Wireless LAN Mobility System
3CRWX120695A, 3CRWX440095A
3Com Corporation 350 Campus Drive Marlborough, MA USA
Contents
Clear banner motd Clear history Clear prompt
Set system location
Vlan Commands
131 Ping 132 Set arp 133 Set arp agingtime 134
142 Set ip ssh 143
144
147 Set ntp 148
183
169
Display location policy 185 Display mobility-profile
MAP Access Point Commands by Usage
228
234
241
254 Display dap unconfigured 256 Display radio-profile 257
261 Reset ap dap 264
311
319
326
327
335
Set spantree
337
345
Commands by Usage 393
369
Clear security acl 370 Clear security acl map 371
373
444
435
446
465 Set rf detect countermeasures
466
Set rfdetect ignore 467 Set rfdetect log 468
480
Commands by Usage 491 Clear log trace Clear trace 492
Fver 519 Help 520 Next 521 Reset 522 Test 523
496 Set trace sm 497
517
Version
Register Your Product 527
Conventions
List conventions that are used throughout this guide
„ Wireless LAN Switch and Controller Release Notes
„ Wireless LAN Switch Manager 3WXM Release Notes
Documentation
Comments
Pddtechpubscomments@3com.com
„ Document title
„ Document part number and revision on the title
About this Guide
Overview
Clear interface vlan-idip
Set enablepass
Clear fdb dynamic port port-list vlan vlan-id
Text Entry
Conventions
MAC Address
Notation
Masks
Subnet Masks
Wildcard Masks
User Globs
MAC Address Globs
Gives examples of user globs
User Globs
WX1200# set port enable
Vlan Globs
Matching Order for Globs
„ a single port number. For example
Command-Line
WX1200# reset port
Editing
Operating systems
WX1200# display i Tab
At your access level, type the help command. For example
Using CLI Help
WX1200# display i?
Understanding Command Descriptions
Set ap dap name command has the following complete syntax
WX1200# display ip ?
WX1200# display ip telnet
Understanding Command Descriptions
Using the COMMAND-LINE Interface
Commands by
Disable
To located commands in this chapter based on their use
Syntax disable Defaults None
Enable
Quit
Set enablepass
Access Commands
System Service Commands
To located commands in this chapter based on their use
Banner with an empty banner by typing the following command
Clear banner motd
Clear history
„ display banner motd on
Clear prompt
Clear system
Display banner
Motd
Base-information
Display
Display license
Defaults None Access All
Display system
„ set license on
Shows system information
Describes the fields of display system output
Display system output
Nvram size /SDRAM size percent of total
Help
WX switch
Syntax help
Syntax history
History
See Also „ clear history on
Set confirm
See Also „ clear banner motd on „ display banner motd on
That might have a large impact on the network
Syntax set confirm on off
Set length
Examples To turn off these confirmation messages, type
WX4400# clear vlan red
WX4400# set confirm off
Set license
Installs an upgrade license, for managing more MAPs
See Also „ display license on
Set prompt
Syntax set prompt string
Set system contact Stores a contact name for the WX switch
Set system
Countrycode
Syntax set system contact string
Country Code
Defaults The factory default country code is None
Using any set ap commands to configure a MAP
Ip-address
Mobility Domain
See Also „ clear system on „ display system on
Syntax set system location string
„ set system contact on „ set system name on
Syntax set system name string
System Service Commands
Port Commands
Locate commands in this chapter based on their use
That are using the MAP
Clear dap
Removes a Distributed MAP
„ set dap on
Clear port-group
„ name name Name of the port group
See Also „ set port-groupon „ display port-groupon
Clear port name Removes the name assigned to a port
Clear port
Preference
See Also „ display port status on „ set port name on
Interface for the active link
Network port defaults
Clear port type
Network port
Port
Display port
Counters
Describes the fields in the display port-group output
Display port-groupShows port group information
Output for display port-group
See Also „ clear port-groupon „ set port-groupon
Describes the fields in this display
Output for display port poe
Syntax display port poe port-list
Usage This command applies only to the WX4400
All four ports of a WX4400 switch
„ set port poe on
Specified ports
Output for display port preference
Syntax display port status port-list
Output for display port status
WX1200# display port status
Monitor port
See Also „ clear port type on
„ set port negotiation on
„ set port speed on
Key Controls for Monitor Port Counters Display
Output for monitor port counters
WX4400# monitor port counters
Correct length but contained an invalid
See Also „ display port counters on
Reset port
Set dap
Port Commands
Set dap
Examples The following command disables port
Fol1owing command reenables the port
Administratively disables or reenables a port
Set port
Single logical link
Configured together as a single logical link
With no spaces
Name or number in other CLI commands
Set port name
See Also „ clear port-groupon „ display port-groupon
See Also „ clear port name on „ display port status on
Set port poe
Set port negotiation
Result
Following command enables PoE on ports 4
See Also „ set port type ap on „ set port type wired-authon
WX1200# set port poe 4,5 disable
WX1200# set port poe 4,5 enable
Set port speed
Changes the speed of a port
WX4400# set port preference 2 rj45
Syntax set port speed port-list10 100 1000 auto
Set snmp trap command
Set port trap
Set port type ap
Antenna model, use the following command
„ poe enable disable Power over Ethernet PoE state
Defaults All WX ports are network ports by default
„ 11a 802.11a „ 11b 802.11b „ 11g 802.11g
MAP Access Port Defaults
STP
Wired-auth
Set port type
Wired Authentication Port Details
WX1200# set port type wired-auth 2 success change accepted
See Also „ clear port type on „ set port type ap on
Vlan Commands
Clear fdb
Deletes an entry from the forwarding database FDB
Syntax clear fdb perm static dynamic
WX4400# clear fdb static vlan blue success change accepted
„ display fdb on
Clear vlan
Port from the VLAN, make sure you specify the port number
Following command completely removes Vlan marigold
See Also „ set vlan port on „ display vlan config on
Display fdb
Displays entries in the forwarding database
WX4400# display fdb all
Agingtime
Describes the fields in the display fdb output
See Also „ clear fdb on
Output for display fdb
WX1200# display fdb agingtime
See Also „ set fdb agingtime on
Syntax display fdb count perm static dynamic
Display roaming
Station
See Also „ display roaming vlan on
Describes the fields in the display
Output for display roaming station
Syntax display roaming vlan
Output for display roaming vlan
WX4400# display roaming vlan
See Also „ display vlan config on
Display tunnel
Output for display tunnel
Syntax display tunnel
Display vlan config
Output for display vlan config
Syntax display vlan config vlan-id
WX1200# display vlan config burgundy
Adds a permanent or static entry to the forwarding database
Set fdb
Syntax set fdb perm static
See Also „ clear fdb on „ display fdb on
Set vlan name
See Also „ display fdb agingtime on
Vlan 4094 is reserved for WebAAA
Creates a Vlan and assigns a number and name to it
Set vlan port
Set vlan
Tunnel-affinity
See Also „ display roaming vlan on „ display vlan config on
IP Services Commands
To locate commands in this chapter based on their use
IP Services Commands by Usage
DNS
Removes an IP interface
Clear interface
Syntax clear interface vlan-idip
Access Enabled
History Introduced in MSS Version
See Also „ display ip alias on
WX1200# clear ip dns domain
Clear ip dns server
Clear ip route
„ set ip dns domain on
„ set ip dns server on
„ display ip route on
Clear ip telnet
„ set ip route on
Clear ntp server
Update-interval
Clear ntp
„ set ntp server on „ set ntp update-intervalon
Clear snmp trap
Receiver
See Also „ clear ntp server on „ display ntp on
Clear summertime
Command
Following command
Clear timezone
Examples To clear the system IP address, type the following
Display arp
Display timedate on
Display timezone on
Shows the ARP table
„ set arp agingtime on
„ set arp on
Syntax display interface vlan-id
Shows the IP aliases configured on the wireless LAN switch
Display ip alias
See Also „ set interface on „ set interface status on
Output for display interface
Examples The following command displays the DNS information
Display ip dns
„ clear ip alias on
„ set ip alias on
Display ip https
Shows information about the Https management port
Output for display ip dns
Syntax display ip https
Output for display ip https
WX4400# display ip https
Display ip route
Shows the IP route table
Syntax display ip route destination
WX4400# display ip route
Output of display ip route
FieldDescription
Syntax display ip telnet
Output for display ip telnet
WX4400 display ip telnet
Examples To display NTP information for a WX switch, type
Display ntp
Shows NTP client information
Output for display ntp
„ set ntp server on „ set summertime on „ set timezone on
Configuration
Shows Snmp settings on a wireless LAN switch
Examples To display Snmp settings on a WX switch, type
Display snmp
Output of display snmp configuration
Defaults There is no summertime offset by default
Summertime
Syntax display summertime
WX1200# display summertime
Syntax display timezone
WX1200# display timedate
WX4400# display timezone
Defaults „ count
„ set timedate on „ set timezone on
Set arp
„ traceroute on
Following command disables ARP aging
See Also „ set arp agingtime on
Syntax set arp agingtime seconds
WX1200# set arp agingtime
Set interface
WX1200# set interface mauve ip 10.10.20.10
Syntax set interface vlan-idstatus up down
Aliases as shortcuts in CLI commands
Set ip alias
Set ip dns
See Also „ clear ip alias on „ display ip alias on
Syntax set ip dns domain name
WX1200# set ip dns domain example.com
Syntax set ip dns server ip-addrprimary secondary
Set ip route
WX switch is also disabled
Adds a static route to the IP route table
Set ip route
Syntax set ip snmp server enable disable
See Also „ set ip ssh absolute-timeouton
Set ip ssh
„ clear snmp trap receiver on
Secure Shell SSH management traffic
Absolute-timeout
„ set ip ssh idle-timeouton „ set ip ssh server on
Syntax set ip ssh absolute-timeout minutes
Or idle
Also disabled
Idle-timeout
Set ip ssh server
Set ip telnet
Syntax set ip telnet server enable disable
WX4400# set ip telnet server enable success change accepted
Examples The following command enables the NTP client
Enables or disables the NTP client on a wireless LAN switch
Configures a wireless LAN switch to use an NTP server
Set ntp
RFC 1305, Network Time Protocol Version 3 Specification
Implementation and Analysis
NTP server
From 16 through 1,024 seconds
Community
Set snmp
Public and private
„ enable Enables trap information to be sent
„ disable Disables the sending of trap information
„ all Enables or disables all traps
Sends an Snmp trap message to any network management system
Defaults All traps are disabled by default Access Enabled
Snmp Trap Names
Set snmp trap
See Also „ clear snmp trap receiver on
IP Services Commands
To PDT Pacific Daylight Time, type the following command
Values
Date is within the summertime period
Following
Sets the time of day and date on the wireless LAN switch
Set timedate
„ date mmm dd yyyy System date
„ time hhmmss System time, in hours, minutes, and seconds
WX4400# set timedate date feb 29 2004 time
Set timezone
Time now is Sun Feb 29 2004, 235802 PST
Opens a Telnet client session with a remote device
Telnet
WX1200# set timezone PST
See Also „ clear sessions on „ display sessions on
WX4400# telnet
Defaults
„ dnf Disabled „ no-dns- Disabled „ port
Traceroute
„ queries „ size „ ttl
Error messages for traceroute
WX4400# traceroute server1
„ ping on
This chapter presents AAA commands alphabetically. Use to
Locate commands in this chapter based on their use
AAA Commands by Usage
Display accounting statistics on
Syntax clear accounting admin dot1x user-glob
WX4400# clear accounting dot1x Nin
Clear authentication
Admin
WX4400# clear authentication console Regina
Syntax clear authentication console user-glob
ConsoleConsole
Syntax clear authentication dot1x ssid ssid-namewired
Clear authentication Removes a MAC authentication rule. mac
Syntax clear authentication last-resort ssid ssid-namewired
WX4400# clear authentication last-resort wired
Syntax clear authentication mac ssid ssid-namewired
WX4400# clear authentication mac ssid thatcorp aabbcc
Clear authentication Removes a WebAAA rule. web
Syntax clear authentication web ssid ssid-namewired
Syntax clear location policy rule-number
Clear mac-user
„ display location policy on
„ set location policy on
See Also „ display aaa on „ set mac-usergroup attr on
Group
Clear mac-user attr
„ set mac-user attr on
Clear
Mac-usergroup
Mac-usergroup attr
Mac-user group command
„ clear mac-usergroup attr on
Mobility-profile
Clear user
Clear user attr
See Also „ display aaa on
Clear user group
Clear usergroup
Syntax clear usergroup group-name
„ group-name- Name of an existing user group
WX4400# clear usergroup cardiology success change accepted
Display aaa
Displays all current AAA settings
Time-Of-Day attribute from the group
Describes the fields that can appear in display aaa output
Display aaa Output
User’s password, and no global password is set
Stored in the local database on the WX switch
Display accounting
Statistics
Statistics output
Aaattyattr
Policy
Display location
„ clear location policy on
Set accounting
Admin console
Are sent
Server when the user roams
Accesses the switch using Telnet or Web Manager
Authenticated by
Authenticated by MAC authentication
AAA Commands
Set authentication
AAA Commands
Through the switch’s console
Completing logon
Globs on
Following methods in priority order. MSS applies multiple
For more information, see Usage
Syntax set authentication dot1x ssid ssid-namewired
AAA Commands
Set authentication dot1x
Success change accepted
Syntax set authentication last-resort
AAA Commands
Syntax set authentication mac
AAA Commands
Syntax set authentication web ssid ssid-namewired
AAA Commands
Set location policy
AAA Commands
Set location policy
WX4400# set location policy deny if user eq *.theirfirm.com
Set mac-user
Tempvendora into Vlan kiosk1
See Also „ clear mac-useron „ display aaa on
Authentication Attributes for Local Users
Authentication Attributes for Local Users
Filter-id outboundacl.out
YY/MM/DD-HHMM
Time-of-day
WX4400# set mac-user 010203040506 attr filter-id acl-03.in
See Also „ clear mac-user attr on „ display aaa on
Syntax set mac-usergroup
See Also „ clear mac-usergroup attr on „ display aaa on
Syntax set mobility-profile name name port none all
AAA Commands
Syntax set mobility-profile mode enable disable
„ set user attr on „ set usergroup on
29Jan04
Set user
See Also „ clear user on „ display aaa on
Orange
Set user attr
See Also „ clear user attr on „ display aaa on
Set usergroup
Set user group
„ clear user group on
Syntax set web-aaa enable disable
To add a user to a group, user the command set user group
Set web-aaa
Examples To disable WebAAA, type the following command
WX4400# set web-aaa disable success change accepted
To locate commands in this chapter based on their use
Mobility Domain Commands by Usage
Mobility-domain
Member
Display mobility-domain config
Displays the configuration of the Mobility Domain
Status
See Also „ set mobility-domain member on
Display mobility-domain Output
WX4400# display mobility-domain status
Mode member
„ display mobility-domain config on
Set
Seed-ip
Set mobility-domain mode seed domain-name
Syntax set mobility-domain mode seed domain-name
Domain name is Pleasanton
Mobility Domain Commands
Commands
Managed Access Point Commands
Map Access Point Commands by Usage
Clear ap dap
Radio
WX1200# clear ap 3 radio
Syntax clear radio-profile name parameter
„ name Service profile name
Syntax clear service-profile name
See Also „ clear radio-profileon „ set radio-profile mode on
WX1200# display ap config
Output for display ap config
WX4400# display dap config
Does not belong to any load balancing groups
An associated client
Displays MAP access point and radio statistics counters
MAP access point on port
Display ap dap
Radio 1 Shows statistics counters for radio
Output for display ap counters
Tkip Pkt Replays
Syntax display ap dap etherstats port-listdap-num
See Also „ display sessions network on
WX4400# display dap etherstats
Output of display ap etherstats
TxMaxColl
„ name Name of an MAP group or Distributed MAP group
Syntax
Syntax display ap status port-listall radio 1
WX4400# display dap status
WX1200# display ap status
Output for display ap status
Decide whether to change channel or power settings
Output for display ap status
Output for display auto-tune attributes
See Also „ display auto-tune neighbors on
WX1200# display auto-tune attributes ap 2 radio
Display auto-tune
Neighbors
Output for display auto-tune neighbors
Display auto-tune Neighbors ap 2 radio
Display dap
Connection
„ display ap dap config on
„ display dap global on „ display dap unconfigured on
Output of display dap connection
Dap connection serial-id M9DE48B6EAD00
Output for display dap global
WX4400# display dap global
Unconfigured
„ display ap dap config on
But that are not configured on any WX switches
Longer appears in the command’s output
Describes the fields in this display
Displays radio profile information
WX4400# display radio-profile default
Output for display radio-profile
Setting and tuning channels
Ssid
Service-profile
Displays service profile information
„ name Displays information about the named service profile
„ ? Displays a list of service profiles
Username
„ Tkip countermeasures time Indicates the amount
WX1200# reset ap
Reset ap dap
Syntax set ap port-listdap dap-numbias high low
See Also „ display ap dap config on
WX4400# set dap 1 bias low success change accepted
Syntax set ap port-listdap dap-numblink enable disable
WX1200# set ap 3-4 blink enable success change accepted
Set ap dap name Changes an MAP name
„ display ap dap group on
WX1200# set ap 4 group none success change accepted
WX1200# set ap 1 name techpubs success change accepted
„ antennatype ANT1060 ANT1120 ANT1180 internal
Set ap dap radio antennatype
„ antennatype ANT5060 ANT5120 ANT5180 internal
Set ap dap radio auto-tune max-power
Set ap dap radio auto-tune max- retransmissions
Managed Access Point Commands
Sets an MAP radio’s channel
Set ap dap radio channel
Syntax set ap port-listdap dap-numradio 1
Set ap dap radio min-client-rate
WX1200# set ap 5 radio 1 channel 36 success change accepted
Set ap dap radio min-client-rate
Enables or disables a radio on an MAP access point
Set ap dap radio mode
Following command enables radio 2 on ports 1 through
Set ap dap radio radio-profile
Set ap dap radio tx-power
Sets an MAP radio’s transmit power
Upgrade-firmware
Set ap dap
Set radio-profile
11g-only
Set radio-profile auto-tune channel-config
Set radio-profile auto-tune channel-holddown
Syntax set radio-profile name auto-tune channel-holddown
Set radio-profile auto-tune channel-interval
Syntax set radio-profile name auto-tune channel-interval
Syntax set radio-profile name auto-tune power-backoff-timer
Set radio-profile auto-tune power-backoff- timer
WX4400# set radio-profile rp2 auto-tune power-backoff-timer
Set radio-profile auto-tune power-config
Set radio-profile auto-tune power-interval
Service set identifier Ssid
Beacon-interval
Specify from 25 ms to 8191 ms
Radio profile rp1 to 200 ms
Syntax set radio-profile name frag-threshold threshold
Syntax set radio-profile name long-retry threshold
Syntax set radio-profile name max-rx-lifetime time
Max-tx-lifetime
Mode
Defaults for Radio Profile Parameters
Parameter Default Value
WX4400# set radio-profile rp1 mode enable
WX4400# set radio-profile rp1 success change accepted
Syntax set radio-profile name
Syntax set radio-profile name rts-threshold threshold
Defaults for Service Profile Parameters
Syntax set radio-profile name service-profile name
297
Defaults for Service Profile Parameters
Syntax set radio-profile name short-retry threshold
Syntax set service-profile Name auth-dot1x enable disable
WPA IE
Set service-profile auth-fallthru
Syntax set service-profile name auth-psk enable disable
Syntax set service-profile name beaconed enable disable
Set service-profile
Cipher-ccmp
Cipher-tkip
See Also „ set service-profilecipher-ccmpon
Use the set service-profile wep commands
Cipher-wep104
„ enable Enables 40-bit WEP encryption for WPA clients
„ disable Disables 40-bit WEP encryption for WPA clients
Defaults 40-bit WEP encryption is disabled by default
Cipher-wep104 command
Syntax set service-profile name psk-phrase passphrase
Syntax set service-profile name psk-raw hex
Syntax set service-profile name rsn-ie enable disable
Set service-profile auth-psk command
Syntax set service-profile name ssid-name ssid-name
See Also „ set service-profilessid-typeon
See Also „ set service-profilessid-nameon
Syntax set service-profile name tkip-mc-time wait-time
Syntax set service-profile name web-aaa-form url
Ssid managed by the service profile
Web-aaa-form
„ copy on „ dir on
Set service-profile wep active-multicast- index
„ mkdir on
Set service-profile wep active-unicast- index
Syntax set service-profile name wep active-unicast-index num
Wep key-index
Syntax set service-profile name wpa-ie enable disable
Table to locate commands in this chapter based on their use
STP Commands by
STP Commands by Usage
STP root bridge in all VLANs on a WX switch
Clear spantree
Portcost
Syntax clear spantree portcost port-list
Portpri
Portvlancost
„ clear spantree portvlanpri on
„ set spantree portpri on
Portvlanpri
„ clear spantree portcost on
„ clear spantree portpri on
See Also „ display spantree statistics on
Spantree vlan default
Syntax display spantree
Output for display spantree
Root
Or disabled
Display spantree
Backbonefast
„ display spantree blockedports on
WX switch with backbone fast convergence enabled
Blockedports
„ set spantree backbonefast on
One or all of its VLANs
Portfast
For one or more network ports
See Also „ set spantree portfast on
Output for display spantree portfast
Port’s VLANs
„ port-list- List of ports
Syntax display spantree portvlancost port-list
Syntax display spantree statistics
WX4400# display spantree statistics
Topology change Timer value Hold timer
Output for display spantree statistics
Vlan Vlan ID
Configpending
Switch is the root or is attempting to become the root
See Also „ clear spantree statistics on
Syntax display spantree uplinkfast vlan vlan-id
Set spantree
„ set spantree uplinkfast on
Examples The following command enables STP on all VLANs
Configured on a WX switch
Following command disables STP on Vlan burgundy
An indirect link
Fwddelay
„ display spantree backbonefast on
Issues a topology change message
Maxage
VLANs to 4 seconds
„ all Changes the maximum age on all VLANs
Type. lists the defaults for STP port path cost
Snmp Port Path Cost Defaults
Path to the STP root bridge
65,535. STP selects lower-cost paths over higher-cost paths
Portvlancost command
See Also „ display spantree portfast on
Syntax set spantree portpri port-listpriority value
Bridge for a specific Vlan on a wireless LAN switch
„ all Changes the cost on all VLANs
Type. See on
To 20 in Vlan mauve
Priority
Uplinkfast
32,768
Pink to
Primary link fails
See Also „ display spantree uplinkfast on
Igmp Snooping Commands
Igmp Commands by Usage
Display igmp
Clear igmp statistics
See Also display igmp statistics on
TTL
Output for display igmp
TTL
Syntax display igmp mrouter vlan vlan-id
Mrouter
WX1200# display igmp Mrouter vlan orange
Only one querier
Defaults None Access Enabled
Syntax display igmp querier vlan vlan-id
WX1200# display igmp querier vlan default
Output for display igmp mrouter
WX1200# display igmp querier vlan orange
WX1200# display igmp querier vlan red
Receiver-table
„ set igmp querier on
See Also „ set igmp receiver on
Shows Igmp statistics
VLAN, MSS displays Igmp statistics for all VLANs
WX1200# display igmp receiver-table group 237.255.255.0/24
WX1200# display igmp statistics vlan orange
Output of display igmp statistics
From the multicast routers in the subnet
Wireless LAN switch
See Also „ set igmp rv on
VLANs on a wireless LAN switch
VLAN, the timer change applies to all VLANs
Set igmp lmqi
From 1 through 65,535
Enables or disables multicast router solicitation by a WX
Syntax set igmp mrsol enable disable vlan vlan-id
Set igmp mrsol
See Also „ display igmp statistics on
See Also „ set igmp mrsol mrsi on
See Also „ set igmp mrsol on
Syntax set igmp mrsol mrsi seconds vlan vlan-id
WX1200# set igmp mrsol mrsi 60 success change accepted
All VLANs on a WX
Set igmp oqi
Syntax set igmp oqi seconds vlan vlan-id
Proxy-report
Set igmp
Set igmp qi
Set igmp qri
VLANs on a WX
Group. You can specify a value from 1 through 65,535
WX1200# set igmp qi 100 vlan orange success change accepted
Syntax set igmp querier enable disable vlan vlan-id
WX1200# set igmp qri 50 vlan orange success change accepted
Syntax set igmp receiver port port-listenable disable
See Also „ display igmp querier on
Defaults The default robustness value for all VLANs is
Set igmp rv
Occurs on the network
VLAN, MSS changes the robustness value for all VLANs
Security ACL Commands
Security ACL
Syntax clear security acl acl-name all editbuffer-index
Clear security acl map
Syntax clear security acl map acl-nameall vlan vlan-id
WX4400# clear security acl map all success change accepted
Syntax commit security acl acl-nameall
WX4400# display security acl
WX4400# commit security acl all
Syntax display security acl editbuffer
WX4400# display security acl editbuffer
Syntax display security acl hits
WX4400# display security acl hits
See Also „ hit-sample-rateon „ set security acl on
Syntax display security acl info acl-nameall editbuffer
Display security acl
Map
Security ACL is assigned
Syntax display security acl map acl-name
Resource-usage
ACL acl111 is mapped
Support for your Product on
WX4400# display security acl map acl111
WX4400# display security acl resource-usage
Output of display security acl resource-usage
Output of display security acl resource-usage
Packets filtered by the security ACL or hits
Hit-sample-rate
Syntax hit-sample-rate seconds
Syntax rollback security acl acl-nameall
Set security acl
Protocol, or IP, ICMP, TCP, or UDP packet information
By TCP packets
By Icmp packets
By UDP packets
„ ip „ tcp „ udp „ icmp
Set security acl
Security ACL Commands
WX4400# commit security acl all configuration accepted
WX4400# set security acl ip acl123 deny 192.168.2.11
Defaults None
Set security acl map
Security ACL Commands
To locate commands in this chapter based on their use
Cryptography Commands by Usage
Syntax crypto ca-certificate admin eap webaaa
Syntax crypto certificate admin eap webaaa
See Also „ display crypto ca-certificateon
Examples The following command installs a certificate
WX4400# crypto generate key admin 1024 key pair generated
Syntax crypto generate key admin eap ssh webaaa 512 1024
See Also display crypto key ssh on
Syntax crypto generate request admin eap webaaa
WX4400# crypto generate request admin
Email Address admin@example.com
Syntax crypto generate self-signed admin eap webaaa
See Also „ crypto certificate on „ crypto generate key on
WX4400# crypto generate self-signed admin
Crypto otp
Crypto pkcs12
„ crypto pkcs12 on
See Also „ crypto otp on
Display crypto
Ca-certificate
Pkcs #7 certificate
Display crypto ca-certificate Output
On the WX switch
Syntax display crypto certificate admin eap webaaa
Certificate
Describes the fields of the display
See Also crypto generate key on
Syntax display crypto key ssh
Cryptography Commands
Locate commands in this chapter based on their uses
Radius Commands by Usage
Clear radius
See Also „ display aaa on „ set radius client system-ipon
WX4400# clear radius timeout success change accepted
Syntax clear radius client system-ip
See Also „ display aaa on „ set radius server on
Syntax clear radius server server-name
WX4400# clear radius server rs42 success change accepted
Syntax clear server group group-nameload-balance
Set radius
„ set server group on
System-ip
Set radius client
„ clear radius server on
WX4400# set radius client system-ip success change accepted
Radius and Server Group Commands
Syntax set server group group-namemembers server-name1
Load-balance group
„ group-name- Server group name of up to 32 characters
Set server group load-balance
Radius and Server Group Commands
On the switch
Commands on
802.1X Commands by Usage
Performance
Which disables the feature
Examples To reset the Bonded period to its default, type
Clear dot1x
Bonded-period
See Also „ display dot1x on „ set dot1x bonded-periodon
Port-control
„ set dot1x max-reqon
„ set dot1x port-controlon
Quiet-period
See Also „ display dot1x on „ set dot1x quiet-periodon
Reauth-max
Reauth-period
„ set dot1x reauth-maxon
See Also „ display dot1x on „ set dot1x reauth-periodon
Defaults The default is 30 seconds
Authentication server, type the following command
Auth-server
Before the WX times out a request to a Radius server
„ set dot1x timeout supplicant on
Tx-period
Display dot1x
„ set dot1x tx-periodon
WX1200# display dot1x config
WX4400# display dot1x clients
Explains the counters in the display dot1x stats output
Type the following command to display 802.1X statistics
WX4400# display dot1x stats
Set dot1x
Port-control command
Authcontrol
Authentication is enabled
Examples To enable per-port 802.1X authentication on wired
Authentication ports, type the following command
Machine to start reauthentication for the user
Syntax set dot1x key-tx enable disable
WX4400# set dot1x key-tx enable
See Also „ display dot1x on „ clear dot1x bonded-periodon
WX4400# set dot1x bonded-period 60 success change accepted
Set dot1x max-req
„ clear dot1x max-reqon
See Also „ display port status on „ display dot1x on
To a supplicant after a failed authentication
Syntax set dot1x quiet-period seconds
Syntax set dot1x reauth enable disable
Attempts reauthentication
Before the supplicant client becomes unauthorized
See Also „ display dot1x on „ clear dot1x reauth-maxon
Syntax set dot1x reauth-max number-of-attempts
Set dot1x timeout
Out a request to a Radius authentication server
Out an authentication session with a supplicant client
Supplicant
See Also „ display dot1x on „ clear dot1x tx-periodon
Syntax set dot1x tx-period seconds
Wep-rekey
Wep-rekey-period
See Also „ display dot1x on „ set dot1x wep-rekeyon
Clear sessions
Telnet sessions
VLANs, or session ID
Network
Users
To clear session 9, type the following command
WX4400# clear sessions network mac-addr
WX1200# clear sessions network session-id
WX1200# clear sessions network user Natasha
Display sessions
WX4400 display sessions console
WX4400 display sessions admin
WX4400 display sessions telnet
See Also „ clear sessions on
Display sessions telnet client Output
Syntax display sessions network
„ Summary display See on „ Verbose display See on
„ display sessions network session-id display See on
WX1200# display sessions network
WX1200# display sessions network mac-addr 00055d7e981a
WX1200# display sessions network verbose
WX1200# display sessions network session-id
Display sessions network summary Output
Additional display sessions network verbose Output
Time
802.1X protocol on a wired authentication port
Display sessions network session-id Output
See Also „ clear sessions network on
Session Management Commands
RF Detection Commands
Countermeasures mac command
Rfdetect countermeasures mac commands
Clear rfdetect
Countermeasures
Ignore
Syntax clear rfdetect ignore mac-addr
Display rfdetect
Mobility Domain
Domain
Syntax display rfdetect countermeasures
Radios as well as by third-party access points
Syntax display rfdetect data
Display rfdetect data Output
WX1200# display rfdetect data
Display rfdetect data command on that switch
Radios, use the display rfdetect data command
Ignore list
„ clear rfdetect ignore on
Display rfdetect mobility-domain Output
WX1200# display rfdetect mobility-domain
Third-party access points
„ mac-addr- Base MAC address of the 3Com radio
To display the base MAC address of a 3Com radio, use
Display neighboring BSSIDs
WX1200# display rfdetect visible 000b0e000a6a
Display rfdetect visible Output
WX1200# display rfdetect Visible ap Radio
Active-scan
Set rfdetect
Set rf detect
Starts countermeasures against a specific rogue
Set rfdetect countermeasures mac
Syntax set rfdetect countermeasures mac mac-addr
Syntax set rfdetect ignore mac-addr
Detected or when they disappear
Syntax set rfdetect log enable disable
Set rfdetect log
See Also „ display log buffer on
File Management Commands
Backup
Defaults All
Tape archive tar format
History
Syntax clear boot config
Output for backup
Describes the fields in the dir output
„ reset system on
Copy
WX4400# copy floorwx tftp//10.1.1.1/floorwx
File or the running configuration
Delete
Immediately deletes the specified file
Syntax delete url
Dir
WX4400# delete dang/dangdoc success file deleted
Following command displays the files in the old subdirectory
Display boot
Boot
„ copy on
Output for dir
Display config
Describes the fields in the display boot output
Displays the configuration running on the WX switch
„ area area Configuration area. You can specify one
See Also „ load config on
WX4400# display config area vlan
And, optionally, for any attached MAP access points
„ save config on
Display version
Describes the fields in the display version output
Output for display version
Running configuration with the commands in the loaded file
Load config
Syntax load config url
Mkdir
Following command loads configuration file testconfig1
Creates a new subdirectory in nonvolatile storage
„ dir on „ rmdir on
Reset system
Restarts an WX switch and reboots the software
Syntax reset system force
WX4400# reset system
Key pairs and certificates on the switch
Restore
Or restoring an archive
Save config
„ backup on
Rmdir
„ dir on „ mkdir on
Set boot
Configuration-file
Configuration
Testconfig1
Syntax set boot partition boot0 boot1
File Management Commands
Deletes the log messages stored in the trace buffer
Clear log trace
Syntax clear log trace
Clear trace
Deletes running trace commands and ends trace processes
„ set log on
WX switch, or all possible trace options
Display trace
Syntax display trace all
WX4400# display trace
Save trace
Authentication
Set trace
Authorization
About user jose’s authentication
Traces authorization information
Authorization for MAC address
Set trace dot1x
See Also „ clear trace on „ display trace on
Set trace sm
Syntax set trace sm mac-addr mac-address port port-num
Trace Commands
Clear log
Syntax clear log buffer server ip-addr
See Also „ clear log trace on
WX4400# clear log buffer success change accepted
Log buffer facility ?
You can view event messages archived in the buffer
WX4400# display log buffer facility AAA
„ display log config on
Log config
„ clear log on
„ set log on „ clear log on
Syntax display log trace +-/number-of-messages
Set log
„ enable Enables messages to the specified target
„ Logging state enabled or disabled
„ trace Sets log parameters for trace files
Set log trace
Mbytes
See Also „ display log config on
WX4400# set log trace mbytes 4 success change accepted
System LOG Commands
Boot Prompt Commands
Boot Prompt
Autoboot
Boot
„ BT=type Boot type
„ DEV=device Location of the system image file
„ FN=filename System image filename
„ change on „ display on
Change
Syntax change
Create
Syntax create
Usage When you type the delete command, the next-lower
Examples To remove the currently active boot profile, type
Profiles, see display on
Syntax delete
Diag
Syntax diag
Syntax display Defaults None
„ fver on „ version on
Output of display command
„ change on „ create on „ delete on „ next on
Fver
For an individual command
„ command-name- Boot prompt command
Displays a list of the boot prompt commands
„ ls on
Syntax next Defaults None
Next
Reset
Resets a WX switch’s hardware
Syntax reset
Command at the boot prompt
„ on Enables the poweron test flag
„ OFF Disables the poweron test flag
Defaults The poweron test flag is disabled by default
Test
Syntax version Defaults None
Dir or fver command
Type the following command at the boot prompt
Boot version
„ dir on „ fver on
Boot Prompt Commands
Services
Register Your
Product
Purchase
Access Software
Troubleshoot
Online
Downloads
Need to apply for a user name and password
Contact Us
Country Telephone Number
Latsupportanc@3com.com
Index
Delete 474, 515 diag Dir 475, 516 disable 33 display
Index
Index
Index
Index
