Dell W-IAP114, W-IAP224, W-IAP115, W-IAP225 Reference Guide

Download

Page 1

Dell Networking W-Series

Instant Access Point

6.3.1.1-4.0

Command-Line Interface

Reference Guide

Page 2

System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc.

Originated in the USA. All other trademarks are the property of their respective owners.

Open Source Code

Certain Aruba products include Open Source software code developed by third parties, including software code subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011 Infoblox, Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open Source code used can be found at this site:

http://www.arubanetworks.com/open_source

Legal Notice

The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of those vendors.

0511477-01 | November 2013 Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 3

Page 4

Chapter 1

About this Guide

This document describes the Dell W-Instant command syntax and provides the following information for each command:

l Command Syntax—The complete syntax of the command.

l Description—A brief description of the command.

l Syntax—A description of the command parameters, the applicable ranges and default values, if any.

l Usage Guidelines—Information to help you use the command, including prerequisites, prohibitions, and related

commands.

l Example—An example of how to use the command.

l Command History—The version of Dell W-Instant in which the command was first introduced.

l Command Information—This table describes command modes and platforms for which this command is

applicable.

The commands are listed in alphabetical order.

Intended Audience

This guide is intended for customers who configure and use Dell Networking W-Series Instant Access Point (WIAP).

Conventions

The following conventions are used throughout this document to emphasize important concepts:

Table 1:

Type Style Description

Typographical Conventions

Italics

Boldface

Commands

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI User Guide About this Guide | 4

This style is used for emphasizing important terms and to mark the titles of books.

This style is used for command names and parameter options when mentioned in the text.

This fixed-width font depicts command syntax and examples of commands and command output.

Page 5

Type Style Description

<angle brackets> In the command syntax, text within angle brackets represents

items that you should replace with information appropriate to your specific situation. For example, ping <ipaddr> In this example, you would type “ping” at the system prompt exactly as shown, followed by the IP address of the system to which ICMP echo packets are to be sent. Do not type the angle brackets.

[square brackets] In the command syntax, items enclosed in brackets are

optional. Do not type the brackets.

{Item_A|Item_B} In the command examples, single items within curled braces

and separated by a vertical bar represent the available choices. Enter only one choice. Do not type the braces or bars.

{ap-name <ap-name>}|{ipaddr <ip-addr>} Two items within curled braces indicate that both parameters

must be entered together. If two or more sets of curled braces are separated by a vertical bar, like in the example to the left, enter only one choice. Do not type the braces or bars.

The following informational icons are used throughout this guide:

Indicates helpful suggestions, pertinent information, and important things to remember.

Indicates a risk of damage to your hardware or loss of data.

Indicates a risk of personal injury or death.

Contacting Dell

Table 2:

Support

Main Website dell.com

Contact Information dell.com/contactdell

Support Website dell.com/support

Documentation Website

Support Information

dell.com/support/manuals

What is New in Dell W-Instant 6.3.1.1-4.0

This section lists the new and modified commands in the Dell W-Instant 6.3.1.1-4.0 release.

New Commands

The following commands are added in the Dell W-Instant 6.3.1.1-4.0 release:

5 | About this Guide Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 6

Table 3:

New Commands in 6.3.1.1-4.0

Command Description

ale-server Configures Analytics and Location Engine (ALE) server details to enable W-IAP integration with

ALE.

ale-report-interval Configures the interval at which a W-IAP sends data to the Analytics and Location Engine

(ALE) server.

firewall-externalenforcement

iap-master Provisions a W-IAP as a master W-IAP.

proxy Configures a HTTP proxy on a W-IAP for cloud image download.

restrict-corp-access Configures restricted access to the corporate network.

restricted-mgmtaccess

show airgroupservice-id

show ale Displays the ALE configuration details.

show ap clientmatch-history

show ap clientmatch-live

show ap clientmatch-refused

Configures external firewall such as Palo Alto Networks(PAN) firewall to enable integration with the W-IAP

Configures management subnets to enable restricted access to the corporate network.

Displays the AirGroup service IDs configured on a W-IAP for its AirGroup clients.

Displays a historical record of the client match events and actions for the clients associated with a W-IAP.

Displays the current client match events and actions for clients associated with a W-IAP.

Displays the list of clients for which the channel allocation is refused as per the client match configuration parameters.

show ap clientprobe-report

show ap client-view Displays information about the clients in the AP neighborhood.

show ap debug client-match

show ap debug spanning-tree

show ap pmkcache Displays the pairwise master key (PMK) cache table for clients associated with a W-IAP.

show ap virtualbeacon-report

show captiveportal-domains

show externalcaptive-portal

Displays the client probe report for a W-IAP.

Displays the information about the client match configuration status on an AP radio interface.

Displays the Spanning Tree Protocol (STP) information for a W-IAP if configured.

Displays a report with the MAC address details and RSSI information of a W-IAP.

Displays the internal and external Captive portal server domains.

Displays the external Captive portal configuration details.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide About this Guide | 6

Page 7

Table 3:

New Commands in 6.3.1.1-4.0

Command Description

show lacp status

show proxy config Displays the HTTP proxy configuration details.

telnet-server Allows Telnet access to the Dell W-Instant CLI.

vpn-gre-outside Configures an automatic GRE tunnel for Dell controller.

Displays the Link Aggregation Control Protocol (LACP) configuration status on a W-IAP.

Modified Commands

The following commands are modified in the Dell W-Instant 6.3.1.1-4.0 release:

Table 4:

Command Description

airgroupservice The airgroupservice allows you configure AirGroup services such as iTunes, Sharing, Chat,

ams-backup-ip The ams-backup-ip command is enhanced to support a backup domain name along with

ams-ip The ams-ip command is enhanced to support domain name along with the IP address.

arm The arm command is enhanced to support client match configuration.

Modified Commands in 6.3.1.1-4.0

and so on. You can configure all services at once.

the backup IP address.

commit The commit command is enhanced to provide an option (commit apply no-save command)

for applying the configuration changes to the cluster without saving the configuration.

copy The copy tftp command is enhanced to upload customized logo images to the W-IAP

database.

download-cert The download-cert command is enhanced to allow the downloading of Captive portal

server certificates from an FTP or TFTP server, or by using an HTTP URL.

ip dhcp The ip dhcp command is modified to include centralized L3.

mgmt-user The mgmt-user command now allows you to configure read-only users and users for the

guest management interface.

show airgroup

show airgroupservice The show airgroupservice command output is enhanced to display the configuration status

wired-port-profile The wired-port-profile is modified to include the spanning-tree command parameter to

wlan access-rule

The show airgroup command is enhanced to include blocked-queries, blocked-service-id, internal-state statistics, and swarm-info commands.

of all AirGroup services.

allow the administrators to enable Spanning Tree Protocol (STP) for the wired profile users.

The wlan access-rule command is enhanced to include the bandwidth-limit command to allow the administrators to allocate bandwidth limit to the SSID users.

wlan auth-server The wlan auth-server command is enhanced to include the dynamic RADIUSproxy

configuration parameters.

7 | About this Guide Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 8

Table 4:

Modified Commands in 6.3.1.1-4.0

Command Description

wlan external-captiveportal

The wlan external-captive-portal command is enhanced to allow the administrators to create multiple profiles and assign the required profiles to a WLAN SSID or wired profile.

wlan ssid-profile The wlan ssid-profile command is modified to include the following parameters:

l okc-disable — For Opportunistic Key Caching (OKC) roaming support l dot11r — For 802.11r roaming support l mac-authentication-delimiter — To allow the use of delimiters such as colon and dash in

MAC address string.

l mac-authentication-upper-case— To allow the use of uppercase letters in MAC address

string.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide About this Guide | 8

Page 9

Page 10

Chapter 1

Dell W-Instant CLI

Dell W-Instant supports the use of Command Line Interface (CLI) for scripting purposes. You can access the Dell W-Instant CLI through a Secure Shell (SSH).

To enable the SSH access to the Dell W-Instant CLI:

1. From the Dell W-Instant UI, navigate to System > Show advanced options.

2. Select Enabled from the Terminal access drop-down list.

3. Click OK.

Connecting to a CLI Session

On connecting to a CLI session, the system displays its host name followed by the login prompt. Use the administrator credentials to start a CLI session. For example:

(Instant Access Point) User: admin Password: *****

If the login is successful, the privileged command mode is enabled and a command prompt is displayed. For example:

(Instant Access Point)#

The privileged mode provides access to show, clear, ping, traceroute, and commit commands. The configuration commands are available in the configuration (config) mode. To move from privileged mode to the configuration mode, enter the following command at the command prompt:

(Instant Access Point)# configure terminal

The configure terminal command allows you to enter the basic configuration mode and the command prompt is displayed as follows:

(Instant Access Point)(config)#

The Dell W-Instant CLI allows CLI scripting in several other sub-command modes to allow the users to configure individual interfaces, SSIDs, access rules, and security settings.

You can use the question mark (?) to view the commands available in a privileged mode, configuration mode, or submode.

Although automatic completion is supported for some commands such as configure terminal, the complete exit and end commands must be entered at command prompt for successful execution.

Applying Configuration Changes

Each command processed by the Virtual Controller is applied on all the slave W-IAPs in a cluster. When you make configuration changes on a master W-IAP in the CLI, all associated W-IAPs in the cluster inherit these changes and subsequently update their configurations. The changes configured in a CLI session are saved in the CLI context.

The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session: therefore, it is recommended that you configure fewer changes at a time and apply the changes at regular intervals.

To apply and save the configuration changes at regular intervals, use the following command in the privileged mode:

(Instant Access Point)# commit apply

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI User Guide Dell W-Instant CLI | 10

Page 11

To apply the configuration changes to the cluster, without saving the configuration, use the following command in the privileged mode:

(Instant Access Point)# commit apply no-save

To view the changes that are yet to be applied, use the following command in the privileged mode:

(Instant Access Point)# show uncommitted-config

To revert to the earlier configuration, use the following command in the privileged mode.

(Instant Access Point)# commit revert

Example:

(Instant Access Point)(config)# rf dot11a-radio-profile (Instant Access Point)(RF dot11a Radio Profile)# beacon-interval 200 (Instant Access Point)(RF dot11a Radio Profile)# no legacy-mode (Instant Access Point)(RF dot11a Radio Profile)# dot11h (Instant Access Point)(RF dot11a Radio Profile)# interference-immunity 3 (Instant Access Point)(RF dot11a Radio Profile)# csa-count 2 (Instant Access Point)(RF dot11a Radio Profile)# spectrum-monitor (Instant Access Point)(RF dot11a Radio Profile)# end

(Instant Access Point)# show uncommitted-config

rf dot11a-radio-profile no legacy-mode beacon-interval 200 no dot11h interference-immunity 3 csa-count 1 no spectrum-monitor

Instant Access Point# commit apply

Configuration Sub-modes

Some commands in configuration mode allow you to enter into a sub-mode to configure the commands specific to that mode. When you are in a configuration sub-mode, the command prompt changes to indicate the current submode.

You can exit a sub-command mode and return to the basic configuration mode or the privileged Exec (enable) mode at any time by executing the exit or end command.

Deleting Configuration Settings

Use the no command to delete or negate previously-entered configurations or parameters.

l To view a list of no commands, type no at the prompt in the relevant mode or sub-mode followed by the question

mark. For example:

(Instant Access Point)(config) # no?

l To delete a configuration, use the no form of a configuration command. For example, the following command

removes a configured user role:

(Instant Access Point)(config) # no user <username>

l To negate a specific configured parameter, use the no parameter within the command. For example, the following

command deletes the PPPoE user configuration settings:

(Instant Access Point)(config) # pppoe-uplink-profile (Instant Access Point)(pppoe_uplink_profile)# no pppoe-username

11 | Dell W-Instant CLI Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 12

Using Sequence Sensitive Commands

The Dell W-Instant CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, it is recommended that you remove the existing configuration before adding or modifying the configuration details for sequence-sensitive commands. You can either delete an existing profile or remove a specific configuration by using the no… commands.

The following table lists the sequence-sensitive commands and the corresponding no command to remove the configuration.

Table 5:

Sequence-Sensitive Commands

Sequence-Sensitive Command Corresponding no command

opendns <username <password> no opendns

rule <dest> <mask> <match> <protocol> <start-port> <e nd-port> {permit |deny | src-nat | dst-nat {<IP-addre ss> <port>| <port>}}[<option1…option9>]

mgmt-auth-server <auth-profile-name>

set-role <attribute>{{equals| not-equals| startswith| ends-with| contains} <operator> <role>| valueof}

set-vlan <attribute>{{equals| not-equals| startswith| ends-with| contains} <operator> <VLAN-ID>| value-of}

auth-server <name> no auth-server <name>

no rule <dest> <:mask> <match> <prot ocol> <start-port> <end-port> {permi t | deny | src-nat | dst-nat}

no mgmt-auth-server <auth-profile-na me>

no set-role <attribute>{{equals| not-equals| starts-with| ends-with| contains} <operator>| value-of}

no set-role

no set-vlan <attribute>{{equals| not-equals| starts-with| ends-with| contains} <operator>| value-of}

no set-vlan

Saving Configuration Changes

The

running-config

To view the running-config of a W-IAP, use the following command:

(Instant Access Point) # show running-config

When you make configuration changes through the CLI, the changes affect the current running configuration only. To save your configuration changes, use the following command in the privileged Exec mode:

(Instant Access Point)# write memory

Commands that Reset the W-IAP

If you use the CLI to modify a currently provisioned radio profile, the changes take place immediately. A reboot of the W-IAP is not required to apply the configuration changes. Certain commands, however, automatically force W-IAP to reboot. Verify the current network loads and conditions before executing the commands that enforce a reboot of the W-IAP, as they may cause a momentary disruption in service as the unit resets.

The reload command resets a W-IAP.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide Dell W-Instant CLI | 12

holds the current W-IAP configuration, including all pending changes which are yet to be saved.

Page 13

Command Line Editing

The system records your most recently entered commands. You can review the history of your actions, or reissue a recent command easily, without having to retype it.

To view items in the command history, use theuparrow key to move back through the list and the

down

arrow key to move forward. To reissue a specific command, press Enter when the command appears in the command history. You can also use the command line editing feature to make changes to the command prior to entering it. The command line editing feature allows you to make corrections or changes to a command without retyping. The following table lists the editing controls. To use key shortcuts, press and hold the Ctrl button while you press a letter key.

Table 6:

Line Editing Keys

Key Effect Description

Ctrl A Home Move the cursor to the beginning of the line.

Ctrl B or the left arrow

Ctrl D Delete Right Delete the character to the right of the cursor.

Ctrl E End Move the cursor to the end of the line.

Ctrl F or the right arrow

Ctrl K Delete Right Delete all characters to the right of the cursor.

Back Move the cursor one character left.

Forward Move the cursor one character right.

Ctrl N or the down arrow

Ctrl P or up arrow

Ctrl T Transpose Swap the character to the left of the cursor with

Ctrl U Clear Clear the line.

Ctrl W Delete Word Delete the characters from the cursor up to and

Ctrl X Delete Left Delete all characters to the left of the cursor.

Next Display the next command in the command

history.

Previous Display the previous command in the command

history.

the character to the right of the cursor.

including the first space encountered.

Specifying Addresses and Identifiers in Commands

This section describes addresses and other identifiers that you can reference in CLI commands.

Table 7:

Address/Identifier Description

IP address For any command that requires entry of an IP address to specify a network entity,

Addresses and Identifiers

use IPv4 network address format in the conventional dotted decimal notation (for example, 192.0.2.1).

13 | Dell W-Instant CLI Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 14

Address/Identifier Description

Netmask address For subnet addresses, specify a subnet mask in dotted decimal notation (for

example, 255.255.255.0).

Media Access Control (MAC) address

Service Set Identifier (SSID)

Basic Service Set Identifier (BSSID)

Extended Service Set Identifier (ESSID)

For any command that requires entry of a device’s hardware address, use the hexadecimal format (for example, 00:05:4e:50:14:aa).

A unique character string (sometimes referred to as a network name), consisting of no more than 32 characters. The SSID is case-sensitive (for example, WLAN-

01).

This entry is the unique hard-wireless MAC address of the AP. A unique BSSID applies to each frequency— 802.11a and 802.11g—used from the AP. Use the same format as for a MAC address.

Typically the unique logical name of a wireless network. If the ESSID includes spaces, enclose the name in quotation marks.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide Dell W-Instant CLI | 14

Page 15

aaa test-server

aaa test-server <servername> <username>

Description

This command tests a configured authentication server.

Syntax

Parameter Description

Allows you to specify the authentication server for which the authentication test is run.

Allows you to specify the user name for which the authentication test is run.

Usage Guidelines

Use this command to view the CPU load for application and system processes. This command allows you to verify a configured RADIUS authentication server or the internal database. You can use this command to check for an “out of service” RADIUS server.

Example

The following example shows the output of the aaa test-server command:

Authentication is successful

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

15 | aaa test-server Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Privileged EXEC mode

Page 16

a-channel

a-channel <channel> <tx-power>

Description

This command configures 5 GHz radio channels for a specific W-IAP.

Syntax

Parameter Description Range

<tx-power>

Configures the specified 5 GHz channel. The valid channels for a band

are determined by the AP regulatory domain.

Configures the specified transmission power values.

0-127 dBm

Usage Guidelines

Use this command to configure radio channels for the 5 GHz band for a specific W-IAP.

Example

The following example configures the 5 GHz radio channel:

(Instant Access Point)# a-channel 44 18

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide a-channel | 16

Privileged EXEC mode

Page 17

a-external-antenna

a-external-antenna <gain>

Description

This command configures external antenna connectors for a W-IAP.

Syntax

Parameter Description Range

<gain>

Configures the antenna gain. You can configure a gain value in dBi for the following types of antenna:

l Dipole/Omni l Panel l Sector

Diploe/Omni - 6

Panel -14

Sector - 14

Usage Guidelines

If your W-IAP has external antenna connectors, you need to configure the transmit power of the system. The configuration must ensure that the system’s Equivalent Isotropically Radiated Power (EIRP) is in compliance with the limit specified by the regulatory authority of the country in which the W-IAP is deployed. You can also measure or calculate additional attenuation between the device and antenna before configuring the antenna gain. To know if your AP device supports external antenna connectors, see the

EIRP and Antenna Gain

The following formula can be used to calculate the EIRP limit related RF power based on selected antennas (antenna gain) and feeder (Coaxial Cable loss):

EIRP = Tx RF Power (dBm)+GA (dB) - FL (dB)

The following table describes this formula:

Install Guide

that is shipped along with the AP device.

Table 8:

Formula Variable Definitions

Formula Element Description

EIRP Limit specific for each country of deployment

Tx RF Power RF power measured at RF connector of the unit

GA Antenna gain

FL Feeder loss

For information on antenna gain recommended by the manufacturer, see dell.com/support.

Example

The following example configures external antenna connectors for the W-IAP with the 5 GHz radio band.

(Instant Access Point)# a-external-antenna 14

17 | a-external-antenna Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 18

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide a-external-antenna | 18

Page 19

aeroscout-rtls

aeroscout-rtls <IP-address> <Port> [include-unassoc-sta] no...

Description

This command configures the Aeroscout Real-Time Asset Location Server (RTLS) settings for Dell W-Instant and sends the Radio-frequency identification (RFID) tag information to an Aeroscout RTLS server.

Syntax

Command/Parameter Description Default

<IP-address>

<Port>

include-unassoc-stas

IP address of the Aeroscout RTLS server to which the location reports are sent.

Port number of the Aeroscout RTLS server to which the location reports are sent..

Includes the client stations not associated to any W-IAP when mobile unit reports are sent to the Aeroscout RTLS server.

Removes the Aeroscout RTLS configuration. —

—

Disabled

Usage Guidelines

This command allows you to integrate Aeroscout RTLS server with Dell W-Instant by specifying the IP address and port number of the Aeroscout RTLS server. When enabled, the RFID tag information for the stations associated with a W-IAP are sent to the AeroScout RTLS. You can also send the RFID tag information for the stations that are not associated with any W-IAP.

Example

The following example configures the Aeroscout RTLS server:

(Instant Access Point)(config)# aeroscout-rtls 192.0.2.2 3030 include-unassoc-sta (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

Command was introduced.

Command Information

W-IAP Platform Command Mode

All platforms

19 | aeroscout-rtls Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 20

airgroup

cppm enforce-registration cppm-query-interval <interval> cppm-server <server-name> disable enable enable-guest-multicast multi-swarm no…

Description

This command configures the AirGroup settings for Dell W-Instant.

Syntax

Parameter Description Range Default

cppm enforceregistration

cppm-query-interval <interval>

cppm-server <server-nam e>

disable

enable

enable-guest-multicast

Enforces the discovery of the CPPM registered devices. When enabled, only devices registered with CPPM will be discovered by Bonjour® devices, based on the CPPM policy configured.

Configures a time interval at which Dell WInstant sends a query to ClearPass Policy Manager for mapping the access privileges of each device to the available services.

Configures the ClearPass Policy Manager server information for AirGroup policy.

Disables the AirGroup feature. — —

Enables the AirGroup feature. — —

Allows the users to use the Bonjour services enabled in a guest VLAN. When enabled, the Bonjour devices will be visible only in the guest VLAN and AirGroup will not discover or enforce policies in guest VLAN.

— Enabled

1-24 10 hours

— —

multi-swarm

no…

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide airgroup | 20

Enables inter cluster or intra cluster mobility.

l In the Intra Cluster model, the W-IAP does

not share the Multicast DNS (mDNS) database information with the other clusters.

l In the Inter Cluster model, the W-IAP

shares the mDNS database information with the other clusters. The mDNS records in the Virtual Controller can be shared with the all the Virtual Controllers specified for L3 Mobility.

Removes the specified configuration parameter.

— Disabled

— —

Page 21

Usage Guidelines

Use this command to configure the AirGroup, the availability of the AirGroup services, and ClearPass Policy Manager (CPPM) servers.

Example

The following example configures an AirGroup profile:

(Instant Access Point)(config)# airgroup (Instant Access Point)(airgroup)# cppm enforce-registration (Instant Access Point)(airgroup)# cppm-server Test (Instant Access Point)(airgroup)# cppm-query-interval 10 (Instant Access Point)(airgroup)# enable-guest-multicast (Instant Access Point)(airgroup)# multi-swarm (Instant Access Point)(airgroup)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and AirGroup configuration sub-mode.

21 | airgroup Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 22

airgroupservice

airgroupservice <service-name>

description <description> disallow-role <role> disallow-vlan <VLAN-ID> enable disable id <AirGroupservice-ID> no…

Description

This command configures the availability of AirGroup services for the W-IAP clients.

Syntax

Parameter Description Default

<AirGroup-service>

disallow-role <role>

Specifies the AirGroup service to configure.

The following services are available for W-IAP clients:

l AirPlay™— Apple® AirPlay™ allows wireless

streaming of music, video, and slideshows from your iOS device to Apple TV® and other devices that support the AirPlay™ feature.

l AirPrint™— Apple® AirPrint™ allows you to print from

an iPad®, iPhone®, or iPod® Touch directly to any AirPrint™ compatible printers.

l iTunes— iTunes service is used by iTunes Wi-Fi

sync and iTunes home-sharing applications across all Apple® devices.

l RemoteMgmt— Use this service for remote login,

remote management, and FTP utilities on Apple® devices.

l Sharing— Applications such as disk sharing and file

sharing, use the service ID that are part of this service on one or more Apple® devices.

l Chat— The iChat® (Instant Messenger) application

on Apple® devices uses this service. You can allow all services or add custom services. Up to 10 services can be configured on a W-IAP.

Adds a description to the AirGroup Service profile. —

Restricts the user roles specified for role from accessing the AirGroup service.

Disabled

—

disallow-vlan <VLAN-ID>

enable

disable

id <AirGroupservice-ID>

no…

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide airgroupservice | 22

Restricts the users assigned to these VLANs from accessing the AirGroup service.

Enables the AirGroup service for the profile. —

Disables AirGroup services for the profile. —

Indicates the AirGroup service ID, which is the name of a Bonjour service offered by a Bonjour-enabled device or application.

NOTE: The service IDs cannot be added for the preconfigured services.

Removes the AirGroup service configuration. —

Disabled

—

Page 23

Usage Guidelines

Use this command to enforce AirGroup service policies and define the availability of a Bonjour services such as Apple® AirPrint and AirPlay for an AirGroup profile. When configuring Bonjour service for an AirGroup profile, you can also restrict specific user roles and VLANs from availing the AirGroup services.

Example

The following example configures AirGroup services:

(Instant Access Point)(config)# airgroupservice AirPlay (Instant Access Point)(airgroup-service)# id 23 (Instant Access Point)(airgroup-service)# description AirPlay Service (Instant Access Point)(airgroup-service)# disallow-role guest (Instant Access Point)(airgroup-service)# disallow-vlan 200 (Instant Access Point)(airgroup-service)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.3.1.1-4.0

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is modified.

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and AirGroup services configuration submode.

23 | airgroupservice Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 24

airwave-rtls

airwave-rtls <IP-address> <Port> <key> <frequency> [include-unassoc-sta] no…

Description

This command integrates W-AirWave Real-Time Asset Location Server (RTLS) settings for Dell W-Instant and sends the Radio-frequency identification (RFID) tag information to an W-AirWave RTLS server with the RTLS feed to accurately locate the wireless clients.

Syntax

Command/Parameter Description Default

<IP-address>

<Port>

<key>

include-unassoc-sta

no…

Configures the IP address of the W-AirWave RTLS server.

Configures the port for the W-AirWave RTLS server. —

Configures key for service authorization. —

Configures the frequency at which packets are sent to the RTLS server in seconds.

When enabled, this option sends mobile unit reports to the W-AirWave RTLS server for the client stations that are not associated to any W-IAP (unassociated stations).

Removes the specified configuration parameter. —

—

Disabled

Usage Guidelines

Use this command to send the RFID tag information to W-AirWave RTLS. Specify the IP address and port number of the W-AirWave server, to which the location reports must be sent. You can also send reports of the unassociated clients to the RTLS server for tracking purposes.

Example

The following command enables AirWave RTLS:

(Instant Access Point)(config) # airwave-rtls ams-ip 192.0.2.3 3030 pass@1234 5 include-unasso c-sta

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide airwave-rtls | 24

Configuration mode

Page 25

ale-report-interval

ale-report-interval <seconds> no…

Description

This command configures the interval at which a W-IAP sends data to the Analytics and Location Engine (ALE) server.

Syntax

Command/Parameter Description Range Default

ale-report-interval <seconds>

no…

Configures an interval at which the Virtual Controller can report the W-IAP and client details to the ALE server.

Removes the specified configuration parameter.

6–60 seconds 30

— —

Usage Guidelines

Use this command to specify an interval for W-IAP and ALE server communication.

Example

The following example configures the ALE server details:

(Instant Access Point)(config)# ale-report-interval 60

Command History

Version Description

Dell Networking W-Series Instant Access Point6.3.1.1-4.0

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

25 | ale-repor t-interval Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 26

ale-server

ale-server <server>

no…

Description

This command configures Analytics and Location Engine (ALE) server details for W-IAP integration with ALE.

Syntax

Command/Parameter Description

ale-server <server>

no…

Allows you to specify the Fully Qualified Domain Name (FQDN) or IP address of the ALE server.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to enable a W-IAP for ALE support.

Example

The following example configures the ALE server details:

(Instant Access Point)(config)# ale-server AleServer1

Command History

Version Description

Dell Networking W-Series Instant Access Point6.3.1.1-4.0

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide ale-server | 26

Configuration mode.

Page 27

alg

sccp-disable sip-disable ua-disable vocera-disable no…

Description

This command allows you to modify the configuration settings for Application Layer Gateway (ALG) protocols enabled on a W-IAP. An application-level gateway consists of a security component that augments a firewall or NAT used in a network.

Syntax

Command/Parameter Description Default

sccp-disable

sip-disable

ua-disable

vocera-disable

no…

Disables the Skinny Call Control Protocol (SCCP). Enabled

Disables the Session Initiation Protocol (SIP) for VOIP and other text and multimedia sessions.

Disables the Alcatel-Lucent NOE protocol. Enabled

Disables the VOCERA protocol. Enabled

Removes the specified configuration parameter. —

Usage Guidelines

Use this command to functions such as SIP, Vocera, and Cisco Skinny protocols for ALG.

Example

The following example configures the ALG protocols:

(Instant Access Point)(config)# alg (Instant Access Point)(ALG)# sccp-disable (Instant Access Point)(ALG)# no sip-disable (Instant Access Point)(ALG)# no ua-disable (Instant Access Point)(ALG)# no vocera-disable (Instant Access Point)(ALG)# end (Instant Access Point)# commit apply

Enabled

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

27 | alg Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode and ALG configuration sub-mode.

Page 28

allow-new-aps

allow-new-aps no…

Description

This command allows the new access points to join the W-IAP cluster.

Syntax

Command/Parameter Description

allow-new-aps

Allows new access points in the domain.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to allow the new access points to join the W-IAP cluster.

Example

The following command allows the new W-IAPs to join the cluster.

(Instant Access Point)(config)# allow-new-aps

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide allow-new-aps | 28

Configuration mode

Page 29

allowed-ap

allowed-ap <MAC-address> no…

Description

This command allows an AP to join the W-IAP cluster.

Syntax

Command/Parameter Description

allowed-ap <MAC-address>

no…

Specifies the MACaddress of the W-IAP that is allowed to join the cluster.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to allow a W-IAP to join the cluster.

Example

The following command configures an allowed W-IAP:

(Instant Access Point)(config)# allowed-ap 01:23:45:67:89:AB

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

29 | allowed-ap Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 30

ams-backup-ip

ams-backup-ip <IP-address or domain name> no…

Description

This command adds the IP address or domain name of the backup W-AirWave Management server.

Syntax

Parameter Description

<IP-address or domain name>

no…

Configures the IP address or domain name of the secondary W-AirWave Management Server.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to add the IP address or domain name of the backup W-AirWave Management Server. The backup server provides connectivity when the W-AirWave primary server is down. If the W-IAP cannot send data to the primary server, the Virtual Controller switches to the backup server automatically.

Example

The following command configures an W-AirWave backup server.

(Instant Access Point)(config)# ams-backup-ip 192.0.2.1

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide ams-backup-ip | 30

Configuration mode

Page 31

ams-identity

ams-identity <Name>

Description

This command uniquely identifies the group of W-IAPs managed or monitored by the W-AirWave Management console. The name can be a location, vendor, department, or any other identifier.

Syntax

Parameter Description

ams-identity <Name>

Configures a name that uniquely identifies the W-IAP on the WAirWave Management server. The name defined for this command will be displayed under the Groups tab in the W-AirWave user interface.

Usage Guidelines

Use this command to assign an identity for the W-IAPs monitored or managed by the W-AirWave Management Server.

Example

The following command configures an W-AirWave identifier:

(Instant Access Point)(config)# ams-identity dell

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

31 | ams-identity Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 32

ams-ip

ams-ip <IP-address or domain name> no…

Description

This command configures the IP address or domain name of the W-AirWave Management console for a W-IAP.

Syntax

Parameter Description

<IP-address or domain name>

Configures the IP address or domain name of an W-AirWave Management server for a W-IAP.

Usage Guidelines

Use this command to configure the IP address or domain name of the AMS console for a W-IAP.

Example

The following command configures the W-AirWave Server.

(Instant Access Point)(config)# ams-ip 192.0.1.2

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide ams-ip | 32

Configuration mode

Page 33

ams-key

ams-key <key> no…

Description

This command assigns a shared key for service authorization.

Syntax

Parameter Description

<key>

no…

Authorizes the first Virtual Controller to communicate with the W-AirWave server.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to assign a shared key for service authorization. This shared key is used for configuring the first AP in the W-IAP network.

Example

The following command configures the shared key for the W-AirWave server.

(Instant Access Point)(config)# ams-key key@789

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

33 | ams-key Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 34

arm

80mhz-support a-channels <a-channel> air-time-fairness-mode {<default-access>| <fair-access>| <preferred-access>} band-steering-mode {balance-bands|prefer-5ghz| force-5ghz| disable} client-aware client-match [calc-interval <seconds>| calc-threshold <threshold> | debug <level>| holdtime <number> | max-adoption <count>| max-request <count> |nb-matching <percentage> | slb-mode <mode> g-channels max-tx-power min-tx-power scanning wide-bands {<none>| <all>| <2.4>| <5>} no…

Description

This command assigns an Adaptive Radio Management (ARM) profile for a W-IAP and configures ARM features such as band steering, spectrum load balancing, airtime fairness mode, and access control features.

Syntax

Command/Parameter Description Range Default

80mhz-support

a-channels <a-channel>

air-time-fairness-mode

{<default-access>| <fairaccess>|

<preferred-access>}

Enables the use of 80 MHz channels on APs with 5GHz radios, which support a very high throughput. NOTE: Only the APs that support 802.11ac can be configured with 80 MHz channels.

Configures 5 GHz channels. — —

Allows equal access to all clients on the wireless medium, regardless of client type, capability, or operating system and prevents the clients from monopolizing resources. You can configure any of the following modes:

l default-access — To provide access

based on client requests. When this mode is configured, the per user and per SSID bandwidth limits are not enforced.

l fair-access — To allocate Airtime evenly

across all the clients.

l preferred-access — To set a preference

where 11n clients are assigned more airtime than 11a/11g. The 11a/11g clients get more airtime than 11b. The ratio is 16:4:1.

— —

defaultaccess,fairaccess, preferredaccess

defaultaccess

band-steering-mode

{<balance-bands>|<prefer5ghz>|

<force-5ghz>| <disable>}

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide arm | 34

Assigns the dual-band capable clients to the 5 GHz band on dual-band. It reduces co-channel interference and increases available bandwidth for dual-band clients, because there are more channels on the 5

balancebands, prefer5ghz, force5ghz,

balancebands

Page 35

Command/Parameter Description Range Default

client-aware

GHz band than on the 2.4 GHz band. You can configure any of the following bandsteering modes:

l prefer-5ghz — To allow the W-IAP to

steer the client to 5 GHz band (if the client is 5 GHz capable). However, the W-IAP allows the client connection on the 2.4 GHz band if the client persistently attempts for 2.4 GHz association.

l force-5ghz — To enforce 5 GHz band

steering mode on the W-IAPs, so that the 5 GHz capable clients are allowed to use only the 5GHz channels.

l balance-bands — To allow the W-IAPs to

balance the clients across the two 2.4 GHz and 5 GHz radio and to utilize the available bandwidth.

l disable — To allow the clients to select

the bands.

Enables the client aware feature. When enabled, the W-IAP will not change channels for the Access Points when clients are active, except for high priority events such as radar or excessive noise. The client aware feature must be enabled in most deployments for a stable WLAN.

disable

— Enabled

client-match

calc-interval<seconds>

calc-threshold <threshold>

debug <level>

Enables enable the client match feature on APs. When the client match feature is enabled on a W-IAP, the W-IAP measures the RF health of its associated clients.If spectrum load balancing is triggered and a client's Received Signal Strength Indication (RSSI) is or less than 20 dB , clients are moved from one AP to another for better performance and client experience. In the current release, the client match feature is supported only within a W-IAP cluster.

Configures an interval at which client match is calculated.

Configures a threshold that takes acceptance client count difference among all the channels of Client match into account. When the client load on an AP reaches or exceeds the threshold in comparison, client match is enabled on that AP.

Displays information requires for debugging client match issues.

10-600 30

seconds

1-20 2

0-4

0—none, 1—

35 | arm Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 36

Command/Parameter Description Range Default

error, 2— information, 3—debug, 4—dump

holdtime <number>

max-adoption <count>

max-request <count>

nb-matching <percentage>

slb-mode <mode>

g-channels <g-channel>

Configures a hold time for client match. 1—1800 900

Configure a maximum number for adopting clients.

Configures the maximum number of requests for client match.

Configures a percentage value to be considered in the same virtual RF neighborhood of Client match.

Configures a balancing strategy for client match.

Configures 2.4 GHz channels. — —

0-100 5

20-100% 75%

1—3

1—Channelbased

2—Radiobased

3—Channel and Radio based

min-tx-power <power>

max-tx-power <power>

scanning

wide-bands {<none>| <all>| <2.4>| <5>}

Sets the minimum transmission power. This indicates the minimum Effective Isotropic Radiated Power (EIRP). If the minimum transmission EIRP setting configured on an AP is not supported by the AP model, this value is reduced to the highest supported power setting.

Sets the highest transmit power levels for the AP. If the maximum transmission EIRP configured on an AP is not supported by the AP model, the value is reduced to the highest supported power setting.

NOTE: Higher power level settings may be constrained by local regulatory requirements and AP capabilities.

Allows the W-IAPs to scan other channels for RF Management and Wireless Intrusion Protection System enforcement.

Allows administrators to configure 40 MHz. channels in the 2.4 GHz and 5.0 GHz bands. 40 MHz channels are two 20 MHz

0-127 dBm 18

0-127 dBm 127

— Disabled

none, all,

2.4, and 5

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide arm | 36

Page 37

Command/Parameter Description Range Default

adjacent channels that are bonded together. The 40 MHz channels double the frequency bandwidth available for data transmission. For high performance, enter 5GHz. If the AP density is low, enter

2.4GHz.

no…

Removes the current value for that parameter and return it to its default setting

— —

Usage Guidelines

Use this command to configure ARM features on a W-IAP. ARM ensures low-latency roaming, consistently high performance, and maximum client compatibility in a multi-channel environment. By ensuring the fair distribution of available Wi-Fi bandwidth to mobile devices, ARM ensures that data, voice, and video applications have sufficient network resources at all times. ARM allows mixed 802.11ac, a, b, g, and n client types to inter-operate at the highest performance levels.

Example

The following example configures an ARM profile:

(Instant Access Point)(config)# arm (Instant Access Point)(ARM)# 80mhz-support (Instant Access Point)(ARM)# a-channels 44 (Instant Access Point)(ARM)# min-tx-power 18 (Instant Access Point)(ARM)# max-tx-power 127 (Instant Access Point)(ARM)# band-steering-mode prefer-5ghz (Instant Access Point)(ARM)# air-time-fairness-mode fair-access (Instant Access Point)(ARM)# scanning (Instant Access Point)(ARM)# client-aware (Instant Access Point)(ARM)# client-match (Instant Access Point)(ARM)# wide-bands 5 (Instant Access Point)(ARM)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.3.1.1-4.0

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is modified.

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

37 | arm Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration and ARM configuration sub-mode.

Page 38

attack

drop-bad-arp-enable fix-dhcp-enable no… poison-check-enable

Description

This command enables firewall settings to protect the network against wired attacks, such as ARP attacks or malformed DHCP packets, and notify the administrator when these attacks are detected.

Syntax

Command/Parameter Description

drop-bad-arp-enable

fix-dhcp-enable

poison-check-enable

no…

Enables the W-IAP to block the bad ARP request.

Enables the W-IAP to fix the malformed DHCP packets.

Enables the W-IAP to trigger an alert notifying the user about the ARP poisoning that may have been caused by the rogue APs.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to block ARP attacks and to fix malformed DHCP packets.

Example

The following example configures firewall settings to protect the network from Wired attacks:

(Instant Access Point)(config)# attack (Instant Access Point)(ATTACK)# drop-bad-arp-enable (Instant Access Point)(ATTACK)# fix-dhcp-enable (Instant Access Point)(ATTACK)# poison-check-enable (Instant Access Point)(ATTACK)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide attack | 38

Configuration and Attack configuration sub-mode

Page 39

auth-failure-blacklist-time

auth-failure-blacklist-time <seconds>

Description

This command allows the W-IAPs to dynamically blacklist the clients when they exceed the authentication failure threshold.

Syntax

Parameter Description Default

auth-failure-blacklisttime <seconds>

Configures the duration in seconds for which the clients that exceed the maximum authentication failure threshold are blacklisted.

3600

Usage Guidelines

Use this command to dynamically blacklist the clients that exceed the authentication failure threshold configured for a network profile.

Example

The following example blacklists the clients dynamically:

(Instant Access Point)(config)# auth-failure-blacklist-time 60

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

39 | auth-failure-blacklist-time DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 40

auth-survivability cache-time-out

auth-survivability cache-time-out <time-out>

Description

This command configures an interval after which the authenticated credentials of the clients stored in the cache expire. When the cache expires, the clients are required to authenticate again.

Syntax

Parameter Description Range Default

auth-survivability cache-time-out

Indicates the duration after which the authenticated credentials in the cache expire.

1-99 hours 24 hours

Usage Guidelines

Use this command when the authentication survivability is enabled on a network profile, to set a duration after which the authentication credentials stored in the cache expires. To enable the authentication survivability feature, use the auth-survivability in WLAN SSID profile sub-mode.

Example

(Instant Access Point) (config)# auth-survivability cache-time-out 60

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide auth-survivability cache-time-out | 40

Configuration mode

Page 41

blacklist-client

blacklist-client <MAC-address> no…

Description

This command allows you to manually blacklist the clients by using MAC addresses of the clients.

Syntax

Parameter Description

blacklist-client <MAC-address>

no…

Adds the MAC address of the client to the blacklist.

Removes the specified configuration parameter.

Usage Guidelines

Use this command to blacklist the MAC addresses of clients.

Example

The following command blacklists a W-IAP client:

(Instant Access Point)(config)# blacklist-client 01:23:45:67:89:AB

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

41 | blacklist-client Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 42

blacklist-time

blacklist-time <seconds>

Description

This command sets the duration in seconds for which the clients can be blacklisted due to an ACL rule trigger.

Syntax

Parameter Description Default

blacklist-time <seconds>

Sets the duration in seconds for blacklisting clients due to an ACL rule trigger.

3600

Usage Guidelines

Use this command to configure the duration in seconds for which the clients can be blacklisted when the blacklisting rule is triggered.

Examples

The following command configures the duration for blacklisting clients:

(Instant Access Point) (config) # blacklist-time 30

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide blacklist-time | 42

Configuration mode

Page 43

calea

encapsulation-type <gre> ip <IP-address> ip mtu <size> gre-type <type> no...

Description

This command creates a Communications Assistance for Law Enforcement Act (CALEA) profile to enable W-IAPs for Lawful Intercept (LI) compliance and CALEA integration.

Syntax

Command/Parameter Description Range Default

calea

encapsulation-type <gr e>

ip <IP-address>

ip mtu <size>

gre-type

no…

Enables calea configuration sub-mode for CALEA profile configuration.

Specifies the encapsulation type for Generic Routing Encapsulation (GRE) packets.

Configures the IP address of the CALEA server on a W-IAP.

Configures the Maximum Transmission Unit size to use.

Specifies GRE type. — 25944

Removes the configuration — —

— —

GRE GRE

— —

68—1500 1500

Usage Guidelines

Use this command to configure a W-IAP to support Lawful Intercept (LI). LI allows the Law Enforcement Agencies (LEA) to conduct an authorized electronic surveillance. Depending on the country of operation, the service providers (SPs) are required to support LI in their respective networks.

In the United States, SPs are required to ensure LI compliance based on CALEA specifications. LI compliance in the United States is specified by the CALEA.

For more information on configuring W-IAPs for CALEA integration, see

Point User Guide

Dell Networking W-Series Instant Access

Example

The following example configures a CALEA profile:

(Instant Access Point)(config)# calea (Instant Access Point)(calea)# ip 192.0.8.29 (Instant Access Point)(calea)# ip mtu 1500 (Instant Access Point)(calea)# encapsulation-type gre (Instant Access Point)(calea)# gre-type 25944 (Instant Access Point)(calea)# end (Instant Access Point)# commit apply

43 | calea Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 44

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.4

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and access rule configuration sub-mode.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide calea | 44

Page 45

cellular-uplink-profile

cellular-uplink-profile <profile>

4g-usb-type <4G-usb-type> modem-isp <modem_isp> modem-country <modem-country> usb-auth-type <usb_authentication_type> usb-dev <usb-dev> usb-dial <usb-dial> usb-init <usb-init> usb-modeswitch <usb-modeswitch> usb-passwd <usb-passwd> usb-tty <usb-tty> usb-type <usb-type> usb-user <usb-user> modem-isp <modem_isp> modem-country <modem-country> no…

Description

This command provisions the cellular (3G/4G) uplink profiles on a W-IAP. Contact your IT administrator or the manufacturer of your modem to obtain the parameter details for command execution.

Syntax

Parameter Description Range Default

cellular-uplink-profile <profi le>

4g-usb-type <4G-usb-type>

modem-isp <modem_isp>

modem-country <modem-country>

usb-auth-type <usb_ authentication_type>

usb-dev <usb-dev>

usb-dial <usb-dial>

usb-init <usb-init>

Configures a 3G or 4G cellular profile for a W-IAP.

Configures the driver type for the 4G modem.

Specifies the name of the ISP to connect.

Specifies the country for the deployment.

Specifies the authentication type for USB.

Specifies the device ID of the USB modem.

Specifies the parameter to dial the cell tower.

Specifies the parameter name to initialize the modem.

— —

ether-lte, pantech-lte, none

— —

PAP, CHAP PAP

— —

—

usb-passwd <usb-passwd>

45 | cellular-uplink-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Specifies the password for the account associated with the subscriber of the selected ISP.

— —

Page 46

Parameter Description Range Default

usb-modeswitch <usb-modeswitc h>

usb-type <usb-type>

usb-tty <usb-tty>

usb-user <usb-user>

no…

Specifies the parameter used to switch modem from storage mode to modem mode.

Configures the driver type for the 3G modem.

Specifies the modem tty port. — —

Specifies the username of subscriber of the selected ISP.

Removes the specified configuration parameter.

— —

acm,

airprime, hso,

option, pantech-3g, sierra-evdo,

sierra-

gsm,none

— —

—

Usage Guidelines

Use this command to configure a cellular uplink profile on a W-IAP and modem parameters 3G /4G uplink provisioning. Dell W-Instant supports the use of 3G/4G USB modems to provide Internet backhaul to an Instant network. The 3G/4G USB modems can be used to extend client connectivity to places where an Ethernet uplink cannot be configured. This enables the IAP-VPNs to automatically choose the available network in a specific region.

The3G and 4G LTE USB modems can be provisioned on W-IAP3WN/3WNP and W-IAP155/155P.

Types of Modems

Dell W-Instant supports the following three types of 3G modems:

l True Auto Detect— Modems of this type can be used only in one country and for a specific ISP. The parameters

are configured automatically and hence no configuration is necessary.

l Auto-detect + ISP/country— Modems of this type require the user to specify the Country and ISP. The same

modem is used for different ISPs with different parameters configured for each of them.

l No Auto-detect— Modems of this type are used only if they share the same Device-ID, Country, and ISP details.

You need to configure different parameters for each of them. These modems work with Dell W-Instant when the appropriate parameters are configured.

The following table lists the types of supported 3G modems:

Table 9:

Modem Type Supported 3G Modems

True Auto Detect l USBConnect 881 (Sierra 881U)

List of Supported 3G Modems

l Quicksilver (Globetrotter ICON 322) l UM100C (UTstarcom) l Icon 452 l Aircard 250U (Sierra)

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide cellular-uplink-profile | 46

Page 47

Table 9:

List of Supported 3G Modems

Modem Type Supported 3G Modems

l USB 598 (Sierra) l U300 (Franklin wireless) l U301 (Franklin wireless) l USB U760 for Virgin (Novatel) l USB U720 (Novatel/Qualcomm) l UM175 (Pantech) l UM150 (Pantech) l UMW190(Pantech) l SXC-1080 (Qualcomm) l Globetrotter ICON 225 l UMG181 l NTT DoCoMo L-05A (LG FOMA L05A) l NTT DoCoMo L-02A l ZTE WCDMA Technologies MSM (MF668?) l Fivespot (ZTE) l c-motech CNU-600 l ZTE AC2736 l SEC-8089 (EpiValley) l Nokia CS-10 l NTT DoCoMo L-08C (LG) l NTT DoCoMo L-02C (LG) l Novatel MC545 l Huawei E220 for Movistar in Spain l Huawei E180 for Movistar in Spain l ZTE-MF820 l Huawei E173s-1 l Sierra 320 l Longcheer WM72 l U600 (3G mode)

Auto-detect + ISP/country

l Sierra USB-306 (HK CLS/1010 (HK)) l Sierra 306/308 (Telstra (Aus)) l Sierra 503 PCIe (Telstra (Aus)) l Sierra 312 (Telstra (Aus)) l Aircard USB 308 (AT&T's Shockwave) l Compass 597(Sierra) (Sprint) l U597 (Sierra) (Verizon) l Tstick C597(Sierra) (Telecom(NZ)) l Ovation U727 (Novatel) (Sprint) l USB U727 (Novatel) (Verizon) l USB U760 (Novatel) (Sprint) l USB U760 (Novatel) (Verizon) l Novatel MiFi 2200 (Verizon Mifi 2200) l Huawei E272, E170, E220 (ATT) l Huawei E169, E180,E220,E272 (Vodafone/SmarTone (HK)) l Huawei E160 (O2(UK)) l Huawei E160 (SFR (France)) l Huawei E220 (NZ and JP) l Huawei E176G (Telstra (Aus)) l Huawei E1553, E176 (3/HUTCH (Aus)) l Huawei K4505 (Vodafone/SmarTone (HK)) l Huawei K4505 (Vodafone (UK)) l ZTE MF656 (Netcom (norway)) l ZTE MF636 (HK CSL/1010) l ZTE MF633/MF636 (Telstra (Aus))

47 | cellular-uplink-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 48

Table 9:

List of Supported 3G Modems

Modem Type Supported 3G Modems

l ZTE MF637 (Orange in Israel) l Huawei E180, E1692,E1762 (Optus (Aus)) l Huawei E1731 (Airtel-3G (India)) l Huawei E3765 (Vodafone (Aus)) l Huawei E3765 (T-Mobile (Germany) l Huawei E1552 (SingTel) l Huawei E1750 (T-Mobile (Germany)) l UGM 1831 (TMobile) l Huawei D33HW (EMOBILE(Japan)) l Huawei GD01 (EMOBILE(Japan)) l Huawei EC150 (Reliance NetConnect+ (India)) l KDDI DATA07(Huawei) (KDDI (Japan)) l Huawei E353 (China Unicom) l Huawei EC167 (China Telecom) l Huawei E367 (Vodafone (UK)) l Huawei E352s-5 (T-Mobile (Germany))

No auto-detect l Huawei D41HW

l ZTE AC2726

Table 10:

4G Supported Modem

Modem Type Supported 4G Modem

True Auto Detect l Pantech UML290

l Ether-lte

When UML290 runs in auto detect mode, the modem can switch from 4G network to 3G network or vice-versa based on the signal strength. To configure the UML290 for the 3G network only, manually set the USB type to pantech-3g. To configure the UML290 for the 4G network only, manually set the 4G USB type to pantech-lte.

Example

The following example configures a cellular uplink profile:

(Instant Access Point)(config) # cellular-uplink-profile (Instant Access Point)(cellular-uplink-profile)# 4g-usb-type pantech-lte (Instant Access Point)(cellular-uplink-profile)# modem-country India (Instant Access Point)(cellular-uplink-profile)# modem-isp example (Instant Access Point)(cellular-uplink-profile)# usb-auth-type PAP (Instant Access Point)(cellular-uplink-profile)# usb-user user1 (Instant Access Point)(cellular-uplink-profile)# usb-passwd user123 (Instant Access Point)(cellular-uplink-profile)# modem-country India (Instant Access Point)(cellular-uplink-profile)# end (Instant Access Point)# commit apply

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide cellular-uplink-profile | 48

Page 49

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and cellular uplink profile configuration submode

49 | cellular-uplink-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 50

clear

ap <ip-address> arp <ip-address> client <mac> datapath {session-all| statistics}

Description

This command clears various user-configured values from the running configuration on a W-IAP.

Syntax

Parameter Description

ap <ip-address>

arp <ip-address>

client <mac>

datapath {session-all| statis tics}

Clears all W-IAP related information.

Clears all ARP table information for a W-IAP.

Clears all information pertaining to a W-IAP client.

Clears all configuration information and statistics for datapath modules and user sessions.

Usage Guidelines

Use the clear command to clear the current information stored in the running configuration of a W-IAP.

Example

The following command clears all information related to a W-IAP:

(Instant Access Point)# clear ap 192.0.2.3

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide clear | 50

Privileged EXEC mode

Page 51

clear airgroup state statistics

Description

This command removes the AirGroup statistics.

Usage Guidelines

Use this command to remove AirGroup details from the W-IAP database.

Example

The following command clears AirGroup statistics:

(Instant Access Point)(config)# clear airgroup state statistics

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode

51 | clear airgroup state statistics Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 52

clear-cert

clear-cert {ca| server}

Description

This command clears client and server certificates from the W-IAP database.

Syntax

Parameter Description

server

Clears all certificates uploaded for the client system.

Clears all Server certificates.

Usage Guidelines

Use this command to clear the certificates from the W-IAP database.

Example

The following command shows an example for clearing server certificates:

(Instant Access Point)# clear-cert server

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide clear-cert | 52

Privileged EXEC mode

Page 53

clock set

clock set <year> <month> <day> <time>

Description

This command sets the date and time on the W-IAP system clock.

Syntax

Parameter Description Range

<year>

<month>

<day>

<time>

Sets the year. Requires all 4 digits. Numeric

Sets the month. 1-12

Sets the day. 1-31

Sets the time. Specify hours, minutes, and seconds separated by spaces.

Numeric

Usage Guidelines

You can configure the year, month, day, and time. Specify the time using a 24-hour clock with hours, minutes and seconds separated by spaces.

Example

The following example sets the clock to 21 May 2013, 1:03:52 AM:

(Instant Access Point)# clock set 2013 5 21 1 3 52

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

53 | clock set Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Privileged EXEC mode

Page 54

clock summer-time

clock summer-time <timezone> recurring <start-week> <start-day> <start-month> <start-hour> <ew eek> <eday> <emonth> <ehour> no…

Description

This command configures daylight saving for the time zones that support daylight saving time.

Syntax

Parameter Description Range

clock summer-time <timezone>

recurring

<start-week>

<start-day>

<start-month>

<start-hour>

<eweek>

<eday>

Configures Daylight Saving time. Timezones

that support daylight saving configuration

Indicates the recurrences. —

Indicates the week from which the daylight saving configuration is effective.

Indicates the day from which the daylight saving configuration applies.

Indicates the month from which the daylight saving configuration applies.

Indicates the hour from which the daylight saving configuration applies.

Indicates the week in which the daylight saving configuration ends. —

Indicates the day on which daylight saving configuration ends. —

Indicates the month in which daylight saving configuration ends. —

—

1-24

<ehour>

no…

Indicates the hour at which daylight saving configuration ends. 1-24

Removes the configuration —

Usage Guidelines

Use this command to configure daylight saving for the timezones that support daylight saving. When enabled, the daylight saving time ensures that the W-IAPs reflect the seasonal time changes in the region they serve.

Example

The following example configures daylight saving for a timezone:

(Instant Access Point)(config)# clock summer-time PST recurring 7 10 March 9PM 38 10 October 9 PM (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide clock summer-time | 54

Page 55

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode

55 | clock summer-time DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 56

clock timezone

clock timezone <name> <hour-offset> <minute-offset> no…

Description

This command sets the timezone on a W-IAP.

Syntax

Parameter Description Range

clock timezone <name>

<hour-offset>

<minute-offset>

no…

Configures the required timezone. All supported

Specifies the hours offset from the Universal Time Clock (UTC).

Removes the timezone configuration. —

Usage Guidelines

Use this command to set the timezone on a W-IAP.

Example

The following example configures the PST timezone:

(Instant Access Point) (config)# clock timezone PST -8 0 (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

timezones

—

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide clocktimezone | 56

Configuration mode

Page 57

commit

commit {apply [no-save]| revert}

Description

This command allows you to commit configuration changes performed during a user session. You can also revert the changes that are already committed.

Syntax

Parameter Description

apply

no-save

revert

Applies and saves the W-IAP configuration changes.

Applies the configuration changes to the cluster, but does not save the configuration. To save the configuration, run the write memory or commit apply command.

Reverts the changes committed to the current configuration of a W-IAP.

Usage Guidelines

Each command processed by the Virtual Controller is applied on all the slave W-IAPs in a cluster. The changes configured in a CLI session are saved in the CLI context. The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session: therefore, Dell recommends that you configure fewer changes at a time and apply the changes at regular intervals.

To apply and save the configuration changes, use the commit apply command. To apply the configuration changes without saving the configuration, use the commit apply no-save command.

Example

The following command allows you to commit the configuration changes:

(Instant Access Point) # commit apply

The following command reverts the already committed changes.

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.3.1.1-4.0

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is modified.

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

57 | commit DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Privileged EXEC mode.

Page 58

configure terminal

Description

This command allows you to enter configuration commands.

Syntax

No parameters.

Usage Guidelines

Upon entering this command, the enable mode prompt changes to:

(Instant Access Point)(config)# To return to EXEC mode, enter Ctrl-Z, end or exit.

Example

The following command allows you to enter configuration commands:

(Instant Access Point) # configure terminal

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide configure terminal | 58

Page 59

content-filtering

content-filtering no…

Description

This command enables content filtering feature. When content filtering is enabled on an SSID, all DNS requests to non-corporate domains on this wireless network are sent to OpenDNS.

Syntax

Command/Parameter Description

content-filtering

Enables content filtering.

Removes the configuration.

Usage Guidelines

Use this command to enable content filter. With content filter feature enabled, you can:

l Prevent known malware hosts from accessing your wireless network.

l Improve employee productivity by limiting access to certain Websites.

l Reduce bandwidth consumption significantly.

You can enable content filtering on an SSID. When enabled, all DNS requests to non-corporate domains on this SSID are sent to the open DNS server.

Example

The following example enables content filtering:

(Instant Access Point)# content-filtering (Instant Access Point)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

59 | content-filtering DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 60

convert-aos-ap

convert-aos-ap <mode> <controller-IP>

Description

This command allows you to provision a W-IAP as a Campus AP or Remote AP in a controller-based network, or as a standalone AP.

Syntax

Parameter Description Range

<mode>

<controller-IP>

Provisions the W-IAP as remote AP or campus AP in a controller-based network or as a standalone AP.

Allows you to specify the IP address of the Controller to which the Remote AP or Campus AP will be connected.

RAP, CAP, StandaloneAP

—

Usage Guidelines

Before converting a W-IAP, ensure that both the W-IAP and controller are configured to operate in the same regulatory domain. A W-IAP can be converted to a Campus AP and Remote AP only if the controller is running Dell W-Instant 6.1.4 or later.

Example

The following command allows you to convert a W-IAP to a remote AP:

(Instant Access Point)# convert-aos-ap RAP 192.0.2.5

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide convert-aos-ap | 60

Privileged EXEC mode.

Page 61

copy

copy {config tftp <ip-address> <filename>|core-file tftp <ip-address>| flash tftp <ip-address> <filename>| tftp <ip-address> <filename> {cpserver cert <password> format {p12|pem} | portal logo | system {1xca [format {der|pem}]|1xcert <passsword>[format {p12|pem}]|config|flash}}

Description

This command copies files to and from the W-IAP.

Syntax

Parameter Description

config Copies a configuration file to the TFTP server.

core-file Copies a core file to the TFTP server.

flash Copies a file from flash to the TFTP server or to flash from a TFTP server.

tftp Copies files and certificates to the W-IAP database from a TFTP server.

<ip-address> Copies files to the specified TFTP server IP address.

<file-name> Indicates the name of the file to be copied.

cpserver

cert <password>

portal

logo

system Copies the file to the system partition.

1xca Copies the CA certificate used for 802.1X authentication from the TFTP server.

der

pem

1xcert Copies the server certificate used for 802.1X authentication from the TFTP

<passsword> Indicates the password for certificate authentication.

p12

pem

Copies internal Captive portal server certificate.

Copies customized logo for the internal Captive portal server.

Indicates the system partition file extensions.

server.

Indicates the certificate file extensions.

Usage Guidelines

Use this command to save backup copies of the configuration file to a TFTP server, or to load a certificate file and customized logo from a TFTP server to the W-IAP database.

Example

The following example copies a configuration file to the TFTP server:

(Instant Access Point)# copy config tftp 10.0.0.1 filename.cfg

61 | copy DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 62

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.3.1.1-4.0

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command was modified.

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide copy | 62

Page 63

deny-inter-user-bridging

deny-inter-user-bridging no…

Description

This command disables bridging traffic between two clients of a W-IAP on the same VLAN. Bridging traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

Parameter Description

deny-inter-user-bridging

no…

Prevents the inter-user bridging.

Removes the configuration.

Usage Guidelines

Use this command if you have security and traffic management policies defined for upstream devices.

Example

The following command disables inter-user bridging:

(Instant Access Point)(config)# deny-inter-user-bridging (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

63 | deny-inter-user-bridging Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 64

deny-local-routing

deny-local-routing no…

Description

This command disables routing traffic between two clients of a W-IAP on different VLANs. Routing traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

Parameter Description

deny-local-routing

no…

Disables local routing of traffic.

Removes the configuration.

Usage Guidelines

Use this command to prevent the local routing of traffic if you have security and traffic management policies defined for upstream devices.

Example

The following command disables local routing:

(Instant Access Point)(config)# deny-local-routing (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide deny-local-routing | 64

Configuration mode

Page 65

device-id

device-id <device>

Description

This command assigns an ID for the AP device.

Syntax

Parameter Description

device-id <device>

Configures an ID for the W-IAP device.

Usage Guidelines

Use this command to configure a device identification.

Example

The following example configures a device ID:

(Instant Access Point)(config)# device-ID Device1 (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

65 | device-id Dell NetworkingW-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 66

disconnect-user

Description

This command disconnects the clients from a W-IAP.

Example

The following example shows the output of disconnect-user command:

(Instant Access Point)# disconnect-user

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide disconnect-user | 66

Page 67

download-cert

download-cert {ca|cp|server} <URL>

Description

This command allows you to download the client, authentication server, and Captive portal server certificates from an FTP or TFTP server, or by using an HTTP URL.

Syntax

Parameter Description

server

<url>

Downloads client certificates.

Downloads Captive portal server certificates.

Downloads Server certificates.

Allows you to specify the FTP, TFTP, or HTTP URL.

Usage Guidelines

Use this command to download certificates.

Example

The following command shows an example for downloading CAclient certificates:

(Instant Access Point)# download-cert ca ftp://192.0.2.7

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.3.1.1-4.0

This command is modified.

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

67 | download-cert Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Privileged EXEC mode

Page 68

dynamic-cpu-mgmt

dynamic-cpu-mgmt {auto| disable| enable}

Description

This command enables or disables the dynamic CPU management feature, to manage resources across different functions performed by a W-IAP.

Syntax

Parameter Description

auto

disable

enable

Configures the W-IAP to automatically enable or disable CPU management feature during run-time. When configured, the W-IAP determines the need for enabling or disabling CPU management, based on the real-time load calculations taking into account all different functions that the CPU needs to perform.

The aut o option is the default and recommended setting.

Disables CPU management on all APs, typically for small networks. This setting protects the user experience.

Enables the CPU management feature. When configured, the client and network management functions are protected. This setting helps in large networks with a high client density.

Usage Guidelines

Use this command to enable or disable resource management across different functions performed by a W-IAP.

Example

The following example enables the automatic enabling or disabling of CPU management:

(Instant Access Point)(config)# dynamic-cpu-mgmt auto (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant 6.3.1.1-4.0 This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide dynamic-cpu-mgmt | 68

Configuration mode

Page 69

dynamic-radius-proxy

dynamic-radius-proxy no…

Description

This command enables the use of IP Address of the Virtual Controller for communication with external RADIUS servers.

Syntax

Command/Parameter Description

dynamic-radius-proxy

no…

Enables dynamic RADIUS proxy feature to allow the Virtual Controller network to use the IPaddress of the Virtual Controller when communicating with the external RADIUS servers.

Removes the configuration.

Usage Guidelines

Ensure that you set the Virtual Controller IP address as a NAS client in the RADIUS server when Dynamic RADIUS proxy is enabled.

Example

The following example enables the dynamic RADIUS proxy feature:

(Instant Access Point)(config)# dynamic-radius-proxy (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

69 | dynamic-radius-proxy Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 70

enet-vlan

enet-vlan <vlan-ID> no…

Description

This command configures a VLAN for Ethernet connections.

Syntax

Parameter Description Range

enet-vlan <vlan-ID>

no…

Configures VLAN for Ethernet ports and wired profiles 0–4093

Removes the configuration —

Usage Guidelines

Use this command to configure VLAN for the Ethernet connections.

Example

The following example configures VLAN for the Ethernet ports:

(Instant Access Point)(config)# enet-vlan 200 (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide enet-vlan | 70

Configuration mode

Page 71

enet0-bridging

Description

This command allows you to use all ports on the APs as downlink ports.

Usage Guidelines

Use this command for W-IAP models that have only one Ethernet port enabled. When Eth0 bridging is configured, ensure that the uplink for each W-IAP is mesh link, Wi-Fi, or 3G/4G.

Example

The following command enables Eth0 bridging:

(Instant Access Point)# enet0-bridging

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode

71 | enet0-bridging Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 72

enet0-port-profile

enet0-port-profile <profile>

Description

This command assigns a wired profile to the Ethernet 0 port on a W-IAP.

Syntax

Parameter Description

enet0-port-profile <profile>

Assigns a wired profile to the Ethernet 0 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 0 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 0 port:

(Instant Access Point)(config)# enet0-port-profile <name> (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide enet0-port-profile | 72

Configuration mode

Page 73

enet1-port-profile

enet1-port-profile <profile>

Description

This command assigns a wired profile to the Ethernet 1 port on a W-IAP.

Syntax

Parameter Description

enet1-port-profile <profile>

Assigns a wired profile to the Ethernet 1 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 1 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 1 port:

(Instant Access Point)(config)# enet1-port-profile <name> (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

73 | enet1-port-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 74

enet2-port-profile

enet2-port-profile <profile>

Description

This command assigns a wired profile to the Ethernet 2 port on a W-IAP.

Syntax

Parameter Description

enet2-port-profile <profile>

Assigns a wired profile to the Ethernet 2 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 2 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 2 port:

(Instant Access Point)(config)# enet2-port-profile <name> (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide enet2-port-profile | 74

Configuration mode

Page 75

enet3-port-profile

enet3-port-profile <profile>

Description

This command assigns a wired profile to the Ethernet 3 port on a W-IAP.

Syntax

Parameter Description

enet3-port-profile <profile>

Assigns a wired profile to the Ethernet 3 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 3 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 3 port:

(Instant Access Point)(config)# enet3-port-profile <name> (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

75 | enet3-port-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 76

enet4-port-profile

enet4-port-profile <profile>

Description

This command assigns a wired profile to the Ethernet 4 port on a W-IAP.

Syntax

Parameter Description

enet4-port-profile <profile>

Assigns a wired profile to the Ethernet 4 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 4 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 4 port:

(Instant Access Point)(config)# enet4-port-profile <name> (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide enet4-port-profile | 76

Configuration mode

Page 77

extended-ssid

extended-ssid no…

Description

This command enables the configuration of additional WLAN SSIDs.

Syntax

Command/Parameter Description

extended-ssid

no…

Enables the users to configure additional SSIDs.

Removes the configuration.

Usage Guidelines

Use this command to create additional SSIDs. By default, you can create up to six WLAN SSIDs. With the Extended SSID option enabled, you can create up to 16 WLANs. The following W-IAPs support 16 WLANs:

l W-IAP3WNP

l W-IAP93

l W-IAP134

l W-IAP135

The number of SSIDs that become active on each W-IAP depends on the W-IAP platform.

Example

The following example enables the configuration of extended SSIDs:

(Instant Access Point)(config)# extended-ssid (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

77 | extended-ssid DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 78

factory-ssid-enable

Description

This command resets the W-IAP to use the factory configuration.

Syntax

Parameter Description

factory-ssid-enable

Enables factory SSID configuration.

Usage Guidelines

Use this command to reset a W-IAP to use the factory default SSID.

Example

The following example enables factory default configuration:

(Instant Access Point)(config)# factory-ssid-enable (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide factory-ssid-enable | 78

Configuration mode

Page 79

firewall-external-enforcement

firewall-external-enforcement pan

disable enable ip <address> port <port> user <name> <password> no…

Description

This command configures external firewall details such as Palo Alto Networks(PAN) firewall to enable integration with the W-IAP.

Syntax

Parameter Description Range Default

firewall-external-enforcement pan

disable

enable

ip <address>

port <port>

user <name> <password>

no…

PAN firewall configuration submode.

Disables PAN firewall. — —

Enables PANfirewall. — —

Configures PAN firewall IP address on the W-IAP

Configures a port for the PAN firewall

Configures administrator user credentials of PAN firewall on a W-IAP.

Removes the specified configuration parameter.

— —

1—65535 443

— —

Usage Guidelines

Use this command to enable external firewall integration with W-IAP. In Instant 6.3.1.1-4.0 release, W-IAPs can be integrated with external firewall such as PAN firewall. The PAN firewall is based on user ID, which provides many methods for connecting to sources of identity information and associating them with firewall policy rules. The functionality provided by the PAN firewall based on user ID requires the collection of information from the network. W-IAP maintains the network (such as mapping IP address) and user information for those clients in the network and provides the required information for the user ID feature on PAN firewall.

To enable W-IAP integration with PAN firewall, a global profile configured on W-IAP with PAN firewall information such as IP address, port, user name, password, firewall enabled or disabled status.

Example

The following example configures PAN firewall information on a W-IAP:

(Instant Access Point)(config)# firewall-external-enforcement pan (Instant Access Point)(firewall-external-enforcement pan)# enable (Instant Access Point)(firewall-external-enforcement pan)# ip 192.0.2.11 (Instant Access Point)(firewall-external-enforcement pan)# port 443

79 | firewall-external-enforcement DellNetwor king W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 80

(Instant Access Point)(firewall-external-enforcement pan)# user admin1 admin1 (Instant Access Point)(firewall-external-enforcement pan)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.3.1.1-4.0

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and firewall-external-enforcement sub-mode.

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide firewall-external-enforcement | 80

Page 81

g-channel

g-channel <channel> <tx-power>

Description

This command configures 2.4 GHz radio channels for a specific W-IAP.

Syntax

Parameter Description Range

<tx-power>

Configures the specified 2.4 GHz channel. The valid channels for a band are

determined by the AP regulatory domain.

Configures the specified transmission power values.

0-127 dBm

Usage Guidelines

Use this command to configure radio channels for the 2.4 GHz band for a specific W-IAP.

Example

The following example configures the 2.4 GHz radio channel:

(Instant Access Point)# g-channel 11 18

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

81 | g-channel Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Privileged EXEC mode

Page 82

g-external-antenna

g-external-antenna <gain>

Description

This command configures external antenna connectors for a W-IAP.

Syntax

Parameter Description Range Default

<gain>

Configures the antenna gain. You can configure gain value in dBi for the following types of antenna:

l Dipole/Omni l Panel l Sector

Diploe/Omni - 6

Panel -12

Sector - 12

—

Usage Guidelines

EIRP and Antenna Gain

The following formula can be used to calculate the EIRP limit related RF power based on selected antennas (antenna gain) and feeder (Coaxial Cable loss):

EIRP = Tx RF Power (dBm)+GA (dB) - FL (dB)

The following table describes this formula:

Install Guide

that is shipped along with the AP device.

Table 11:

Formula Variable Definitions

Formula Element Description

EIRP Limit specific for each country of deployment

Tx RF Power RF power measured at RF connector of the unit

GA Antenna gain

FL Feeder loss

For information on antenna gain recommended by the manufacturer, see dell.com/support.

Example

The following example configures external antenna connectors for the W-IAP with the 2.4 GHz radio band.

(Instant Access Point)# g-external-antenna 12

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide g-external-antenna | 82

Page 83

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode.

83 | g-external-antenna Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 84

gre per-ap-tunnel

gre per-ap-tunnel no…

Description

This command configures a generic routing encapsulation (GRE) tunnel from each W-IAP to the VPN/GRE Endpoint rather than the tunnels created just from the Virtual Controller.

Syntax

Parameter Description

gre per-ap-tunnel

no…

Creates a GRE tunnel from the W-IAP to the VPN/GRE endpoint.

Removes the configuration.

Usage Guidelines

Use this command to allow the traffic to be sent to the corporate network through a Layer-2 GRE tunnel from the WIAP itself. When a GRE tunnel per W-IAP is created, the traffic need not be forwarded through the Virtual Controller.

Example

The following example creates a GRE tunnel for the W-IAP:

(Instant Access Point)(config)# gre per-ap-tunnel (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide gre per-ap-tunnel | 84

Configuration mode

Page 85

gre primary

gre primary <name> no…

Description

This command configures a host for the primary VPN/GRE endpoint.

Syntax

Parameter Description

gre primary <name>

no…

Specifies the fully qualified domain name (FQDN) of the primary host.

Removes the configuration.

Usage Guidelines

Use this command to configure the primary VPN/GRE host.

Example

The following example configures a GRE primary host:

(Instant Access Point)(config)# gre primary <name> (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

85 | gre primary Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode

Page 86

gre type

gre type <type>

Description

This command configures a GREprotocol number as GRE type.

Syntax

Parameter Description Range Default

gre type <type>

Configures the protocol number or IP address for GRE type

16-bit protocol number

Usage Guidelines

Use this command to specify GRE type. The 16-bit protocol number uniquely identifies a Layer-2 tunnel. The WIAPs or controllers at both endpoints of the tunnel must be configured with the same protocol number.

Example

The following example configures the GRE type:

(Instant Access Point)(config)# gre type 0 (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide gre type | 86

Configuration mode

Page 87

help

Description

This command displays help for the CLI.

Usage Guidelines

This command displays keyboard editing commands that allow you to make corrections or changes to the command without retyping.

You can also enter the question mark (?) to get various types of command help:

l When typed at the beginning of a line, the question mark lists all commands available in the current mode.

l When typed at the end of a command or abbreviation, the question mark lists possible commands that match.

l When typed in place of a parameter, the question mark lists available options.

Example

The following example shows the output of the help command.

HELP: Special keys:

BS .... delete previous character

Ctrl-A .... go to beginning of line

Ctrl-E .... go to end of line

Ctrl-F .... go forward one character

Ctrl-B .... go backward one character

Ctrl-D .... delete current character

Ctrl-U, X .. delete to beginning of line

Ctrl-K .... delete to end of line

Ctrl-W .... delete previous word

Ctrl-T .... transpose previous character

Ctrl-P .... go to previous line in history buffer

Ctrl-N .... go to next line in history buffer

Ctrl-Z .... return to root command prompt

Tab .... command-line completion

exit .... go to next lower command prompt

? .... list choices

Help may be requested at any point in a command by entering a question mark '?'. If nothing matches, the help list will be empty and you must back up until entering a '?' shows the available options. Two styles of help are provided:

1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each possible argument.

2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show w?'.)

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

87 | help Dell Networking W-Ser ies Instant 6.3.1.1-4.0 | CLI Reference Guide

This command is introduced.

Page 88

Command Information

W-IAP Platform Command Mode

All platforms

Privileged EXEC mode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide help | 88

Page 89

hostname

hostname <name>

Description

This command changes the hostname of the Virtual Controller.

Syntax

Parameter Description

<name>

Configures a hostname for the Virtual Controller.

Usage Guidelines

The hostname is used as the default prompt. You can use any alphanumeric character, punctuation, or symbol characters. When spaces, plus symbols (+), question marks (?), or asterisks (*) are used, enclose the text in quotes.

Example

The following example configures host name for a W-IAP.

(Instant Access Point)# hostname IAP1

Command History

Version Description

Dell Networking W-Series Instant Access Point

6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

89 | hostname Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Privileged EXEC mode

Page 90

hotspot anqp-3gpp-profile

hotspot anqp-3gpp-profile <profile-name>

3gpp-plmn1…3gpp-plmn6 <PLMN-ID> enable no…

Description

This command configures a 3rd Generation Partnership Project (3GPP) Cellular Network for hotspots that have roaming relationships with cellular operators.

Syntax

Parameter Description

hotspot anqp-3gpp-profile <profile-name>

3gpp-plmn1…3gpp-plmn6 <PLMN-ID>

enable

no…

Creates a 3GPP profile.

Configures the Public Land Mobile Networks (PLMN) value of the network. The PLMN value can be specified for first, second, third, fourth, fifth, and sixth highest priority network. The PLMN ID consists of a 12-bit Mobile Country Code (MCC) and the 12-bit Mobile Network Code (MNC).

Activates the configuration profile.

Removes the configuration

Usage Guidelines

Use this command to configure a 3GPP Cellular Network hotspot profile that defines the ANQP information element (IE) for 3G Cellular Network for hotspots. The IE defined in this profile will be sent in a Generic Advertisement Service (GAS) query response from a W-IAP in a cellular network hotspot. The 3GPP Mobile Country Code (MCC) and the 12-bit Mobile Network Code data in the IE can help the client select a 3GPP network when associated with a hotspot profile and enabled on a WLAN SSID profile.

Example

The following command configures a 3GPP profile:

(Instant Access Point)(config)# hotspot anqp-3gpp-profile cellcorp1 (Instant Access Point)(3gpp "cellcorp1")# 3gpp-plmn1 310026 (Instant Access Point)(3gpp "cellcorp1")# 3gpp_plmn2 208000 (Instant Access Point)(3gpp "cellcorp1")# 3gpp_plmn3 208001 (Instant Access Point)(3gpp "cellcorp1")# enable (Instant Access Point)(3gpp "cellcorp1")# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide hotspot anqp-3gpp-profile | 90

This command is introduced.

Page 91

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and the 3GPP hotspot profile configuration sub-mode

91 | hotspot anqp-3gpp-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 92

hotspot anqp-domain-name-profile

hotspot anqp-domain-name-profile <profile-name>

domain-name <domain-name> enable no…

Description

This command defines the domain name to be sent in an Access Network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description

hotspot anqp-domain-name-profile <profile-name>

domain-name <domain-name>

enable

no…

Creates a domain profile.

Configures a domain name of the hotspot operator.

Enables the configuration profile.

Removes the existing configuration

Usage Guidelines

Use this command to configure a domain name in the ANQP Domain Name profile. If a client uses the Generic Advertisement Service (GAS) to post an ANQP query to a W-IAP, the W-IAP will return an ANQP Information Element with the domain name when this profile is associated with a hotspot profile and enabled on a WLAN SSID profile.

Example

The following command defines a domain name for the ANQP domain name profile:

(Instant Access Point)(config)# hotspot anqp-domain-name-profile domain1 (Instant Access Point)(domain-name "domain1")# domain-name example.com (Instant Access Point)(domain-name "domain1")# enable (Instant Access Point)(domain-name "domain1")# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide hotspot anqp-domain-name-profile | 92

Configuration mode and the ANQP domain profile configuration sub-mode

Page 93

hotspot anqp-ip-addr-avail-profile

hotspot anqp-ip-addr-avail-profile <profile-name>

enable ipv4-addr-avail ipv6-addr-avail no…

Description

This command defines the available IP address types to be sent in an Access network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description

hotspot anqp-ip-addr-avail-profile <profilename>

enable

ipv4-addr-avail

ipv6-addr-avail

no…

Creates an ANQP IP Address availability profile.

Enables the IP address availability profile.

Indicates the availability of an IPv4 network.

Indicates the availability of an IPv6 network.

Removes the existing configuration.

Usage Guidelines

Use this command to configure the IP Address availability information and IP address types which could be allocated to the clients after they associate to the hotspot W-IAP.

Example

The following command configures an AP using this profile to advertise a public IPv4 network.

(Instant Access Point)(config)# hotspot anqp-ip-addr-avail-profile default (Instant Access Point)(IP-addr-avail "default")# ipv4-addr-avail (Instant Access Point)(IP-addr-avail "default")# ipv6-addr-avail (Instant Access Point)(IP-addr-avail "default")# enable (Instant Access Point)(IP-addr-avail "default")# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

93 | hotspot anqp-ip-addr-avail-profile DellNetworking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configuration mode and the ANQP IP address availability profile configuration sub-mode

Page 94

hotspot anqp-nai-realm-profile

hotspot anqp-nai-realm-profile <profile-name>

enable nai-home-realm nai-realm-auth-id-1 <auth-ID> nai-realm-auth-id-2 <auth-ID> nai-realm-auth-value-1 <auth-value> nai-realm-auth-value-2 <auth-value> nai-realm-eap-method <eap-method> nai-realm-encoding <encoding> nai-realm-name <name> no…

Description

This command defines a Network Access Identifier (NAI) realm information that can be sent as an Access network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description Range

hotspot anqp-nairealm-profile <profile-name>

enable

nai-home-realm

nai-realm-auth-id-1 nai-realm-auth-id-2

<auth-id>

Configures a NAI realm hotspot profile. —

Enables the NAI realm profile.

Sets the realm in this profile as the NAI Home Realm. —

Configures the NAI realm authentication ID. Use the nai-realm-auth-id-1 command to send the one of the following authentication methods for the primary NAI realm ID. Use the nai-realm-auth-id-2 command to send the one of the following authentication methods for the secondary NAI realm ID.

Configures any of the following types of authentication ID:

l credential— Uses credential authentication. l eap-inner-auth—Uses EAP inner authentication type. l exp-inner-eap— Uses the expanded inner EAP

authentication method.

l expanded-eap—Uses the expanded EAP authentication

method.

l non-eap-inner-auth—Uses non-EAP inner authentication

type.

l reserved—Uses the reserved authentication method.

—

credential eap-innerauth exp-inner-auth expanded-eap non-eapinner-auth reserved

nai-realm-auth-value1 nai-realm-auth-value2

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide hotspot anqp-nai-realm-profile | 94

Configures a value for NAI realm authentication. Use the nairealm-auth-value-1 command to select an authentication value for the authentication method specified by nai-realmauth-id-1. Use thenai-realm-auth-value-2 command to select the authentication value for the authentication method specified bynai-realm-auth-id-2.

—

Page 95

Parameter Description Range

<auth-value>

Configures any of following types of authentication values for the specified <auth-id>:

l For credential <auth-ID>, specify the following values:

l sim l usim l nfc-secure l hw-token l softoken l certificate l uname-passward l none l reserved l vendor-specific

l For eap-inner-auth <aut- ID>, specify the following values:

l reserved l pap l chap l mschap l mschapv2

l For exp-inner-eap <auth-ID>, specify exp-inner-eap as the

authentication value.

l For expanded-eap<auth-ID>, specify expanded-eap as the

authentication value

l For non-eap-inner-auth<auth-ID> specify any of the

following values:

sim, usim. nfcsecure, hwtoken, softoken, certificate, unamepassward, none, reserved, vendorspecific reserved, pap chap, mschap, mschapv2, exp-inner-eap, expandedeap, reserved

nai-realm-eap-method

<eap-method>

l reserved l pap l chap l mschap l mschapv2

Configures an EAP method for NAI realm.

Configures any of the following EAP methods:

l crypto-card— Crypto card authentication l eap-aka—EAP for UMTS Authentication and Key

Agreement

l eap-sim—EAP for GSM Subscriber Identity Modules l eap-tls—EAP-Transport Layer Security l eap-ttls—EAP-Tunneled Transport Layer Security l generic-token-card—EAP Generic Token Card (EAP-GTC) l identity— EAP Identity type l notification—The hotspot realm uses EAP Notification

messages for authentication.

l one-time-password—Authentication with a single-use

password

l peap—Protected Extensible Authentication Protocol l peapmschapv2— Protected Extensible Authentication

Protocol with Microsoft Challenge Handshake Authentication Protocol version 2

crypto-card, eap-aka, eapsim, eap-tls, eap-ttls, generic-tokencard, identity notification, one-timepassword, peap, peapmschapv 2

nai-realm-encoding <encoding>

95 | hotspot anqp-nai-r ealm-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Configures a UTF-8 or rfc4282 formatted character string for NAI realm encoding.

rfc4282, utf8

Page 96

Parameter Description Range

nai-realm-name <nai-realm-name>

no…

Configures a name for the NAI realm. The realm name is often the domain name of the service provider.

Removes any existing configuration.

—

Usage Guidelines

Use this command to configure an NAI Realm profile that identifies and describes a NAI realm accessible to the WIAP, and the method used for NAI realm authentication. The settings configured in this profile determine the NAI realm elements that are included as part of a GAS Response frame.

Example

The following example creates an NAI realm profile:

(Instant Access Point)(config)# hotspot anqp-nai-realm-profile home (Instant Access Point)(nai-realm "home")# nai-realm-name home-hotspot.com (Instant Access Point)(nai-realm "home")# nai-realm-encoding utf8 (Instant Access Point)(nai-realm "home")# nai-realm-eap-method eap-sim (Instant Access Point)(nai-realm "home")# nai-realm-auth-id-1 non-eap-inner-auth (Instant Access Point)(nai-realm "home")# nai-realm-auth-value-1 mschapv2 (Instant Access Point)(nai-realm "home")# nai-home-realm (Instant Access Point)(nai-realm "home")# enable (Instant Access Point)(nai-realm "home")# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and the NAI realm profile configuration submode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide hotspot anqp-nai-realm-profile | 96

Page 97

hotspot anqp-nwk-auth-profile

hotspot anqp-nwk-auth-profile <profile-name>

enable nwk-auth-type <auth-type> url <url> no…

Description

This command configures an ANQP network authentication profile to define authentication type being used by the hotspot network.

Syntax

Parameter Description Range

hotspot anqp-nwk-auth-profile <profile-name>

enable

nwk-auth-type

<auth-type>

Configures an ANQP network authentication profile.

Enables the network authentication profile. —

Defines the network Authentication type being used by the hotspot network.

Allows you to specify any of the following values:

l accept-term-and-cond—When configured, the

network requires the user to accept terms and

conditions. NOTE: This option requires you to specify a redirection URL string as an IP address, FQDN or URL.

l online-enrollment—When configured, the

network supports the online enrollment.

l http-redirect—When configured, additional

information on the network is provided

through HTTP/HTTPS redirection.

l dns-redirect—When configured, additional

information on the network is provided

through DNS redirection. NOTE: This option requires you to specify a redirection URL string as an IP address, FQDN or URL.

—

accept-termand-cond, onlineenrollment, http-redirect, dns-redirect

url

no…

Configures URL, IP address, or FQDN used by the hotspot network for the accept-term-andcond or dns-redirect network authentication types.

Removes any existing configuration.

—

Usage Guidelines

When the asra option is enabled in the hotspot profile associated with a WLANSSID, the settings configured for the network authentication profile are sent in the GAS response to the client.

Example

The following command configures a network authentication profile for DNS redirection.

(Instant Access Point)(config)# hotspot anqp-nwk-auth-profile default

97 | hotspot anqp-nwk-auth-profile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

Page 98

(Instant Access Point)(network-auth "default")# nwk-auth-type dns-redirection (Instant Access Point)(network-auth "default")# url http://www.example.com (Instant Access Point)(network-auth "default")# enable (Instant Access Point)(network-auth "default")# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

This command is introduced.

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and the ANQP network authentication profile configuration sub-mode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide hotspot anqp-nwk-auth-profile | 98

Page 99

hotspot anqp-roam-cons-profile

hotspot anqp-roam-cons-profile <profile-name>

enable roam-cons-oi <roam-cons-oi> roam-cons-oi-len <roam-cons-oi-len> no…

Description

This command configures the Roaming Consortium Organization Identifier (OI) information to be sent in an Access network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description Range

hotspot anqp-roam-cons-profile <profile-name>

enable

roam-cons-oi <roam-cons-oi>

roam-cons-oi-len <roam-cons-oi-len>

no…

Creates roaming consortium profile.

Enables the roaming consortium profile. —

Sends the specified roaming consortium OI in a GAS query response. The OI must be a hexadecimal number 3-5 octets in length.

Indicates the length of the OI. The value of the roam-cons-oi-len parameter must equal upon the number of octets of the roam-cons-oi field.

l 0: 0 Octets in the OI (Null) l 3: OI length is 24-bit (3 Octets) l 5: OI length is 36-bit (5 Octets)

Removes any existing configuration.

—

Hexadecimal number 3-5 octets in length

—

Usage Guidelines

Use this command to configure the roaming consortium OIs assigned to service providers when they register with the IEEE registration authority. The Roaming Consortium Information Elements (IEs) contain information about the network and service provider, whose security credentials can be used to authenticate with the W-IAP transmitting this IE.

Example

The following command defines the roaming consortium OI and OI length in the ANQP roaming consortium profile:

(Instant Access Point)(config)# hotspot anqp-roam-cons-profile profile1 (Instant Access Point)(roaming-consortium "profile1")# roam-cons-oi 506F9A (Instant Access Point)(roaming-consortium "profile1")# roam-cons-oi-len 3 (Instant Access Point)(roaming-consortium "profile1")# enable (Instant Access Point)(roaming-consortium "profile1")# end (Instant Access Point)# commit apply

Command History

Version Description

Dell Networking W-Series Instant Access Point 6.2.1.0-3.3

99 | hotspot anqp-roam-cons-pr ofile Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide

This command is introduced.

Page 100

Command Information

W-IAP Platform Command Mode

All platforms

Configuration mode and the ANQP roaming consortium profile configuration sub-mode

Dell Networking W-Series Instant 6.3.1.1-4.0 | CLI Reference Guide hotspot anqp-roam-cons-profile | 100

Dell W-IAP114, W-IAP224, W-IAP115, W-IAP225 Reference Guide

Specifications and Main Features

Frequently Asked Questions

User Manual

About this Guide

Intended Audience

Related Documents

Conventions

Contacting Dell

What is New in Dell W-Instant 6.3.1.1-4.0

New Commands

Modified Commands

Dell W-Instant CLI

Connecting to a CLI Session

Applying Configuration Changes

Example:

Configuration Sub-modes

Deleting Configuration Settings

Using Sequence Sensitive Commands

Saving Configuration Changes

Commands that Reset the W-IAP

Command Line Editing

Specifying Addresses and Identifiers in Commands

aaa test-server

Description

Syntax

Usage Guidelines

Example

Command History

Command Information

a-channel

Description

Syntax

Usage Guidelines

Example

Command History

Command Information

a-external-antenna

Description

Syntax

Usage Guidelines

EIRP and Antenna Gain

Example

Command History

Command Information

aeroscout-rtls

Description

Syntax

Usage Guidelines

Example

Command History

Command Information

airgroup

Description

Syntax

Usage Guidelines

Example

Command History

Command Information

airgroupservice

Description

Syntax

Usage Guidelines

Example

Command History

Command Information

airwave-rtls

Description

Syntax

Usage Guidelines

Example

Command History

Command Information

ale-report-interval

Description

Syntax

Usage Guidelines

Example

Command History

Command Information