MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Symbol is a registered
trademark of Symbol Technologies, Inc. All other product or service names are the property of their respective owners.
This guide is intended to support administrators responsible for understanding, configuring and maintaining
the Wireless Switch. This document provides information for the system administrator to use the command
line interface during the initial setup and configuration of the system. It also serves as a reference guide for
the administrator to use while updating or maintaining the system.
1.1.1 About this Document
This document contains information on all command that configure the WS2000 Wireless Switch. To view
the command syntax and a brief help on each command on your WS2000 Wireless Switch console, use the
following syntax:
admin> <command> ?
We recommend viewing this Command Line Reference Guide with Adobe Acrobat 5.0 or higher.
Page 16
1-2 WS2000 Wireless Switch CLI Reference Guide
1.1.2 Document Conventions
Notes and Warnings
NOTE: Indicates special tips or requirements
CAUTION: Indicates a condition that can cause equipment damage or data loss
WARNING! Indicates a condition or procedure that could result in personal injury or equip-
ment damage
CLI Conventions
command / keywordThe first word is always a command. Keywords are words that must be entered
as is. Commands and keywords are mandatory.
For example, the command,
is documented as
where:
• show – The command
• ip – The keyword
<variable>Variables are described with a short description enclosed within a ‘<‘ and a ‘>’
pair.
For example, the command,
is documented as
where:
• show – The command – Display information.
• ip – The keyword – The IP address
• <idx> – The variable – WAN Index value.
admin(network.wan)> show ip 1
show ip <idx>
admin(network.wan)> show ip 1
show ip <idx>
Page 17
Product Overview 1-3
|The pipe symbol. This is used to separate the variables/keywords in a list.
For example, the command
admin(network.wan.vpn)> set .....
is documented as
set [ike|type|sub|remip|......]
where:
• set – The command
• [ike|type|sub|remip|...] – Indicates the different commands that can be combined with
the set command. However, only one of the above list can be used at a time.
set ike ...
set type ...
set sub ...
set remip ...
[ ]Of the different keywords and variables listed inside a ‘[‘ & ‘]’ pair, only one can
be used. Each choice in the list is separated with a ‘|’ (pipe) symbol.
For example, the command
admin(network.wan)> show ...
is documented as
show [ip|pppoe]
where:
• show – The command
• [ip|pppoe] – Indicates that two keywords are available for this command and only one
can be used at a time
{ }Any command/keyword/variable or a combination of them inside a ‘{‘ & ‘}’ pair
is optional. All optional commands follow the same conventions as listed
above. However they are displayed italicized.
For example, the command
admin(network.wan.vpn)> list ....
is documented as
list {<name>}
Here:
• list – The command. This command can also be used as
list
• {<name>} – The optional variable <name>.. The command can also be extended as
list vpn_tunnel_01
Here the value vpn_tunnel_01 is an optional tunnel name.
valuesValues to be entered as shown in Blue.
For example, the command
admin(network.wan)> show ip ....
is documented as
show ip <idx>
This command’s parameter <idx> is described as under:
“<idx> – <idx> (1-8) is the Wlan Index.”
Page 18
1-4 WS2000 Wireless Switch CLI Reference Guide
1.2 System Overview
The WS2000 Wireless Switch provides a low-cost, feature-rich option for sites with one to six Access Ports.
The WS2000 Wireless Switch works at the center of a network’s infrastructure to seamlessly and securely
combine wireless LANs (WLANs) and wired networks. The switch sits on the network. Wireless Access Ports
connect to one of the six available ports on the switch and the external wired network (WAN) connects to a
single 10/100 Mbit/sec. WAN port.
Mobile units (MUs) associate with the switch via an Access Port. When an MU contacts the switch, the
switch cell controller services attempt to authenticate the device for access to the network.
The WS2000 Wireless Switch acts as a WAN/LAN gateway and a wired/wireless switch.
1.2.1 Management of Access Ports
This wireless switch provides six 10/100 Mbit/sec. LAN ports for internal wired or wireless traffic. Four of
these ports provide IEEE 802.3af-compliant Power over Ethernet (PoE) support for devices that require power
from the Ethernet connection (such as Access Ports). Administrators can configure the six ports to
communicate with a private LAN or with an Access Port for a wireless LAN (WLAN). The switch provides up
to four extended service set identifiers (ESSIDs) for each Access Port connected to the switch.
1.2.1.1 Firewall Security
The LAN and Access Ports are placed behind a user-configurable firewall that provides stateful packet
inspection. The wireless switch performs network address translation (NAT) on packets passing to and from
the WAN port. This combination provides enhanced security by monitoring communication with the wired
network.
1.2.1.2 Wireless LAN (WLAN) Security
Administrators can configure security settings independently for each ESSID. Security settings and protocols
available with this switch include:
• Kerberos
•WEP-64
• WEP-128
• 802.1x with RADIUS
• 802.1x with Shared Key
• KeyGuard
• WPA/WPA2-TKIP
• WPA2/CCMP (802.11i)
1.2.1.3 VPN Security
Virtual Private Networks (VPNs) are IP-based networks that use encryption and tunneling to give users
remote access to a secure LAN. In essence, the trust relationship is extended from one LAN across the public
network to another LAN, without sacrificing security. A VPN behaves similarly to a private network; however,
because the data travels through the public network, it needs several layers of security. The WS2000
Wireless Switch acts as a robust VPN gateway.
Page 19
Product Overview 1-5
1.3 Hardware Overview
The WS2000 Wireless Switch provides a fully integrated solution for managing every aspect of connecting
wireless LANs (WLANs) to a wired network. This wireless switch can connect directly to a cable or DSL
modem, and can also connect to other wide area networks through a Layer 2/3 device (such as a switch or
router). The switch includes the following features:
• One WAN (RJ-45) port for connection to a DSL modem, cable modem, or any other Layer 2/3 network
device.
• Six 10/100 Mbit/sec. LAN (RJ-45) ports: four ports provide 802.3af “Power over Ethernet” (PoE) support;
the other two do not provide power.
• Each port has two LEDs, one indicating the speed of the transmission (10 or 100 Mbit/sec.), the other
indicating whether there is activity on the port. The four LAN ports with PoE have a third LED that
indicates whether power is being delivered over the line to a power device (such as an Access Port). (See
the WS 2000 Wireless Switch LED explanation for more information on the meaning of the different state
of the LEDs.)
• A DB-9 serial port for direct access to the command-line interface from a PC. Use Symbol’s Null-Modem
cable (Part No. 25-632878-0) for the best fitting connection.
• A CompactFlash slot that provides AirBEAM
®
support.
1.3.1 Technical Specifications
1.3.1.1 Physical Specifications
• Width: 203 mm
• Height: 38 mm
• Depth: 286 mm
• Weight: 0.64 kg
1.3.1.2 Power Specifications
• Maximum Power Consumption: 90-256 VAC, 47-63 Hz, 3A
• Operating Voltage: 48 VDC
• Operating Current: 1A
• Peak Current: 1.6A
1.3.1.3 Environmental Specifications
• Operating Temperature: 0ºC to 40ºC
• Storage Temperature: -40ºC to 70ºC
• Operating Humidity: 10% to 85% Non-condensing
• Storage Humidity: 10% to 85% Non-condensing
• Operating Altitude: 2.4 Km
• Storage Altitude: 4.6 km
Page 20
1-6 WS2000 Wireless Switch CLI Reference Guide
1.3.2 WS 2000 Wireless Switch LED Functions
The switch has a large blue LED on the right front that indicates that the switch is powered on.
Each port on the WS 2000 Wireless Switch has either two or three LEDs that indicate the status of the port.
Ports 1-4, which supply 802.3af Power over Ethernet (PoE), have three LEDs. The remaining two non-powered
LAN ports and the WAN port have two LEDs.
LocationFunction
Upper left LEDThis LED is present on all ports and indicates the speed of the transmissions through
the port. The LED is on when the transmission rate is 100 Mbit per second (100BaseT).
The light is off when the transmission rate is 10 Mbit per second.
Upper right LEDThis LED indicates activity on the port. This light is solid yellow when a link to a device
is made. The light flashes when traffic is being transferred over the line.
Lower LEDThis LED is only present on Ports 1-4. These ports provide 802.3af Power over Ethernet
(PoE) support to devices (such as Access Ports). The LED has several states:
OFF—A non-power device (or no device) is connected; no power is being delivered.
GREEN—The switch is delivering 48 volts to the power device connected to that port.
RED—There was a valid PoE connection; however, the switch has detected that the
power device is faulty. The red light will remain until a non-faulty connection is made
to the port.
Page 21
1.4 Software Overview
The WS2000 Wireless Switch software provides a fully integrated solution for managing every aspect of
connecting Wireless LANs (WLANs) to a wired network, and includes the following components:
1.4.1 Operating System (OS) Services
Operating System (OS) Services determine how the WS2000 Wireless Switch communicates with existing
network and operating system-centric software services, including:
• Dynamic Host Configuration Protocol (DHCP)
• Telnet and File Transfer Protocol (FTP/TFTP) servers
• The Simple Network Time Protocol (SNTP) client, used to keep switch time synchronized for Kerberos
authentication
• A mechanism for setting up a redundant (secondary) switch that takes over if the primary switch fails
1.4.2 Cell Controller Services
The Cell Controller provides the ongoing communication between mobile units (MUs) on the Wireless LAN
(WLAN) and the wired network. Cell Controller services perform the following:
Product Overview 1-7
• Initialize the Access Ports
• Maintain contact with Access Ports by sending a synchronized electronic “heartbeat” at regular intervals
• Track MUs when they roam from one location to another
• Manage security schemes based on system configuration
• Maintain system statistics
• Store policies and Access Port information
• Detect and manage rogue Access Ports
• Management of communications QoS
1.4.3 Gateway Services
Gateway services provide interconnectivity between the Cell Controller and the wired network, and include
the following:
• System management through a Web-based Graphical User Interface (GUI) and SNMP
• 802.1x RADIUS client
• Security, including Secure Sockets Layer (SSL) and Firewall
The term Common Commands is used to indicate that these commands are available through the WS2000
Wireless Switch’s CLI. These commands provide easy access to help, navigation, and to save configuration
changes.
This chapter also lists of commands available at the admin menu.
• Common Commands
• Admin Menu Commands
Page 24
2-2 WS2000 Wireless Switch System Reference Guide
2.1 Common Commands
Admin and Common Commands
The following commands are available through the WS2000 CLI.
CommandDescriptionRef.
?Displays the list of commands in the current menu.page 2-3
helpDisplays general user interface help.page 2-4
saveSaves the configuration to the system flash.page 2-6
quitQuits the CLI.page 2-5
..Goes to the parent menu.page 2-7
/Goes to the root menu.page 2-8
Page 25
2.1.1 ? Command
?
Common Commands
Displays the commands available under the admin menu.
Syntax
?
Parameters
None
Example
admin> ?
admin>?
help : display general user interface help
passwd : change password
summary : show system summary
network : go to network sub menu
stats : go to stats sub menu
system : go to system sub menu
save : save cfg to system flash
quit : quit cli
.. : go to parent menu
/ : go to root menu
Admin and Common Commands 2-3
Page 26
2-4 WS2000 Wireless Switch System Reference Guide
2.1.2 help Command
help
Common Commands
Displays general CLI user interface help.
Syntax
help
Parameters
None
Example
admin>help
?: display command help - Eg. ?, show ?, s?
<ctrl-q>: go backwards in command history
<ctrl-p>: go forwards in command history
* Note: commands can be incomplete - Eg. sh = sho = show
Page 27
2.1.3 quit Command
quit
Common Commands
Quits the command line interface. Requires you to logon again.
Admin and Common Commands 2-5
This command appears in all the submenus under
out of the CLI.
Syntax
quit
Parameters
None
Example
admin>quit
admin menu. In each case, it has the same function, to exit
Page 28
2-6 WS2000 Wireless Switch System Reference Guide
2.1.4 save Command
save
Common Commands
Saves the configuration to system flash.
This command appears in all of the submenus under admin. In each case, it has the same function, to save
the configuration. The save command must be issued before leaving the CLI for the settings to be retained.
Syntax
save
Parameters
none
Example
admin> save
admin>
Page 29
2.1.5 .. Command
..
Common Commands
Displays the parent menu of the current menu.
This command appears in all of the submenus under admin. In each case, it has the same function, to move
up one level in the directory structure.
Displays the root menu, that is, the top-level CLI menu.
This command appears in all of the submenus under admin. In each case, it has the same function, to move
up to the top level in the directory structure.
Syntax
/
Parameters
None
Example
admin(network.wan.nat)> /
admin>
Page 31
Admin and Common Commands 2-9
2.2 Admin Menu Commands
Admin and Common Commands
The following commands are only available at the admin menu.
CommandDescriptionRef.
passwdChanges the admin password.page 2-10
summaryDisplays a system summary.page 2-11
networkGoes to the network menu.page 3-1
systemGoes to the system menu.page 4-1
statsGoes to the statistics menu.page 5-1
Page 32
2-10 WS2000 Wireless Switch System Reference Guide
2.2.1 passwd Command
passwd
Admin Menu Commands
Changes the password for the administrative logins - admin, guest-admin, and manager.
Syntax
passwd [admin|manager|guest-admin]
Parameters
passwd
[admin|manager|guest-admin]
Passwords for the Administrator, Guest-admin, and Manager accounts
can be changed.
To change password, type the old password once and the new password
twice at their respective prompts. Passwords can be up to 11 characters.
Example:
admin>passwd admin
Old Admin Password:******
New Admin Password:******
Verify Admin Password:******
Page 33
2.2.2 summary Command
summary
Admin Menu Commands
Displays system summary for the WS2000 Wireless Switch. The information displayed includes high-level
characteristics and settings for WAN, subnet, and WLAN.
Syntax
summary
Parameters
None
Example
admin> summary
System Information
WS2000 firmware version : 2.4.0.0-005X
country code : us
Admin and Common Commands 2-11
WLAN 1 Information
ess identifier : Bharat
wlan mode : enable
vlan_id : 1
enc type : none
auth type : none
WLAN 2 Information
ess identifier : 102
wlan mode : disable
vlan_id : 2
enc type : none
auth type : none
WLAN 3 Information
ess identifier : 103
wlan mode : disable
vlan_id : 3
enc type : none
auth type : none
WLAN 4 Information
ess identifier : 104
wlan mode : disable
vlan_id : 4
enc type : none
auth type : none
Page 34
2-12 WS2000 Wireless Switch System Reference Guide
WLAN 5 Information
ess identifier : 105
wlan mode : disable
vlan_id : 5
enc type : none
auth type : none
WLAN 6 Information
ess identifier : 106
wlan mode : disable
vlan_id : 6
enc type : none
auth type : none
WLAN 7 Information
ess identifier : 107
wlan mode : disable
vlan_id : 7
enc type : none
auth type : none
WLAN 8 Information
ess identifier : 108
wlan mode : disable
vlan_id : 8
enc type : none
auth type : none
2-14 WS2000 Wireless Switch System Reference Guide
Page 37
Network CLI Commands Reference
Network commands are used to configure the different network parameters of the WS2000 Wireless Switch.
3.1 network
Admin Menu Commands
Use the network command to go the Network menu.
admin> network
admin(network)>
The following commands are available under the Network menu:
CommandDescriptionRef.
apGoes to the Access Port Submenu.page 3-3
dhcpGoes to the DHCP Submenupage 3-48
fwGoes to the Firewall Submenupage 3-51
ipfilterGoes to the IP Filter Submenupage 3-234
lanGoes to the LAN Submenupage 3-87
portGoes to the Port Submenupage 3-231
qosGoes to the QOS Submenupage 3-105
routerGoes to the Router Submenupage 3-109
urlfilterGoes to the URL Filter Submenupage 3-255
vlanGoes to the VLAN Submenupage 3-115
wanGoes to the WAN Submenupage 3-118
widsGoes to the WIDS Submenupage 3-248
wipsGoes to the WIPS Submenupage 3-238
wlanGoes to the WLAN Submenupage 3-170
saveSaves the configuration to system flashpage 2-6
quitQuits the CLIpage 2-5
..Goes to the parent menupage 2-7
/Goes to the root menupage 2-8
Page 38
3-2 WS2000 Wireless Switch System Reference Guide
Page 39
Network CLI Commands Reference 3-3
3.2 Network AP Commands
ap
network
Displays the Access Port submenu. The functionality provided by this menu is supplied by various screen
under the Wireless menu item of the Web interface.
Syntax
admin(network)> ap
admin(network.ap)>
The items available under this command are shown below.
CommandDescriptionRef
addAdds entries to the Access Port adoption list.page 3-4
copydefaultsCopies default AP settings to a connected AP. page 3-5
defaultGoes to the default submenu.page 3-17
deleteDeletes entries from the Access Port adoption lists.page 3-6
denyapGoes to the Deny AP submenupage 3-30
forgetForgets AP parameterspage 3-7
listLists entries in the Access Port adoption list.page 3-8
meshGoes to the Mesh submenupage 3-40
remapRemaps channels for the AP in auto mode.page 3-9
resetResets an Access Port.page 3-10
revertReverts AP to Access Point (AP4131 or AP4121)page 3-11
selfhealGoes to the Self-heal submenupage 3-24
set Sets Access Port parameters.page 3-12
showShows Access Port parameters.page 3-15
smartscanGoes to the Smart scan submenupage 3-34
testGoes to the test submenu. page 3-38
saveSaves the configuration to system flashpage 2-6
quitQuits the CLIpage 2-5
..Goes to the parent menupage 2-7
/Goes to the root menupage 2-8
Page 40
3-4 WS2000 Wireless Switch System Reference Guide
3.2.1 Network AP add Command
add
Network AP Commands
Adds entries to the Access Port adoption list. This allows the Access Ports with the MAC addresses specified
in the command to associate with the specified WLAN.
Performs functionality available in the Access Port Adoption List area of the Wireless screen.
Syntax
add <idx> <mac1> <mac2>
Parameters
<idx>The WLAN ID (1-8)
<mac1>The starting mac address for the range
<mac2>The last mac address in the range
Lists the current default settings for a selected Access Port type.
show default
show statusLists the index numbers for all currently connected Access Ports.
show apGets information about a particular Access Port.
Page 42
3-6 WS2000 Wireless Switch System Reference Guide
3.2.3 Network AP delete Command
delete
Network AP Commands
Deletes entries from the Access Port adoption list. In the Web interface, this functionality is found on the
Wireless screen in the Access Port Adoption list area.
Syntax
delete <idx> [<entry>|all]
Parameters
<idx> [<entry>|all]Deletes an entry in the Access Port adoption list as specified by <entry>, which is
the number listed in the adopted list (use the
(1-8).
all indicates deleting all the adoption list entries.
Example
The following example first lists out the adoption list entries for WLAN 1, deletes the second entry for WLAN
1, and finally displays the list for WLAN 1 showing that the entry has been deleted.
list command) for WLAN <idx>
admin(network.ap)>list 1
------------------------------------------------------------------------index start mac end mac
Sets the beacon interval for Access Port <idx> (1–12) to <interval> in K-us (50–
200).
Sets the channel mode for Access Port <idx> (1–12) to fixed, random or auto.
[fixed|random|auto]
div <idx> <mode>Sets the default antenna diversity to <mode> (one of full, primary, or
secondary).
dtim <idx>
[<period>|<bss_idx
<period>]]
Sets the DTIM period for Access Port <idx> to <period> (number of beacons from
1–50).
<bss_idx> is the index of the BSSID. If not specified for the AP300, the default
value of 1 is assumed for this parameter. For other APs, the <period> value is
used for all the BSSIDs.
loc <idx> <loc>Sets Access Port <idx> location description to <loc> (1–13 characters).
name <idx> <name>Sets Access Port <idx> name to <name> (1–13 characters).
primary <idx> <widx>Sets the primary WLAN <widx> (the WLAN index from 1 to 8) for 802.11a radio
associated with Access Port <idx> (1-12). The ESS ID configured for this WLAN
will be used in the 802.11a beacon as the primary ESS.
Note: This parameter is used only for AP200 APs with 802.11a radios
rate <idx> <basic>
<supported>
Sets Access Port <idx> (1-12) basic and supported rates. <basic> and
<supported> must be comma-separated lists of rates, such as 6,9,11,15 with
no spaces. Basic rates are a subset of supported rates. The different types of
radio support the following rates.
A - 6|9|12|18|24|36|48|54
B - 1|2|5.5|11
G - 1|2|5.5|6|9|11|12|18|24|36|48|54
Note: For a G radio, basic rates must be a subset of B Rates in order to associate legacy
B stations.
reg <idx> <indoor> <ch>
<pwr>
Sets Access Port <idx> (1-12)regulatory parameters, which <indoor> is one of
in or in/out; <ch> is the channel to use, and <pwr> is the power (in dB from 4
to 20). Select the value of <ch> from the appropriate list.
Note: Regulatory parameter values depend on country of operation and radio type. Refer
to documentation for regulatory information.
rts <idx> <bytes>Sets the RTS threshold for Access Port <idx> (1-12) to <bytes> (e.g., 2341).
Page 49
Network CLI Commands Reference 3-13
short-pre <idx>
Enables or disables the short preamble mode for Access Port <idx> (1-12)
[enable|disable]
802.1x <username>
<password>
Sets the 802.1x username and password on AP 300 Access Ports. Both
parameters can be up to 64 characters long.
mac <idx> <mac>Sets the MAC address of AP <idx> (1-12) to <mac> (MAC address format is
XX:XX:XX:XX:XX:XX)
ap_scan <idx> <mode>Sets the scan mode for Rogue AP detection where <idx> (1-12) is the access
port index and <mode> is one of none, detector, on-chan, full-detector.
radio_type <idx>
<radio_type>
Sets the Radio Type of an access port where <idx> (1-12) is the access port
index and <radio_type> is one of 802.11a, 802.11b,
802.11b/g.
ap_type <idx>
<radio_type>
sip_cac_mode
Sets the AP type of an Access Port <idx> (1-12) to AP type. AP type
<radio_type> is one of AP100, AP200, AP300
Enables or disables SIP Call Admission Control.
[enable|disable]
allowed_sip_session
<idx> <sip_session>
legacy_mode
Sets the allowed number of SIP sessions for this portal. The value for
<sip_session> lies between 1 and 100. <idx> (1-12) is the access port index.
Enables or disables legacy mode support for AP300s.
[enable|disable]
mu-power-adjustment
<ap-index> <adjvalue>
Sets Symbol MUs operating power in dBm. <ap-index> is the index of the
Symbol AP and <adjvalue> is the MU power adjustment value in dBm (valid 0-
20)
asset-name <idx>
<asset-name>
Sets asset name for the Access Port with <idx> (1-12) with <asset-name> (1-
50 characters)
Example:
admin(network.ap)>set short-pre enable
admin(network.ap)>set shor 1 enable
admin(network.ap)>set name 1 BigOffice
admin(network.ap)>set dtim 1 25
admin(network.ap)>set loc 1 BigBldg
admin(network.ap)>show ap 1
ap name : BigOffice
ap location : BigBldg
ap mac address : 00A0F8565656
ap serial number : 00A0F8565656
ap radio type : 802.11 B
adopted by : WLAN1
ap indoor use : indoor/outdoor
ap channel : 1
ap radio power : 4 dB
antenna gain : 0 dBi
rf power : 3 mW
antenna type : external
ap diversity : full
basic rates : 1 2
supported rates : 1 2 5.5 11
rts threshold : 2341
Page 50
3-14 WS2000 Wireless Switch System Reference Guide
beacon interval : 100
dtim period : 25
short preamble : enable
security beacon (hide ess) : disable
primary wlan index : wlan1
admin(network.ap)>
Page 51
3.2.10 Network AP show Command
show
Network AP Commands
Shows Access Port parameters.
Syntax
show [ap|status|sip|legacy-mode]
Parameters
ap <idx>Shows Access Port <idx> (1-12) radio parameters.
statusShows a list of Access Ports and their status.
sip <idx>Shows SIP statistics for the portal <idx> (1-12).
legacy-modeShows the legacy mode configuration for the switch
Example
admin(network.ap)>show ap 1
Network CLI Commands Reference 3-15
ap name : BigOffice
ap location : BigBldg
ap mac address : 00A0F8565656
ap serial number : 00A0F8565656
ap radio type : 802.11 B
adopted by : WLAN1
ap indoor use : indoor/outdoor
ap channel : 1
ap radio power : 4 dB
antenna gain : 0 dBi
rf power : 3 mW
antenna type : external
ap diversity : full
basic rates : 1 2
supported rates : 1 2 5.5 11
rts threshold : 2341
beacon interval : 100
dtim period : 25
short preamble : enable
security beacon (hide ess) : disable
primary wlan index : wlan1
detector ap : disable
admin(network.ap)>show status
ap index : 1
ap status : connected
ap index : 2
ap status : not connected
ap index : 3
Page 52
3-16 WS2000 Wireless Switch System Reference Guide
ap status : not connected
ap index : 4
ap status : not connected
ap status : not connected
ap index : 6
ap status : not connected
ap index : 7
ap status : not connected
ap index : 8
ap status : not connected
ap index : 9
ap status : not connected
ap index : 10
ap status : not connected
ap index : 11
ap status : not connected
ap index : 12
ap status : not connected
admin(network.ap)>show legacy-mode
Legacy mode is enabled.
Related Commands
setSets Access Port parameters.
Page 53
Network CLI Commands Reference 3-17
3.3 Network AP Default Commands
default
Network AP Commands
Displays the default Access Port (AP) submenu. Use these commands to set the default values for all APs.
Syntax
admin(network.ap)> default
The items available under this command are shown below.
CommandDescriptionRef
set Sets default Access Port parameters. page 3-18
loadfromcfLoads the configured images from the CF card immediatelypage 3-20
showShows default Access Port parameters. page 3-21
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
The items in this menu are available in the Web interface under the three default Access Port screens (one
for each radio type) within the Wireless menu area.
Page 54
3-18 WS2000 Wireless Switch System Reference Guide
3.3.1 Network AP Default set Command
set
Network AP Default Commands
Sets the default Access Port parameters.
Syntax
set [beacon|ch_mode|div|dtim|primary|reg|rate|rts|short-pre|sensor-img|
ap4131-img|ap4121-img]
Parameters
beacon intvl <type>
<interval>
ch-mode <type>
[fixed|random|auto]
Sets the default beacon interval for specified radio type <type> (one of
802.11a, 802.11b, or 802.11b/g) to <interval> in K-us (50–200).
Sets the default channel mode for radios of <type> (one of 802.11a, 802.11b,
or 802.11b/g) to fixed, random, or auto.
div <type> <mode>Sets the default antenna diversity for radios of <type> (one of 802.11a,
802.11b, or 802.11b/g) to <mode> (one of full, primary, or secondary).
dtim <type>
[<bss_idx>|<period>]
Sets the default DTIM period for radios of specified <type> (one of 802.11a,
802.11b, or 802.11b/g) to <period> number of beacons (1–50).
<bss_idx> is the index of the BSSID. If not specified for the AP300, the
default value of 1 is assumed for this parameter. For other APs, the <period>
value is used for all the BSSIDs.
primary <type> <wdix>Sets the default primary WLAN <widx> (1 to 8) for 802.11a radios of
specified <type> (one of 802.11a, 802.11b, or 802.11b/g). The ESS ID
configured for this WLAN will be used in the 802.11a beacon as the primary
ESS.
Note: This parameter is used only for AP200 APs with 802.11a radios.
rate <type> <basic>
<supported>
Sets the default basic and supported rates for radios of specified <type> (one
of 802.11a, 802.11b, or 802.11b/g). <basic> and <supported> must be a
comma separated list of rates, such as 6,9,11,15 with no spaces. Basic rates
are a subset of supported rates. The different types of radio support the
following rates.
A - 6|9|12|18|24|36|48|54
B - 1|2|5.5|11
G - 1|2|5.5|6|9|11|12|18|24|36|48|54
Note: For a G radio, basic rates must be a subset of B Rates in order to associate legacy
B stations.
reg <type> <indoor> <ch>
<pwr>
Sets the default regulatory parameters for radios of specified type (one of
802.11a, 802.11b, or 802.11b/g), where <indoor> is one of in or in/out;
<ch> is the channel to use, and <pwr> is the power (in dB from 4 to 20).
Select the value of <ch> from the appropriate list.
Note: Note: Regulatory parameter values depend on the country of operation and radio
type. Refer to the documentation for specific regulatory information.
rts <type> <bytes>Sets the default RTS threshold for radios of specified <type> (one of 802.11a,
802.11b, or 802.11b/g) to <bytes> (e.g., 2341).
Page 55
Network CLI Commands Reference 3-19
short-pre <type>
[enable|disable]
By default, enables or disables the short preamble mode for radios of
specified <type> (one of 802.11a, 802.11b, or 802.11b/g).
sensor-img <loc>Sets the default location of the sensor image. Location is specified in the
<loc> parameter.
ap4131-img <loc>Sets the default location <loc> of the AP 4131 image. Select from cf or def.
ap4121-img <loc>Sets the default location <loc> of the AP 4121 image. Select from cf or def.
setSets the default parameters for the specified radio type.
Page 58
3-22 WS2000 Wireless Switch System Reference Guide
3.4 Network AP Test Commands
test
Network AP Commands
Displays the test submenu.
Syntax
admin(network.ap)> test
admin(network.ap.test)>
The items available under this command are shown below
CommandDescriptionRef.
newSwitches the Access Port to a new channel.page 3-23
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 59
3.4.1 Network AP Test new Command
new
Network AP Test Commands
Switches the specified Access Port to a new channel.
Syntax
new <idx> <ch>
Parameters
<idx> <ch>Switches the Access Port indexed with <idx> (1–12) to channel <ch> (which must be
3-24 WS2000 Wireless Switch System Reference Guide
3.5 Network AP Selfheal commands
selfheal
Network AP Commands
Displays the selfheal submenu.
Syntax
admin(network.ap)> selfheal
The items available under this menu are shown below.
CommandDescriptionRef.
setSets self-heal parameterspage 3-25
detect-neighborDetects neighbors and prepares the neighbors list automaticallypage 3-26
addAdds entries to the self-heal tablepage 3-27
delRemoves entries from the self-heal tablepage 3-28
showShows entries in the self-heal tablepage 3-29
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
-------------HEALING STATE OF PORTALS-----------PORTAL HEALING-MODE CONFIGURED-POWER(dBm) RAISED-POWER(dBm)
1 Normal 20 0
2 Normal 17 0
3 Normal 20 0
4 Normal 17 0
Page 64
3-28 WS2000 Wireless Switch System Reference Guide
3.5.4 Network AP Selfheal del Command
del
Network AP Selfheal commands
Deletes entries from the selfheal AP-AP neighbor table.
Syntax
del <from-ap> <to-ap>
Parameters
<from-ap> <to-ap>
Removes the specified APs from the neighbor-recovery table. <from-ap> and
<to-ap> accepts values 1 to 12 and all. all indicates all the APs.
Example
admin(network.ap.selfheal)> del 2 4
admin(network.ap.selfheal)> show
The items available under this menu are shown below.
CommandDescriptionRef.
addAdds access port deny list entriespage 3-31
deleteDeletes access port deny list entriespage 3-32
showShows access port deny listpage 3-33
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 67
3.6.1 Network AP Denyap add Command
add
Network AP Denyap Commands
Add entries to the Access Port Deny List.
Syntax
add <mac>
Parameters
<mac>Adds the MAC specified in the <mac> parameter to the Access Port Deny List. MAC
entries are to be entered without the ‘:’. For example
The items available under this menu are shown below.
CommandDescriptionRef.
setSets smartscan channelspage 3-35
deleteRemoves smartscan channelspage 3-36
showShows all smartscan channelspage 3-37
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 71
3.7.1 Network AP Smartscan set Command
set
Network AP Smartscan Commands
Sets the smartscan channels. These channels are the ones that are scanned for presence of WLANs.
Syntax
set [11a <11a>|11bg <11bg>]
Parameters
11a <11a>Sets the smart scan channel list for the 5 GHz band. Channel list <11a> should
be a comma separated list. For example, 36,40,44,48
11bg <11bg>Sets the smart scan channel list for the 2.4 GHz band. Channel list <11bg>
should be a comma separated list. For example, 1-4,6,8
Note: When using a range for selecting multiple channels, all the channels that are
included in the range should be valid channel numbers for the current regulatory domain.
3-36 WS2000 Wireless Switch System Reference Guide
3.7.2 Network AP Smartscan delete Command
delete
Network AP Smartscan Commands
Deletes all the channels in the smartscan list for a specific radio.
Syntax
delete [11a <11a>|11bg <11bg>]
Parameters
11a <11a>Sets the smart scan channel list for the 5 GHz band. Channel list <11a> should be a
comma separated list. For example, 36,40,44,48
11bg <11bg>Sets the smart scan channel list for the 2.4 GHz band. Channel list <11bg> should be a
comma separated list. For example, 1-4,6,8
Note: When using a range for selecting multiple channels, all the channels that are included in
the range should be valid channel numbers for the current regulatory domain.
3-38 WS2000 Wireless Switch System Reference Guide
3.8 Network AP Test Commands
test
Network AP Commands
Displays the test submenu. Use this submenu commands to test APs.
Syntax
admin(network.ap)> test
admin(network.ap.test)>
The items available under this command are shown below.
CommandDescriptionRef
newSwitches the AP to a new channelpage 3-39
showShows mesh configuration informationpage 3-47
quitQuits the CLI. page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 75
3.8.1 Network AP Test new Command
new
Network AP Test Commands
Switches AP to a new channel.
Syntax
test <idx> <ch>
Parameters
<idx>The access port index for which the channel has to be changed
<ch>The channel to change to. This must be a channel that is valid for the selected AP <idx>.
Example
admin(network.ap.test)> new 1 24
admin(network.ap.test)>
Network CLI Commands Reference 3-39
Page 76
3-40 WS2000 Wireless Switch System Reference Guide
3.9 Network AP Mesh Commands
mesh
Network AP Commands
Displays the mesh submenu. Use this menu to configure the different Mesh Network parameters.
Syntax
admin(network.ap)> mesh
admin(network.ap.mesh)>
The items available under this command are shown below.
CommandDescriptionRef
setSets mesh parameterspage 3-41
addAdds a preferred base to the listpage 3-43
delRemoves preferred bases from the listpage 3-44
preferred-listShows a list of preferred basespage 3-45
available-listShows a list of available basespage 3-46
showShows mesh configuration informationpage 3-47
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 77
3.9.1 Network AP Mesh set Command
set
Network AP Mesh Commands
Sets the mesh related parameters.
Syntax
set [client|vlan|auto|base|max-clients]
Parameters
Network CLI Commands Reference 3-41
client <radio-idx>
[enable|disable]
Enables or disables the mesh client for the radio with the index
<radio-idx> (1-12).
wlan <radio-idx> <wlan-id> Selects the WLAN <wlan-id> (1-8) for the mesh client radio index
<radio-idx> (1-12).
auto <radio-idx>
[enable|disable]
base <radio-idx>
Enables or disables automatic base selection for the radio with the index
<radio-idx> (1-12).
Enables or disables the radio <radio-idx> (1-12) as the mesh base.
[enable|disable]
max-clients <radio-idx>
<max-clients>
Example
admin(network.ap.mesh)> set client 1 enable
admin(network.ap.mesh)> show 1
------------------------------------------------------------------------"Mode" "WLAN" "Base Auto Selection" "Max Clients"
------------------------------------------------------------------------ Client Only WLAN1 Enabled N/A
admin(network.ap.mesh)> set base 1 enable
admin(network.ap.mesh)> show 1
------------------------------------------------------------------------"Mode" "WLAN" "Base Auto Selection" "Max Clients"
------------------------------------------------------------------------ Base and Client WLAN1 Enabled 6
admin(network.ap.mesh)> set wlan 1 3
admin(network.ap.mesh)> show 1
------------------------------------------------------------------------"Mode" "WLAN" "Base Auto Selection" "Max Clients"
------------------------------------------------------------------------ Base and Client WLAN3 Enabled 6
admin(network.ap.mesh)> set max-clients 1 4
admin(network.ap.mesh)> show 1
------------------------------------------------------------------------"Mode" "WLAN" "Base Auto Selection" "Max Clients"
------------------------------------------------------------------------ Base and Client WLAN3 Enabled 4
Sets the maximum number of client <max-clients> for the radio
<radio-idx> (1-12).
Page 78
3-42 WS2000 Wireless Switch System Reference Guide
admin(network.ap.mesh)> set auto 1 disable
admin(network.ap.mesh)> show 1
------------------------------------------------------------------------"Mode" "WLAN" "Base Auto Selection" "Max Clients"
------------------------------------------------------------------------ Base and Client WLAN3 Disabled 4
admin(network.ap.mesh)>
Page 79
3.9.2 Network AP Mesh add Command
add
Network AP Mesh Commands
Adds a preferred base to the device’s Preferred Base Bridge List.
Syntax
add <radio-idx> <mac>
Parameters
Network CLI Commands Reference 3-43
<radio-idx>
<mac>
Adds the base to the device’s Preferred Base Bridge List. The <radio-idx> (1-12) is the
unique ID for the radio. <mac> is the address of the base device to be added to the
list.
addAdds a preferred base to the list
delRemoves preferred bases from the list
preferred-listShows a list of preferred bases
Page 83
3.9.6 Network AP Mesh show Command
show
Network AP Mesh Commands
Displays the mesh details for a particular radio.
Syntax
show <radio-idx>
Parameters
<radio-idx>Displays the mesh configuration information for the radio indicated by the
<radio-idx> (1-12) value.
Example
admin(network.ap.mesh)> show 3
------------------------------------------------------------------------"Mode" "WLAN" "Base Auto Selection" "Max Clients"
------------------------------------------------------------------------ Base and Client WLAN2 Enabled 4
Network CLI Commands Reference 3-47
Page 84
3-48 WS2000 Wireless Switch System Reference Guide
3.10 Network DCHP Commands
dhcp
network
Displays the DHCP submenu.
Syntax
admin(network)> dhcp
admin(network.dhcp)>
The items available under this command are shown below.
CommandDescriptionRef.
setSets system updated flags. page 3-49
showShows system updated flags. page 3-50
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 85
3.10.1 Network DHCP set Command
set
Network DCHP Commands
Sets parameters for automated firmware and configuration upgrades.
Syntax
set [firmwareupgrade|configureupgrade|interface|
dhcpvendorclassid|autoupgradeinterval]
firmwareupgrade [0|1]Enables (1) or disables (0) automatic switch firmware upgrade.
configupgrade [0|1]Enables (1) or disables (0) automatic switch configuration update.
interface <iface>Sets the interface <iface> for the upgrades to the device:
Sets the DHCP vendor class id to <dhcp vendor class id>.
Note: Vendor class id must be preceded by “Sym”.
Sets the Light Weight DHCP Client Auto Upload time interval to
<autoupgradeinterval> (1-65535) seconds.
Network CLI Commands Reference 3-49
Example
admin(network.dhcp)>show all
Auto Firmware upgrade flag : 0
Auto Config upgrade flag : 0
Interface : w
admin(network.dhcp)>set firmwareupgrade 1
admin(network.dhcp)>set con 1
admin(network.dhcp)>set inter s1
admin(network.dhcp)>show all
Auto Firmware upgrade flag : 1
Auto Config upgrade flag : 1
Interface : s1
Related Commands
show allShows the settings for all the automatic update parameters.
Page 86
3-50 WS2000 Wireless Switch System Reference Guide
3.10.2 Network DHCP show Command
show
Network DCHP Commands
Displays system updated flags.
Syntax
show all
Parameters
allDisplays all of the DHCP-related system update parameters.
Example
admin(network.dhcp)>show all
Auto Firmware upgrade flag : 1
Auto Config upgrade flag : 1
Interface : w
Dhcp Vendor Class Id : SymbolWS.WS2K-V2-0
Auto Upgrade Interval : 600
Related Commands
setSets the DHCP-related parameters for updating system firmware and configuration.
Page 87
3.11 Network Firewall Commands
fw
network
Displays the firewall submenu.
Syntax
admin(network)> fw
admin(network.fw)>
The items available under this command are shown below.
CommandDescriptionRef.
set Sets firewall parameters. page 3-52
showShows firewall parameters. page 3-54
submapGoes to the subnet mapping submenu. page 3-80
policyGoes to the advanced subnet mapping submenu. page 3-64
timeraddCreates a new timeout valuepage 3-55
timersetSets timeout valuespage 3-58
timerdelDeletes a named timerpage 3-56
timerlistShows the list of timerspage 3-57
ipsGoes to the Intrusion Prevention System submenu.page 3-59
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Network CLI Commands Reference 3-51
The commands in this menu are available in the Web interface on the Network>Firewall screen.
Page 88
3-52 WS2000 Wireless Switch System Reference Guide
3.11.1 Network Firewall set Command
set
Network Firewall Commands
Sets firewall parameters. In the Web interface, this functionality is provide by the Network->Firewall screen.
Syntax
set [mode|override|ftp|ip|seq|src|syn|win|spoof|rst|
range|netbios-alg] [enable|disable]
set mime [filter|hdr|len]
set mime filter [enable|disable]
set mime hdr <count>
set mime len <length>
set timeout <time>
set fin <time>
Parameters
mode [enable|disable]Enables or disables the firewall.
override [enable|disable]Enables or disables subnet access override.
ftp [enable|disable]Enables or disables FTP bounce attack check.
ip [enable|disable]Enables or disables IP unaligned timestamp check.
mime
[filter [enable|disable]|
hdr <count>|
len <length>]
• hdr <count> – Sets the max number of headers as specified in <count>
(12-34463)
• len <length> – Sets the max header length in bytes as specified by <length>
(256-34463)
seq [enable|disable]Enables or disables sequence number prediction check.
src [enable|disable]Enables or disables source routing check.
syn [enable|disable]Enables or disables SYN flood attack check.
timeout <time>Sets the firewall timeout to <time> minutes (1–90).
win [enable|disable]Enables or disables Winnuke attack check.
spoof [enable|disable]Enables or disables IP Spoofing attack check
rst [enable|disable]Enables or disable reset attack check
range [enable|disable]Enables or disable sequence out of range check
fin <time>Sets fin timeout to <time> seconds.
netbios-alg
Enables or disables NetBIOS ALG support.
[enable|disable]
Example
admin(network.fw)>show all
Firewall Status : enable
Subnet Access Override : disable
Configurable Firewall Filters
Page 89
ftp bounce attack filter : enable
syn flood attack filter : enable
unaligned ip timestamp filter : enable
source routing attack filter : enable
winnuke attack filter : enable
seq num prediction attack filter : enable
mime flood attack filter : enable
max mime header length : 8192
max mime headers : 16
nat timeout interval in minutes : 30
ip spoofing attack filter : enable
reset attack filter : enable
ack/seq number out of range check : enable
fin timeout : 20
Always On Firewall Filters
land attack filter : enable
ping of death attack filter : enable
reassembly attack filter : enable
NetBIOS alg : disable
admin(network.fw)>
Network CLI Commands Reference 3-53
Related Commands
showShows the current firewall settings.
Page 90
3-54 WS2000 Wireless Switch System Reference Guide
3.11.2 Network Firewall show Command
show
Network Firewall Commands
Displays the firewall parameters.
Syntax
show all
Parameters
allShows all firewall settings.
Example
admin(network.fw)>show all
Firewall Status : enable
Subnet Access Override : disable
Configurable Firewall Filters
ftp bounce attack filter : enable
syn flood attack filter : enable
unaligned ip timestamp filter : enable
source routing attack filter : enable
winnuke attack filter : enable
seq num prediction attack filter : enable
mime flood attack filter : enable
max mime header length : 8192
max mime headers : 16
nat timeout interval in minutes : 30
ip spoofing attack filter : enable
reset attack filter : enable
ack/seq number out of range check : enable
fin timeout : 20
Always On Firewall Filters
land attack filter : enable
ping of death attack filter : enable
reassembly attack filter : enable
NetBIOS alg : disable
admin(network.fw)>
Related Commands
setSets firewall settings.
Page 91
3.11.3 Network Firewall timeradd Command
timeradd
Network Firewall Commands
Adds a new named timeout value.
Syntax
timeradd <name> <protocol> <port> <value>
Parameters
Network CLI Commands Reference 3-55
timeradd <name>
<protocol>
<port> <value>
Adds a new named timeout value.
• <name> is the name of the time out value (1-15 characters)
• <protocol> is the protocol to be used. (tcp or udp)
• <port> is the port number (0-32767)
• <value> is the timeout value in seconds
(60-268400000)
Sets the timer value <value> (60-268400000) for a timer named
<timer name>.
Page 95
Network CLI Commands Reference 3-59
3.12 Network Firewall Intrusion Prevention System Commands
ips
Network Firewall Commands
Displays the firewall Intrusion Prevention System (IPS) submenu.
Syntax
admin(network.fw)> ips
admin(network.fw.ips)>
The items available under this command are shown below.
CommandDescriptionRef.
setSets the IPS parameterspage 3-60
showDisplays the IPS settingspage 3-62
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Page 96
3-60 WS2000 Wireless Switch System Reference Guide
3.12.1 Network Firewall IPS set Command
set
Network Firewall Intrusion Prevention System Commands
Sets the Intrusion Prevention System (IPS) parameters.
Syntax
set [mode|anomaly-config|signature-categories|direction]
set mode [enable|disable]
set signature-categorises <category-list>
set direction [default|bi-directional]
set anomaly-config[-sl <smtplen>|-ml <mimelen>|-md <mimedepth>|
mode [enable|disable]Enables or disables IPS.
anomaly-config
[-sl <smtplen>|
-ml <mimelen>|
-md <mimedepth>|
-hl <httphline>|
-hz <httphsize>|
-hlz <httplinesize>|
-huz <httpurisize>]
signature-categories
<category-list>
direction [default|bi-directional]Sets the direction to inspect packets.
If more than one signature category is specified, separate each category
with a space. Each of the signature category must be specified in Upper
Case only.
• default – Sets direction as default. This is defined in the signature.
• bi-directional – Sets direction as bi-directional. Packets are inspected
when received or sent.
Example
admin(network.fw.ips)>set mode enable
admin(network.fw.ips)>set anomaly-config -sl 100
admin(network.fw.ips)>set direction default
admin(network.fw.ips)>set signature-categories TELNET POP3 TCP UDP
admin(network.fw.ips)>show all
IPS mode : enable
SMTP Header length : 1024
MIME header length : 1024
Depth of MIME boundary header : 5
Field in HTTP header : 50
HTTP header size : 4096
HTTP header line size : 3072
Page 97
Network CLI Commands Reference 3-61
HTTP URI size : 3072
Loaded Signature Categories : TELNET POP3 TCP UDP IMAP HTTP SMTP
Packet Direction of signatures : default
admin(network.fw.ips)>
Page 98
3-62 WS2000 Wireless Switch System Reference Guide
3.12.2 Network Firewall IPS show Command
show
Network Firewall Intrusion Prevention System Commands
Displays the Intrusion Prevention System (IPS) configurations.
Syntax
show all
Parameters
allDisplays the IPS configuration.
Example
admin(network.fw.ips)>show all
IPS mode : enable
SMTP Header length : 1024
MIME header length : 1024
Depth of MIME boundary header : 5
Field in HTTP header : 50
HTTP header size : 4096
HTTP header line size : 3072
HTTP URI size : 3072
Loaded Signature Categories : TELNET POP3 TCP UDP IMAP HTTP SMTp
Packet Direction of signatures : default
admin(network.fw.ips)>
admin(network.fw)>show all
Firewall Status : enable
Subnet Access Override : disable
Configurable Firewall Filters
ftp bounce attack filter : enable
syn flood attack filter : enable
unaligned ip timestamp filter : enable
source routing attack filter : enable
winnuke attack filter : enable
seq num prediction attack filter : enable
mime flood attack filter : enable
max mime header length : 8192
max mime headers : 16
nat timeout interval in minutes : 10
ip spoofing attack filter : enable
reset attack filter : enable
ack/seq number out of range check : enable
fin timeout : 20
Always On Firewall Filters
land attack filter : enable
ping of death attack filter : enable
reassembly attack filter : enable
NOTE: The Policy menu can only be accessed when Subnet Access Override mode
is enabled. To enable Subnet Access Override use the command
admin(network.fw)> set override enable
The items available under this command are shown below.
CommandDescriptionRef.
inboundGoes to the inbound policy submenu.page 3-66
outboundGoes to the outbound policy submenu.page 3-73
importImports subnet access rules.page 3-65
quitQuits the CLI. page 3-1
saveSaves the configuration to system flash.page 3-1
..Goes to the parent menu.page 3-1
/Goes to the root menu.page 3-1
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.