3Com WXR100 User Manual

0 (0)
3Com WXR100 User Manual

Wireless LAN Mobility System

Wireless LAN Switch and Controller

Command Reference

WX4400 3CRWX440095A

WX2200 3CRWX220095A

WX1200 3CRWX120695A

WXR100 3CRWXR10095A

http://www.3Com.com/

Part No. 10015910 Rev AC

Published July 2008

3Com Corporation 350 Campus Drive Marlborough, MA USA 01752-3064

Copyright © 2007, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries.

3Com is a registered trademark of 3Com Corporation. The 3Com logo is a trademark of 3Com Corporation.

Mobility Domain, Managed Access Point, Mobility Profile, Mobility System, Mobility System Software, MP, MSS, and SentrySweep are trademarks of Trapeze Networks.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, Windows XP, and Windows NT are registered trademarks of Microsoft Corporation.

All other company and product names may be trademarks of the respective companies with which they are associated.

ENVIRONMENTAL STATEMENT

It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we are committed to:

Establishing environmental performance standards that comply with national legislation and regulations.

Conserving energy, materials and natural resources in all operations.

Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental standards. Maximizing the recyclable and reusable content of all products.

Ensuring that all products can be recycled, reused and disposed of safely.

Ensuring that all products are labelled according to recognized environmental standards.

Improving our environmental record on a continual basis.

End of Life Statement

3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.

Regulated Materials Statement

3Com products do not contain any hazardous or ozone-depleting material.

Environmental Statement about the Documentation

The documentation for this product is printed on paper that comes from sustainable, managed forests; it is fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and the inks are vegetable-based with a low heavy-metal content.

CONTENTS

ABOUT THIS GUIDE

Conventions

25

Documentation

26

Documentation Comments 27

NEW FEATURES SUMMARY

Virtual Controller Clustering Configuration 30

set cluster mode

30

 

 

 

set cluster preempt

 

30

 

 

AP 3950 PoE Configuration 31

 

set ap power-mode

 

31

 

 

802.11n Configuration

 

31

 

 

set service-profile 11n

32

 

 

set service-profile transmit-rates

32

set radio-profile 11n

33

 

 

External Captive Portal Support

33

Simultaneous Login Support

34

 

Dynamic RADIUS Extensions

34

 

set radius dac 34

 

 

 

 

set radius das-port

34

 

 

clear radius das-port

35

 

 

set authorization dynamic

35

 

termination-action Attribute 35

MAC User Range Authentication

36

set authentication mac-prefix

36

MAC Authentication Request Format 37

User Attribute Enhancements

37

 

Enhancements to Location Policy Configuration 38 RADIUS Ping Utility 39

radping 39

Unique AP Number Support 40

Bandwidth Management

 

40

 

 

 

set qos profile

40

 

 

 

 

 

set radio-profile weighted-fair-queuing

41

set service-profile max-bw

42

 

 

clear qos-profile

42

 

 

 

 

 

RF Scanning Enhancements

43

 

 

set radio-profile rf-scanning mode

43

 

set radio-profile rf-scanning channel-scope 44

RF Detection Configuration

44

 

 

Deprecated Commands

44

 

 

Replaced Commands

 

45

 

 

 

set rfdetect ssid-list

45

 

 

 

set rfdetect classification ad-hoc

45

 

set rfdetect classification default

46

 

set rfdetect classification seen-in-network

46

set rfdetect classification ssid-masquerade

47

display rfdetect classification

47

 

 

display aaa Command Replacements

48

 

display radius

48

 

 

 

 

 

display user

49

 

 

 

 

 

 

display mac-user

51

 

 

 

 

 

display usergroup

52

 

 

 

 

display mac-usergroup

 

53

 

 

 

display ap config Enhancements

54

 

 

display ap config

54

 

 

 

 

 

display ap config verbose 54

 

 

display ap config

55

 

 

 

 

 

display ap config radio

 

55

 

 

 

display load Enhancements

55

 

 

display load memory

56

 

 

 

display load cpu

57

 

 

 

 

 

display load cpu history

58

 

 

 

display radio-profile Enhancements

58

 

display radio-profile

59

 

 

 

display sessions network ap Enhancements

60

display sessions network ap

60

 

 

display sessions network ap radio

60

 

clear sessions network Enhancements

61

 

 

display service-profile Enhancements 61

 

 

display rfdetect Changes

66

 

 

 

 

Deprecated Commands

66

 

 

 

 

display rfdetect data

66

 

 

 

 

 

display rfdetect data ap

69

 

 

 

 

display rfdetect data clients

70

 

 

 

display rfdetect data verbose

70

 

 

 

display rfdetect data summary

72

 

 

 

 

 

1 USING THE COMMAND-LINE INTERFACE

 

 

Overview

75

 

 

 

 

 

 

 

 

CLI Conventions

76

 

 

 

 

 

 

 

Command Prompts

76

 

 

 

 

 

Syntax Notation

76

 

 

 

 

 

 

Text Entry Conventions and Allowed Characters

77

 

MAC Address Notation

77

 

 

 

 

IP Address and Mask Notation

78

 

 

 

User Globs, MAC Address Globs, and VLAN Globs

78

 

Port Lists 80

 

 

 

 

 

 

 

Virtual LAN Identification

81

 

 

 

Command-Line Editing

81

 

 

 

 

 

Keyboard Shortcuts

81

 

 

 

 

 

History Buffer

82

 

 

 

 

 

 

Tabs

82

 

 

 

 

 

 

 

 

Single-Asterisk (*) Wildcard Character

82

 

 

Double-Asterisk (**) Wildcard Characters 82

 

 

Using CLI Help

83

 

 

 

 

 

 

 

Understanding Command Descriptions

84

 

 

 

 

 

 

 

 

2 ACCESS COMMANDS

 

 

 

 

 

 

Commands by Usage

85

 

 

 

 

 

disable

85

 

 

 

 

 

 

 

 

enable

86

 

 

 

 

 

 

 

 

quit 86

 

 

 

 

 

 

 

 

 

set enablepass

87

 

 

 

 

 

 

3

SYSTEM SERVICE COMMANDS

 

Commands by Usage

 

89

 

clear banner motd

90

 

 

clear history

91

 

 

 

clear prompt

91

 

 

 

clear system

92

 

 

 

display banner motd

93

 

display base-information

93

 

display license

94

 

 

 

display load

95

 

 

 

display system

95

 

 

 

help 98

 

 

 

 

 

history

99

 

 

 

 

 

quickstart

 

100

 

 

 

 

set auto-config

100

 

 

set banner acknowledge

102

 

set banner motd

104

 

 

set confirm

105

 

 

 

set length

 

105

 

 

 

 

set license

106

 

 

 

 

set prompt

107

 

 

 

set system contact

108

 

set system countrycode

109

 

set system idle-timeout

113

 

set system ip-address

114

 

set system location

115

 

set system name

116

 

4

 

 

PORT COMMANDS

 

 

Commands by Usage

 

117

 

clear ap

118

 

 

 

 

clear port counters

119

 

clear port-group

119

 

 

clear port media-type

 

120

 

clear port name

120

 

 

clear port mirror

121

 

 

clear port preference

121

 

clear port type

 

122

 

 

display port counters

123

 

display port-group

 

124

 

 

display port mirror

 

125

 

 

display port poe

126

 

 

display port status

127

 

 

display port media-type

129

 

monitor port counters 130

 

reset port

135

 

 

 

 

 

set ap 135

 

 

 

 

 

 

set port

137

 

 

 

 

 

 

set port-group

 

138

 

 

 

set port media-type

 

139

 

set port mirror

 

140

 

 

 

set port name

 

141

 

 

 

set port negotiation

 

141

 

set port poe

142

 

 

 

 

set port speed

 

143

 

 

 

set port trap

144

 

 

 

 

set port type ap

145

 

 

set port type wired-auth

148

 

 

 

5 VLAN COMMANDS

 

 

Commands by usage

151

 

clear fdb

152

 

 

 

 

 

clear security L2-restrict

153

 

clear security L2-restrict counters 154

 

clear vlan

155

 

 

 

 

 

clear vlan-profile

156

 

 

display fdb

157

 

 

 

 

display fdb agingtime

159

 

display fdb count

160

 

 

display roaming station

161

 

display roaming vlan

 

163

 

display security L2-restrict

164

 

display tunnel

 

165

 

 

 

display vlan config

 

166

 

 

display vlan-profile

168

 

set fdb 169

 

 

 

 

set fdb agingtime

170

 

set security L2-restrict

171

 

set vlan name

172

 

 

set vlan port

173

 

 

 

set vlan tunnel-affinity

174

 

set vlan profile

175

 

 

 

6 QUALITY OF SERVICE COMMANDS

 

Commands by Usage

177

 

clear qos

177

 

 

 

set qos cos-to-dscp-map

179

 

set qos dscp-to-cos-map

180

 

display qos

181

 

 

 

display qos dscp-table

182

 

 

7 IP SERVICES COMMANDS

 

Commands by Usage

183

 

clear interface

185

 

 

clear ip alias

 

186

 

 

 

clear ip dns domain

187

 

clear ip dns server

187

 

clear ip route

188

 

 

 

clear ip telnet

189

 

 

 

clear ntp server

189

 

 

clear ntp update-interval

190

 

clear snmp community

191

 

clear snmp notify profile

191

 

clear snmp notify target

192

 

clear snmp usm 192

 

 

clear summertime

193

 

clear system ip-address

194

 

clear timezone

194

 

 

display arp

195

 

 

 

display dhcp-client

196

 

display dhcp-server

198

display interface

 

200

 

display ip alias

201

 

 

display ip dns

202

 

 

display ip https

 

203

 

 

display ip route

 

204

 

 

display ip telnet

 

206

 

display ntp

207

 

 

 

display snmp community

209

display snmp counters

210

display snmp notify profile

210

display snmp notify target

210

display snmp status

211

 

display snmp usm

212

 

display summertime

212

 

display timedate

 

213

 

display timezone

 

213

 

ping

214

 

 

 

 

 

set arp

216

 

 

 

 

set arp agingtime

217

 

set interface

218

 

 

set interface dhcp-client

219

set interface dhcp-server

220

set interface status 221

 

set ip alias

222

 

 

 

set ip dns

223

 

 

 

 

set ip dns domain

223

 

set ip dns server

 

224

 

set ip https server

225

 

set ip route

226

 

 

set ip snmp server

228

 

set ip ssh

228

 

 

 

 

set ip ssh server

 

229

 

set ip telnet

229

 

 

set ip telnet server

230

 

set ntp

231

 

 

 

 

set ntp server

232

 

 

set ntp update-interval

233

set snmp community

233

 

set snmp notify profile

235

 

set snmp notify target

240

 

SNMPv3 with Informs

240

 

SNMPv3 with Traps

241

 

SNMPv2c with Informs

242

 

SNMPv2c with Traps

243

 

SNMPv1 with Traps

243

 

set snmp protocol

245

 

 

set snmp security

246

 

 

set snmp usm

247

 

 

 

set summertime

250

 

 

 

set system ip-address

251

 

set timedate

 

252

 

 

 

set timezone

 

253

 

 

 

telnet 254

 

 

 

 

 

traceroute

255

 

 

 

 

 

 

 

8 AAA COMMANDS

 

 

 

Commands by Usage

259

 

clear accounting

261

 

 

 

clear authentication admin

262

 

clear authentication console 263

 

clear authentication dot1x

264

 

clear authentication mac

265

 

clear authentication proxy

266

 

clear authentication web

266

 

clear location policy 267

 

 

clear mac-user

268

 

 

 

clear mac-user attr

269

 

 

clear mac-user group

269

 

clear mac-usergroup

270

 

 

clear mac-usergroup attr

271

 

clear mobility-profile

272

 

 

clear user

272

 

 

 

 

clear user attr

273

 

 

 

clear user group

274

 

 

 

clear user lockout

274

 

clear usergroup 275

 

 

 

 

clear usergroup attr

276

 

 

 

display aaa

277

 

 

 

 

 

display accounting statistics

280

 

 

display location policy

282

 

 

display mobility-profile

283

 

 

set accounting {admin | console}

283

 

set accounting {dot1x | mac | web | last-resort}

285

set authentication admin

 

287

 

 

set authentication console

289

 

 

set authentication dot1x

 

291

 

 

set authentication mac

295

 

 

set authentication max-attempts

297

 

set authentication max-attempts

298

 

set authentication minimum-password-length

299

set authentication password-restrict 300

 

set authentication proxy

301

 

 

set authentication web

302

 

 

set location policy

304

 

 

 

 

set mac-user

308

 

 

 

 

 

set mac-user attr

309

 

 

 

 

set mac-usergroup attr

315

 

 

set mobility-profile

317

 

 

 

set mobility-profile mode

 

319

 

 

set user

319

 

 

 

 

 

 

set user attr

321

 

 

 

 

 

set user expire-password-in

322

 

 

set user group

323

 

 

 

 

set usergroup

323

 

 

 

 

set usergroup expire-password-in

325

 

set web-portal

326

 

 

 

 

9 MOBILITY DOMAIN COMMANDS

Commands by Usage

327

clear mobility-domain

328

clear mobility-domain member 328 display mobility-domain 329

display mobility-domain config

330

 

 

display mobility-domain status

331

 

 

set mobility-domain member

332

 

 

set mobility-domain mode member secondary seed-ip

333

set mobility-domain mode member seed-ip

334

 

set mobility-domain mode secondary-seed domain-name

335

set mobility-domain mode seed domain-name

336

 

set domain security 337

 

 

 

10 NETWORK DOMAIN COMMANDS

Network Domain Commands by Usage 339

 

clear network-domain

340

 

 

clear network-domain mode

341

 

clear network-domain peer

342

 

clear network-domain seed-ip

343

 

display network-domain

344

 

set network-domain mode member seed-ip

346

set network-domain peer

347

 

set network-domain mode seed domain-name

348

11 MANAGED ACCESS POINT COMMANDS

MAP Access Point Commands by Usage 349

clear ap local-switching vlan-profile

355

clear ap radio

356

 

 

clear ap boot-configuration 358

 

clear ap radio load-balancing group

359

clear radio-profile

360

 

clear service-profile

 

361

 

display ap arp

362

 

 

display ap config

 

364

 

display ap counters

 

367

 

display ap fdb

373

 

 

display ap qos-stats

 

374

 

display ap etherstats

375

 

display ap group

 

377

 

display ap mesh-links

377

 

display ap status

 

379

 

display ap vlan

385

 

 

 

 

display auto-tune attributes

386

 

 

display auto-tune neighbors

388

 

 

display ap boot-configuration

390

 

display ap connection

391

 

 

 

display ap global

393

 

 

 

 

display ap unconfigured

395

 

 

display load-balancing group

396

 

 

display radio-profile 398

 

 

 

display service-profile

401

 

 

 

reset ap 410

 

 

 

 

 

set ap auto

410

 

 

 

 

set ap auto persistent

412

 

 

 

set ap auto radiotype

413

 

 

 

set ap auto mode

414

 

 

 

set ap bias

415

 

 

 

 

 

set ap blink

416

 

 

 

 

set ap bootconfiguration ip

417

 

 

set ap bootconfiguration mesh mode 418

set ap boot-configuration mesh psk-phrase

419

set ap boot-configuration mesh psk-raw

420

set ap boot-configuration mesh ssid

421

 

set ap bootconfiguration switch

422

 

set ap boot-configuration vlan

423

 

set ap contact 424

 

 

 

 

set ap fingerprint

424

 

 

 

 

set ap force-image-

 

 

 

 

download

426

 

 

 

 

 

set ap group

427

 

 

 

 

set ap location

427

 

 

 

 

set ap local-switching mode

427

 

 

set ap local-switching vlan-profile

428

 

set ap name

429

 

 

 

 

set ap radio antenna-location

430

 

 

set ap radio antennatype 431

 

 

set ap radio auto-tune max-power

432

 

set ap radio auto-tune max-

 

 

 

retransmissions

433

 

 

 

 

set ap radio channel

435

 

 

 

set ap radio link-calibration

436

 

 

set ap radio load balancing

437

 

 

set ap radio load balancing group 438

 

 

set ap radio mode

439

 

 

 

set ap radio radio-profile

440

 

 

set ap radio tx-power

441

 

 

set ap security 443

 

 

 

 

set ap upgrade-firmware

444

 

 

set band-preference

445

 

 

 

set load-balancing mode

446

 

 

set load-balancing strictness 447

 

 

set radio-profile 11g-only

448

 

 

set radio-profile active-scan

448

 

 

set radio-profile auto-tune 11a-channel-range

449

set radio-profile auto-tune channel-config

450

set radio-profile auto-tune channel-holddown

451

set radio-profile auto-tune channel-interval

 

452

set radio-profile auto-tune channel-lockdown

453

set radio-profile auto-tune power-config

454

set radio-profile auto-tune power-interval

455

set radio-profile auto-tune power-lockdown

456

set radio-profile auto-tune power-ramp-interval 457

set radio-profile beacon-interval

457

set radio-profile countermeasures

458

set radio-profile dtim-interval

460

set radio-profile frag-threshold

461

set radio-profile long-retry

462

 

set radio-profile max-rx-lifetime

462

set radio-profile max-tx-lifetime

463

set radio-profile mode 464

 

 

set radio-profile preamble-length

467

set radio-profile qos-mode

468

 

set radio-profile rfid-mode

469

 

set radio-profile rate-enforcement

469

set radio-profile rts-threshold

471

set radio-profile service-profile 472

set radio-profile short-retry

478

set radio-profile wmm

478

 

 

 

set radio-profile wmm-powersave

478

 

set service-profile attr

479

 

 

 

 

set service-profile auth-dot1x

481

 

 

set service-profile auth-fallthru

482

 

set service-profile auth-psk

483

 

 

set service-profile beacon 484

 

 

 

set service-profile bridging

485

 

 

set service-profile cac-mode

486

 

 

set service-profile cac-session

487

 

 

set service-profile cipher-ccmp

488

 

set service-profile cipher-tkip

489

 

 

set service-profile cipher-wep104

490

 

set service-profile cipher-wep40

491

 

set service-profile cos

492

 

 

 

 

set service-profile dhcp-restrict

493

 

set service-profile idle-client-probing

494

set service-profile keep-initial-vlan

495

 

set service-profile load-balancing-

 

 

exempt 496

 

 

 

 

 

set service-profile long-retry-count

497

 

set service-profile mesh

498

 

 

 

set service-profile no-broadcast

499

 

set service-profile proxy-arp

500

 

 

set service-profile psk-phrase

501

 

 

set service-profile psk-raw

502

 

 

 

set service-profile rsn-ie

503

 

 

 

set service-profile shared-key-auth

504

 

set service-profile short-retry-count

504

set service-profile soda agent-directory

505

set service-profile soda enforce-checks

506

set service-profile soda failure-page

507

set service-profile soda logout-page

508

set service-profile soda mode

510

 

 

set service-profile soda remediation-acl

511

set service-profile soda success-page

512

set service-profile ssid-name

513

 

 

set service-profile ssid-type

514

 

 

 

set service-profile tkip-mc-time

514

 

 

set service-profile static-cos

515

 

 

 

set service-profile transmit-rates

 

516

 

 

set service-profile use-client-dscp

 

518

 

 

set service-profile user-idle-timeout

519

 

 

set service-profile web-portal-acl

 

520

 

 

set service-profile web-portal-form

521

 

 

set service-profile web-portal-logout logout-url

523

 

set service-profile web-portal-logout mode 524

 

set service-profile web-portal-session-timeout

525

 

set service-profile wep active-multicast-

 

 

index

526

 

 

 

 

 

 

 

set service-profile wep active-unicast-

 

 

index

527

 

 

 

 

 

 

 

set service-profile wep key-index

 

528

 

 

set service-profile wpa-ie

529

 

 

 

 

 

 

 

 

 

 

12 STP COMMANDS

 

 

 

 

 

 

STP Commands by Usage

531

 

 

 

 

clear spantree portcost

532

 

 

 

 

clear spantree portpri

533

 

 

 

 

clear spantree portvlancost

533

 

 

 

clear spantree portvlanpri

534

 

 

 

 

clear spantree statistics

535

 

 

 

 

display spantree

536

 

 

 

 

 

 

display spantree backbonefast

539

 

 

display spantree blockedports

540

 

 

display spantree portfast

541

 

 

 

 

display spantree portvlancost 542

 

 

display spantree statistics

542

 

 

 

 

display spantree uplinkfast

548

 

 

 

set spantree 549

 

 

 

 

 

 

 

set spantree backbonefast

550

 

 

 

set spantree fwddelay

551

 

 

 

 

set spantree hello

551

 

 

 

 

 

set spantree maxage

552

 

 

 

 

 

set spantree portcost

553

 

 

 

 

set spantree portfast

554

 

 

 

 

 

set spantree portpri

555

 

 

set spantree portvlancost

556

 

set spantree portvlanpri

557

 

set spantree priority

558

 

set spantree uplinkfast

558

 

 

13 IGMP SNOOPING COMMANDS

 

Commands by usage

561

 

clear igmp statistics

562

 

 

display igmp

562

 

 

 

display igmp mrouter

566

 

display igmp querier

567

 

display igmp receiver-table

569

 

display igmp statistics

571

 

set igmp 573

 

 

 

 

set igmp lmqi

574

 

 

 

set igmp mrouter

575

 

 

set igmp mrsol

576

 

 

 

set igmp mrsol mrsi

576

 

 

set igmp oqi

577

 

 

 

set igmp proxy-report

578

 

set igmp qi

579

 

 

 

set igmp qri

580

 

 

 

set igmp querier

581

 

 

set igmp receiver

581

 

 

set igmp rv

582

 

 

14 SECURITY ACL COMMANDS

Security ACL Commands by Usage 585

clear security acl 586

clear security acl map

587

commit security acl

589

display security acl

590

display security acl editbuffer

591

display security acl hits

592

display security acl info

593

display security acl map

594

display security acl resource-usage 595

rollback security acl

599

set security acl 600

 

set security acl map

605

set security acl hit-sample-rate 607

15 CRYPTOGRAPHY COMMANDS

 

Commands by Usage

610

 

 

crypto ca-certificate

610

 

 

crypto certificate

612

 

 

 

crypto generate key

613

 

 

crypto generate request

614

 

crypto generate self-signed

616

 

crypto otp

618

 

 

 

 

crypto pkcs12

620

 

 

 

 

display crypto ca-certificate

621

 

display crypto certificate

622

 

display crypto key domain

624

 

display crypto key ssh

624

 

 

 

16 RADIUS AND SERVER GROUP COMMANDS

 

Commands by Usage

625

 

 

clear radius

626

 

 

 

 

clear radius client system-ip

627

 

clear radius proxy client

628

 

clear radius proxy port

628

 

clear radius server

629

 

 

clear server group

629

 

 

set radius

630

 

 

 

 

 

set radius client system-ip

632

 

set radius proxy client

633

 

 

set radius proxy port

634

 

 

set radius server

635

 

 

 

set server group

637

 

 

set server group load-balance 638

17 802.1X MANAGEMENT COMMANDS

Commands by Usage

 

641

 

clear dot1x bonded-period

642

clear dot1x max-req

643

 

 

clear dot1x port-control

643

 

clear dot1x quiet-period

644

 

clear dot1x reauth-max

645

 

clear dot1x reauth-period

645

clear dot1x timeout auth-server

646

clear dot1x timeout supplicant

646

clear dot1x tx-period

 

647

 

 

display dot1x

647

 

 

 

 

set dot1x authcontrol

650

 

set dot1x bonded-period

651

set dot1x key-tx

652

 

 

 

set dot1x max-req

653

 

 

set dot1x port-control

654

 

set dot1x quiet-period

655

 

set dot1x reauth

655

 

 

 

set dot1x reauth-max

 

656

 

set dot1x reauth-period

657

 

set dot1x timeout auth-server

657

set dot1x timeout supplicant

658

set dot1x tx-period

658

 

 

set dot1x wep-rekey

659

 

 

set dot1x wep-rekey-period

660

18 SESSION MANAGEMENT COMMANDS

Commands by Usage 661

clear sessions

661

 

clear sessions network

663

display sessions

664

 

display sessions mesh-ap

667

display sessions network

668

19 RF DETECTION COMMANDS

Commands by Usage

 

677

 

clear rfdetect attack-list

678

 

clear rfdetect black-list

679

 

clear rfdetect ignore

 

679

 

clear rfdetect ssid-list

 

680

 

clear rfdetect vendor-list

681

 

rfping 682

 

 

 

 

display rfdetect attack-list

683

 

display rfdetect black-list

684

 

display rfdetect clients

685

 

display rfdetect countermeasures

687

display rfdetect counters

688

 

display rfdetect data

 

690

 

display rfdetect ignore

692

 

display rfdetect mobility-domain

692

display rfdetect ssid-list

 

697

 

display rfdetect vendor-list

697

 

display rfdetect visible

698

 

set rfdetect active-scan

 

700

 

set rfdetect attack-list

701

 

set rfdetect black-list

 

702

 

set rf detect countermeasures 702

set rfdetect countermeasures mac

703

set rfdetect ignore

704

 

 

set rfdetect log 705

 

 

 

set rfdetect signature

 

706

 

set rfdetect signature key

707

 

set rfdetect ssid-list

707

 

set rfdetect vendor-list

708

 

test rflink 709

 

 

 

 

20 FILE MANAGEMENT COMMANDS

Commands by Usage 711 backup 712

clear boot backup-configuration 714 clear boot config 714

copy

715

 

delete

717

 

dir 718

 

install soda agent 721

display boot

722

display config

723

display version

725

load config

727

md5

729

 

mkdir

729

 

reset system

731

restore

732

 

rmdir

733

 

save config

733

set boot backup-configuration 734 set boot configuration-file 735

 

set boot partition

736

 

 

uninstall soda agent

736

 

 

 

21 TRACE COMMANDS

 

 

Commands by Usage

739

 

clear log trace

740

 

 

clear trace

740

 

 

 

display trace

 

741

 

 

 

save trace

742

 

 

 

set trace authentication

742

 

set trace authorization

743

 

set trace dot1x

744

 

 

set trace sm

 

745

 

 

22 SNOOP COMMANDS

Commands by Usage 747

clear snoop

748

clear snoop map

748

set snoop

749

 

set snoop map

752

set snoop mode

753

display snoop 754

 

display snoop info

754

display snoop map

755

display snoop stats

756

23 SYSTEM LOG COMMANDS

Commands by Usage 759

clear log

759

 

display log buffer

760

display log config

762

display log trace

763

set log

764

 

set log mark 767

24

BOOT PROMPT COMMANDS

 

Boot Prompt Commands by Usage 769

 

autoboot 770

 

boot

 

771

 

change

773

 

create

774

 

delete

775

 

dhcp

776

 

diag

 

777

 

dir

777

 

display

778

 

fver

780

 

help

 

781

 

ls

782

 

next

 

783

 

reset

784

 

test

785

 

version

786

A

 

OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS

 

Register Your Product to Gain Service Benefits 787

 

Solve Problems Online 787

Purchase Extended Warranty and Professional Services 788

Access Software Downloads 788

Contact Us 788

Telephone Technical Support and Repair 789

INDEX

Conventions 25

ABOUT THIS GUIDE

This command reference explains Mobility System Software (MSS™) command line interface (CLI) that you enter on a 3Com WXR100 or WX1200 Wireless Switch or WX4400 or WX2200 Wireless LAN Controller to configure and manage the Mobility System™ wireless LAN (WLAN).

Read this reference if you are a network administrator responsible for managing WXR100, WX1200, WX4400, or WX2200 wireless switches and their Managed Access Points (MAPs) in a network.

If release notes are shipped with your product and the information there differs from the information in this guide, follow the instructions in the release notes.

Most user guides and release notes are available in Adobe Acrobat

Reader Portable Document Format (PDF) or HTML on the 3Com

World Wide Web site:

http://www.3com.com/

Conventions

Table 1 and Table 2 list conventions that are used throughout this guide.

 

Table 1

Notice Icons

 

 

 

 

 

 

 

 

 

Icon

Notice Type

Description

 

 

 

 

 

 

 

 

 

 

Information note

Information that describes important features or

 

 

 

 

 

instructions

 

 

 

 

Caution

Information that alerts you to potential loss of data or

 

 

 

 

 

 

 

 

 

potential damage to an application, system, or device

 

 

 

 

 

 

26 ABOUT THIS GUIDE

This manual uses the following text and syntax conventions:

Table 2 Text Conventions

Convention

Description

 

 

Monospace text

Sets off command syntax or sample commands and system

 

responses.

 

 

Bold text

Highlights commands that you enter or items you select.

 

 

Italic text

Designates command variables that you replace with

 

appropriate values, or highlights publication titles or words

 

requiring special emphasis.

 

 

[ ] (square brackets)

Enclose optional parameters in command syntax.

 

 

{ } (curly brackets)

Enclose mandatory parameters in command syntax.

 

 

| (vertical bar)

Separates mutually exclusive options in command syntax.

 

 

Keyboard key names

If you must press two or more keys simultaneously, the key

 

names are linked with a plus sign (+). Example:

 

Press Ctrl+Alt+Del

 

 

Words in italics

Italics are used to:

 

Emphasize a point.

 

Denote a new term at the place where it is defined in the

 

text.

 

Highlight an example string, such as a username or SSID.

 

 

Documentation

The MSS documentation set includes the following documents.

 

Wireless Switch Manager (3WXM) Release Notes

 

These notes provide information about the 3WXM software release,

 

including new features and bug fixes.

 

Wireless LAN Switch and Controller Release Notes

 

These notes provide information about the MSS software release,

 

including new features and bug fixes.

 

Wireless LAN Switch and Controller Quick Start Guide

 

This guide provides instructions for performing basic setup of secure

 

(802.1X) and guest (WebAAA) access, for configuring a Mobility

 

Domain for roaming, and for accessing a sample network plan in

 

3WXM for advanced configuration and management.

Documentation Comments 27

Wireless Switch Manager Reference Manual

This manual shows you how to plan, configure, deploy, and manage a

Mobility System wireless LAN (WLAN) using the 3Com Wireless Switch

Manager (3WXM).

Wireless Switch Manager User’s Guide

This manual shows you how to plan, configure, deploy, and manage the entire WLAN with the 3WXM tool suite. Read this guide to learn how to plan wireless services, how to configure and deploy 3Com equipment to provide those services, and how to optimize and manage your WLAN.

Wireless LAN Switch and Controller Hardware Installation Guide

This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN.

Wireless LAN Switch and Controller Configuration Guide

 

This guide provides instructions for configuring and managing the

 

system through the Mobility System Software (MSS) CLI.

 

Wireless LAN Switch and Controller Command Reference

 

This reference provides syntax information for all MSS commands

 

supported on WX switches.

 

 

Documentation

Your suggestions are very important to us. They will help make our

Comments

documentation more useful to you. Please e-mail comments about this

 

document to 3Com at:

 

pddtechpubs_comments@3com.com

 

Please include the following information when contacting us:

 

Document title

 

Document part number and revision (on the title page)

 

Page number (if appropriate)

Example:

Wireless LAN Switch and Controller Configuration Guide

Part number 730-9502-0071, Revision B

Page 25

28 ABOUT THIS GUIDE

Please note that we can only respond to comments and questions about 3Com product documentation at this e-mail address. Questions related to Technical Support or sales should be directed in the first instance to your network supplier.

NEW FEATURES SUMMARY

This summary describes new features and commands available in Version 7.0 of the Wireless LAN Mobility System that affect this guide. Each feature section includes:

A brief description of the feature or command

Basic configuration procedures, if applicable

It is important to note that new MSS 7.0 features and commands are not described within the individual chapters of this guide. They are only covered in this summary section.

This summary covers the following topics:

Virtual Controller Clustering Configuration on page 30

AP 3950 PoE Configuration on page 31

External Captive Portal Support on page 33

Simultaneous Login Support on page 34

Dynamic RADIUS Extensions on page 34

MAC User Range Authentication on page 36

MAC Authentication Request Format on page 37

User Attribute Enhancements on page 37

Enhancements to Location Policy Configuration on page 38

RADIUS Ping Utility on page 39

Unique AP Number Support on page 40

Bandwidth Management on page 40

RF Scanning Enhancements on page 43

RF Detection Configuration on page 44

display aaa Command Replacements on page 48

30NEW FEATURES SUMMARY

display ap config Enhancements on page 54

display load Enhancements on page 55

display radio-profile Enhancements on page 58

display sessions network ap Enhancements on page 60

clear sessions network Enhancements on page 61

display service-profile Enhancements on page 61

display rfdetect Changes on page 66

For more detailed application and usage information on the commands described in this section, consult the Wireless LAN Switch and Controller Configuration Guide.

Virtual Controller

New commands support configuration of virtual controller clustering on a

Clustering

mobility domain.

Configuration

 

set cluster mode

Enable virtual controller cluster configuration on WXs in a mobility

 

domain.

 

Syntax set cluster mode {enable | disable} preempt {enable

 

| disable}

 

Defaults — None.

 

Access — Enabled.

 

History —Introduced in MSS Version 7.0.

 

Usage — You must enable cluster mode on all WXs that are members of

 

the cluster.

 

Examples — The following command enables cluster mode on a WX in a

 

mobility domain:

 

WX# set cluster mode enable

 

success:change accepted

set cluster preempt Use this command on the secondary seed of the cluster to allow the secondary seed to become active if the primary seed fails.

Loading...
+ 770 hidden pages