Motorola RFS7000 Series Manuel d'utilisateur

RFS7000 Series RF SwitchCLI Reference Guide

x RFS7000 Series CLI Reference Guide

Overview2-72 2.2.31 wlan-aclCommon to all modesSyntaxshow wlan-acl [<1-256>|all]ParametersExampleRFS7000>show wlan-acl 200WLAN port: 200 In

2-73 2.2.32 access-listPriviledge / Global ConfigThis command lists all the access lists (numbered and named) configured on the switch. The numbered

Overview2-74 2.2.33 aclstatsPriviledge / Global ConfigThis command displays the statisitcs of all the access lists configured on the switch. Syntaxac

2-75 2.2.34 alarm-logPriviledge / Global ConfigSyntaxshow alarm-log ( <1-65535>| acknowledged | all | count | new | severity-to-limit( critical

Overview2-76 2.2.35 boot Priviledge / Global ConfigSyntaxshow bootParametersNone.ExampleRFS7000#show bootImage Build Date Inst

2-77 2.2.36 clockPriviledge / Global ConfigSyntaxshow clockParametersNone.ExampleRFS7000#show clockSep 13 16:46:27 UTC 2006RFS7000#

Overview2-78 2.2.37 debuggingPriviledge / Global ConfigSyntaxshow debugging (mstp)ParametersExampleRFS7000#show debugging mstpMSTP debugging status:

2-79 2.2.38 dhcpPriviledge / Global ConfigUse this command to display DHCP Server configurations.Syntaxshow dhcp [config|status]ParametersExampleRFS7

Overview2-80 2.2.39 environmentPrivilege / Global ConfigSyntaxshow environmentParametersNone.ExampleRFS7000#show environment upwind

2-81 2.2.40 filePrivilege / Global ConfigSyntaxshow file (information (FILE)| systems)ParametersExampleRFS7000(config)#show file systemsFile Systems:

About This GuideChapter 1. IntroductionCLI Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview2-82 2.2.41 ftpPrivilege / Global ConfigSyntaxshow ftpParametersNone.ExampleRFS7000#show ftpFTP Server: DisabledUser Name: anonymous or ftpu

2-83 2.2.42 password-encryptionPriviledge / Global ConfigSyntaxshow password-encryption (status)ParametersExampleRFS7000#show password-encryption sta

Overview2-84 2.2.43 running-configPrivilege / Global ConfigDisplays the contents of the configuration file for the switch, including all configured M

2-85 switchport access vlan 1!interface sa2 mtu 0 switchport access vlan 1 shutdown no multicast!interface tunnel27 no ip address!interface vlan1 ip

Overview2-86 logging host 0.0.0.0logging host 0.0.0.0logging host 0.0.0.0no logging sysloglogging onsnmp-server community public rosnmp-server commun

2-87 2.2.44 securitymgrPrivilege / Global ConfigSyntaxshow securitymgr(event-logs)ParametersExampleRFS7000#show securitymgr event-logs===============

Overview2-88 2.2.45 sessionsPrivilege / Global ConfigSyntaxshow sessionsParametersNone.ExampleRFS7000(config)#show sessionsSESSION USER LOCAT

2-89 2.2.46 spanning-treePrivilege / Global ConfigUse this command to display spanning tree information.Syntaxshow spanning-tree (mst)[config|detail|

Overview2-90 % ge4: Designated Port Id 0 - CST Priority 128 -% ge4: CIST Root 0000000000000000% ge4: Regional Root 0000000000000000% ge4: Des

2-91 % sa2: Version Multiple Spanning Tree Protocol - Received None - Send STP% sa2: No portfast configured - Current portfast off% sa2: portfa

xii RFS7000 Series CLI Reference Guidelogging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview2-92 % ge1: no root guard configured - Current root guard off% ge1: Configured Link Type point-to-point - Current shared%RFS7000(conf

2-93 2.2.47 startup-configPrivilege / Global ConfigSyntaxshow startup-configParametersNone.ExampleRFS7000#show startup-config!! configuration of RFS7

Overview2-94 2.2.48 static-channel-groupPrivilege / Global ConfigUse the show static-channel-group privileged EXEC command to display configured stat

2-95 2.2.49 upgrade-statusPrivilege / Global ConfigSyntaxshow upgrade-status(detail)ParametersExampleRFS7000#show upgrade-status detailLast Image Upg

Overview2-96 2.2.50 wlan-aclPrivilege / Global ConfigSyntaxshow wlan-acl [<1-256>|all] ExampleRFS7000(config)#show wlan-acl 102WLAN port: 102

User Exec CommandsLogging in to the switch places you within the USER EXEC command mode. Typically, a log-in requires a user name and a password. Y

Overview3-2 3.1 User Exec CommandsTable 3.1 summarizes User Exec commands.Table 3.1 User Exec commands SummaryCommand Description Ref.clear Resets th

3-3 3.1.1 clear User Exec CommandsUse this command to reset the command to previous configuration.Syntaxclear (mobility|spanning-tree)clear mo

Overview3-4 3.1.2 cluster-cli User Exec CommandsUse this command to cluster all the CLI pertaining to the context it appears in. This feature is use

3-5 3.1.3 debug User Exec CommandsUse this command to debug the switch.Syntaxdebug (certmgr(all|err|info)|ip(https|ssh)|mobility(cc|error|forw

xiiilogout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-8page . . . . . . . . .

Overview3-6 3.1.4 disable User Exec CommandsEnable the PRIV mode to use this command. Then, use the disable command to exit the PRIV mode.Syntax

3-7 3.1.5 enable User Exec CommandsUse this command to enter the PRIV mode.SyntaxenableParametersNone.ExampleRFS7000>enable

Overview3-8 3.1.6 logout User Exec CommandsUse this command instead of exit command to exit the EXEC mode.SyntaxlogoutParametersNone.ExampleThe

3-9 3.1.7 page User Exec CommandsUse this command to toggle paging. Enabling this command displays the CLI command output page by page, inste

Overview3-10 3.1.8 quit User Exec CommandsUse this command to exit the current mode, and move back down to the previous mode.SyntaxquitParame

3-11 3.1.9 show User Exec CommandsUse this command to exit the current mode and go down to previous mode.Syntaxshow Parametersautoinstall Displays th

Overview3-12 ExampleRFS7000>show autoinstallfeature enabled URLconfig yes --not-set--cluster cfg yes --not-set--image

3-13 output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0 collisions 0Interface vlan1 Hardware Type VLAN, Interface Mode Layer

Overview3-14 Log Buffer (3552 bytes):Feb 16 18:38:03 2007: %IMI-5-USERAUTHSUCCESS: User 'admin' logged in with role of ' superuser&apos

Privileged Exec CommandsMost PRIV EXEC mode commands set operating parameters. Privileged-level access must be password protected to prevent unauth

xiv RFS7000 Series CLI Reference Guideboot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview4-2 4.1 Priv Exec CommandTable 4.1 summarizes the Priv Exec commands.Table 4.1 Priv Exec Command SummaryCommand Description Ref.acknowledge Ac

4-3 ping Sends an ICMP echo message. page 4-28pwd Displays the current directory. page 4-29quit Exits the current mode and moves down to the previous

Overview4-4 4.1.1 acknowledgePriv Exec CommandUse this command to acknowledge alarms.Syntaxacknowledge alarm-log [<1-65535> | all]ParametersExa

4-5 4.1.2 archivePriv Exec CommandUse this command to manage archive files.Syntaxarchive tar /table [FILE|URL]archive tar /create [FILE|URL] FILEarch

Overview4-6 4.1.3 cdPriv Exec CommandUse this command to change the current directory. Syntaxcd [DIR|]ParametersExampleRFS7000#cdnvram:/ system:/

4-7 4.1.4 change-passwdPriv Exec CommandUse this command to change the password of the logged in user.Syntaxchange-passwdParametersNone.Usage Guideli

Overview4-8 4.1.5 clearPriv Exec CommandUse this command to reset the current context.Syntaxclear [alarm-log|arp-cache|ip|logging|mac|mobility|spanni

4-9 ExampleRFS7000#clear spanning-tree detected protocols bridgeRFS7000#RFS7000#clear alarm-log newRFS7000#RFS7000#clear alarm-log acknowledgedRFS7000

Overview4-10 4.1.6 clockPriv Exec CommandUse this command to configure the software system clock.Syntaxclock set HH:MM:SS [1-31] MONTH [1993-2035]Par

4-11 4.1.7 cluster-cliPriv Exec CommandUse this command to cluster all the CLI pertaining to the context it appears in. This feature is useful to con

xvChapter 7. interface InstanceInterface Config commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1c

Overview4-12 4.1.8 configurePriv Exec CommandUse this command to move into the configuration mode.Syntaxconfigure terminalParametersExampleRFS7000#co

4-13 4.1.9 copyPriv Exec CommandUse this command to copy any file (config,log,txt ...etc) from any location to the switch and vice-versa.Syntaxcopy (

Overview4-14 4.1.10 debugPriv Exec CommandUse this command for debugging purposes. This command is also used to debug various features. Syntaxdebug a

4-15 ExampleRFS7000#debug ? all Enable all debugging cc Cellcontroller (wireless) debugging messages ccstats Cellcontroller

Overview4-16 4.1.11 deletePriv Exec CommandUse this command to delete the specified file from the system.Syntaxdelete ({/force|/recursive}|) .FILEPar

4-17 4.1.12 diffPriv Exec CommandUse this command to view the difference between two files.Syntaxdiff (FILE|URL) (FILE|URL)ParametersExampleRFS7000#d

Overview4-18 4.1.13 dirPriv Exec CommandUse this command to view the list of files on a filesystem.Syntaxdir ({/all|/recursive}|) (DIR|all-filesystem

4-19 4.1.14 disablePriv Exec CommandUse this command to exit the Exec mode.SyntaxdisableParametersNone.ExampleRFS7000#disableRFS7000>

Overview4-20 4.1.15 editPriv Exec CommandUse this command to edit a text file.Syntaxedit FILEParametersExampleRFS7000#edit startup-config GNU nano 1

4-21 4.1.16 enablePriv Exec CommandUse this command to turn on the privileged mode command. SyntaxenableParametersNone.ExampleRFS7000#enableRFS7000#

xvi RFS7000 Series CLI Reference Guideservice. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview4-22 4.1.17 erasePriv Exec CommandUse this command to erase a target filesystem.Syntaxerase [cf:|flash:|nvram:|startup-config:]ParametersExam

4-23 4.1.18 killPriv Exec CommandUse this command to kill (terminate) a specified session.Syntaxkill session <1-16>ParametersExampleRFS7000#sho

Overview4-24 4.1.19 logoutPriv Exec CommandUse this command to exit from the EXEC mode. SyntaxlogoutParametersNone.ExampleRFS7000#logoutPlease press

4-25 4.1.20 mkdirPriv Exec CommandUse this command to create a new directory in the filesystem.Syntaxmkdir DIRParametersExampleRFS7000#mkdir TestDIRR

Overview4-26 4.1.21 morePriv Exec CommandUse this command to view the contents of a file.Syntaxmore FILEParametersExampleRFS7000#more flash:/log/mess

4-27 4.1.22 pagePriv Exec CommandUse this command to toggle switch paging. Enabling this command displays the command output page by page, instead of

Overview4-28 4.1.23 pingPriv Exec CommandUse this command to send ICMP echo messages.Syntaxping [IP address|hostname]ParametersExampleRFS7000#ping 11

4-29 4.1.24 pwdPriv Exec CommandUse this command to view the contents of the current directory.SyntaxpwdParametersNone.ExampleRFS7000#pwdflash:/RFS70

Overview4-30 4.1.25 quitPriv Exec CommandUse this command to exit the current mode and move down to the previous mode.SyntaxquitParametersNone.Exampl

4-31 4.1.26 reloadPriv Exec CommandUse this command to halt the switch and perform a warm reboot.SyntaxreloadParametersNone.ExampleRFS7000#reloadWire

xviihost. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-16lease . . . . . . . . .

Overview4-32 4.1.27 renamePriv Exec CommandUse this command to rename a file in the existing filesystem.Syntaxrename FILE FILEParametersExampleRFS700

4-33 4.1.28 rmdirPriv Exec CommandUse this command to delete an existing file.Syntaxrmdir DIRParametersExampleRFS7000#rmdir flash:/NewTestDir/RFS7000

Overview4-34 4.1.29 showPriv Exec CommandUse this command to show currently running system information.Syntaxshow <display parameter>Parameters

4-35 Usage GuidelinesRefer to show on page 2-25 for additional information.ExampleRFS7000#show ? access-list Internet Protocol (IP) aclsta

Overview4-36 interfaces Interface status ip Internet Protocol (IP) ldap LDAP server licenses

4-37 4.1.30 telnetPriv Exec CommandUse this command to open a telnet session.Syntaxtelnet [IP address|hostname]ParametersExampleRFS7000#telnet 157.11

Overview4-38 4.1.31 traceroutePriv Exec CommandUse this command to trace the route to a destination.Syntaxtraceroute (WORD | ip WORD)ParametersExampl

4-39 4.1.32 upgradePriv Exec CommandUse this command to upgrade the switch software image.Syntaxupgrade URL (background|)ParametersExampleRFS7000#upg

Overview4-40 SuccessfulSep 08 15:58:46 2006: %FWU-6-FWUDONE: Firmware update successful, new versionis 1.0.0.0-264BRFS7000#

4-41 4.1.33 upgrade-abortPriv Exec CommandUse this command to abort an ongoing upgrade process.Syntaxupgrade-abortParametersNone.ExampleRFS7000#upgra

xviii RFS7000 Series CLI Reference GuideChapter 14. Wireless InstanceWireless Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . .

Overview4-42 4.1.34 writePriv Exec CommandUse this command to write the running configuration to memory or terminalSyntaxwrite [memory | terminal]Par

Global Configuration CommandsThe term global is used to indicate characteristics or features effecting the system as a whole. Use the Global config

Overview5-2 5.1 Global Configuration CommandsTable 5.1 summarizes the Global Config commands.Table 5.1 Global Configuration Command SummaryCommand Des

5-3 prompt Sets the system prompt. page 5-39radius-server Enters radius-server mode. page 5-40redundancy Configures redundancy group parameters. page

Overview5-4 5.1.1 aaaGlobal Configuration CommandsUse this command to configure the current Authentication,Authorization and Accounting (aaa) login s

5-5 5.1.2 access-listGlobal Configuration CommandsUse this command to add an access list entry. Use the access list command under global configuratio

Overview5-6 Parametersaccess-list(<1-99>|<1300-1999>) (deny|permit|mark(8021p <0-7> | tos <0-255>))(A.B.C.D/M | host A.B.C.D |

5-7 access-list(<100-199>|<2000-2699>) {deny | permit | mark {dot1p <0-7> | tos <0-255>}}{ip} {source/source-mask | host sourc

Overview5-8 access-list (<100-199>|<2000-2699>) {deny | permit | mark {dot1p <0-7> | tos <0-255>}}{icmp} {source/source-mask |

5-9 Usage GuidelinesUse an access list command under global configuration to create an access list. RFS7000 supports port, router and WLAN ACL’s. • Wh

IntroductionThis chapter describes the commands defined by the RFS7000 Series Command Line Interface (CLI). Access the CLI by running a terminal em

Overview5-10 ExampleThe example below creates a standard access list (ACL) to permit any traffic coming to the interface.RFS7000(config)#access-list 1

5-11 5.1.3 autoinstallGlobal Configuration CommandsUse this command to autoinstall the switch image.Syntaxautoinstall [clear-config-history|cluster-c

Overview5-12 5.1.4 bannerGlobal Configuration CommandsUse this command to define a login banner for the switch.Syntaxbanner(motd(LINE|default))Parame

5-13 5.1.5 bootGlobal Configuration CommandsThis command reboots the switch with an image present in the mentioned partition ( either the primary or

Overview5-14 5.1.6 bridgeGlobal Configuration CommandsConfigures bridge specific details.Syntaxbridge [<1-32>|multiple-spanning-tree]bridge <

5-15 5.1.7 country-codeGlobal Configuration CommandsUse this command to configure the country of operation. Syntaxcountry-codeParametersNone.Usage Gu

Overview5-16 kw Kuwait kz Kazakhstan li Liechtenstein lk Sri Lanka lt Lithuania lu Luxembourg lv Latvia ma Morocco mt Malta mx Me

5-17 5.1.8 cryptoGlobal Configuration CommandsUse this command to configure encryption related commands.Syntaxcrypto(key|pki)crypto key(export|genera

Overview5-18 Usage GuidelinesUse crypto pki with diffrent parameters to configure trustpoint and its parameters. Use crypto key to configure RSA key p

5-19 5.1.9 debugGlobal Configuration CommandsUse this command to turn on and off mstp debugging messages.Syntaxdebug (mstp) [all|cli|packet(rx |tx)|p

MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Symbol is a registered trademark of Symbol Technologies, Inc.

Overview1-2 To access commands, enter the PRIV EXEC mode, which is the second level of access for the EXEC mode. In the PRIV EXEC mode, enter any EXEC

Overview5-20 5.1.10 doGlobal Configuration CommandsUse this command to run commands from either the User Exec or Priv Exec mode.Syntaxdo (command of

5-21 5.1.11 endGlobal Configuration CommandsUse this command to end the current mode and change to the Exec mode.SyntaxendParametersNone.ExampleRFS70

Overview5-22 5.1.12 formatGlobal Configuration CommandsUse this command to format the Compact Flash (CF) card.SyntaxformatParametersExampleRFS7000(co

5-23 5.1.13 ftpGlobal Configuration CommandsUse this command to configure the switch as an FTP server.Syntaxftp enableftp password(0|1|LINE)ftp rootd

Overview5-24 5.1.14 hostnameGlobal Configuration CommandsUse this command to change the system’s network name.Syntaxhostname(WORD)ParametersExampleRF

5-25 5.1.15 interfaceGlobal Configuration CommandsUse this command configure a selected interface. Syntaxinterface(IFNAME|fe|ge <1-4>|sa <1-

Overview5-26 5.1.16 ipGlobal Configuration CommandsUse this CLI command to configure a selected Internet Protocol.Syntaxip(access-list|default-gatewa

5-27 Parameters access-list Use the access list parameter to enter the ext-nacl context and std-nacl context. The prompt changes to the context entere

Overview5-28 ip nat <inside | outside> source list <access-list name> overload interface <interface name>•<inside|outside> – D

5-29 Usage GuidelinesBy using the ip access-list parameter you enter the following contexts:• ext-nacl — Extended ACL. For more details see Extended A

1-3 1.2 Getting Context Sensitive HelpEnter a question mark (?) at the system prompt to display a list of commands available for each command mode. Yo

Overview5-30 5.1.17 licenseGlobal Configuration CommandsUse this command to see the details of the license.SyntaxlicenseParametersExampleRFS7000(conf

5-31 5.1.18 lineGlobal Configuration CommandsUse this command to configure the terminal line. Syntaxline(console|vty)ParametersNOTE Using the line vt

Overview5-32 5.1.19 loggingGlobal Configuration CommandsUse this command to modify message logging facilities.Syntaxlogging(aggregation-time|buffered

5-33 ExampleRFS7000(config)#logging aggregation-time 20RFS7000(config)#host Configures the remote host to receive log messages.A.B.C.D Remote host&apo

Overview5-34 5.1.20 macGlobal Configuration CommandsUse this command to configure MAC access-lists.Syntaxmac(access-list(extended(WORD)))ParametersUs

5-35 5.1.21 managementGlobal Configuration CommandsUse this command to set management interface properties.Syntaxmanagement(secure)ParametersExampleR

Overview5-36 5.1.22 ntpGlobal Configuration CommandsUse this command to configure NTP.Syntaxntp(access-group|authenticate|authentication-key|autokey|

5-37 authentication-key<1-65534>Define an authentication key for trusted time sources. Select a keynumber between 1 and 65534.autokey Enables N

Overview5-38 ExampleRFS7000(config)#ntp peer ? WORD Name/IP address of peerRFS7000(config)#ntp peer TestPeer ? autokey Configure autokey peer auth

5-39 5.1.23 promptGlobal Configuration CommandsUse this command to configure and set the systems prompt.Syntaxprompt(LINE)ParametersExampleRFS7000(co

Overview1-4 Use any of the following commands to get help specific to a command mode, command name, keyword or argument:When using context-sensitive h

Overview5-40 5.1.24 radius-serverGlobal Configuration CommandsUse this CLI command to enter the RADIUS Server mode. The system prompt changes from th

5-41 5.1.25 redundancyGlobal Configuration CommandsUse this command to configure redundancy group parameters.Syntaxredundancy(discovery-period|enable

Overview5-42 ExampleRFS7000(config)#redundancy discovery-period 20RFS7000(config)#RFS7000(config)#redundancy handle-stp enableRFS7000(config)#RFS7000(

5-43 5.1.26 serviceGlobal Configuration CommandsUse this command to retrieve system data (tables, log files, configuration, status and operation) for

Overview5-44 ExampleRFS7000(config)#service dhcpRFS7000(config)#RFS7000(config)#service radius restartRFS7000(config)#RFS7000(config)#service show cli

5-45 5.1.27 showGlobal Configuration CommandsUse this command to view running system information.Syntaxshow <display parameter>Parametersaccess

Overview5-46 Usage GuidelinesRefer to show on page 2-25 for details of show command.ExampleRFS7000(config)#show ? access-list Internet Prot

5-47 mac MAC access-list assignment mac-address-table Display MAC address table management Display L3 Managment I

Overview5-48 5.1.28 snmp-serverGlobal Configuration CommandsUse this command to modify SNMP engine parameters.Syntaxsnmp-server(community|contact|ena

5-49 snmp-server enable traps wireless-statistics wlan(avg-bit-speed-less-than|avg-retry-greater-than|avg-signal-less-than|gave-up-percent-greater-tha

1-5 1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each possible argument.2. Par

Overview5-50 miscellaneous ( ) Enables miscellaneous traps.• caCertExpired – Ca certificate has expired.• lowFsSpace – Available file system space lo

5-51 ids ( ) Enables wireless IDS traps.• muExcessiveEvents – Excessive MU events.• radioExcessiveEvents – Excessive radio events.• switchExcessiveEve

Overview5-52 wireless-statistics ( ) Modifies wireless-stats rate traps.• min-packets– Explained in the sections that follow.• mobile-unit– Explained

5-53 radio Modifies radio rate traps.• avg-bit-speed-less-than <value>– Average bit speed in Mbps is less than <a decimal number greater than

Overview5-54 wireless-switch Modify wireless-switch rate traps.• num-mobile-units-greater-than <1-8192> – Number of associated MUs is greater th

5-55 ExampleRFS7000(config)#snmp-server community TestCommunity roRFS7000(config)#RFS7000(config)#snmp-server contact TestManagerRFS7000(config)#RFS70

Overview5-56 RFS7000(config)#RFS7000(config)#snmp-server enable traps wireless ids excessiveProbesRFS7000(config)#RFS7000(config)#snmp-server enable

5-57 5.1.29 spanning-treeGlobal Configuration CommandsUse this command to configure the spanning-tree commands.Syntaxspanning-tree [mst|portfast]span

Overview5-58 • forward-time <4-30> – Sets the time (in seconds) after which (if this bridge is the root bridge) each port changes states to lear

5-59 Usage GuidelinesThe mst > configuration command moves you to the spanning tree-mst Instance instance.If a bridge does not hear bridge protocol

Overview1-6 1.5 Using CLI Editing Features and ShortcutsA variety of shortcuts and editing features are enabled for the CLI. The following sections de

Overview5-60 5.1.30 timezoneGlobal Configuration CommandsUse this command to configure switch timezone settings.SyntaxtimezoneParametersExampleRFS700

5-61 5.1.31 usernameGlobal Configuration CommandsUse this CLI command to establish the user name authentication.Syntaxusername <name> (access|p

Overview5-62 5.1.32 wirelessGlobal Configuration CommandsUse this command to configure switch wireless parameters. This command leads moves you to th

5-63 5.1.33 wlan-aclGlobal Configuration CommandsUse this command to apply an ACL on a WLAN index.Syntaxwlan-acl [<1-256>{<1-99>|<100-

Overview5-64 ExampleThe example below applies an ACL to WLAN index 200 in inbound direction from the global config mode.RFS7000(config)#wlan-acl 200 1

crypto-trustpoint InstanceUse config-crypto-trustpoint commands to define a Certificate Authority (CA) trustpoint. config-crypto-trustpoint is a se

Overview6-2 password Challenge password (appplicable only by request). page 6-12rsakeypair Rsa Keypair to associate with the trustpoint. page 6-13serv

6-3 6.1.1 clrscrTrustpoint Config commandsUse this command to clear the display screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-trustpoint)#c

Overview6-4 6.1.2 company-nameTrustpoint Config commandsUse this command to set the company name (applicable only by request) to a trustpoint.Syntaxc

6-5 6.1.3 emailTrustpoint Config commandsUse this command to configure an e-mail ID for a trustpoint.SyntaxemailParametersUsage GuidelinesThe email d

1-7 1.5.2 Completing a Partial Command NameEnter the first few letters of the command and then press the Tab key if you do not remember the complete c

Overview6-6 6.1.4 endTrustpoint Config commandsUse this command to end and exit the current mode and move to the PRIV EXEC mode. The prompt changes t

6-7 6.1.5 exitTrustpoint Config commandsUse this command to end the current mode and down to previous mode (GLOBAL-CONFIG). The prompt now changes to

Overview6-8 6.1.6 fqdnTrustpoint Config commandsUse this command to configure the fully qualified domain name (fqdn) for the trustpoint.SyntaxfqdnPar

6-9 6.1.7 helpTrustpoint Config commandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS7000(confi

Overview6-10 6.1.8 ip-addressTrustpoint Config commandsUse this command to configure an IP address for the trustpoint.Syntaxip-addressParametersExamp

6-11 6.1.9 noTrustpoint Config commandsUse this command to negate a command or set defaults.Syntaxno <previous command used>ParametersNone.Exam

Overview6-12 6.1.10 passwordTrustpoint Config commandsUse this command to set the challenge password, applicable only for trustpoint access requests

6-13 6.1.11 rsakeypairTrustpoint Config commandsUse this command to configure a RSA Keypair to associate with the trustpoint.SyntaxrsakeypairParamete

Overview6-14 6.1.12 serviceTrustpoint Config commandsUse this command to invoke service commands to trobuleshoot or debug crypto pki trustpoint insta

6-15 6.1.13 showTrustpoint Config commandsUse this command to view current system information.Syntaxshow <parameter>ParametersExampleRFS7000(co

Overview1-8 1.5.3 Deleting EntriesUse any of the following keystrokes to delete command entries: 1.5.4 Re-displaying the Current Command LineIt is eas

Overview6-16 RFS7000(config)#show crypto pki trustpointsTrustpoint :default-trustpoint----------------------------------------------- Server certific

6-17 6.1.14 subject-nameTrustpoint Config commandsUse this command to create a subject name in order to configure a trustpoint. A subject name is a c

Overview6-18

interface InstanceUse the (config-if) instance to configure Fast Ethernet (fe), Giga Ehternet (ge), StaticAggregate interface (sa), VLAN and tunnel

Overview7-2 port-channel Port channel commands. page 7-15service Service commands. page 7-16show Shows the running system information. page 7-17shutdo

7-3 7.1.1 clrscrInterface Config commandsUse this command to clear the screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-if)#clrscrRFS7000(conf

Overview7-4 7.1.2 descriptionInterface Config commandsUse this command to create an interface specific desciption.SyntaxdescriptionParametersExampleR

7-5 7.1.3 duplexInterface Config commandsUse this command to configure a duplex type for the interface.Syntaxduplex(auto|full|half)ParametersUsage Gu

Overview7-6 7.1.4 endInterface Config commandsUse this command to exit from the current mode and move to the PRIV EXEC mode. The prompt changes to RF

7-7 7.1.5 exitInterface Config commandsUse this command to end the current mode and move down to the previous mode (GLOBAL-CONFIG). The prompt change

1-9 1.5.7 Controlling CapitalizationCLI commands are generally case-insensitive, and are typically in lowercase. To change the capitalization of the c

Overview7-8 7.1.6 helpInterface Config commandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS700

7-9 7.1.7 ipInterface Config commandsUse this command to configure an IP address for the assigned Ethernet, VLAN or tunnel.Syntaxip(access-group|addr

Overview7-10 RFS7000(config-if)#interface vlan 2000RFS7000(config-if)#ip address 172.168.200.1/24RFS7000(config-if)#ip helper-address 172.168.100.10 v

7-11 7.1.8 macInterface Config commandsUse this command to apply a MAC access list to a gigabit ethernet interface.Syntaxmac (access-group <acl_na

Overview7-12 7.1.9 managementInterface Config commandsUse this command to configure the selected interface as a management interface.Syntaxmanagement

7-13 7.1.10 mtuInterface Config commandsUse this command to set the mtu value for a VLAN interface. Syntaxmtu <512-1500> ParametersUsage Guidel

Overview7-14 7.1.11 noInterface Config commandsUse this command to negate a command or set defaults.Syntaxno [description|duplex|ip|mtu|shutdown|span

7-15 7.1.12 port-channelInterface Config commandsUse this command to select the load-balance criteria of a aggregated port. This command Syntaxport-c

Overview7-16 7.1.13 serviceInterface Config commandsUse this command to invoke service commands to trobuleshoot or debug the (config-if) instance con

7-17 7.1.14 showInterface Config commandsUse this command to view current system information.Syntaxshow <paramater>ParametersExampleRFS7000(con

Overview1-10

Overview7-18 RFS7000(config-if)#show bootImage Build Date Install Date Version----- -------------------- ---

7-19 % portfast bpdu-guard disabled% portfast errdisable timeout disabled% portfast errdisable timeout interval 300 sec% cisco interoperability not co

Overview7-20 7.1.15 shutdownInterface Config commandsUse this command to shutdown the selected interface.SyntaxshutdownParametersNone.ExampleRFS7000(

7-21 7.1.16 spanning-treeInterface Config commandsUse this command to configure spanning tree parameters. Syntaxspanning-tree [bpdufilter(enable|disa

Overview7-22 ExampleRFS7000(config-if)#spanning-tree edgeportRFS7000(config-if)#RFS7000(config-if)#spanning-tree guard rootRFS7000(config-if)#RFS7000(

7-23 7.1.17 speedInterface Config commandsUse this command to configure the speed of the selected interface in Mbps.Syntaxspeed(10|100|1000|auto)Para

Overview7-24 7.1.18 static-channel-groupInterface Config commandsUse this command to to add an interface to a static channel group.Syntaxstatic-chann

7-25 7.1.19 switchportInterface Config commandsUse this command to set switching mode characteristics for the selected interface. The mode can be eit

Overview7-26 ExampleRFS7000(config-if)#switchport mode accessRFS7000(config-if)#

7-27 7.1.20 tunnelInterface Config commandsUse this command to configure protocol-over-protocol tunneling.Syntaxtunnel(destination|source|ttl)tunnel

Common CommandsThis chapter explains the common CLI commands used amongst the USER EXEC and PRIV EXEC modes.The PRIV EXEC command set contains the

Overview7-28

spanning tree-mst InstanceUse the (config-mst) instance to configure the Multi Spanning Tree Protocol (MSTP). Use (config)#spanning-tree mst config

Overview8-2 8.1.1 clrscrmst Config commandsUse this command to clear the display.SyntaxclrscrParametersNone.ExampleRFS7000(config-mst)#clrscrRFS7000(

8-3 8.1.2 endmst Config commandsUse this command to end and exit from the current mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#

Overview8-4 8.1.3 exitmst Config commandsUse this command to end the current mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes t

8-5 8.1.4 helpmst Config commandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS7000(config-mst)#

Overview8-6 8.1.5 instancemst Config commandsUse this command to associate VLAN(s) with an instance.Syntaxinstance <1-15> vlan <VLAN_ID>P

8-7 8.1.6 namemst Config commandsUse this command to set a name for the MST region. Syntaxname (region name)ParametersExampleRFS7000(config-mst)#name

Overview8-8 8.1.7 nomst Config commandsUse this command to negate a command or set defaults.Syntaxno [instance|name|revision]ParametersUsage Guidelin

8-9 8.1.8 revisionmst Config commandsUse this command to configure the revision number of the MST bridge.Syntaxrevision <0-255>ParametersExampl

About This GuideThis preface introduces the RFS7000 Series CLI Reference Guide and contains the following sections:• Who Should Use this Guide• How to

Overview2-2 2.1 Common CommandsTable 2.1 summarizes commands common amongst many switch contexts and instance.Table 2.1 Common commands amongst most c

Overview8-10 8.1.9 servicemst Config commandsUse this command to invoke the service commands needed to trobuleshoot or debug (config-if) instance con

8-11 ...

Overview8-12 8.1.10 showmst Config commandsUse this command to view current system information.Syntaxshow <paramater>ParametersExampleRFS7000(c

8-13 RFS7000(config-mst)#show access-listExtended IP access list 110 permit ip 192.168.1.0/24 192.168.100.0/24 rule-precedence 5 permit ip 192.1

Overview8-14 8.2 Configuring Interface using MSTPMSTP runs by default. All VLANs are in default instance 0 by default.1. Use the following command to

Extended ACL InstanceUse the(config-ext-nacl) instance to configure ip access-list extended ACLs..9.1 Extended ACL Config CommandsTable 9.1 summari

Overview9-2 9.1.1 clrscrExtended ACL Config CommandsUse this command to clear the display screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-ext

9-3 9.1.2 denyExtended ACL Config CommandsUse this command to specify packets to reject.Syntaxdeny(icmp|ip|tcp|udp)deny {ip} {source/source-mask | ho

Overview9-4 deny {icmp} {source/source-mask | host source | any} {destination/ destination-mask | host destination | any} [icmp-type | [icmp-type icmp

9-5 Usage GuidelinesUse this command to deny traffic between network’s/host’s based on the protocol type selected in the access list configuration. Th

2-3 2.1.1 clrscrCommon CommandsUse this command to clear the screen displaying and refresh the prompt (#).SyntaxclrscrParametersNone.ExampleRFS7000#c

Overview9-6 • Select the protocol type icmp to allow/deny icmp packets. Selecting icmp provies the option of filtering icmp packets based on icmp type

9-7 9.1.3 endExtended ACL Config CommandsUse this command to end and exit from the current mode and change to the PRIV EXEC mode. The prompt changes

Overview9-8 9.1.4 exitExtended ACL Config CommandsUse this command to end current mode and go to the previous mode (GLOBAL-CONFIG). The prompt change

9-9 9.1.5 helpExtended ACL Config CommandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS7000(con

Overview9-10 9.1.6 markExtended ACL Config CommandsUse this command to mark specific packets.Syntaxmark {dot1p <0-7> | tos <0-255>}} {ip}

9-11 mark {dot1p <0-7> | tos <0-255>}} {icmp} {source/source-mask | host source | any} {destination/ destination-mask | host destination |

Overview9-12 Usage GuidelinesThis command marks traffic between network’s/host’s based on the protocol type selected in the access list configuration.

9-13 • Select the protocol type icmp to allow/deny icmp packets. Selecting icmp protocol allow you the option of filtering icmp packets based on icmp

Overview9-14 9.1.7 noExtended ACL Config CommandsUse this command to negate a command or set its defaults.Syntaxno(deny|mark|permit)This command nega

9-15 9.1.8 permitExtended ACL Config CommandsUse this command to permit specific packets.Syntaxpermit {ip} {source/source-mask | host source | any} {

Overview2-4 2.1.2 debugCommon CommandsUse this command to debug certificate management, ip, mobility and MSTP functionalities.Syntax (User Exec)debug

Overview9-16 permit {icmp}{source/source-mask | host source | any} {destination/ destination-mask | host destination | any}[icmp-type |[icmp-type icmp

9-17 Usage GuidelinesUse this command to permit traffic between network’s/host’s based on the protocol type selected in the access list configuration.

Overview9-18 • Select the protocol type icmp to allow/deny icmp packets. Selecting icmp protocol allow you the option of filtering icmp packets based

9-19 9.1.9 serviceExtended ACL Config CommandsUse this command to invoke service commands to troubleshoot or debug (config-if) instance configuration

Overview9-20 9.1.10 showExtended ACL Config CommandsUse this command to view the current system information.Syntaxshow <paramater>ParametersUsa

9-21 RFS7000(config-ext-nacl)#show access-listExtended IP access list 101 deny ip 192.168.1.0/24 192.168.2.0/24 rule-precedence 10 permit ip any

Overview9-22 9.1.11 terminalExtended ACL Config CommandsUse this command to set the length /number of lines displayed on the terminal window.Syntaxte

Standard ACL InstanceUse the (config-std-nacl) instance to configure ip access-list standard ACLs. Standard ACLs allow filtering based on the sourc

Overview10-2 10.1.1 clrscrStandard ACL Config CommandsUse this command to clear the display screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-s

10-3 10.1.2 denyStandard ACL Config CommandsUse this command to specify packets to reject.Syntaxdeny(A.B.C.D/M|any|host)deny any(log|rule-precedence)

2-5 Parameters (Priv Mode)allEnables debugging.cc [access-port|all|altap-detect|capwap|cluster|config|dot11|eap|ids|kerberos|l3-mob|media|mobile-unit|

Overview10-4 10.1.3 endStandard ACL Config CommandsUse this command to exit the current mode and move to the PRIV EXEC mode. The prompt changes to RF

10-5 10.1.4 exitStandard ACL Config CommandsUse this command to end the current mode and move to the previous mode (GLOBAL-CONFIG). The prompt change

Overview10-6 10.1.5 helpStandard ACL Config CommandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleR

10-7 10.1.6 markStandard ACL Config CommandsUse this command to mark specific packets.Syntaxmark(8021.1p<0-7>|tos<0-255>)(A.B.C.D/M|any|h

Overview10-8 10.1.7 noStandard ACL Config CommandsUse this command to negate a command or set its defaults.Syntaxno(deny|mark|permit)This command neg

10-9 10.1.8 permitStandard ACL Config CommandsUse this command to permit specific packets.Syntaxpermit(A.B.C.D/M|any|host)permit any(log|rule-precede

Overview10-10 10.1.9 serviceStandard ACL Config CommandsUse this command to invoke service commands to troubleshoot or debug (config-if) instance con

10-11 10.1.10 showStandard ACL Config CommandsUse this command to view current system information.Syntaxshow <paramater>ParametersUsage Guideli

Overview10-12 RFS7000(config-std-nacl)#show access-listStandard IP access list 1 permit any rule-precedence 10Extended IP access list 101 deny i

10-13 10.1.11 terminalStandard ACL Config CommandsUse this command to set the length /number of lines displayed on the terminal.Syntaxterminal(monito

Overview2-6 dhcpsvr [all|error|info]DHCP Conf Serv er Debugging Messages.• all – Traces error and info messages from the DHCP Conf Server.• error – Tr

Overview10-14

Extended MAC ACL InstanceUse the (config-ext-macl) instance to configure mac access-list extended ACLs associated with the switch.Use decimal value

Overview11-2 11.1 MAC Extended ACL Config CommandsTable 11.1 summarizes the config-ext-macl commands.Table 11.1 Extended ACL Config Command SummaryCom

11-3 11.1.1 clrscrMAC Extended ACL Config CommandsUse this command to clear the display screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-ext-m

Overview11-4 11.1.2 denyMAC Extended ACL Config CommandsUse this command to specify packets that you want to reject.Syntax{deny}{any|host source MAC

11-5 •ip• 802.1qBy default, the switch does not allow layer 2 traffic to pass through the interface. To adopt access port through an interface, config

Overview11-6 11.1.3 endMAC Extended ACL Config CommandsUse this command to exit from the current mode and change to PRIV EXEC mode. The prompt change

11-7 11.1.4 exitMAC Extended ACL Config CommandsUse this command to end current mode and move to the previous mode (GLOBAL-CONFIG). The prompt change

Overview11-8 11.1.5 helpMAC Extended ACL Config CommandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.Exam

11-9 11.1.6 markMAC Extended ACL Config CommandsUse this command to specify a packet to mark.Syntax{mark {dot1p <0-7>|tos <0-255>}} {any|

2-7 mobility [all|cc|error|forwarding <MAC Address>|mu|packet|peersystem]L3 Mobility.• all – All debugging (except "forwarding").• cc

Overview11-10 Usage GuidelinesUse the mark option to specify the type of service (tos) and priority value. The tos value is marked in the IP header an

11-11 11.1.7 noMAC Extended ACL Config CommandsUse this command to negate a command or set defaults.Syntaxno(deny|mark|permit)This command negates al

Overview11-12 11.1.8 permitMAC Extended ACL Config CommandsUse this command to specify packets to forward. A MAC access list (to allow an arp) is man

11-13 Usage GuidelinesWhen creating a Port ACL, the switch by default does not permit an ethertype WISP. First create a rule to allow WISP to adopt ac

Overview11-14 11.1.9 serviceMAC Extended ACL Config CommandsUse this command to invoke service commands to trobuleshoot or debug (config-if) instance

11-15 11.1.10 showMAC Extended ACL Config CommandsUse this command to view current system information.Syntaxshow<paramater>ParametersUsage Guid

Overview11-16 RFS7000(config-ext-macl)#show access-listExtended MAC access list 200 permit any any type arp rule-precedence 10 permit any any ty

11-17 11.1.11 terminalMAC Extended ACL Config CommandsUse this command to set the length or number of lines displayedSyntaxterminal(monitor|no)termin

Overview11-18

DHCP InstanceUse the (config-dhcp)instance to configure the DHCP server address pool associated the switch.12.1 DHCP Config CommandsTable 12.1 summ

Overview2-8 radius [all|err|info|warn]RADIUS server debugging messages.• all – Traces all messages from the RADIUS server.• err – Traces error message

Overview12-2 exit Ends the current mode and moves to the previous mode. page 12-13hardware-addressConfigures the hardware address using either a dashe

12-3 12.1.1 addressDHCP Config CommandsUse this command to specify a range of addresses for DHCP network pool.Syntaxaddress (range) (low IP address)

Overview12-4 12.1.2 bootfileDHCP Config CommandsUse this command to assign a bootfile name for the DHCP configuration on the network pool.Syntaxbootf

12-5 12.1.3 client-identifierDHCP Config CommandsUse this command to assign a name to the client-identifier. A client identifier is used to reserve a

Overview12-6 12.1.4 client-nameDHCP Config CommandsUse this command to a add client name for the DHCP clients.Syntaxclient-name <name>Parameter

12-7 12.1.5 clrscrDHCP Config CommandsUse this command to clear the screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-dhcp)#clrscrRFS7000(confi

Overview12-8 12.1.6 ddnsDHCP Config CommandsUse this command to configure dynamic DNS parameters like domain name, enabling multi-user class and IP a

12-9 12.1.7 default-routerDHCP Config CommandsUse this command to configure the default router or gateway IP address for the network pool. To remove

Overview12-10 12.1.8 dns-serverDHCP Config CommandsUse this command to configure the DNS server’s IP address available to all the DHCP clients connec

12-11 12.1.9 domain-nameDHCP Config CommandsUse this command to configure the domain name for the network pool. Use the no domain-name command to rem

2-9 ExampleRFS7000#debug cc allRFS7000#configure tEnter configuration commands, one per line. End with CNTL/Z.RFS7000(config)#logging console 7RFS700

Overview12-12 12.1.10 endDHCP Config CommandsUse this command to exit from the current mode and change to PRIV EXEC mode. The prompt changes to RFS70

12-13 12.1.11 exitDHCP Config CommandsUse this command to end the current mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to R

Overview12-14 12.1.12 hardware-addressDHCP Config CommandsUse this command to reserve IP address (manually) based on a DHCP client’s hardware address

12-15 12.1.13 helpDHCP Config CommandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS7000(config-

Overview12-16 12.1.14 hostDHCP Config CommandsUse this command to configure a fixed IP address for the host in dotted decimal format. Use the no host

12-17 12.1.15 leaseDHCP Config CommandsUse this command to configure a valid lease time for the IP address used by all DHCP clients in the network po

Overview12-18 12.1.16 netbios-name-serverDHCP Config CommandsUse this command to configure the netbios-name server’s IP address.Syntaxnetbios-name-se

12-19 12.1.17 netbios-node-typeDHCP Config CommandsUse this command to configure the netbios-node type.Syntaxnetbios-node-type [b-node|h-node|m-node|

Overview12-20 12.1.18 networkDHCP Config CommandsUse this command to configure the network pool’s IP address. This will map the current DHCP pool wit

12-21 12.1.19 next-serverDHCP Config CommandsUse this command to configure the IP address of the next server in the boot process. Syntaxnext-server &

Overview2-10 2.1.3 exitCommon CommandsUse this command to end the current mode and move to the previous mode.SyntaxexitParametersNone.ExampleRFS7000(

Overview12-22 12.1.20 noDHCP Config CommandsUse this command to negate a command or set defaults.Syntaxno [address|bootfile|client-identifier|client-

12-23 12.1.21 optionDHCP Config CommandsUse this command to define the raw DHCP option used in DHCP pools.Syntaxoption (name)ParametersUsage Guidelin

Overview12-24 12.1.22 serviceDHCP Config CommandsUse this command to invoke service commands to trobuleshoot or debug the (config-dhcp) instance conf

12-25 12.1.23 showDHCP Config CommandsUse this command to view current system information.Syntaxshow <paramater>ParametersExampleRFS7000(config

Overview12-26 RFS7000(config)#show dhcp configservice dhcpip dhcp option option189 189 ascii!ip dhcp pool vlan4 default-router 2.2.2.1 network 4.4.4.0

12-27 12.1.24 updateDHCP Config CommandsUse this command to control the usage of the DDNS service.Syntaxupdate (dns)(override)ParametersUsage Guideli

Overview12-28 12.2 Configuring DHCP Server using CLIDHCP configuration is accomplished by creating pools and mapping them to L3 interfaces (SVI).A poo

12-29 2. A DHCP reboot is required to implement the configuration made at both levels — the DHCP pool context level and DHCP global context level. The

Overview12-30 11. A pool can be configured as the host pool or network pool, but not both.12. A host pool can have either client-identifier or hardwar

RADIUS Server InstanceThe radius-server local command takes you to the RADIUS server mode. Local (Onboard) RADIUS server configuration commands are

2-11 2.1.4 helpCommon CommandsUse this command to get access to the advanced help feature. Use “?” anytime at the command prompt to get access to the

Overview13-2 ldap-server LDAP server parameters. page 13-20nas RADIUS client. page 13-22no Negates a command or set its defaults. page 13-23proxy RADI

13-3 13.1.1 authenticationRADIUS Configuration CommandsUse this command to configure authentication used with RADIUS server.Syntaxauthentication(data

Overview13-4 13.1.2 caRADIUS Configuration CommandsUse this command to configure CA (Certificate Authority) parameters.Syntaxca trust-point(WORD)Para

13-5 13.1.3 clrscrRADIUS Configuration CommandsUse this command to clear the screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-radsrv)#clrscrRF

Overview13-6 13.1.4 crl-checkRADIUS Configuration CommandsUse this command to enable a Certificate Revocation List (CRL) check. To enable the certifi

13-7 13.1.5 endRADIUS Configuration CommandsUse this command to exit from the current mode and change to the PRIV EXEC mode. The prompt now changes t

Overview13-8 13.1.6 exitRADIUS Configuration CommandsUse this command to exit current mode and move to the previous mode (GLOBAL-CONFIG). The prompt

13-9 13.1.7 groupRADIUS Configuration CommandsUse this command to configure RADIUS user groups. The CLI moves to a sub-instance config-radsrv-group,

Overview13-10 13.1.7.2 endRADIUS Configuration CommandsUse this command to exit from the current mode and move to the PRIV EXEC mode. The prompt chan

13-11 13.1.7.5 guest-groupRADIUS Configuration CommandsUse this command to manage a guest-user linked with hotspot. Create a guest-user and associate

iv RFS7000 Series CLI Reference GuideConventions Used in this GuideThis section describes the following topics:• Annotated Symbols• Notational Convent

Overview2-12 2.1.5 noCommon CommandsUse this command to either negate a command or set its defaults.SyntaxnoParametersNone.ExampleRFS7000(config)#no

Overview13-12 ParametersExampleRFS7000(config-radsrv-group)#no policy dayRFS7000(config-radsrv-group)#RFS7000(config-radsrv-group)#no policy timeRFS70

13-13 Syntaxpolicy(day|time|vlan|wlan)policy day(all|fr|mo|sa|su|th|tu|we|weekdays)ploicy time(start|end)<0-23><0-59>policy vlan<1-4094

Overview13-14 13.1.7.9 rad-userRADIUS Configuration CommandsUse this command to add an exisitng RADIUS user to this group.If the RADIUS user is not a

13-15 +-mo [policy day (all|weekdays|{mo|tu|we|th|fr|sa|su})] +-sa [policy day (all|weekdays|{mo|tu|we|th|fr|sa|su})] +-su [policy day (all|

Overview13-16 sessions Display current active open connections snmp Display SNMP engine parameters snmp-server

13-17 13.1.7.12 Example–Creating a GroupThe use of the (config-radsrv-group) sub-instance is explained below: 1. Create a group called Sales in the lo

Overview13-18 8. Use (config-radsrv)#proxy to add a realm name. RFS7000(config-radsrv)#proxy realm mydomain.com server 10.10.1.10 port 1812 secret 0 t

13-19 13.1.8 helpRADIUS Configuration CommandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS7000

Overview13-20 13.1.9 ldap-serverRADIUS Configuration CommandsUse this command to configure LDAP server parameters. It uses the exisitng external data

13-21 ExampleRFS7000(config)#ldap-server primary host 192.192.1.88 port 389 login (sAMAccountName=%{Stripped-User-Name:-%{User-Name}}) bind-dn cn=admi

2-13 2.1.6 serviceCommon CommandsUse this command to service/debug the RFS7000 Switch. Syntax (User Exec)service [diag|encrypt|locator|save-cli|show]

Overview13-22 13.1.10 nasRADIUS Configuration CommandsUse this command to configure the RADIUS client.Syntaxnas(A.B.C.D/M)key(0|2|LINE)ParametersUsag

13-23 13.1.11 noRADIUS Configuration CommandsUse this command to negate a command or set its defaults.Syntaxno(authentication|ca|crl-check|group|ldap

Overview13-24 13.1.12 proxyRADIUS Configuration CommandsUse this command to configure a proxy RADIUS server based on the realm/suffix.Syntaxproxy(rea

13-25 13.1.13 rad-userRADIUS Configuration CommandsUse this command to configure RADIUS user parameters.Syntaxrad-user(WORD)password(0|2|WORD) (group

Overview13-26 13.1.14 serverRADIUS Configuration CommandsUse this command to configure server certificate parameters used by RADIUS server. The serve

13-27 13.1.15 serviceRADIUS Configuration CommandsUse this command to invoke service commands to trobuleshoot or debug (config-radsrv) instance confi

Overview13-28 13.1.16 showRADIUS Configuration CommandsUse this command to view current system information.Syntaxshow<paramater>ParametersUsage

13-29 RFS7000(config)#show radius trust-pointTrust-point Configured For Radius________________________________ Server Trust-point : tp1

Overview13-30

Wireless InstanceUse the (config-wireless)instance to configure wireless parameters.14.1 Wireless Configuration CommandsTable 14.1 summarizes the Gl

Overview2-14 filesys (etc2|flash|var)Use this parameter to set the file system freespace limit. Select the freespace limit for the following sub conte

Overview14-2 dhcp-sniff-state Record mobile unit DHCP state information. page 14-10dot11-shared-key-auth Enables support for 802.11 shared key authent

14-3 14.1.1 adopt-unconf-radioWireless Configuration CommandsUse this command to adopt a radio (even if not yet configured). The default templates is

Overview14-4 14.1.2 adoption-pref-idWireless Configuration CommandsUse this command as a preference identifier for the switch. Radios configured with

14-5 14.1.3 ap-detectionWireless Configuration CommandsUse this command to configure access port detection.Syntaxap-detection[approved|enable|mu-assi

Overview14-6 14.1.4 broadcast-tx-speedWireless Configuration CommandsUse this command to configure the rate broadcast and multicast traffic must be t

14-7 14.1.5 clrscrWireless Configuration CommandsUse this command to clear the screen.SyntaxclrscrParametersNone.ExampleRFS7000(config-wireless)#clrs

Overview14-8 14.1.6 convert-apWireless Configuration CommandsUse this command to change an access port’s mode of operation to either sensor or standa

14-9 14.1.7 country-codeWireless Configuration CommandsUse this command to configure the country of operation. This command erases the radio’s existi

Overview14-10 14.1.8 dhcp-sniff-stateWireless Configuration CommandsUse this command to record mobile unit DHCP state information.Syntaxdhcp-sniff-st

14-11 14.1.9 dot11-shared-key-authWireless Configuration CommandsUse this command to enable support for 802.11 shared key authentication.Syntaxdot11-

2-15 Syntax (Priv Exec)service [clear|copy|diag|diag-shell|encrypt|locator|save-cli|securitymgr|show|start-shell|wireless]service clear [all|aplogs|cl

Overview14-12 14.1.10 endWireless Configuration CommandsUse this command to end and exit from the current mode and change to the PRIV EXEC mode. The

14-13 14.1.11 exitWireless Configuration CommandsUse this command to exit the current mode and move to the previous mode (config). The prompt changes

Overview14-14 14.1.12 fix-windows-dhcpWireless Configuration CommandsUse this command to convert Windows DHCP Server responses to unicast instead of

14-15 14.1.13 helpWireless Configuration CommandsUse this command to access the system’s interactive help system.SyntaxhelpParametersNone.ExampleRFS7

Overview14-16 14.1.14 idsWireless Configuration CommandsUse this command to configure Intrusion Detection System settings.Syntaxids(anomaly-detection

14-17 ExampleRFS7000(config-wireless)#ids anomaly-detection tkip-countermeasures enableRFS7000(config-wireless)#RFS7000(config-wireless)#ids detect-wi

Overview14-18 14.1.15 mac-auth-localWireless Configuration CommandsUse this command to configure local MAC authentication list.Syntaxmac-auth-local&l

14-19 14.1.16 manual-wlan-mappingWireless Configuration CommandsUse this command to manually map/un-map WLANs configured on a radio.Syntaxmanual-wlan

Overview14-20 14.1.17 mobile-unitWireless Configuration CommandsUse this command to configure mobile unit related parameters.Syntaxmobile-unit (assoc

14-21 14.1.18 mobilityWireless Configuration CommandsUse this command to configure mobility parametersSyntaxmobility(enable|local-address|max-roam-pe

Overview2-16 Parameters (Priv Exec mode only)clear [all|aplogs|clitree|cores|dumps|panics|pm (statistics|sys-restart-count)|securitymgr (flows)[<0-

Overview14-22 14.1.19 multicast-packet-limitWireless Configuration CommandsUse this command to a configure multicast packet limit per second for VLAN

14-23 14.1.20 noWireless Configuration CommandsUse this command to negate a command or set its defaults.Syntaxno(adopt-unconf-radio|adoption-pref-id|

Overview14-24 14.1.21 oversized-framesWireless Configuration CommandsUse this command to use oversized frames for data traffic.Syntaxoversized-frames

14-25 14.1.22 proxy-arpWireless Configuration CommandsUse this command to respond to ARP requests on behalf of mobile units.Syntaxproxy-arpParameters

Overview14-26 14.1.23 qos-mappingWireless Configuration CommandsUse this command to configure QoS mappings between wired and wireless domains.Syntaxq

14-27 14.1.24 radioWireless Configuration CommandsUse this command to configure radio related settings.Syntaxradio (<1-4096>|RADIO|add|all-11a|

Overview14-28 bss (<1-4>|auto) WLANMap wireless LANs to radio BSSID’s. • <1-4> –The BSS where a wireless lLAN is mapped.• auto – Automatic

14-29 mac (AA-BB-CC-DD-EE-FF)Changes the parent (access port) MAC address of the radio. • AA-BB-CC-DD-EE-FF – MAC address in AA-BB-CC-DD-EE-FF format.

Overview14-30 speedConfigures the basic and supported data rates.• 1 1-Mbps.• 11 11-Mbps.• 12 12-Mbps.• 18 18-Mbps.• 2 2-Mbps.• 24

14-31 wmm (background|best-effort|video|voice)(aifsn<1-15>|burst<0-65535>| cw<0-15>)802.11e / Wireless MultiMedia (WMM) parameters (

2-17 Syntax (Global Config)service [advanced-vty|dhcp|password-encryption (secret)2 LINE|pm (max-sys-restarts <1-5> |sys-restart)|prompt(crash-i

Overview14-32 ExampleRFS7000(config-wireless)#radio 250 bss auto 3-5RFS7000(config-wireless)#RFS7000(config-wireless)#radio 1 channel-power indoor 1 1

14-33 14.1.25 self-healWireless Configuration CommandsUse this command to configure self healing. Syntaxself-heal(interference-avoidance|neighbor-rec

Overview14-34 ExampleRFS7000(config-wireless)#self-heal interference-avoidance enableRFS7000(config-wireless)#RFS7000(config-wireless)#self-heal inter

14-35 14.1.26 sensorWireless Configuration CommandsUse this command to configure Wireless Intrusion Protection System parameters.Syntaxsensor(default

Overview14-36 14.1.27 serviceWireless Configuration CommandsUse this command to invoke service commands to troubleshoot or debug the (config-wireless

14-37 RFS7000(config-wireless)#service show wireless ap historyRFS7000(config-wireless)#RFS7000(config-wireless)#service wireless clear-ap-log 20RFS70

Overview14-38 14.1.28 showWireless Configuration CommandsUse this command to view current system information.Syntaxshow<paramater>ParametersExa

14-39 RFS7000(config-wireless)#showRFS7000(config-wireless)#show wireless APNumber of access-ports adopted : 2Available licenses : 254

Overview14-40 14.1.29 smart-scan-channelsWireless Configuration CommandsUse this command to configure a list of channels used on the network. This li

14-41 14.1.30 wlanWireless Configuration CommandsUse this command to configure Wireless LAN related commands.Syntaxwlan(<1-256>|WLAN)(accountin

Overview2-18 Parameters(Global Config)ExampleRFS7000#service diag ?enable Enable in service diagnostics led LED control limit diagnostic limi

Overview14-42 Parameters[ <1-256> | WLAN]Select a single WLAN index. You also have the option of selecting a list (1,3,7) or range (3-7) of WLAN

14-43 dot11i [handshake | key | key-rotation | key-rotation-interval | opp-pmk-caching | phrase|pmk-caching | preauthentication | second-key|tkip-cntr

Overview14-44 encryption-type()The encryption type for this WLAN.• ccmp – AES Counter Mode CBC-MAC Protocol (AES-CCM/CCMP).• keyguard – Keyguard-MCM (

14-45 hotspot()Modifies hotspot related parameters.• allow (rule index) (IP address) – Modifies hotspot allow-list parameters. Users who have not yet

Overview14-46 kdc [password (0||LINE) | realm (LINE) | server (primary|secondary|timeout)] auth-port<1-65535> Modifies KDC related parameters.•

14-47 qos [classification | mcast1 | mcast2 | prioritize-voice | svp | wmm]Quality of Service commands.• classification [background|best-effort|video|

Overview14-48 • aifsn – (Arbitration Inter Frame Spacing Number) The wait time (in milliSeconds) between data frames derived using AIFSN and theslot-t

14-49 • pap – Password Authentication Protocol.• dscp<0-63> – Specifies a DSCP (Differentiated Services Code Point) v to provide QoS to RADIUS p

Overview14-50 ExampleRFS7000(config-wireless)#wlan 25 accounting syslogRFS7000(config-wireless)#RFS7000(config-wireless)#wlan 25 answer-bcast-essRFS70

14-51 RFS7000(config-wireless)#wlan 25 dot11i handshake timeout 2500 retransmit 5RFS7000(config-wireless)#RFS7000(config-wireless)#wlan 25 dot11i key-

2-19 RFS7000#service diag limit buffer ? 128 128 byte buffer limit 128k 128k byte buffer limit 16k 16k byte buffer limit 1k 1k byte buffer

Overview14-52

Appendix A Customer SupportMotorola’s Enterprise Mobility Support CenterIf you have a problem with your equipment, contact Enterprise Mobility support

A - 2 RFS7000 Series CLI Reference Guide

MOTOROLA INC.1303 E. ALGONQUIN ROADSCHAUMBURG, IL 60196http://www.motorola.com72E-85984-01 Revision AApril 2007

Overview2-20 RFS7000#service diag limit ram 20RFS7000#service diag limit routecache ? <0-65535> limit from 0-65535

2-21 RFS7000>service show crash-infoCoredump files:Name Size Date & Time=============================================imis

vNotational ConventionsThe following notational conventions are used in this document:• Italics are used to highlight specific items in the general t

Overview2-22 291 S 1676 1 0.0 0.6 logd 375 S 1672 1 0.0 0.6 wccpd 279 S 1636 1 0.0 0.6 pmd 430 S 16

2-23 RFS7000> service show upgrade-historyConfigured size of upgrade history is 50 Date & Time Old Version New Version Stat

Overview2-24 2.1.7 terminalCommon CommandsUse this command to set the length /number of lines displayed on the terminal window.Syntaxterminal[length

2-25 2.2 showCommon CommandsThis command displays the settings for the specified system component. There are a number of ways to invoke the show comm

Overview2-26 redundancy-history Displays the switch state transition history. Common page 2-54redundancy-membersDisplays redundancy group members in d

2-27 ftp Displays the FTP Server configuration. Privilege/Global Configpage 2-82password-encryptionDisplays the password’s encryption settings. Privil

Overview2-28 2.2.1 autoinstallCommon to all modesSyntaxshow autoinstallParametersNone.ExampleRFS7000>show autoinstallRFS7000>

2-29 2.2.2 bannerCommon to all modesSyntaxshow bannerParametersExampleRFS7000>show banner motdWelcome to CLIRFS7000>motd Enters the Message of

Overview2-30 2.2.3 commandsCommon to all modesSyntaxRFS7000>show commandsParametersNone.ExampleRFS7000>show commands clear mobility event-log

2-31 no page no service diag enable no service diag period no service diag watchdog no service locator p page (exit|logout|quit) show autoin

vi RFS7000 Series CLI Reference GuideMotorola Service InformationUse the Motorola Support Center as the primary contact for any technical problem, que

Overview2-32 2.2.4 debuggingCommon to all modesSyntaxshow debugging (mstp)ParametersExampleRFS7000(config)#show debugging mstpMSTP debugging status:R

2-33 2.2.5 environmentCommon to all modesSyntaxshow environmentParametersNone.ExampleRFS7000>show environment upwind of CPU temp

Overview2-34 2.2.6 historyCommon to all modesSyntaxshow historyParametersNone.ExampleRFS7000>show history 1 show 2 clrscr 3 enable 4 clrsc

2-35 2.2.7 interfacesCommon to all modesSyntaxshow interfaces [<name>|fe|ge <1-4>|sa <1-4>|switchport(<name>|fe|ge|sa|tunnel|

Overview2-36 Speed: Admin Auto, Operational Unknown, Maximum 1G Duplex: Admin Auto, Operational Unknown Active Medium: Unknown Switchport Setting

2-37 2.2.8 ipCommon to all modesSyntaxshow ip [access-group (IFNAME | eth <1-2> | vlan <1-4094>) | access-list |arp | ddns(binding)| dhcp

Overview2-38 Usage Guidelines1. It has been noted the interface and VLAN status is displayed as UP despite of a disconnection. In such a case, shutdow

2-39 vlan1 157.235.208.69(DHCP) up upvlan3 unassigned administratively down downRFS70

Overview2-40 RFS7000#show ip domain-name IP domain-lookup : Enable Domain Name : symbol.comRFS7000#show ip http serverHTTP server: RunningConfig sta

2-41 2.2.9 ldapCommon to all modesSyntaxshow ldap(configuration(primary|secondary))ParametersExampleRFS7000(config-radsrv)#show ldap configurationLDA

viiMotorola, Inc. End-User License AgreementBY DOWNLOADING, INSTALLING, OR USING THE SOFTWARE DESCRIBED IN THIS DOCUMENT, YOU OR THE ENTITY OR COMPAN

Overview2-42 2.2.10 licensesCommon to all modesSyntaxshow licensesParametersNone.ExampleRFS7000(config)#show licenses feature usage license string

2-43 2.2.11 loggingCommon to all modesSyntaxshow loggingParametersNone.ExampleRFS7000(config)#show loggingLogging module: enabled Aggregation time

Overview2-44 2.2.12 macCommon to all modesSyntaxshow mac(access-list)ParametersExampleRFS7000(config)#show mac access-listRFS7000(config)#access-list

2-45 2.2.13 mac-address-tableCommon to all modesSyntaxshow mac-address-tableParametersNone.ExampleRFS7000#show mac-address-tablebridge VLAN por

Overview2-46 2.2.14 managementCommon to all modesSyntaxshow managementParametersNone.ExampleRFS7000(config)#show managementMgmt Interface: vlan1Manag

2-47 2.2.15 mobilityCommon to all modesSyntaxshow mobility [event-log|forwarding|global|mobile-unit|peer|statistics]show mobility event-log [mobile-u

Overview2-48 09/14 19:17:52 IP-UPD-MU n/a 00-0f-3d-e9-a6-54157.235.208.134 157.235.208.16 157.235.208.1609/14 19:17:51 ADD-MU

2-49 2.2.16 ntpCommon to all modesSyntaxshow ntp (association (detail)|status)ParametersExampleRFS7000>show ntp associations address ref

Overview2-50 2.2.17 privilegeCommon to all modesSyntaxshow privilegeParametersNone.ExampleRFS7000>show privilegeCurrent user privilege: superuserR

2-51 2.2.18 radiusCommon to all modesSyntaxshow radius [configuration|eap(configuration)|group|nas( A.B.C.D/M)|proxy| rad-user|trust-point]Parameters

viii RFS7000 Series CLI Reference Guideconditions of this EULA. With respect to technical information you provide to Licensor as part of any Support S

Overview2-52 2.2.19 redundancy-groupCommon to all modesSyntaxshow redundancy-group [config|runtime]ParametersExampleRFS7000(config)#show redundancy-g

2-53 Redundancy Group Runtime InformationRedundancy Protocol Version : 2.0Redundancy Group License : 0Cluster AP Adoption Count

Overview2-54 2.2.20 redundancy-historyCommon to all modesSyntaxshow redundancy-historyParametersNone.ExampleRFS7000>show redundancy-historyState T

2-55 2.2.21 redundancy-membersCommon to all modesSyntaxshow redundancy-members (A.B.C.D)ParametersExampleRFS7000(config)#show redundancy-members brie

Overview2-56 2.2.22 snmpCommon to all modesSyntaxshow snmp [user(snmpmanager|snmpoperator|snmptrap)]ParametersExampleRFS7000(config)#show snmp user s

2-57 2.2.23 snmp-serverCommon to all modesSyntaxshow snmp-server[traps(wireless-statistics( mobile-unit | radio | wireless-switch | wlan))]Parameters

Overview2-58 tput-greater-than disabled avg-bit-speed-less-than disabled avg-signal-less-than

2-59 2.2.24 spanning-treeCommon to all modesSyntaxshow spanning-tree mst [config|detail (interface){<IF Name>|fe|ge <1-4>|sa <1-4>|

Overview2-60 % ge1: Configured Path Cost 200000 - Add type Explicit ref count 1% ge1: Designated Port Id 87d1 - CST Priority 128 -% ge1: CIST

2-61 2.2.25 static-channel-groupCommon to all modesSyntaxshow static-channel-groupParametersNone.ExampleRFS7000>show static-channel-groupRFS7000&g

ix9. INDEMNITY. Licensee agrees that Licensor shall have no liability whatsoever for any use Licensee makes of the Software. Licensee shall indemnify

Overview2-62 2.2.26 terminalCommon to all modesSyntaxshow terminalParametersNone.ExampleRFS7000(config)#show terminalTerminal Type: vt102Length: 42

2-63 2.2.27 timezoneCommon to all modesSyntaxshow timezoneParametersNone.ExampleRFS7000>show timezoneTimezone is Etc/UTCRFS7000>

Overview2-64 2.2.28 usersCommon to all modesSyntaxshow usersParametersNone.ExampleRFS7000(config)#show users Line PID User Uptime

2-65 2.2.29 versionCommon to all modesSyntaxshow version (verbose)ParametersExampleRFS7000(config)#show versionRFS7000 version 1.0.0.0-228D MIB=01aCo

Overview2-66 2.2.30 wirelessCommon to all modesSyntaxshow wireless [ap (<1-48>|AA-BB-CC-DD-EE-FF)| ap-detection-config | ap-images | ap-unado

2-67 Parametersap Status of adopted access port.<1-48> The index of the access port.AA-BB-CC-DD-EE-FF The MAC address of a access port.ap-detect

Overview2-68 statistics Mobile unit rf statistics.wlan <wlan_range> Show mobile units associated to this WLAN.• <wlan_range> – A WLAN inde

2-69 ExampleRFS7000>show wireless apNumber of access-ports adopted : 0Available licenses : 0Clustering enabled : NClu

Overview2-70 RFS7000>show wireless hotspot-configWLAN: 1 status: disabled description: WLAN1 ssid: 101 Page-Location: simple Internal Pages Page-t

2-71 eap-starts : disabled 60 Sec null-destination : disabled 60 Sec same-source-destination : disabled