Siemens SCALANCE W1750D CLI Function Manual

Download

Page 1

___________________

SIMATIC NET

Industrial Wireless LAN SCALANCE W1750D CLI

Function Manual

03/2019

About this guide

Security recommendations

SCALANCE W CLI

CLI Commands

Appendix A

9000-G8976-C452-04

Page 2

Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY

Document order number: C79000-G8976-C452

Ⓟ

DANGER

indicates that death or severe personal injury will result if proper precautions are not taken.

WARNING

indicates that death or severe personal injury may result if proper precautions are not taken.

CAUTION

indicates that minor personal injury can result if proper precautions are not taken.

NOTICE

indicates that property damage can result if proper precautions are not taken.

WARNING

Siemens products may only be used for the applications described in the catalog and in the relevant technical

ambient conditions must be complied with. The information in the relevant documentation must be observed.

Legal information

Warning notice system

This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.

If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.

Qualified Personnel

The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.

Proper use of Siemens products

Note the following:

documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible

Trademarks

All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.

Disclaimer of Liability

We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.

03/2019 Subject to change

Page 3

1 About this guide .................................................................................................................................... 13

2 Security recommendations .................................................................................................................... 15

3 SCALANCE W CLI ................................................................................................................................ 19

3.1 Saving Configuration Changes ............................................................................................... 22

3.2 Command Line Editing............................................................................................................ 23

3.3 Specifying Addresses and Identifiers in Commands .............................................................. 24

3.4 Typographic Conventions ....................................................................................................... 25

3.5 Industry Online Support .......................................................................................................... 26

4 CLI Commands ..................................................................................................................................... 27

4.1 A .............................................................................................................................................. 27

4.1.1 a-channel ................................................................................................................................ 27

4.1.2 aaa dns-query-interval ............................................................................................................ 28

4.1.3 aaa radius-attributes ............................................................................................................... 29

4.1.4 aaa radius modifier ................................................................................................................. 30

4.1.5 aaa test-server ........................................................................................................................ 31

4.1.6 a-ant-pol .................................................................................................................................. 31

4.1.7 advanced-zone ....................................................................................................................... 32

4.1.8 aeroscout-rtls .......................................................................................................................... 33

4.1.9 airgroup ................................................................................................................................... 34

4.1.10 airgroupservice ....................................................................................................................... 36

4.1.11 airwave-rtls .............................................................................................................................. 37

4.1.12 ale-report-interval .................................................................................................................... 38

4.1.13 ale-server ................................................................................................................................ 39

4.1.14 alg ........................................................................................................................................... 40

4.1.15 allowed-ap ............................................................................................................................... 41

4.1.16 allow-new-aps ......................................................................................................................... 42

4.1.17 a-max-clients ........................................................................................................................... 42

4.1.18 ams-backup-ip ........................................................................................................................ 43

4.1.19 ams-identity ............................................................................................................................. 44

4.1.20 ams-ip ..................................................................................................................................... 45

4.1.21 ams-key .................................................................................................................................. 45

4.1.22 ap1x ........................................................................................................................................ 46

4.1.23 ap1x-peap-user ....................................................................................................................... 47

4.1.24 ap-frequent-scan ..................................................................................................................... 48

4.1.25 ap-installation .......................................................................................................................... 49

4.1.26 apply........................................................................................................................................ 49

4.1.27 arm .......................................................................................................................................... 50

8 attack....................................................................................................................................... 56

4.1.2

4.1.29 auth-failure-blacklist-time ........................................................................................................ 57

4.1.30 auth-survivability cache-time-out ............................................................................................ 58

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 4

Table of contents

4.2 B ............................................................................................................................................. 59

4.2.1 banner .................................................................................................................................... 59

4.2.2 blacklist-client ......................................................................................................................... 60

4.2.3 blacklist-time .......................................................................................................................... 60

4.2.4 ble .......................................................................................................................................... 61

4.3 C ............................................................................................................................................. 64

4.3.1 calea ....................................................................................................................................... 64

4.3.2 cellular-uplink-profile .............................................................................................................. 65

4.3.3 clarity ...................................................................................................................................... 68

4.3.4 clear ....................................................................................................................................... 69

4.3.5 clear airgroup state statistics ................................................................................................. 70

4.3.6 clear-dhcpoption82 ................................................................................................................ 70

4.3.7 clear-cert ................................................................................................................................ 71

4.3.8 clock set ................................................................................................................................. 72

4.3.9 clock summer-time ................................................................................................................. 73

4.3.10 clock timezone ....................................................................................................................... 75

4.3.11 cluster-security ....................................................................................................................... 75

4.3.12 cluster-security logging .......................................................................................................... 77

4.3.13 commit .................................................................................................................................... 78

4.3.14 configure terminal................................................................................................................... 79

4.3.15 console ................................................................................................................................... 79

4.3.16 content-filtering....................................................................................................................... 80

4.3.17 convert-aos-ap ....................................................................................................................... 81

4.3.18 copy ........................................................................................................................................ 82

4.3.19 custom_var ............................................................................................................................. 84

4.4 D ............................................................................................................................................. 85

4.4.1 debug-rtls-logs ....................................................................................................................... 85

4.4.2 deny-inter-user-bridging ......................................................................................................... 85

4.4.3 deny-local-routing................................................................................................................... 86

4.4.4 device-id ................................................................................................................................. 87

4.4.5 dhcp ....................................................................................................................................... 88

4.4.6 disable-prov-ssid .................................................................................................................... 89

4.4.7 disconnect-user ...................................................................................................................... 89

4.4.8 dot-11a-radio-disable ............................................................................................................. 90

4.4.9 dot-11g-radio-disable ............................................................................................................. 91

4.4.10 download-cert ......................................................................................................................... 91

4.4.11 download-dhcpopt82 .............................................................................................................. 93

4.4.12 dpi .......................................................................................................................................... 94

4.4.13 dpi-error-page-url ................................................................................................................... 95

4.4.14 dynamic-cpu-mgmt ................................................................................................................ 95

4.4.15 dynamic-dns ........................................................................................................................... 96

4.4.16 dynamic-dns-ap...................................................................................................................... 98

4.4.17 dynamic-dns-interval .............................................................................................................. 99

4.4.18 dynamic-radius-proxy ........................................................................................................... 100

4.4.19 dynamic-tacacs-proxy .......................................................................................................... 100

SCALANCE W1750D CLI

4 Function Manual, 03/2019, C79000-G8976-C452-04

Page 5

Table of contents

4.5 E ............................................................................................................................................ 102

4.5.1 enet-vlan ............................................................................................................................... 102

4.5.2 enet0-bridging ....................................................................................................................... 103

4.5.3 enet0-port-profile ................................................................................................................... 103

4.5.4 enet1-port-profile ................................................................................................................... 104

4.5.5 enet3-port-profile ................................................................................................................... 105

4.5.6 enet2-port-profile ................................................................................................................... 105

4.5.7 enet4-port-profile ................................................................................................................... 106

4.5.8 enhanced-mesh-role-detect .................................................................................................. 107

4.5.9 extended-ssid ........................................................................................................................ 108

4.6 F ............................................................................................................................................ 109

4.6.1 facebook ............................................................................................................................... 109

4.6.2 factory-ssid-enable ................................................................................................................ 109

4.6.3 firewall ................................................................................................................................... 110

4.6.4 firewall-external-enforcement ............................................................................................... 111

4.7 G ........................................................................................................................................... 113

4.7.1 g-channel .............................................................................................................................. 113

4.7.2 g-ant-pol ................................................................................................................................ 113

4.7.3 g-max-clients ......................................................................................................................... 114

4.7.4 gre ......................................................................................................................................... 115

4.8 H ............................................................................................................................................ 118

4.8.1 hash-mgmt-password ........................................................................................................... 118

4.8.2 hash-mgmt-user .................................................................................................................... 118

4.8.3 help ....................................................................................................................................... 120

4.8.4 hostname .............................................................................................................................. 121

4.8.5 hotspot anqp-3-gpp-profile .................................................................................................... 122

4.8.6 hotspot anqp-domain-name-profile ....................................................................................... 123

4.8.7 hotspot-anqp-ip-addr

-avail-profile ......................................................................................... 124

4.8.8 hotspot anqp-nai-realm-profile .............................................................................................. 126

4.8.9 hotspot anqp-nwk-auth-profile .............................................................................................. 130

4.8.10 hotspot anqp-roam-cons-profile ............................................................................................ 132

4.8.11 hotspot anqp-venue-name-profile ......................................................................................... 133

4.8.12 hotspot h2qp-conn-cap-profile .............................................................................................. 137

4.8.13 hotspot h2qp-oper-class-profile ............................................................................................ 138

4.8.14 hotspot-h2qp-oper-name-profile ........................................................................................... 140

4.8.15 hotspot h2qp-osu-provider-profile ......................................................................................... 141

4.8.16 hotspot h2qp-wan-metrics-profile ......................................................................................... 145

4.8.17 hotspot hs-profile .................................................................................................................. 147

4.8.18 hs2-osu-icon-delete .............................................................................................................. 157

4.8.19 hs2-osu-icon-download ......................................................................................................... 158

4.9 I ............................................................................................................................................. 160

4.9.1 iap-master ............................................................................................................................. 160

4.9.2 ids.......................................................................................................................................... 160

4.9.3 ignore-image-check .............................................................................................................. 168

4.9.4 inactivity-ap-timeout .............................................................................................................. 169

4.9.5 inbound-firewall ..................................................................................................................... 170

4.9.6 internal-domains ................................................................................................................... 172

4.9.7 iot transportProfile ................................................................................................................. 173

4.9.8 iot usetransportProfile ........................................................................................................... 177

4.9.9 ip-address ............................................................................................................................. 178

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 6

Table of contents

4.9.10 ip dhcp .................................................................................................................................. 179

4.9.11 ip dhcp pool .......................................................................................................................... 185

4.9.12 ip-mode ................................................................................................................................ 187

4.9.13 ipm ....................................................................................................................................... 188

4.9.14 ip radius ................................................................................................................................ 189

4.10 L ........................................................................................................................................... 190

4.10.1 l3-mobility ............................................................................................................................. 190

4.10.2 lacp-mode ............................................................................................................................ 191

4.10.3 led-off ................................................................................................................................... 192

4.10.4 loginsession ......................................................................................................................... 193

4.10.5 logout ................................................................................................................................... 194

4.11 M .......................................................................................................................................... 195

4.11.1 mas-integration .................................................................................................................... 195

4.11.2 managed-mode-profile ......................................................................................................... 196

4.11.3 managed-mode-sync-server ................................................................................................ 198

4.11.4 mesh .................................................................................................................................... 198

4.11.5 mesh-cluster ......................................................................................................................... 200

4.11.6 mesh-disable ........................................................................................................................ 201

4.11.7 mgmt-accounting.................................................................................................................. 201

4.11.8 mgmt-auth-server ................................................................................................................. 202

4.11.9 mgmt-auth-server-load-balancing ........................................................................................ 203

4.11.10 mgmt-auth-server-local-backup ........................................................................................... 204

4.11.11 mgmt-user ............................................................................................................................ 205

4.11.12 mtu ....................................................................................................................................... 206

4.12 N ........................................................................................................................................... 207

4.12.1 name .................................................................................................................................... 207

4.12.2 ntp-server ............................................................................................................................. 207

4.13 O .......................................................................................................................................... 209

4.13.1 opendns ............................................................................................................................... 209

4.13.2 openflow

-server.................................................................................................................... 210

4.13.3 organization .......................................................................................................................... 211

4.13.4 out-of-service-hold-on-time .................................................................................................. 212

4.14 P ........................................................................................................................................... 213

4.14.1 pcap ..................................................................................................................................... 213

4.14.2 per-ap-ssid ........................................................................................................................... 214

4.14.3 per-ap-vlan ........................................................................................................................... 214

4.14.4 pin-enable ............................................................................................................................ 215

4.14.5 pin-puk ................................................................................................................................. 216

4.14.6 pin-renew ............................................................................................................................. 216

4.14.7 ping ...................................................................................................................................... 217

4.14.8 pppoe-uplink-profile ............................................................................................................. 218

4.14.9 proxy .................................................................................................................................... 219

4.15 R ........................................................................................................................................... 221

4.15.1 radius-vsa-redirect-url .......................................................................................................... 221

4.15.2 reload ................................................................................................................................... 222

4.15.3 remove-blacklist-client ......................................................................................................... 223

4.15.4 reset drt ................................................................................................................................ 224

4.15.5 restrict-corp-access .............................................................................................................. 224

4.15.6 restrict-mgmt-access ............................................................................................................ 225

SCALANCE W1750D CLI

6 Function Manual, 03/2019, C79000-G8976-C452-04

Page 7

Table of contents

4.15.7 rf-band ................................................................................................................................... 226

4.15.8 rf-zone ................................................................................................................................... 227

4.15.9 rf dot11g-radio-profile............................................................................................................ 227

4.15.10 rf dot11a-radio-profile............................................................................................................ 232

4.15.11 routing-profile ........................................................................................................................ 236

4.16 S ............................................................................................................................................ 238

4.16.1 show 1xcert ........................................................................................................................... 238

4.16.2 show aaa ............................................................................................................................... 238

4.16.3 show about ............................................................................................................................ 239

4.16.4 show access-rule .................................................................................................................. 240

4.16.5 show access-rule-all ............................................................................................................. 242

4.16.6 show acl ................................................................................................................................ 243

4.16.7 show airgroup ....................................................................................................................... 244

4.16.8 show airgroupservice ............................................................................................................ 254

4.16.9 show aigroupservice-ids ....................................................................................................... 257

4.16.10 show ale ................................................................................................................................ 258

4.16.11 show ale stats ....................................................................................................................... 260

4.16.12 show alert global ................................................................................................................... 261

4.16.13 show alg ................................................................................................................................ 263

4.16.14 show all monitor .................................................................................................................... 264

4.16.15 show allowed-aps ................................................................................................................. 265

4.16.16 show a-max-clients ............................................................................................................... 266

4.16.17 show amp-audit ..................................................................................................................... 267

4.16.18 show ap allowed-channels .................................................................................................... 272

4.16.19 show ap allowed-max-EIRP .................................................................................................. 273

4.16.20 show ap arm ......................................................................................................................... 275

4.16.21 show ap association.............................................................................................................. 283

4.16.22 show ap bss-table ................................................................................................................. 284

4.16.23 show ap cacert ...................................................................................................................... 286

4.16.24 show ap mesh cluster ........................................................................................................... 288

4.16.25 show ap mpskcache ............................................................................................................. 290

4.16.26 show ap checksum ............................................................................................................... 291

4.16.27 show ap client-match-live ..................................................................................................... 292

4.16.28 show ap client-match-history ................................................................................................ 293

4.16.29 show ap client-match-refused ............................................................................................... 294

4.16.30 show ap client-match-ssid-table radio-mac .......................................................................... 296

4.16.31 show ap client-match-triggers ............................................................................................... 297

4.16.32 show ap client-probe-report .................................................................................................. 298

4.16.33 show ap client-view ............................................................................................................... 299

4.16.34 show ap debug airwave ........................................................................................................ 300

4.16.35 show ap debug airwave-config-received .............................................................................. 311

4.16.36 show ap debug airwave-data-sent ........................................................................................ 312

4.16.37 show ap debug airwave-events-pending .............................................................................. 313

4.16.38 show ap debug airwave-restore-status ................................................................................. 314

4.16.39 show ap debug airwave-signon-key ..................................................................................... 314

4.16.40 show ap debug airwave-state ............................................................................................... 315

4.16.41 show ap debug airwave-stats ............................................................................................... 317

4.16.42 show ap debug am-config ..................................................................................................... 319

4.16.43 show ap debug auth-trace-buf .............................................................................................. 320

4.16.44 show ap debug ble-config ..................................................................................................... 321

4.16.45 show ap debug ble-counters ................................................................................................. 323

4.16.46 show ap debug ble-daemon ................................................................................................. 323

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 8

Table of contents

4.16.47 show ap debug ble-relay ...................................................................................................... 324

4.16.48 show ap debug ble-table ...................................................................................................... 327

4.16.49 show ap debug ble-table assettags ..................................................................................... 328

4.16.50 show ap debug client-frame-history ..................................................................................... 329

4.16.51 show ap debug client-match ................................................................................................ 330

4.16.52 show ap debug client-stats .................................................................................................. 331

4.16.53 show ap debug client-table .................................................................................................. 337

4.16.54 show ap debug core-info ...................................................................................................... 339

4.16.55 show ap debug crash-info .................................................................................................... 340

4.16.56 show ap debug dhcp-packets .............................................................................................. 340

4.16.57 show ap debug dot1x-statistics ............................................................................................ 342

4.16.58 show ap debug driver-config ................................................................................................ 343

4.16.59 show ap debug lldp .............................................................................................................. 348

4.16.60 show ap debug lldp neighbor ............................................................................................... 350

4.16.61 show ap debug lldp state ..................................................................................................... 351

4.16.62 show ap debug mgmt-frames .............................................................................................. 352

4.16.63 show ap debug network-bssid ............................................................................................. 353

4.16.64 show ap debug persistent-clients......................................................................................... 354

4.16.65 show ap debug power-table ................................................................................................. 355

4.16.66 show ap debug radio-stats ................................................................................................... 356

4.16.67 show ap debug radius-statistics ........................................................................................... 359

4.16.68 show ap debug rfc3576-radius-statistics ............................................................................. 360

4.16.69 show ap debug shaping-table .............................................................................................. 362

4.16.70 show ap debug spanning-tree .............................................................................................. 364

4.16.71 show ap debug stm-config ................................................................................................... 365

4.16.72 show ap debug stm-role ....................................................................................................... 366

4.16.73 show ap debug stystem-status ............................................................................................ 366

4.16.74 show ap debug tacas-statistics ............................................................................................ 367

4.16.75 show ap dot11k-beacon-report ............................................................................................ 368

4.16.76 show ap dot11k-nbrs ............................................................................................................ 369

4.16.77 show ap flash-config ............................................................................................................

370

4.16.78 show ap mesh counters ....................................................................................................... 371

4.16.79 show ap mesh link ............................................................................................................... 373

4.16.80 show ap mesh neighbors ..................................................................................................... 375

4.16.81 show ap monitor ................................................................................................................... 377

4.16.82 show ap pmkcache .............................................................................................................. 389

4.16.83 show ap virtual-beacon-report ............................................................................................. 390

4.16.84 show ap1x ............................................................................................................................ 392

4.16.85 show ap1xcert ...................................................................................................................... 392

4.16.86 show ap-alert ........................................................................................................................ 393

4.16.87 show ap-env ......................................................................................................................... 394

4.16.88 show aps .............................................................................................................................. 395

4.16.89 show app-services ............................................................................................................... 398

4.16.90 show arm config ................................................................................................................... 400

4.16.91 show arm-channels .............................................................................................................. 402

4.16.92 show arp ............................................................................................................................... 404

4.16.93 show attack .......................................................................................................................... 405

4.16.94 show audit-trail ..................................................................................................................... 407

4.16.95 show auth-surviveability ....................................................................................................... 408

4.16.96 show backup-config ............................................................................................................. 409

4.16.97 show banner ......................................................................................................................... 411

4.16.98 show blacklist-client ............................................................................................................. 412

SCALANCE W1750D CLI

8 Function Manual, 03/2019, C79000-G8976-C452-04

Page 9

Table of contents

4.16.99 show ble-config ..................................................................................................................... 413

4.16.100 show calea config ................................................................................................................. 414

4.16.101 show calea statistics ............................................................................................................. 415

4.16.102 show cellular ......................................................................................................................... 416

4.16.103 show cert all .......................................................................................................................... 419

4.16.104 show clarity ........................................................................................................................... 421

4.16.105 show clearpassca ................................................................................................................. 423

4.16.106 show clients .......................................................................................................................... 423

4.16.107 show clock ............................................................................................................................ 427

4.16.108 show cluster-security ............................................................................................................ 430

4.16.109 show config-status ................................................................................................................ 436

4.16.110 show configuration ................................................................................................................ 437

4.16.111 show console-setttings.......................................................................................................... 443

4.16.112 show country-codes .............................................................................................................. 444

4.16.113 show cpcert ........................................................................................................................... 447

4.16.114 show cpu ............................................................................................................................... 448

4.16.115 show datapath ....................................................................................................................... 450

4.16.116 show ddns ............................................................................................................................. 471

4.16.117 show delta-config .................................................................................................................. 472

4.16.118 show derivation-rules ............................................................................................................ 473

4.16.119 show dhcp-allocation ............................................................................................................ 474

4.16.120 show dhcps config ................................................................................................................ 475

4.16.121 show dhcpc-opts ................................................................................................................... 477

4.16.122 show dhcp ............................................................................................................................. 478

4.16.123 show distributed-dhcp-branch-counts ................................................................................... 480

4.16.124 show domain-names ............................................................................................................. 482

4.16.125 show dpi ................................................................................................................................ 482

4.16.126 show dpi-error-page-urls ....................................................................................................... 489

4.16.127 show dpi-stats ....................................................................................................................... 490

4.16.128 show drt state ........................................................................................................................ 494

4.16.129 show election ........................................................................................................................ 495

4.16.130 show esl

................................................................................................................................ 497

4.16.131 show esl-radio ....................................................................................................................... 497

4.16.132 show facebook ...................................................................................................................... 498

4.16.133 show fault .............................................................................................................................. 499

4.16.134 show fiewall ........................................................................................................................... 500

4.16.135 show g-max-clients ............................................................................................................... 501

4.16.136 show gre config ..................................................................................................................... 502

4.16.137 show gre status ..................................................................................................................... 503

4.16.138 show ids ................................................................................................................................ 505

4.16.139 show ids-detection config ..................................................................................................... 507

4.16.140 show ids-protection config .................................................................................................... 509

4.16.141 show inbound-firewall-rules .................................................................................................. 510

4.16.142 show interface counters ........................................................................................................ 511

4.16.143 show image ........................................................................................................................... 512

4.16.144 show iot transportProfile ....................................................................................................... 513

4.16.145 show ip dhcp database ......................................................................................................... 514

4.16.146 show ip igmp ......................................................................................................................... 515

4.16.147 show ip interface ................................................................................................................... 517

4.16.148 show ip route ......................................................................................................................... 518

4.16.149 show ipv6 interface ............................................................................................................... 519

4.16.150 show ipv6 route ..................................................................................................................... 520

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 10

Table of contents

4.16.151 show l3-mobility.................................................................................................................... 521

4.16.152 show lacp status................................................................................................................... 526

4.16.153 show ldap-servers ................................................................................................................ 527

4.16.154 show lhm .............................................................................................................................. 528

4.16.155 show log ap-debug ............................................................................................................... 530

4.16.156 show log apifmgr .................................................................................................................. 531

4.16.157 show log convert .................................................................................................................. 531

4.16.158 show log debug .................................................................................................................... 531

4.16.159 show log drive ...................................................................................................................... 532

4.16.160 show log kernel .................................................................................................................... 532

4.16.161 show log l3-mobility .............................................................................................................. 533

4.16.162 show log network ................................................................................................................. 534

4.16.163 show log openflow ............................................................................................................... 535

4.16.164 show log papi-handler .......................................................................................................... 535

4.16.165 show log pppd ...................................................................................................................... 535

4.16.166 show log rapper.................................................................................................................... 536

4.16.167 show log rapper-brief ........................................................................................................... 536

4.16.168 show log rapper-counter ...................................................................................................... 537

4.16.169 show log sapd ...................................................................................................................... 538

4.16.170 show log scd ........................................................................................................................ 539

4.16.171 show log security.................................................................................................................. 540

4.16.172 show log system................................................................................................................... 540

4.16.173 show log upgrade ................................................................................................................. 541

4.16.174 show log user ....................................................................................................................... 541

4.16.175 show log user-debug ............................................................................................................ 542

4.16.176 show log vpn-tunnel-primary ................................................................................................ 542

4.16.177 show log vpn-tunnel-backup ................................................................................................ 543

4.16.178 show log vpn-tunnel ............................................................................................................. 544

4.16.179 show log wireless ................................................................................................................. 545

4.16.180 show memory ....................................................................................................................... 545

4.16.181 show mgmt-user................................................................................................................... 547

4.16.182 show network ....................................................................................................................... 548

4.16.183 show network-summary

....................................................................................................... 550

4.16.184 show openflow ..................................................................................................................... 551

4.16.185 show opendns ...................................................................................................................... 552

4.16.186 show out-of-service .............................................................................................................. 553

4.16.187 show pppoe .......................................................................................................................... 554

4.16.188 show port status ................................................................................................................... 555

4.16.189 show process ....................................................................................................................... 557

4.16.190 show proxy config ................................................................................................................ 558

4.16.191 show radio config ................................................................................................................. 559

4.16.192 show radio profile ................................................................................................................. 561

4.16.193 show radius-redirect-url ....................................................................................................... 563

4.16.194 show radius-servers support ................................................................................................ 564

4.16.195 show radius status ............................................................................................................... 565

4.16.196 show radseccert ................................................................................................................... 567

4.16.197 show rlts-logs ....................................................................................................................... 568

4.16.198 show rlts-tags ....................................................................................................................... 569

4.16.199 show running-config ............................................................................................................. 569

4.16.200 show snmp-configuration ..................................................................................................... 573

4.16.201 show snmp trap-queue ........................................................................................................ 574

4.16.202 show ssh .............................................................................................................................. 575

SCALANCE W1750D CLI

10 Function Manual, 03/2019, C79000-G8976-C452-04

Page 11

Table of contents

4.16.203 show spectum-alert ............................................................................................................... 576

4.16.204 show speed-test .................................................................................................................... 577

4.16.205 show stats ............................................................................................................................. 578

4.16.206 show subscription-aps .......................................................................................................... 586

4.16.207 show summary ...................................................................................................................... 587

4.16.208 show supported-cert-formats ................................................................................................ 588

4.16.209 show swarm .......................................................................................................................... 588

4.16.210 show syslog-level .................................................................................................................. 590

4.16.211 show tacas-servers ............................................................................................................... 591

4.16.212 show tech-support ................................................................................................................. 592

4.16.213 show time-profile ................................................................................................................... 593

4.16.214 show time-range ................................................................................................................... 594

4.16.215 show tspec-calls .................................................................................................................... 595

4.16.216 show usb status .................................................................................................................... 596

4.16.217 show uncommitted-config ..................................................................................................... 598

4.16.218 show upgrade info ................................................................................................................. 598

4.16.219 show uplink ........................................................................................................................... 599

4.16.220 show uplink-vlan ................................................................................................................... 601

4.16.221 show url-visibility ................................................................................................................... 602

4.16.222 show user .............................................................................................................................. 604

4.16.223 show valid-channels .............................................................................................................. 605

4.16.224 show vlan .............................................................................................................................. 607

4.16.225 show version ......................................................................................................................... 607

4.16.226 show vpn ............................................................................................................................... 608

4.16.227 show vpn tunnels .................................................................................................................. 611

4.16.228 show walled-garden .............................................................................................................. 612

4.16.229 show wifi-uplink ..................................................................................................................... 613

4.16.230 show wired-port ..................................................................................................................... 615

4.16.231 show wired-port-settings ....................................................................................................... 617

4.16.232 show wispr config .................................................................................................................. 619

4.16.233 show xml-api-server

.............................................................................................................. 620

4.16.234 sesimagotag-esl-channel ...................................................................................................... 621

4.16.235 sesimagotag-esl-profile ......................................................................................................... 621

4.16.236 snmp-server .......................................................................................................................... 622

4.16.237 speed test ............................................................................................................................. 623

4.16.238 speed test <server> .............................................................................................................. 625

4.16.239 ssh......................................................................................................................................... 627

4.16.240 subscription-ap ...................................................................................................................... 627

4.16.241 subscription-ap-enable.......................................................................................................... 628

4.16.242 swarm-mode ......................................................................................................................... 629

4.16.243 syslog-level ........................................................................................................................... 630

4.16.244 syslocation ............................................................................................................................ 631

4.16.245 syslog-server ......................................................................................................................... 632

4.17 T ............................................................................................................................................ 633

4.17.1 telnet ..................................................................................................................................... 633

4.17.2 telnet-server .......................................................................................................................... 633

4.17.3 terminal-access ..................................................................................................................... 634

4.17.4 tftp-dump-server .................................................................................................................... 635

4.17.5 traceroute .............................................................................................................................. 636

4.17.6 time-range ............................................................................................................................. 636

4.18 U ............................................................................................................................................ 639

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 12

Table of contents

4.18.1 upgrade-drt ........................................................................................................................... 639

4.18.2 upgrade-image ..................................................................................................................... 639

4.18.3 uplink .................................................................................................................................... 641

4.18.4 uplink-vlan ............................................................................................................................ 644

4.18.5 usb-port-disable ................................................................................................................... 645

4.18.6 user ...................................................................................................................................... 645

4.18.7 url-visibility ............................................................................................................................ 647

4.19 V ........................................................................................................................................... 649

4.19.1 version .................................................................................................................................. 649

4.19.2 virtual-controller.................................................................................................................... 649

4.19.3 vlan ....................................................................................................................................... 651

4.19.4 vlan-name ............................................................................................................................ 652

4.19.5 vpn backup ........................................................................................................................... 652

4.19.6 vpn fast-failover .................................................................................................................... 653

4.19.7 vpn gre-outside .................................................................................................................... 654

4.19.8 vpn hold-time ........................................................................................................................ 655

4.19.9 vpn ikepsk ............................................................................................................................ 656

4.19.10 vpn monitor-pkt-lost-cnt ....................................................................................................... 656

4.19.11 vpn monitor-pkt-send-freq .................................................................................................... 657

4.19.12 vpn reconnect-user-on-failover ............................................................................................ 658

4.19.13 vpn reconnect-time-on-failure .............................................................................................. 659

4.19.14 vpn preemption .................................................................................................................... 660

4.19.15 vpn primary .......................................................................................................................... 660

4.20 W .......................................................................................................................................... 662

4.20.1 wlan walled-garden .............................................................................................................. 662

4.20.2 web-server ........................................................................................................................... 663

4.20.3 wlan captive-portal ............................................................................................................... 664

4.20.4 wlan ssid-profile ................................................................................................................... 667

4.20.5 wlan-external-captive-portal ................................................................................................

. 690

4.20.6 wlan auth-server................................................................................................................... 693

4.20.7 wlan access-rule .................................................................................................................. 696

4.20.8 wifi1-mode ............................................................................................................................ 701

4.20.9 wificall-dns-pattern ............................................................................................................... 702

4.20.10 wlan wispr-profile ................................................................................................................. 703

4.20.11 wifi0-mode ............................................................................................................................ 704

4.20.12 wlan ldap-server ................................................................................................................... 705

4.20.13 write ...................................................................................................................................... 708

4.20.14 wired-port-profile .................................................................................................................. 708

4.20.15 wlan sta-profile ..................................................................................................................... 717

4.20.16 wlan tacacs-server ............................................................................................................... 718

4.21 X ........................................................................................................................................... 721

4.21.1 xml-api-server ...................................................................................................................... 721

4.22 Z ........................................................................................................................................... 723

4.22.1 zeroize-tpm-keys .................................................................................................................. 723

4.22.2 zonenmane .......................................................................................................................... 724

A Appendix A .......................................................................................................................................... 725

A.1 Glossary of Terms ................................................................................................................ 725

Index ................................................................................................................................................... 757

SCALANCE W1750D CLI

12 Function Manual, 03/2019, C79000-G8976-C452-04

Page 13

This document describes the CLI command syntax and provides the following information for each command:

● Command Syntax—The complete syntax of the command.

● Description—A brief description of the command.

● Syntax—A description of the command parameters, the applicable ranges and default

values, if any.

● Usage Guidelines—Information to help you use the command, including prerequisites, prohibitions, and related commands.

● Example—An example of how to use the command.

● Command Information—This table describes command modes and platforms for which

this command is applicable.

The commands are listed in alphabetical order.

Security information

Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.

In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept. Siemens’ products and solutions constitute one element of such a concept.

Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.

For additional information on industrial security measures that may be implemented, please visit https://www.siemens.com/industrialsecurity.

Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers’ exposure to cyber threats.

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under https://www.siemens.com/industrialsecurity.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 14

About this guide

SCALANCE W1750D CLI

14 Function Manual, 03/2019, C79000-G8976-C452-04

Page 15

General

To prevent unauthorized access, note the following security recommendations.

● You should make regular checks to make sure that the device meets these recommendations and/or other security guidelines.

● Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable products (https://www.industry.siemens.com/topics/global/en/industrial-

security/pages/default.aspx).

● When the internal and external network are disconnected, an attacker cannot access internal data from the outside. Therefore operate the device only within a protected network area.

● For communication via non-secure networks use additional devices with VPN functionality to encrypt and authenticate the communication.

● Terminate management connections correctly (WBM. Telnet, SSH etc.).

Physical access

● Restrict physical access to the device to qualified personnel.

Software (security functions)

● Keep the software up to date. Check regularly for security updates of the product. You will find information on this on the Internet pages "Industrial Security (https://www.siemens.com/industrialsecurity)" .

● Inform yourself regularly about security advisories and bulletins published by Siemens ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).

● Only activate protocols that you really require to use the device.

● Use the security functions such as address translation with NAT (Network Address

Translation) or NAPT (Network Address Port Translation) to protect receiving ports from access by third parties.

● Restrict access to the device with a firewall or rules in an access control list (ACL - Access Control List).

● If RADIUS authentication is via remote access, make sure that the communication is within the secured network area or is via a secure channel.

● The option of VLAN structuring provides good protection against DoS attacks and unauthorized access. Check whether this is practical or useful in your environment.

● Enable logging functions. Use the central logging function to log changes and access attempts centrally. Check the logging information regularly.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 16

Security recommendations

● Configure a Syslog server to forward all logs to a central location.

● Use WPA2/ WPA2-PSK with AES to protect the WLAN.

Software (security functions)

● Restrict physical access to the device to qualified personnel

Passwords

● Define rules for the use of devices and assignment of passwords.

● Regularly update passwords and keys to increase security.

● Change all default passwords for users before you operate the device.

● Only use passwords with a high password strength. Avoid weak passwords for example

password1, 123456789, abcdefgh.

● Make sure that all passwords are protected and inaccessible to unauthorized personnel.

● Do not use the same password for different users and systems or after it has expired.

Keys and certificates

● This section deals with the security keys and certificates you require to set up HTTPS ( Hypertext Transfer Protocol Secured Socket Layer).

● We strongly recommend that you create your own HTTPS certificates and make them available. There are preset certificates and keys on the device. The preset and automatically created HTTPS certificates are self-signed. We recommend that you use HTTPS certificates signed either by a reliable external or by an internal certification authority. The HTTPS certificate checks the identity of the device and controls the encrypted data exchange. You can install the HTTPS certificate via the Configuration Manual “SCALANCE W UI”, see "Uploading Certificate".

● Handle user-defined private keys with great caution if you use user-defined SSH or SSL keys.

● Use the certification authority including key revocation and management to sign the certificates.

● Verify certificates and fingerprints on the server and client to avoid "man in the middle" attacks.

● We recommend that you use certificates with a key length of 2048 bits.

● Change keys and certificates immediately, if there is a suspicion of compromise.

SCALANCE W1750D CLI

16 Function Manual, 03/2019, C79000-G8976-C452-04

Page 17

Security recommendations

Secure/non-secure protocols

● Avoid and disable non-secure protocols, for example Telnet and TFTP. For historical

reasons, these protocols are still available, however not intended for secure applications. Use non-secure protocols on the device with caution.

● The following protocols provide secure alternatives:

– SNMPv1/v2 → SNMPv3

Check whether use of SNMPv1 is necessary. SNMPv1 is classified as non-secure. Use the option of preventing write access. The product provides you with suitable setting options. If SNMP is enabled, change the community names. If no unrestricted access is necessary, restrict access with SNMP. Use SNMPv3 in conjunction with passwords.

– HTTP → HTTPS

– Telnet → SSH

– SNTP → NTP

– Use secure protocols when access to the device is not prevented by physical

protection measures.

● To prevent unauthorized access to the device or network, take suitable protective

measures against non-secure protocols.

● If you require non-secure protocols and services, operate the device only within a

protected network area.

● Restrict the services and protocols available to the outside to a minimum.

Available protocols per port

The following list provides you with an overview of the open ports on this device. The table includes the following columns:

● Protocol

All protocols that the device supports

● Port number

Port number assigned to the protocol

● Port status

– Open: The port is always open and cannot be closed.

● Factory setting

– Open: The factory setting of the port is "Open".

– Closed: The factory setting of the port is "Closed".

● Authentication

Specifies whether or not the protocol is authenticated.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 18

Security recommendations

Protocol

Port number

Port status

Factory setting of the port

Authentication Air Monitor

UDP/1144

Open

Yes

slave

Captive portal

TCP/8080

Open

Yes

UDP/1067

Open

UDP/4011

Open

DTLS

UDP/4433

Open

Yes

TCP/80

Open

TCP/4343

Open

Yes

TCP/4343

Open

Yes

TCP/443

Open

Yes

mDNS

UDP/5353

Open

NTP

UDP/123

Open

UDP/8209

Open

UDP/8211

Open

(dTable)

UDP/1616

Open

UDP/1892

Open

SNMPv1

UDP/161

Open

TCP/22

Open

Yes

TCP/2322

Open

Yes

Syslog

UDP/514

Open

Telnet

TCP/23

Open

Yes

Airgroup UDP/53536 Open Open Yes Airgroup Master to

Bootps UDP/67 Open Open No

DHCP

HTTP (redirect

4343)

HTTPS

UDP/53535 Open Open No

Proprietary

RADIUS

SNMPv3 UDP/161 Open Open Yes SSH

UDP/8612 Open Open No

SCALANCE W1750D CLI

18 Function Manual, 03/2019, C79000-G8976-C452-04

Page 19

Note

Although automatic completion is supported for some commands such as configure terminal, the complete exit

end

execution.

SCALANCE W supports the use of CLI for scripting purposes. You can access the SCALANCE W CLI through a SSH.

To enable the SSH access to the SCALANCE CLI:

1. From the SCALCNCE W UI, navigate to

2. Select

3. Click

Enabled from the Terminal access drop-down list.

OK.

Connecting to a CLI Session

On connecting to a CLI session, the system displays its host name followed by the login prompt. Use the administrator credentials to start a CLI session. For example:

(scalance)

User: admin

Password: *****

If the login is successful, the privileged command mode is enabled and a command prompt is displayed. For example:

(scalance)#

The privileged mode provides access to commands. The configuration commands are available in the configuration (config) mode. To move from privileged mode to the configuration mode, enter the following command at the command prompt:

(scalance)# configure terminal

System > Show advanced options.

show, clear, ping, traceroute, and commit

The configure terminal command allows you to enter the basic configuration mode and the command prompt is displayed as follows:

(scalance)(config)#

The SCALANCE W CLI allows CLI scripting in several other sub-command modes to allow the users to configure individual interfaces, SSIDs, access rules, and security settings.

You can use the question mark (?) to view the commands available in a privileged mode, configuration mode, or sub-mode

and

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

commands must be entered at command prompt for successful

Page 20

SCALANCE W CLI

Applying Configuration Changes

Each command processed by the Virtual Controller is applied on all the slave APs in a cluster. When you make configuration changes on a master AP in the CLI, all associated APs in the cluster inherit these changes and subsequently update their configurations. The changes configured in a CLI session are saved in the CLI context.

The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session: therefore, SCALANCE W recommends that you configure fewer changes at a time and apply the changes at regular intervals.

To apply and save the configuration changes at regular intervals, use the following command in the privileged mode:

(scalance)# commit apply

To apply the configuration changes to the cluster, without saving the configuration, use the following command in the privileged mode:

(scalance)# commit apply no-save

To view the changes that are yet to be applied, use the following command in the privileged mode:

(scalance)# show uncommitted-config

To revert to the earlier configuration, use the following command in the privileged mode.

(scalance)# commit revert

Example:

(scalance)(config)# rf dot11a-radio-profile

(scalance)# show uncommitted-config

Configuration Sub-modes

Some commands in configuration mode allow you to enter into a sub-mode to configure the commands specific to that mode. When you are in a configuration sub-mode, the command prompt changes to indicate the current sub-mode.

You can exit a sub-command mode and return to the basic configuration mode or the privileged Exec (enable) mode at any time by executing the

exit or end command.

SCALANCE W1750D CLI

20 Function Manual, 03/2019, C79000-G8976-C452-04

Page 21

SCALANCE W CLI

Sequence-Sensitive Command

Corresponding no command

opendns <username> <password>

no opendns

rule <dest> <mask> <match> <protocol>

<port>}}[<option1…option9>]

no rule <dest> <:mask> <match> <protocol>

mgmt-auth-server <auth-profile-name>

no mgmt-auth-server <auth-profilename>

set-role <attribute>{{equals| not-equals|

no set-role <attribute>{{equals| not-

with| contains}

no set-role

set-vlan <attribute>{{equals| not-equals|

no set-vlan <attribute>{{equals| not-

with| contains}

no set-vlan

auth-server <name>

no auth-server <name>

Deleting Configuration Settings

Use the no command to delete or negate previously-entered configurations or parameters.

● To view a list of no commands, type

followed by the question mark. For example:

(scalance)(config) # no?

● To delete a configuration, use the

following command removes a configured user role:

(scalance)(config) # no user <username>

● To negate a specific configured parameter, use the

For example, the following command deletes the PPPoE user configuration settings:

(scalance)(config) # pppoe-uplink-profile

(scalance)(pppoe_uplink_profile)# no pppoe-username

Using Sequence Sensitive Commands

The SCALANcE W CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, Siemens recommends that you remove the existing configuration before adding or modifying the configuration details for sequence-sensitive commands. You can either delete an existing profile or remove a specific configuration by using the commands.

The following table lists the sequence-sensitive commands and the corresponding command to remove the configuration.

no at the prompt in the relevant mode or sub-mode

no form of a configuration command. For example, the

no parameter within the command.

no…

Table 3- 1

<start-port> <end-port> {permit |deny | src-nat | dst-nat {<IPaddress> <port>|

startswith| ends-with| contains} <operator> <role>| valueof}

startswith| ends-with| contains} <operator> <VLAN-ID>| value-of}

Sequence-Sensitive Commands

<start-port> <end-port> {permit | deny | src-nat | dst-nat}

equals| starts-with| ends<operator>| value-of}

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 22

SCALANCE W CLI

3.1 Saving Configuration Changes

The

running-config

are yet to be saved. To view the running-config of an AP, use the following command:

(scalance) # show running-config

When you make configuration changes through the CLI, the changes affect the current running configuration only. To save your configuration changes, use the following command in the privileged Exec mode:

(scalance)# write memory

Commands that Reset the AP

If you use the CLI to modify a currently provisioned radio profile, the changes take place immediately. A reboot of the AP is not required to apply the configuration changes. Certain commands, however, automatically force AP to reboot. Verify the current network loads and conditions before executing the commands that enforce a reboot of the AP, as they may cause a momentary disruption in service as the unit resets.

reload command resets an AP.

The

holds the current AP configuration, including all pending changes which

SCALANCE W1750D CLI

22 Function Manual, 03/2019, C79000-G8976-C452-04

Page 23

SCALANCE W CLI

Key

Effect

Description

Ctrl A

Home

Move the cursor to the beginning of the line.

Ctrl B row

Ctrl D

Delete Right

Delete the character to the right of the cursor.

Ctrl E

Ctrl F arrow

Ctrl K

Delete Right

Delete all characters to the right of the cursor.

Ctrl N arrow

Ctrl P or up arrow

Display the previous command in the command history.

Ctrl T ter to the right of the cursor.

Ctrl U

Clear

Clear the line.

Ctrl W the first space encountered.

Ctrl X

Delete Left

Delete all characters to the left of the cursor.

3.2 Command Line Editing

The system records your most recently entered commands. You can review the history of your actions, or reissue a recent command easily, without having to retype it.

To view items in the command history, use the

down

and the

arrow key to move forward. To reissue a specific command, press Enter when

arrow key to move back through the list

the command appears in the command history. You can also use the command line editing feature to make changes to the command prior to entering it. The command line editing feature allows you to make corrections or changes to a command without retyping. The following table lists the editing controls. To use key shortcuts, press and hold the

Ctrl button

while you press a letter key.

Table 3- 2 Line Editing Keys

or the left ar-

End Move the cursor to the end of the line.

or the right

or the down

Transpose Swap the character to the left of the cursor with the charac-

Back Move the cursor one character left.

Forward Move the cursor one character right.

Next Display the next command in the command history.

Delete Word Delete the characters from the cursor up to and including

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 24

SCALANCE W CLI

Address/Identifier

Description

dotted decimal notation (for example, 192.0.2.1).

notation (for example, 255.255.255.0).

00:05:4e:50:14:aa).

sensitive (for example, WLAN-01).

used from the AP. Use the same format as for a MAC address.

ESSID includes spaces, enclose the name in quotation marks.

3.3 Specifying Addresses and Identifiers in Commands

This section describes addresses and other identifiers that you can reference in CLI commands.

Table 3- 3 Addresses and Identifiers

IP address For any command that requires entry of an IP address to specify a

network entity, use IPv4 network address format in the conventional

Netmask address For subnet addresses, specify a subnet mask in dotted decimal

MAC address For any command that requires entry of a device’s hardware ad-

dress, use the hexadecimal format (for example,

SSID A unique character string (sometimes referred to as a network

name), consisting of no more than 32 characters. The SSID is case-

BSSID This entry is the unique hard-wireless MAC address of the AP. A

unique BSSID applies to each frequency— 802.11a and 802.11g—

ESSID Typically the unique logical name of a wireless network. If the

SCALANCE W1750D CLI

24 Function Manual, 03/2019, C79000-G8976-C452-04

Page 25

SCALANCE W CLI

Type Style

Description

mark the titles of books.

Boldface

Commands

amples of commands and command output.

Do not type the angle brackets.

[square brackets]

optional. Do not type the brackets.

{Item_A|Item_B}

braces or bars.

{ap-name <ap-name>}|{ipaddr <ip-

the braces or bars.

Note

NOTICE

WARNING

3.4 Typographic Conventions

The following conventions are used throughout this document to emphasize important concepts:

Table 3- 4 Typographical Conventions

Italics

This style is used for emphasizing important terms and to

This style is used for command names and parameter

options when mentioned in the text. This fixed-width font depicts command syntax and ex-

In the command syntax, text within angle brackets represents items that you should replace with information appropriate to your specific situation.

For example, ping <ipaddr> In this example, you would type “ping” at the system

prompt exactly as shown, followed by the IP address of the system to which ICMP echo packets are to be sent.

In the command syntax, items enclosed in brackets are

In the command examples, single items within curled braces and separated by a vertical bar represent the available choices. Enter only one choice. Do not type the

addr>}

Two items within curled braces indicate that both parameters must be entered together. If two or more sets of curled braces are separated by a vertical bar, like in the example to the left, enter only one choice. Do not type

The following informational icons are used throughout this guide:

Indicates helpful suggestions, pertinent information, and important things to remember.

Indicates a risk of damage to your hardware or loss of data.

Indicates a risk of personal injury or death.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 26

SCALANCE W CLI

3.5 Industry Online Support

In addition to the product documentation, also check out the comprehensive online information platform of Siemens Industry Online Support at the following Internet address:

https://support.industry.siemens.com/cs/en/

Apart from news, there you will also find:

● Project information: Manuals, FAQs, downloads, application examples etc.

● Contacts, Technical Forum

● The option submitting a support query:

https://support.industry.siemens.com/My/ww/en/requests

● Our service offer:

Right across our products and systems, we provide numerous services that support you in every phase of the life of your machine or system - from planning and implementation to commissioning, through to maintenance and modernization.

You will find contact data on the Internet at the following address: https://www.automation.siemens.com/aspa_app/?ci=yes&lang=en

SCALANCE W1750D CLI

26 Function Manual, 03/2019, C79000-G8976-C452-04

Page 27

Parameter

Description

Range

0.1 dBm and negative values.

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.1 A

4.1.1 a-channel

Description

This command configures 5 GHz radio channels for a specific AP.

Syntax

a-channel <channel> <tx-power>

<channel> Configures the specified 5 GHz channel The valid channels for a band are

<tx-power> Configures the specified

Usage Guidelines

Use this command to configure radio channels for the 5 GHz band for a specific AP.

Example

The following example configures the 5 GHz radio channel:

(scalance)# a-channel 44 18

Command Information

determined by the AP regulatory domain.

-51 dBm to 51 dBm

transmission power values. It also supports

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 28

CLI Commands

Parameter

Description

Range

Default

val is ranged in minutes.

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

4.1.2 aaa dns-query-interval

Description

This command configures the interval at which the dns server sends out a query.

Syntax

aaa dns-query-interval <interval>

no aaa dns-query-interval

Usage Guidelines

Use this command to configure the time interval for sending out dns queries.

Example

The following example shows the output of the aaa dns-query-interval command:

20:4c:03:24:89:18 (config) # aaa dns-query-interval 15

Command Information

The time interval at which the query must be sent. The inter-

0 - 60 mins 15 mins

SCALANCE W1750D CLI

28 Function Manual, 03/2019, C79000-G8976-C452-04

Page 29

CLI Commands

Parameter

Description

add <attribute>

attribute ID (integer), and type (date, integer, IP address, or string).

date

integer

Adds an integer attribute

ipaddr

string

Adds a date attribute

vendor

(Optional) Display attributes for a specific vendor name and vendor ID.

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

4.1.3 aaa radius-attributes

Description

This command configures RADIUS attributes to statically configure values to be included in RADIUS Access- Requests and Accounting-Requests.

Syntax

aaa radius-attributes add <attribute> <attribute-id> {date|integer|ipaddr|string}

[vendor <name> <vendor-id>]

<attribute-id>

Usage Guidelines

Add RADIUS attributes for use in SDRs. Use the show aaa radius-attributes command to display a list of the current RADIUS attributes recognized by the Mobility Master. To add a RADIUS attribute to the list, use the

Example

The following command adds the VSA-User-Role:

(scalance) (config)# aaa radius-attributes add User-Role 1 string vendor Siemens 4239

Command Information

Adds the specified attribute name (alphanumeric string), associated

Adds a date attribute

Adds an ip address attribute

aaa radius-attributes command.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 30

CLI Commands

Parameter

Description

<profile_name>

The specified RADIUS modifier profile name

clone

exclude

Attribute to be excluded in RADIUS request.

include no

Delete Command

4.1 A

4.1.4 aaa radius modifier

Description

This command configures the RADIUS modifier profile to customize the attributes that are included, excluded and modified in the RADIUS request before it is sent to the authentication server.

Syntax

aaa radius-attributes modifier <profile_name>

Copy data from another Radius Modifier Profile.

Authentication protocol type. Use PAP as the authentication typeAttribute/Value to be included in RADIUS request.

Usage Guidelines

Example

Use the show aaa radius modifier command to display a list of RADIUS modifier profiles. To create a RADIUS modifier profile with customized attributes, use the

aaa radius-attributes

command.

Example for Included attribute

(scalance) [md](config) #aaa radius-attributes add BW-Area-Code 18 integer vendor

Boingo 22472

(scalance) [md](Radius Modifier Profile "radmodifier1") # include BW-Area-Code static

"212"

(scalance) [md](Radius Modifier Profile "radmodifier1") # no include BW-Area-Code

Example for excluded attribute

(scalance) (config) #aaa radius-attributes add BW-Area-Code 18 integer vendor Boingo

22472

(scalance) (Radius Modifier Profile "radmodifier1") # exclude BW-Area-Code

(scalance) (Radius Modifier Profile "radmodifier1") # no exclude BW-Area-Code

Example for modified attribute

Default attributes to carry to radius server can be modified with include option.

(scalance) Radius Modifier Profile "radmodifier1") # include "Siemens -location-id"

static "Shim- office"

SCALANCE W1750D CLI

30 Function Manual, 03/2019, C79000-G8976-C452-04

Page 31

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

Authentication server for which the authentication test must be run.

username <username>

password <passwd>

Password to use to test the authentication server.

auth-type <type>

Authentication protocol type. Use PAP as the authentication type.

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.1 A

Command Information

4.1.5 aaa test-server

Description

This command tests a configured authentication server.

Syntax

aaa test-server <servername> username <username> password <passwd> auth-type <type>

Usage Guidelines

This command verifies the status of RADIUS authentication between the AP and RADIUS or AAA server.

Example

The following example shows the output of the aaa test-server command:

Authentication is successful

Command Information

Username to use to test the authentication server.

4.1.6 a-ant-pol

Description

This command configures the antenna polarization value for 5 GHz radio channels.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 32

CLI Commands

Parameter

Description

Range

<pol>

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.1 A

Syntax

a-ant-pol <pol>

Usage Guidelines

Use this command to set the antenna polarization value for 5 GHz radio channel.

Example

The following example configures the antenna polarization value for a 5 GHz radio channel:

(scalance)# a-ant-pol 0

Command Information

4.1.7 advanced-zone

Denotes the antenna polarization value for 5 GHz radio channel.

• 0: Co-Polarized radio ID

• 1: Cross-Polarized radio ID

0 or 1

Description

This command is used to enable or disable the advanced zone feature that can configure up to 32 SSIDs. Since the mapping method of the WLAN index and BSSID index are different, when you change the advanced zone configuration, the BSSID is removed and created again.

When advanced zone is enabled:

● The WLAN SSID profile will remain inactive without the zone.

● Configure the AP zone. Otherwise, keep the WLAN SSIDs inactive.

● A zone can be assigned to a maximum of up to 16 SSIDs. However, if the extended SSID

is disabled, a zone can be assigned to a maximum of up to 14 SSIDs wherein the first two virtual APs are reserved for mesh.

Syntax

advanced-zone

no…

SCALANCE W1750D CLI

32 Function Manual, 03/2019, C79000-G8976-C452-04

Page 33

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

Parameter

Description

Default

<addr>

<Port>

location reports are sent.

[include-unassoc-

mobile unit reports are sent to the Aeroscout RTLS server.

Removes the Aeroscout RTLS configuration.

—

4.1 A

Example

(scalance)(config)# advanced-zone

Command Information

4.1.8 aeroscout-rtls

Description

This command configures the Aeroscout RTLS settings for Scalance W and sends the RFID tag information to an Aeroscout RTLS server.

Syntax

Usage Guidelines

aeroscout-rtls <addr> <Port> [include-unassoc-sta]

no…

sta]

IP address of the Aeroscout RTLS server to which the location reports are sent.

Port number of the Aeroscout RTLS server to which the

Includes the client stations not associated to any AP when

—

Disabled

This command allows you to integrate Aeroscout RTLS server with Scalance W by specifying the IP address and port number of the Aeroscout RTLS server. When enabled, the RFID tag information for the stations associated with an AP are sent to the AeroScout RTLS. You can also send the RFID tag information for the stations that are not associated with any AP.

Example

The following example configures the Aeroscout RTLS server:

(scalance)(config)# aeroscout-rtls 192.0.2.2 3030 include-unassoc-sta

(scalance)(config)# end

(scalance)# commit apply

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 34

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

Range

Default

cppm

configured.

cppm-query-interval

of each device to the available services.

cppm-server <server-name>

server information for AirGroup policy.

disable

Disables the AirGroup feature.

—

enable [dlna-only| mdns-

dlna-only

enable

mdns-only

enable

for AirGroup enabled devices.

4.1 A

Command Information

4.1.9 airgroup

Description

This command configures the AirGroup settings on an AP.

Syntax

airgroup cppm

cppm-query-interval

cppm-server disable

enable

enable-guest-multicast multi-swarm

Enforces the discovery of the ClearPass Policy Manager registered devices. When enabled, only devices registered with ClearPass PolicyManager will be discovered by Bonjour® or DLNA devices, based on the ClearPass Policy Manager policy

only]

Configures a time interval at which Scalance W sends a query to ClearPass Policy Manager for mapping the access privileges

Configures the ClearPass Policy Manager

Enables the mDNS or DLNA or both. When

, the DLNA support is enabled for

AirGroup enabled devices. When

with

— Enabled

1-24 10 hours

— —

command is executed with

command is executed

, the Bonjour support is enabled

SCALANCE W1750D CLI

34 Function Manual, 03/2019, C79000-G8976-C452-04

Page 35

CLI Commands

Parameter

Description

Range

Default

enable-guest-multicast

policies in guest VLAN.

multi-swarm

lers specified for L3 Mobility.

no…

parameters under the airgroup command.

no airgroup

Removes the AirGroup configuration.

—

AP Platform

Command Mode

sub-mode.

4.1 A

Usage Guidelines

Example

Allows the users to use the Bonjour or

— — DLNA services enabled in a guest VLAN. When enabled, the Bonjour or DLNA devices will be visible only in the guest VLAN and AirGroup will not discover or enforce

Enables inter cluster mobility. Whenena-

— Disabled bled, the AP shares the mDNS database information with the other clusters. The AirGroup records in the Virtual Controller can be shared with all the Virtual Control-

Removes the configuration settings for

— —

Use this command to configure the AirGroup, the availability of the AirGroup services, and ClearPass Policy Manager servers.

The following example configures an AirGroup profile:

(scalance)(config)# airgroup

(scalance)(airgroup)# enable

(scalance)(airgroup)# cppm enforce-registration

(scalance)(airgroup)# cppm-server Test

(scalance)(airgroup)# cppm-query-interval 10

(scalance)(airgroup)# enable-guest-multicast

(scalance)(airgroup)# multi-swarm

(scalance)(airgroup)# end

(scalance)# commit apply

Command Information

All platforms Configuration mode and AirGroup configuration

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 36

CLI Commands

Parameter

Description

Range

<air-

You can allow all services or add custom services. Up to 10 services can be configured on an AP.

description <description>

4.1 A

4.1.10 airgroupservice

Description

This command configures the availability of AirGroup services for the AP clients.

Syntax

airgroupservice <airgroupservice>

description <description>

disable

disallow-role <role>

disallow-vlan <VLAN-ID>

enable

id <AirGroupservice-ID>

no…

groupservice>

Specifies the AirGroup service to configure. The following pre-configured services are available for AP clients:

• AirPlay™— Apple® AirPlay allows wireless streaming of music, video, and slideshows from your iOS device to Apple TV® and other devices that support the AirPlay feature.

• AirPrint™— Apple® AirPrint allows you to print from an iPad®, iPhone®, or iPod® Touch directly to any AirPrint compatible printers.

• iTunes— iTunes service is used by iTunes Wi-Fi sync and iTunes home-sharing applications across all Apple® devices.

• RemoteMgmt— Use this service for remote login, remote man- agement, and FTP utilities on Apple® devices.

• Sharing— Applications such as disk sharing and file sharing, use the service ID that are part of this service on one or more Apple® devices.

• ChromeCast—ChromeCast service allows you to use a ChromeCast device to play audio or video content on a high definition television by streaming content through Wi-Fi from the Internet or local network.

• DLNA Media—Applications such as Windows Media Player use this service to browse and play media content on a remote device.

• DLNA Print—This service is used by printers that support DLNA.

—

Adds a description to the AirGroup service profile. —

SCALANCE W1750D CLI

36 Function Manual, 03/2019, C79000-G8976-C452-04

Page 37

CLI Commands

Parameter

Description

Range

disable

Disables AirGroup services for the profile.

—

disallow-role

disallow-vlan

from being discovered.

enable

Enables the AirGroup service for the profile.

—

id <air-

NOTE: services.

no…

Removes the AirGroup service configuration.

—

AP Platform

Command Mode

All platforms

Configuration mode and AirGroup services configuration sub-mode.

4.1 A

Usage Guidelines

Example

<role>

<VLAN-ID>

groupserviceid>

Restricts the user roles specified for role from accessing the AirGroup service.

Restricts the AirGroup servers connected on the specified VLANs

Allows you to specify the AirGroup service ID corresponding to the service that you are trying to configure.

The service IDs cannot be added for the pre- configured

Disabled

—

Use this command to enforce AirGroup service policies and define the availability of a services for an AirGroup profile. When configuring AirGroup service for an AirGroup profile, you can also restrict specific user roles and VLANs from availing the AirGroup services.

The following example configures AirGroup services:

(scalance)(config)# airgroupservice AirPlay

(scalance)(airgroup-service)# description AirPlay Service

(scalance)(airgroup-service)# disallow-role guest

(scalance)(airgroup-service)# disallow-vlan 200

(scalance)(airgroup-service)# end

(scalance)# commit apply

Command Information

4.1.11 airwave-rtls

Description

This command integrates AirWave RTLS settings for Scalance W and sends the RFID tag information to an AirWave RTLS server with the RTLS feed to accurately locate the wireless clients.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 38

CLI Commands

Parameter

Description

Default

<addr>

Configures the IP address of the AirWave RTLS server.

—

<Port>

<key>

Configures key for service authorization.

—

include-unassoc-

to any AP (unassociated stations).

no…

Removes the specified configuration parameter.

—

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

Syntax

airwave-rtls <addr> <Port> <key> <frequency> [include-unassoc-sta]

no…

Configures the port for the AirWave RTLS server. —

sta

Usage Guidelines

Use this command to send the RFID tag information to AirWave RTLS. Specify the IP address and port number of the AirWave server, to which the location reports must be sent. You can also send reports of the unassociated clients to the RTLS server for tracking purposes

Example

The following command enables AirWave RTLS:

(scalance)(config) # airwave-rtls ams-ip 192.0.2.3 3030 pass@1234 5 include-unassoc-

Command Information

Configures the frequency at which packets are sent to the RTLS server in seconds.

When enabled, this option sends mobile unit reports to the AirWave RTLS server for the client stations that are not associated

Disabled

4.1.12 ale-report-interval

Description

This command configures the interval at which an AP sends data to the ALE server.

Syntax

ale-report-interval <seconds>

SCALANCE W1750D CLI

38 Function Manual, 03/2019, C79000-G8976-C452-04

Page 39

CLI Commands

Parameter

Description

Range

Default

ale-report<seconds>

report the AP and client details to the ALE server.

seconds

no…

Removes the specified configuration parameter.

—

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

ale-server <server>

no…

Removes the specified configuration parameter.

4.1 A

…

interval

Usage Guidelines

Use this command to specify an interval for AP and ALE server communication.

Example

The following example configures the ALE server details:

(scalance)(config)# ale-report-interval 60

Command Information

4.1.13 ale-server

Configures an interval at which the Virtual Controller can

6–60

Description

Syntax

Usage Guidelines

Example

This command configures ALE server details for AP integration with ALE.

ale-server <server>

no…

Allows you to specify the FQDN or IP address of the ALE server.

Use this command to enable an AP for ALE support.

The following example configures the ALE server details:

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 40

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Command/Parameter

Description

Default

sccp-disable

Disables the SCCP.

Enabled

sip-disable

Disables the SIP for VOIP and other text and multimedia sessions.

Enabled

vocera-disable

no…

Removes the specified configuration parameter.

—

4.1 A

(scalance)(config)# ale-server AleServer1

Command Information

4.1.14 alg

Description

This command allows you to modify the configuration settings for ALG protocols enabled on an AP. An application-level gateway consists of a security component that augments a firewall or NAT used in a network.

Syntax

alg

sccp-disable

Usage Guidelines

Example

sip-disable

vocera-disable

no…

Disables the VOCERA protocol. Enabled

Use this command to functions such as SIP, Vocera, and Cisco Skinny protocols for ALG.

The following example configures the ALG protocols:

(scalance)(config)# alg

(scalance)(ALG)# sccp-disable

(scalance)(ALG)# no sip-disable

(scalance)(ALG)# no vocera-disable

SCALANCE W1750D CLI

40 Function Manual, 03/2019, C79000-G8976-C452-04

Page 41

CLI Commands

AP Platform

Command Mode

mode.

Parameter

Description

allowed-ap <MACaddress>

no…

Removes the specified configuration parameter.

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

(scalance)(ALG)# end

(scalance)# commit apply

Command Information

All platforms Configuration mode and ALG configuration sub-

4.1.15 allowed-ap

Description

This command allows an AP to join the AP cluster.

Syntax

allowed-ap <MAC-address>

no…

Usage Guidelines

Use this command to allow an AP to join the cluster.

Example

The following command configures an allowed AP:

(scalance)(config)# allowed-ap 01:23:45:67:89:AB

Command Information

Specifies the MAC address of the AP that is allowed to join the cluster.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 42

CLI Commands

Parameter

Description

allow-new-aps

Allows new access points in the domain.

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

4.1.16 allow-new-aps

Description

This command allows the new access points to join the AP cluster.

Syntax

allow-new-aps

no…

Removes the specified configuration parameter.

Usage Guidelines

Use this command to allow the new access points to join the AP cluster. When this command is enabled, only the licensed slave APs can join the cluster.

Example

The following command allows the new APs to join the cluster.

(scalance)(config)# allow-new-aps

Command Information

4.1.17 a-max-clients

Description

This command configures the maximum number of clients allowed for an SSID profile on a 5 GHz radio channel.

SCALANCE W1750D CLI

42 Function Manual, 03/2019, C79000-G8976-C452-04

Page 43

CLI Commands

Parameter

Description

Range

<ssid_profile>

limit is to be configured.

<max-clients>

AP Platform

Command Mode

All Platforms

Privileged EXEC mode

Parameter

Description

<IP-address or domain

Wave Management Server.

no…

Removes the specified configuration parameter.

4.1 A

Syntax

a-max-clients <ssid_profile> <max-clients>

Usage Guidelines

Use this command to set the maximum number of clients allowed to connect to 5 GHz radio channels for a specific SSID profile. This is a per-AP and per-Radio configuration.

Example

The following example configures the maximum number of clients for a 5 GHz radio channel:

(scalance)# a-max-clients test1 35

Command Information

Denotes the SSID profile for which the maximum clients

Denotes the maximum number of clients that can be configured on the 5 GHz radio channel of the AP.

—

1 to 255.

4.1.18 ams-backup-ip

Description

This command adds the IP address or domain name of the backup AirWave Management server.

Syntax

ams-bacams-ip kup-ip <IP-address or domain name>

no…

name>

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Configures the IP address or domain name of the secondary Air-

Page 44

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

<Name>

under the Groups tab in the AirWave UI.

4.1 A

Usage Guidelines

Use this command to add the IP address or domain name of the backup AirWave Management Server. The backup server provides connectivity when the AirWave primary server is down. If the AP cannot send data to the primary server, the Virtual Controller switches to the backup server automatically.

Example

The following command configures an AirWave backup server.

(scalance)(config)# ams-backup-ip 192.0.2.1

Command Information

4.1.19 ams-identity

Description

This command uniquely identifies the group of APs managed or monitored by the AirWave Management console. The name can be a location, vendor, department, or any other identifier.

Syntax

ams-identity <Name>

Usage Guidelines

Use this command to assign an identity for the APs monitored or managed by the AirWave Management Server.

Configures a name that uniquely identifies the AP on the AirWave Management server. The name defined for this command will be displayed

Example

The following command configures an AirWave identifier:

(scalance)(config)# ams-identity aruba

SCALANCE W1750D CLI

44 Function Manual, 03/2019, C79000-G8976-C452-04

Page 45

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

<IP-address or domain

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

Command Information

4.1.20 ams-ip

Description

This command configures the IP address or domain name of the AirWave Management console for an AP.

Syntax

ams-ip <IP-address or domain name>

no…

name>

Usage Guidelines

Use this command to configure the IP address or domain name of the AMS console for an AP.

Example

The following command configures the AirWave Management Server.

(scalance)(config)# ams-ip 192.0.1.2

Command Information

4.1.21 ams-key

Configures the IP address or domain name of an AirWave Management server for an AP.

Description

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

This command assigns a shared key for service authorization.

Page 46

CLI Commands

Parameter

Description

<key>

Authorizes the first Virtual Controller to communicate with the AirWave server.

no…

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

peap

tls

Configures TLS based 802.1X authentication type.

tpm

Configures a factory- installed TPM certificate for AP authentication.

validate-server

cate in the AP database.

no…

Removes the configuration.

4.1 A

Syntax

ams-key <key>

no…

Removes the specified configuration parameter.

Usage Guidelines

Use this command to assign a shared key for service authorization. This shared key is used for configuring the first AP in the AP network.

Example

The following command configures the shared key for the AirWave management server.

(scalance)(config)# ams-key key@789

Command Information

4.1.22 ap1x

Description

This command sets the 802.1X authentication type on the uplink ports of AP.

Syntax

ap1x {peap|tls {tpm|user}} [validate-server]

no…

Configures PEAP based 802.1X authentication type.

Validates the authentication server credentials against the CA certifi-

SCALANCE W1750D CLI

46 Function Manual, 03/2019, C79000-G8976-C452-04

Page 47

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

wired uplink ports with 802.1X authentication enabled.

no…

Removes the configuration.

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.1 A

Usage Guidelines

Use this command to configure 802.1X authentication on uplink ports of an AP, so that the APs can authenticate as 802.1X supplicant against the wired ports.

Command Information

4.1.23 ap1x-peap-user

Description

This command configures the user name and password variables to set the AP as a 802.1X supplicant to authenticate against the wired ports.

Syntax

ap1x-peap-user <ap1xuser> <password>

no…

Usage Guidelines

Use this command to configure and store the user name and password variables in AP flash. This configuration is required for AP to authenticate as 802.1X supplicant against the wired ports that are configured to use 802.1X protocols for authenticating clients.

Command Information

Configures the user name variable for AP to authenticate against the wired uplink ports with 802.1X authentication enabled.

Configures the password variable for AP to authenticate against the

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 48

CLI Commands

Parameter

Description

Range

band

NOTE:

session lasts for less than 10 seconds.

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.1 A

4.1.24 ap-frequent-scan

Description

This command enables an AP to search for a new environment, triggering the ARM profile to perform frequent scanning of transmission signals in a short span of time. Once the frequent scanning is complete, the ARM selects a valid channel of transmission.

Syntax

ap-frequent-scan <band>

Usage Guidelines

Example

Sets a frequency band of the transmission signal during frequent scanning.

Client connection is impacted for a few seconds when the frequent scanning is in progress. The connection is re-established after the scanning is complete. Typically, a frequent scanning

2.4, 5.0, all

Execute this command to enable the AP to perform frequent scanning of transmission signals, and to select a valid channel for transmission.

The following checks must be performed before scanning:

● The DFS channels are skipped.

● The AP is on stand-alone mode.

● The

client-aware parameter is disabled by executing the arm command.

The following example triggers the ARM to perform frequent scanning on a 2.4 GHz frequency band radio profile:

(scalance)# ap-frequent-scan 2.4

Command Information

SCALANCE W1750D CLI

48 Function Manual, 03/2019, C79000-G8976-C452-04

Page 49

CLI Commands

Parameter

Description

Range

Default

ap-installation

mode based upon the AP model type.

AP Platform

Command Mode

Parameter

Description

cplogo-install

Installs the captive portal logo on the AP.

cplogo-uninstall

Uninstalls the captive portal logo on the AP.

4.1 A

4.1.25 ap-installation

Description

This command tests a configured authentication server.

Syntax

ap-installation default|indoor|outdoor

Usage Guidelines

Use this command to provision an outdoor AP into an indoor AP or vice versa. The AP needs to be rebooted for the configuration to take effect.

Example

The following example changes the installation type of the AP from default to outdoor:

(scalance)# ap-installation outdoor

Command Information

All platforms Privileged EXEC mode

Specify the type of installation (indoor or outdoor). The default parameter automatically selects an installation

default indoor outdoor

default

4.1.26 apply

Description

This command is used to save or apply the configuration settings on the AP.

Syntax

apply {cplogo-install| cplogo-uninstall| debug-command| delta-config}

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 50

CLI Commands

Parameter

Description

debug-command

Applies the configuration settings from the debug command.

delta-config

AP Platform

Command Mode

All platforms

Privileged EXEC mode.

4.1 A

Usage Guidelines

Use this command to apply the current configuration settings on the AP.

Example

The following example installs the captive portal logo on an AP.

(scalance)(config)# apply cplogo-inistall http://cp.logo.com

The following example uninstalls the captive portal logo on an AP.

(scalance)(config)# apply cplogo-inistall http://cp.logo.com

Command Information

Applies the configuration settings from the

command.

4.1.27 arm

Description

This command assigns an ARM profile for an AP and configures ARM features such as band steering, spectrum load balancing, airtime fairness mode, and access control features.

Syntax

arm

80mhz-support

a-channels <channel>

air-time-fairness-mode {<default-access>| <fair-access>| <preferred-access>}

backoff-time <secs>

band-steering-mode {balance-bands|prefer-5ghz| force-5ghz| disable}

channel-quality-aware-arm-disable

channel-quality-threshold

channel-quality-wait-time

client-aware

SCALANCE W1750D CLI

50 Function Manual, 03/2019, C79000-G8976-C452-04

Page 51

CLI Commands

Command/Parameter

Description

Range

Default

80mhz-support

NOTE: can be configured with 80 MHz channels.

a-channels <achannel>

air-time-fairness-

backoff-time <secs>

after requesting a new channel or power.

4.1 A

client-match [bad-snr <snr> | [calc-interval <interval>| calc-threshold <thresh>|

clientthresh<thresh> | debug <level>|

good-snr <snr> | holdtime <second> | key <key> | maxadoption<adopt>| max-

request <req>| nb-matching <percentage> |report-interval <interval>|restriction-

timeout slb-mode <mode>|snr-thresh <snr>| sta-entry-age <age> | vbr-entry-age <age>]

error-rate-threshold <percent>

error-rate-wait-time <secs>

free-channel-index <idx>

g-channels <channel>

ideal-coverage-index <idx>

max-tx-power

min-tx-power

scanning

spectrum-load-balancing [calc-interval <Seconds> |calc-threshold <threshold> | nb-

matching <Percentage>]

wide-bands {<none>| <all>| <2.4>| <5>}

no…

Enables the use of 80 MHz channels on APs with 5 GHz radios, which support a VHT.

Only the APs that support 802.11ac

Configures 5 GHz channels. — —

mode {<default-access>| <fair-access>| <preferred-access>}

Allows equal access to all clients on the wireless medium, regardless of client type, capability, or operating system and prevents the clients from monopolizing resources. You can configure any of the following modes:

• default- access—To provide access based on client requests. When this mode is configured, the per user and per SSID bandwidth limits are not enforced.

• fair- access—To allocate Airtime evenly across all the clients.

• preferred- access—To set a preference where 802.11n clients are assigned more airtime than 802.11a or 802.11g. The

802.11a or 802.11g clients get more airtime than 802.11b. The ratio is 16:4:1.

Configures the time when an AP backs off

— —

default-access, fair-access,

defaultaccess

preferredaccess

default- access

10 - 3600 240

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 52

CLI Commands

Command/Parameter

Description

Range

Default

band-steering-mode

channel-quality-

index value.

channel-quality-

below which ARM initiates a channel change.

channel-quality-

NOTE:

change.

client-aware

WLAN.

4.1 A

{<balance-bands>| <prefer- 5ghz>| <force-5ghz>| <disable>

aware-arm-disable

Assigns the dual-band capable clients to the 5 GHz band on dual-band. It reduces cochannel interferenc e and increases available bandwidth for dual- band clients, because there are more channels on the 5 GHz band than on the 2.4 GHz band. You can configure any of the following band- steering modes:

• balance- bands—To allow the APs to balance the clients across the two 2.4 GHz and 5 GHz radio and to utilize the available bandwidth.

• prefer- 5ghz—To allow the AP to steer the client to 5 GHz band (if the client is 5 GHz capable). However, the AP allows the client connection on the 2.4 GHz band if the client persistently attempts for 2.4 GHz association.

• force- 5ghz—To enforce 5 GHz band steering mode on the APs, so that the 5 GHz capable clients are allowed to use only the 5 GHz channels.

• disable—To allow the clients to select the bands

With this parameter, ARM ignores the internally calculated channel quality metric and initiates channel changes based on thresholds defined in the profile. ARM chooses the channel based on the calculated interference

balance-bands, prefer-5ghz,

balance-

bands force-5ghz, disable

— Disabled

threshold <thresh>

wait-time <secs>

SCALANCE W1750D CLI

52 Function Manual, 03/2019, C79000-G8976-C452-04

Specifies the channel quality percentage

Specifies the time that the channel quality is below the channel quality threshold value to initiate a channel change.

If current channel quality is below the specified channel quality threshold for this wait time period, ARM initiates a channel

Enables the client aware feature. When enabled, the AP will not change channels for the Access Points when clients are active, except for high priority events such as radar or excessive noise. The client aware feature must be enabled in most deployments for a stable

0 - 100 70

1 - 3600 120

— Enabled

Page 53

CLI Commands

Command/Parameter

Description

Range

Default

client-match

swarm.

bad-snr <snr>

target AP.

calc-

calculated.

onds

calc-threshold

bled on that AP.

client-thresh

gered.

debug <level>

good-snr <snr>

potential target AP.

holdtime <number>

match action on the same client.

key <key>

erated

max-adoption

clients.

max-request <count>

for client match

nb-matching <per-

Client match.

4.1 A

interval<seconds>

Enables the client match feature on APs. When the client match feature is enabled on an AP, the AP measures the RF health of its associated clients. If the client's RSSI is less than 18dB but has a good RSSI with another AP having an RSSI of more than 30db or atleast 10db more than its current RSSI, the client will be moved to the AP with the higher RSSI for better performance and client experience. In the current release, the client match feature is supported only within the APs within the

The clients with an SNR value below the threshold value will be moved to a potential

Configures an interval at which client match is

Configures a threshold that takes acceptance client count difference among all the channels of Client match into account. When the client load on an AP reaches or exceeds the threshold in compariso n, client match is ena-

When the number of clients on a radio exceeds the value, SLB algorithm will be trig-

— —

0 - 100 18

1 - 600 in sec-

1 - 255 5

0 - 255 30

<count>

centage>

Displays information required for debugging client match issues.

0 - 4

• 0 — none

1- error

• 1 — error

• 2— infor-

mation

• 3 — debug

• 4 — dump

The APs with a RSSI higher than the speci-

0 - 100 30

fied good-snr value will be considered as a

Configures the hold time for the next client

1 - 1800 300

Configures the client match key of an AP. 1– 2147483646 VC key gen-

Configure a maximum number for adopting

Configures the maximum number of requests

Configures a percentage value to be consid-

0 - 100 10

20 - 100% 75%

ered in the same virtual RF neighborhood of

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 54

CLI Commands

Command/Parameter

Description

Range

Default

report-interval

AP.

restriction-timeout

client.

slb-mode <mode>

snr-thresh <snr>

target AP.

vbr-entry-age <age>

VBR entries.

error-rate-

in the channel that triggers a channel change.

error-rate-wait-

threshold to trigger a channel change.

free-channel-index

new channel.

g-channels <gchannel>

ideal-coverage-

to achieve on its channel. The denser the

be.

max-tx-power <pow-

NOTE:

and AP capabilities.

4.1 A

threshold <percent>

time <secs>

<idx>

Configures the report interval of VBR on each

Configures the timeout interval during which non- target AP will not respond to a specific

Configures a balancing strategy for client match. The applicable values are:

• 1 - Channel-based

• 2 - Radio-based

• 3 - Channel and Radio based

The snr value of the Client RSSI must be higher than the current AP for a potential

Denotes the the aging time for stable

Configures the minimum percentage of errors

Configures the time that the error rate has to be at least equal to the error rate threshold to trigger a channel change. The error rate must be equal to or more than the error rate

Checks the difference in threshold in the channel interference index between the new channel and the existing channel. An AP will only move to a new channel if the new channel has a lower interference index value than the current channel. This parameter specifies the required difference between the two interferenc e index values before the AP moves to the new channel. The lower this value, the more likely it is that the AP will move to the

0 - 3600 30

1 - 255 10

1 - 3 1

0 - 100 10

1 - 3600 300

0 - 100 70

1 - 3600 90

— 25

index

er>

SCALANCE W1750D CLI

54 Function Manual, 03/2019, C79000-G8976-C452-04

Configures 2.4 GHz channels. — —

Specifies the ideal coverage index that an AP

2 - 20 10 tries AP deployment, the lower this value should

Sets the highest transmit power levels for the

0 - 127dBm 127 AP. If the maximum transmission EIRP configured on an AP is not supported by the AP model, the value is reduced to the highest supported power setting.

Higher power level settings may be

constrained by local regulatory requirements

Page 55

CLI Commands

Command/Parameter

Description

Range

Default

min-tx-power <pow-

power setting.

scanning

Management and WIPS enforcement.

spectrum-load-

<nb-matching>}

wide-bands {<none>|

is low, enter 2.4 GHz.

no…

and return it to its default setting

4.1 A

er>

balancing {<calc-interval>| <calc- threshold>|

<all>| <2.4>| <5>}

Usage Guidelines

Sets the minimum transmission power. This

0 - 127dBm 9 indicates the minimum EIRP. If the minimum transmission EIRP setting configured on an AP is not supported by the AP model, this value is reduced to the highest supported

Allows the APs to scan other channels for RF

— Enabled

— —

Allows administrators to configure 40 MHz channels in the 2.4 GHz and 5 GHz bands. 40

none, all, 2.4,

and 5

MHz channels are two 20 MHz adjacent channels that are bonded together. The 40 MHz channels double the frequency bandwidth available for data transmission. For high performanc e, enter 5 GHz. If the AP density

Removes the current value for that parameter

— —

Example

Use this command to configure ARM features on an AP. ARM ensures low-latency roaming, consistently high performance, and maximum client compatibility in a multi-channel environment. By ensuring the fair distribution of available Wi-Fi bandwidth to mobile devices, ARM ensures that data, voice, and video applications have sufficient network resources at all times. ARM allows mixed 802.11ac, a, b, g, and n client types to inter-operate at the highest performance levels.

The following example configures an ARM profile:

(scalance)(config)# arm

(scalance)(ARM)# 80mhz-support

(scalance)(ARM)# a-channels 44

(scalance)(ARM)# min-tx-power 18

(scalance)(ARM)# max-tx-power 127

(scalance)(ARM)# band-steering-mode prefer-5ghz

(scalance)(ARM)# air-time-fairness-mode fair-access

(scalance)(ARM)# backoff-time 600

(scalance)(ARM)# scanning

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

(scalance)(ARM)# client-aware

Page 56

CLI Commands

AP Platform

Command Mode

All platforms

Configuration and ARM configuration sub-mode.

Parameter

Description

drop-bad-arp-enable

Enables the AP to block the bad ARP request.

fix-dhcp-enable

Enables the AP to fix the malformed DHCP packets.

poison-check-enable

dress of the AP.

no…

Removes the specified configuration parameter.

4.1 A

(scalance)(ARM)# client-match

(scalance)(ARM)# error-rate-threshold 80

(scalance)(ARM)# error-rate-wait-time 120

(scalance)(ARM)# free-channel-index 75

(scalance)(ARM)# ideal-coverage-index 7

(scalance)(ARM)# channel-quality-threshold 50

(scalance)(ARM)# channel-quality-wait-time 180

(scalance)(ARM)# wide-bands 5

(scalance)(ARM)# end

(scalance)# commit apply

Command Information

4.1.28 attack

Description

This command enables firewall settings to protect the network against wired attacks, such as ARP attacks or malformed DHCP packets, and notify the administrator when these attacks are detected.

Syntax

attack

drop-bad-arp-enable

fix-dhcp-enable

no…

poison-check-enable

Enables the AP to trigger an alert to the user about the ARP poisoning that may have been caused by the rogue APs. Enabling this parameter triggers alerts when a known client on the AP spoofs the base MAC ad-

SCALANCE W1750D CLI

56 Function Manual, 03/2019, C79000-G8976-C452-04

Page 57

CLI Commands

AP Platform

Command Mode

All platforms

Configuration and Attack configuration sub-mode

Parameter

Description

Default

4.1 A

Usage Guidelines

Use this command to block ARP attacks and to fix malformed DHCP packets.

Example

The following example configures firewall settings to protect the network from Wired attacks:

(scalance)(config)# attack

(scalance)(ATTACK)# drop-bad-arp-enable

(scalance)(ATTACK)# fix-dhcp-enable

(scalance)(ATTACK)# poison-check-enable

(scalance)(ATTACK)# end

(scalance)# commit apply

Command Information

4.1.29 auth-failure-blacklist-time

Description

This command allows the APs to dynamically blacklist the clients when they exceed the authentication failure threshold.

Syntax

auth-failure-blacklist-time <seconds>

Configures the duration in seconds for which the clients that exceed the maximum authentication failure threshold are blacklisted.

Usage Guidelines

Use this command to dynamically blacklist the clients that exceed the authentication failure threshold configured for a network profile.

Example

3600

The following example blacklists the clients dynamically:

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 58

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

Range

Default

AP Platform

Command Mode

All platforms

Configuration mode

4.1 A

(scalance)(config)# auth-failure-blacklist-time 60

Command Information

4.1.30 auth-survivability cache-time-out

Description

This command configures an interval after which the authenticated credentials of the clients stored in the cache expire. When the cache expires, the clients are required to authenticate again.

Syntax

auth-failure-blacklist-time <seconds>

Indicates the duration after which the authenticated credentials in the cache expire.

1-99 hours 24 hours

Usage Guidelines

Use this command when the authentication survivability is enabled on a network profile, to set a duration after which the authentication credentials stored in the cache expires. To enable the authentication survivability feature, use the profile sub-mode.

Example

(scalance) (config)# auth-survivability cache-time-out 60

Command Information

auth-survivability in WLAN SSID

SCALANCE W1750D CLI

58 Function Manual, 03/2019, C79000-G8976-C452-04

Page 59

CLI Commands

Parameter

Description

<motd_text>

Indicates the text message that you define.

no…

AP Platform

Command Mode

All platforms

Configuration mode

4.2 B

4.2.1 banner

Description

This command defines a text banner to be displayed at the login prompt when a user is on a Telnet or SSH session of an AP.

Syntax

banner motd <motd_text>

no…

Usage Guidelines

The banner you define is displayed at the login prompt of the AP. The banner is specific to the AP on which you configure it. The configured banner is displayed at the CLI login prompt of the AP. SCALANCE W supports up to 16 lines text, and each line accepts a maximum of 255 characters including spaces.

Example

The following example configures a banner:

(scalance)(config)# banner motd "######welcome to login instant###########"

(scalance)(config)# banner motd "####please start to input admin and

password#########"

(scalance)(config)# banner motd "###Don't leak the password###"

(scalance)(config)# end

(scalance)# commit apply

Command Information

Removes the banner configuration.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 60

CLI Commands

Parameter

Description

<MAC-address>

Adds the MAC address of the client to the blacklist.

no…

AP Platform

Command Mode

All platforms

Configuration mode

4.2 B

4.2.2 blacklist-client

Description

This command allows you to manually blacklist the clients by using MAC addresses of the clients.

Syntax

blacklist-client <MAC-address>

no…

Removes the specified configuration parameter.

Usage Guidelines

Use this command to blacklist the MAC addresses of clients.

Example

The following command blacklists an AP client:

(scalance)(config)# blacklist-client 01:23:45:67:89:AB

Command Information

4.2.3 blacklist-time

Description

This command sets the duration in seconds for which the clients can be blacklisted due to an ACL rule trigger.

SCALANCE W1750D CLI

60 Function Manual, 03/2019, C79000-G8976-C452-04

Page 61

CLI Commands

Parameter

Description

Range

ger.

AP Platform

Command Mode

All platforms

Configuration mode

4.2 B

Syntax

blacklist-time <seconds>

Usage Guidelines

Use this command to configure the duration in seconds for which the clients can be blacklisted when the blacklisting rule is triggered.

Example

The following command configures the duration for blacklisting clients:

(scalance) (config) # blacklist-time 30

Command Information

4.2.4 ble

Sets the duration in seconds for blacklisting clients due to an ACL rule trig-

3600

Description

This command enables BLE beacon management by BMC and configures the BLE operation mode.

Syntax

ble

config <token> <url>

mgmt-server <type>

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 62

CLI Commands

Parameter

Description

Range

Default

config

BMC.

<token>

the HTTPS header when communicating with the BMC.

<url>

monitoring data is sent.

mgmt-server

NOTE:

the existing configuration.

<https>

balance.

<ws>

URL of the WebSocket endpoint.

—

mode <op-

in Bluetooth

Beaconing

Disabled

DynamicConsole

PersistentConsole

Beaconing

4.2 B

mode <opmode>

Allows you to enable BLE beacon management by

Configures a text string of 1-255 characters as the Bluetooth Low Energy (BLE) endpoint authorization token. The authorization token is used by the BLE devices in

Configures the URL of the server to which the BLE

<type>

This parameter registers the WebSocket endpoint of a management server for BLE data, such as the Meridian editor, on the AP. The WebSocket endpoint allows the management server to receive messages from the BLE relay process on the AP.

a given time. A new endpoint configuration will overwrite

URL or IP address of the HTTPS endpoint. This parameter is highly recommended for meridian load

mode>

Configures the operation modes for the builtLow Energy (BLE) chip in the AP.

APs support the following BLE operation modes:

•

Only one endpoint configuration is supported at

: The built-in BLE chip of the AP functions as an iBeacon combined with the beacon management functionality.

: The built-in BLE chip of the AP functions in the beaconing mode and dynamically enables access to AP console over BLE when the link to the LMS is lost.

: The built-in BLE chip of the AP functions in the beaconing mode and dynamically enables access to AP console over BLE when the link to the LMS is lost. The dynamic console mode performs special error checks when the AP experiences connectivity issues and decides if the BLE Console needs to be enabled.

: The built-in BLE chip of the AP provides access to the AP console over BLE and also operates in the

mode.

— —

beaconing

Disabled

disabled dynamic-

console persistent-

console

SCALANCE W1750D CLI

62 Function Manual, 03/2019, C79000-G8976-C452-04

Page 63

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

4.2 B

Usage Guidelines

The BLE beacon management feature allows you to configure parameters for managing the BLE beacons from the BLE devices connected to an AP and establishing secure communication with the BMC. You can also configure the BLE operation modes that determine the functions of the built-in BLE chip in the AP.

Example

The following example enables BLE beacon management:

(scalance)(config)# ble config

MmZjYzkyNTZlYzExODY2MjU3OTBlNTkyZjA0MjdmNjU6OWVkNjdlMjk3MDAxYzFjZjA2ZTQ3Y2UxYWExMmMwY

TE= https://edit.meridianapps.com/api/beacons/manage

(scalance)(config)# end

(scalance)(config)# commit apply

The following example enables the beaconing BLE operation mode:

(scalance)(config)# ble mode beaconing

(scalance)(config)# end

(scalance)(config)# commit apply

Command Information

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 64

CLI Commands

Parameter

Description

Range

Default

calea

profile configuration.

gre-type

Specifies GRE type.

—

25944

encapsulation-type

Routing Encapsulation (GRE) packets.

ip <IP-address>

ip mtu <size>

to use.

1500

no…

calea command.

no calea

Removes the CALEA configuration

—

4.3 C

4.3.1 calea

Description

This command creates a CALEA profile to enable APs for LI compliance and CALEA integration.

Syntax

calea

encapsulation-type <gre>

gre-type <type>

ip <IP-address>

Usage Guidelines

ip mtu <size>

no…

no calea

<gre>

Enables

Specifies the encapsulation type for Generic

Configures the IP address of the CALEA server on an AP.

Configures the Maximum Transmission Unit size

Disables the parameters configured under the

configuration sub-mode for CALEA

— —

GRE GRE

— —

68—

— —

1500

Use this command to configure an AP to support LI. LI allows the LEA to conduct an authorized electronic surveillance. Depending on the country of operation, the service providers are required to support LI in their respective networks.

In the United States, SPs are required to ensure LI compliance based on CALEA specifications. LI compliance in the United States is specified by the CALEA.

For more information on configuringAPs for CALEA integration, see

"SCALANCE W UI"

SCALANCE W1750D CLI

64 Function Manual, 03/2019, C79000-G8976-C452-04

Configuration Manual

Page 65

CLI Commands

AP platform

Command Mode

sub-mode.

4.3 C

Example

The following example configures a CALEA profile:

(scalance)(config)# calea

(scalance)(calea)# ip 192.0.8.29

(scalance)(calea)# ip mtu 1500

(scalance)(calea)# encapsulation-type gre

(scalance)(calea)# gre-type 25944

(scalance)(calea)# end

(scalance)# commit apply

Command Information

All platforms Configuration mode and access rule configuration

4.3.2 cellular-uplink-profile

Description

This command provisions the cellular (3G or 4G) uplink profiles on an AP.

Syntax

cellular-uplink-profile <profile> 4g-

usb-type <4G-usb-type>

modem-country <modem-country>

modem-isp <modem_isp>

usb-auth-type <usb_authentication_type>

usb-dev <usb-dev>

usb-dial <usb-dial>

usb-init <usb-init>

usb-modeswitch <usb-modeswitch>

usb-passwd <usb-passwd>

usb-tty <usb-tty>

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

usb-type <usb-type>

usb-user <usb-user>

Page 66

CLI Commands

Parameter

Description

Range

Default

cellular-uplink<profile>

AP.

4g-usb-type <4G-usb-

modem.

tech-lte, none

modem-country <modem-country>

modem-isp <modem isp>

usb-auth-type <usb_ authentication type>

usb-dev <usb-dev>

Specifies the device ID of the USB modem.

—

usb-dial <usb-dial>

tower.

usb-init <usb-init>

the modem.

usb-passwd <usb-

ISP.

usb-modeswitch <usb-

dem from storage mode to modem mode.

usb-type <usb-type>

sierra- gsm,none

usb-tty <usb-tty>

Specifies the modem tty port.

—

usb-user <usb-user>

selected ISP.

no…

cellular-uplink-profile

command.

no cellular-uplink-

profile.

4.3 C

no…

no cellular-uplink-profile

profile

type>

Configures a 3G or 4G cellular profile for an

Configures the driver type for the 4G

Specifies the country for the deployment. — —

Specifies the name of the ISP to connect. — —

Specifies the authentication type for USB. PAP, CHAP PAP

Specifies the parameter to dial the cell

Specifies the parameter name to initialize

passwd>

modeswitch>

Specifies the password for the account associated with the subscriber of the selected

Specifies the parameter used to switch mo-

Configures the driver type for the 3G modem.

— —

ether-lte, pan-

—

— —

acm, airprime,

—

hso, option, pantech-

3g, sierra-evdo,

profile

Usage Guidelines

Use this command to configure a cellular uplink profile on an APand modem parameters 3G or 4G uplink provisioning. SCALANCE W supports the use of 3G or 4G USB modems to provide Internet backhaul to a network. The 3G or 4G USB modems can be used to extend client connectivity to places where an Ethernet uplink cannot be configured. This enables the APs to automatically choose the available network in a specific region.

SCALANCE W1750D CLI

66 Function Manual, 03/2019, C79000-G8976-C452-04

Specifies the username of subscriber of the

Removes the configuration settings of parameters under the

Removes the cellular uplink configuration

— —

Page 67

CLI Commands

Note

When UML290 runs in auto detect mode, the modem can switch from 4G network to 3G network or vice network only, manually set the USB type to pantech-3g

network only, manually set the 4G USB type to pantech-lte

AP Platform

Command Mode

All platforms

Configuration mode and cellular uplink profile configuration sub-mode

4.3 C

Most modems using a 4G driver will automatically select the best available cellular network coverage based on the RSSI value.

-versa based on the signal strength. To configure the UML290 for the 3G

. To configure the UML290 for the 4

Example 1

The following example configures a cellular uplink profile:

(scalance)(config) # cellular-uplink-profile

(scalance)(cellular-uplink-profile)# usb-type sierra-net

(scalance)(cellular-uplink-profile)# usb-dev 0x0f3d68aa

(scalance)(cellular-uplink-profile)# usb-init 3,broadband

(scalance)(cellular-uplink-profile)# end

(scalance)# commit apply

Example 2

The following example configures a cellular uplink profile for UML295 Country US and ISP Pantech:

(scalance)(config) # cellular-uplink-profile

(scalance)(cellular-uplink-profile)# usb-type rndis-uml295

(scalance)(cellular-uplink-profile)# usb-dev 0x10a96064

(scalance)(cellular-uplink-profile)# usb-tty ttyACM0

(scalance)(cellular-uplink-profile)# end

(scalance)# commit apply

Command Information

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 68

CLI Commands

Parameter

Description

Default

inline-auth-stats

Enables the client authentication statistics on the AP.

Disabled

inline-dhcp-stats

inline-dns-stats

Enables the DNS statistics on the AP.

Disabled

inline-sta-stats

no…

default setting

4.3 C

4.3.3 clarity

Description

This command enables inline monitoring statistics for the Instant AP. The information is collected and forwarded to AirWave to debug client connectivity issues.

Syntax

clarity

inline-auth-stats

inline-dhcp-stats

inline-dns-stats

inline-sta-stats

no…

Usage Guidelines

Example

Enables the DHCP statistics on the AP. Disabled

Enables the station passive monitor statistics on the AP.

Removes the configuration and returns the values to its

Disabled

—

Use this command to configure the AP to generate authentication, dhcp, dns, and station passive monitor statistics by using inline monitoring. These statistics are sent to AirWave to derive conclusions on the client connectivity issues.

The following example configures a clarity profile:

(scalance)(config)# clarity

(scalance)(clarity)# inline-auth-stats

(scalance)(clarity)# inline-dhcp-stats

(scalance)(clarity)# inline-dns-stats

(scalance)(clarity)# inline-sta-stats

(scalance)(clarity)# end

(scalance)# commit apply

SCALANCE W1750D CLI

68 Function Manual, 03/2019, C79000-G8976-C452-04

Page 69

CLI Commands

AP platform

Command Mode

All platforms

Configuration and clarity configuration sub-mode.

Parameter

Description

airgroup {blockedid}

ap-env-backup

Clears all information from a backup AP.

arp <ip-address>

Clears all ARP table information for an AP

client <mac>

datapath {session- all|

modules and user sessions.

4.3 C

Command Information

4.3.4 clear

Description

This command clears various user-configured values from the running configuration on AP.

Syntax

clear

airgroup {blocked-queries|blocked-service-id}

ap-env-backup

Usage Guidelines

ap-env-current

arp <ip>

captive-portal <logo>

cluster-security {connections|peers|stats} core-file

datapath {session|session-all|statistics} debug <ap>

trace {ip|mac}

queries|blocked-service-

ap <ip-address> Clears all AP related information.

statistics}

Clears all AirGroup blocked queries and service IDs.

Clears all information pertaining to an AP client. Clears all configuration information and statistics for datapath

Use the clear command to clear the current information stored in the running configuration of an AP

Example

The following command clears all information related to an AP:

(scalance)# clear ap 192.0.2.3

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 70

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

AP Platform

Command Mode

All platforms

Configruation Mode

4.3 C

Command Information

4.3.5 clear airgroup state statistics

Description

This command removes the AirGroup statistics.

Syntax

clear airgroup state statistics

Usage Guidelines

Use this command to remove AirGroup details from the AP database.

Example

The following command clears AirGroup statistics:

(scalance)(config)# clear airgroup state statistics

Command Information

4.3.6 clear-dhcpoption82

Description

This command is used to delete the DHCP option 82 XML file from the AP. This command must be executed only from the master AP. Further, this will be allowed only if the XML file is disabled from the configure terminal.

SCALANCE W1750D CLI

70 Function Manual, 03/2019, C79000-G8976-C452-04

Page 71

CLI Commands

Parameter

Description

<text>

This is used to specify that the DHCP Option82 XML file is deleted from the AP flash.

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.3 C

Syntax

clear-dhcpoption82 <xml>

Example

The following command shows an example for clearing DHCP option 82:

(scalance)# clear-dhcpoption82 xml

Command Information

4.3.7 clear-cert

Description

This command clears client and server customized CA certificates from the AP database.

Syntax

clear-cert

airwaveca

ap1x

ap1xca

clearpassca

datatunnel

datatunnelca

default [clearpassca]

radsec

radsecca

server

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 72

CLI Commands

Parameter

Description

airwaveca

Clears the Airwave CA certificate on the AP.

ap1x

the AP.

ap1xca

uplink wired ports.

Clears the CA certificates.

clearpassca

Clears the ClearPass Policy Manager CA.

Clears the captive portal server certificate.

default [clearpassca]

Clears all the default ClearPass Policy Manager CA.

radsec

Clears the RadSec server certificate.

radsecca

Clears the RadSec CA certificate.

server

Clears all server certificates.

Clears the WebUI certificate.

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.3 C

Clears the user certificate used for TLS based 802.1x authentication of

Clears CA certificate used for 802.1x authentication of the AP against its

Usage Guidelines

Use this command to clear the certificates from the AP database.

Example

The following command shows an example for clearing server certificates:

(scalance)# clear-cert server

Command Information

4.3.8 clock set

Description

This command sets the date and time on the AP system clock.

SCALANCE W1750D CLI

72 Function Manual, 03/2019, C79000-G8976-C452-04

Page 73

CLI Commands

Parameter

Description

Range

<year>

Sets the year. Requires all 4 digits.

Numeric

<month>

<day>

Sets the day.

1-31

<time>

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.3 C

Syntax

clock set <year> <month> <day> <hour> <min> <sec>

Sets the month. 1-12

Usage Guidelines

You can configure the year, month, day, and time. Specify the time using a 24-hour clock with hours, minutes and seconds separated by spaces.

Example

The following example sets the clock to 21 May 2013, 1:03:52 AM:

(scalance)# clock set 2013 5 21 1 3 52

Command Information

Sets the hour. Specify hours, minutes, and seconds separated by spaces.

Numeric

4.3.9 clock summer-time

Description

This command configures daylight saving for the time zones that support DST.

Syntax

clock summer-time <timezone> recurring <start-week> <start-day> <start-month> <start-

hour>

<eweek> <eday> <emonth> <ehour> no…

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 74

CLI Commands

Parameter

Description

Range

clock summer-

configuration

recurring

<start-week>

configuration is effective.

<start-day>

configuration applies.

<start-month>

configuration applies.

<start-hour>

configuration applies.

<eweek>

configuration ends.

<eday>

ends.

configuration ends.

<ehour>

ends.

no…

Removes the configuration

—

AP Platform

Command Mode

All platforms

Configuration mode

4.3 C

time <timezone>

Configures Daylight Saving time. Timezones that sup-

port daylight saving

Indicates the recurrences. — Indicates the week from which the daylight saving

Indicates the day from which the daylight saving

Indicates the month from which the daylight saving

Indicates the hour from which the daylight saving

Indicates the week in which the daylight saving

Indicates the day on which daylight saving configuration

Indicates the month in which daylight saving

Indicates the hour at which daylight saving configuration

—

1-24

—

1-24

Usage Guidelines

Use this command to configure daylight saving for the timezones that support daylight saving. When enabled, the DST ensures that the AP reflect the seasonal time changes in the region they serve.

Example

The following example configures daylight saving for a timezone:

(scalance)(config)# clock summer-time PST recurring 7 10 March 9PM 38 10 October 9PM

(scalance)(config)# end

(scalance)# commit apply

Command Information

SCALANCE W1750D CLI

74 Function Manual, 03/2019, C79000-G8976-C452-04

Page 75

CLI Commands

Parameter

Description

Range

clock timezone <name>

<hour-offset>

Specifies the hours offset from the UTC.

—

<minute-offset>

Specifies the hours offset from the UTC.

—

no…

Removes the timezone configuration.

—

AP Platform

Command Mode

All platforms

Configuration mode

4.3 C

4.3.10 clock timezone

Description

This command sets the timezone on an AP.

Syntax

clock timezone <name> <hour-offset> <minute-offset>

no…

Configures the required timezone. All supported timezones

Usage Guidelines

Use this command to set the timezone on an AP.

Example

The following example configures the PST timezone:

(scalance) (config)# clock timezone PST -8 0

(scalance)(config)# end

(scalance)# commit apply

Command Information

4.3.11 cluster-security

Description

This command enables cluster security in DTLS mode and also provides an option for users to allow or deny a DTLS connection for low assurance APs.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 76

CLI Commands

Parameter

Description

Default

allow-low-assurance-devices

APs.

disallow-non-dtls-slaves

dtls

between APs in the cluster.

no…

values to its default setting.

4.3 C

Syntax

cluster-security

allow-low-assurance-devices

disallow-non-dtls-slaves

dtls

no…

Usage Guidelines

Example

Enables DTLS connection for low assurance

Blocks non-DTLS slave APs from joining a

Allow

—

DTLS enabled cluster. Enables cluster security on the AP using DTLS

Disable

and secures the control plane messages

Removes the configuration and returns the

—

Use this command to configure cluster security using DTLS for securing control plane messages exchanged between the APs in a cluster.

The following example configures a cluster-security profile:

(scalance)(config)# cluster-security

(scalance)(cluster-security)# dtls

(scalance)(cluster-security)# end

(scalance)# commit apply

The following example configures DTLS connection for low assurance PKIs:

(scalance)(config)# cluster-security

(scalance)(cluster-security)# allow-low-assurance-devices

(scalance)(cluster-security)# end

(scalance)# commit apply

The following example allows a non-DTLS slave AP to join a DTLS enabled cluster:

(scalance)(config)# cluster-security

(scalance)(cluster-security)# no disallow-non-dtls-slaves

(scalance)(cluster-security)# end

(scalance)# commit apply

SCALANCE W1750D CLI

76 Function Manual, 03/2019, C79000-G8976-C452-04

Page 77

CLI Commands

AP Platform

Command Mode

All platforms

Configuration and configuration sub-modes

Parameter

Description

Range

cluster-security

module <mod-

peer

conn

mcap

log-level <lev-

messages.

4.3 C

The following example prevents a non-DTLS slave AP from joining a DTLS enabled cluster:

(scalance)(config)# cluster-security

(scalance)(cluster-security)# disallow-non-dtls-slaves

Command Information

4.3.12 cluster-security logging

Description

This command allows you to set per module logging levels and retrieve the debugging logs on a one-time basis.

Syntax

Usage Guidelines

cluster-security logging module <module_name> log-level <level>

logging

ule_name>

el>

Allows you to change the per module logging level for cluster security

Allows you to set the following core modules for debugging.

•

Allows you to set a log level. Set the log-level to debug to log only the control messages. Set the log level to debug1 to log both control and data

—The peer module helps in logging the connection initiation, renegotiation, collision, and active connection updates.

—The connection module helps in logging connection creation, establishment, data transfer, and maintenance logs.

—The message capture module logs the messages

received and sent to the socket.

—

peer conn mcap

debug debug1

Use this command to change the per module logging level of cluster security.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 78

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

Parameter

Description

apply

Applies and saves the AP configuration changes.

no-save

To save the configuration, run the write memory or commit apply command.

revert

4.3 C

Example

The following example creates a log for the peer module:

(scalance)# cluster-security logging module peer log-level-individual debug1

(scalance)# commit apply

Command Information

4.3.13 commit

Description

This command allows you to commit configuration changes performed during a user session. You can also revert the changes that are already committed.

Syntax

Usage Guidelines

Example

commit {apply [no-save]| revert}

Applies the configuration changes to the cluster, but does not save the configuration.

Reverts the changes committed to the current configuration of an AP.

Each command processed by the Virtual Controller is applied on all the slave AP in a cluster. The changes configured in a CLI session are saved in the CLI context. The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session: therefore, Siemens recommends that you configure fewer changes at a time and apply the changes at regular intervals.

To apply and save the configuration changes, use the configuration changes without saving the configuration, use the

commit apply command. To apply the

commit apply no-save

command.

The following command allows you to commit the configuration changes:

(scalance) # commit apply

SCALANCE W1750D CLI

78 Function Manual, 03/2019, C79000-G8976-C452-04

Page 79

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode.

AP Platform

Command Mode

All platforms

Privileged EXEC mode.

4.3 C

The following command reverts the already committed changes:

(scalance) # commit revert

Command Information

4.3.14 configure terminal

Description

This command allows you to enter configuration commands.

Syntax

configure terminal

No parameters.

Usage Guidelines

Upon entering this command, the enable mode prompt changes to:

(scalance)(config)#

To return to EXEC mode, enter Ctrl-Z, end or exit.

Example

The following command allows you to enter configuration commands:

(scalance) # configure terminal

Command Information

4.3.15 console

Description

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

This command enables console access to an AP through the serial port

Page 80

CLI Commands

Parameter

Description

console

Allows you to enter the console configuration mode.

enable

disable

Disables console access to the AP.

no…

Removes the console access settings.

AP Platform

Command Mode

All platforms

Console configuration sub mode

4.3 C

Syntax

console

enable

disable

no console

Enables console access to the AP.

Usage Guidelines

Use this command to enable or disable access to the AP console and thus allow users to configure AP settings or debug system errors. By default, the console access to the AP is enabled.

Example

The following example disables console access to the AP:

(scalance)(config)# console

(scalance)(console)# disable

(scalance)(console)# end

(scalance)# commit apply

Command Information

4.3.16 content-filtering

Description

This command enables content filtering feature. When content filtering is enabled on an SSID, all DNS requests to non-corporate domains on this wireless network are sent to OpenDNS.

SCALANCE W1750D CLI

80 Function Manual, 03/2019, C79000-G8976-C452-04

Page 81

CLI Commands

Parameter

Description

content-filtering

Enables content filtering.

AP Platform

Command Mode

All platforms

Configuration mode

4.3 C

Syntax

content-filtering

no…

Removes the configuration.

Usage Guidelines

Use this command to enable content filter. With content filter feature enabled, you can:

● Prevent known malware hosts from accessing your wireless network.

● Improve employee productivity by limiting access to certain websites.

● Reduce bandwidth consumption significantly.

You can enable content filtering on an SSID. When enabled, all DNS requests to noncorporate domains on this SSID are sent to the open DNS server.

Example

The following example enables content filtering:

c:a3:1e:cd:7b:d6 (config) # content-filtering

ac:a3:1e:cd:7b:d6 (config) # end

ac:a3:1e:cd:7b:d6# commit apply

Command Information

4.3.17 convert-aos-ap

Description

This command allows you to provision an AP as a Campus AP or Remote AP in a controllerbased network.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 82

CLI Commands

Parameter

Description

Range

<mode>

Remote AP in a controller-based network.

<name>

AP Platform

Command Mode

All platforms

Privileged EXEC mode.

4.3 C

Syntax

convert-aos-ap <mode> <name>

Usage Guidelines

Before converting an AP, ensure that both the AP and controller are configured to operate in the same regulatory domain. An AP can be converted to a Campus AP and Remote AP only if the controller is running ArubaOS 6.1.4 or later versions.

For more information, see the

Configuration manual "SCALANCE W UI".

Example

The following command allows you to convert an AP to a remote AP:

(scalance)# convert-aos-ap RAP 192.0.2.5

Command Information

This command allows you to provision an AP as a Campus AP or

Allows you to specify the IP address of the controller to which the Remote AP or Campus AP will be connected.

Converting an

to a Remote AP and Campus AP

RAP, CAP.

—

topic in

4.3.18 copy

Description

This command copies files to and from the AP.

Syntax

copy

config tftp <ip-address> <filename>

core-file tftp <ip-address>

flash tftp <ip-address> <filename>

tftp <ip-address> <filename> {ap1x {ca|cert} <password> format pem}| cpserver cert

<password> format {p12|pem}|

SCALANCE W1750D CLI

82 Function Manual, 03/2019, C79000-G8976-C452-04

clearpassca| portal logo| radsec {ca|cert <password>}

Page 83

CLI Commands

Parameter

Description

config

Copies a configuration file to the TFTP server.

core-file

flash

Copies a file from flash to the TFTP server or to flash from a TFTP server.

tftp

<ip-address>

Copies files to the specified TFTP server IP address.

Indicates the name of the file to be copied.

ap1x {ca |cert}

Copies user or CA certificate required for 802.1X authentication of the AP.

cpserver cert <password>

clearpassca

AP.

portal logo

Copies customized logo for the internal captive portal server.

radsec {ca | cert <password>}

system

Copies the file to the system partition.

1xca

server.

der pem

1xcert

server.

Indicates the password for certificate authentication.

p12 pem

uiserver cert <password>

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.3 C

format pem| system {1xca [format {der|pem}]|1xcert <passsword>[format

{p12|pem}]|config|flash} | uiserver cert<password> format pem}

Copies a core file to the TFTP server.

Copies files and certificates to the AP database from a TFTP server.

Copies internal captive portal server certificate.

Copies the ClearPass Policy Manager certificate from the TFTP server to the

Copies RadSec server or CA certificates.

Usage Guidelines

Use this command to save backup copies of the configuration file to a TFTP server, or to load a certificate file and customized logo from a TFTP server to the AP database.

Example

The following example copies a configuration file to the TFTP server:

(scalance)# copy config tftp 10.0.0.1 filename.cfg

Command Information

Copies the CA certificate used for 802.1X authentication from the TFTP

Indicates the system partition file extensions.

Copies the server certificate used for 802.1X authentication from the TFTP

Indicates the certificate file extensions.

Copies the customized WebUI server certificate.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 84

CLI Commands

Parameter

Description

Range

<text>

Indicates the custom variable string.

1 ... 32

no...

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.3 C

4.3.19 custom_var

Description

This command is used to set the custom string length. The string length that is set will be valid until the AP is factory reset.

Syntax

custom_var <text>

no...

Disables the custom string length that has been set. —

Example

The following example sets the custom string length:

(scalance)# custom_var 12

Command Information

SCALANCE W1750D CLI

84 Function Manual, 03/2019, C79000-G8976-C452-04

Page 85

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

4.4 D

4.4.1 debug-rtls-logs

Description

This command generates debugging logs for the RTLS tags.

Syntax

debug-rtls-logs

no…

Usage Guidelines

Use this command to generate debugging logs for the RTLS tags. The generated logs can be viewed by using the

show rtls-logs command.

Example

The following example disables the default provisioning SSID:

(scalance)# debug-rtls-logs

Command Information

4.4.2 deny-inter-user-bridging

Description

This command disables bridging traffic between two clients of an AP on the same VLAN. Bridging traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

deny-inter-user-bridging

Page 86

CLI Commands

Parameter

Description

deny-inter-userbridging

no…

Removes the configuration.

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

deny-local-routing

Disables local routing of traffic.

no…

Removes the configuration.

4.4 D

no…

Prevents the inter-user bridging.

Usage Guidelines

Use this command if you have security and traffic management policies defined for upstream devices.

Example

The following command disables inter-user bridging:

(scalance)(config)# deny-inter-user-bridging

(scalance)(config)# end

(scalance)# commit apply

Command Information

4.4.3 deny-local-routing

Description

This command disables routing traffic between two clients of an AP on different VLANs. Routing traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

deny-local-routing

no…

SCALANCE W1750D CLI

86 Function Manual, 03/2019, C79000-G8976-C452-04

Page 87

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

device-id <device>

Configures an ID for the AP device.

4.4 D

Usage Guidelines

Use this command to prevent the local routing of traffic if you have security and traffic management policies defined for upstream devices.

Example

The following command disables local routing:

(scalance)(config)# deny-local-routing

(scalance)(config)# end

(scalance)# commit apply

Command Information

4.4.4 device-id

Description

This command assigns an ID for the AP device.

Syntax

device-id <device>

Usage Guidelines

Use this command to configure a device identification.

Example

The following example configures a device ID:

(scalance)(config)# device-ID Device1

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

(scalance)(config)# end

(scalance)# commit apply

Page 88

CLI Commands

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

dhcp option82-xml <string>

no ...

Removes the DHCP option 82 XML based configuration.

AP Platform

Command Mode

All platforms

Configuration mode

4.4 D

Command Information

4.4.5 dhcp

Description

This command is used to configure the DHCP option 82 parameters present in the XML file into the datapath.

Syntax

dhcp option82-xml <string>

no…

Example

The following command configures DPI support:

(scalance)(config)# dhcp option82-xml file

(scalance)(config)# end

(scalance)# commit apply

Command Information

Indicates the XML file from which DHCP option 82 needs to be configured.

SCALANCE W1750D CLI

88 Function Manual, 03/2019, C79000-G8976-C452-04

Page 89

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

Parameter

Description

<addr> all

Disconnects all users associated with an AP.

4.4 D

4.4.6 disable-prov-ssid

Description

This command disables the default provisioning SSID enabled in the AP factory default settings.

Syntax

disable-prov-ssid

no…

Usage Guidelines

The default provisioning SSID is used during the initial configuration of the AP if the automatic provisioning of the AP fails and if AirWave are not reachable.

Example

The following example disables the default provisioning SSID:

(scalance)# disable-prov-ssid

Command Information

4.4.7 disconnect-user

Description

This command disconnects the clients from an AP.

Syntax

disconnect-user {<addr>|all|mac <mac>| network <name>}

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Allows you to disconnect a client by specifying the IP address of the client.

Page 90

CLI Commands

Parameter

Description

mac <mac>

the client.

network <name>

AP Platform

Command Mode

All platforms

Privileged EXEC mode

Parameter

Description

dot11a-radiodisable

no…

Removes the radio profile from the disabled mode.

4.4 D

Allows you to disconnect a client by specifying the MAC address of

Allows you to disconnect the clients connected to a specific network.

Example

The following example disconnects all clients associated with an AP:

(scalance)# disconnect-user

Command Information

4.4.8 dot-11a-radio-disable

Description

This command disables the 5 GHz or 802.11a radio profile for an AP. Disabling the radio profile using this command will not delete the SSID profiles.

Syntax

dot-11a-radio-disable

no…

Usage Guidelines

Use this command to disable a 5 GHz radio profile on an AP.

Example

Disables the 5 GHz or 802.11a radio profile.

The following example disables the 5 GHz radio profile:

(scalance)# dot11a-radio-disable

SCALANCE W1750D CLI

90 Function Manual, 03/2019, C79000-G8976-C452-04

Page 91

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode.

Parameter

Description

dot11g-radio-disable

Disables the 2.4 GHz or 802.11g radio profile

no…

Removes the radio profile from the disabled mode.

AP Platform

Command Mode

4.4 D

Command Information

4.4.9 dot-11g-radio-disable

Description

This command disables the 2.4 GHz or 802.11g radio profile for an AP. Disabling the radio profile using this command will not delete the SSID profiles.

Syntax

dot-111-radio-disable

no…

Usage Guidelines

Use this command to disable a 2.4 GHz radio profile on an AP.

Example

The following example disables the 2.4 GHz radio profile:

(scalance)# dot11g-radio-disable

Command Information

All platforms Privileged EXEC mode.

4.4.10 download-cert

Description

This command allows you to download the authentication, captive portal and RadSec server certificates, and CA certificates from an FTP or TFTP server, or through an HTTP URL.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 92

CLI Commands

Parameter

Description

ap1x

the AP.

ap1xca

Downloads CA certificates for validating the identity of the client.

clearpassca <url> format pem

tity of the internal captive portal server identity to the client.

radsec

the AP and the client.

radsecca

AP and the client.

server

identity of the server to the client.

Downloads the WebUI certificates.

<url>

Allows you to specify the FTP, TFTP, or HTTP URL.

psk <psk>

RadSec certificates.

format

4.4 D

Syntax

download-cert ap1x <url> format pem [psk <psk>] ap1xca <url> format pem ca <url> format {der|pem}

clearpassca <url> format pem

cp <url> format pem [psk <psk>] radsec <url> format pem [psk <psk>] radsecca <url> format pem [psk <psk>]

server <url> format pem [psk <psk>]

ui <url> format pem [psk <psk>]

Downloads user certificate for TLS based 802.1X authentication of

Downloads CA certificates.

Downloads the customized ClearPass Policy Manager CA.

Downloads captive portal server certificates for validating the iden-

Usage Guidelines

Downloads RadSec certificates for mutual authentication between

Downloads RadSec CA certificates for authentication between the

Downloads authentication server certificates for validating the

Allows you to specify the passphrase for server, captive portal, and

Allows you to specify the certificate format. The following types of certificate formats are supported:

• CA certificate—PEM or DER format

• Authentication server—PEM format with PSK

• Captive portal certificate—PEM format with PSK

• RadSec—PEM format with PSK

Use this command to download certificates.

Example

The following command shows an example for downloading CA client certificates:

SCALANCE W1750D CLI

92 Function Manual, 03/2019, C79000-G8976-C452-04

(scalance)# download-cert ca ftp://192.0.2.7

Page 93

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

Parameter

Description

xml <url>

URL will be addressed as http://<ip address>/filename.xml.

AP Platform

Command Mode

All platforms

Privileged EXEC mode.

4.4 D

Command Information

4.4.11 download-dhcpopt82

Description

This command allows you to download the XML file using HTTP, FTP or TFTP URL.

Syntax

download-dhcpopt82 xml <url>

Usage Guidelines

Use this command to download the DHCP option 82 XML file in the mydhcpopt82.xml format regardless of what name is given to the XML file. The AP validates if the XML file is in correct format and load it into AP flash. If the validation fails, the error type is displayed in the output of the

The maximum size limit of the XML buffer is 1 KB. The XML buffer will be filled from the downloaded XML file omitting any whitespace characters in the file. This command must be executed only from master AP.

Example

The following command shows an example for downloading DHCP option 82:

(scalance)# download-dhcpopt82 xml http://10.20.52.131/googledhcp.xml

Command Information

Allows you to specify the FTP, TFTP, or HTTP URL of the XML file. For example, if the URL is in HTTP format, the XML file's

show dhcp opt82 xml-config.

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 94

CLI Commands

Parameter

Description

dpi

Enables AppRF feature.

no…

AP Platform

Command Mode

All platforms

Configuration mode

4.4 D

4.4.12 dpi

Description

This command enables visualization of traffic from wired and wireless clients associated with an AP.

Syntax

dpi

no…

Removes the configuration.

Usage Guidelines

Use this command to enable AppRF visibility for wired and wireless clients associated with an AP. AppRF supports an application and web-filtering service that allows creating firewall policies based on types of application. AppRF includes the following capabilities:

● Access control, QoS, and bandwidth contract rules based on application and application categories.

● Content filters based on web categories and reputation scores (security ratings).

For more information on access rule configuration and web-filtering options, see the

Configuration Manual “SCALANCE W UI”

Example

The following command configures DPI support:

(scalance)(config)# dpi

(scalance)(config)# end

(scalance)# commit apply

Command Information

and the wlan access-rule command page.

SCALANCE W1750D CLI

94 Function Manual, 03/2019, C79000-G8976-C452-04

Page 95

CLI Commands

Parameter

Description

<idx>

Index number of the URL.

<url>

no…

Removes the configuration.

AP Platform

Command Mode

4.4 D

4.4.13 dpi-error-page-url

Description

This command allows you to create a custom list of URLs to which users can be redirected when they access a blocked website.

Syntax

dpi-error-page-url <idx> <url>

no…

URL of the website.

Usage Guidelines

Use this command to create a custom list of URLs. The URLs configured by this command are used for defining an access rule (using the command) to redirect users to a specific URL when they access a blocked website.

Example

(scalance)(config)# dpi-error-page-url 0 http://www.NoExample.com

(scalance)(config)# end

(scalance)# commit apply

Command Information

All platforms Configuration mode

4.4.14 dynamic-cpu-mgmt

wlan access-rule <rule> dpi-error-page-url

Description

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

This command enables or disables the dynamic CPU management feature, to manage resources across different functions performed by an AP.

Page 96

CLI Commands

Parameter

Description

auto

perform.The auto option is the default and recommended setting.

disable

setting protects the user experience.

enable

networks with a high client density.

AP Platform

Command Mode

All platforms

Configuration mode

4.4 D

Syntax

dynamic-cpu-mgmt {auto| disable| enable}

Configures the AP to automatically enable or disableCPU management feature during run-time. When configured, the AP determines the need for enabling or disabling CPU management, based on the real-time load calculations taking into account all different functions that the CPU needs to

Disables CPU management on all APs, typically for small networks. This

Enables the CPU management feature. When configured, the client and network management functions are protected. This setting helps in large

Usage Guidelines

Use this command to enable or disable resource management across different functions performed by an AP.

Example

The following example enables the automatic enabling or disabling of CPU management:

(scalance)(config)# dynamic-cpu-mgmt auto

(scalance)(config)# end

(scalance)# commit apply

Command Information

4.4.15 dynamic-dns

Description

This command makes a one time dynamic update of the DNS records of the AP and its clients after the user has manually configured the dns values.

SCALANCE W1750D CLI

96 Function Manual, 03/2019, C79000-G8976-C452-04

Page 97

CLI Commands

Parameter

Description

Example

dynamic-dns

ents dynamically on the DNS server.

—

<dns_action>

— <dns_server>

Denotes the IP address of the DNS server.

10.17.132.85

<dns_domain>

updated on the DNS server.

test.dns

<dns_hostname>

updated on the DNS server.

host-anand <dns_host>

Denotes the IP address of the AP or the client.

10.17.132.85

key <algo-

NOTE:

key

in sync.

hmac-

Note

The colon (:) functions as an input separator in the shared secret key entry.

4.4 D

Syntax

dynamic-dns {<dns_action> <dns_server> <dns_domain> <dns_hostname> <dns_host>} [key <algo- name:keyname:keystring>]

Updates the DNS records of the AP and its cli-

Allows you to add or delete the DNS record from the DNS server.

Denotes the domain name of the client that is

Denotes the hostname of the client or AP that is

Usage Guidelines

Example

name:keyname:keystr ing>

Configures a TSIG shared secret key to secure the dynamic updates.

sha1:arubaddns: 16YuLPdH21rQ6PuK9ud sVLtJw3Y=

The following algorithm names are supported:

• hmac-md5 (used by default if algo- name is not specified)

• hmac-sha1

• hmac-sha256

When a

is configured, the update is

successful only if AP and DNS server clocks are

Use this command to perform a one time dynamic update of the DNS records.

The following example manually adds the SOA record:

(scalance)# dynamic-dns add 10.1.1.23 test.dns host-anand 10.3.2.11 key hmac-

sha1:arubaddns:16YuLPdH21rQ6PuK9udsVLtJw3Y=

(scalance)# commit apply

The following example manually deletes the SOA record.

(scalance)# dynamic-dns delete 10.17.132.7 test.ddns host-anand 10.17.132.85 key

hmac- sha1:arubaddns:16YuLPdH21rQ6PuK9udsVLtJw3Y=

(scalance)# commit apply

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 98

CLI Commands

AP Platform

Command Mode

All platforms

Privileged EXEC mode

Parameter

Description

Example

dynamic-dns-ap

—

key <algo-

NOTE:

key

hmac-sha1:ddns-key:

server <ddns server>

10.17.132.85

4.4 D

Command Information

4.4.16 dynamic-dns-ap

Description

This command enables the AP and clients to dynamically update the DNS server.

Syntax

dynamic-dns-ap [key <algo-name:keyname:keystring>] [server <ddns_server>]

Usage Guidelines

Example

Updates the DNS records of the AP and its clients dynamically on the DNS server.

name:keyname:keystr ing>

Configures a TSIG shared secret key to secure the dynamic updates.

The following algorithm names are supported:

• hmac-md5 (used by default if algo-name is not specified)

• hmac-sha1

• hmac-sha256

•

Denotes the IP address of the DNS server.

When a is successful only if AP and DNS server clocks are in sync.

is configured, the update

Dynamic DNS configuration is allowed only on Master APs.

The following example enables the dynamic dns feature:

asdafsdfasdfsgdsgs=

SCALANCE W1750D CLI

98 Function Manual, 03/2019, C79000-G8976-C452-04

(scalance)(config)# dynamic-dns-ap

(scalance)(config)# dynamic-dns-ap key hmac-

sha1:arubaddns:16YuLPdH21rQ6PuK9udsVLtJw3Y=

(scalance)(config)# dynamic-dns-ap server 10.1.1.23

(scalance)(config)# end

Page 99

CLI Commands

Note

The colon (:) functions as an input separator in the shared secret key entry.

AP Platform

Command Mode

All platforms

Configuration mode

Parameter

Description

dynamic-dns-interval

dates are synced to the server. The default value is 12 hours.

AP Platform

Command Mode

All platforms

Configuration mode

4.4 D

(scalance)# commit apply

Command Information

4.4.17 dynamic-dns-interval

Description

This command configures a time interval at which the DNS updates are synced to the server.

Syntax

dynamic-dns-interval <ddns_interval>

<ddns_interval>

Usage Guidelines

Use this command to set a time interval during which the DNS are periodically updated on the server.

Example

The following example configures a DDNS time interval:

(scalance)(config)# dynamic-dns-interval 900

(scalance)(config)# end

(scalance)# commit apply

Command Information

Configures the time interval (in seconds) at which the DNS up-

SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04

Page 100

CLI Commands

Parameter

Description

dynamic-radius-proxy

communicating with the external RADIUS servers.

no…

AP Platform

Command Mode

All platforms

Configuration mode

4.4 D

4.4.18 dynamic-radius-proxy

Description

This command enables the use of IP Address of the Virtual Controller for communication with external RADIUS servers.

Syntax

dynamic-radius-proxy

no…

Enables dynamic RADIUS proxy feature to allow the Virtual Controller network to use the IP address of the Virtual Controller when

Removes the configuration.

Usage Guidelines

Ensure that you set the Virtual Controller IP address as a NAS client in the RADIUS server when Dynamic RADIUS proxy is enabled.

Example

The following example enables the dynamic RADIUS proxy feature:

(scalance)(config)# dynamic-radius-proxy

(scalance)(config)# end

(scalance)# commit apply

Command Information

4.4.19 dynamic-tacacs-proxy

Description

This command enables the Virtual Controller network to use the IP Address of the Virtual Controller for communication with external TACACS servers.

SCALANCE W1750D CLI

100 Function Manual, 03/2019, C79000-G8976-C452-04