Wireless LAN Mobility System
Wireless LAN Switch and Controller
Command Reference
WX4400 3CRWX440095A
WX2200 3CRWX220095A
WX1200 3CRWX120695A
WXR100 3CRWXR10095A
http://www.3Com.com/
Part No. 10015910 Rev AC
Published July 2008
3Com Corporation 350 Campus Drive Marlborough, MA USA 01752-3064
Copyright © 2007, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries.
3Com is a registered trademark of 3Com Corporation. The 3Com logo is a trademark of 3Com Corporation.
Mobility Domain, Managed Access Point, Mobility Profile, Mobility System, Mobility System Software, MP, MSS, and SentrySweep are trademarks of Trapeze Networks.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, Windows XP, and Windows NT are registered trademarks of Microsoft Corporation.
All other company and product names may be trademarks of the respective companies with which they are associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.
Environmental Statement about the Documentation
The documentation for this product is printed on paper that comes from sustainable, managed forests; it is fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and the inks are vegetable-based with a low heavy-metal content.
CONTENTS
ABOUT THIS GUIDE
Conventions |
25 |
Documentation |
26 |
Documentation Comments 27
NEW FEATURES SUMMARY
Virtual Controller Clustering Configuration 30
set cluster mode |
30 |
|
|
|
set cluster preempt |
|
30 |
|
|
AP 3950 PoE Configuration 31 |
|
|||
set ap power-mode |
|
31 |
|
|
802.11n Configuration |
|
31 |
|
|
set service-profile 11n |
32 |
|
|
|
set service-profile transmit-rates |
32 |
|||
set radio-profile 11n |
33 |
|
|
|
External Captive Portal Support |
33 |
|||
Simultaneous Login Support |
34 |
|
||
Dynamic RADIUS Extensions |
34 |
|
||
set radius dac 34 |
|
|
|
|
set radius das-port |
34 |
|
|
|
clear radius das-port |
35 |
|
|
|
set authorization dynamic |
35 |
|
||
termination-action Attribute 35 |
||||
MAC User Range Authentication |
36 |
|||
set authentication mac-prefix |
36 |
|||
MAC Authentication Request Format 37 |
||||
User Attribute Enhancements |
37 |
|
Enhancements to Location Policy Configuration 38 RADIUS Ping Utility 39
radping 39
Unique AP Number Support 40
Bandwidth Management |
|
40 |
|
|
|
||
set qos profile |
40 |
|
|
|
|
|
|
set radio-profile weighted-fair-queuing |
41 |
||||||
set service-profile max-bw |
42 |
|
|
||||
clear qos-profile |
42 |
|
|
|
|
|
|
RF Scanning Enhancements |
43 |
|
|
||||
set radio-profile rf-scanning mode |
43 |
|
|||||
set radio-profile rf-scanning channel-scope 44 |
|||||||
RF Detection Configuration |
44 |
|
|
||||
Deprecated Commands |
44 |
|
|
||||
Replaced Commands |
|
45 |
|
|
|
||
set rfdetect ssid-list |
45 |
|
|
|
|||
set rfdetect classification ad-hoc |
45 |
|
|||||
set rfdetect classification default |
46 |
|
|||||
set rfdetect classification seen-in-network |
46 |
||||||
set rfdetect classification ssid-masquerade |
47 |
||||||
display rfdetect classification |
47 |
|
|
||||
display aaa Command Replacements |
48 |
|
|||||
display radius |
48 |
|
|
|
|
|
|
display user |
49 |
|
|
|
|
|
|
display mac-user |
51 |
|
|
|
|
|
|
display usergroup |
52 |
|
|
|
|
||
display mac-usergroup |
|
53 |
|
|
|
||
display ap config Enhancements |
54 |
|
|
||||
display ap config |
54 |
|
|
|
|
|
|
display ap config verbose 54 |
|
|
|||||
display ap config |
55 |
|
|
|
|
|
|
display ap config radio |
|
55 |
|
|
|
||
display load Enhancements |
55 |
|
|
||||
display load memory |
56 |
|
|
|
|||
display load cpu |
57 |
|
|
|
|
|
|
display load cpu history |
58 |
|
|
|
|||
display radio-profile Enhancements |
58 |
|
|||||
display radio-profile |
59 |
|
|
|
|||
display sessions network ap Enhancements |
60 |
||||||
display sessions network ap |
60 |
|
|
||||
display sessions network ap radio |
60 |
|
|||||
clear sessions network Enhancements |
61 |
|
|
display service-profile Enhancements 61 |
|
|||||||
|
display rfdetect Changes |
66 |
|
|
|
||||
|
Deprecated Commands |
66 |
|
|
|
||||
|
display rfdetect data |
66 |
|
|
|
|
|||
|
display rfdetect data ap |
69 |
|
|
|
||||
|
display rfdetect data clients |
70 |
|
|
|||||
|
display rfdetect data verbose |
70 |
|
|
|||||
|
display rfdetect data summary |
72 |
|
|
|||||
|
|
|
|||||||
1 USING THE COMMAND-LINE INTERFACE |
|
||||||||
|
Overview |
75 |
|
|
|
|
|
|
|
|
CLI Conventions |
76 |
|
|
|
|
|
|
|
|
Command Prompts |
76 |
|
|
|
|
|||
|
Syntax Notation |
76 |
|
|
|
|
|
||
|
Text Entry Conventions and Allowed Characters |
77 |
|||||||
|
MAC Address Notation |
77 |
|
|
|
||||
|
IP Address and Mask Notation |
78 |
|
|
|||||
|
User Globs, MAC Address Globs, and VLAN Globs |
78 |
|||||||
|
Port Lists 80 |
|
|
|
|
|
|
||
|
Virtual LAN Identification |
81 |
|
|
|||||
|
Command-Line Editing |
81 |
|
|
|
|
|||
|
Keyboard Shortcuts |
81 |
|
|
|
|
|||
|
History Buffer |
82 |
|
|
|
|
|
||
|
Tabs |
82 |
|
|
|
|
|
|
|
|
Single-Asterisk (*) Wildcard Character |
82 |
|
||||||
|
Double-Asterisk (**) Wildcard Characters 82 |
|
|||||||
|
Using CLI Help |
83 |
|
|
|
|
|
|
|
|
Understanding Command Descriptions |
84 |
|
||||||
|
|
|
|
|
|
|
|||
2 ACCESS COMMANDS |
|
|
|
|
|
||||
|
Commands by Usage |
85 |
|
|
|
|
|||
|
disable |
85 |
|
|
|
|
|
|
|
|
enable |
86 |
|
|
|
|
|
|
|
|
quit 86 |
|
|
|
|
|
|
|
|
|
set enablepass |
87 |
|
|
|
|
|
|
3 |
SYSTEM SERVICE COMMANDS |
|||||
|
Commands by Usage |
|
89 |
|||
|
clear banner motd |
90 |
|
|||
|
clear history |
91 |
|
|
||
|
clear prompt |
91 |
|
|
||
|
clear system |
92 |
|
|
||
|
display banner motd |
93 |
||||
|
display base-information |
93 |
||||
|
display license |
94 |
|
|
||
|
display load |
95 |
|
|
||
|
display system |
95 |
|
|
||
|
help 98 |
|
|
|
|
|
|
history |
99 |
|
|
|
|
|
quickstart |
|
100 |
|
|
|
|
set auto-config |
100 |
|
|||
|
set banner acknowledge |
102 |
||||
|
set banner motd |
104 |
|
|||
|
set confirm |
105 |
|
|
||
|
set length |
|
105 |
|
|
|
|
set license |
106 |
|
|
|
|
|
set prompt |
107 |
|
|
||
|
set system contact |
108 |
||||
|
set system countrycode |
109 |
||||
|
set system idle-timeout |
113 |
||||
|
set system ip-address |
114 |
||||
|
set system location |
115 |
||||
|
set system name |
116 |
|
|||
4 |
|
|
||||
PORT COMMANDS |
|
|||||
|
Commands by Usage |
|
117 |
|||
|
clear ap |
118 |
|
|
|
|
|
clear port counters |
119 |
||||
|
clear port-group |
119 |
|
|||
|
clear port media-type |
|
120 |
|||
|
clear port name |
120 |
|
|||
|
clear port mirror |
121 |
|
|||
|
clear port preference |
121 |
|
clear port type |
|
122 |
|
|||
|
display port counters |
123 |
|||||
|
display port-group |
|
124 |
|
|||
|
display port mirror |
|
125 |
|
|||
|
display port poe |
126 |
|
||||
|
display port status |
127 |
|
||||
|
display port media-type |
129 |
|||||
|
monitor port counters 130 |
||||||
|
reset port |
135 |
|
|
|
|
|
|
set ap 135 |
|
|
|
|
|
|
|
set port |
137 |
|
|
|
|
|
|
set port-group |
|
138 |
|
|
||
|
set port media-type |
|
139 |
||||
|
set port mirror |
|
140 |
|
|
||
|
set port name |
|
141 |
|
|
||
|
set port negotiation |
|
141 |
||||
|
set port poe |
142 |
|
|
|
||
|
set port speed |
|
143 |
|
|
||
|
set port trap |
144 |
|
|
|
||
|
set port type ap |
145 |
|
||||
|
set port type wired-auth |
148 |
|||||
|
|
|
|||||
5 VLAN COMMANDS |
|
||||||
|
Commands by usage |
151 |
|||||
|
clear fdb |
152 |
|
|
|
|
|
|
clear security L2-restrict |
153 |
|||||
|
clear security L2-restrict counters 154 |
||||||
|
clear vlan |
155 |
|
|
|
|
|
|
clear vlan-profile |
156 |
|
||||
|
display fdb |
157 |
|
|
|
||
|
display fdb agingtime |
159 |
|||||
|
display fdb count |
160 |
|
||||
|
display roaming station |
161 |
|||||
|
display roaming vlan |
|
163 |
||||
|
display security L2-restrict |
164 |
|||||
|
display tunnel |
|
165 |
|
|
||
|
display vlan config |
|
166 |
|
|
display vlan-profile |
168 |
|||
|
set fdb 169 |
|
|
|
|
|
set fdb agingtime |
170 |
|||
|
set security L2-restrict |
171 |
|||
|
set vlan name |
172 |
|
||
|
set vlan port |
173 |
|
|
|
|
set vlan tunnel-affinity |
174 |
|||
|
set vlan profile |
175 |
|
||
|
|
||||
6 QUALITY OF SERVICE COMMANDS |
|||||
|
Commands by Usage |
177 |
|||
|
clear qos |
177 |
|
|
|
|
set qos cos-to-dscp-map |
179 |
|||
|
set qos dscp-to-cos-map |
180 |
|||
|
display qos |
181 |
|
|
|
|
display qos dscp-table |
182 |
|||
|
|
||||
7 IP SERVICES COMMANDS |
|||||
|
Commands by Usage |
183 |
|||
|
clear interface |
185 |
|
||
|
clear ip alias |
|
186 |
|
|
|
clear ip dns domain |
187 |
|||
|
clear ip dns server |
187 |
|||
|
clear ip route |
188 |
|
|
|
|
clear ip telnet |
189 |
|
|
|
|
clear ntp server |
189 |
|
||
|
clear ntp update-interval |
190 |
|||
|
clear snmp community |
191 |
|||
|
clear snmp notify profile |
191 |
|||
|
clear snmp notify target |
192 |
|||
|
clear snmp usm 192 |
|
|||
|
clear summertime |
193 |
|||
|
clear system ip-address |
194 |
|||
|
clear timezone |
194 |
|
||
|
display arp |
195 |
|
|
|
|
display dhcp-client |
196 |
|||
|
display dhcp-server |
198 |
display interface |
|
200 |
|
|||
display ip alias |
201 |
|
|
|||
display ip dns |
202 |
|
|
|||
display ip https |
|
203 |
|
|
||
display ip route |
|
204 |
|
|
||
display ip telnet |
|
206 |
|
|||
display ntp |
207 |
|
|
|
||
display snmp community |
209 |
|||||
display snmp counters |
210 |
|||||
display snmp notify profile |
210 |
|||||
display snmp notify target |
210 |
|||||
display snmp status |
211 |
|
||||
display snmp usm |
212 |
|
||||
display summertime |
212 |
|
||||
display timedate |
|
213 |
|
|||
display timezone |
|
213 |
|
|||
ping |
214 |
|
|
|
|
|
set arp |
216 |
|
|
|
|
|
set arp agingtime |
217 |
|
||||
set interface |
218 |
|
|
|||
set interface dhcp-client |
219 |
|||||
set interface dhcp-server |
220 |
|||||
set interface status 221 |
|
|||||
set ip alias |
222 |
|
|
|
||
set ip dns |
223 |
|
|
|
|
|
set ip dns domain |
223 |
|
||||
set ip dns server |
|
224 |
|
|||
set ip https server |
225 |
|
||||
set ip route |
226 |
|
|
|||
set ip snmp server |
228 |
|
||||
set ip ssh |
228 |
|
|
|
|
|
set ip ssh server |
|
229 |
|
|||
set ip telnet |
229 |
|
|
|||
set ip telnet server |
230 |
|
||||
set ntp |
231 |
|
|
|
|
|
set ntp server |
232 |
|
|
|||
set ntp update-interval |
233 |
|||||
set snmp community |
233 |
|
set snmp notify profile |
235 |
||||
|
set snmp notify target |
240 |
||||
|
SNMPv3 with Informs |
240 |
||||
|
SNMPv3 with Traps |
241 |
||||
|
SNMPv2c with Informs |
242 |
||||
|
SNMPv2c with Traps |
243 |
||||
|
SNMPv1 with Traps |
243 |
||||
|
set snmp protocol |
245 |
|
|||
|
set snmp security |
246 |
|
|||
|
set snmp usm |
247 |
|
|
||
|
set summertime |
250 |
|
|
||
|
set system ip-address |
251 |
||||
|
set timedate |
|
252 |
|
|
|
|
set timezone |
|
253 |
|
|
|
|
telnet 254 |
|
|
|
|
|
|
traceroute |
255 |
|
|
|
|
|
|
|
|
|||
8 AAA COMMANDS |
|
|
||||
|
Commands by Usage |
259 |
||||
|
clear accounting |
261 |
|
|
||
|
clear authentication admin |
262 |
||||
|
clear authentication console 263 |
|||||
|
clear authentication dot1x |
264 |
||||
|
clear authentication mac |
265 |
||||
|
clear authentication proxy |
266 |
||||
|
clear authentication web |
266 |
||||
|
clear location policy 267 |
|
||||
|
clear mac-user |
268 |
|
|
||
|
clear mac-user attr |
269 |
|
|||
|
clear mac-user group |
269 |
||||
|
clear mac-usergroup |
270 |
|
|||
|
clear mac-usergroup attr |
271 |
||||
|
clear mobility-profile |
272 |
|
|||
|
clear user |
272 |
|
|
|
|
|
clear user attr |
273 |
|
|
||
|
clear user group |
274 |
|
|
||
|
clear user lockout |
274 |
|
clear usergroup 275 |
|
|
|
|
|||
clear usergroup attr |
276 |
|
|
|
|||
display aaa |
277 |
|
|
|
|
|
|
display accounting statistics |
280 |
|
|
||||
display location policy |
282 |
|
|
||||
display mobility-profile |
283 |
|
|
||||
set accounting {admin | console} |
283 |
|
|||||
set accounting {dot1x | mac | web | last-resort} |
285 |
||||||
set authentication admin |
|
287 |
|
|
|||
set authentication console |
289 |
|
|
||||
set authentication dot1x |
|
291 |
|
|
|||
set authentication mac |
295 |
|
|
||||
set authentication max-attempts |
297 |
|
|||||
set authentication max-attempts |
298 |
|
|||||
set authentication minimum-password-length |
299 |
||||||
set authentication password-restrict 300 |
|
||||||
set authentication proxy |
301 |
|
|
||||
set authentication web |
302 |
|
|
||||
set location policy |
304 |
|
|
|
|
||
set mac-user |
308 |
|
|
|
|
|
|
set mac-user attr |
309 |
|
|
|
|
||
set mac-usergroup attr |
315 |
|
|
||||
set mobility-profile |
317 |
|
|
|
|||
set mobility-profile mode |
|
319 |
|
|
|||
set user |
319 |
|
|
|
|
|
|
set user attr |
321 |
|
|
|
|
|
|
set user expire-password-in |
322 |
|
|
||||
set user group |
323 |
|
|
|
|
||
set usergroup |
323 |
|
|
|
|
||
set usergroup expire-password-in |
325 |
|
|||||
set web-portal |
326 |
|
|
|
|
9 MOBILITY DOMAIN COMMANDS
Commands by Usage |
327 |
clear mobility-domain |
328 |
clear mobility-domain member 328 display mobility-domain 329
display mobility-domain config |
330 |
|
|
display mobility-domain status |
331 |
|
|
set mobility-domain member |
332 |
|
|
set mobility-domain mode member secondary seed-ip |
333 |
||
set mobility-domain mode member seed-ip |
334 |
|
|
set mobility-domain mode secondary-seed domain-name |
335 |
||
set mobility-domain mode seed domain-name |
336 |
|
|
set domain security 337 |
|
|
|
10 NETWORK DOMAIN COMMANDS
Network Domain Commands by Usage 339 |
|
||
clear network-domain |
340 |
|
|
clear network-domain mode |
341 |
|
|
clear network-domain peer |
342 |
|
|
clear network-domain seed-ip |
343 |
|
|
display network-domain |
344 |
|
|
set network-domain mode member seed-ip |
346 |
||
set network-domain peer |
347 |
|
|
set network-domain mode seed domain-name |
348 |
11 MANAGED ACCESS POINT COMMANDS
MAP Access Point Commands by Usage 349
clear ap local-switching vlan-profile |
355 |
|||
clear ap radio |
356 |
|
|
|
clear ap boot-configuration 358 |
|
|||
clear ap radio load-balancing group |
359 |
|||
clear radio-profile |
360 |
|
||
clear service-profile |
|
361 |
|
|
display ap arp |
362 |
|
|
|
display ap config |
|
364 |
|
|
display ap counters |
|
367 |
|
|
display ap fdb |
373 |
|
|
|
display ap qos-stats |
|
374 |
|
|
display ap etherstats |
375 |
|
||
display ap group |
|
377 |
|
|
display ap mesh-links |
377 |
|
||
display ap status |
|
379 |
|
display ap vlan |
385 |
|
|
|
|
|
display auto-tune attributes |
386 |
|
|
|||
display auto-tune neighbors |
388 |
|
|
|||
display ap boot-configuration |
390 |
|
||||
display ap connection |
391 |
|
|
|
||
display ap global |
393 |
|
|
|
|
|
display ap unconfigured |
395 |
|
|
|||
display load-balancing group |
396 |
|
|
|||
display radio-profile 398 |
|
|
|
|||
display service-profile |
401 |
|
|
|
||
reset ap 410 |
|
|
|
|
|
|
set ap auto |
410 |
|
|
|
|
|
set ap auto persistent |
412 |
|
|
|
||
set ap auto radiotype |
413 |
|
|
|
||
set ap auto mode |
414 |
|
|
|
||
set ap bias |
415 |
|
|
|
|
|
set ap blink |
416 |
|
|
|
|
|
set ap bootconfiguration ip |
417 |
|
|
|||
set ap bootconfiguration mesh mode 418 |
||||||
set ap boot-configuration mesh psk-phrase |
419 |
|||||
set ap boot-configuration mesh psk-raw |
420 |
|||||
set ap boot-configuration mesh ssid |
421 |
|
||||
set ap bootconfiguration switch |
422 |
|
||||
set ap boot-configuration vlan |
423 |
|
||||
set ap contact 424 |
|
|
|
|
||
set ap fingerprint |
424 |
|
|
|
|
|
set ap force-image- |
|
|
|
|
||
download |
426 |
|
|
|
|
|
set ap group |
427 |
|
|
|
|
|
set ap location |
427 |
|
|
|
|
|
set ap local-switching mode |
427 |
|
|
|||
set ap local-switching vlan-profile |
428 |
|
||||
set ap name |
429 |
|
|
|
|
|
set ap radio antenna-location |
430 |
|
|
|||
set ap radio antennatype 431 |
|
|
||||
set ap radio auto-tune max-power |
432 |
|
||||
set ap radio auto-tune max- |
|
|
|
|||
retransmissions |
433 |
|
|
|
|
set ap radio channel |
435 |
|
|
|
set ap radio link-calibration |
436 |
|
|
|
set ap radio load balancing |
437 |
|
|
|
set ap radio load balancing group 438 |
|
|
||
set ap radio mode |
439 |
|
|
|
set ap radio radio-profile |
440 |
|
|
|
set ap radio tx-power |
441 |
|
|
|
set ap security 443 |
|
|
|
|
set ap upgrade-firmware |
444 |
|
|
|
set band-preference |
445 |
|
|
|
set load-balancing mode |
446 |
|
|
|
set load-balancing strictness 447 |
|
|
||
set radio-profile 11g-only |
448 |
|
|
|
set radio-profile active-scan |
448 |
|
|
|
set radio-profile auto-tune 11a-channel-range |
449 |
|||
set radio-profile auto-tune channel-config |
450 |
|||
set radio-profile auto-tune channel-holddown |
451 |
|||
set radio-profile auto-tune channel-interval |
|
452 |
||
set radio-profile auto-tune channel-lockdown |
453 |
|||
set radio-profile auto-tune power-config |
454 |
|||
set radio-profile auto-tune power-interval |
455 |
|||
set radio-profile auto-tune power-lockdown |
456 |
set radio-profile auto-tune power-ramp-interval 457
set radio-profile beacon-interval |
457 |
|
set radio-profile countermeasures |
458 |
|
set radio-profile dtim-interval |
460 |
|
set radio-profile frag-threshold |
461 |
|
set radio-profile long-retry |
462 |
|
set radio-profile max-rx-lifetime |
462 |
|
set radio-profile max-tx-lifetime |
463 |
|
set radio-profile mode 464 |
|
|
set radio-profile preamble-length |
467 |
|
set radio-profile qos-mode |
468 |
|
set radio-profile rfid-mode |
469 |
|
set radio-profile rate-enforcement |
469 |
|
set radio-profile rts-threshold |
471 |
|
set radio-profile service-profile 472 |
||
set radio-profile short-retry |
478 |
set radio-profile wmm |
478 |
|
|
|
|
set radio-profile wmm-powersave |
478 |
|
|||
set service-profile attr |
479 |
|
|
|
|
set service-profile auth-dot1x |
481 |
|
|
||
set service-profile auth-fallthru |
482 |
|
|||
set service-profile auth-psk |
483 |
|
|
||
set service-profile beacon 484 |
|
|
|
||
set service-profile bridging |
485 |
|
|
||
set service-profile cac-mode |
486 |
|
|
||
set service-profile cac-session |
487 |
|
|
||
set service-profile cipher-ccmp |
488 |
|
|||
set service-profile cipher-tkip |
489 |
|
|
||
set service-profile cipher-wep104 |
490 |
|
|||
set service-profile cipher-wep40 |
491 |
|
|||
set service-profile cos |
492 |
|
|
|
|
set service-profile dhcp-restrict |
493 |
|
|||
set service-profile idle-client-probing |
494 |
||||
set service-profile keep-initial-vlan |
495 |
|
|||
set service-profile load-balancing- |
|
|
|||
exempt 496 |
|
|
|
|
|
set service-profile long-retry-count |
497 |
|
|||
set service-profile mesh |
498 |
|
|
|
|
set service-profile no-broadcast |
499 |
|
|||
set service-profile proxy-arp |
500 |
|
|
||
set service-profile psk-phrase |
501 |
|
|
||
set service-profile psk-raw |
502 |
|
|
|
|
set service-profile rsn-ie |
503 |
|
|
|
|
set service-profile shared-key-auth |
504 |
|
|||
set service-profile short-retry-count |
504 |
||||
set service-profile soda agent-directory |
505 |
||||
set service-profile soda enforce-checks |
506 |
||||
set service-profile soda failure-page |
507 |
||||
set service-profile soda logout-page |
508 |
||||
set service-profile soda mode |
510 |
|
|
||
set service-profile soda remediation-acl |
511 |
||||
set service-profile soda success-page |
512 |
||||
set service-profile ssid-name |
513 |
|
|
||
set service-profile ssid-type |
514 |
|
|
|
set service-profile tkip-mc-time |
514 |
|
|||||
|
set service-profile static-cos |
515 |
|
|
||||
|
set service-profile transmit-rates |
|
516 |
|
||||
|
set service-profile use-client-dscp |
|
518 |
|
||||
|
set service-profile user-idle-timeout |
519 |
|
|||||
|
set service-profile web-portal-acl |
|
520 |
|
||||
|
set service-profile web-portal-form |
521 |
|
|||||
|
set service-profile web-portal-logout logout-url |
523 |
||||||
|
set service-profile web-portal-logout mode 524 |
|||||||
|
set service-profile web-portal-session-timeout |
525 |
||||||
|
set service-profile wep active-multicast- |
|
||||||
|
index |
526 |
|
|
|
|
|
|
|
set service-profile wep active-unicast- |
|
||||||
|
index |
527 |
|
|
|
|
|
|
|
set service-profile wep key-index |
|
528 |
|
||||
|
set service-profile wpa-ie |
529 |
|
|
|
|||
|
|
|
|
|
|
|
||
12 STP COMMANDS |
|
|
|
|
|
|||
|
STP Commands by Usage |
531 |
|
|
|
|||
|
clear spantree portcost |
532 |
|
|
|
|||
|
clear spantree portpri |
533 |
|
|
|
|||
|
clear spantree portvlancost |
533 |
|
|
||||
|
clear spantree portvlanpri |
534 |
|
|
|
|||
|
clear spantree statistics |
535 |
|
|
|
|||
|
display spantree |
536 |
|
|
|
|
|
|
|
display spantree backbonefast |
539 |
|
|||||
|
display spantree blockedports |
540 |
|
|||||
|
display spantree portfast |
541 |
|
|
|
|||
|
display spantree portvlancost 542 |
|
||||||
|
display spantree statistics |
542 |
|
|
|
|||
|
display spantree uplinkfast |
548 |
|
|
||||
|
set spantree 549 |
|
|
|
|
|
|
|
|
set spantree backbonefast |
550 |
|
|
||||
|
set spantree fwddelay |
551 |
|
|
|
|||
|
set spantree hello |
551 |
|
|
|
|
||
|
set spantree maxage |
552 |
|
|
|
|
||
|
set spantree portcost |
553 |
|
|
|
|||
|
set spantree portfast |
554 |
|
|
|
|
|
set spantree portpri |
555 |
|
||
|
set spantree portvlancost |
556 |
|||
|
set spantree portvlanpri |
557 |
|||
|
set spantree priority |
558 |
|||
|
set spantree uplinkfast |
558 |
|||
|
|
||||
13 IGMP SNOOPING COMMANDS |
|||||
|
Commands by usage |
561 |
|||
|
clear igmp statistics |
562 |
|
||
|
display igmp |
562 |
|
|
|
|
display igmp mrouter |
566 |
|||
|
display igmp querier |
567 |
|||
|
display igmp receiver-table |
569 |
|||
|
display igmp statistics |
571 |
|||
|
set igmp 573 |
|
|
|
|
|
set igmp lmqi |
574 |
|
|
|
|
set igmp mrouter |
575 |
|
||
|
set igmp mrsol |
576 |
|
|
|
|
set igmp mrsol mrsi |
576 |
|
||
|
set igmp oqi |
577 |
|
|
|
|
set igmp proxy-report |
578 |
|||
|
set igmp qi |
579 |
|
|
|
|
set igmp qri |
580 |
|
|
|
|
set igmp querier |
581 |
|
||
|
set igmp receiver |
581 |
|
||
|
set igmp rv |
582 |
|
|
14 SECURITY ACL COMMANDS
Security ACL Commands by Usage 585
clear security acl 586 |
|
clear security acl map |
587 |
commit security acl |
589 |
display security acl |
590 |
display security acl editbuffer |
591 |
display security acl hits |
592 |
display security acl info |
593 |
display security acl map |
594 |
display security acl resource-usage 595
rollback security acl |
599 |
set security acl 600 |
|
set security acl map |
605 |
set security acl hit-sample-rate 607
15 CRYPTOGRAPHY COMMANDS
|
Commands by Usage |
610 |
|
|||
|
crypto ca-certificate |
610 |
|
|||
|
crypto certificate |
612 |
|
|
||
|
crypto generate key |
613 |
|
|||
|
crypto generate request |
614 |
||||
|
crypto generate self-signed |
616 |
||||
|
crypto otp |
618 |
|
|
|
|
|
crypto pkcs12 |
620 |
|
|
|
|
|
display crypto ca-certificate |
621 |
||||
|
display crypto certificate |
622 |
||||
|
display crypto key domain |
624 |
||||
|
display crypto key ssh |
624 |
|
|||
|
|
|||||
16 RADIUS AND SERVER GROUP COMMANDS |
||||||
|
Commands by Usage |
625 |
|
|||
|
clear radius |
626 |
|
|
|
|
|
clear radius client system-ip |
627 |
||||
|
clear radius proxy client |
628 |
||||
|
clear radius proxy port |
628 |
||||
|
clear radius server |
629 |
|
|||
|
clear server group |
629 |
|
|||
|
set radius |
630 |
|
|
|
|
|
set radius client system-ip |
632 |
||||
|
set radius proxy client |
633 |
|
|||
|
set radius proxy port |
634 |
|
|||
|
set radius server |
635 |
|
|
||
|
set server group |
637 |
|
|
set server group load-balance 638
17 802.1X MANAGEMENT COMMANDS
Commands by Usage |
|
641 |
|
||
clear dot1x bonded-period |
642 |
||||
clear dot1x max-req |
643 |
|
|
||
clear dot1x port-control |
643 |
|
|||
clear dot1x quiet-period |
644 |
|
|||
clear dot1x reauth-max |
645 |
|
|||
clear dot1x reauth-period |
645 |
||||
clear dot1x timeout auth-server |
646 |
||||
clear dot1x timeout supplicant |
646 |
||||
clear dot1x tx-period |
|
647 |
|
|
|
display dot1x |
647 |
|
|
|
|
set dot1x authcontrol |
650 |
|
|||
set dot1x bonded-period |
651 |
||||
set dot1x key-tx |
652 |
|
|
|
|
set dot1x max-req |
653 |
|
|
||
set dot1x port-control |
654 |
|
|||
set dot1x quiet-period |
655 |
|
|||
set dot1x reauth |
655 |
|
|
|
|
set dot1x reauth-max |
|
656 |
|
||
set dot1x reauth-period |
657 |
|
|||
set dot1x timeout auth-server |
657 |
||||
set dot1x timeout supplicant |
658 |
||||
set dot1x tx-period |
658 |
|
|
||
set dot1x wep-rekey |
659 |
|
|
||
set dot1x wep-rekey-period |
660 |
18 SESSION MANAGEMENT COMMANDS
Commands by Usage 661
clear sessions |
661 |
|
clear sessions network |
663 |
|
display sessions |
664 |
|
display sessions mesh-ap |
667 |
|
display sessions network |
668 |
19 RF DETECTION COMMANDS
Commands by Usage |
|
677 |
|
|
clear rfdetect attack-list |
678 |
|
||
clear rfdetect black-list |
679 |
|
||
clear rfdetect ignore |
|
679 |
|
|
clear rfdetect ssid-list |
|
680 |
|
|
clear rfdetect vendor-list |
681 |
|
||
rfping 682 |
|
|
|
|
display rfdetect attack-list |
683 |
|
||
display rfdetect black-list |
684 |
|
||
display rfdetect clients |
685 |
|
||
display rfdetect countermeasures |
687 |
|||
display rfdetect counters |
688 |
|
||
display rfdetect data |
|
690 |
|
|
display rfdetect ignore |
692 |
|
||
display rfdetect mobility-domain |
692 |
|||
display rfdetect ssid-list |
|
697 |
|
|
display rfdetect vendor-list |
697 |
|
||
display rfdetect visible |
698 |
|
||
set rfdetect active-scan |
|
700 |
|
|
set rfdetect attack-list |
701 |
|
||
set rfdetect black-list |
|
702 |
|
|
set rf detect countermeasures 702 |
||||
set rfdetect countermeasures mac |
703 |
|||
set rfdetect ignore |
704 |
|
|
|
set rfdetect log 705 |
|
|
|
|
set rfdetect signature |
|
706 |
|
|
set rfdetect signature key |
707 |
|
||
set rfdetect ssid-list |
707 |
|
||
set rfdetect vendor-list |
708 |
|
||
test rflink 709 |
|
|
|
|
20 FILE MANAGEMENT COMMANDS
Commands by Usage 711 backup 712
clear boot backup-configuration 714 clear boot config 714
copy |
715 |
|
delete |
717 |
|
dir 718 |
|
|
install soda agent 721 |
||
display boot |
722 |
|
display config |
723 |
|
display version |
725 |
|
load config |
727 |
|
md5 |
729 |
|
mkdir |
729 |
|
reset system |
731 |
|
restore |
732 |
|
rmdir |
733 |
|
save config |
733 |
set boot backup-configuration 734 set boot configuration-file 735
|
set boot partition |
736 |
|
||
|
uninstall soda agent |
736 |
|||
|
|
|
|||
21 TRACE COMMANDS |
|
||||
|
Commands by Usage |
739 |
|||
|
clear log trace |
740 |
|
||
|
clear trace |
740 |
|
|
|
|
display trace |
|
741 |
|
|
|
save trace |
742 |
|
|
|
|
set trace authentication |
742 |
|||
|
set trace authorization |
743 |
|||
|
set trace dot1x |
744 |
|
||
|
set trace sm |
|
745 |
|
|
22 SNOOP COMMANDS
Commands by Usage 747
clear snoop |
748 |
|
clear snoop map |
748 |
|
set snoop |
749 |
|
set snoop map |
752 |
|
set snoop mode |
753 |
display snoop 754 |
|
display snoop info |
754 |
display snoop map |
755 |
display snoop stats |
756 |
23 SYSTEM LOG COMMANDS
Commands by Usage 759
clear log |
759 |
|
display log buffer |
760 |
|
display log config |
762 |
|
display log trace |
763 |
|
set log |
764 |
|
set log mark 767
24 |
BOOT PROMPT COMMANDS |
||
|
Boot Prompt Commands by Usage 769 |
||
|
autoboot 770 |
||
|
boot |
|
771 |
|
change |
773 |
|
|
create |
774 |
|
|
delete |
775 |
|
|
dhcp |
776 |
|
|
diag |
|
777 |
|
dir |
777 |
|
|
display |
778 |
|
|
fver |
780 |
|
|
help |
|
781 |
|
ls |
782 |
|
|
next |
|
783 |
|
reset |
784 |
|
|
test |
785 |
|
|
version |
786 |
|
A |
|
||
OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS |
|||
|
Register Your Product to Gain Service Benefits 787 |
||
|
Solve Problems Online 787 |
Purchase Extended Warranty and Professional Services 788
Access Software Downloads 788
Contact Us 788
Telephone Technical Support and Repair 789
INDEX
Conventions 25
This command reference explains Mobility System Software (MSS™) command line interface (CLI) that you enter on a 3Com WXR100 or WX1200 Wireless Switch or WX4400 or WX2200 Wireless LAN Controller to configure and manage the Mobility System™ wireless LAN (WLAN).
Read this reference if you are a network administrator responsible for managing WXR100, WX1200, WX4400, or WX2200 wireless switches and their Managed Access Points (MAPs) in a network.
If release notes are shipped with your product and the information there differs from the information in this guide, follow the instructions in the release notes.
Most user guides and release notes are available in Adobe Acrobat
Reader Portable Document Format (PDF) or HTML on the 3Com
World Wide Web site:
http://www.3com.com/
Conventions |
Table 1 and Table 2 list conventions that are used throughout this guide. |
||||
|
Table 1 |
Notice Icons |
|
||
|
|
|
|
|
|
|
|
Icon |
Notice Type |
Description |
|
|
|
|
|
|
|
|
|
|
|
Information note |
Information that describes important features or |
|
|
|
|
|
instructions |
|
|
|
|
Caution |
Information that alerts you to potential loss of data or |
|
|
|
|
||
|
|
|
|
|
potential damage to an application, system, or device |
|
|
|
|
|
|
26 ABOUT THIS GUIDE
This manual uses the following text and syntax conventions:
Table 2 Text Conventions
Convention |
Description |
|
|
Monospace text |
Sets off command syntax or sample commands and system |
|
responses. |
|
|
Bold text |
Highlights commands that you enter or items you select. |
|
|
Italic text |
Designates command variables that you replace with |
|
appropriate values, or highlights publication titles or words |
|
requiring special emphasis. |
|
|
[ ] (square brackets) |
Enclose optional parameters in command syntax. |
|
|
{ } (curly brackets) |
Enclose mandatory parameters in command syntax. |
|
|
| (vertical bar) |
Separates mutually exclusive options in command syntax. |
|
|
Keyboard key names |
If you must press two or more keys simultaneously, the key |
|
names are linked with a plus sign (+). Example: |
|
Press Ctrl+Alt+Del |
|
|
Words in italics |
Italics are used to: |
|
Emphasize a point. |
|
Denote a new term at the place where it is defined in the |
|
text. |
|
Highlight an example string, such as a username or SSID. |
|
|
Documentation |
The MSS documentation set includes the following documents. |
|
Wireless Switch Manager (3WXM) Release Notes |
|
These notes provide information about the 3WXM software release, |
|
including new features and bug fixes. |
|
Wireless LAN Switch and Controller Release Notes |
|
These notes provide information about the MSS software release, |
|
including new features and bug fixes. |
|
Wireless LAN Switch and Controller Quick Start Guide |
|
This guide provides instructions for performing basic setup of secure |
|
(802.1X) and guest (WebAAA™) access, for configuring a Mobility |
|
Domain for roaming, and for accessing a sample network plan in |
|
3WXM for advanced configuration and management. |
Wireless Switch Manager Reference Manual
This manual shows you how to plan, configure, deploy, and manage a
Mobility System wireless LAN (WLAN) using the 3Com Wireless Switch
Manager (3WXM).
Wireless Switch Manager User’s Guide
This manual shows you how to plan, configure, deploy, and manage the entire WLAN with the 3WXM tool suite. Read this guide to learn how to plan wireless services, how to configure and deploy 3Com equipment to provide those services, and how to optimize and manage your WLAN.
Wireless LAN Switch and Controller Hardware Installation Guide
This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN.
Wireless LAN Switch and Controller Configuration Guide
|
This guide provides instructions for configuring and managing the |
|
system through the Mobility System Software (MSS) CLI. |
|
Wireless LAN Switch and Controller Command Reference |
|
This reference provides syntax information for all MSS commands |
|
supported on WX switches. |
|
|
Documentation |
Your suggestions are very important to us. They will help make our |
Comments |
documentation more useful to you. Please e-mail comments about this |
|
document to 3Com at: |
|
pddtechpubs_comments@3com.com |
|
Please include the following information when contacting us: |
|
Document title |
|
Document part number and revision (on the title page) |
|
Page number (if appropriate) |
Example:
Wireless LAN Switch and Controller Configuration Guide
Part number 730-9502-0071, Revision B
Page 25
28 ABOUT THIS GUIDE
Please note that we can only respond to comments and questions about 3Com product documentation at this e-mail address. Questions related to Technical Support or sales should be directed in the first instance to your network supplier.
This summary describes new features and commands available in Version 7.0 of the Wireless LAN Mobility System that affect this guide. Each feature section includes:
A brief description of the feature or command
Basic configuration procedures, if applicable
It is important to note that new MSS 7.0 features and commands are not described within the individual chapters of this guide. They are only covered in this summary section.
This summary covers the following topics:
Virtual Controller Clustering Configuration on page 30
AP 3950 PoE Configuration on page 31
External Captive Portal Support on page 33
Simultaneous Login Support on page 34
Dynamic RADIUS Extensions on page 34
MAC User Range Authentication on page 36
MAC Authentication Request Format on page 37
User Attribute Enhancements on page 37
Enhancements to Location Policy Configuration on page 38
RADIUS Ping Utility on page 39
Unique AP Number Support on page 40
Bandwidth Management on page 40
RF Scanning Enhancements on page 43
RF Detection Configuration on page 44
display aaa Command Replacements on page 48
30NEW FEATURES SUMMARY
display ap config Enhancements on page 54
display load Enhancements on page 55
display radio-profile Enhancements on page 58
display sessions network ap Enhancements on page 60
clear sessions network Enhancements on page 61
display service-profile Enhancements on page 61
display rfdetect Changes on page 66
For more detailed application and usage information on the commands described in this section, consult the Wireless LAN Switch and Controller Configuration Guide.
Virtual Controller |
New commands support configuration of virtual controller clustering on a |
Clustering |
mobility domain. |
Configuration |
|
set cluster mode |
Enable virtual controller cluster configuration on WXs in a mobility |
|
domain. |
|
Syntax — set cluster mode {enable | disable} preempt {enable |
|
| disable} |
|
Defaults — None. |
|
Access — Enabled. |
|
History —Introduced in MSS Version 7.0. |
|
Usage — You must enable cluster mode on all WXs that are members of |
|
the cluster. |
|
Examples — The following command enables cluster mode on a WX in a |
|
mobility domain: |
|
WX# set cluster mode enable |
|
success:change accepted |