Manuals / 3Com / Computer Equipment / Switch

3Com 3CRWX120695A manual See Also clear sessions on display sessions on, WX4400# telnet

Models: 3CRWX120695A 3CRWX440095A

1 536

Download 536 pages 47.14 Kb

Page 159

telnet 159

If the configuration of the WX switch from which you enter the telnet command has an ACL that denies Telnet client traffic, the ACL also denies access by the telnet command.

Examples — In the following example, an administrator establishes a Telnet session with another device and enters a command on the remote device:

WX4400# telnet 10.10.10.90

Session 0 pty tty2.d Trying 10.10.10.90...

Connected to 10.10.10.90

Disconnect character is '^t'

Copyright (c) 2004 3Com Corporation. All rights reserved.

	Username: username
	Password: password
	WX1200-remote> display vlan			VLAN	Tunl			Port
	VLAN	Name	Admin			Port	Tag
			Status	State Affin				State
	----	----------------	------	----- -----		---------------- -----		-----
	1	default	Up	Up	5	3	none Up
	3	red	Up	Up	5

	10	backbone	Up	Up	5	1	none	Up

	4094	web-aaa	Up	Up	0	2	none Up
						2	4094	Up

When the administrator presses Ctrl+t to end the Telnet connection, the management session returns to the local prompt:

WX1200-remote>Session 0 pty tty2.d terminated tt name tty2.d WX1200#

See Also

clear sessions on page 441

display sessions on page 444

Image 159

3Com 3CRWX120695A, 3CRWX440095A manual See Also „ clear sessions on „ display sessions on, WX4400# telnet

Contents

3CRWX120695A, 3CRWX440095A Wireless LAN Mobility System3Com Corporation 350 Campus Drive Marlborough, MA USA Contents Set system location Clear banner motd Clear history Clear promptVlan Commands 147 Set ntp 148 131 Ping 132 Set arp 133 Set arp agingtime 134142 Set ip ssh 143 144169 183Display location policy 185 Display mobility-profile 241 MAP Access Point Commands by Usage228 234261 Reset ap dap 264 254 Display dap unconfigured 256 Display radio-profile 257327 311319 326345 335Set spantree 337373 Commands by Usage 393369 Clear security acl 370 Clear security acl map 371435 444446 480 465 Set rf detect countermeasures466 Set rfdetect ignore 467 Set rfdetect log 468517 Commands by Usage 491 Clear log trace Clear trace 492Fver 519 Help 520 Next 521 Reset 522 Test 523 496 Set trace sm 497Register Your Product 527 VersionList conventions that are used throughout this guide Conventions„ Wireless LAN Switch Manager 3WXM Release Notes „ Wireless LAN Switch and Controller Release NotesDocumentation „ Document part number and revision on the title CommentsPddtechpubscomments@3com.com „ Document titleAbout this Guide Overview Set enablepass Clear interface vlan-idipClear fdb dynamic port port-list vlan vlan-id Notation Text EntryConventions MAC AddressUser Globs MasksSubnet Masks Wildcard MasksGives examples of user globs MAC Address GlobsUser Globs „ a single port number. For example WX1200# set port enableVlan Globs Matching Order for GlobsOperating systems Command-LineWX1200# reset port EditingWX1200# display i Tab Using CLI Help At your access level, type the help command. For exampleWX1200# display i? WX1200# display ip telnet Understanding Command DescriptionsSet ap dap name command has the following complete syntax WX1200# display ip ?Understanding Command Descriptions Using the COMMAND-LINE Interface Syntax disable Defaults None Commands byDisable To located commands in this chapter based on their useQuit EnableSet enablepass Access Commands To located commands in this chapter based on their use System Service Commands„ display banner motd on Banner with an empty banner by typing the following commandClear banner motd Clear historyClear system Clear promptMotd Display bannerDisplay Base-informationDisplay license Shows system information Defaults None Access AllDisplay system „ set license onDisplay system output Describes the fields of display system outputNvram size /SDRAM size percent of total WX switch HelpSyntax help History Syntax historySee Also „ clear history on Syntax set confirm on off Set confirmSee Also „ clear banner motd on „ display banner motd on That might have a large impact on the networkWX4400# set confirm off Set lengthExamples To turn off these confirmation messages, type WX4400# clear vlan redInstalls an upgrade license, for managing more MAPs Set licenseSee Also „ display license on Syntax set prompt string Set promptSyntax set system contact string Set system contact Stores a contact name for the WX switchSet system CountrycodeCountry Code Mobility Domain Defaults The factory default country code is NoneUsing any set ap commands to configure a MAP Ip-addressSyntax set system location string See Also „ clear system on „ display system onSyntax set system name string „ set system contact on „ set system name onSystem Service Commands Locate commands in this chapter based on their use Port Commands„ set dap on That are using the MAPClear dap Removes a Distributed MAPClear port name Removes the name assigned to a port Clear port-group„ name name Name of the port group See Also „ set port-groupon „ display port-grouponInterface for the active link Clear portPreference See Also „ display port status on „ set port name onPort Network port defaultsClear port type Network portCounters Display portDisplay port-groupShows port group information Describes the fields in the display port-group outputOutput for display port-group Syntax display port poe port-list See Also „ clear port-groupon „ set port-grouponDescribes the fields in this display Output for display port poeSpecified ports Usage This command applies only to the WX4400All four ports of a WX4400 switch „ set port poe onSyntax display port status port-list Output for display port preferenceWX1200# display port status Output for display port status„ set port speed on Monitor portSee Also „ clear port type on „ set port negotiation onKey Controls for Monitor Port Counters Display WX4400# monitor port counters Output for monitor port countersCorrect length but contained an invalid See Also „ display port counters on Set dap Reset portPort Commands Set dap Set port Examples The following command disables portFol1owing command reenables the port Administratively disables or reenables a portConfigured together as a single logical link Single logical linkWith no spaces See Also „ clear port name on „ display port status on Name or number in other CLI commandsSet port name See Also „ clear port-groupon „ display port-grouponSet port negotiation Set port poeResult WX1200# set port poe 4,5 enable Following command enables PoE on ports 4See Also „ set port type ap on „ set port type wired-authon WX1200# set port poe 4,5 disableSyntax set port speed port-list10 100 1000 auto Set port speedChanges the speed of a port WX4400# set port preference 2 rj45Set port trap Set snmp trap commandSet port type ap „ 11a 802.11a „ 11b 802.11b „ 11g 802.11g Antenna model, use the following command„ poe enable disable Power over Ethernet PoE state Defaults All WX ports are network ports by defaultSTP MAP Access Port DefaultsSet port type Wired-authWX1200# set port type wired-auth 2 success change accepted Wired Authentication Port DetailsSee Also „ clear port type on „ set port type ap on Vlan Commands WX4400# clear fdb static vlan blue success change accepted Clear fdbDeletes an entry from the forwarding database FDB Syntax clear fdb perm static dynamicClear vlan „ display fdb onPort from the VLAN, make sure you specify the port number Displays entries in the forwarding database Following command completely removes Vlan marigoldSee Also „ set vlan port on „ display vlan config on Display fdbWX4400# display fdb all Output for display fdb AgingtimeDescribes the fields in the display fdb output See Also „ clear fdb onSee Also „ set fdb agingtime on WX1200# display fdb agingtimeSyntax display fdb count perm static dynamic Station Display roamingDescribes the fields in the display See Also „ display roaming vlan onOutput for display roaming station Output for display roaming vlan Syntax display roaming vlanWX4400# display roaming vlan Syntax display tunnel See Also „ display vlan config onDisplay tunnel Output for display tunnelWX1200# display vlan config burgundy Display vlan configOutput for display vlan config Syntax display vlan config vlan-idSet fdb Adds a permanent or static entry to the forwarding databaseSyntax set fdb perm static See Also „ clear fdb on „ display fdb on Creates a Vlan and assigns a number and name to it Set vlan nameSee Also „ display fdb agingtime on Vlan 4094 is reserved for WebAAASet vlan port Tunnel-affinity Set vlanSee Also „ display roaming vlan on „ display vlan config on To locate commands in this chapter based on their use IP Services CommandsDNS IP Services Commands by UsageClear interface Removes an IP interfaceSyntax clear interface vlan-idip WX1200# clear ip dns domain Access EnabledHistory Introduced in MSS Version See Also „ display ip alias on„ set ip dns server on Clear ip dns serverClear ip route „ set ip dns domain onClear ip telnet „ display ip route on„ set ip route on Update-interval Clear ntp serverClear ntp See Also „ clear ntp server on „ display ntp on „ set ntp server on „ set ntp update-intervalonClear snmp trap ReceiverClear summertime Examples To clear the system IP address, type the following CommandFollowing command Clear timezoneShows the ARP table Display arpDisplay timedate on Display timezone on„ set arp on „ set arp agingtime onSyntax display interface vlan-id Output for display interface Shows the IP aliases configured on the wireless LAN switchDisplay ip alias See Also „ set interface on „ set interface status on„ set ip alias on Examples The following command displays the DNS informationDisplay ip dns „ clear ip alias onSyntax display ip https Display ip httpsShows information about the Https management port Output for display ip dnsWX4400# display ip https Output for display ip httpsWX4400# display ip route Display ip routeShows the IP route table Syntax display ip route destinationFieldDescription Output of display ip routeOutput for display ip telnet Syntax display ip telnetWX4400 display ip telnet Output for display ntp Examples To display NTP information for a WX switch, typeDisplay ntp Shows NTP client information„ set ntp server on „ set summertime on „ set timezone on Display snmp ConfigurationShows Snmp settings on a wireless LAN switch Examples To display Snmp settings on a WX switch, typeOutput of display snmp configuration WX1200# display summertime Defaults There is no summertime offset by defaultSummertime Syntax display summertimeWX1200# display timedate Syntax display timezoneWX4400# display timezone „ set timedate on „ set timezone on Defaults „ count„ traceroute on Set arpWX1200# set arp agingtime Following command disables ARP agingSee Also „ set arp agingtime on Syntax set arp agingtime secondsSet interface Syntax set interface vlan-idstatus up down WX1200# set interface mauve ip 10.10.20.10See Also „ clear ip alias on „ display ip alias on Aliases as shortcuts in CLI commandsSet ip alias Set ip dnsWX1200# set ip dns domain example.com Syntax set ip dns domain nameSyntax set ip dns server ip-addrprimary secondary WX switch is also disabled Set ip routeAdds a static route to the IP route table Set ip route Syntax set ip snmp server enable disable Secure Shell SSH management traffic See Also „ set ip ssh absolute-timeoutonSet ip ssh „ clear snmp trap receiver onOr idle Absolute-timeout„ set ip ssh idle-timeouton „ set ip ssh server on Syntax set ip ssh absolute-timeout minutesIdle-timeout Also disabledSet ip ssh server Set ip telnet WX4400# set ip telnet server enable success change accepted Syntax set ip telnet server enable disableSet ntp Examples The following command enables the NTP clientEnables or disables the NTP client on a wireless LAN switch Configures a wireless LAN switch to use an NTP serverFrom 16 through 1,024 seconds RFC 1305, Network Time Protocol Version 3 SpecificationImplementation and Analysis NTP serverSet snmp CommunityPublic and private Sends an Snmp trap message to any network management system „ enable Enables trap information to be sent„ disable Disables the sending of trap information „ all Enables or disables all trapsSnmp Trap Names Defaults All traps are disabled by default Access EnabledSee Also „ clear snmp trap receiver on Set snmp trapIP Services Commands Following To PDT Pacific Daylight Time, type the following commandValues Date is within the summertime period„ time hhmmss System time, in hours, minutes, and seconds Sets the time of day and date on the wireless LAN switchSet timedate „ date mmm dd yyyy System dateSet timezone WX4400# set timedate date feb 29 2004 timeTime now is Sun Feb 29 2004, 235802 PST Telnet Opens a Telnet client session with a remote deviceWX1200# set timezone PST WX4400# telnet See Also „ clear sessions on „ display sessions on„ queries „ size „ ttl Defaults„ dnf Disabled „ no-dns- Disabled „ port TracerouteWX4400# traceroute server1 Error messages for traceroute„ ping on Locate commands in this chapter based on their use This chapter presents AAA commands alphabetically. Use toAAA Commands by Usage Display accounting statistics on WX4400# clear accounting dot1x Nin Syntax clear accounting admin dot1x user-globAdmin Clear authenticationSyntax clear authentication console user-glob WX4400# clear authentication console ReginaConsoleConsole Syntax clear authentication dot1x ssid ssid-namewired Syntax clear authentication mac ssid ssid-namewired Clear authentication Removes a MAC authentication rule. macSyntax clear authentication last-resort ssid ssid-namewired WX4400# clear authentication last-resort wiredClear authentication Removes a WebAAA rule. web WX4400# clear authentication mac ssid thatcorp aabbccSyntax clear authentication web ssid ssid-namewired Syntax clear location policy rule-number See Also „ display aaa on „ set mac-usergroup attr on Clear mac-user„ display location policy on „ set location policy onClear mac-user attr Group„ set mac-user attr on Mac-usergroup ClearMac-user group command Mac-usergroup attr„ clear mac-usergroup attr on Clear user Mobility-profileSee Also „ display aaa on Clear user attrClear usergroup Clear user group„ group-name- Name of an existing user group Syntax clear usergroup group-nameWX4400# clear usergroup cardiology success change accepted Displays all current AAA settings Display aaaTime-Of-Day attribute from the group Display aaa Output Describes the fields that can appear in display aaa outputUser’s password, and no global password is set Statistics output Stored in the local database on the WX switchDisplay accounting StatisticsAaattyattr Display location Policy„ clear location policy on Admin console Set accountingAre sent Authenticated by MAC authentication Server when the user roamsAccesses the switch using Telnet or Web Manager Authenticated byAAA Commands Set authentication AAA Commands Following methods in priority order. MSS applies multiple Through the switch’s consoleCompleting logon Globs onFor more information, see Usage Syntax set authentication dot1x ssid ssid-namewired AAA Commands Set authentication dot1x Success change accepted Syntax set authentication last-resort AAA Commands Syntax set authentication mac AAA Commands Syntax set authentication web ssid ssid-namewired AAA Commands Set location policy AAA Commands Set location policy WX4400# set location policy deny if user eq *.theirfirm.com Tempvendora into Vlan kiosk1 Set mac-userSee Also „ clear mac-useron „ display aaa on Authentication Attributes for Local Users Filter-id outboundacl.out Authentication Attributes for Local UsersYY/MM/DD-HHMM Time-of-day WX4400# set mac-user 010203040506 attr filter-id acl-03.in Syntax set mac-usergroup See Also „ clear mac-user attr on „ display aaa onSyntax set mobility-profile name name port none all See Also „ clear mac-usergroup attr on „ display aaa onAAA Commands „ set user attr on „ set usergroup on Syntax set mobility-profile mode enable disableSet user 29Jan04See Also „ clear user on „ display aaa on Set user attr OrangeSee Also „ clear user attr on „ display aaa on Set user group Set usergroup„ clear user group on To add a user to a group, user the command set user group Syntax set web-aaa enable disableSet web-aaa WX4400# set web-aaa disable success change accepted Examples To disable WebAAA, type the following commandMobility Domain Commands by Usage To locate commands in this chapter based on their useMember Mobility-domainSee Also „ set mobility-domain member on Display mobility-domain configDisplays the configuration of the Mobility Domain StatusWX4400# display mobility-domain status Display mobility-domain OutputSeed-ip Mode member„ display mobility-domain config on SetSyntax set mobility-domain mode seed domain-name Set mobility-domain mode seed domain-nameDomain name is Pleasanton Mobility Domain Commands Commands Managed Access Point Commands Map Access Point Commands by Usage Radio Clear ap dapSyntax clear radio-profile name parameter WX1200# clear ap 3 radioSyntax clear service-profile name „ name Service profile nameSee Also „ clear radio-profileon „ set radio-profile mode on Output for display ap config WX1200# display ap configWX4400# display dap config Does not belong to any load balancing groups An associated client Radio 1 Shows statistics counters for radio Displays MAP access point and radio statistics countersMAP access point on port Display ap dapTkip Pkt Replays Output for display ap countersSee Also „ display sessions network on Syntax display ap dap etherstats port-listdap-numWX4400# display dap etherstats TxMaxColl Output of display ap etherstats„ name Name of an MAP group or Distributed MAP group Syntax display ap status port-listall radio 1 SyntaxWX1200# display ap status WX4400# display dap statusOutput for display ap status Output for display ap status Decide whether to change channel or power settingsSee Also „ display auto-tune neighbors on Output for display auto-tune attributesWX1200# display auto-tune attributes ap 2 radio Neighbors Display auto-tuneDisplay auto-tune Neighbors ap 2 radio Output for display auto-tune neighborsConnection Display dapDap connection serial-id M9DE48B6EAD00 „ display ap dap config on„ display dap global on „ display dap unconfigured on Output of display dap connectionWX4400# display dap global Output for display dap globalLonger appears in the command’s output Unconfigured„ display ap dap config on But that are not configured on any WX switchesDisplays radio profile information Describes the fields in this displayOutput for display radio-profile WX4400# display radio-profile defaultSetting and tuning channels Ssid „ ? Displays a list of service profiles Service-profileDisplays service profile information „ name Displays information about the named service profileUsername „ Tkip countermeasures time Indicates the amount Reset ap dap WX1200# reset apSyntax set ap port-listdap dap-numbias high low WX4400# set dap 1 bias low success change accepted See Also „ display ap dap config onSyntax set ap port-listdap dap-numblink enable disable WX1200# set ap 3-4 blink enable success change accepted WX1200# set ap 1 name techpubs success change accepted Set ap dap name Changes an MAP name„ display ap dap group on WX1200# set ap 4 group none success change acceptedSet ap dap radio antennatype „ antennatype ANT1060 ANT1120 ANT1180 internal„ antennatype ANT5060 ANT5120 ANT5180 internal Set ap dap radio auto-tune max-power Set ap dap radio auto-tune max- retransmissions Managed Access Point Commands Set ap dap radio channel Sets an MAP radio’s channelSyntax set ap port-listdap dap-numradio 1 WX1200# set ap 5 radio 1 channel 36 success change accepted Set ap dap radio min-client-rateSet ap dap radio min-client-rate Set ap dap radio mode Enables or disables a radio on an MAP access pointFollowing command enables radio 2 on ports 1 through Set ap dap radio radio-profile Sets an MAP radio’s transmit power Set ap dap radio tx-powerSet ap dap Upgrade-firmware11g-only Set radio-profileSet radio-profile auto-tune channel-config Syntax set radio-profile name auto-tune channel-holddown Set radio-profile auto-tune channel-holddownSyntax set radio-profile name auto-tune channel-interval Set radio-profile auto-tune channel-intervalSet radio-profile auto-tune power-backoff- timer Syntax set radio-profile name auto-tune power-backoff-timerWX4400# set radio-profile rp2 auto-tune power-backoff-timer Set radio-profile auto-tune power-config Set radio-profile auto-tune power-interval Radio profile rp1 to 200 ms Service set identifier SsidBeacon-interval Specify from 25 ms to 8191 msSyntax set radio-profile name frag-threshold threshold Syntax set radio-profile name long-retry threshold Syntax set radio-profile name max-rx-lifetime time Mode Max-tx-lifetimeParameter Default Value Defaults for Radio Profile ParametersWX4400# set radio-profile rp1 success change accepted WX4400# set radio-profile rp1 mode enableSyntax set radio-profile name Syntax set radio-profile name rts-threshold threshold Syntax set radio-profile name service-profile name Defaults for Service Profile Parameters297 Defaults for Service Profile Parameters Syntax set radio-profile name short-retry threshold WPA IE Syntax set service-profile Name auth-dot1x enable disableSet service-profile auth-fallthru Syntax set service-profile name auth-psk enable disable Syntax set service-profile name beaconed enable disable Cipher-ccmp Set service-profileCipher-tkip Use the set service-profile wep commands See Also „ set service-profilecipher-ccmponCipher-wep104 Cipher-wep104 command „ enable Enables 40-bit WEP encryption for WPA clients„ disable Disables 40-bit WEP encryption for WPA clients Defaults 40-bit WEP encryption is disabled by defaultSyntax set service-profile name psk-phrase passphrase Syntax set service-profile name psk-raw hex Syntax set service-profile name rsn-ie enable disable Syntax set service-profile name ssid-name ssid-name Set service-profile auth-psk commandSee Also „ set service-profilessid-nameon See Also „ set service-profilessid-typeonSyntax set service-profile name tkip-mc-time wait-time Ssid managed by the service profile Syntax set service-profile name web-aaa-form urlWeb-aaa-form Set service-profile wep active-multicast- index „ copy on „ dir on„ mkdir on Syntax set service-profile name wep active-unicast-index num Set service-profile wep active-unicast- indexWep key-index Syntax set service-profile name wpa-ie enable disable STP Commands by Table to locate commands in this chapter based on their useSTP Commands by Usage Syntax clear spantree portcost port-list STP root bridge in all VLANs on a WX switchClear spantree Portcost„ set spantree portpri on PortpriPortvlancost „ clear spantree portvlanpri on„ clear spantree portcost on PortvlanpriSee Also „ display spantree statistics on „ clear spantree portpri onSyntax display spantree Spantree vlan defaultRoot Output for display spantree„ display spantree blockedports on Or disabledDisplay spantree BackbonefastOne or all of its VLANs WX switch with backbone fast convergence enabledBlockedports „ set spantree backbonefast onOutput for display spantree portfast PortfastFor one or more network ports See Also „ set spantree portfast onSyntax display spantree statistics Port’s VLANs„ port-list- List of ports Syntax display spantree portvlancost port-listWX4400# display spantree statistics Topology change Timer value Hold timer Vlan Vlan ID Output for display spantree statisticsConfigpending Switch is the root or is attempting to become the root Syntax display spantree uplinkfast vlan vlan-id See Also „ clear spantree statistics on„ set spantree uplinkfast on Set spantreeAn indirect link Examples The following command enables STP on all VLANsConfigured on a WX switch Following command disables STP on Vlan burgundy„ display spantree backbonefast on Fwddelay„ all Changes the maximum age on all VLANs Issues a topology change messageMaxage VLANs to 4 seconds65,535. STP selects lower-cost paths over higher-cost paths Type. lists the defaults for STP port path costSnmp Port Path Cost Defaults Path to the STP root bridgePortvlancost command Syntax set spantree portpri port-listpriority value See Also „ display spantree portfast onTo 20 in Vlan mauve Bridge for a specific Vlan on a wireless LAN switch„ all Changes the cost on all VLANs Type. See onPriority Primary link fails Uplinkfast32,768 Pink toSee Also „ display spantree uplinkfast on Igmp Commands by Usage Igmp Snooping CommandsClear igmp statistics Display igmpSee Also display igmp statistics on TTL Output for display igmp TTL Mrouter Syntax display igmp mrouter vlan vlan-idWX1200# display igmp Mrouter vlan orange Defaults None Access Enabled Only one querierSyntax display igmp querier vlan vlan-id WX1200# display igmp querier vlan red WX1200# display igmp querier vlan defaultOutput for display igmp mrouter WX1200# display igmp querier vlan orange„ set igmp querier on Receiver-tableWX1200# display igmp receiver-table group 237.255.255.0/24 See Also „ set igmp receiver onShows Igmp statistics VLAN, MSS displays Igmp statistics for all VLANsWX1200# display igmp statistics vlan orange From the multicast routers in the subnet Output of display igmp statisticsSee Also „ set igmp rv on Wireless LAN switchFrom 1 through 65,535 VLANs on a wireless LAN switchVLAN, the timer change applies to all VLANs Set igmp lmqiSee Also „ display igmp statistics on Enables or disables multicast router solicitation by a WXSyntax set igmp mrsol enable disable vlan vlan-id Set igmp mrsolWX1200# set igmp mrsol mrsi 60 success change accepted See Also „ set igmp mrsol mrsi onSee Also „ set igmp mrsol on Syntax set igmp mrsol mrsi seconds vlan vlan-idSet igmp oqi All VLANs on a WXSyntax set igmp oqi seconds vlan vlan-id Set igmp Proxy-reportSet igmp qi WX1200# set igmp qi 100 vlan orange success change accepted Set igmp qriVLANs on a WX Group. You can specify a value from 1 through 65,535WX1200# set igmp qri 50 vlan orange success change accepted Syntax set igmp querier enable disable vlan vlan-idSee Also „ display igmp querier on Syntax set igmp receiver port port-listenable disableVLAN, MSS changes the robustness value for all VLANs Defaults The default robustness value for all VLANs isSet igmp rv Occurs on the networkSecurity ACL Security ACL CommandsSyntax clear security acl acl-name all editbuffer-index Clear security acl map Syntax clear security acl map acl-nameall vlan vlan-id Syntax commit security acl acl-nameall WX4400# clear security acl map all success change acceptedWX4400# commit security acl all WX4400# display security aclSyntax display security acl editbuffer Syntax display security acl hits WX4400# display security acl editbufferSee Also „ hit-sample-rateon „ set security acl on WX4400# display security acl hitsSyntax display security acl info acl-nameall editbuffer Syntax display security acl map acl-name Display security aclMap Security ACL is assignedWX4400# display security acl map acl111 Resource-usageACL acl111 is mapped Support for your Product onWX4400# display security acl resource-usage Output of display security acl resource-usage Output of display security acl resource-usage Hit-sample-rate Packets filtered by the security ACL or hitsSyntax hit-sample-rate seconds Syntax rollback security acl acl-nameall Protocol, or IP, ICMP, TCP, or UDP packet information Set security aclBy Icmp packets By TCP packetsBy UDP packets „ ip „ tcp „ udp „ icmp Set security acl Security ACL Commands WX4400# set security acl ip acl123 deny 192.168.2.11 WX4400# commit security acl all configuration acceptedDefaults None Set security acl map Security ACL Commands Cryptography Commands by Usage To locate commands in this chapter based on their useSyntax crypto ca-certificate admin eap webaaa See Also „ display crypto ca-certificateon Syntax crypto certificate admin eap webaaaExamples The following command installs a certificate Syntax crypto generate key admin eap ssh webaaa 512 1024 WX4400# crypto generate key admin 1024 key pair generatedSee Also display crypto key ssh on Syntax crypto generate request admin eap webaaa Email Address admin@example.com WX4400# crypto generate request adminSee Also „ crypto certificate on „ crypto generate key on Syntax crypto generate self-signed admin eap webaaaWX4400# crypto generate self-signed admin Crypto otp „ crypto pkcs12 on Crypto pkcs12See Also „ crypto otp on Display crypto ca-certificate Output Display cryptoCa-certificate Pkcs #7 certificateDescribes the fields of the display On the WX switchSyntax display crypto certificate admin eap webaaa CertificateSyntax display crypto key ssh See Also crypto generate key onCryptography Commands Radius Commands by Usage Locate commands in this chapter based on their usesClear radius WX4400# clear radius timeout success change accepted See Also „ display aaa on „ set radius client system-iponSyntax clear radius client system-ip Syntax clear server group group-nameload-balance See Also „ display aaa on „ set radius server onSyntax clear radius server server-name WX4400# clear radius server rs42 success change accepted„ set server group on Set radiusSet radius client System-ip„ clear radius server on WX4400# set radius client system-ip success change accepted Radius and Server Group Commands Syntax set server group group-namemembers server-name1 „ group-name- Server group name of up to 32 characters Load-balance groupSet server group load-balance Radius and Server Group Commands Performance On the switchCommands on 802.1X Commands by UsageBonded-period Which disables the featureExamples To reset the Bonded period to its default, type Clear dot1xPort-control See Also „ display dot1x on „ set dot1x bonded-periodon„ set dot1x max-reqon Quiet-period „ set dot1x port-controlonSee Also „ display dot1x on „ set dot1x quiet-periodon See Also „ display dot1x on „ set dot1x reauth-periodon Reauth-maxReauth-period „ set dot1x reauth-maxonBefore the WX times out a request to a Radius server Defaults The default is 30 secondsAuthentication server, type the following command Auth-server„ set dot1x tx-periodon „ set dot1x timeout supplicant onTx-period Display dot1xWX4400# display dot1x clients WX1200# display dot1x configType the following command to display 802.1X statistics Explains the counters in the display dot1x stats outputWX4400# display dot1x stats Port-control command Set dot1xAuthcontrol Machine to start reauthentication for the user Authentication is enabledExamples To enable per-port 802.1X authentication on wired Authentication ports, type the following commandWX4400# set dot1x bonded-period 60 success change accepted Syntax set dot1x key-tx enable disableWX4400# set dot1x key-tx enable See Also „ display dot1x on „ clear dot1x bonded-periodon„ clear dot1x max-reqon Set dot1x max-reqTo a supplicant after a failed authentication See Also „ display port status on „ display dot1x onSyntax set dot1x quiet-period seconds Syntax set dot1x reauth enable disable Syntax set dot1x reauth-max number-of-attempts Attempts reauthenticationBefore the supplicant client becomes unauthorized See Also „ display dot1x on „ clear dot1x reauth-maxonSupplicant Set dot1x timeoutOut a request to a Radius authentication server Out an authentication session with a supplicant clientSyntax set dot1x tx-period seconds See Also „ display dot1x on „ clear dot1x tx-periodonWep-rekey-period Wep-rekeySee Also „ display dot1x on „ set dot1x wep-rekeyon Telnet sessions Clear sessionsNetwork VLANs, or session IDUsers WX1200# clear sessions network user Natasha To clear session 9, type the following commandWX4400# clear sessions network mac-addr WX1200# clear sessions network session-idDisplay sessions WX4400 display sessions admin WX4400 display sessions consoleWX4400 display sessions telnet Display sessions telnet client Output See Also „ clear sessions onSyntax display sessions network WX1200# display sessions network mac-addr 00055d7e981a „ Summary display See on „ Verbose display See on„ display sessions network session-id display See on WX1200# display sessions networkWX1200# display sessions network session-id WX1200# display sessions network verboseAdditional display sessions network verbose Output Display sessions network summary OutputTime Display sessions network session-id Output 802.1X protocol on a wired authentication portSee Also „ clear sessions network on Session Management Commands RF Detection Commands Countermeasures Countermeasures mac commandRfdetect countermeasures mac commands Clear rfdetectSyntax clear rfdetect ignore mac-addr IgnoreSyntax display rfdetect countermeasures Display rfdetectMobility Domain DomainSyntax display rfdetect data Radios as well as by third-party access pointsWX1200# display rfdetect data Display rfdetect data Output„ clear rfdetect ignore on Display rfdetect data command on that switchRadios, use the display rfdetect data command Ignore listWX1200# display rfdetect mobility-domain Display rfdetect mobility-domain OutputDisplay neighboring BSSIDs Third-party access points„ mac-addr- Base MAC address of the 3Com radio To display the base MAC address of a 3Com radio, useDisplay rfdetect visible Output WX1200# display rfdetect visible 000b0e000a6aWX1200# display rfdetect Visible ap Radio Set rfdetect Active-scanSet rf detect Set rfdetect countermeasures mac Starts countermeasures against a specific rogueSyntax set rfdetect countermeasures mac mac-addr Syntax set rfdetect ignore mac-addr See Also „ display log buffer on Detected or when they disappearSyntax set rfdetect log enable disable Set rfdetect logFile Management Commands History BackupDefaults All Tape archive tar formatOutput for backup Syntax clear boot configDescribes the fields in the dir output Copy „ reset system onWX4400# copy floorwx tftp//10.1.1.1/floorwx Syntax delete url File or the running configurationDelete Immediately deletes the specified fileWX4400# delete dang/dangdoc success file deleted DirFollowing command displays the files in the old subdirectory Output for dir Display bootBoot „ copy on„ area area Configuration area. You can specify one Display configDescribes the fields in the display boot output Displays the configuration running on the WX switchWX4400# display config area vlan See Also „ load config on„ save config on And, optionally, for any attached MAP access pointsDisplay version Output for display version Describes the fields in the display version outputLoad config Running configuration with the commands in the loaded fileSyntax load config url Following command loads configuration file testconfig1 MkdirCreates a new subdirectory in nonvolatile storage „ dir on „ rmdir on WX4400# reset system Reset systemRestarts an WX switch and reboots the software Syntax reset system forceRestore Key pairs and certificates on the switchOr restoring an archive „ dir on „ mkdir on Save config„ backup on RmdirTestconfig1 Set bootConfiguration-file ConfigurationSyntax set boot partition boot0 boot1 File Management Commands Clear log trace Deletes the log messages stored in the trace bufferSyntax clear log trace Deletes running trace commands and ends trace processes Clear trace„ set log on WX4400# display trace WX switch, or all possible trace optionsDisplay trace Syntax display trace allAuthentication Save traceSet trace Authorization for MAC address AuthorizationAbout user jose’s authentication Traces authorization informationSee Also „ clear trace on „ display trace on Set trace dot1xSyntax set trace sm mac-addr mac-address port port-num Set trace smTrace Commands Syntax clear log buffer server ip-addr Clear logWX4400# clear log buffer success change accepted See Also „ clear log trace onYou can view event messages archived in the buffer Log buffer facility ?WX4400# display log buffer facility AAA „ set log on „ clear log on „ display log config onLog config „ clear log onSyntax display log trace +-/number-of-messages Set log „ Logging state enabled or disabled „ enable Enables messages to the specified target„ trace Sets log parameters for trace files Mbytes Set log traceWX4400# set log trace mbytes 4 success change accepted See Also „ display log config onSystem LOG Commands Boot Prompt Boot Prompt CommandsAutoboot „ FN=filename System image filename Boot„ BT=type Boot type „ DEV=device Location of the system image file„ change on „ display on Syntax change ChangeSyntax create CreateSyntax delete Usage When you type the delete command, the next-lowerExamples To remove the currently active boot profile, type Profiles, see display onSyntax diag Diag„ fver on „ version on Syntax display Defaults None„ change on „ create on „ delete on „ next on Output of display commandFver „ ls on For an individual command„ command-name- Boot prompt command Displays a list of the boot prompt commandsNext Syntax next Defaults NoneCommand at the boot prompt ResetResets a WX switch’s hardware Syntax resetTest „ on Enables the poweron test flag„ OFF Disables the poweron test flag Defaults The poweron test flag is disabled by defaultBoot version Syntax version Defaults NoneDir or fver command Type the following command at the boot prompt„ dir on „ fver on Boot Prompt Commands Purchase ServicesRegister Your ProductDownloads Access SoftwareTroubleshoot OnlineContact Us Need to apply for a user name and passwordLatsupportanc@3com.com Country Telephone NumberIndex Delete 474, 515 diag Dir 475, 516 disable 33 display Index Index Index Index