Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

20 January 2014

Brocade Mobility RFS Controller

CLI Reference Guide

Supporting software release 5.5.0.0 and later

ADX, AnyIO, Brocade, Brocade Assurance, the B-Mobility symbol, DCX, Fabric OS, ICX, MLX, MyBrocade, OpenScript, VCS, VDX, and Vyatta are registered trademarks, and HyperEdge, The Effortless Network, and The On-Demand Data Center are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names mentioned may be trademarks of their respective owners.

Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that accompany it.

The product described by this document may contain “open source” software covered by the GNU General Public License or other open source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated

Corporate and Latin American Headquarters Brocade Communications Systems, Inc. 130 Holger Way San Jose, CA 95134 Tel: 1-408-333-8000 Fax: 1-408-333-8101 E-mail: info@brocade.com

European Headquarters Brocade Communications Switzerland Sàrl Centre Swissair Tour B - 4ème étage 29, Route de l'Aéroport Case Postale 105 CH-1215 Genève 15 Switzerland Tel: +41 22 799 5640 Fax: +41 22 799 5641 E-mail: emea-info@brocade.com

Asia-Pacific Headquarters Brocade Communications Systems China HK, Ltd. No. 1 Guanghua Road Chao Yang District Units 2718 and 2818 Beijing 100020, China Tel: +8610 6588 8888 Fax: +8610 6588 9999 E-mail: china-info@brocade.com

Asia-Pacific Headquarters Brocade Communications Systems Co., Ltd. (Shenzhen WFOE) Citic Plaza No. 233 Tian He Road North Unit 1308 – 13th Floor Guangzhou, China Tel: +8620 3891 2000 Fax: +8620 3891 2111 E-mail: china-info@brocade.com

Document History

Title Publication number Summary of changes Date

Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01 New Additions for software

version 5.5.0.0

January 2014

Contents

About This Guide

Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . xix

Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix

Text formatting x i x Notes xx Understanding command syntax xx

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi

Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xxii

Chapter 1 INTRODUCTION

CLI Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Getting Context Sensitive Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Using the No Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Basic Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Using CLI Editing Features and Shortcuts. . . . . . . . . . . . . . . . . . . . . . 7

Moving the Cursor on the Command Line . . . . . . . . . . . . . . . . . . 7

Completing a Partial Command Name. . . . . . . . . . . . . . . . . . . . . 8

Command Output pagination . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Creating Profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Change the default profile by creating vlan 150 and

mapping to ge3 Physical interface . . . . . . . . . . . . . . . . . . . . . . . 10

Remote Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Chapter 2 USER EXEC MODE COMMANDS

User Exec Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

captive-portal-page-upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

change-passwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

clear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

connect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

create-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

device-upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39

disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

join-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

Brocade Mobility RFS Controller CLI Reference Guide iii 53-1003098-01

page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59

ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61

terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

time-it . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

traceroute. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63

watch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

virtual-machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Chapter 3 PRIVILEGED EXEC MODE COMMANDS

Privileged Exec Mode Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

archive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

boot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80

captive-portal-page-upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

cd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

change-passwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

clear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

configure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94

connect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

copy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

create-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

device-upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108

diff. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

dir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116

disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117

edit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118

enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

erase . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

halt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

join-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121

l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124

mkdir. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126

more . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127

page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .132

pwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

re-elect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

rename . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

rmdir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137

self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138

ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138

telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

iv Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140

time-it . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140

traceroute. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141

upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

upgrade-abort . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

watch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

virtual-machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

raid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

Chapter 4 GLOBAL CONFIGURATION COMMANDS

Global Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . . . .157

aaa-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158

aaa-tacacs-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160

advanced-wips-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .161

alias. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162

br650 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169

br6511 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169

br1220 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170

br71xx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

br81xx. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172

ap82xx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

association-acl-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174

auto-provisioning-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175

captive portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176

clear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .202

client-identity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .203

client-identity-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209

clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .215

customize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .216

device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224

device-categorization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .225

dhcp-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229

dns-whitelist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231

end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234

event-system-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234

firewall-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .246

global-association-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249

inline-password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . .250

ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .251

l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252

mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253

management-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .254

meshpoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .255

meshpoint-qos-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .257

mint-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .258

nac-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .263

passpoint-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .270

password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .272

Brocade Mobility RFS Controller CLI Reference Guide v 53-1003098-01

radio-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277

radius-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278

radius-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279

radius-user-pool-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280

rename . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281

rf-domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284

rfs4000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .309

rfs6000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .309

rfs7000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .310

role-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310

routing-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311

self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .312

smart-rf-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .313

wips-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .314

wlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .315

wlan-qos-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369

smart-cache-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .383

Chapter 5 COMMON COMMANDS

Common Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .385

clrscr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .385

commit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .386

exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .387

help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .387

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .391

revert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394

service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394

show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .423

write . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .425

Chapter 6 SHOW COMMANDS

show commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .427

show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

adoption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .434

advanced-wips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436

boot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .438

captive-portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439

captive-portal-page-upload . . . . . . . . . . . . . . . . . . . . . . . . . . . .443

cdp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .444

clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445

cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446

commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447

context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .448

critical-resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .449

crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450

device-upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453

dot1x. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .454

environmental-sensor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .456

event-history. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .460

event-system-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .461

vi Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .462

firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463

global . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .466

gre . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .468

interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .468

ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .472

ip-access-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478

l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .479

ldap-agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .481

licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .482

lldp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .485

logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486

mac-access-list-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487

mac-address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487

macauth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .488

mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .489

ntp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .492

password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .493

pppoe-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .493

privilege . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .494

reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495

rf-domain-manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495

role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496

route-maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497

rtls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497

running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .498

session-changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

session-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .504

site-config-diff. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505

smart-rf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .506

spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509

startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .511

terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512

timezone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513

upgrade-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513

version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .514

vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .515

what . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .516

wireless. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

wwan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .533

smart-cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .534

virtual-machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .535

Chapter 7 PROFILES

Profile Config Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .542

adopter-auto-provisioning-policy-lookup. . . . . . . . . . . . . . . . . .545

alias. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .546

area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .551

arp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552

auto-learn-staging-config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .553

autogen-uniqueid. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554

Brocade Mobility RFS Controller CLI Reference Guide vii 53-1003098-01

autoinstall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .556

bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .557

captive-portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .572

cdp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573

cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574

configuration-persistence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 576

controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .577

critical-resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .580

crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583

device-upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .631

dot1x. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .634

dscp-mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .635

email-notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .636

enforce-version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .638

environmental-sensor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .639

events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .641

export . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .642

floor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .643

gre . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .644

http-analyze . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .652

interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .653

ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .744

l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .752

l3e-lite-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .753

led . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .754

led-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .755

legacy-auto-downgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .756

legacy-auto-update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .757

lldp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .757

load-balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .759

logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .763

mac-address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .764

mac-auth. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .766

memory-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .769

meshpoint-device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .769

meshpoint-monitor-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .770

min-misconfiguration-recovery-time . . . . . . . . . . . . . . . . . . . . . 771

mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .772

misconfiguration-recovery-time . . . . . . . . . . . . . . . . . . . . . . . .775

neighbor-inactivity-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . 776

neighbor-info-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .778

noc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .780

ntp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .781

power-config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .783

preferred-controller-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . .784

preferred-tunnel-controller . . . . . . . . . . . . . . . . . . . . . . . . . . . .785

radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .786

rf-domain-manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .787

router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .788

spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .789

tunnel-controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .791

viii Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .792

vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .795

wep-shared-key-auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .798

service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .799

Device Config Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .803

adoption-site. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .808

area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .809

channel-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .810

contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .810

country-code. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811

floor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .812

geo-coordinates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .813

hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .814

layout-coordinates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .815

license. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .815

location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817

mac-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .818

neighbor-info-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .819

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .820

override-wlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .823

remove-override . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .824

rsa-key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .826

sensor-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .827

timezone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .828

trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .829

Chapter 8 AAA-POLICY

aaa-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .832

accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .833

attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836

authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .838

health-check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .842

mac-address-format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .843

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .844

proxy-attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .848

server-pooling-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .850

Chapter 9 AUTO-PROVISIONING-POLICY

auto-provisioning-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .855

adopt. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .855

default-adoption. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .861

deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .861

redirect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .864

upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .867

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .870

Chapter 10 ADVANCED-WIPS-POLICY

advanced-wips-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 874

event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 874

Brocade Mobility RFS Controller CLI Reference Guide ix 53-1003098-01

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .880

server-listen-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .882

terminate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .883

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .883

Chapter 11 ASSOCIATION-ACL-POLICY

association-acl-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .886

deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .886

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .887

permit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .889

Chapter 12 ACCESS-LIST

ip-access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .892

deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .893

disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .902

insert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .904

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .906

permit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .908

mac-access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .916

deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 917

disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .919

insert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .921

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .923

permit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .925

Chapter 13 DHCP-SERVER-POLICY

dhcp-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .930

bootp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .930

dhcp-class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .931

dhcp-pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .935

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .973

option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .975

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 976

Chapter 14 FIREWALL-POLICY

firewall-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .980

acl-logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .980

alg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .981

clamp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .982

dhcp-offer-convert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .983

dns-snoop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .983

firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .984

flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .985

ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .986

ip-mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .993

logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .995

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .996

proxy-arp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1003

stateful-packet-inspection-12 . . . . . . . . . . . . . . . . . . . . . . . . 1003

storm-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1004

x Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

virtual-defragmentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1006

Chapter 15 MINT-POLICY

mint-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1009

level. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1010

mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011

router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011

udp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1012

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1013

Chapter 16 MANAGEMENT-POLICY

management-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1016

aaa-login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1017

banner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1018

ftp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1019

http . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1021

https . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1021

idle-session-timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1022

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1023

privilege-mode-password. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026

restrict-access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1027

snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1029

ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1033

telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1034

user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1035

service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1037

Chapter 17 RADIUS-POLICY

radius-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1039

guest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1041

policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1041

rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1045

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1046

radius-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1048

authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1049

chase-referral. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1051

crl-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1052

ldap-agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1052

ldap-group-verification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1055

ldap-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1055

local. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1057

nas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1058

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1059

proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1062

session-resumption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1064

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1065

radius-user-pool-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1066

user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1067

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1069

Brocade Mobility RFS Controller CLI Reference Guide xi 53-1003098-01

Chapter 18 RADIO-QOS-POLICY

radio-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1073

accelerated-multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1073

admission-control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1074

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1077

smart-aggregation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1080

service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1082

wmm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1083

Chapter 19 ROLE-POLICY

role-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1087

default-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1088

ldap-deadperiod. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1089

ldap-query. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1090

ldap-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1091

ldap-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1092

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1093

user-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1095

Chapter 20 SMART-RF-POLICY

smart-rf-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1126

area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1127

assignable-power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1128

channel-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1129

channel-width. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1130

coverage-hole-recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1131

enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1133

group-by . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1133

interference-recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1134

neighbor-recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1136

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1137

sensitivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1139

smart-ocs-monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1140

Chapter 21 WIPS-POLICY

wips-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1146

br-detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1147

enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1148

event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1149

history-throttle-duration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1152

interference-event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1153

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1154

signature. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1158

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1171

Chapter 22 WLAN-QOS-POLICY

wlan-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1174

accelerated-multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1174

classification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1175

multicast-mask. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1177

xii Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1178

qos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1180

rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1181

svp-prioritization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1184

voice-prioritization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1185

wmm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1185

Chapter 23 L2TPV3-POLICY

l2tpv3-policy-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1190

cookie-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1191

failover-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1192

force-12-path-recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1193

hello-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1194

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1195

reconnect-attempts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1196

reconnect-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1197

retry-attempts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1198

retry-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1198

rx-window-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1199

tx-window-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1200

l2tpv3-tunnel-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201

establishment-criteria . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1202

hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1203

local-ip-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205

peer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1207

router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1209

session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1210

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1211

l2tpv3-manual-session-commands . . . . . . . . . . . . . . . . . . . . . . . 1212

local-cookie. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1214

local-ip-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1214

local-session-id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1215

mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1216

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1217

peer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1218

remote-cookie . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1219

remote-session-id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1220

traffic-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1221

Chapter 24 ROUTER-MODE COMMANDS

router-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1224

area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1224

auto-cost. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1230

default-information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1231

ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1232

network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1233

ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1234

passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1234

Brocade Mobility RFS Controller CLI Reference Guide xiii 53-1003098-01

redistribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1235

route-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1236

router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1237

vrrp-state-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1238

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1239

Chapter 25 ROUTING-POLICY

routing-policy-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1241

apply-to-local-packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1242

logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1243

route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1243

route-map-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1246

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1252

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1253

Chapter 26 AAA-TACACS-POLICY

aaa-tacacs-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1255

accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1256

authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1258

authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1260

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1263

Chapter 27 MESHPOINT

meshpoint-config-instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1265

allowed-vlans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1267

beacon-format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1268

control-vlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1269

data-rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1269

description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273

meshid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1274

neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1274

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1275

root . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1278

security-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1279

service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1280

shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1281

use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1281

wpa2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1282

meshpoint-qos-policy-config-instance . . . . . . . . . . . . . . . . . . . . . 1283

accelerated-multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1285

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1286

rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1287

meshpoint-device-config-instance . . . . . . . . . . . . . . . . . . . . . . . . 1290

meshpoint-device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1290

meshpoint-device-commands. . . . . . . . . . . . . . . . . . . . . . . . 1292

Chapter 28 PASSPOINT POLICY

passpoint-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1306

3gpp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1307

xiv Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

access-network-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1308

connection-capability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1309

domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1310

hessid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1311

internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1312

ip-address-type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1312

nai-realm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1314

net-auth-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1317

no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1318

operator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1320

roam-consortium . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1321

venue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1322

wan-metrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1326

Chapter 29 FIREWALL LOGGING

Firewall Log Terminology and Syslog Severity Levels . . . . . . . . . 1327

Date format in Syslog messages . . . . . . . . . . . . . . . . . . . . . 1328

FTP data connection log . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1328

UDP packets log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1329

ICMP type logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1329

ICMP type logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1330

Raw IP Protocol logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1331

Raw IP Protocol logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1332

Firewall startup log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1332

Manual time change log . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1333

Firewall ruleset log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1334

TCP Reset Packets log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1336

ICMP Destination log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1336

ICMP Packet log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1336

SSH connection log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1336

Allowed/Dropped Packets Log . . . . . . . . . . . . . . . . . . . . . . . 1337

Creating a First Controller Managed WLAN. . . . . . . . . . . . . . . . . 1339

Assumptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1339

Design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1339

Using the Command Line Interface to Configure the WLAN 1340

Brocade Mobility RFS Controller CLI Reference Guide xv 53-1003098-01

About This Guide

In this chapter

•Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix

•Document Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix

•Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi

•Getting technical help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii

Supported hardware and software

This guide provides information on using the following Brocade wireless controllers and access points:

• Brocade Mobility RFS7000 Controller

• Brocade Mobility RFS6000 Controller

• Brocade Mobility RFS4000 Controller

• Brocade Mobility RFS9510 Controller

• Brocade Mobility 71XX Series Access Point

• Brocade Mobility 650 Access Point

• Brocade Mobility 6511 Access Point

• Brocade Mobility 1220 Access Point

• Brocade Mobility 1240 Access Point

Document Conventions

This section describes text formatting conventions and important notice formats used in this document.

Text formatting

The narrative-text formatting conventions that are used are as follows:

Brocade Mobility RFS Controller CLI Reference Guide xix 53-1003098-01

NOTE

bold text Identifies command names

Identifies the names of user-manipulated GUI elements

Identifies keywords

Identifies text to enter at the GUI or CLI

italic text Provides emphasis

Identifies variables

Identifies document titles

code text Identifies CLI output

For readability, command names in the narrative portions of this guide are presented in bold; for example, show version.

Notes

The following notice statement is used in this manual.

A note provides a tip, guidance or advice, emphasizes important information, or provides a reference to related information.

Understanding command syntax

<variable> Variables are described with a short description enclosed within a ‘<‘ and a ‘>’ pair.

For example, the command,

RFController>show interface ge 1

is documented as

show interface ge <idx>

• show – The command – Display information

• interface – The keyword – The interface

• <idx> – The variable – ge Index value

| The pipe symbol. This is used to separate the variables/keywords in a list.

For example, the command

RFController> show .....

is documented as

show [adoption|advanced-wips|boot|captive-portal|......]

where:

• show – The command

• [adoption|advanced-wips|boot|captive-portal|......] – Indicates the different commands that can be

combined with the show command. However, only one of the above list can be used at a time.

show adoption ... show advanced-wips ... show boot ...

xx Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

[] Of the different keywords and variables listed inside a ‘[‘ & ‘]’ pair, only one can be used. Each choice in the

list is separated with a ‘|’ (pipe) symbol. For example, the command

RFController# clear ...

is documented as

where:

• clear – The command

available for this command and only one can be used at a time

{ } Any command/keyword/variable or a combination of them inside a ‘{‘ & ‘}’ pair is optional. All optional

commands follow the same conventions as listed above. However they are displayed italicized. For example, the command

RFController> show adoption ....

is documented as

show adoption info {on <DEVICE-OR-DOMAIN-NAME>}

Here:

• show adoption info – The command. This command can also be used as

show adoption info

• {on <DEVICE-OR-DOMAIN-NAME>} – The optional keyword on <device-or-domain-name>. The

command can also be extended as

show adoption info {on <DEVICE-OR-DOMAIN-NAME>}

Here the keyword {on <DEVICE-OR-DOMAIN-NAME>} is optional.

command / keyword The first word is always a command. Keywords are words that must be entered as is. Commands and

keywords are mandatory. For example, the command,

RFController>show wireless

is documented as

show wireless

where:

• show – The command

• wireless – The keyword

Related publications

The following Brocade Communications Systems, Inc. documents supplement the information in this guide and can be located at http://www.brocade.com/ethernetproducts.

• Brocade Mobility RFS Controller System Reference Guide - Describes configuration of the

Brocade wireless controllers using the Web UI.

• Brocade Mobility RFS Controller CLI Reference Guide (this document) - Describes the

Command Line Interface (CLI) and Management Information Base (MIB) commands used to configure the Brocade wireless controllers.

If you find errors in the guide, send an e-mail to documentation@brocade.com.

Brocade Mobility RFS Controller CLI Reference Guide xxi 53-1003098-01

Getting technical help

To contact Technical Support, go to http://www.brocade.com/services-support/index.page for the latest e-mail and telephone contact information.

xxii Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

Chapter

INTRODUCTION

This chapter describes the commands available within a device’s Command Line Interface (CLI) structure. CLI is available for wireless controllers, access points (APs), and service platforms.

Access the CLI by using:

• A terminal emulation program running on a computer connected to the serial port on the

device (access point, wireless controller, and service platform).

• A Telnet session through Secure Shell (SSH) over a network.

Configuration for connecting to a Controller using a terminal emulator

If connecting through the serial port, use the following settings to configure your terminal emulator:

Bits Per Second 19200

Data Bits 8

Parity None

Stop Bit 1

Flow Control None

When a CLI session is established, complete the following (user input is in bold):

User Credentials

Use the following credentials when logging into a device for the first time:

User Name admin

Password admin123

When logging into the CLI for the first time, you are prompted to change the password.

Examples in this reference guide

Examples used in this reference guide are generic to each supported wireless controller, service platform, and AP model. Commands that are not common, are identified using the notation “Supported in the following platforms.” For an example, see below:

Supported in the following platforms:

• Wireless Controller – Brocade Mobility RFS6000

The above example indicates the command is only available for a Brocade Mobility RFS6000 model wireless controller.

Brocade Mobility RFS Controller CLI Reference Guide 1 53-1003098-01

CLI Overview

The CLI is used for configuring, monitoring, and maintaining the network. The user interface allows you to execute commands on supported wireless controllers, service platforms, and APs, using either a serial console or a remote access method.

This chapter describes basic CLI features. Topics covered include an introduction to command modes, navigation and editing features, help features and command history.

The CLI is segregated into different command modes. Each mode has its own set of commands for configuration, maintenance, and monitoring. The commands available at any given time depend on the mode you are in, and to a lesser extent, the particular model used. Enter a question mark (?) at the system prompt to view a list of commands available for each command mode/instance.

Use specific commands to navigate from one command mode to another. The standard order is: USER EXEC mode, PRIV EXEC mode and GLOBAL CONFIG mode.

FIGURE 1 Hierarchy of User Modes

Command Modes

A session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode). For security, only a limited subset of EXEC commands are available in the USER EXEC mode. This level is reserved for tasks that do not change the device’s (wireless controller, service platform, or AP) configuration.

rfs7000-37FABE>

The system prompt signifies the device name and the last three bytes of the device MAC address.

To access commands, enter the PRIV EXEC mode (the second access level for the EXEC mode). Once in the PRIV EXEC mode, enter any EXEC command. The PRIV EXEC mode is a superset of the USER EXEC mode.

2 Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

rfs7000-37FABE>enable rfs7000-37FABE#

Most of the USER EXEC mode commands are one-time commands and are not saved across device reboots. Save the command by executing ‘commit’ command. For example, the show command displays the current configuration and the clear command clears the interface.

Access the GLOBAL CONFIG mode from the PRIV EXEC mode. In the GLOBAL CONFIG mode, enter commands that set general system characteristics. Configuration modes, allow you to change the running configuration. If you save the configuration later, these commands are stored across device reboots.

Access a variety of protocol specific (or feature-specific) modes from the global configuration mode. The CLI hierarchy requires you to access specific configuration modes only through the global configuration mode.

rfs7000-37FABE# configure terminal Enter configuration commands, one per line. End with CNTL/Z. rfs7000-37FABE(config)#

You can also access sub-modes from the global configuration mode. Configuration sub-modes define specific features within the context of a configuration mode.

rfs7000-37FABE(config)# aaa-policy test rfs7000-37FABE(config-aaa-policy-test)#

Tab le 1 summarizes available CLI commands.

TABLE 1 Controller CLI Modes and Commands

User Exec Mode Priv Exec Mode Global Configuration Mode

captive-portal-page-upload archive aaa-policy

change-passwd boot aaa-tacacs-policy

clear captive-portal-page-upload advanced-wips-policy

clock cd alias

create-cluster cluster br650

crypto commit br6511

device-upgrade connect br1220

help crypto br71xx

join-cluster debug br81xx

logging device-upgrade association-acl-policy

mint diff auto-provisioning-policy

no dir captive-portal

page disable clear

ping edit client-identity

revert enable client-identity-group

service erase clone

show halt customize

ssh help device

telnet join-cluster device-categorization

Brocade Mobility RFS Controller CLI Reference Guide 3 53-1003098-01

TABLE 1 Controller CLI Modes and Commands

User Exec Mode Priv Exec Mode Global Configuration Mode

terminal l2tpv3 dhcp-server-policy

time-it logging dns-whitelist

traceroute mint event-system-policy

watch mkdir firewall-policy

write more global-association-list

clrscr no help

exit page host

virtual-machine (Brocade Mobility RFS9510)

pwd inline-password-encryption

re-elect ip

reload l2tpv3

remote-debug mac

rename management-policy

revert meshpoint

rmdir meshpoint-qos-policy

self mint-policy

service nac-list

show no

ssh passpoint-policy

telnet password-encryption

terminal profile

time-it radio-qos-policy

traceroute radius-group

upgrade radius-server-policy

upgrade-abort radius-user-pool-policy

watch rename

clrscr r f-domain

exit rfs4000

virtual-machine (Brocade Mobility RFS9510) rfs7000

role-policy

routing-policy

self

smart-rf-policy

wips-policy

wlan

wlan-qos-policy

4 Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

NOTE

TABLE 1 Controller CLI Modes and Commands

User Exec Mode Priv Exec Mode Global Configuration Mode

write

clrscr

commit

end

exit

revert

service

show

Getting Context Sensitive Help

Enter a question mark (?) at the system prompt to display a list of commands available for each mode. Obtain a list of arguments and keywords for any command using the CLI context-sensitive help.

Use the following commands to obtain help specific to a command mode, command name, keyword or argument:

Command Description

(prompt)# help Displays a brief description of the help system

(prompt)# abbreviated-command-entry? Lists commands in the current mode that begin with a particular

character string

(prompt)# abbreviated-command-entry<Tab> Completes a partial command name

(prompt)# ? Lists all commands available in the command mode

(prompt)# command ? Lists the available syntax options (arguments and keywords) for the

command

(prompt)# command keyword ? Lists the next available syntax option for the command

The system prompt varies depending on the configuration mode.

Enter Ctrl + V to use ? as a regular character and not as a character used for displaying context sensitive help. This is required when the user has to enter a URL that ends with a ?

The escape character used through out the CLI is “\”. To enter a "\" use "\\" instead.

Brocade Mobility RFS Controller CLI Reference Guide 5 53-1003098-01

When using context-sensitive help, the space (or lack of a space) before the question mark (?) is significant. To obtain a list of commands that begin with a particular sequence, enter the characters followed by a question mark (?). Do not include a space. This form of help is called word help, because it completes a word.

rfs7000-37FABE#service? service Service Commands rfs7000-37FABE#service

Enter a question mark (?) (in place of a keyword or argument) to list keywords or arguments. Include a space before the “?”. This form of help is called command syntax help. It shows the keywords or arguments available based on the command/keyword and argument already entered.

rfs7000-37FABE#service ? advanced-wips Advanced WIPS service commands block-adopter-config-update Block configuration updates from the adopter clear Clear adoption history cli-tables-skin Choose a formatting layout/skin for CLI tabular outputs cluster Cluster Protocol copy Copy from one file to another delete Delete sessions delete-offline-aps Delete Access Points that are configured but offline force-send-config Resend configuration to the device force-update-vm-stats Force VM statistics to be pushed up to the NOC load-balancing Wireless load-balancing service commands locator Enable leds flashing on the device mint MiNT protocol pktcap Start packet capture pm Process Monitor radio Radio parameters radius Radius test request-full-config-from-adopter Request full configuration from the adopter set Set validation mode show Show running system information signal Send a signal to a process smart-rf Smart-RF Management Commands ssm Command related to ssm start-shell Provide shell access trace Trace a process for system calls and signals wireless Command related to wireless

rfs7000-37FABE#

It is possible to abbreviate commands and keywords to allow a unique abbreviation. For example, “configure terminal” can be abbreviated as

config t. Since the abbreviated command is unique,

the controller accepts the abbreviation and executes the command.

Enter the help command (available in any command mode) to provide the following description:

rfs7000-37FABE>help

When using the CLI, help is provided at the command line when typing '?'.

6 Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

If no help is available, the help content will be empty. Backup until entering a '?' shows the help content.

There are two styles of help provided:

1. Full help. Available when entering a command argument (e.g. 'show ?'). This will describe each possible argument.

2. Partial help. Available when an abbreviated argument is entered. This will display which arguments match the input (e.g. 'show ve?').

rfs7000-37FABE>

Using the No Command

Almost every command has a no form. Use no to disable a feature or function or return it to its default. Use the command without the

no keyword to re-enable a disabled feature.

Basic Conventions

Keep the following conventions in mind while working within the CLI structure:

• Use ? at the end of a command to display available sub-modes. Type the first few characters of

the sub-mode and press the tab key to add the sub-mode. Continue using ? until you reach the last sub-mode.

• Pre-defined CLI commands and keywords are case-insensitive: cfg = Cfg = CFG. However (for

clarity), CLI commands and keywords are displayed (in this guide) using mixed case. For example, apPolicy, trapHosts, channelInfo.

• Enter commands in uppercase, lowercase, or mixed case. Only passwords are case sensitive.

Using CLI Editing Features and Shortcuts

A variety of shortcuts and edit features are available. The following sections describe these features:

• Moving the Cursor on the Command Line

• Completing a Partial Command Name

• Command Output pagination

Moving the Cursor on the Command Line

Tab le 2 shows the key combinations or sequences to move the command line cursor. Ctrl defines

the control key, which must be pressed simultaneously with its associated letter key. Esc means the escape key (which must be pressed first), followed by its associated letter key. Keys are not case sensitive. Specific letters are used to provide an easy way of remembering their functions. In

Tab le 2, bold characters indicate the relation between a letter and its function.

Brocade Mobility RFS Controller CLI Reference Guide 7 53-1003098-01

TABLE 2 Keystrokes Details

Keystrokes Function Summary Function Details

Left Arrow or Ctrl-B

Right Arrow or Ctrl-F Forward character Moves the cursor one character to the right

Esc- B Back word Moves the cursor back one word

Esc- F Forward word Moves the cursor forward one word

Ctrl-A Beginning of line Moves the cursor to the beginning of the command line

Ctrl-E End of line Moves the cursor to the end of the command line

Ctrl-D Deletes the current character

Ctrl-U Deletes text up to cursor

Ctrl-K Deletes from the cursor to end of the line

Ctrl-P Obtains the prior command from memory

Ctrl-N Obtains the next command from memory

Esc-C Converts the letter at the cursor to uppercase

Esc-L Converts the letter at the cursor to lowercase

Esc-D Deletes the remainder of a word

Ctrl-W Deletes the word up to the cursor

Ctrl-Z Returns to the root prompt

Ctrl-T Transposes the character to the left of the cursor with the

Ctrl-L Clears the screen

Back character Moves the cursor one character to the left

When entering a command that extends beyond a single line, press the Left Arrow or Ctrl-B keys repeatedly to move back to the system prompt.

character located at the cursor

Completing a Partial Command Name

If you cannot remember a command name (or if you want to reduce the amount of typing you have to perform), enter the first few letters of a command, then press the Tab key. The command line parser completes the command if the string entered is unique to the command mode. If your keyboard does not have a Tab key, press Ctrl-L.

The CLI recognizes a command once you have entered enough characters to make the command unique. If you enter “conf” within the privileged EXEC mode, the CLI associates the entry with the configure command, since only the configure command begins with

In the following example, the CLI recognizes a unique string in the privileged EXEC mode when the Tab key is pressed:

rfs7000-37FABE# conf<Tab> rfs7000-37FABE# configure

When using the command completion feature, the CLI displays the full command name. The command is not executed until the Return or Enter key is pressed. Modify the command if the full command was not what you intended in the abbreviation. If entering a set of characters (indicating more than one command), the system lists all commands beginning with that set of characters.

8 Brocade Mobility RFS Controller CLI Reference Guide

conf.

53-1003098-01

NOTE

Enter a question mark (?) to obtain a list of commands beginning with that set of characters. Do not leave a space between the last letter and the question mark (?).

For example, entering U lists all commands available in the current command mode:

rfs7000-37FABE#co? commit Commit all changes made in this session configure Enter configuration mode connect Open a console connection to a remote device copy Copy from one file to another

rfs7000-37FABE#

The characters entered before the question mark are reprinted to the screen to complete the command entry.

Command Output pagination

Output often extends beyond the visible screen length. For cases where output continues beyond the screen, the output is paused and a

--More--

prompt displays at the bottom of the screen. To resume the output, press the Enter key to scroll down one line or press the Spacebar to display the next full screen of output.

Creating Profiles

Profiles are sort of a ‘template’ representation of configuration. The system has:

• a default profile for each of the following devices:

• Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade Mobility RFS7000

• a default profile for each of the following service platforms:

• Brocade Mobility RFS9510

• a default profile for each of the following access points:

Supported in the following platforms:

• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,

Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade Mobility 1240 Access Point

• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade

Mobility RFS7000

• Service Platforms — Brocade Mobility RFS9510

To modify the default profile to assign an IP address to the management port:

rfs7000-37FABE(config)#profile rfs7000 default-rfs7000 rfs7000-37FABE(config-profile-default-rfs7000)#interface me1 rfs7000-37FABE(config-profile-default-rfs7000-if-me1)#ip address

172.16.10.2/24 rfs7000-37FABE(config-profile-default-rfs7000-if-me1)#commit rfs7000-37FABE(config-profile-default-rfs7000)#exit rfs7000-37FABE(config)#

Brocade Mobility RFS Controller CLI Reference Guide 9 53-1003098-01

The following command displays a default Brocade Mobility 71XX Access Point profile:

rfs7000-37FABE(config)#profile br71xx default-br71xx rfs7000-37FABE(config-profile-default-br71xx)# rfs7000-37FABE(config-profile-default-br71xx)#show context profile br71xx default-br71xx autoinstall configuration autoinstall firmware device-upgrade persist-images crypto ikev1 policy ikev1-default isakmp-proposal default encryption aes-256 group 2 hash sha crypto ikev2 policy ikev2-default isakmp-proposal default encryption aes-256 group 2 hash sha crypto ipsec transform-set default esp-aes-256 esp-sha-hmac crypto ikev1 remote-vpn crypto ikev2 remote-vpn crypto auto-ipsec-secure crypto remote-vpn-client interface radio1 interface radio2 interface radio3 interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge2 ip dhcp trust qos trust dscp

--More--

Change the default profile by creating vlan 150 and mapping to ge3 Physical interface

Logon to the controller in config mode and follow the procedure below:

rfs7000-37FABE(config-profile-default-rfs7000)# interface vlan 150 rfs7000-37FABE(config-profile-default-rfs7000-if-vlan150)# ip address

192.168.150.20/24 rfs7000-37FABE(config-profile-default-rfs7000-if-vlan150)# exit rfs7000-37FABE(config-profile-default-rfs7000)# interface ge 3 rfs7000-37FABE(config-profile-default-rfs7000-if-ge3)# switchport access vlan 150 rfs7000-37FABE(config-profile-default-rfs7000-if-ge3)# commit write [OK] rfs7000-37FABE(config-profile-default-rfs7000-if-ge3)# show interface vlan 150 Interface vlan150 is UP Hardware-type: vlan, Mode: Layer 3, Address: 00-15-70-37-FA-BE Index: 8, Metric: 1, MTU: 1500 IP-Address: 192.168.150.20/24 input packets 43, bytes 12828, dropped 0, multicast packets 0 input errors 0, length 0, overrun 0, CRC 0, frame 0, fifo 0, missed 0 output packets 0, bytes 0, dropped 0 output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0 collisions 0

Viewing Configured APs

To view previously configured APs, enter the following command:

10 Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

rfs7000-37FABE(config)#show wireless br configured

-----------------------------------------------------------------------------

------- IDX NAME MAC PROFILE RF-DOMAIN ADOPTED-BY

-----------------------------------------------------------------------------

------- 1 br71xx-4AA708 00-04-96-4A-A7-08 default-br71xx default un-adopted 2 br71xx-11E6C4 00-23-68-11-E6-C4 default-br71xx default un-adopted 3 br650-000001 00-A0-F8-00-00-01 default-br650 default un-adopted

-----------------------------------------------------------------------------

-------rfs7000-37FABE(config)#

Remote Administration

A terminal server may function in remote administration mode if either the terminal services role is not installed on the machine or the client used to invoke the session has enabled the admin controller.

• A terminal emulation program running on a computer connected to the serial port on the

controller. The serial port is located on the front of the controller.

• A Telnet session through a Secure Shell (SSH) over a network. The Telnet session may or may

not use SSH depending on how the controller is configured. Brocade recommends using SSH for remote administration tasks.

Configuring Telnet for Management Access

1. A session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode).

2. Access the GLOBAL CONFIG mode from the PRIV EXEC mode.

rfs7000-37FABE> en rfs7000-37FABE# configure terminal Enter configuration commands, one per line. End with CNTL/Z.

3. Go to ‘default-management-policy’ mode.

rfs7000-37FABE(config)# management-policy ? rfs7000-37FABE(config)# management-policy default rfs7000-37FABE(config-management-policy-default)#

4. Enter Telnet and the port number at the command prompt. The port number is optional. The default port is 23. Commit the changes after every command. Telnet is enabled.

rfs7000-37FABE(config-management-policy-default)# telnet rfs7000-37FABE(config-management-policy-default)# commit write

5. Connect to the controller through Telnet using its configured IP address. Use the following credentials when logging on to the device for the first time:

User Name admin

Password admin123

Brocade Mobility RFS Controller CLI Reference Guide 11 53-1003098-01

+ 1325 hidden pages

Brocade Mobility RFS Controller CLI Reference Guide

Specifications and Main Features

Frequently Asked Questions

User Manual

About This Guide

Supported hardware and software

Document Conventions

Text formatting

Notes

Understanding command syntax

Related publications

Getting technical help

INTRODUCTION

CLI Overview

Getting Context Sensitive Help

Using the No Command

Basic Conventions

Using CLI Editing Features and Shortcuts

Moving the Cursor on the Command Line

Completing a Partial Command Name

Command Output pagination

Creating Profiles

Change the default profile by creating vlan 150 and mapping to ge3 Physical interface

Remote Administration