstanceConfigures Reduced Interframe Spacing (RIFS) parameters

INTERFACE-RADIO COMMANDS 23 - 4123.1.28 rts-thresholdinterface-radio InstanceConfigures the RTS threshold value on this radioSupported in the followi

3 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.10 connectprivileged exec config mode commandsBegins a console connection to a remote de

23 - 42 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.29 shutdowninterface-radio InstanceTerminates or shuts down a radio interfaceSupported

INTERFACE-RADIO COMMANDS 23 - 4323.1.30 sniffer-redirectinterface-radio InstanceCaptures and redirects packets to an IP address running a packet capt

23 - 44 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.31 stbcinterface-radio InstanceConfigures radio’s Space Time Block Coding (STBC) mode.

INTERFACE-RADIO COMMANDS 23 - 4523.1.32 txbfinterface-radio InstanceEnables transmit Beamforming on the selected radio. Transmit Beamforming enhances

23 - 46 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesRFS4000-880DA7(config-profile-default_RFS4000-if-radio1)#txbf explicit-noncompressed

INTERFACE-RADIO COMMANDS 23 - 4723.1.33 useinterface-radio InstanceThe use command enables the use of an association ACL policy and a radio QoS polic

23 - 48 WiNG 5.2.6 Wireless Controller CLI Reference Guide23.1.34 wireless-clientinterface-radio InstanceConfigures wireless client parameters on thi

INTERFACE-RADIO COMMANDS 23 - 4923.1.35 wlaninterface-radio InstanceEnables a WLAN on this radioSupported in the following platforms:• Wireless Contr

23 - 50 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 24 AAA-TACACS-POLICYThis chapter summarizes the Terminal Access Control Access-Control System (TACACS) policy commands within the CLI structur

PRIVILEGED EXEC MODE COMMANDS 3 - 213.1.11 copyprivileged exec config mode commandsCopies a file (config,log,txt...etc) from any location to the wire

24 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide24.1 aaa-tacacs-policy Table 24.1 summarizes AAA-TACACS policy configuration commands.Table

AAA-TACACS-POLICY 24 - 324.1.1 accountingaaa-tacacs-policyConfigures the server type and interval at which interim accounting updates are sent to the

24 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide• accounting server <1-2> [retry-timeout-factor <50-200>]• accounting server <

AAA-TACACS-POLICY 24 - 5Examplesrfs7000-37FABE(config-aaa-tacacs-policy-test)#accounting auth-failrfs7000-37FABE(config-aaa-tacacs-policy-test)#rfs700

24 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide24.1.2 authenticationaaa-tacacs-policyConfigures authentication parametersSupported in the f

AAA-TACACS-POLICY 24 - 7• authentication server <1-2> retry-timeout-factor <50-200>• authentication server <1-2> timeout <3-60>

24 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide24.1.3 authorizationaaa-tacacs-policyConfigures authorization parametersSupported in the fol

AAA-TACACS-POLICY 24 - 9• authorization server <1-2> retry-timeout-factor <50-200>• authorization server <1-2> timeout <3-5> {

24 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide24.1.4 noaaa-tacacs-policyNegates a AAA policy command or sets its defaultSupported in the

CHAPTER 25 FIREWALL LOGGINGThis chapter summarizes firewall logging commands within the CLI. The firewall uses logging to send system messages to one

3 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.12 create-clusterprivileged exec config mode commandsCreates a new cluster on a specifie

25 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1 Firewall Log Terminology and Syslog Severity LevelsAbbreviation DescriptionFTP File tran

FIREWALL LOGGING 25 - 325.1.1 Date format in Syslog messagesThe following output displays the wireless controller date in proper format:RFS7000-81916A

25 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.2 FTP data connection logAn ACL rule has to be applied and logging has to be enabled to

FIREWALL LOGGING 25 - 525.1.3 UDP packets logIn both DHCP release and DHCP renew scenarios, the destination port 67 is logged. DHCP ReleaseJul 25 11:5

25 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.4 ICMP type logsThe example below displays an ICMP Type as 13 and an ICMP Code as 0:Jul

FIREWALL LOGGING 25 - 725.1.5 ICMP type logsThe following example displays an ICMP Type as 3 and a Code as 3:Jul 25 12:03:00 2011: %DATAPLANE-5-ICMPPK

25 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.6 Raw IP Protocol logsThe following example displays a TCP header length as less than 20

FIREWALL LOGGING 25 - 925.1.7 Raw IP Protocol logsThe following example displays TCP without data:Jul 25 12:16:50 2011: %DATAPLANE-4-DOSATTACK: INVALI

25 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.8 Firewall startup logThe following example displays an enabled firewall. A firewall en

FIREWALL LOGGING 25 - 1125.1.9 Manual time change logThe following example displays the manual time change log. The clock is manually set to Jul 25 12

PRIVILEGED EXEC MODE COMMANDS 3 - 233.1.13 cryptoprivileged exec config mode commandsEnables RSA Keypair management. Use this command to generate, de

25 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.10 Firewall ruleset logThe following example displays the log changes as ‘ACL_ATTACHED_

FIREWALL LOGGING 25 - 13IP ACL on GE Port Remove July 28 12:49:20 2011: %CFGD-6-ACL_ATTACHED_ALTERED: USER: root session 3: ACL attached to interface

25 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.11 TCP Reset Packets logFor any change in the TCP configuration, a TCP reset log is gen

FIREWALL LOGGING 25 - 1525.1.12 ICMP Destination log The following example displays an ICMP destination as unreachable when no matching payload is fou

25 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.13 ICMP Packet logJuly 28 20:37:04 2011: %DATAPLANE-5-LOGRULEHIT: Matched ACL:ftpuser:i

FIREWALL LOGGING 25 - 1725.1.14 SSH connection logA SSH connection is enabled on the wireless controller using factory settings. Running primary softw

25 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide25.1.15 Allowed/Dropped Packets LogThe following example displays disposition information re

APPENDIX A CONTROLLER MANAGED WLAN USE CASEThis section describes the activities required to configure a wireless controller managed WLAN. Instruction

A - 2 WiNG 5.2.6 Wireless Controller CLI Reference GuideA.1 Creating a First Controller Managed WLANIt is assumed you have a RFS4000 wireless controll

A - 3On the RFS4000 wireless controller, the GE1 interface is connected to an external network. Interfaces GE3 and GE4 are used by the access points.O

Table of Contents ix5.1.7 revert ...

3 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guidecrypto pki import [certificate|crl|trustpoint]crypto pki import [certificate|crl] <TRUSTPO

A - 4 WiNG 5.2.6 Wireless Controller CLI Reference GuideA.1.3.2 Creating a RF DomainUsing the Command Line Interface to Configure the WLANA RF Domain

A - 5A.1.3.3 Creating a Wireless Controller ProfileUsing the Command Line Interface to Configure the WLANThe first step in creating a WLAN is to conf

A - 6 WiNG 5.2.6 Wireless Controller CLI Reference GuideRFS4000(config-wlan-1)#ssid WLAN_USECASE_01Enable the SSID to be broadcast so wireless clients

A - 7Commit the changes made to this profile and exit.RFS4000(config-profile-AP650_UseCase1)#commit writeRFS4000(config-profile-AP650_UseCase1)#exitRF

A - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideRFS4000(config-profile-AP7131_UseCase1)#interface radio 1RFS4000(config-profile-AP7131_UseCase

A - 9In the table, the IP address range of 172.16.11.11 to 172.16.11.200 is available using the DHCP server. To configure the DHCP server:RFS4000-37FA

A - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide

APPENDIX B CUSTOMER SUPPORTMotorola Solutions Enterprise Mobility Support CenterIf you have a problem with your equipment, contact support for your re

B - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide

PRIVILEGED EXEC MODE COMMANDS 3 - 25• crypto key export rsa <RSA-KEYPAIR-NAME> <EXPORT-TO-URL> {passphrase <KEY-PASSPHRASE>} {backgr

72E-163130-01 Revision A - June 2012Motorola Solutions, Inc.1301 E. Algonquin Rd.Schaumburg, IL 60196-1078, U.S.A.http://www.motorolasolutions.comMOTO

3 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto key import rsa <RSA-KEYPAIR-NAME> <IMPORT-TO-URL> {background} {on <

PRIVILEGED EXEC MODE COMMANDS 3 - 27• crypto pki authenticate <TRUSTPOINT-NAME> <URL> {background {on <DEVICE-NAME>}|on <DEVICE-N

3 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto pki request [generate-rsa-key|use-rsa-key] <RSA-KEYPAIR-NAME> subject-name <

PRIVILEGED EXEC MODE COMMANDS 3 - 29• crypto pki trustpoint <TRUSTPOINT-NAME> <EXPORT-TO-URL> {background {on <DEVICE-NAME>}|on <

3 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto pki generate self-signed <TRUSTPOINT-NAME> [generate-rsa-key|use-rsa-key] <

PRIVILEGED EXEC MODE COMMANDS 3 - 31• crypto pki import [certificate|crl] <TRUSTPOINT-NAME> <IMPORT-FROM-URL> {background {on <DEVICE-

3 - 32 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto pki import trustpoint <TRUSTPOINT-NAME> <IMPORT-FROM-URL> {background {o

PRIVILEGED EXEC MODE COMMANDS 3 - 33Examplesrfs7000-37FABE#crypto key generate rsa key 1025RSA Keypair successfully generatedrfs7000-37FABE#rfs7000-37

x WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.40 running-config ...

3 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.14 deleteprivileged exec config mode commandsDeletes a specified file from the device’s

PRIVILEGED EXEC MODE COMMANDS 3 - 353.1.15 disableprivileged exec config mode commandsTurns off (disables) the privileged mode command set. This comm

3 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.16 diffprivileged exec config mode commandsDisplays the differences between two files on

PRIVILEGED EXEC MODE COMMANDS 3 - 373.1.17 dirprivileged exec config mode commandsLists files on a device’s file systemSupported in the following pla

3 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.18 editprivileged exec config mode commandsEdits a text file on the device’s file system

PRIVILEGED EXEC MODE COMMANDS 3 - 393.1.19 enableprivileged exec config mode commandsTurns on (enables) the privileged mode command set. This command

3 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.20 eraseprivileged exec config mode commandsErases a device’s file systemSupported in th

PRIVILEGED EXEC MODE COMMANDS 3 - 413.1.21 exitprivileged exec config mode commandsEnds the current CLI session and closes the session windowFor more

3 - 42 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.22 haltprivileged exec config mode commandsStops (halts) a device or a wireless controll

PRIVILEGED EXEC MODE COMMANDS 3 - 433.1.23 join-clusterprivileged exec config mode commandsAdds a wireless controller to an existing cluster of devic

Table of Contents xi7.1.21.2 interface config instance ...

3 - 44 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.24 loggingprivileged exec config mode commandsModifies message logging settingsSupported

PRIVILEGED EXEC MODE COMMANDS 3 - 453.1.25 mkdirprivileged exec config mode commandsCreates a new directory in the file systemSupported in the follow

3 - 46 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.26 mintprivileged exec config mode commandsUses MiNT protocol to perform a ping and a tr

PRIVILEGED EXEC MODE COMMANDS 3 - 47Examplesrfs7000-37FABE#mint ping 70.37.FA.BF count 20 size 128MiNT ping 70.37.FA.BF with 128 bytes of data. Respon

3 - 48 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.27 moreprivileged exec config mode commandsDisplays contents of a file on the device’s f

PRIVILEGED EXEC MODE COMMANDS 3 - 493.1.28 noprivileged exec config mode commandsUse the no command to revert a command or set parameters to their de

3 - 50 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no crypto pki [server|trustpoint] <TRUSTPOINT-NAME> {del-key {on <DEVICE-NAME>}

PRIVILEGED EXEC MODE COMMANDS 3 - 51• no service mint silence• no upgrade <PATCH-NAME> {on <DEVICE-NAME>}• no terminal [length|width]• no

3 - 52 WiNG 5.2.6 Wireless Controller CLI Reference GuideRelated Commandsadoption Resets the adoption state of a device and all devices adopted to itc

PRIVILEGED EXEC MODE COMMANDS 3 - 533.1.29 pageprivileged exec config mode commandsToggles wireless controller paging. Enabling this command displays

xii WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.17 remove-override ...

3 - 54 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.30 pingprivileged exec config mode commandsSends Internet Controller Message Protocol (I

PRIVILEGED EXEC MODE COMMANDS 3 - 553.1.31 pwdprivileged exec config mode commandsDisplays the full path of the present working directory, similar to

3 - 56 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.32 reloadprivileged exec config mode commandsHalts the wireless controller and performs

PRIVILEGED EXEC MODE COMMANDS 3 - 573.1.33 remote-debugprivileged exec config mode commandsTroubleshoots remote systemsSupported in the following pla

3 - 58 WiNG 5.2.6 Wireless Controller CLI Reference Guide• remote-debug end-session [copy-crashinfo|copy-smartrf-report|copy-techsupport|live-pktcap|m

PRIVILEGED EXEC MODE COMMANDS 3 - 593.1.34 renameprivileged exec config mode commandsRenames a file in the devices’ file systemSupported in the follo

3 - 60 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.35 rmdirprivileged exec config mode commandsDeletes an existing directory from the file

PRIVILEGED EXEC MODE COMMANDS 3 - 613.1.36 selfprivileged exec config mode commandsDisplays the logged device’s configuration contextSupported in the

3 - 62 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.37 sshprivileged exec config mode commandsOpens a Secure Shell (SSH) connection between

PRIVILEGED EXEC MODE COMMANDS 3 - 633.1.38 telnetprivileged exec config mode commandsOpens a Telnet session between two network devicesSupported in t

Table of Contents xiii12.1.2 no ...

3 - 64 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.39 terminalprivileged exec config mode commandsSets the number of characters per line, a

PRIVILEGED EXEC MODE COMMANDS 3 - 653.1.40 time-itprivileged exec config mode commandsVerifies the time taken by a particular command between request

3 - 66 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.41 tracerouteprivileged exec config mode commandsTraces the route to a defined destinati

PRIVILEGED EXEC MODE COMMANDS 3 - 673.1.42 upgradeprivileged exec config mode commandsUpgrades software image on a deviceSupported in the following p

3 - 68 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.43 upgrade-abortprivileged exec config mode commandsAborts an ongoing software image upg

PRIVILEGED EXEC MODE COMMANDS 3 - 693.1.44 watchprivileged exec config mode commandsRepeats a specified CLI command at periodic intervalsSupported in

3 - 70 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 4 GLOBAL CONFIGURATION COMMANDSThis chapter summarizes the global-configuration commands in the CLI command structure.The term global indicate

4 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide device-categorization Configure a device categorization object dhcp-server-policy

GLOBAL CONFIGURATION COMMANDS 4 - 34.1 Global Configuration CommandsTable 4.1 summarizes Global Configuration Mode commands.Table 4.1 global config mo

xiv WiNG 5.2.6 Wireless Controller CLI Reference GuideChapter 16, MANAGEMENT-POLICY16.1 management-policy ...

4 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guideevent-system-policy Configures an event system policy page 4-78firewall-policy Configures a fi

GLOBAL CONFIGURATION COMMANDS 4 - 5end Ends and exits the current mode and moves to the PRIV EXEC mode page 5-5exit Ends the current mode and moves to

4 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.1 aaa-policyglobal config mode commandsConfigures an Authentication, Accounting, and Auth

GLOBAL CONFIGURATION COMMANDS 4 - 74.1.2 aaa-tacacs-policyglobal config mode commandsConfigures an AAA Terminal Access Controller Access-Control Syst

4 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.3 advanced-wips-policyglobal config mode commandsConfigures advanced WIPS policy paramete

GLOBAL CONFIGURATION COMMANDS 4 - 94.1.4 ap300global config mode commandsAdds a AP300 access point to the wireless controller managed network. If a p

4 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.5 ap621global config mode commandsAdds a AP621 access point to the wireless controller m

GLOBAL CONFIGURATION COMMANDS 4 - 114.1.6 ap622global config mode commandsAdds a AP622 access point to the wireless controller managed network. If a

4 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.7 ap650global config mode commandsAdds a AP650 access point to the wireless controller m

GLOBAL CONFIGURATION COMMANDS 4 - 134.1.8 ap6511global config mode commandsAdds a AP6511 access point to the wireless controller network. If a profil

Table of Contents xvChapter 19, ROLE-POLICY19.1 role-policy ...

4 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.9 ap6521global config mode commandsAdds a AP6521 access point to the wireless controller

GLOBAL CONFIGURATION COMMANDS 4 - 154.1.10 ap6532global config mode commandsAdds a AP6532 access point to the wireless controller network. If a profi

4 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.11 ap71xxglobal config mode commandsAdds a AP71XX series access point to the wireless co

GLOBAL CONFIGURATION COMMANDS 4 - 174.1.12 ap81xxglobal config mode commandsAdds a AP81XX (AP8132) access point to the wireless controller network. I

4 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.13 association-acl-policyglobal config mode commandsConfigures an association ACL policy

GLOBAL CONFIGURATION COMMANDS 4 - 194.1.14 auto-provisioning-policyglobal config mode commandsConfigures an auto provisioning policy. This policy is

4 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15 captive portalglobal config mode commandsThe captive portal mode configures a hotspot

GLOBAL CONFIGURATION COMMANDS 4 - 214.1.15.1 captive-portalcaptive portalConfigures a captive portal. A captive portal is a hotspot type guest WLAN w

4 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2 captive-portal-mode-commandscaptive portalTable 4.3 summarizes captive portal confi

GLOBAL CONFIGURATION COMMANDS 4 - 234.1.15.2.1 access-timecaptive-portal-mode-commandsDefines the permitted access time for a client. It is used when

xvi WiNG 5.2.6 Wireless Controller CLI Reference Guide22.1.8 voice-prioritization ...

4 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2.2 access-typecaptive-portal-mode-commandsDefines the captive portal access typeSupp

GLOBAL CONFIGURATION COMMANDS 4 - 254.1.15.2.3 accountingcaptive-portal-mode-commandsEnables accounting records for a captive portalSupported in the

4 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2.4 connection-modecaptive-portal-mode-commandsConfigures a captive portal’s connecti

GLOBAL CONFIGURATION COMMANDS 4 - 274.1.15.2.5 custom-authcaptive-portal-mode-commandsConfigures custom user information when authenticating with the

4 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2.6 inactivity-timeoutcaptive-portal-mode-commandsDefines an inactivity timeout in se

GLOBAL CONFIGURATION COMMANDS 4 - 294.1.15.2.7 nocaptive-portal-mode-commandsThe no command disables captive portal mode commands or resets parameter

4 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no custom-auth info• no server host• no server mode {centralized-controller [hosting-vlan-i

GLOBAL CONFIGURATION COMMANDS 4 - 31ExamplesFollowing is the captive portal ‘test’ settings before the ‘no’ command is executed:rfs7000-37FABE(config-

4 - 32 WiNG 5.2.6 Wireless Controller CLI Reference Guideuse Configures a AAA policy and DNS whitelist with this captive portal policywebpage-location

GLOBAL CONFIGURATION COMMANDS 4 - 334.1.15.2.8 servercaptive-portal-mode-commandsConfigures captive portal server parameters, such as the hostname, I

Table of Contents xvii24.1.3 authorization ...

4 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2.9 simultaneous-userscaptive-portal-mode-commandsSpecifies the number of MAC address

GLOBAL CONFIGURATION COMMANDS 4 - 354.1.15.2.10 terms-agreementcaptive-portal-mode-commandsEnforces the user to agree to terms and conditions (includ

4 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2.11 usecaptive-portal-mode-commandsConfigures a AAA policy and DNS whitelist with th

GLOBAL CONFIGURATION COMMANDS 4 - 374.1.15.2.12 webpage-locationcaptive-portal-mode-commandsSpecifies the location of the Web pages used for authenti

4 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.15.2.13 webpagecaptive-portal-mode-commandsConfigures Web pages displayed when interacti

GLOBAL CONFIGURATION COMMANDS 4 - 39• webpage internal [agreement|fail|login|welcome] [main-logo|small-logo] <URL>Examplesrfs7000-37FABE(config-

4 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.16 clearglobal config mode commandsClears parameters, cache entries, table entries, and

GLOBAL CONFIGURATION COMMANDS 4 - 414.1.17 critical-resource-policyglobal config mode commandsCreates a critical resource monitoring policy. A critic

4 - 42 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.17.1 critical-resource-policycritical-resource-policyCreates or enters a Critical-resour

GLOBAL CONFIGURATION COMMANDS 4 - 434.1.17.2 critical-resource-policy-mode-commandscritical-resource-policyTable 4.5 summarizes critical resource mon

xviii WiNG 5.2.6 Wireless Controller CLI Reference Guide

4 - 44 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.17.2.1 monitorcritical-resource-policy-mode-commandsMonitors critical resources. Use thi

GLOBAL CONFIGURATION COMMANDS 4 - 454.1.17.2.2 nocritical-resource-policy-mode-commandsRemoves a device from the critical resource list. This command

4 - 46 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.18 customizeglobal config mode commandsCustomizes the output of the summary CLI commands

GLOBAL CONFIGURATION COMMANDS 4 - 47• customize show-wireless-client-stats (hostname <1-64>,mac,rx-bytes,rx-errors,rx-packets,rx-throughput,tx-b

4 - 48 WiNG 5.2.6 Wireless Controller CLI Reference Guide• customize show-wireless-client-stats-rf (average-retry-number,error-rate,hostname <1-64&

GLOBAL CONFIGURATION COMMANDS 4 - 49• customize show-wireless-radio (adopt-to,ap-name <1-64>,channel,location <1-64>,num-clients,power,rad

4 - 50 WiNG 5.2.6 Wireless Controller CLI Reference Guide• customize show-wireless-radio-stats (radio-alias <3-67>,radio-id,radio-mac,rx-bytes,r

GLOBAL CONFIGURATION COMMANDS 4 - 51Examplesrfs7000-37FABE(config)*#customize show-wireless-client ap-name authrfs7000-37FABE(config)*#commitrfs7000-3

4 - 52 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.19 deviceglobal config mode commandsEnables simultaneous configuration of multiple devic

GLOBAL CONFIGURATION COMMANDS 4 - 53Examplesrfs7000-37FABE(config)#device containing ap filter type AP71XX% Error: Parsing cmd line (1)rfs7000-37FABE(

ABOUT THIS GUIDEThis manual supports the following Wireless Controllers and connected Access Points:• Access Points — AP300, AP621, AP622, AP650, AP65

4 - 54 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.20 device-categorizationglobal config mode commandsCategorizes devices as sanctioned or

GLOBAL CONFIGURATION COMMANDS 4 - 554.1.20.1 device-categorizationdevice-categorizationConfigures a device categorization list. This list categorizes

4 - 56 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.20.2 device-categorization-mode-commandsdevice-categorizationTable 4.7 summarizes device

GLOBAL CONFIGURATION COMMANDS 4 - 574.1.20.2.1 mark-devicedevice-categorization-mode-commandsAdds a device to the device categorization list as sanct

4 - 58 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-device-categorization-RFS7000)#mark-device sanctioned ap any ss

GLOBAL CONFIGURATION COMMANDS 4 - 594.1.20.2.2 nodevice-categorization-mode-commandsRemoves a device from the device categorization listSupported in

4 - 60 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesFollowing is the device categorization ‘RFS7000’ settings before the ‘no’ command is

GLOBAL CONFIGURATION COMMANDS 4 - 614.1.21 dhcp-server-policyglobal config mode commandsConfigures DHCP server policy parameters, such as class, addr

4 - 62 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.22 dns-whitelistglobal config mode commandsConfigures a whitelist of devices permitted t

GLOBAL CONFIGURATION COMMANDS 4 - 634.1.22.1 dns-whitelistdns-whitelistConfigures a DNS whitelist. A DNS whitelist is a list of domains allowed acces

xx WiNG 5.2.6 Wireless Controller CLI Reference GuideDocument ConventionsThe following conventions are used in this document to draw your attention to

4 - 64 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.22.2 dns-whitelist-mode-commandsdns-whitelistTable 4.9 summarizes DNS white list configu

GLOBAL CONFIGURATION COMMANDS 4 - 654.1.22.2.1 permitdns-whitelist-mode-commandsA whitelist is a list of host names and IP addresses permitted access

4 - 66 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.22.2.2 nodns-whitelist-mode-commandsRemoves a specified host or IP address from the DNS

GLOBAL CONFIGURATION COMMANDS 4 - 674.1.23 doglobal config mode commandsUse the do command to run commands from the EXEC mode. These commands perform

4 - 68 WiNG 5.2.6 Wireless Controller CLI Reference Guidedo halt {on <DEVICE-NAME>}do help {search|show}do join-cluster <IP> user <USER

GLOBAL CONFIGURATION COMMANDS 4 - 69Parameters• do ap-upgrade [<DEVICE-NAME>|all|all|ap622|ap621|ap650|ap6511|ap6521|ap6532|ap71xx|ap81xx|load-i

4 - 70 WiNG 5.2.6 Wireless Controller CLI Reference Guide• do configure {terminal|self}• do connect [<REMOTE-DEVICE-NAME>|mint-id <DEVICE-MIN

GLOBAL CONFIGURATION COMMANDS 4 - 71• do enable• do erase [flash:|nvram:|startup-config|usb1:]• do exit• do halt {on <DEVICE-NAME>}• do help {se

4 - 72 WiNG 5.2.6 Wireless Controller CLI Reference Guide• do more <FILE>• do no [adoption|captive-portal|crypto|debug|page|service|terminal|upg

GLOBAL CONFIGURATION COMMANDS 4 - 73• do self• do service [advanced-wips|ap300|clear|cli-tables-expand|cli-tables-skin|cluster|copy|delete-offline-aps

Getting Started with the Mobile Computer xxiNotational ConventionsThe following notational conventions are used in this document:• Italics are used to

4 - 74 WiNG 5.2.6 Wireless Controller CLI Reference Guide• do upgrade-abort {on <DEVICE-NAME>}• do watch <TIME> <CLI-COMMAND>• do wr

GLOBAL CONFIGURATION COMMANDS 4 - 75 write Write running configuration to memory or terminal clrscr Clears the display screen ex

4 - 76 WiNG 5.2.6 Wireless Controller CLI Reference Guidelogging Configures a device’s loggingmint Performs MiNT operations such as ping and tracerout

GLOBAL CONFIGURATION COMMANDS 4 - 774.1.24 endglobal config mode commandsEnds and exits the current mode and moves to the PRIV EXEC modeThe prompt ch

4 - 78 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.25 event-system-policyglobal config mode commandsConfigures how events are supported by

GLOBAL CONFIGURATION COMMANDS 4 - 794.1.25.1 event-system-policyevent-system-policyConfigures a system wide events handling policy. For more informat

4 - 80 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.25.2 event-system-policy-mode-commandsevent-system-policyTable 4.11 summarizes event sys

GLOBAL CONFIGURATION COMMANDS 4 - 814.1.25.2.1 eventevent-system-policy-mode-commandsConfigures an event and sets the action performed when the event

4 - 82 WiNG 5.2.6 Wireless Controller CLI Reference Guide• adv-wips-event-121 – Event adv-wips-event-121 message• adv-wips-event-13 – Event adv-wips-e

GLOBAL CONFIGURATION COMMANDS 4 - 83captive-portal Configures captive portal (hotspot) related event messages• allow-access – Event client allowed acc

xxii WiNG 5.2.6 Wireless Controller CLI Reference Guide[]Of the different keywords and variables listed inside a ‘[‘ & ‘]’ pair, only one can be u

4 - 84 WiNG 5.2.6 Wireless Controller CLI Reference Guidedhcpsvr Configures DHCP server related event messages• dhcp-start – Event DHCP server started

GLOBAL CONFIGURATION COMMANDS 4 - 85dot11 Configures 802.11 management module related event messages• client-associated – Wireless client associated e

4 - 86 WiNG 5.2.6 Wireless Controller CLI Reference Guidefilemgmt Configures file management module related event messages• http – Event HTTP message•

GLOBAL CONFIGURATION COMMANDS 4 - 87nsm Configures Network Service Module (NSM) related event message• dhcpc-err – Event DHCP certification error mess

4 - 88 WiNG 5.2.6 Wireless Controller CLI Reference Guidesmrt Configures SMART RF module related event messages• calibration-done – Event calibration

GLOBAL CONFIGURATION COMMANDS 4 - 89Examplesrfs7000-37FABE(config-event-system-policy-event-testpolicy)#event aaa radius-discon-msg email on forward-t

4 - 90 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.25.2.2 noevent-system-policy-mode-commandsNegates an event configurationSupported in the

GLOBAL CONFIGURATION COMMANDS 4 - 91• adv-wips-event-14 – Event adv-wips-event-14 message• adv-wips-event-142 – Event adv-wips-event-142 message• adv-

4 - 92 WiNG 5.2.6 Wireless Controller CLI Reference Guidecaptive-portal Resets captive portal (hotspot) related event messages• allow-access – Event c

GLOBAL CONFIGURATION COMMANDS 4 - 93dhcpsvr Resets DHCP server related event messages• dhcp-start – Event DHCP server started message• dhcpsvr-stop –

Getting Started with the Mobile Computer xxiii()Any command/keyword/variable or a combination of them inside a ‘(‘ & ‘)’ pair are recursive. All r

4 - 94 WiNG 5.2.6 Wireless Controller CLI Reference Guidedot11 Resets 802.11 management module related event messages• client-associated – Wireless cl

GLOBAL CONFIGURATION COMMANDS 4 - 95filemgmt Resets file management module related event messages• http – Event HTTP message• httplocal – Event HTTP l

4 - 96 WiNG 5.2.6 Wireless Controller CLI Reference Guidensm Resets NSM related event messages• dhcpc-err – Event DHCP certification error message• dh

GLOBAL CONFIGURATION COMMANDS 4 - 97smrt Resets SMART RF module related event messages• calibration-done – Event calibration done message• calibration

4 - 98 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-event-system-policy-testpolicy)#rfs7000-37FABE(config-event-sys

GLOBAL CONFIGURATION COMMANDS 4 - 994.1.26 firewall-policyglobal config mode commandsConfigures a firewall policy. This policy defines a set of rules

4 - 100 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.27 hostglobal config mode commandsEnters the configuration context of a remote device u

GLOBAL CONFIGURATION COMMANDS 4 - 1014.1.28 ipglobal config mode commandsConfigures IP access control listsAccess lists define access to the wireless

4 - 102 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.29 macglobal config mode commandsConfigures MAC access control listsAccess lists define

GLOBAL CONFIGURATION COMMANDS 4 - 1034.1.30 management-policyglobal config mode commandsConfigures a management policy. This policy configures parame

xxiv WiNG 5.2.6 Wireless Controller CLI Reference Guide Motorola Solutions Enterprise Mobility Support CenterIf you have a problem with your equipment

4 - 104 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.31 mint-policyglobal config mode commandsConfigures the global MiNT policySupported in

GLOBAL CONFIGURATION COMMANDS 4 - 1054.1.32 nac-listglobal config mode commandsConfigures a policy, which configures a list of devices that can acces

4 - 106 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.32.1 nac-listnac-listConfigures a Network Access Control (NAC) list that controls acces

GLOBAL CONFIGURATION COMMANDS 4 - 1074.1.32.2 nac-list-mode-commandsnac-listTable 4.13 summarizes NAC list configuration mode commands.Table 4.13 nac

4 - 108 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.32.2.1excludenac-list-mode-commandsSpecifies the MAC addresses excluded from the NAC en

GLOBAL CONFIGURATION COMMANDS 4 - 1094.1.32.2.2includenac-list-mode-commandsSpecifies the MAC addresses included in the NAC enforcement listSupported

4 - 110 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.32.2.3nonac-list-mode-commandsCancels an exclude or an include NAC list ruleSupported i

GLOBAL CONFIGURATION COMMANDS 4 - 1114.1.33 noglobal config mode commandsNegates a command, or reverts configured settings to their default valuesSup

4 - 112 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.34 password-encryptionglobal config mode commandsEnables password encryption within a c

GLOBAL CONFIGURATION COMMANDS 4 - 1134.1.35 profileglobal config mode commandsConfigures profile related commands. If no parameters are given, all pr

Getting Started with the Mobile Computer xxvMotorola Solutions End-User Software License AgreementTHIS MOTOROLA SOLUTIONS END-USER SOFTWARE LICENSE AG

4 - 114 WiNG 5.2.6 Wireless Controller CLI Reference Guide• profile {containing <DEVICE-PROFILE-NAME>} {filter type [ap621|ap622|ap650|ap6511|ap

GLOBAL CONFIGURATION COMMANDS 4 - 115Examplesrfs7000-37FABE(config)#profile RFS7000 test1rfs7000-37FABE(config-profile-test1)#?Profile Mode commands:

4 - 116 WiNG 5.2.6 Wireless Controller CLI Reference Guide spanning-tree Spanning tree use Set

GLOBAL CONFIGURATION COMMANDS 4 - 1174.1.36 radio-qos-policyglobal config mode commandsConfigures a radio quality-of-service (QoS) policySupported in

4 - 118 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.37 radius-groupglobal config mode commandsConfigures RADIUS user group parametersSuppor

GLOBAL CONFIGURATION COMMANDS 4 - 1194.1.38 radius-server-policyglobal config mode commandsCreates an onboard device RADIUS policySupported in the fo

4 - 120 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.39 radius-user-pool-policyglobal config mode commandsConfigures a RADIUS user poolSuppo

GLOBAL CONFIGURATION COMMANDS 4 - 1214.1.40 rf-domainglobal config mode commandsAn RF Domain groups devices that can logically belong to one network.

4 - 122 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.1 rf-domainrf-domainCreates a RF Domain or enters RF Domain context for one or more

GLOBAL CONFIGURATION COMMANDS 4 - 1234.1.40.2 rf-domain-mode-commandsrf-domainThis section describes the default commands under RF Domain.Table 4.15

xxvi WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1 End-User Customer may use the Software only for End-User Customer’s internal business purpo

4 - 124 WiNG 5.2.6 Wireless Controller CLI Reference Guideshow Displays running system information page 6-4write Writes information to memory or termi

GLOBAL CONFIGURATION COMMANDS 4 - 1254.1.40.2.1 channel-listrf-domain-mode-commandsConfigures the channel list advertised by radios. This command als

4 - 126 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.2 contactrf-domain-mode-commandsConfigures the contact (the network administrator)

GLOBAL CONFIGURATION COMMANDS 4 - 1274.1.40.2.3 control-vlanrf-domain-mode-commandsConfigures VLAN for traffic control in this RF DomainSupported in

4 - 128 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.4 country-coderf-domain-mode-commandsConfigures a RF Domain’s country of operation

GLOBAL CONFIGURATION COMMANDS 4 - 1294.1.40.2.5 dhcp-redundancyrf-domain-mode-commandsEnables DHCP redundancy in this RF DomainSupported in the follo

4 - 130 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.6 layoutrf-domain-mode-commandsConfigures the RF Domain layout in terms of area, f

GLOBAL CONFIGURATION COMMANDS 4 - 1314.1.40.2.7 locationrf-domain-mode-commandsConfigures the physical location of the wireless controller RF Domain.

4 - 132 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.8 mac-namerf-domain-mode-commandsConfigures a relevant name for each MAC addressSu

GLOBAL CONFIGURATION COMMANDS 4 - 1334.1.40.2.9 norf-domain-mode-commandsNegates a command or reverts configured settings to their default. When used

Getting Started with the Mobile Computer xxvii7.1 No maintenance or support is provided under this End-User License Agreement. Maintenance or support,

4 - 134 WiNG 5.2.6 Wireless Controller CLI Reference GuideRelated Commandschannel-list Configures the channel list advertised by radios, and enables d

GLOBAL CONFIGURATION COMMANDS 4 - 1354.1.40.2.10 override-smart-rfrf-domain-mode-commandsConfigures RF Domain level overrides for a Smart RF policySu

4 - 136 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.11 override-wlanrf-domain-mode-commandsConfigures RF Domain level overrides for a

GLOBAL CONFIGURATION COMMANDS 4 - 1374.1.40.2.12 sensor-serverrf-domain-mode-commandsConfigures an AirDefense sensor server on this RF Domain. Sensor

4 - 138 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.13 statsrf-domain-mode-commandsConfigures stats settings that define how RF Domain

GLOBAL CONFIGURATION COMMANDS 4 - 1394.1.40.2.14 timezonerf-domain-mode-commandsConfigures the RF Domain’s geographic time zone. Configuring the time

4 - 140 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.40.2.15 userf-domain-mode-commandsEnables the use of Smart RF and WIPS with this RF Dom

GLOBAL CONFIGURATION COMMANDS 4 - 1414.1.41 rfs4000global config mode commandsAdds an RFS4000 wireless controller to the networkSupported in the foll

4 - 142 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.42 rfs6000global config mode commandsAdds an RFS6000 wireless controller to the network

GLOBAL CONFIGURATION COMMANDS 4 - 1434.1.43 rfs7000global config mode commandsAdds an RFS7000 wireless controller to the networkSupported in the foll

MOTOROLA SOLUTIONS WING 5.2.6CLI REFERENCE GUIDE72E-163130-01Revision AJune 2012

xxviii WiNG 5.2.6 Wireless Controller CLI Reference Guidenot include a Restricted Rights notice, or other notice referring to this End-User License Ag

4 - 144 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.44 nx9000global config mode commandsAdds an NX9000 Series wireless controller to the ne

GLOBAL CONFIGURATION COMMANDS 4 - 1454.1.45 role-policyglobal config mode commandsConfigures a role-based firewall policySupported in the following p

4 - 146 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.46 selfglobal config mode commandsDisplays the device’s configuration contextSupported

GLOBAL CONFIGURATION COMMANDS 4 - 1474.1.47 smart-rf-policyglobal config mode commandsConfigures a Smart RF policySupported in the following platform

4 - 148 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.48 wips-policyglobal config mode commandsConfigures a WIPS policySupported in the follo

GLOBAL CONFIGURATION COMMANDS 4 - 1494.1.49 wlanglobal config mode commandsConfigures a wireless LAN. Table 4.16 lists WLAN configuration mode comman

4 - 150 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.1 wlanwlanConfigures a WLAN or enters WLAN configuration context for one or more WLA

GLOBAL CONFIGURATION COMMANDS 4 - 1514.1.49.2 wlan-mode-commandswlanConfigures WLAN mode commands. Manual WLAN mappings are erased when the actual WL

4 - 152 WiNG 5.2.6 Wireless Controller CLI Reference Guidemotorola-extensionsEnables support for Motorola Solutions specific extensions to 802.11 page

GLOBAL CONFIGURATION COMMANDS 4 - 1534.1.49.2.1 accountingwlan-mode-commandsDefines the WLAN’s accounting configurationSupported in the following pla

CHAPTER 1 INTRODUCTIONThis chapter describes the commands available using the wireless controller Command Line Interface (CLI). CLI is available for w

4 - 154 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.2 aclwlan-mode-commandsDefines the actions taken based on an ACL rule configuratio

GLOBAL CONFIGURATION COMMANDS 4 - 1554.1.49.2.3 answer-broadcast-probeswlan-mode-commandsAllows the WLAN to respond to probe requests that do not spe

4 - 156 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.4 authentication-typewlan-mode-commandsSets the WLAN’s authentication typeSupporte

GLOBAL CONFIGURATION COMMANDS 4 - 1574.1.49.2.5 bridging-modewlan-mode-commandsConfigures how packets are bridged to and from a WLANSupported in the

4 - 158 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.6 broadcast-dhcpwlan-mode-commandsConfigures the broadcast DHCP packet handling pa

GLOBAL CONFIGURATION COMMANDS 4 - 1594.1.49.2.7 broadcast-ssidwlan-mode-commandsAdvertises the WLAN SSID in beaconsSupported in the following platfor

4 - 160 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.8 captive-portal-enforcementwlan-mode-commandsConfigures the WLAN’s captive portal

GLOBAL CONFIGURATION COMMANDS 4 - 1614.1.49.2.9 client-accesswlan-mode-commandsEnables WLAN client access (for normal data operations)Supported in th

4 - 162 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.10 client-client-communicationwlan-mode-commandsAllows frame switching from one cl

GLOBAL CONFIGURATION COMMANDS 4 - 1634.1.49.2.11 client-load-balancingwlan-mode-commandsConfigures client load balancing on a WLANSupported in the fo

1 - 2 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamples in this reference guideExamples used in this reference guide are generic to the each

4 - 164 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-wlan-wlan1)#client-load-balancing allow-single-band-clients 2.

GLOBAL CONFIGURATION COMMANDS 4 - 1654.1.49.2.12 data-rateswlan-mode-commandsSpecifies the 802.11 rates supported on a WLANSupported in the following

4 - 166 WiNG 5.2.6 Wireless Controller CLI Reference Guide• data-rates [2.4GHz|5GHz] custom [1|11|12|18|2|24|36|48|5.5|54|6|9|basic-1|basic-11|basic-1

GLOBAL CONFIGURATION COMMANDS 4 - 167Examplesrfs7000-37FABE(config-wlan-wlan1)#data-rates 2.4GHz gnrfs7000-37FABE(config-wlan-wlan1)#show context wlan

4 - 168 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.13 descriptionwlan-mode-commandsDefines the WLAN descriptionSupported in the follo

GLOBAL CONFIGURATION COMMANDS 4 - 1694.1.49.2.14disablewlan-mode-commandsDisables WLAN in response to specified eventsSupported in the following plat

4 - 170 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.15 encryption-typewlan-mode-commandsSets a WLAN’s encryption typeSupported in the

GLOBAL CONFIGURATION COMMANDS 4 - 1714.1.49.2.16 enforce-dhcpwlan-mode-commandsDrops packets from clients with a static IP addressSupported in the fo

4 - 172 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.17 http-analyzewlan-mode-commandsEnables HTTP URL analysis on the WLANSupported in

GLOBAL CONFIGURATION COMMANDS 4 - 1734.1.49.2.18 ipwlan-mode-commandsConfigures Internet Protocol (IP) settingsSupported in the following platforms:•

INTRODUCTION 1 - 3Command ModesA session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode). For security, only a

4 - 174 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.19 kerberoswlan-mode-commandsConfigures Kerberos authentication parameters on a WL

GLOBAL CONFIGURATION COMMANDS 4 - 175• keberos server timeout <1-60>Examplesrfs7000-37FABE(config-wlan-wlan1)#kerberos server timeout 12rfs7000-

4 - 176 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.20 motorola-extensionswlan-mode-commandsEnables support for Motorola Solutions spe

GLOBAL CONFIGURATION COMMANDS 4 - 1774.1.49.2.21 nowlan-mode-commandsNegates WLAN mode commands and reverts values to their defaultSupported in the f

4 - 178 WiNG 5.2.6 Wireless Controller CLI Reference Guide wpa-wpa2 Modify tkip-ccmp (wpa/wpa2) related parameters service

GLOBAL CONFIGURATION COMMANDS 4 - 1794.1.49.2.22 protected-mgmt-frameswlan-mode-commandsConfigures Protected Management Frames (PMF) (IEEE 802.11w) r

4 - 180 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.23 proxy-arp-modewlan-mode-commandsEnables proxy ARP mode for handling ARP request

GLOBAL CONFIGURATION COMMANDS 4 - 1814.1.49.2.24 radiuswlan-mode-commandsConfigures RADIUS related parametersSupported in the following platforms:• A

4 - 182 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.25 shutdownwlan-mode-commandsDisables a WLANSupported in the following platforms:•

GLOBAL CONFIGURATION COMMANDS 4 - 1834.1.49.2.26 ssidwlan-mode-commandsConfigures a WLAN’s SSIDSupported in the following platforms:• Access Points —

1 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guidehelp create-cluster association-acl-policyjoin-cluster crypto auto-provisioning-policylogging

4 - 184 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.27 time-based-accesswlan-mode-commandsConfigures time-based client accessSupported

GLOBAL CONFIGURATION COMMANDS 4 - 1854.1.49.2.28 usewlan-mode-commandsThis command associates an existing captive portal with a WLAN.Supported in the

4 - 186 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-wlan-wlan1)#use ip-access-list in motorolarfs7000-37FABE(confi

GLOBAL CONFIGURATION COMMANDS 4 - 1874.1.49.2.29 vlanwlan-mode-commandsSets the VLAN where traffic from a WLAN is mappedSupported in the following pl

4 - 188 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.30 vlan-pool-memberwlan-mode-commandsAdds a member VLAN to a WLAN’s VLAN poolSuppo

GLOBAL CONFIGURATION COMMANDS 4 - 1894.1.49.2.31 wep128wlan-mode-commandsConfigures WEP128 parametersSupported in the following platforms:• Access Po

4 - 190 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.49.2.32 wep64wlan-mode-commandsConfigures WEP64 parametersSupported in the following pl

GLOBAL CONFIGURATION COMMANDS 4 - 1914.1.49.2.33 wireless-clientwlan-mode-commandsConfigures the transmit power indicated to clientsSupported in the

4 - 192 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-wlan-wlan1)#wireless-client cred-cache-ageout 65rfs7000-37FABE

GLOBAL CONFIGURATION COMMANDS 4 - 1934.1.49.2.34 wpa-wpa2wlan-mode-commandsModifies TKIP-CCMP (WPA/WPA2) related parametersSupported in the following

INTRODUCTION 1 - 5telnet rfs7000terminal nx9000time-it role-policytraceroute selfupgrade smart-rf-policyupgrade-abort wips-policywatch wlanwrite wlan-

4 - 194 WiNG 5.2.6 Wireless Controller CLI Reference Guide• wpa-wpa2 key-rotation [broadcast|unicast] <30-86400>• wpa-wpa2 psk [0 <LINE>|2

GLOBAL CONFIGURATION COMMANDS 4 - 195Examplesrfs7000-37FABE(config-wlan-wlan1)#wpa-wpa2 tkip-countermeasures hold-time 2rfs7000-37FABE(config-wlan-wla

4 - 196 WiNG 5.2.6 Wireless Controller CLI Reference Guide4.1.50 wlan-qos-policyglobal config mode commandsConfigures a WLAN QoS policySupported in t

CHAPTER 5 COMMON COMMANDSThis chapter describes the CLI commands used in the USER EXEC, PRIV EXEC, and GLOBAL CONFIG modes.The PRIV EXEC command set c

5 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide5.1 Common CommandsTable 5.1 summarizes commands common to the User Exec, Priv Exec, and Globa

COMMON COMMANDS 5 - 35.1.1 clrscrcommon commandsClears the screen and refreshes the prompt, irrespective of the mode you are inSupported in the follo

5 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide5.1.2 commitcommon commandsCommits all changes made in the active session. Use the commit com

COMMON COMMANDS 5 - 55.1.3 endcommon commandsEnds and exits the current mode and moves to the PRIV EXEC mode. The prompt changes to rfs7000-37FABE#.S

5 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide5.1.4 exitcommon commandsThe exit command works differently in the User Exec, Priv Exec, and

COMMON COMMANDS 5 - 75.1.5 helpcommon commandsDescribes the interactive help systemUse this command to access the advanced help feature. Use “?” anyt

1 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide1.2 Getting Context Sensitive HelpEnter a question mark (?) at the system prompt to display a

5 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE>help search crypto detailedFound 29 references for “crypto” Fou

COMMON COMMANDS 5 - 9rfs7000-37FABE>help show configuration-tree ## ACCESS-POINT / SWITCH ## ---+ |

5 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guiderfs7000-37FABE>help search service skip-showFound 32 references for "service"Mod

COMMON COMMANDS 5 - 115.1.6 nocommon commandsNegates a command or sets its default. Though the no command is common to the User Exec, Priv Exec, and

5 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide wips-policy Delete a wips policy wlan Delete a wlan obj

COMMON COMMANDS 5 - 135.1.7 revertcommon commandsReverts changes made to their last saved configurationSupported in the following platforms:• Access

5 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide5.1.8 servicecommon commandsService commands are used to view and manage wireless controller

COMMON COMMANDS 5 - 15service cluster force [active|configured-state|standby]service delete-offline-aps [all|offline-for days <0-999> {time <

5 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guideservice wireless client beacon-request <MAC> mode [active|passive|table] ssid [<SSID

COMMON COMMANDS 5 - 17invalid-management-frame Optional. Clears invalid management frames detection event historyipx-detection Optional. Clears automa

INTRODUCTION 1 - 7Enter a question mark (?) (in place of a keyword or argument) to list keywords or arguments. Include a space before the “?”. This fo

5 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide• service advanced-wips terminate-device <MAC>• service ap300 dot1x username <USERNA

COMMON COMMANDS 5 - 19• service clear [command-history|reboot-history|upgrade-history] {on <DEVICE-NAME>}• service clear noc statistics• service

5 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide• service cli-tables-expand {left|right}• service cli-tables-skin [ansi|hashes|minimal|none|p

COMMON COMMANDS 5 - 21• service force-send-config {on <DEVICE-OR-DOMAIN-NAME>}• service locator {on <DEVICE-NAME>}• service load-balancing

5 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide• service radius test [<IP>|<HOSTNAME>] <PORT> <1024-65535> <WORD&

COMMON COMMANDS 5 - 23• service show captive-portal [servers|user-cache] {on <DEVICE-NAME>}• service show [cli|configuration-revision|mac-vendor

5 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide• service show dhcp-lease {<INTERFACE>|vlan <1-4094>|wwan1} {(on <DEVICE-NAME&

COMMON COMMANDS 5 - 25• service show pm {history} {(on <DEVICE-NAME>)}]• service show rf-domain-manager diag {<MAC/HOSTNAME>} {(on <DEV

5 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide• service show wireless client proc [info|stats] {<MAC>} {(on <DEVICE-OR-DOMAIN-NAM

COMMON COMMANDS 5 - 27• service show wireless reference dot11 handshake {wpa-wpa2-enterprise|wpa-wpa2-personal}• service ssm dump-core-snapshot• servi

1 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide1.4 Using CLI Editing Features and ShortcutsA variety of shortcuts and edit features are avail

5 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide• service wireless client beacon-request <MAC> mode [active|passive|table] ssid [<SS

COMMON COMMANDS 5 - 29• service wireless wips clear-client-blacklist [all|mac <MAC>]• service wireless wips clear-event-history {on <DEVICE-O

5 - 30 WiNG 5.2.6 Wireless Controller CLI Reference GuideSyntax (Privilege Exec Mode)serviceservice [advanced-wips|ap300|clear|cli-tables-expand|cli-

COMMON COMMANDS 5 - 31• service pm stop {on <DEVICE-NAME>}• service show last-passwd• service signal [abort <PROCESS>|kill <PROCESS>

5 - 32 WiNG 5.2.6 Wireless Controller CLI Reference GuideSyntax (Global Config Mode)serviceservice [set|show cli]service set [command-history <10-

COMMON COMMANDS 5 - 33rfs7000-37FABE>service show general stats on rfs7000-37FABECurrent Fan Speed: 6540 Minimum Fan Speed: TBD Hysteresis: TBDSens

5 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guiderfs7000-37FABE#service traceroute -htraceroute: invalid option -- hBusyBox v1.14.1 () multi-c

COMMON COMMANDS 5 - 35rfs7000-37FABE>service show diag stats on rfs7000-37FABEfan 1 current speed: 6660 min_speed: 2000 hysteresis: 250fan 2 curren

5 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guiderfs7000-37FABE>service show xpath-history-------------------------------------------------

COMMON COMMANDS 5 - 37rfs7000-37FABE>service show wireless config-internal! Startup-Config-Playback Completed: Yesno debug wirelessno country-code!

INTRODUCTION 1 - 91.4.2 Completing a Partial Command NameIf you cannot remember a command name (or if you want to reduce the amount of typing you have

5 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guide5.1.9 showcommon commandsDisplays specified system component settings. There are a number of

COMMON COMMANDS 5 - 39 terminal Display terminal configuration parameters timezone The timezone upgrade-status

5 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide5.1.10 writecommon commandsWrites the system running configuration to memory or terminalSupp

CHAPTER 6 SHOW COMMANDSShow commands display information about a configuration setting or display statistical information. Use this command to see the

6 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1 show commandsTable 6.1 summarizes show commands.Table 6.1 show commandsCommand Description

SHOW COMMANDS 6 - 3mac-address-table Displays MAC address table entries page 6-49mint Displays MiNT protocol configuration commands page 6-50noc Displ

6 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.1 showshow commandsThe show command displays the following information:• A device’s curre

SHOW COMMANDS 6 - 5 session-changes Configuration changes made in this session session-config This session configuration sessions

6 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide timezone The timezone upgrade-status Display last image upgrade statu

SHOW COMMANDS 6 - 7rfs6000-380649>show noc device--------------------------------------------------------------------------------------------------

ii WiNG 5.2.6 Wireless Controller CLI Reference GuideNo part of this publication may be reproduced or used in any form, or by any electrical or mechan

1 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide1.4.4 Creating ProfilesProfiles are sort of a ‘template’ representation of configuration. The

6 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.2 adoptionshow commandsThe adoption command is common to all three modes. It displays inf

SHOW COMMANDS 6 - 96.1.3 advanced-wipsshow commandsDisplays advanced Wireless Intrusion Prevention Policy (WIPS) settingsSupported in the following p

6 - 10 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs6000-380649(config)#show advanced-wips configuration events-----------------------

SHOW COMMANDS 6 - 116.1.4 ap-upgradeshow commandsDisplays AP firmware image upgrade informationSupported in the following platforms:• Access Points —

6 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.5 bootshow commandsDisplays a device’s boot configuration. Use the on command to view a

SHOW COMMANDS 6 - 136.1.6 captive-portalshow commandsDisplays WLAN hotspot informationSupported in the following platforms:• Access Points — AP300, A

6 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show captive-portal client {filter vlan [<VLAN-ID>|not <VLAN-ID>]}• show captiv

SHOW COMMANDS 6 - 156.1.7 cdpshow commandsDisplays the Cisco Discovery Protocol (CDP) neighbor tableSupported in the following platforms:• Access Poi

6 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide-------------------------Device ID: ap7131-139B34Entry address(es): IP Address: 172.16.10.22

SHOW COMMANDS 6 - 176.1.8 clockshow commandsDisplays a system’s clockSupported in the following platforms:• Access Points — AP300, AP621, AP622, AP65

INTRODUCTION 1 - 111.4.6 Remote AdministrationA terminal server may function in remote administration mode if either the terminal services role is not

6 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.9 clustershow commandsDisplays cluster information (cluster configuration parameters, me

SHOW COMMANDS 6 - 196.1.10 commandsshow commandsDisplays commands available for the current modeSupported in the following platforms:• Access Points

6 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.11 contextshow commandsDisplays the current context detailsSupported in the following pl

SHOW COMMANDS 6 - 216.1.12 critical-resourcesshow commandsDisplays critical resource information. Critical resources are resources vital to the wirel

6 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.13 cryptoshow commandsDisplays encryption mode informationSupported in the following pla

SHOW COMMANDS 6 - 23Examplesrfs7000-37FABE(config)#show crypto key rsa public-key-detail on rfs7000-37FABERSA key name: default-trustpoint-srvr-priv-k

6 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.14 debugshow commandsDisplays debugging status of the DPD2 module, profile functions, an

SHOW COMMANDS 6 - 25Examplesrfs7000-37FABE(config)#show debug xpath count /wing-statsSuccess: 4rfs7000-37FABE(config)#rfs7000-37FABE(config)#show debu

6 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.15 debuggingshow commandsDisplays debugging informationSupported in the following platfo

SHOW COMMANDS 6 - 27• show debugging {dhcpsvr|radius|snmp|ssm|vpn} {on <DEVICE-NAME>}• show debugging {on <DEVICE-OR-DOMAIN-NAME>}Examples

1 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide snmp-server community 0 private rw snmp-server user snmptrap v3 encrypted des auth md5 0 mot

6 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.16 device-categorizationshow commandsDisplays device categorization summarySupported in

SHOW COMMANDS 6 - 296.1.17 event-historyshow commandsDisplays event history reportSupported in the following platforms:• Access Points — AP300, AP621

6 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.18 event-system-policyshow commandsDisplays detailed event system policy configurationSu

SHOW COMMANDS 6 - 316.1.19 fileshow commandsDisplays file system informationSupported in the following platforms:• Access Points — AP300, AP621, AP62

6 - 32 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.20 firewallshow commandsDisplays wireless firewall information, such as DHCP snoop table

SHOW COMMANDS 6 - 33• show firewall flows filter [(dir|dst|ether|flow-type|icmp|igmp|ip|max-idle|min-bytes|min-idle|min-pkts|not|port|src|tcp|udp)] {(

6 - 34 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs6000-380649(config)#show firewall ? dhcp Dhcp Based dos Denial of Service

SHOW COMMANDS 6 - 35rfs6000-380649(config)#show firewall flows management on rfs6000-380649========== Flow# 1 Summary ==========Forward: Vlan 1, TCP 1

6 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.21 interfaceshow commandsDisplays wireless controller interface statusSupported in the f

SHOW COMMANDS 6 - 37Examplesrfs6000-380649(config)#show interface switchport on rfs6000-380649--------------------------------------------------------

CHAPTER 2 USER EXEC MODE COMMANDSLogging in to the wireless controller places you within the USER EXEC command mode. Typically, a login requires a use

6 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guiderfs6000-380649(config)#show interface counters-----------------------------------------------

SHOW COMMANDS 6 - 396.1.22 ipshow commandsDisplays IP related informationSupported in the following platforms:• Access Points — AP300, AP621, AP622,

6 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show ip dhcp binding {manual {on <DEVICE-NAME>}|on <DEVICE-NAME>}• show ip [dhc

SHOW COMMANDS 6 - 41• show ip igmp snooping vlan <1-4095> {<IP> {on <DEVICE-NAME>}|on <DEVICE-NAME>}• show ip interface {<I

6 - 42 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config)#show ip arp test on rfs7000-37FABE+--------------------+------

SHOW COMMANDS 6 - 43rfs7000-37FABE(config)#show ip route vlan 1 on rfs7000-37FABE+------------------------+---------------------+-------------+-------

6 - 44 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.23 ip-access-list-statsshow commandsDisplays IP access list statisticsSupported in the f

SHOW COMMANDS 6 - 456.1.24 licensesshow commandsDisplays installed licenses and usage informationSupported in the following platforms:• Access Points

6 - 46 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.25 lldpshow commandsDisplays Link Layer Discovery Protocol (LLDP) informationSupported i

SHOW COMMANDS 6 - 476.1.26 loggingshow commandsDisplays network activity logSupported in the following platforms:• Access Points — AP300, AP621, AP62

2 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1 User Exec Mode CommandsTable 2.1 summarizes User Exec Mode commands.Table 2.1 user exec mo

6 - 48 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.27 mac-access-list-statsshow commandsDisplays MAC access list statisticsSupported in the

SHOW COMMANDS 6 - 496.1.28 mac-address-tableshow commandsDisplays MAC address table entriesSupported in the following platforms:• Access Points — AP3

6 - 50 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.29 mintshow commandsDisplays MiNT protocol configuration commandsSupported in the follow

SHOW COMMANDS 6 - 51• show mint lsp-db {details <AA.BB.CC.DD> {on <DEVICE-NAME>}|on <DEVICE-NAME>}• show mint mlcp {history {on <

6 - 52 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.30 nocshow commandsDisplays Network Operations Center (NOC) level informationSupported i

SHOW COMMANDS 6 - 53Examplesrfs7000-37FABE(config)#show noc device+-----------------+----------------+--------+----------------+------------| MAC| H

6 - 54 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.31 ntpshow commandsDisplays Network Time Protocol (NTP) informationSupported in the foll

SHOW COMMANDS 6 - 556.1.32 password-encryptionshow commandsDisplays password encryption status (enabled/disabled)Supported in the following platforms

6 - 56 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.33 powershow commandsDisplays Power Over Ethernet (PoE) informationSupported in the foll

SHOW COMMANDS 6 - 576.1.34 privilegeshow commandsDisplays current privilege levelSupported in the following platforms:• Access Points — AP300, AP621,

USER EXEC MODE COMMANDS 2 - 3service Invokes service commands to troubleshoot or debug (config-if) instance configurationspage 5-14show Displays runni

6 - 58 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.35 reloadshow commandsDisplays scheduled reload informationSupported in the following pl

SHOW COMMANDS 6 - 596.1.36 remote-debugshow commandsDisplays remote debug session informationSupported in the following platforms:• Access Points — A

6 - 60 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.37 rf-domain-managershow commandsDisplays RF Domain manager selection detailsSupported i

SHOW COMMANDS 6 - 616.1.38 roleshow commandsDisplays role based firewall informationSupported in the following platforms:• Access Points — AP300, AP6

6 - 62 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.39 rtlsshow commandsDisplays Real Time Location System (RTLS) statisticsSupported in the

SHOW COMMANDS 6 - 636.1.40 running-configshow commandsDisplays configuration files (where all configured MAC and IP access lists are applied to an in

6 - 64 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show running-config {device [<MAC>|self] {include-factory}}• show running-config {inc

SHOW COMMANDS 6 - 65ap621 <PROFILE-NAME>Displays AP621 profile configuration• <PROFILE-NAME> – Displays configuration for a specified AP62

6 - 66 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show running-config {rf-domain <DOMAIN-NAME> {include-factory}}• show running-config

SHOW COMMANDS 6 - 676.1.41 session-changesshow commandsDisplays configuration changes made in the current sessionSupported in the following platforms

2 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.1 ap-upgradeuser exec mode commandsEnables an automatic firmware upgrade on an adopted AP

6 - 68 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.42 session-configshow commandsLists active open sessions on a deviceSupported in the fol

SHOW COMMANDS 6 - 696.1.43 sessionsshow commandsDisplays CLI sessions initiated on a deviceSupported in the following platforms:• Access Points — AP3

6 - 70 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.44 smart-rfshow commandsDisplays Smart RF management commandsSupported in the following

SHOW COMMANDS 6 - 71• show smart-rf [calibration-config|calibration-status|channel-distribution|history|history-timeline] {on <DOMAIN-NAME>}• sh

6 - 72 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show smart-rf interfering-ap {<MAC>|<DEVICE-NAME>|on}• show smart-rf interferin

SHOW COMMANDS 6 - 736.1.45 spanning-treeshow commandsDisplays spanning tree informationSupported in the following platforms:• Access Points — AP300,

6 - 74 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show spanning-tree mst {instance <1-15>} {interface <INTERFACE>} {(on <DEVIC

SHOW COMMANDS 6 - 75rfs7000-37FABE(config)#show spanning-tree mst detail% Bridge up - Spanning Tree Disabled% CIST Root Path Cost 0 - CIST Root Port

6 - 76 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.46 startup-configshow commandsDisplays complete startup configuration scriptSupported in

SHOW COMMANDS 6 - 776.1.47 terminalshow commandsDisplays terminal configuration parametersSupported in the following platforms:• Access Points — AP30

USER EXEC MODE COMMANDS 2 - 5• ap-upgrade [ap621|ap622|ap650|ap6511|ap6521|ap6532|ap71xx|ap81xx] all {no-reboot|reboot-time <TIME>|upgrade-time

6 - 78 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.48 timezoneshow commandsDisplays a device’s timezoneSupported in the following platforms

SHOW COMMANDS 6 - 796.1.49 upgrade-statusshow commandsDisplays the last image upgrade statusSupported in the following platforms:• Access Points — AP

6 - 80 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.50 versionshow commandsDisplays a device’s software and hardware versionSupported in the

SHOW COMMANDS 6 - 816.1.51 whatshow commandsPerforms global search for a specified targetSupported in the following platforms:• Access Points — AP300

6 - 82 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.52 wirelessshow commandsDisplays wireless configuration parametersSupported in the follo

SHOW COMMANDS 6 - 83Parameters• show wireless ap {configured}• show wireless ap {detail <MAC/HOST-NAME> {on <DEVICE-OR-DOMAIN-NAME>}|on &l

6 - 84 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show wireless client {detail <MAC> {on <DEVICE-OR-DOMAIN-NAME>}|on <DEVICE-O

SHOW COMMANDS 6 - 85• show wireless client {filter wlan {<WLAN>|not <WLAN>}} {on <DEVICE-OR-DOMAIN-NAME>}• show wireless client {sta

6 - 86 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show wireless mesh detail {<DEVICE-NAME> <1-3> {(filter <RADIO-MAC>)} {(o

SHOW COMMANDS 6 - 87• show wireless radio {statistics {detail|window-data} {<DEVICE-NAME> <1-3> {(filter <RADIO-MAC>)} {(on <DEVI

2 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide• ap-upgrade cancel-upgrade [ap621|ap622|ap650|ap651|ap6521|ap6532|ap71xx|ap81xx]all• ap-upgra

6 - 88 WiNG 5.2.6 Wireless Controller CLI Reference Guide• show wireless regulatory device-type [ap300|ap621|ap622|ap650|ap6511|ap6521|ap6532|ap71xx|a

SHOW COMMANDS 6 - 89• show wlan {detail <WLAN>|on <DEVICE-OR-DOMAIN-NAME>|policy-mappings|usage-mappings}• show wlan {config filter {devic

6 - 90 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config)#show wireless sensor server status on ap7131-889EC4rfs7000-37F

SHOW COMMANDS 6 - 91rfs7000-37FABE(config)#show wireless regulatory device-type AP650 in--------------------------------------------------------------

6 - 92 WiNG 5.2.6 Wireless Controller CLI Reference Guide6.1.53 wwanshow commandsDisplays wireless WAN statusSupported in the following platforms:• A

CHAPTER 7 PROFILESThis chapter is organized as follows:• Creating Profiles• Device Specific Commands

7 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1 Creating ProfilesPROFILESProfiles enable administrators to assign a common set of configu

PROFILES 7 - 3Select the device profile that you want to configure and provide a name. For example, the following command configures a default AP71XX

7 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide do Run commands from Exec mode end

PROFILES 7 - 5legacy-auto-downgradeAuto downgrades a legacy device firmware page 7-146legacy-auto-updateAuto upgrades a legacy device firmware page 7-

USER EXEC MODE COMMANDS 2 - 7Examplesrfs7000-37FABE>ap-upgrade AP621 all--------------------------------------------------------------------------

7 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guideuse Uses pre configured policies with this profile page 7-181vpn Configures VPN settings page

PROFILES 7 - 77.1.1 aaaconfig-profile config commandsConfigures VPN Authentication, Authorization, and Accounting (AAA) settings on the Remote Authen

7 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.2 ap-mobilityCreating ProfilesConfigures AP mobility (fixed or vehicle mounted)Supported

PROFILES 7 - 97.1.3 ap-upgradeconfig-profile config commandsEnables an automatic firmware upgrade on an adopted access pointSupported in the followin

7 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.4 ap300config-profile config commandsEnables the adoption of an AP300 by a profile or wi

PROFILES 7 - 117.1.5 arpconfig-profile config commandsConfigures Address Resolution Protocol (ARP) parametersSupported in the following platforms:• A

7 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.6 auto-learn-staging-configconfig-profile config commandsEnables automatic recognition o

PROFILES 7 - 137.1.7 autoinstallconfig-profile config commandsAutomatically installs firmware image and configuration parameters on to the selected d

7 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.8 bridgeconfig-profile config commandsConfigures Ethernet bridging parametersTable 7.2 c

PROFILES 7 - 157.1.8.1 bridgebridgeConfigures VLAN Ethernet bridging parameters. For more information, see bridge-vlan-mode-commands.Supported in the

iiiRevision HistoryChanges to the original guide are listed below:Change Date DescriptionRevision A June 2012 Manual updated to the WiNG 5.2.6 baseli

2 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.2 change-passwduser exec mode commandsChanges the password of a logged user. When this co

7 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.8.2 bridge-vlan-mode-commandsbridgeTable 7.3 summarizes bridge VLAN mode commandsTable 7

PROFILES 7 - 177.1.8.2.1 bridging-modebridge-vlan-mode-commandsConfigures how packets are bridged on the selected VLANSupported in the following plat

7 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.8.2.2 descriptionbridge-vlan-mode-commandsSets a VLAN bridge descriptionSupported in the

PROFILES 7 - 197.1.8.2.3 edge-vlanbridge-vlan-mode-commandsEnables edge VLAN mode. In the edge VLAN mode, a protected port does not forward traffic t

7 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.8.2.4 ipbridge-vlan mode commandsConfigures VLAN bridge IP componentsSupported in the fo

PROFILES 7 - 21• ip igmp snooping {querier {address <IP>|max-response-time <1-25>|timer expiry <60-300>|version <1-3>}}Example

7 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.8.2.5 nobridge-vlan-mode-commandsNegates a command or reverts settings to their default.

PROFILES 7 - 23• no ip igmp snooping {querier {address|max-response-time|timer expiry|version}}• no use [ip-access-list|mac-access-list] tunnel outExa

7 - 24 WiNG 5.2.6 Wireless Controller CLI Reference GuideRelated Commandsbridging-mode Configures how packets on this VLAN are bridgeddescription Defi

PROFILES 7 - 257.1.8.2.6 stateful-packet-inspection-12bridge-vlan-mode-commandsEnables a stateful packet inspection at the layer 2 firewallSupported

USER EXEC MODE COMMANDS 2 - 92.1.3 clearuser exec mode commandsClears parameters, cache entries, table entries, and other similar entries. The clear

7 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.8.2.7 usebridge-vlan-mode-commandsUses pre configured access lists with this bridge poli

PROFILES 7 - 277.1.9 cdpconfig-profile config commandsUses Cisco Discovery Protocol (CDP) on the device. CDP is a layer 2 protocol to discover inform

7 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.10 clusterconfig-profile config commandsSets the cluster configurationSupported in the f

PROFILES 7 - 29• cluster mode [active|standby]• cluster name <CLUSTER-NAME>Examplesrfs7000-37FABE(config-profile-default-RFS7000)#cluster name c

7 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.11 configuration-persistenceconfig-profile config commandsEnables configuration persiste

PROFILES 7 - 317.1.12 controllerconfig-profile config commandsSets the wireless controller as part of a pool and groupSupported in the following plat

7 - 32 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-default-RFS7000)#controller group testrfs7000-37FABE(co

PROFILES 7 - 337.1.13 cryptoCreating ProfilesTable 7.4 summarizes crypto configuration commands.Table 7.4 config-crypto commandsCommand Description R

7 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.13.1 cryptocryptoUse crypto to define system level local ID for ISAKMP negotiation and t

PROFILES 7 - 35Parameters• crypto ipsec security-association lifetime [kilobytes <500-2147383646>|seconds <90-2147383646>]• crypto ipsec t

2 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide• clear crypto [ipsec|isakmp] sa [<IP>|all] {on <DEVICE_NAME>}• clear event-histo

7 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto isakmp aggressive-mode-peer [address <IP>|dn <DISTINGUISHED-NAME>|hostna

PROFILES 7 - 37• crypto isakmp key [0 <WORD>|2 <WORD>|<WORD>] address <IP>• crypto isakmp policy <ISAKMP-POLICY-NAME>• c

7 - 38 WiNG 5.2.6 Wireless Controller CLI Reference GuideUsage GuidelinesIf no peer IP address is configured, the manual crypto map is not valid and n

PROFILES 7 - 39rfs7000-37FABE(config-profile-default-RFS7000)#show contextpprofile RFS7000 default-RFS7000 autoinstall configuration autoinstall firmw

7 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.13.2 isakmp-policycryptoCreates a ISAKMP policy and enters its configuration mode. To na

PROFILES 7 - 41show Displays running system information page 6-4write Writes information to memory or terminal page 5-40Table 7.5 isakmp-policy mode c

7 - 42 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.13.2.1authenticationisakmp-policySets authentication method for the ISAKMP protection su

PROFILES 7 - 437.1.13.2.2encryptionisakmp-policyConfigures the encryption level transmitted using the crypto isakmp commandSupported in the following

7 - 44 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.13.2.3groupisakmp-policySpecifies the Diffie-Hellman (DH) group (1 or 2) used by the IKE

PROFILES 7 - 457.1.13.2.4hashisakmp-policySpecifies the hash algorithm used to authenticate data transmitted over the IKE SASupported in the followin

USER EXEC MODE COMMANDS 2 - 11Examplesrfs7000-37FABE>clear crypto isakmp sa 111.222.333.01 on rfs7000-37FABErfs7000-37FABE>rfs7000-37FABE>cle

7 - 46 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.13.2.5lifetimeisakmp-policySpecifies how long an IKE SA is valid before it expiresSuppor

PROFILES 7 - 477.1.13.2.6noisakmp-policyNegates a command or reverts settings to their default. The no command, when used in the ISAKMP policy mode,

7 - 48 WiNG 5.2.6 Wireless Controller CLI Reference Guideshow Displays running system informationwrite Writes information to memory or terminal

PROFILES 7 - 497.1.13.3 crypto-groupcryptoCreates crypto group and enters its configuration mode. To navigate to the config-crypto-group instance, us

7 - 50 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.13.3.1dnscrypto-groupConfigures the DNS serverSupported in the following platforms:• Acc

PROFILES 7 - 517.1.13.3.2winscrypto-groupConfigures the Windows name serverSupported in the following platforms:• Access Points — AP300, AP621, AP622

7 - 52 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.14 dscp-mappingconfig-profile config commandsConfigures IP Differentiated Services Code

PROFILES 7 - 537.1.15 email-notificationconfig-profile config commandsConfigures e-mail notification settingsSupported in the following platforms:• A

7 - 54 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-default-RFS7000)#email-notification recipient test@moto

PROFILES 7 - 557.1.16 enforce-versionconfig-profile config commandsChecks device firmware versions before attempting connectionSupported in the follo

2 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.4 clockuser exec mode commandsSets a device’s system clockSupported in the following pla

7 - 56 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.17 eventsconfig-profile config commandsDisplays system event messagesSupported in the fo

PROFILES 7 - 577.1.18 exportconfig-profile config commandsEnables the export of startup.log file after every rebootSupported in the following platfor

7 - 58 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.19 ip config-profile config commandsConfigures IP components, such as default gateway, D

PROFILES 7 - 59• ip dhcp client [hostname|persistent-lease]• ip igmp snooping {forward-unknown-multicast}• ip igmp snooping {querier {max-response-tim

7 - 60 WiNG 5.2.6 Wireless Controller CLI Reference Guide• ip local pool default low-ip-address <IP> {high-ip-address <IP>}• ip nat pool &

PROFILES 7 - 61• ip nat [inside|outside] source list <IP-ACCESS-LIST> interface [<INTERFACE>|vlan <1-4094>|wwan1] [(address <IP&g

7 - 62 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-default-RFS7000)#ip default-gateway 172.16.10.9rfs7000-

PROFILES 7 - 637.1.20 nat-poolipUse the (config-profile-default-RFS7000) instance to configure Network Address Translation (NAT) pool commands.rfs700

7 - 64 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.20.1 addressnat-poolConfigures NAT pool IP addressesSupported in the following platforms

PROFILES 7 - 657.1.20.2 nonat-poolNegates a command or sets its defaultSupported in the following platforms:• Access Points — AP300, AP621, AP622, AP

USER EXEC MODE COMMANDS 2 - 132.1.5 clusteruser exec mode commandsInitiates cluster context. The cluster context provides centralized management to c

7 - 66 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21 interfaceCreating ProfilesTable 7.8 summarizes the interface configuration commands.T

PROFILES 7 - 677.1.21.1 interfaceinterfaceSelects an interface to configureThis command is used to enter the interface configuration mode for the spe

7 - 68 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-default-RFS7000)#interface vlan 44rfs7000-37FABE(config

PROFILES 7 - 697.1.21.2 interface config instanceinterfaceUse the (config-profile-default-RFS7000) instance to configure the Ethernet, VLAN and tunne

7 - 70 WiNG 5.2.6 Wireless Controller CLI Reference Guideno Negates a command or sets its defaults page 7-78power Invokes Power over Ethernet (PoE) co

PROFILES 7 - 717.1.21.2.1cdpinterface config instanceEnables CDP on wireless controller portsSupported in the following platforms:• Access Points — A

7 - 72 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.2channel-groupinterface config instanceConfigures channel group commandsSupported i

PROFILES 7 - 737.1.21.2.3descriptioninterface config instanceDefines an interface descriptionSupported in the following platforms:• Access Points — A

7 - 74 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.4dot1xinterface config instanceConfigures 802.1X authentication settingsSupported i

PROFILES 7 - 757.1.21.2.5duplexinterface config instanceSpecifies duplex mode for an interfaceSupported in the following platforms:• Access Points —

2 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.6 connectuser exec mode commandsBegins a console connection to a remote device using the

7 - 76 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.6ipinterface config instanceSets the ARP and DHCP components for this interfaceSupp

PROFILES 7 - 777.1.21.2.7lldpinterface config instanceConfigures Link Local Discovery Protocol (LLDP) parametersSupported in the following platforms:

7 - 78 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.8nointerface config instanceNegates a command or sets its defaultsSupported in the

PROFILES 7 - 797.1.21.2.9powerinterface config instanceInvokes Power over Ethernet (PoE) commandsSupported in the following platforms:• Access Points

7 - 80 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.10qosinterface config instanceEnables Quality of Service (QoS)Supported in the foll

PROFILES 7 - 817.1.21.2.11shutdowninterface config instanceDisables an interface. The interface is administratively enabled unless explicitly disable

7 - 82 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.12spanning-treeinterface config instanceConfigures spanning tree parametersSupporte

PROFILES 7 - 83• spanning-tree link-type [point-to-point|shared]• spanning-tree mst <0-15> [cost <1-200000000>|port-priority <0-240>

7 - 84 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.2.13speedinterface config instanceSpecifies the speed of a FastEthernet (10/100) or G

PROFILES 7 - 857.1.21.2.14switchportinterface config instanceSets switching mode characteristics for the selected interfaceSupported in the following

USER EXEC MODE COMMANDS 2 - 152.1.7 create-clusteruser exec mode commandsCreates a new cluster on a specified deviceSupported in the following platfo

7 - 86 WiNG 5.2.6 Wireless Controller CLI Reference Guide• switchport trunk native [tagged|vlan <1-4094>]Usage GuidelinesInterfaces ge1- ge4 can

PROFILES 7 - 877.1.21.2.15useinterface config instanceSpecifies the IP access list and MAC access list used with this interfaceSupported in the follo

7 - 88 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.3 interface vlan instanceinterfaceUse (config-profile-default-RFS7000) to configure E

PROFILES 7 - 897.1.21.3.1cryptointerface vlan instanceSets encryption module for this VLAN interface. The encryption module (crypto map) is configure

7 - 90 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.3.2descriptioninterface vlan instanceDefines a VLAN interface description. Use this c

PROFILES 7 - 917.1.21.3.3dhcp-relay-incominginterface vlan instanceAllows an on-board DHCP server to respond to relayed DHCP packetsSupported in the

7 - 92 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.3.4ipinterface vlan instanceConfigures VLAN interface IP configuration commandsSuppor

PROFILES 7 - 93• ip nat [inside|outside]Examplesrfs7000-37FABE(config-profile-default-RFS7000-if-vlan8)#ip address 10.0.0.1/8rfs7000-37FABE(config-pro

7 - 94 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.3.5nointerface vlan instanceNegates a command or sets its default values. The no comm

PROFILES 7 - 95• no ip address [helper-address <IP>|nat]• no ip address dhcp client request options allExamplesrfs7000-37FABE(config-profile-def

2 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.8 cryptouser exec mode commandsEnables RSA Keypair management. Use this command to gener

7 - 96 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.3.6shutdowninterface vlan instanceShuts down the selected interface. Use the no shutd

PROFILES 7 - 977.1.21.3.7useinterface vlan instanceSpecifies an IP access list to use with this VLAN interfaceSupported in the following platforms:•

7 - 98 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4 interface radio instanceinterfaceThis section documents radio interface configurati

PROFILES 7 - 99 do Run commands from Exec mode end End current mode and change to EXEC mode exit

7 - 100 WiNG 5.2.6 Wireless Controller CLI Reference Guidepreamble-short Enables the use of short preamble on this radio page 7-131probe-response Conf

PROFILES 7 - 1017.1.21.4.1aeroscoutinterface radio instanceEnables Aeroscout Multicast packet forwardingSupported in the following platforms:• Access

7 - 102 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.2aggregationinterface radio instanceConfigures 802.11n frame aggregation. Frame ag

PROFILES 7 - 103• aggregation ampdu max-aggr-size tx [<0-65535>]• aggregation ampdu min-spacing [0|1|2|4|8|16]• aggregation amsdu [rx-only|tx-rx

7 - 104 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-71xxTestProfile-if-radio1)#aggregation ampdu tx-onlyrf

PROFILES 7 - 1057.1.21.4.3airtime-fairnessinterface radio instanceEnables equal access for wireless clients based on their airtime usageSupported in

USER EXEC MODE COMMANDS 2 - 17crypto pki import [certificate|crl|trustpoint]crypto pki import [certificate|crl] <TRUSTPOINT-NAME> <IMPORT-FRO

7 - 106 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.4antenna-diversityinterface radio instanceTransmits antenna diversity for non-11n

PROFILES 7 - 1077.1.21.4.5antenna-gaininterface radio instanceConfigures the antenna gain value of the selected radio. Antenna gain defines the abili

7 - 108 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.6antenna-modeinterface radio instanceConfigures the antenna mode (the number of tr

PROFILES 7 - 1097.1.21.4.7beaconinterface radio instanceConfigures radio beacon parameters. Beacons are packets sent by the access point to synchroni

7 - 110 WiNG 5.2.6 Wireless Controller CLI Reference Guiderfs7000-37FABE(config-profile-71xxTestProfile-if-radio1)#show context interface radio1 beac

PROFILES 7 - 1117.1.21.4.8channelinterface radio instanceConfigures a radio’s channel of operationSupported in the following platforms:• Access Point

7 - 112 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.9data-ratesinterface radio instanceConfigures the 802.11 data rates on this radioS

PROFILES 7 - 113Examplesrfs7000-37FABE(config-profile-71xxTestProfile-if-radio1)#data-rates b-onlyrfs7000-37FABE(config-profile-71xxTestProfile-if-rad

7 - 114 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.10descriptioninterface radio instanceConfigures the selected radio’s descriptionSu

PROFILES 7 - 1157.1.21.4.11dfs-rehomeinterface radio instanceReverts to configured home channel once Dynamic Frequency Selection (DFS) evacuation per

iv WiNG 5.2.6 Wireless Controller CLI Reference Guide

2 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto key export rsa <RSA-KEYPAIR-NAME> <EXPORT-TO-URL> {passphrase <KEY-PA

7 - 116 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.12dynamic-chain-selectioninterface radio instanceEnables automatic antenna mode se

PROFILES 7 - 1177.1.21.4.13ekahauinterface radio instanceEnables Ekahau multicast packet forwardingSupported in the following platforms:• Access Poin

7 - 118 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.14guard-intervalinterface radio instanceConfigures the 802.11n guard interval. A g

PROFILES 7 - 1197.1.21.4.15lock-rf-modeinterface radio instanceRetains user configured RF mode settings for the selected radioSupported in the follow

7 - 120 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.16max-clientsinterface radio instanceConfigures the maximum number of wireless cli

PROFILES 7 - 1217.1.21.4.17meshinterface radio instanceUse this command to configure radio mesh parameters. A Wireless Mesh Network (WMN) is a networ

7 - 122 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-71xxTestProfile-if-radio1)#mesh clientrfs7000-37FABE(c

PROFILES 7 - 1237.1.21.4.18nointerface radio instanceNegates a command or resets settings to their default. When used in the profile/device > radi

7 - 124 WiNG 5.2.6 Wireless Controller CLI Reference Guide txbf Configure Transmit Beamforming (txbf) parameters use

PROFILES 7 - 1257.1.21.4.19non-unicastinterface radio instanceConfigures the handling of non unicast frames on this radio. Enables the forwarding of

USER EXEC MODE COMMANDS 2 - 19• crypto key import rsa <RSA-KEYPAIR-NAME> <IMPORT-TO-URL> {background {on <DEVICE-NAME>}|on <DEVIC

7 - 126 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-71xxTestProfile-if-radio1)#non-unicast queue bss 2 3rf

PROFILES 7 - 1277.1.21.4.20off-channel-scaninterface radio instanceEnables selected radio’s off channel scanning parametersSupported in the following

7 - 128 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-71xxTestProfile-if-radio1)#off-channel-scan channel-li

PROFILES 7 - 1297.1.21.4.21placementinterface radio instanceDefines the location where the radio is deployedSupported in the following platforms:• Ac

7 - 130 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.22powerinterface radio instanceConfigures the transmit power on this radioSupporte

PROFILES 7 - 1317.1.21.4.23preamble-shortinterface radio instanceEnables the use of short preamble on this radioSupported in the following platforms:

7 - 132 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.24probe-responseinterface radio instanceConfigures transmission parameters for pro

PROFILES 7 - 1337.1.21.4.25radio-share-modeinterface radio instanceConfigures the mode of operation, for this radio, as radio-shareSupported in the f

7 - 134 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.26rf-modeinterface radio instanceConfigures the radio’s RF modeSupported in the fo

PROFILES 7 - 1357.1.21.4.27rifsinterface radio instanceConfigures Reduced Interframe Spacing (RIFS) parameters on this radioSupported in the followin

2 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto key zeroise <RSA-KEYPAIR-NAME> {force} {on <DEVICE-NAME>}• crypto pki au

7 - 136 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.28rts-thresholdinterface radio instanceConfigures the Request to Send (RTS) thresh

PROFILES 7 - 1377.1.21.4.29shutdowninterface radio instanceTerminates or shuts down selected radio interfaceSupported in the following platforms:• Ac

7 - 138 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.30sniffer-redirectinterface radio instanceCaptures and redirects packets to an IP

PROFILES 7 - 1397.1.21.4.31stbcinterface radio instanceConfigures the radio’s Space Time Block Coding (STBC) mode. STBC is a pre-transmission encodin

7 - 140 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.32txbfinterface radio instanceEnables transmit Beamforming on the selected radio.

PROFILES 7 - 141ap81xx-00090C(config)#show wireless client detailADDRESS : 00-24-D7-F1-00-EC - 00-24-D7-F1-00-EC 192.168.1.218 (vlan:1)WLAN : open (ss

7 - 142 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.33useinterface radio instanceEnables the use of an association ACL policy and a ra

PROFILES 7 - 1437.1.21.4.34wireless-clientinterface radio instanceConfigures wireless client parameters on this radioSupported in the following platf

7 - 144 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.21.4.35wlaninterface radio instanceEnables a WLAN on this radioSupported in the followi

PROFILES 7 - 1457.1.22 ledconfig-profile config commandsTurns LEDs on or off on an access pointSupported in the following platforms:• Access Points —

USER EXEC MODE COMMANDS 2 - 21• crypto pki request [generate-rsa-key|use-rsa-key] <RSA-KEYPAIR-NAME> autogen-subject-name [<EXPORT-TO-URL>

7 - 146 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.23 legacy-auto-downgradeconfig-profile config commandsEnables device firmware to auto d

PROFILES 7 - 1477.1.24 legacy-auto-updateconfig-profile config commandsAuto updates an AP650 or an AP71XX legacy access point firmwareSupported in th

7 - 148 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.25 lldpconfig-profile config commandsConfigures Link Layer Discovery Protocol (LLDP) se

PROFILES 7 - 1497.1.26 load-balancingconfig-profile config commandsConfigures load balancing parametersSupported in the following platforms:• Access

7 - 150 WiNG 5.2.6 Wireless Controller CLI Reference Guide• load-balancing advanced-params equality-margin [2.4GHz|5GHz|ap|band] <0-100>• load-b

PROFILES 7 - 151• load-balancing advanced-params max-preferred-band-load [2.4GHGz|5GHzd] <0-100>• load-balancing advanced-params [max-neighbors

7 - 152 WiNG 5.2.6 Wireless Controller CLI Reference Guide• load-balancing band-control-strategy [distribute-by-ratio|prefer-2.4ghz|prefer-5ghz]• load

PROFILES 7 - 1537.1.27 localconfig-profile config commandsSets a username and password for local user authenticationSupported in the following platfo

7 - 154 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.28 loggingconfig-profile config commandsEnables message logging and configures logging

PROFILES 7 - 155• logging facility [local0|local1|local2|local3|local4|local5|local16|local7]Examplesrfs7000-37FABE(config-profile-default-RFS7000)#lo

2 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto pki trustpoint <TRUSTPOINT-NAME> <EXPORT-TO-URL> {background {on <DEV

7 - 156 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.29 mac-address-tableconfig-profile config commandsConfigures the MAC address table. Use

PROFILES 7 - 1577.1.30 memory-profileconfig-profile config commandsConfigures a memory profile on the deviceSupported in the following platforms:• Ac

7 - 158 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.31 min-misconfiguration-recovery-timeconfig-profile config commandsSets the minimum tim

PROFILES 7 - 1597.1.32 mintconfig-profile config commandsConfigures MiNT protocol commandsSupported in the following platforms:• Access Points — AP30

7 - 160 WiNG 5.2.6 Wireless Controller CLI Reference Guide• mint link listen ip <IP> {adjacency-hold-time <2-600>|cost <1-10000>|hel

PROFILES 7 - 161• mint mlcp [IP|vlan]• mint spf-latency <0-60>Examplesrfs7000-37FABE(config-profile-default-RFS7000)#mint level 1 area-id 88rfs7

7 - 162 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.33 misconfiguration-recovery-timeconfig-profile config commandsVerifies wireless contro

PROFILES 7 - 1637.1.34 monitorconfig-profile config commandsEnables critical resource monitoringSupported in the following platforms:• Access Points

7 - 164 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.35 neighbor-inactivity-timeoutconfig-profile config commandsConfigures neighbor inactiv

PROFILES 7 - 1657.1.36 neighbor-info-intervalconfig-profile config commandsConfigures the neighbor information exchange intervalSupported in the foll

USER EXEC MODE COMMANDS 2 - 23• crypto pki generate self-signed <TRUSTPOINT-NAME> [generate-rsa-key|use-rsa-key] <RSA-KEYPAIR-NAME> autoge

7 - 166 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.37 noconfig-profile config commandsNegates a command or resets values to their defaultS

PROFILES 7 - 167email-notification Configures e-mail notificationenforce-version Checks device firmware versions before attempting connectionevents Di

7 - 168 WiNG 5.2.6 Wireless Controller CLI Reference Guidespanning-tree Configures spanning tree commandsuse Defines the settings used by this feature

PROFILES 7 - 1697.1.38 nocconfig-profile config commandsConfigures Network Operations Center (NOC) settings, such as NOC statistics update intervalSu

7 - 170 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.39 ntpconfig-profile config commandsConfigure the Network Time Protocol (NTP) server se

PROFILES 7 - 171Examplesrfs7000-37FABE(config-profile-default-RFS7000)#ntp server 172.16.10.10rfs7000-37FABE(config-profile-default-RFS7000)#ntp serve

7 - 172 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.40 power-configconfig-profile config commandsConfigures the power option mode. Sets the

PROFILES 7 - 1737.1.41 preferred-controller-groupconfig-profile config commandsSpecifies the wireless controller group preferred for adoptionSupporte

7 - 174 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.42 radiusconfig-profile config commandsConfigures device level RADIUS authentication pa

PROFILES 7 - 1757.1.43 rf-domain-manager config-profile config commandsEnables the RF Domain managerSupported in the following platforms:• Access Po

2 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto pki generate self-signed <TRUSTPOINT-NAME> [generate-rsa-key|use-rsa-key] <

7 - 176 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.44 serviceconfig-profile config commandsService commands enable you to view and manage

PROFILES 7 - 177• service wireless ap300 [image|version]• service wireless wispe-controller-port <1-65535>Examplesrfs7000-37FABE(config-profile-

7 - 178 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.45 spanning-treeconfig-profile config commandsEnables spanning tree commands. Use these

PROFILES 7 - 179• spanning-tree portfast [bpdufilter|bpduguard] default]Usage GuidelinesIf a bridge does not hear bridge protocol data units (BPDUs) f

7 - 180 WiNG 5.2.6 Wireless Controller CLI Reference Guiderfs7000-37FABE(config-profile-default-RFS7000)#show contextprofile RFS7000 default-RFS7000 s

PROFILES 7 - 1817.1.46 useconfig-profile config commandsUses pre configured policies with this profileSupported in the following platforms:• Access P

7 - 182 WiNG 5.2.6 Wireless Controller CLI Reference GuideParameters Device Mode• use [advanced-wips-policy|auto-provisioning-policy|captive-portal|cr

PROFILES 7 - 183Examplesrfs7000-37FABE(config-profile-default-RFS7000)#use role-policy testrfs7000-37FABE(config-profile-default-RFS7000)#rfs7000-37FA

7 - 184 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.1.47 vpnconfig-profile config commandsConfigures VPN settingsSupported in the following p

PROFILES 7 - 1857.1.48 wep-shared-key-authconfig-profile config commandsEnables support for 802.11 WEP shared key authenticationSupported in the foll

USER EXEC MODE COMMANDS 2 - 25• crypto pki import trustpoint <TRUSTPOINT-NAME> <IMPORT-FROM-URL> {background {on <DEVICE-NAME>}|on &

7 - 186 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2 Device Specific CommandsPROFILESDevices managed by the wireless controller can either b

PROFILES 7 - 187 device led Turn LEDs on/off on the device legacy-auto-downgrad

7 - 188 WiNG 5.2.6 Wireless Controller CLI Reference GuideTable 7.12 summarizes device mode commandsPROFILESTable 7.12 config-device mode commandsComm

PROFILES 7 - 189ip Configures IP components page 7-58layout-coordinates Configures layout coordinates page 7-201led Turns LEDs on or off page 7-145leg

7 - 190 WiNG 5.2.6 Wireless Controller CLI Reference Guidepreferred-controller-groupSpecifies the wireless controller group the system prefers for ado

PROFILES 7 - 1917.2.1 ap-mobilityconfig-device mode commandsConfigures access point mobilitySupported in the following platforms:• Access Points — AP

7 - 192 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.2 areaconfig-device mode commandsSets the area where the system is deployedSupported in

PROFILES 7 - 1937.2.3 channel-listconfig-device mode commandsConfigures the channel list advertised to wireless clientsSupported in the following pla

7 - 194 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.4 contactconfig-device mode commandsDefines an administrative contact for a deployed de

PROFILES 7 - 1957.2.5 country-codeconfig-device mode commandsSets the country of operation. Erases all existing radio configurations.Supported in the

2 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide• crypto pki zeroise trustpoint <TRUSTPOINT-NAME> {del-key {on <DEVICE-NAME>}|on

7 - 196 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.6 dhcp-redundancyconfig-device mode commandsEnables DHCP redundancySupported in the fol

PROFILES 7 - 1977.2.7 floorconfig-device mode commandsSets the building floor where the device is deployedSupported in the following platforms:• Acce

7 - 198 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.8 hostnameconfig-device mode commandsSets system's network nameSupported in the fo

PROFILES 7 - 1997.2.9 interfaceconfig-device mode commandsSelects an interface to configureThis command is used to enter the interface configuration

7 - 200 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-profile-default-RFS7000)#interface vlan 44rfs7000-37FABE(confi

PROFILES 7 - 2017.2.10 layout-coordinatesconfig-device mode commandsConfigures X and Y layout coordinates for the deviceSupported in the following pl

7 - 202 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.11 licenseconfig-device mode commandsInvokes license management commandsSupported in th

PROFILES 7 - 2037.2.12 locationconfig-device mode commandsConfigures the location where a wireless controller managed device is deployedSupported in

7 - 204 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.13 mac-nameconfig-device mode commandsConfigures a MAC name for mappingsSupported in th

PROFILES 7 - 2057.2.14 neighbor-info-intervalconfig-device mode commandsConfigures neighbor information exchange intervalSupported in the following p

USER EXEC MODE COMMANDS 2 - 272.1.9 disableuser exec mode commandsTurns off (disables) the privileged mode command set. This command returns to the U

7 - 206 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.15 noconfig-device mode commandsNegates a command or resets values to their defaultSupp

PROFILES 7 - 207contact Sets contact informationcontroller Configures a WLAN wireless controllercountry-code Configures wireless controller’s country

7 - 208 WiNG 5.2.6 Wireless Controller CLI Reference Guidemonitor Enables critical resource monitoringnoc Configures NOC settingsntp Configure the NTP

PROFILES 7 - 2097.2.16 override-wlanconfig-device mode commandsConfigures WLAN RF Domain level overridesSupported in the following platforms:• Access

7 - 210 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.17 remove-overrideconfig-device mode commandsRemoves device overridesSupported in the f

PROFILES 7 - 211rfs7000-37FABE(config-device-00-15-70-88-9E-C4)*#Related Commandsno Disables or reverts settings to their default

7 - 212 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.18 rsa-keyconfig-device mode commandsAssigns a RSA key to a deviceSupported in the foll

PROFILES 7 - 2137.2.19 sensor-serverconfig-device mode commandsConfigures a AirDefense sensor serverSupported in the following platforms:• Access Poi

7 - 214 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.20 statsconfig-device mode commandsConfigures statistics settingsSupported in the follo

PROFILES 7 - 2157.2.21 timezoneconfig-device mode commandsConfigures wireless controller’s timezoneSupported in the following platforms:• Access Poin

TABLE OF CONTENTSABOUT THIS GUIDEChapter 1, INTRODUCTION1.1 CLI Overview ...

2 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.10 enableuser exec mode commandsTurns on (enables) the privileged mode command set. This

7 - 216 WiNG 5.2.6 Wireless Controller CLI Reference Guide7.2.22 trustpointconfig-device mode commandsAssigns a trustpointSupported in the following

CHAPTER 8 AAA-POLICYThis chapter summarizes the AAA policy commands within the CLI structure. Use the (config) instance to configure AAA policy comman

8 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide8.1 aaa-policy Table 8.1 summarizes AAA policy configuration commands.Table 8.1 aaa-policy co

AAA-POLICY 8 - 38.1.1 accountingaaa-policyConfigures the server type and interval at which interim accounting updates are sent to the server. Up to 6

8 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide• accounting server <1-6> [dscp <0-63>|retry-timeout-factor <50-200>]• accou

AAA-POLICY 8 - 5• accounting server <1-6> onboard [self|controller]• accounting server <1-6> proxy-mode [none|through-controller|through-r

8 - 6 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-aaa-policy-test)#accounting interim interval 65rfs7000-37FABE(co

AAA-POLICY 8 - 78.1.2 attributeaaa-policyConfigures RADIUS Framed MTU attribute used in access and accounting requests. The Framed MTU attribute redu

8 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide8.1.3 authenticationaaa-policyConfigures authentication parametersSupported in the following

AAA-POLICY 8 - 9• authentication protocol [chap|pap]• authentication server <1-6> dscp <0-63>• authentication server <1-6> host <

USER EXEC MODE COMMANDS 2 - 292.1.11 exituser exec mode commandsEnds the current CLI session and closes the session windowSupported in the following

8 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide• authentication server <1-6> onboard [controller|self]• authentication server <1-6&

AAA-POLICY 8 - 11• authentication server <1-6> timeout <1-60> {attempts <1-10>}Examplesrfs7000-37FABE(config-aaa-policy-test)#authen

8 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide8.1.4 health-checkaaa-policyDuring normal operation, a AAA server can go offline. When a ser

AAA-POLICY 8 - 138.1.5 mac-address-formataaa-policyConfigures the format MAC addresses are filled in RADIUS request framesSupported in the following

8 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide8.1.6 noaaa-policyNegates a AAA policy command or sets its defaultSupported in the following

AAA-POLICY 8 - 15• no accounting type• no authentication eap wireless-client [attempts|identity-request-timeout|retry-timeout-factor|timeout]• no auth

8 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no server-pooling-mode• no use nac-listExamplesrfs7000-37FABE(config-aaa-policy-test)#no ac

AAA-POLICY 8 - 178.1.7 proxy-attributeaaa-policyConfigures RADIUS attribute behavior when proxying through the wireless controller or RF Domain Manag

8 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide8.1.8 server-pooling-modeaaa-policyConfigures the server selection method from a pool of AAA

AAA-POLICY 8 - 198.1.9 useaaa-policyApplies a Network Access Control (NAC) list for use by this AAA policy. This allows only the set of configured de

2 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.12 join-clusteruser exec mode commandsAdds a wireless controller, as a member, to an exi

8 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 9 AUTO-PROVISIONING-POLICYThis chapter summarizes the auto provisioning policy commands in the CLI structure.Adoption rules are sorted by prec

9 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide9.1 auto-provisioning-policyTable 9.1 summarizes auto provisioning policy configuration comman

AUTO-PROVISIONING-POLICY 9 - 39.1.1 adoptauto-provisioning-policyAdds device adoption rulesSupported in the following platforms:• Access Points — AP3

9 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide• adopt [ap300|ap621|ap622|ap650|ap6511|ap6521|ap6532|ap71xx|ap81xx] [precedence <1-1000>

AUTO-PROVISIONING-POLICY 9 - 5Examplesrfs7000-37FABE(config-auto-provisioning-policy-test)#adopt AP7131 10 AP7131 default vlan 1rfs7000-37FABE(config-

9 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide9.1.2 default-adoptionauto-provisioning-policyAdopts devices, even when no matching rules are

AUTO-PROVISIONING-POLICY 9 - 79.1.3 denyauto-provisioning-policyDefines a deny device adoption ruleSupported in the following platforms:• Access Poin

9 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-auto-provisioning-policy-test)#deny AP7131 600 vlan 1rfs7000-37F

AUTO-PROVISIONING-POLICY 9 - 99.1.4 noauto-provisioning-policyNegates an auto provisioning policy command or sets its defaultSupported in the followi

USER EXEC MODE COMMANDS 2 - 312.1.13 logginguser exec mode commandsModifies message logging settingsSupported in the following platforms:• Access Poi

9 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 10 ADVANCED-WIPS-POLICYThis chapter summarizes the advanced WIPS policy commands within the CLI structure.Use the (config) instance to configu

10 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide10.1 advanced-wips-policyTable 10.1 summarizes advanced WIPS policy configuration commands.Ta

ADVANCED-WIPS-POLICY 10 - 310.1.1 eventadvanced-wips-policyConfigures the detection of anomalous frames in a RF network Supported in the following pl

10 - 4 WiNG 5.2.6 Wireless Controller CLI Reference GuideParameters• event accidental-association mitigation-enable• event accidental-association trig

ADVANCED-WIPS-POLICY 10 - 5fake-dhcp-server-detected This event occurs when a fake DHCP server is detected in the controlled network A fake or rogue D

10 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide• event [dos-rts-flood|invalid-channel-advertized|invalid-management-frame] trigger-against (

ADVANCED-WIPS-POLICY 10 - 7• event dos-cts-flood threshold [cts-frames-ratio <0-65535>|mu-rx-cts-frame <0-65535>]• event dos-cts-flood tri

10 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide• event probe-response-flood threshold probe-rsp-frames-count <0-65535>• event probe-re

ADVANCED-WIPS-POLICY 10 - 9Examplerfs7000-37FABE(config-advanced-wips-policy-test)#event dos-cts-flood threshold cts-frames-ratio 8rfs7000-37FABE(conf

2 - 32 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.14 mintuser exec mode commandsUses MiNT protocol to perform a ping and a traceroute to a

10 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide10.1.2 noadvanced-wips-policyNegates a command or sets its default valueSupported in the fo

ADVANCED-WIPS-POLICY 10 - 11Parameters• no event [accidental-association|crackable-wep-iv-used|dos-cts-flood|dos-deauthentication-detection|dos-disass

10 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no server-listen-port• no terminate <MAC>• no use device-configurationExamplerfs7000

ADVANCED-WIPS-POLICY 10 - 1310.1.3 server-listen-portadvanced-wips-policyDefines the local WIPS server’s listening port, where WIPS sensors connect t

10 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide10.1.4 terminateadvanced-wips-policyAdds a device to a device termination list. Devices on

ADVANCED-WIPS-POLICY 10 - 1510.1.5 useadvanced-wips-policyUses an existing device categorization list with the advanced WIPS policy. A device configu

10 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 11 ASSOCIATION-ACL-POLICYThis chapter summarizes the association ACL policy commands within the CLI structure.Use the (config) instance to con

11 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide11.1 association-acl-policyTable 11.1 summarizes association ACL policy configuration command

ASSOCIATION-ACL-POLICY 11 - 311.1.1 denyassociation-acl-policyIdentifies those devices denied access to the wireless controller managed network. Devi

USER EXEC MODE COMMANDS 2 - 33Examplesrfs7000-37FABE>mint ping 70.37.FA.BF count 20 size 128MiNT ping 70.37.FA.BF with 128 bytes of data. Response

11 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide11.1.2 noassociation-acl-policyNegates a command or sets its defaultSupported in the followi

ASSOCIATION-ACL-POLICY 11 - 5Examplesrfs7000-37FABE(config-assoc-acl-test)#show contextassociation-acl-policy test deny 11-22-33-44-55-01 11-22-33-44-

11 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide11.1.3 permitassociation-acl-policySpecifies devices permitted access to the wireless contro

CHAPTER 12 ACCESS-LISTThis chapter summarizes IP and MAC access list commands in detail.Access lists control access to the network using a set of rule

12 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guidemac-access-listrfs7000-37FABE(config)#mac access-list testrfs7000-37FABE(config-mac-acl-test)

ACCESS-LIST 12 - 312.1 ip-access-listACCESS-LISTTable 12.1 summarizes commands under the IP access list configuration commands.Table 12.1 IP access l

12 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide12.1.1 denyip-access-listSpecifies packets to rejectSupported in the following platforms:• A

ACCESS-LIST 12 - 5• deny ip [<SOURCE-IP/MASK>|any|host <IP>] [<DESTINATION-IP/MASK>|any|host <IP>] [log rule-precedence <1-

12 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide• deny proto [<PROTOCOL-NUMBER>|<PROTOCOL-NAME>|eigrp|gre|igmp|igp|ospf|vrrp] [&l

ACCESS-LIST 12 - 7any Identifies all devices as the source to deny accesshost <IP> Identifies a specific host as the source to deny access• <

2 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.15 nouser exec mode commandsUse the no command to revert a command or to set parameters

12 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideUsage GuidelinesUse this command to deny traffic between networks/hosts based on the protocol

ACCESS-LIST 12 - 912.1.2 noip-access-listNegates a command or sets its defaultSupported in the following platforms:• Access Points — AP300, AP621, AP

12 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no [deny|permit] ip [<SOURCE-IP/MASK>|any|host <IP>] [<DESTINATION-IP/MASK&

ACCESS-LIST 12 - 11• no [deny|permit] proto [<PROTOCOL-NUMBER>|<PROTOCOL-NAME>|eigrp|gre|igmp|igp|ospf|vrrp] [<SOURCE-IP/MASK>|any|h

12 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no [deny|permit] [tcp|udp] [<SOURCE-IP/MASK>|any|host <IP>] [eq <SOURCE-POR

ACCESS-LIST 12 - 13Usage GuidelinesRemoves an access list control entry. Provide the rule-precedence value when using the no command.Examplesrfs7000-3

12 - 14 WiNG 5.2.6 Wireless Controller CLI Reference GuideRelated Commandsdeny Creates a deny ACLpermit Creates a permit ACL

ACCESS-LIST 12 - 1512.1.3 permitip-access-listPermits specific packetsSupported in the following platforms:• Access Points — AP300, AP621, AP622, AP6

12 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide• permit ip [<SOURCE-IP/MASK>|any|host <IP>] [<DESTINATION-IP/MASK>|any|ho

ACCESS-LIST 12 - 17• permit proto [<PROTOCOL-NUMBER>|<PROTOCOL-NAME>|eigrp|gre|igmp|igp|ospf|vrrp] [<SOURCE-IP/MASK>|any|host <IP

USER EXEC MODE COMMANDS 2 - 35• no crypto pki [server|trustpoint] <TRUSTPOINT-NAME> {del-key {on <DEVICE-NAME>}|on <DEVICE-NAME>}• n

12 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide• permit [tcp|udp] [<SOURCE-IP/MASK>|any|host <IP>] [eq <SOURCE-PORT>|rang

ACCESS-LIST 12 - 19Usage GuidelinesUse this command to permit traffic between networks/hosts based on the protocol type selected in the access list. T

12 - 20 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-ip-acl-test)#show contextip access-list test deny proto vrrp a

ACCESS-LIST 12 - 2112.2 mac-access-listACCESS-LISTTable 12.2 summarizes MAC Access list commandsTable 12.2 MAC access list commandsCommand Descriptio

12 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide12.2.1 denymac-access-listSpecifies packets to rejectSupported in the following platforms:•

ACCESS-LIST 12 - 23type [8021q|<1-65535>|aarp|appletalk |arp|ip|ipv6|mint|rarp|wisp|ipx]Configures the EtherType valueAn EtherType is a two-octe

12 - 24 WiNG 5.2.6 Wireless Controller CLI Reference GuideUsage GuidelinesThe deny command disallows traffic based on layer 2 (data-link layer) data.

ACCESS-LIST 12 - 2512.2.2 nomac-access-listNegates a command or sets its defaultSupported in the following platforms:• Access Points — AP300, AP621,

12 - 26 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-mac-acl-test)#show contextmac access-list test permit host 11-

ACCESS-LIST 12 - 2712.2.3 permitmac-access-listConfigures a permit MAC ACLSupported in the following platforms:• Access Points — AP300, AP621, AP622,

2 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no terminal [length|width]• no wireless client all {filter [wlan <WLAN-NAME>]}• no wi

12 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guidetype [8021q|<1-65535>|aarp|appletalk |arp|ip|ipv6|mint|rarp|wisp|ipx]Configures the Et

ACCESS-LIST 12 - 29Usage GuidelinesThe permit command in the MAC ACL disallows traffic based on layer 2 (data-link layer) information. A MAC access li

12 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 13 DHCP-SERVER-POLICYThis chapter summarizes DHCP server policy commands within CLI structure. Dynamic Host Control Protocol (DHCP) is a proto

13 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1 dhcp-server-policyTable 13.1summarizes DHCP server policy configuration commands.Table 1

DHCP-SERVER-POLICY 13 - 313.1.1 bootpdhcp-server-policyConfigures a BOOTP specific configuration. Bootstrap Protocol (BOOTP) is used by UNIX diskless

13 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.2 dhcp-classdhcp-server-policyA DHCP user class applies different DHCP settings to a se

DHCP-SERVER-POLICY 13 - 513.1.2.1 dhcp-classdhcp-class commandConfigures a DHCP server class and opens a new mode. For more information, see dhcp-cla

13 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.2.2 dhcp-class-modedhcp-classUse DHCP class mode commands to configure a DHCP server cl

DHCP-SERVER-POLICY 13 - 713.1.2.2.1multiple-user-classdhcp-class-modeEnables the multiple user class option for the DHCP policySupported in the follo

USER EXEC MODE COMMANDS 2 - 372.1.16 pageuser exec mode commandsToggles wireless controller paging. Enabling this command displays the CLI command ou

13 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.2.2.2 nodhcp-class-modeNegates a command or sets its defaultSupported in the following

DHCP-SERVER-POLICY 13 - 913.1.2.2.3 optiondhcp-class-modeConfigures the DHCP server options for use with this DHCP user classSupported in the followi

13 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3 dhcp-pooldhcp-server-policyThe DHCP pool commands create and manage a pool of IP add

DHCP-SERVER-POLICY 13 - 1113.1.3.1 dhcp-pooldhcp pool commandConfigures a DHCP server address pool. An address pool is a set of IP addresses allocate

13 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2 dhcp-pool-modedhcp-poolConfigures the DHCP pool commandsTable 13.5 summarizes DHCP

DHCP-SERVER-POLICY 13 - 1313.1.3.2.1addressdhcp-pool-modeSpecifies a range of addresses for the DHCP pool. This is the range of IP addresses assigned

13 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.2 bootfiledhcp-pool-modeThe Bootfile command provides a diskless node path to the

DHCP-SERVER-POLICY 13 - 1513.1.3.2.3 ddnsdhcp-pool-modeConfigures Dynamic DNS (DDNS) parameters. Dynamic DNS provides a way to access an individual d

13 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.4 default-routerdhcp-pool-modeConfigures a default router or gateway IP address fo

DHCP-SERVER-POLICY 13 - 1713.1.3.2.5 dns-serverdhcp-pool-modeConfigures the DNS server for this network. This DNS server supports all clients connect

vi WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.11 exit ...

2 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.17 pinguser exec mode commandsSends Internet Controller Message Protocol (ICMP) echo mes

13 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.6 domain-namedhcp-pool-modeSets the domain name for the DHCP poolFor DHCP clients,

DHCP-SERVER-POLICY 13 - 1913.1.3.2.7 excluded-addressdhcp-pool-modePrevents a DHCP server from assigning certain addresses in the DHCP poolSupported

13 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.8 leasedhcp-pool-modeThe lease is the duration a DHCP issued IP address is valid f

DHCP-SERVER-POLICY 13 - 2113.1.3.2.9 netbios-name-serverdhcp-pool-modeConfigures the NetBIOS (WINS) name server’s IP address. This server is used to

13 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.10 netbios-node-typedhcp-pool-modeConfigures the predefined NetBIOS node type. The

DHCP-SERVER-POLICY 13 - 2313.1.3.2.11 next-serverdhcp-pool-modeConfigures the next server in the boot processSupported in the following platforms:• A

13 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.12 nodhcp-pool-modeNegates a command or sets its defaultSupported in the following

DHCP-SERVER-POLICY 13 - 25• no address range <START-IP> <END-IP>• no ddns [domainname|multiple-user-class|server|ttl]• no excluded-address

13 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no static-binding hardware-address <MAC>• no static-route <IP/MASK> <GATEWA

DHCP-SERVER-POLICY 13 - 27static-binding Configure static binding informationstatic-route Configures static routes installed on DHCP clientsupdate Con

USER EXEC MODE COMMANDS 2 - 392.1.18 sshuser exec mode commandsOpens a Secure Shell (SSH) connection between two network devicesSupported in the foll

13 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.13 optiondhcp-pool-modeConfigures raw DHCP options. The DHCP option must be config

DHCP-SERVER-POLICY 13 - 2913.1.3.2.14 respond-via-unicastdhcp-pool-modeSends a DHCP offer and a DHCP Ack as unicast messagesSupported in the followin

13 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.15 static-bindingdhcp-pool-modeConfigures static IP address information for a part

DHCP-SERVER-POLICY 13 - 3113.1.3.2.16 static-bindingdhcp-pool static-binding commandConfigures static address bindings. For more information, see sta

13 - 32 WiNG 5.2.6 Wireless Controller CLI Reference Guide next-server Next server in boot process no Negate a command or

DHCP-SERVER-POLICY 13 - 3313.1.3.2.17 static-binding-modeTable 13.7 summarizes static binding mode commandsTable 13.7 dhcp-pool static-binding mode co

13 - 34 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.18 bootfilestatic-binding-modeThe Bootfile command provides a diskless node the pa

DHCP-SERVER-POLICY 13 - 3513.1.3.2.19 client-namestatic-binding-modeSpecifies a name for a clientSupported in the following platforms:• Access Points

13 - 36 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.20 default-routerstatic-binding-modeConfigures a default router or gateway IP addr

DHCP-SERVER-POLICY 13 - 3713.1.3.2.21 dns-serverstatic-binding-modeConfigures the DNS server for this static binding configuration. This DNS server s

2 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.19 telnetuser exec mode commandsOpens a Telnet session between two network devicesSuppor

13 - 38 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.22 domain-namestatic-binding-modeSets the domain name for the static binding confi

DHCP-SERVER-POLICY 13 - 3913.1.3.2.23 ip-addressstatic-binding-modeConfigures a fixed IP address for a hostSupported in the following platforms:• Acc

13 - 40 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.24 netbios-name-serverstatic-binding-modeConfigures the NetBIOS (WINS) name server

DHCP-SERVER-POLICY 13 - 4113.1.3.2.25 netbios-node-typestatic-binding-modeConfigures different predefined NetBIOS node types. The NetBIOS node define

13 - 42 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.26 next-serverstatic-binding-modeConfigures the next server utilized in the boot p

DHCP-SERVER-POLICY 13 - 4313.1.3.2.27 nostatic-binding-modeNegates a command or sets its default for the static binding commandsSupported in the foll

13 - 44 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs6000-380649(config-dhcp-policy-test-pool-pool1-binding-test)#no bootfilerfs6000-3

DHCP-SERVER-POLICY 13 - 4513.1.3.2.28 optionstatic-binding-modeConfigures raw DHCP options. The DHCP option has to be configured in the DHCP policy.

13 - 46 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.29 respond-via-unicaststatic-binding-modeSends a DHCP offer and a DHCP acknowledge

DHCP-SERVER-POLICY 13 - 4713.1.3.2.30 static-routestatic-binding-modeAdds static routes to the static binding configurationSupported in the following

USER EXEC MODE COMMANDS 2 - 412.1.20 terminaluser exec mode commandsSets the length or the number of lines displayed within the terminal windowSuppor

13 - 48 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.3.2.31 static-routedhcp-pool-modeConfigures a static route for a DHCP pool. Static rou

DHCP-SERVER-POLICY 13 - 4913.1.3.2.32 updatedhcp-pool-modeControls the use of the DDNS serviceSupported in the following platforms:• Access Points —

13 - 50 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.4 nodhcp-server-policyNegates a command or sets its default for DHCP policy commandsSu

DHCP-SERVER-POLICY 13 - 51Examplesrfs7000-37FABE(config-dhcp-policy-test)#no bootp ignorerfs7000-37FABE(config-dhcp-policy-test)#rfs7000-37FABE(config

13 - 52 WiNG 5.2.6 Wireless Controller CLI Reference Guide13.1.5 optiondhcp-server-policyConfigures raw DHCP options. The DHCP option has to be confi

DHCP-SERVER-POLICY 13 - 5313.1.6 pingdhcp-server-policySpecifies DHCP server ping parametersSupported in the following platforms:• Access Points — AP

13 - 54 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 14 FIREWALL-POLICYA firewall protects a network from attacks and unauthorized access from outside the network. Simultaneously, it allows autho

14 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide end End current mode and change to EXEC mode exit

FIREWALL-POLICY 14 - 314.1 firewall-policyTable 14.1 summarizes default firewall policy configuration commands.Table 14.1 firewall policy config comma

2 - 42 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.21 time-ituser exec mode commandsVerifies the time taken by a particular command between

14 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.1 algfirewall-policyEnables preconfigured algorithms supporting a particular protocolSu

FIREWALL-POLICY 14 - 514.1.2 clampfirewall-policyThis option limits the TCP Maximum Segment Size (MSS) to the size of the Maximum Transmission Unit (

14 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.3 dhcp-offer-convertfirewall-policyEnables the conversion of broadcast DHCP offers to u

FIREWALL-POLICY 14 - 714.1.4 dns-snoopfirewall-policySets the timeout for DNS snoop table entriesSupported in the following platforms:• Access Points

14 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.5 firewallfirewall-policyEnables a device’s firewallSupported in the following platform

FIREWALL-POLICY 14 - 914.1.6 flowfirewall-policyDefines the session flow timeout for different packet typesSupported in the following platforms:• Acc

14 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide• flow timeout tcp established <15-32400>Examplesrfs6000-380649(config-fw-policy-test)

FIREWALL-POLICY 14 - 1114.1.7 ipfirewall-policyConfigures Internet Protocol (IP) componentsSupported in the following platforms:• Access Points — AP3

14 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guidefraggle A Fraggle DoS attack checks for UDP packets to or from port 7 or 19ftp-bounce A FTP

FIREWALL-POLICY 14 - 13• ip dos {[ascend|broadcast-multicast-icmp|chargen|fraggle|ftp-bounce|invalid-protocol|ip-ttl-zero|ipsproof|land|option-route|r

USER EXEC MODE COMMANDS 2 - 432.1.22 tracerouteuser exec mode commandsTraces the route to a defined destinationUse ‘--help’ or ‘-h’ to display a comp

14 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guideip-ttl-zero Enables a check for the TCP/IP TTL field having a value of zero (0)ipsproof Enab

FIREWALL-POLICY 14 - 15• ip dos tcp-max-incomplete [high|low] <1-1000>• ip tcp adjust-mss <472-1460>• ip tcp [optimize-unnecessary-resends

14 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.8 ip-macfirewall-policyDefines an action based on the device IP MAC table, and also de

FIREWALL-POLICY 14 - 17• ip-mac routing conflict drop-only• ip-mac routing [log-and-drop|log-only] log-level [<0-7>|alerts|critical|debug|emerge

14 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.9 loggingfirewall-policyConfigures enhanced firewall loggingSupported in the following

FIREWALL-POLICY 14 - 1914.1.10 nofirewall-policyNegates a command or sets the default for firewall policy commandsSupported in the following platform

14 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no alg [dns|ftp|sip|tftp]• no clamp tcp-mss• no dns-snooping entry-timeout• no firewall en

FIREWALL-POLICY 14 - 21• no ip dos [ascend|broadcast-multicast-icmp|chargen|fraggle|ftp-bounce|invalid-protocol|ip-ttl-zero|ipsproof|land|option-route

14 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guiderouter-solicit Disables router-solicit attack checksRouter solicitation messages are sent to

FIREWALL-POLICY 14 - 23• no ip tcp [adjust-mss|optimize-unnecessary-resends|recreate-flow-on-out-of-state-syn|validate-icmp-unreachable|validate-rst-a

2 - 44 WiNG 5.2.6 Wireless Controller CLI Reference Guide2.1.23 watchuser exec mode commandsRepeats the specified CLI command at periodic intervalsSu

14 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no virtual-defragmentation {[maximum-fragments-per-datagram|minimum-first-fragment-length|

FIREWALL-POLICY 14 - 25Following is the firewall policy ‘test’ settings after the ‘no’ command is executed:rfs6000-380649(config-fw-policy-test)#no ip

14 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.11 proxy-arpfirewall-policyEnables the generation of ARP responses on behalf of anothe

FIREWALL-POLICY 14 - 2714.1.12 stateful-packet-inspection-12firewall-policyEnables layer 2 firewall stateful packet inspectionSupported in the follow

14 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.13 storm-controlfirewall policy config commandsStorm control limits multicast, unicast

FIREWALL-POLICY 14 - 29Examplesrfs6000-380649(config-fw-policy-test)#storm-control arp log warningrfs6000-380649(config-fw-policy-test)#storm-control

14 - 30 WiNG 5.2.6 Wireless Controller CLI Reference Guide14.1.14 virtual-defragmentationfirewall-policyEnables the virtual defragmentation of IPv4 p

CHAPTER 15 MINT-POLICYThis chapter summarizes MiNT policy commands within the CLI structure.All communication using the MiNT transport layer can be op

15 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide15.1 mint-policyTable 15.1 summarizes MiNT policy configuration commands.Table 15.1 mint-poli

MINT-POLICY 15 - 315.1.1 levelmint-policyConfigures the global MiNT routing levelSupported in the following platforms:• Access Points — AP300, AP621,

CHAPTER 3 PRIVILEGED EXEC MODE COMMANDSMost PRIV EXEC commands set operating parameters. Privileged-level access should be password protected to preve

15 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide15.1.2 mtumint-policyConfigures global MiNT Multiple Transmission Unit (MTU). Use this comma

MINT-POLICY 15 - 515.1.3 udpmint-policyConfigures MiNT UDP/IP encapsulation parameters. Use this command to configure the default UDP port used for M

15 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide15.1.4 nomint-policyNegates a command or reverts values to their default. When used in the c

CHAPTER 16 MANAGEMENT-POLICYThis chapter summarizes management policy commands within the CLI structure.A management policy contains configuration ele

16 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1 management-policyTable 16.1 summarizes management policy configuration commands.Table 16

MANAGEMENT-POLICY 16 - 316.1.1 aaa-loginmanagement-policySpecifies the Authentication, Authorization and Accounting (AAA) authentication mode used wi

16 - 4 WiNG 5.2.6 Wireless Controller CLI Reference GuideUsage GuidelinesUse AAA login to determine whether management user authentication must be per

MANAGEMENT-POLICY 16 - 516.1.2 bannermanagement-policyConfigures the login banner message. Use this command to display messages to users as they as l

16 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.3 ftpmanagement-policyEnables File Transfer Protocol (FTP) on this management policySup

MANAGEMENT-POLICY 16 - 7Usage GuidelinesThe string size of encrypted password (option 1, Password is encrypted with a SHA1 algorithm) must be exactly

3 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide page Toggle paging ping Send ICMP echo messages pwd Display

16 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.4 httpmanagement-policyEnables the Hyper Text Transport Protocol (HTTP) serverSupported

MANAGEMENT-POLICY 16 - 916.1.5 httpsmanagement-policyEnables the secure Hyper Text Transport Protocol Secure (HTTPS) serverSupported in the following

16 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.6 idle-session-timeoutmanagement-policyConfigures a session’s idle timeout. After the

MANAGEMENT-POLICY 16 - 1116.1.7 nomanagement-policyNegates a command or reverts values to their default. When used in the config management policy mo

16 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no [idle-session-timeout|restrict-action]• no snmp-server [max-pending-requests|request-ti

MANAGEMENT-POLICY 16 - 13• no service prompt crash-infoExamplesrfs7000-37FABE(config-management-policy-test)#no banner motdrfs7000-37FABE(config-manag

16 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.8 restrict-accessmanagement-policyRestricts management access to a set of hosts or sub

MANAGEMENT-POLICY 16 - 15• restrict-access ip-access-list <IP-ACCESS-LIST>• restrict-access subnet <IP/M> {log [all|denied-only]}• restric

16 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.9 snmp-servermanagement-policyEnables the Simple Network Management Protocol (SNMP) en

MANAGEMENT-POLICY 16 - 17• snmp-server host <IP> [v2c|v3] {<1-65535>}• snmp-server [manager [all|v2|v3]|max-pending-request <64-1024>

PRIVILEGED EXEC MODE COMMANDS 3 - 33.1 Privileged Exec Mode CommandsTable 3.1 summarizes the PRIV EXEC Mode configuration commands.Table 3.1 privilege

16 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide• snmp-server user [snmpmanager|snmpoperator|snmptrap] v3 encrypted [auth md5|des auth md5]

MANAGEMENT-POLICY 16 - 19rfs7000-37FABE(config-management-policy-test)#show contextmanagement-policy test http server no ssh snmp-server community snm

16 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.10 sshmanagement-policyEnables SSH for this management policy. SSH encrypts communicat

MANAGEMENT-POLICY 16 - 2116.1.11 telnetmanagement-policyEnables Telnet. By default Telnet is enabled on Transmission Control Protocol (TCP) port 23.

16 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide16.1.12 usermanagement-policyAdds new user accountSupported in the following platforms:• Ac

MANAGEMENT-POLICY 16 - 23Examplesrfs7000-37FABE(config-management-policy-test)#user TESTER password moto123 rolesuperuser access allrfs7000-37FABE(con

16 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 17 RADIUS-POLICYThis chapter summarizes RADIUS group, server and user policy commands in detail. It is organized as follows:• radius-group• ra

17 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.1 radius-groupRADIUS-POLICYSets RADIUS user group parametersTable 17.1 summarizes RADIUS

RADIUS-POLICY 17 - 317.1.1 guestradius-groupManages captive portal guest access. Creates a guest user and associates it with a group. The guest user

Table of Contents vii3.1.31 pwd ...

3 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guideno Reverts a command or sets values to their default settings page 3-49page Toggles wireless c

17 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.1.2 noradius-groupNegates a command or sets its default. Removes or modifies the RADIUS g

RADIUS-POLICY 17 - 5• no policy ssid [<SSID>|all]• no policy [role|time|vlan]• no rate-limit [from-air|to-air]Examplesrfs7000-37FABE(config-radi

17 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.1.3 policyradius-groupSets the authorization policies for a RADIUS group, such as access

RADIUS-POLICY 17 - 7• policy role [helpdesk|monitor|network-admin|security-admin|super-user|system-admin|web-user-admin]• policy ssid <SSID>• po

17 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-radius-group-test)#policy access allrfs7000-37FABE(config-radiu

RADIUS-POLICY 17 - 917.1.4 rate-limitradius-groupSets the rate limit for the RADIUS server groupSupported in the following platforms:• Access Points

17 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.2 radius-server-policyRADIUS-POLICYCreates an onboard device RADIUS server policy.Use th

RADIUS-POLICY 17 - 1117.2.1 authenticationradius-server-policyConfigures RADIUS server authentication parametersSupported in the following platforms:

17 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.2.2 chase-referralradius-server-policyEnables chasing referrals from LDAP serverSupporte

RADIUS-POLICY 17 - 1317.2.3 crl-checkradius-server-policyEnables a certificate revocation list (CRL) check on this RADIUS server policySupported in t

PRIVILEGED EXEC MODE COMMANDS 3 - 53.1.1 ap-upgradeprivileged exec config mode commandsEnables an automatic firmware upgrade on an adopted AP or a se

17 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.2.4 ldap-group-verificationradius-server-policyEnables LDAP group verification settings

RADIUS-POLICY 17 - 1517.2.5 ldap-serverradius-server-policyConfigures LDAP server parameters. Configuring LDAP server allows users to login and authe

17 - 16 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-radius-server-policy-test)#ldap-server primary host 172.16.10.

RADIUS-POLICY 17 - 1717.2.6 localradius-server-policyConfigures a local RADIUS realm on this RADIUS server policySupported in the following platforms

17 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.2.7 nasradius-server-policyConfigures the key sent to a RADIUS clientSupported in the fo

RADIUS-POLICY 17 - 1917.2.8 noradius-server-policyNegates a command or reverts back to default settings. When used with in the config RADIUS server p

17 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no proxy [realm <REALM-NAME>|retry-count|retry-delay]• no ldap-server [dead-period|p

RADIUS-POLICY 17 - 21proxy Configures a proxy RADIUS server based on the realm/suffixsession-resumption Enables session resumption/fast re-authenticat

17 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.2.9 proxyradius-server-policyConfigures a proxy RADIUS server based on the realm/suffix.

RADIUS-POLICY 17 - 23Usage GuidelinesOnly five RADIUS proxy servers can be configured. The proxy server attempts six retries before it times out. The

3 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide• ap-upgrade [ap621|ap622|ap650|ap6511|ap6521|ap6532|ap71XX] all {no-reboot|reboot-time <TI

17 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.2.10 session-resumptionradius-server-policyEnables session resumption or fast re-authent

RADIUS-POLICY 17 - 2517.2.11 useradius-server-policyDefines settings used with the RADIUS server policySupported in the following platforms:• Access

17 - 26 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.3 radius-user-pool-policyRADIUS-POLICYConfigures a RADIUS user pool policyUse the (confi

RADIUS-POLICY 17 - 2717.3.1 userradius-user-pool-policyConfigures RADIUS user parametersSupported in the following platforms:• Access Points — AP300,

17 - 28 WiNG 5.2.6 Wireless Controller CLI Reference Guide17.3.2 noradius-user-pool-policyNegates a command or sets its default. When used in the RAD

CHAPTER 18 RADIO-QOS-POLICYThis chapter summarizes the radio QoS policy in detail. Configuring and implementing a radio QOS policy is essential for WL

18 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide18.1 radio-qos-policyTable 18.1 summarizes radio QoS policy configuration commands.Table 18.1

RADIO-QOS-POLICY 18 - 318.1.1 accelerated-multicastradio-qos-policyConfigures multicast streams for acceleration. Multicasting allows the group trans

18 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide18.1.2 admission-controlradio-qos-policyEnables admission control across all radios for one

RADIO-QOS-POLICY 18 - 5Examplesrfs7000-37FABE(config-radio-qos-test)#admission-control best-effort max-clients 200rfs7000-37FABE(config-radio-qos-test

PRIVILEGED EXEC MODE COMMANDS 3 - 7• ap-upgrade cancel-upgrade [ap621|ap622|ap650|ap651|ap6521|ap6532|ap71XX|ap81XX]all• ap-upgrade cancel-upgrade on

18 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide18.1.3 noradio-qos-policyNegates a command or resets configured settings to their default. W

RADIO-QOS-POLICY 18 - 7• no admission-control [background|best-effort|video|voice] {max-airtime-percent|max-clients|max-roamed-clients|reserved-for-ro

18 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesThe Radio-qos-policy settings before execution of the no command:rfs7000-37FABE(confi

RADIO-QOS-POLICY 18 - 918.1.4 wmmradio-qos-policyConfigures 802.11e/wireless multimedia parametersSupported in the following platforms:• Access Point

18 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide

CHAPTER 19 ROLE-POLICYA role policy defines the rules that associates tasks and devices with specific roles. A role is as a class of users with a spec

19 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide19.1 role-policy Table 19.1 summarizes role policy configuration commands.Table 19.1 config r

ROLE-POLICY 19 - 319.1.1 default-rolerole-policyAssigns a default role to a wireless client that fails to find a matching role. Use this command to c

19 - 4 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-role-policy-test)#default-role use ip-access-list in test prece

ROLE-POLICY 19 - 519.1.2 norole-policyNegates a command or resets settings to their default. When used in the config role policy mode, the no command

3 - 8 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE#ap-upgrade AP621 all---------------------------------------------------

19 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no user-role <ROLE>Examplesrfs7000-37FABE(config-role-policy-test)#no default-role us

ROLE-POLICY 19 - 719.1.3 user-rolerole-policyThis command creates a user defined role and associates it to a role policy. This command defines a numb

19 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide19.1.3.1 user-roleconfig user role commandCreates a user defined role. A user defined role c

ROLE-POLICY 19 - 919.1.3.2 user-role commandsconfig user role commandTable 19.3 summarizes user role commandsTable 19.3 config user role mode command

19 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide19.1.3.2.1 ap-locationuser-role commandsSets an AP’s deployment locationSupported in the fo

ROLE-POLICY 19 - 1119.1.3.2.2 authentication-typeuser-role commandsSelects the authentication type for this user roleSupported in the following platf

19 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide19.1.3.2.3 captive-portaluser-role commandsDefines captive portal based role filter for thi

ROLE-POLICY 19 - 1319.1.3.2.4 encryption-typeuser-role commandsSelects the encryption type for this user role. Encryption ensures privacy of all comm

19 - 14 WiNG 5.2.6 Wireless Controller CLI Reference GuideExamplesrfs7000-37FABE(config-role-policy-test-user-role-testing)#encryption-type eq wep128r

ROLE-POLICY 19 - 1519.1.3.2.5 groupuser-role commandsConfigures a group for this user roleSupported in the following platforms:• Access Points — AP30

PRIVILEGED EXEC MODE COMMANDS 3 - 93.1.2 archiveprivileged exec config mode commandsManages file archive operationsSupported in the following platfor

19 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide19.1.3.2.6 mu-macuser-role commandsConfigures a client’s MAC addresses for the role based f

ROLE-POLICY 19 - 1719.1.3.2.7 nouser-role commandsNegates a command or resets configured settings to their default. When used in the config role poli

19 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no use mac-access-list [in|out] MAC-ACCESS-LIST> precedence <1-100>Usage Guidelin

ROLE-POLICY 19 - 1919.1.3.2.8 ssiduser-role commandsConfigures a user role SSIDSupported in the following platforms:• Access Points — AP300, AP621, A

19 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide19.1.3.2.9 useuser-role commandsDefines the access list settings used with this user roleSu

CHAPTER 20 SMART-RF-POLICYThis chapter summarizes Smart RF policy commands within the CLI structure. A Self Monitoring at Run Time RF Management (Smar

20 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1 smart-rf-policyTable 20.1summarizes Smart RF policy configuration commands.Table 20.1 sm

SMART-RF-POLICY 20 - 320.1.1 assignable-powersmart-rf-policySpecifies the power range during power assignmentSupported in the following platforms:• A

20 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.2 channel-listsmart-rf-policyAssigns the channel list for the selected frequencySupport

SMART-RF-POLICY 20 - 520.1.3 channel-widthsmart-rf-policySelects the channel width for Smart RF configurationSupported in the following platforms:• A

3 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.3 bootprivileged exec config mode commandsSpecifies the image used after rebootSupported

20 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.4 coverage-hole-recoverysmart-rf-policyEnables recovery from coverage hole errors detec

SMART-RF-POLICY 20 - 7Examplesrfs7000-37FABE(config-smart-rf-policy-test)#coverage-hole-recovery snr-threshold 5GHz 1rfs7000-37FABE(config-smart-rf-po

20 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.5 enablesmart-rf-policyEnables a Smart RF policyUse this command to enable this Smart R

SMART-RF-POLICY 20 - 920.1.6 group-bysmart-rf-policyConfigures Smart RF grouping valuesSupported in the following platforms:• Access Points — AP300,

20 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.7 interference-recoverysmart-rf-policyRecovers excessive noise and interference. Enabl

SMART-RF-POLICY 20 - 11Examplesrfs7000-37FABE(config-smart-rf-policy-test)#interference-recovery channel-switch-delta 5 5rfs7000-37FABE(config-smart-r

20 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.8 neighbor-recoverysmart-rf-policyEnables recovery from errors due to faulty neighbor

SMART-RF-POLICY 20 - 13Examplesrfs7000-37FABE(config-smart-rf-policy-test)#neighbor-recovery power-threshold 2.4 -82rfs7000-37FABE(config-smart-rf-pol

20 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.9 nosmart-rf-policyNegates a command or sets its default. When used in the config Smar

SMART-RF-POLICY 20 - 15Related Commandsassignable-power Assigns the power rangechannel-list Assigns the channel list for the selected frequencychannel

PRIVILEGED EXEC MODE COMMANDS 3 - 113.1.4 cdprivileged exec config mode commandsChanges the current directorySupported in the following platforms:• A

20 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.10 sensitivitysmart-rf-policyConfigures Smart RF sensitivitySupported in the following

SMART-RF-POLICY 20 - 1720.1.11 smart-ocs-monitoringsmart-rf-policyApplies smart Off Channel Scanning (OCS) instead of dedicated detectorsSupported in

20 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide• smart-ocs-monitoring {frequency [2.4GHz|5GHz] [<1-120>]}• smart-ocs-monitoring {off-

SMART-RF-POLICY 20 - 19• smart-ocs-monitoring {voice-aware [2.4GHz|5GHz] [dynamic|strict]}Examplesrfs7000-37FABE(config-smart-rf-policy-test)#smart-oc

20 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide20.1.12 smart-ocs-monitoring (ap7161)smart-rf-policyEnables automatic channel selection on

CHAPTER 21 WIPS-POLICYThis chapter summarizes WIPS policy commands in detail.The Wireless Intrusion Protection Systems (WIPS) is an additional measure

21 - 2 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1 wips-policyTable 21.1 summarizes WIPS policy configuration commands.Table 21.1 config-wi

WIPS-POLICY 21 - 321.1.1 ap-detectionwips-policyEnables the detection of unauthorized or unsanctioned APs. Unauthorized APs are untrusted access poin

21 - 4 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.2 enablewips-policyAssociates this WIPS policy with a wireless controller profileSuppor

WIPS-POLICY 21 - 521.1.3 eventwips-policyConfigures events, filters and threshold values for this WIPS policy. Events have been grouped into three ca

3 - 12 WiNG 5.2.6 Wireless Controller CLI Reference Guide3.1.5 change-passwdprivileged exec config mode commandsChanges the password of a logged user

21 - 6 WiNG 5.2.6 Wireless Controller CLI Reference Guide• event client-anomaly [crackable-wep-iv-key-used|dos-broadcast-deauth|fuzzing-all-zero-macs|

WIPS-POLICY 21 - 7Examplesrfs7000-37FABE(config-wips-policy-test)#event excessive 80211-replay-check-failure filter-ageout 9 threshold-client 8 thresh

21 - 8 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.4 history-throttle-durationwips-policyConfigures the duration event duplicates are omit

WIPS-POLICY 21 - 921.1.5 nowips-policyNegates a command or resets configured settings to their default. When used in the config WIPS policy mode, the

21 - 10 WiNG 5.2.6 Wireless Controller CLI Reference Guide• no event client-anomaly [crackable-wep-iv-key-used|dos-broadcast-deauth|fuzzing-all-zero-m

WIPS-POLICY 21 - 11• no event excessive [80211-replay-check-failure|aggressive-scanning|auth-server-failures|decryption-failures|dos-assoc-or-auth-flo

21 - 12 WiNG 5.2.6 Wireless Controller CLI Reference GuideUsage GuidelinesThe no command negates any command associated with it. Wherever required, us

WIPS-POLICY 21 - 1321.1.6 signaturewips-policyAttack and intrusion patterns are identified and configured as signatures in a WIPS policy. The WIPS po

21 - 14 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.1 signatureconfig signature commandConfigures a WIPS policy signature. For more info

WIPS-POLICY 21 - 1521.1.6.2 signature mode commandsconfig signature commandTable 21.3 summarizes signature commandsTable 21.3 config signature mode c

PRIVILEGED EXEC MODE COMMANDS 3 - 133.1.6 clearprivileged exec config mode commandsClears parameters, cache entries, table entries, and other entries

21 - 16 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.2.1 bssidsignature mode commandsConfigures a BSSID MAC address with this WIPS signat

WIPS-POLICY 21 - 1721.1.6.2.2 dst-macsignature mode commandsConfigures a destination MAC address for the packet examined for matchingSupported in the

21 - 18 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.2.3 filter-ageoutsignature mode commandsConfigures the filter ageout interval in sec

WIPS-POLICY 21 - 1921.1.6.2.4 frame-typesignature mode commandsConfigures the frame type used for matching with this signatureSupported in the follow

21 - 20 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.2.5 modesignature mode commandsEnables or disables a signature modeSupported in the

WIPS-POLICY 21 - 2121.1.6.2.6 payloadsignature mode commandsConfigures payload settings. The payload command sets a numerical index pattern and offse

21 - 22 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.2.7 src-macsignature mode commandsConfigures a source MAC address for a packet exami

WIPS-POLICY 21 - 2321.1.6.2.8 ssid-matchsignature mode commandsConfigures the SSID used for matchingSupported in the following platforms:• Access Poi

21 - 24 WiNG 5.2.6 Wireless Controller CLI Reference Guide21.1.6.2.9 threshold-clientsignature mode commandsConfigures wireless client’s threshold li

WIPS-POLICY 21 - 2521.1.6.2.10 threshold-radiosignature mode commandsConfigures radio’s threshold limit. When the radio exceeds the specified limit,