Wireless LAN Mobility System
3Com Corporation 350 Campus Drive Marlborough, MA USA
United States Government Legend
Contents
Configuring AAA for Administrative and Local Access
Managing User Passwords
Configuring and Managing Ports and Vlans
Configuring and Managing IP Interfaces and Services
Displaying Password Information
108
Configuring Snmp
Configuring and Managing Mobility Domain Roaming
Configuring Network Domains
Configuring MAP Access Points
MAP Overview Country of Operation 179
Configuring RF Load Balancing for Maps
RF Load Balancing Overview 267
268
Configuring Wlan Mesh Services
Configuring User Encryption
Configuring RF AUTO-TUNING
Configuring Maps to be Aeroscout Listeners
Configuring Quality of Service
Configuring and Managing Spanning Tree Protocol
Configuring and Managing Igmp Snooping
Configuring and Managing Security Acls
380
Why Use Keys and Certificates? 413
Managing Keys and Certificates
414
416
Configuring AAA for Network Users
475 Using an ACL Other Than portalacl
460
479
494 Clearing a Security ACL from a User or Group 495
496
503
514
Configuring Communication with Radius
Managing 802.1X on the WX Switch
Configuring Soda Endpoint Security for a WX Switch
Managing Sessions
Rogue Detection and Countermeasures
Troubleshooting a WX Switch
631 Using the Trace Command
Managing System Files
Enabling and Logging Into WEB View
Glossary Index Command Index
Supported Radius Attributes
Traffic Ports Used by MSS
Obtaining Support for Your 3COM Products
Conventions
List conventions that are used throughout this guide
Icon Description
Including new features and bug fixes
3WXM for advanced configuration and management
Documentation
This manual uses the following text and syntax conventions
Comments
Pddtechpubscomments@3com.com
About this Guide
To configure and manage the switch and its attached MAPs
Overwrite a parameter with another set command. Use display
Overview
Network operations
Text Entry
Conventions
Case-insensitive
Alphanumeric characters, except for tabs and spaces, and is
MAC Address Notation
IP Address and Mask Notation
User Globs
User Globs
User Glob Users Designated
MAC Address Globs
Vlan Globs
WX1200# set port enable
WX1200# reset port
Matching Order for Globs
WX1200# display port poe 1,2,4,6
Command-Line
Editing
Operating systems
CLI Keyboard Shortcuts
Using CLI Help
Commands that begin with those characters. For example
At your access level, type the following command
Wildcard Characters
WX1200# display i?
WX1200# display ip ?
WX1200# display ip telnet
Understanding Command Descriptions
Set ap name command has the following complete syntax
Set ap
Set ap apnumber auto security
Switches
„ CLI quickstart command
Methods
„ Web Quick Start WXR100, WX1200, and WX2200
WX Setup Methods
How a WX Switch
Gets its Configuration
WX2200 Only
Accessing the Web To access the Web Quick Start
Quick Start
WX Setup Methods
Web Quick Start WXR100, WX1200 and WX2200 Only
CLI quickstart
Set enablepass command
WX Setup Methods
Single-Switch Deployment
Verify the configuration changes
Remote WX
Select File Switch Network Plan
To open the network plan
Start 3WXM by doing one of the following
„ On Linux systems, change directories to
3Com Mobility System Software MSS supports authentication
Here is an overview of configuration topics
Operation
Configuring AAA for Administrative and Local Access
Building
Administrative
Access
Before You Start
About
Configuration via
Administrator
First-Time
Console
Password
Setting the WX Enable Password for the First Time
WX1200# set enablepass
WX1200# save config
3WXM Enable Password
WX1200# set authentication console * local
WX1200# set authentication console * none
Configuring AAA for Administrative and Local Access
Configuring
Configuring AAA for Administrative and Local Access
Configday. To do this, type the following command
Configuration, all changes are lost
Displaying the AAA
Saving
Administrative AAA
Scenarios
Radius
Administrative AAA Configuration Scenarios
Success configuration saved
Passwords, and how to display password information
Restrictions apply to user passwords
Configuring Passwords
Set user username password encrypted password
WX# set user Jose password spRin9
Clear user username
Setting the Maximum Number of Login Attempts
Set authentication password-restrict enable disable
WX# set authentication password-restrict enable
Set authentication max-attempts number
Password Length
Configuring Password Expiration Time
Clear user username lockout
WX# clear user Nin lockout
WX# display aaa
Configuring
Managing Ports
Port Type Parameter MAP Access Wired Authentication Network
Vlan
Setting a Port for a Directly Connected MAP
Maximum MAPs Supported Per Switch
Configuring a MAP Connection
Setting a Port for a Wired Authentication User
Switch Model Valid Range
WX1200# set port type wired-auth 7 success change accepted
Valid dap-num Values
Clearing a Port
Name Setting a Port Name
Clearing a Distributed MAP
Removing a Port Name
Set port media-type port-listrj45
Clear port media-type port-list
Display port media-type port-list
Parameters
10/100 Ports-Autonegotiation and Port Speed
Set port speed port-list10 100 auto
Disabling or Reenabling Power over Ethernet
Gigabit Ports Autonegotiation and Flow Control
Disabling or Reenabling a Port
Resetting a Port
To reset a port, use the following command
Displaying Port Configuration and Status
To display port statistics, use the following command
Displaying PoE State
Displaying Port Statistics
Clearing Statistics Counters
Counters begin incrementing again, starting from
Monitoring Port Statistics
Clear port counters
Use the keys listed in to control the monitor display
Key Controls for Monitor Port Counters Display
Key Effect on monitor display
WX1200# monitor port counters
Configuring a Port Group
To configure a port group, use the following command
Groups can participate in a port group
Load Sharing
To remove a port group, use the following command
WX1200# display vlan config
Removing a Port Group
Clear port-group name name
Displaying Port Group Information
Interoperating with Cisco Systems EtherChannel
Display port-group name group-name
WX1200# display port-group name server2
VLANs, IP Subnets, and IP Addressing
Users and VLANs
Vlan Names
Roaming and VLANs
Traffic Forwarding
802.1Q Tagging
Tunnel Affinity
To create a VLAN, use the following command
Creating a Vlan
Set vlan vlan-numname name
To add a port to a VLAN, use the following command
Adding Ports to a Vlan
You can specify a tag value from 1 through
WX1200# set vlan 2 name red
To completely remove Vlan ecru, type the following command
To change the tunneling affinity, use the following command
Specify a value from 1 through 10. The default is
Removing an Entire Vlan or a Vlan Port
Display security l2-restrict vlan vlan-idall
Display vlan config vlan-id
WX1200# display vlan config burgundy
Security l2-restrict
Clear security l2-restrict counters vlan vlan-idall
Forwarding
Database
Port associated with the MAC address
Displaying
Information Displaying the Size of the Forwarding Database
Displaying Forwarding Database Entries
Adding an Entry to the Forwarding Database
Removing Entries from the Forwarding Database
WX1200# display fdb
WX1200# clear fdb dynamic success change accepted
Displaying the Aging Timeout Period
Changing the Aging Timeout Period
Configuration change. Type the following commands
Port and Vlan
Scenario
WX1200# set port type ap 2-4 model ap2750 poe enable
Port status
WX1200# display port poe
Save the configuration. Type the following command
Set port type wired-auth 5,6
WX1200# set vlan default port
Display Port status
MTU Support
Configuring Managing IP Interfaces
Statically Configuring an IP Interface
To add an IP interface to a VLAN, use the following command
Adding an IP Interface
Configuring and Managing IP Interfaces
Set interface vlan-idip dhcp-client enable disable
WX1200# set interface corpvlan ip dhcp-client enable
WX1200# display interface
To remove an IP interface, use the following command
Disabling or Reenabling an IP Interface
Displaying IP
Configuring the System IP Address
To display the system IP address, use the following command
To clear the system IP address, use the following command
Configuring and Managing IP Routes
Display ip route destination
WX1200# display ip route
WX1200# display ip route
To remove a static route, use the following command
Managing Management Services
Login Timeouts
Set ip ssh server enable disable
Managing SSH
You can verify the key using the following command
For example
Adding an SSH User
Changing the SSH Service Port Number
Use the following commands to manage SSH server sessions
These commands display and clear SSH server sessions
Managing SSH Server Sessions
Telnet Login Timers
Set ip telnet server enable disable
Enabling Telnet
Adding a Telnet User
Changing the Telnet Service Port Number
Resetting the Telnet Service Port Number to Its Default
Use the following commands to manage Telnet server sessions
Displaying Telnet Status
Managing Https Enabling Https
Displaying Https Information
Set system idle-timeout seconds
Clear system idle-timeout
Sessions
To specify a Motd banner, use the following command
Following command sets the Motd banner on the WX
Prompting the User to Acknowledge the Motd Banner
To add a DNS server, use the following command
To remove a DNS server, use the following command
Adding a DNS Server
Removing a DNS Server
Adding the Default Domain Name
To add the default domain name, use the following command
Removing the Default Domain Name
Specify a domain name of up to 64 alphanumeric characters
Here is an example
Set ip alias name ip-addr
Clear ip alias name
Display ip alias name
Managing Time
Parameters
Daylight savings time or similar summertime period
To display the time zone, use the following command
To clear the time zone, use the following command
Displaying the Time Zone
Clearing the Time Zone
To display the summertime period, use the following command
To clear the summertime period, use the following command
Displaying the Summertime Period
Clearing the Summertime Period
Statically Configuring System Time Date
Set timedate date mmm dd yyyy time hhmmss
WX1200# set timedate date feb 29 2004 time 235800
Display timedate
NTP client is disabled by default
To remove an NTP server, use the following command
Resetting the Update Interval to Default
To display NTP information, use the following command
Displaying NTP Information
Managing the ARP
IP address to the ARP table
Permanent entries to the ARP table
Entries
Set arp permanent static dynamic ip-addrmac-addr
Set arp agingtime seconds
WX1200# set arp agingtime
Pinging Another
Device
Logging In to a
Remote Device
Tracing a Route
WX1200# traceroute server1
IP Interfaces
Time and date parameters
WX1200# set ip dns enable
WX1200# Set ip Dns Server
Ip dns
Sun Feb 29 2004, 235902 PST
Configuring and Managing IP Interfaces and Services
„ SNMPv3-SNMPv3 adds authentication and encryption options
USM users, with individually configurable access levels
Authentication options, and encryption options
All Snmp versions are disabled by default
To enable an Snmp protocol, use the following command
Configuring Community Strings SNMPv1 SNMPv2c Only
Set snmp protocol v1 v2c usm all enable disable
Set system location string set system contact string
To create a USM user for SNMPv3, use the following command
To clear a USM user, use the following command
Clear snmp community name comm-string
Clear snmp usm usm-username
Configuring Snmp
Command Examples
To clear a notification profile, use the following command
WX1200# set snmp security encrypted success change accepted
Clear snmp notify profile profile-name
ClientRoamingTraps-Generated when a client roams
Configuring Snmp
Command Examples
Configuring Snmp
To clear a notification target, use the following command
Security unsecured authenticated encrypted
Clear snmp notify target target-num
Command Examples
To enable the MSS Snmp service, use the following command
Following command enables the Snmp service
To display USM settings, use the following command
Information
To display notification profiles, use the following command
Display snmp notify profile
Display snmp notify target
Display snmp counters
Mobility Domain Roaming
Configuring a
Configuring the System IP Address on
Set mobility-domain mode seed domain-name mob-domain-name
Mobility Domain
Set mobility-domain mode member seed-ip ip-addr
Set mobility-domain member ip-addr
On the other member switches in the Mobility Domain
On the primary seed
On the secondary seed
Domain Status display mobility-domain command. For example
Displaying Mobility Domain Configuration
Switch
WX-WX Security
Monitoring
VLANs and Tunnels
A Mobility
Domain
WX1200# display roaming vlan
WX1200# display tunnel
Understanding Sessions Roaming Users
WX1200 display sessions network verbose
Vlan
WX1200# set mobility-domain member seed-ip
Mobility-domain
Vlan-wep 192.168.12.7 192.168.15.5
Domains
Network Domain
How a user connects to a remote Vlan in a Network Domain
Configuring a WX Switch’s affinity for a Network Domain seed
Set network-domain mode seed domain-name net-domain-name
Network Domain
Set network-domain mode member seed-ip ip-addraffinity num
Set network-domain peer ip-addr
Set network-domain mode member seed-ip ip-addraffinity num
WX4400# display network-domain
WX Switch following command
Clear network-domain mode seed member
Clear network-domain
Clear network-domain seed-ip ip-addr
Configuring Network Domains
WX1200# display network-domain
Upseed Upmember 30.30.30.1
Through radio signals
„ Two direct connections to a single WX or two WX switches
MAP Overview
Combinations of multiple connections
Example 3Com Network
MAP Overview
Distributed MAP Network Requirements
Distributed MAPs and STP
No configuration is required on the WX
Distributed MAPs and Dhcp Option
MAP Parameters
Resiliency and Dual-Homing Options for MAPs
Dual-Homed Configuration Examples
Dual-Homed Direct Connections to a Single WX
Dual-Homed Direct and Distributed Connections to WX Switches
Network Backbone
WX switch
Establishing Connectivity on the Network
How a Distributed MAP Obtains an IP Address through Dhcp
Static IP Address Configuration for Distributed MAPs
DNS server replies with the system IP address of a WX switch
Configuring MAP Access Points
MAP Overview
Configuring MAP Access Points
MAP Boot Examples
MAP Booting over Layer 2 Network
MAP Overview
MAP Booting over Layer 3 Network
MAP sends Dhcp Discover message from the MAP’s port
MAP sends a unicast Find WX message to WX1
Dual-Homed MAP Booting
MAP Booting with a Static IP Address
MAP sends a Dhcp Discover message from the MAP’s port
Defaults for Service Profile Parameters
Auth-dot1x Enable
Auth-psk Disable
Beacon Enable
Cipher-ccmp Disable
Cipher-tkip Enable
No-broadcast Disable
Proxy-arp Disable
Set radio-profile auth-psk command
Soda Disable
User-idle-timeout 180
12.0,24.0
Timeout
Web-portal
Web-portal-form
Web-portal-session
Public and Private SSIDs
Each radio can support the following types of SSIDs
MAC Address Allocations on MAPs
Model Address Allocation
Radios AP2750
SSIDs
AP7250
AP8250
Defaults for Radio Profile Parameters
Not configured
Encryption
Beacon-interval 100
Parameter Default Value Frag-threshold 2346
Rfid-mode Disable
Service-profile
Max-rx-lifetime 2000
RF Auto-Tuning
Default Radio Profile
Lists the defaults for these parameters
Radio-Specific Parameters
Parameter Default Value Description Antennatype
Max-power
Mode Disable
ANT-5360-OUT
To specify the country, use the following command
You specify the country of operation
Set system countrycode code
Country Codes
Country Codes
Country Codes
CountryCode
WX switch can have one Auto-AP profile
How an Unconfigured MAP Finds a WX To Configure It
Configured MAPs Have Precedence Over Unconfigured MAPs
Example WX1200 MAP Capacities and Loads
WX1200 a WX1200 B
Configuring an Auto-AP Profile
WX1200# set ap auto success change accepted
Configurable Profile Parameters for Distributed MAPs
WX# set ap auto mode enable success change accepted
MAP Parameters
Radio Parameters
WX# display ap status auto
Set ap auto persistent apnumber all
Auto-AP profile is not used to configure the MAP. Instead,
MAP configuration persistent across switch restarts
Configuring a MAP
Configure the MAP using the following command
Configuring Static IP Addresses on Distributed MAPs
Success change accepted
Clearing a MAP from the Configuration
To clear a MAP, use the following command
Changing MAP Names
Changing Bias
Disabling or Reenabling Automatic Firmware Upgrades
Set ap apnumber upgrade-firmware enable disable
Forcing a MAP To Download its Operational Image from the WX
WX# set ap 1 bias low success change accepted
Enabling LED Blink Mode
Set ap apnumber blink enable disable
Encryption Key Fingerprint
Encryption Options
Verifying a MAP Fingerprint on a WX Switch
MAP Can Establish
WX# display ap status
Setting the MAP Security Requirement on a WX
Set ap security require optional none
WX# set ap security require
Creating a Service Profile
Set service-profile name ssid-name ssid-name
Fingerprint Log Message
An Ssid can be up to 32 alphanumeric characters long
Removing a Service Profile
Changing a Service Profile Setting
Disabling or Reenabling Encryption for an Ssid
Disabling or Reenabling Beaconing of an Ssid
SSIDs are beaconed by default
Changing the Fallthru Authentication Type
To change the fallthru method, use the following command
Lists the rate settings and their defaults
Transmit Rates
11b-1.0,2.0
11g-1.0,2.0,5.5,11.0
Beacon-rate
Enforcing the Data Rates
Transmit Rates
WX# set radio-profile rp1 rate-enforcement mode enable
WX# set radio-profile rp1 service-profile sp1
Disabling Idle-Client Probing
Changing the User Idle Timeout
Threshold can be a value from 1 through 15. The default is
Changing the Short Retry Threshold
Set service-profile name long-retry threshold
Changing the Long Retry Threshold
To create a radio profile, use the following command
Creating a New Profile
Changing Radio Parameters
To change the Dtim interval, use the following command
Set radio-profile name dtim-interval interval
To change the RTS threshold, use the following command
Set radio-profile name rts-threshold threshold
Set radio-profile name frag-threshold threshold
Set radio-profile name max-rx-lifetime time
Set radio-profile name max-tx-lifetime time
Resetting a Radio Profile Parameter to its Default Value
To remove a radio profile, use the following command
Removing a Radio Profile
Configuring the Channel and Transmit Power
Configuring the External Antenna Model and Location
Model Type Gain dBi Description
Specifying the External Antenna Model
MP-341, MP-352, MP-262 External Antenna Models
MP-620 External Antenna Models
Beamwidth Model Type Horizontal Vertical
Set radio-profile name service-profile name
Specifying the External Antenna Location
Profiles
Assigning a Radio Profile and Enabling Radios
Disabling or
Reenabling Radios
To restart a MAP, use the following command
Reset ap apnumber
Clear ap apnumber radio 1 2 all
WX1200# clear ap 3 radio
Configuring MAP Access Points
Configuring a Vlan Profile
Enabling Local Switching on a MAP
Set ap apnumber local-switching mode enable disable
Set ap apnumber local-switching vlan-profile profile-name
Clear ap ap-numberlocal-switching vlan-profile
Applying a Vlan Profile to a MAP
Clearing the Vlan Profile from a MAP
Removing a Vlan Profile from the WX Switch
To remove Vlan profile locals, type the following command
Clear vlan-profile profile-namevlan vlan-name
WX# clear vlan-profile locals vlan red
Displaying MAP Configuration Information
Display ap config apnumber radio 1
WX1200# display ap config
Displaying MAP Information
Displaying Connection Information for Distributed MAPs
Display ap global apnumber serial-id serial-ID
WX4400# display ap global
Displaying a List Distributed MAPs That Are Not Configured
Connection
Information for
Display service-profile name ?
WX# display service-profile sp1
WX# display radio-profile default
Displaying MAP
Display radio-profile name ?
Display ap status terse apnumber all radio 1
Following command displays the status of a Distributed MAP
Displaying Static IP
Display ap counters apnumber radio 1
WX# display ap counters
Following command displays ARP entries for AP
Displaying Vlan Profile Information
Displaying the ARP Table for a MAP
Following command displays FDB entries for AP
Displaying Forwarding Database For a MAP
Display ap acl hits ap-number
WX# display ap acl hits
Display ap acl map ap-number
WX# display ap acl map
Configuring RF Load
Configuring RF Load Balancing
Set load-balancing mode enable disable
Disabling or Re-Enabling RF Load Balancing
Clear ap apnumber radio radio-numload-balancing group
Set band-preference none 11bg 11a
Set load-balancing strictness low med high max
Displaying RF Load Balancing Information
Exempting an Ssid From RF Load Balancing
Radios in the same load-balancing group as ap2/radio1
WX# display load-balancing group ap 2 radio
Configuring RF Load Balancing for Maps
Services
Configuring Wlan
Mesh Services
Use the following command to specify the pre-shared key
Set ap num boot-configuration mesh mode enable disable
Set ap num boot-configuration mesh ssid mesh-ssid
Mesh Services following commands
Set ap num radio num link-calibration mode enable disable
Wireless Bridging
Following illustration
Rfid Reports Inactive Antenna Link Calibration Enabled
Displaying Wlan
WX# display ap status terse Total number of entries
AP, m = mesh AP = mesh portal
Bssid1 000b0efdfdcd, ssid mesh-ssid mesh
Encryption settings are configured in the service profile
Then authorized to join a Vlan
„ WPA2 Robust Security Network
802.11i standard
Wireless Encryption Defaults
Configuration Required
Encryption Type Client Support Default State MSS
Default Encryption
Configuring User Encryption
WPA Encryption with Tkip Only
WPA Encryption with Tkip and WEP
Configuring WPA
Configuring User Encryption
Configuring WPA
Lists the encryption support for WPA and non-WPA clients
Encryption Support for WPA and Non-WPA Clients
Creating a Service Profile for WPA
Enabling WPA
Specifying the WPA Cipher Suites
Changing the Tkip Countermeasures Timer Value
Enabling PSK Authentication
Set service-profile name tkip-mc-time wait-time
Set service-profile name auth-psk enable disable
Set service-profile name psk-raw hex
Set service-profile name auth-dot1x enable disable
Displaying WPA Settings
WPA settings appear at the bottom of the output
WX1200# display service-profile sp1
Set radio-profile name service-profile name
WX1200# set service-profile rsn success change accepted
Set service-profile name rsn-ie enable disable
Ccmp
Assigning the Service Profile to Radios Enabling the Radios
RSN settings appear at the bottom of the output
Configuring WEP
Encryption for Dynamic and Static WEP
To set the value of a WEP key, use the following command
Traffic, use the following commands
Set service-profile name wep key-index num key value
Encryption Configuration Scenarios
Tkip
Encryption Configuration Scenarios
WX1200# set service-profile wpa-wep success change accepted
305
Clients
WX1200# display aaa Default Values
WX1200# display service-profile sp1
Save the configuration. Type the following command
Configuring User Encryption
RF Auto-Tuning can perform the following tasks
Power setting if needed
Disabled for power configuration
RF Auto-Tuning
How Channels Are Selected
Power Tuning
Channel Tuning
Tuning the Transmit Data Rate
Defaults for RF Auto-Tuning Parameters
Defaults for RF Auto-Tuning Parameters
RF Auto-Tuning
Settings
Changing
Changing the Channel Tuning Interval
Enabling Power Tuning
Changing the Channel Holddown Interval
Set radio-profile name auto-tune channel-interval seconds
Tuned Settings
Changing the Power Tuning Interval
Changing the Maximum Default Power Allowed On a Radio
Channel or set ap dap radio tx-power command for each radio
Displaying RF Auto-Tuning Settings
Displaying
Radios in radio profile rp2
Values of RF attributes
WX# display ap config 2 radio
WX# display ap config
Commands
Display auto-tune Neighbors ap 2 radio
WX1200# display auto-tune attributes ap 2 radio
Configuring RF AUTO-TUNING
Aeroscout Listeners
Configuring MAP Radios to Listen for AeroScout Rfid Tags
Using an AeroScout Engine
Status
Select Locate AeroScout Tag
MSS and how to configure and manage them
Optimized forwarding of wireless traffic for time-sensitive
About QoS
QoS Parameters
Set service-profile cac-mode
QoS Parameters
QoS Feature Description Configuration Command
Set service-profile proxy-arp
Keepalives and timeouts for clients set service-profile
Set service-profile idle-client-probing
On page 332 shows how WX switches classify ingress traffic
QoS on WX Switches-Classification of Ingress Packets
QoS on WX Switches-Marking of Egress Packets
Configuring Quality of Service
WMM QoS Mode
WMM QoS on the WX Switch
Service Forwarding Type
WMM Priority Mappings
IP ToS
Default CoS-to-MAP-Forwarding-Queue Mappings
CoS MAP Forwarding Queue
WMM QoS in a 3Com Network
MAP B receives the packet and does the following
SVP QoS Mode
To configure CAC, see Configuring Call Admission Control on
WMM QoS Mode
Changing QoS Settings
Set radio-profile name wmm-powersave enable disable
Set radio-profile name qos-mode svp wmm
Set service-profile name cac-mode none session
Set service-profile name cac-session max-sessions
Enabling CAC
Changing the Maximum Number of Active Sessions
To change CoS mappings, use the following commands
Using the Client’s Dscp Value to Classify QoS Level
Set service-profile name use-client-dscp enable disable
Changing CoS Mappings
Profile’s QoS Settings following command
Displaying QoS Information
WX1200# display radio-profile rp1
This example, the QoS mode is WMM
Displaying a Service
QoS Mode Wmm
Displaying the Default CoS Mappings
Display service-profile name cac session
WX# display service-profile sp1 cac session
WX1200# display qos default
Displaying a DSCP-to-CoS Mapping
Displaying a CoS-to-DSCP Mapping
Display qos dscp-to-cos-map dscp-value
Display qos cos-to-dscp-map cos-value
Displaying MAP Forwarding Queue Statistics
WX1200# display qos dscp-table
Display ap qos-stats apnumber clear
WX# display ap qos-stats
Configuring Quality of Service
Loop in the topology and blocks one or more redundant paths
Tree protocol PVST+
All network ports as untagged members of the same Vlan
Separate instance of PVST+ on each tagged Vlan
Enabling
Spanning Tree
Protocol
Snmp Port Path Cost Defaults
Port Speed Link Type Default Port Path Cost
Port Priority
Set spantree priority value all vlan vlan-id
Resetting the STP Port Cost to the Default Value
Changing the STP Port Cost
Changing the STP Port Priority
WX1200# clear spantree portcost 3-4 success change accepted
Resetting the STP Port Priority to the Default Value
To change the hello interval, use the following command
Changing the STP Forwarding Delay
To change the forwarding delay, use the following command
Changing the STP Hello Interval
Features
Managing STP Fast
Convergence
Changing the STP Maximum Age
Set spantree portfast port port-listenable disable
Configuring Backbone Fast Convergence
This example, backbone fast convergence is enabled
Displaying Port Fast Convergence Information
Displaying Backbone Fast Convergence State
Displaying Spanning Tree Information
Fast Convergence
Displaying Uplink Fast Convergence Information
Active option
Displaying the STP Port Cost on a Vlan Basis
WX1200# display spantree vlan mauve
Display spantree portvlancost port-list
WX1200# display spantree blockedports Vlan default
Display spantree blockedports vlan vlan-id
Display spantree statistics port-listvlan vlan-id
WX1200# display spantree statistics
Inactive
Enables STP on the Vlan to prevent loops
Clearing STP Statistics
Counters again
Clear spantree statistics port-listvlan vlan-id
WX1200# set vlan 10 name backbone port
Set port enable
Configuring and Managing Spanning Tree Protocol
Traffic. Igmp snooping is enabled by default
Feature on an individual Vlan basis
Disabling or Reenabling Igmp Snooping
IP address, the group address
Changing Igmp Timers
Reenabling Proxy
Reporting
Pseudo-Querier
You can specify a value from 2 through 255. The default is
Changing Other-Querier Present Interval
Changing the Last Member Query Interval
Set igmp mrsol enable disable vlan vlan-id
Set igmp mrsol mrsi seconds vlan vlan-id
Displaying Multicast Configuration Information Statistics
Displaying Multicast Information
Displaying Multicast Statistics Only
Clearing Multicast Statistics
Display igmp statistics vlan vlan-id
Clear igmp statistics vlan vlan-id
Display igmp querier vlan vlan-id
Display igmp querier vlan orange
Display igmp mrouter vlan vlan-id
WX1200# display igmp Mrouter vlan orange
Igmp receiver-table group 237.255.255.0/24
Access Control Lists
ACL Commands
About Security
Overview of Security
Setting Security ACLs
„ Vlan
Traffic Direction
Creating
Committing a
Security ACL
ACL
WX1200# set security acl ip acl-1 permit 192.168.1.4
Set security acl ip acl-namepermit cos cos deny
Class of Service
Wildcard Masks
Common IP Protocol Numbers
Number Protocol
Class-of-Service CoS Packet Handling
Common Icmp Message Types and Codes
Icmp Message Type Number Icmp Message Code Number
Setting a TCP ACL
Following command filters TCP packets
Setting a UDP ACL
Following command filters UDP packets
Commit acl-99, type the following command
WX1200# commit security acl acl-99 success change accepted
WX1200# commit security acl all success change accepted
Viewing the Edit Buffer
Viewing Committed Security ACLs
Viewing Security ACL Details
Displaying Security ACL Hits
WX1200# display security acl hits
Mapping Security
ACLs
To map a security ACL to a user session, follow these steps
WX1200# commit security acl acl-222 success change accepted
Displaying ACL Maps to Ports, VLANs, and Virtual Ports
WX1200# display security acl map Acl-999
Clearing a Security ACL Map
WX1200# display security acl map acljoe
Modifying a Security ACL
Modifying a Security ACL
To view the results, type the following command
WX1200# display security acl info
Set security acl ip acl-111 hits #4
ACL edit-buffer table
WX1200# rollback security acl acl-111
Using ACLs to
Change CoS
Filtering Based on
Dscp Values
Using the dscp Option
Using the precedence and tos Options
Following commands perform the same CoS reassignment as
Prioritization for
Legacy Voice over
Are forwarded to any 10.10.90.x address on Distributed MAP
Configuring and Managing Security Acls
Service
VoIP
WX4400# set security acl ip voip permit any
Commit the ACL to the configuration
Known Limitations
WX4400# commit security acl voip
Configuring a Service Profile for RSN WPA2
Configuring a Service Profile for WPA
Configuring a Radio Profile
Configuring a Vlan for Voice Clients
Configuring an ACL to Prioritize Voice Traffic
Configuring and Managing Security Acls
Restricting
Client-To-Client
Forwarding Among
IP-Only Clients
Address, and how to map the ACL to a port and a user
WX1200# set security acl ip c2c permit 0.0.0.0
WX1200# commit security acl c2c
WX1200# set security acl map c2c vlan vlan-1 Out
To save your configuration, type the following command
Configuring and Managing Security Acls
Certificates
Managing Keys and Certificates
About Keys and Certificates
Managing Keys and Certificates
Generate key command
Generate request command. Copy
Pkcs Object Files Supported by 3Com
File Type Standard Purpose
Certificates
Automatically
Generated by MSS
Creating Keys and Certificates
Procedures for Creating and Validating Certificates
For Your Network more complex to use
File Type Steps Required Instructions Self-signed
Certificate
Crypto generate key admin domain eap ssh web 128 512 1024
# crypto generate key admin 1024 admin key pair generated
Crypto generate self-signed admin eap web
# crypto generate self-signed admin Country Name US
To enter the one-time password, use the following command
Filename is the location of the file on the WX switch
Crypto otp admin eap web one-time-password
Crypto pkcs12 admin eap web filename
Crypto generate request admin eap web
# crypto generate request admin Country Name US
Crypto certificate admin eap web PEM-formatted
# crypto ca-certificate admin Enter PEM-encoded certificate
END Certificate
# display crypto certificate admin Certificate
Displaying Certificate and Key Information
For SSH configuration information, see Managing SSH on
Key and Certificate
Object files
Generate self-signed certificates
WX1200# display crypto certificate admin
Display certificate information for verification
WX1200# crypto generate self-signed web
WX1200# display crypto certificate eap
WX1200# display crypto certificate web
WX1200# crypto otp admin SeC%#6@o%c
Pkcs12 admin 2048admn.p12
WX1200# crypto otp eap SeC%#6@o%d
WX1200# crypto otp web SeC%#6@o%e
WX1200# crypto generate request admin
CSR and a Pkcs #7 Object File
WX1200# crypto certificate admin
WX1200# crypto ca-certificate admin
WX1200# display crypto ca-certificate admin
Authentication
About AAA for Network Users
Authentication Types
MSS provides the following types of authentication
Authentication Algorithm
„ Web „ Last-resort „ None
Authentication Flowchart for Network Users
Ssid Name Any
Last-Resort Processing
User Credential Requirements
Configuring AAA for Network Users
About AAA for Network Users
Configuring AAA for Network Users
AAA Tools for
Network Users
Wildcard Any for Ssid Matching
AAA Rollover Process
Local Override Exception
Remote Authentication with Local Backup
Shows the results of this combination of methods
EAP Authentication Protocols for Local Processing
EAP Type Description Use
Three Basic WX Approaches to EAP Authentication
Approach Description
Effects Authentication Type On Encryption Method
Encryption Available to Various Authentication Methods
Authentication Last-Resort WebAAA
Eap
Configuring 802.1X Authentication
Success change accepted
Configuring 802.1X Authentication
Authentication Rule Requirements
To set the Bonded Auth period, use the following command
Bonded Auth Period
Set dot1x bonded-period seconds
Clear dot1x bonded-period
Bonded Auth Configuration Example
Displaying Bonded Auth Configuration Information
Display dot1x config
WX1200# set dot1x bonded-period 60 success change accepted
WX1200# display dot1x config
Authentication
Authorization by
MAC Address
Clearing MAC Users and Groups
Clear mac-user mac-addrgroup
Clear mac-user mac-address
WX1200# clear mac-user 010f03040506 success change accepted
For a complete list of authorization attributes, see on
For example, to add the MAC user 000102030405 to Vlan red
Set radius server server-nameauthor-password password
How WebAAA Portal Works
Display of the Login
WX Switch Requirements
WebAAA
Configuring Web Portal WebAAA
Configuring AAA for Network Users
Portal ACL and User ACLs
WX Switch Recommendations
„ Configure the NIC to use Dhcp to obtain its IP address
Network Requirements
Client NIC Requirements
Configuring Web To configure Web Portal WebAAA
Web Portal WebAAA Configuration Example
Portal WebAAA
Display the service profile to verify the changes
Configure individual WebAAA users
Display the configuration
WX1200# display config
Displaying Session Information for Web Portal WebAAA Users
Display sessions network user user-glob
WX4400# display sessions network ssid mycorp
Configuring Web Portal WebAAA
„ If the switch nonvolatile storage has a page in web named
Copying and Modifying the Web Login
Custom Login Page Scenario
Map a radio to the temporary radio profile and enable it
Save the modified
Change the logo
Change the greeting
Change the warning statement if desired
URLs variables you can include in a redirect URL
Variables for Redirect URLs
Values for Literal Characters
Add the last rule contained in portalacl
Display security acl info acl-nameall editbuffer
Set service-profile name web-portal-acl aclname
Period
Commit security acl
Set service-profile name web-portal-session-timeout seconds
Last-Resort Access
WX1200# display service-profile last-resort-srvcprof
481
Configuring AAA for Users of Third-Party APs
Process for Users of a Third-Party AP
Requirements Third-Party AP Requirements
Radius Server Requirements
Set authentication mac wired mac-addr-glob method1
Set authentication proxy ssid ssid-nameuser-glob
Set radius proxy port port-listtag tag-valuessid
WX4400# set authentication mac wired aabbcc010101 srvrgrp1
WX4400# set authentication proxy ssid mycorp ** srvrgrp1
Authorization
Assigning
Attributes
Authentication Attributes for Local Users
Idle-timeout
Attribute Description Valid Values End-date
Start-date,end-date, or both
Filter-id
Attribute Description Valid Values Service-type
Session-timeout
Ssid
Attribute Description Valid Values Start-date
Time-of-day
Or group in the local WX database and specify its value
Attribute Description Valid Values Url
Vlan-name
Set service-profile name attr attribute-name value
Commands for Assigning a Security ACL Locally
Assigning a Security ACL Locally
Assigning a Security ACL on a Radius Server
Assigning and Clearing Encryption Types Locally
Encryption-Type Encryption Algorithm Value Assigned
Assigning and Clearing Encryption Types on a Radius Server
Encryption Type Values and Associated Algorithms
After Roaming
Vlan Assignment After Roaming from One WX to Another
Location Policy
Vlan Assigned By
Overriding or
Configuring AAA for Network Users
Set location policy deny if
Set location policy permit
WX1200# set location policy deny if user eq *.theirfirm.com
Applying Security ACLs in a Location Policy Rule
Displaying and Positioning Location Policy Rules
To delete a location policy rule, use the following command
Clearing Location Policy Rules Disabling
WX1200 display location policy
Clear location policy rule-number
Wireless Network
Accounting for
Users
Network resource usage
User started on WX1200-0013
User roamed to WX1200-0017
WX1200# display accounting statistics
WX1200-0013#display accounting statistics
User terminated the session on WX1200-0017
WX1200# display aaa
Problems
Configuration Order
WX switch and how to avoid them
Avoiding AAA
Configuration Producing an Incorrect Processing Order
Configuration for a Correct Processing Order
Name and identifying the accessible port or ports
Accessing any MAP access ports, Distributed MAPs, or wired
Mobility Profile
All of the ports or Distributed MAPs
To remove a Mobility Profile, type the following command
WX1200# display mobility-profile Mobility Profiles
Clear mobility-profile name
Network User
NamePorts ========================= Tulip
Save the configuration
WX1200# set user Natasha password moon
WX1200# set radius server r1 address 10.1.1.1 key sunny
WX1200# set server group sg1 members r1
WX1200# set user Natasha attr session-timeout
WX1200 save config
WX1200# set user Natasha attr vlan-name red
WX1200# set radius server r1 address 10.1.1.1 key starry
Save the configuration
Redirect bldga-prof-VLAN users to the Vlan bldgb-eng
WX1200# display location policy
Configuring AAA for Network Users
With Radius
Wireless Client, MAP, WX Switch, and Radius Servers
„ Timeout WX wait for a server response 5 seconds
Before You Begin
Radius Servers
„ Transmission attempts
WX switch uses to authenticate itself to the Radius server
Clear radius deadtime key retransmit timeout
Configuring Individual Radius Servers
WX1200# clear radius deadtime success change accepted
WX1200# set radius client system-ip success change accepted
Set radius server server-nameaddress ip-address key string
Radius Server
Radius servers, type the following command
Ordering Server Groups
Set server group group-namemembers server-name1
Configuring Load Balancing
To configure load balancing, use the following command
Enable load balancing by typing the following command
Set server group group-nameload-balance enable
To remove a server group, type the following command
Adding Members to a Server Group
Set server group group-namemembers
Clear server group group-name
Configure Radius servers. Type the following commands
Radius and Server
Group
Display the configuration. Type the following command
Configuring Communication with Radius
On Wired
Managing
Ports
Enabling
Set dot1x port-control Forceauth forceunauth auto port-list
WX1200# clear dot1x port-control success change accepted
Authentication
Configuring Key Transmission Time Intervals
Set dot1x key-tx enable disable
Set dot1x tx-period seconds
WX1200# clear dot1x tx-period success change accepted
Setting EAP
Retransmission
Attempts
Enabling Disabling Reauthentication
Setting the Maximum Number Reauthentication Attempts
Set dot1x reauth enable disable
Set dot1x reauth-max number-of-attempts
Setting Reauthentication Period
WX1200# clear dot1x reauth-max success change accepted
Set dot1x reauth-period seconds
WX1200# set dot1x reauth-period
Clear dot1x max-req
Set dot1x quiet-period seconds
Setting Timeout for an Authorization Server
Type the following command to reset the timeout period
Set dot1x timeout auth-server seconds
Set dot1x timeout supplicant seconds
Configuration
Display dot1x clients stats config
WX1200# display dot1x clients
WX1200# display dot1x stats
Managing 802.1X on the WX Switch
About Soda
Endpoint Security
Soda Endpoint Security Support on WX Switches
About Soda Endpoint Security
Functionality tasks
Configuring Soda Functionality
Https//hostname/soda/ssid/xxx.html
Install soda agent agent-fileagent-directory directory
WX1200# install soda agent soda.ZIP agent-directory sp1
WX1200# copy tftp//172.21.12.247/soda.ZIP soda.ZIP
Enabling Soda Functionality for the Service Profile
Set service-profile name soda mode enable disable
Set service-profile name enforce-checks enable disable
Set service-profile name soda success-page
Clear service-profile name soda success-page
Set service-profile name soda failure-page
Clear service-profile name soda failure-page
Set service-profile name soda remediation-acl acl-name
Clear service-profile name soda remediation-acl
Set service-profile name soda logout-page
Clear service-profile name soda logout-page
Set ip https server enable
Uninstalling the Soda Agent Files from the WX Switch
Set service-profile name soda agent-directory directory
Clear service-profile name soda agent-directory
Uninstall soda agent agent-directory directory
WX1200# uninstall soda agent agent-directory sp1
Configuring Soda Endpoint Security for a WX Switch
Displaying Clearing Administrative Sessions
Display sessions admin console telnet client
Clear sessions admin console telnet client session-id
Displaying Clearing All Administrative Sessions
Displaying Clearing an Administrative Console Session
WX1200 display sessions admin
WX1200# clear sessions admin
Displaying Clearing Administrative Telnet Sessions
Displaying Clearing Client Telnet Sessions
WX1200 display sessions telnet
Displaying Clearing Network Sessions
Display sessions network
WX1200# display sessions network
Network Session to get more in-depth information
Displaying Clearing Network Sessions by Username
WX1200# display sessions network user E
Clear sessions network user user-glob
WX1200# clear sessions network user Bob
Address set of MAC addresses, type the following command
For example, to clear all sessions for MAC address
Clear sessions network vlan vlan-glob
WX1200# clear sessions network vlan red
WX1200 display session network session-id
Session Timers
Session-id command
Changing Network
Changing or Disabling the User Idle Timeout
To disable the user idle timeout, use the following command
About Rogues
RF Detection
Rogue Classification
Rogue Detection Lists
Rogue Detection Algorithm
Dynamic Frequency Selection DFS
Rogue Detection and Countermeasures
Detection Features
Summary of Rogue lists the rogue detection features in MSS
Rogue Detection Features
Countermeasures
Set rfdetect vendor-list client ap mac-addr
Clear rfdetect vendor-list client ap mac-addrall
Set rfdetect ssid-list ssid-name
WX1200# display rfdetect ssid-list Total number of entries
Clear rfdetect ssid-list ssid-name
To display the client black list, use the following command
Following example shows the client black list on WX switch
Set rfdetect black-list mac-addr
Rfdetect Black-list
To display the attack list, use the following command
Following example shows the attack list on a switch
Set rfdetect attack-list mac-addr
Rfdetect Attack-list
To display the ignore list, use the following command
Mac-addris the Bssid of the device you want to ignore
Set rfdetect ignore mac-addr
Clear rfdetect ignore mac-addr
Countermeasures
Enabling Countermeasures
Reenabling Active
Scan
Enabling MAP
Signatures
Creating an Encrypted RF Fingerprint Key as MAP Signature
Set rfdetect signature key encrypted keyvalue
WXR100desk# set rfdetect ?
WXR100desk# set rfdetect signature ?
Reenabling Logging
Rogues
Enabling Rogue
Notifications
IDS and DoS Alerts
Rogue Detection and Countermeasures
Examples
IDS and DoS Log Messages
Message Type Example Log Message
Client aabbccddeeff is sending rsvd mgmt frame D
IDS and DoS Log Messages
You can use the CLI commands listed in to display rogue
Rogue Detection Display Commands
Displaying RF
Detection
Rogue Detection Display Commands
Display rfdetect clients mac mac-addr
WX# display rfdetect clients
Detection Counters command
Display rfdetect counters
WX1200# display rfdetect counters
Displaying Ssid or Bssid Information for a Mobility Domain
Display rfdetect mobility-domain ssid ssid-namebssid
WX1200# display rfdetect mobility-domain
Displaying RF Detection Information
Displaying the APs Detected by MAP Radio
Display rfdetect data
WX1200# display rfdetect data
WX1200# display rfdetect visible ap Radio
Displaying Countermeasures Information
Display rfdetect countermeasures
WX# display rfdetect countermeasures
Rogue Detection and Countermeasures
About System Files
Displaying Software
Version Information
To also display MAP information, type the following command
WX# display version
WX# display version details
To display boot information, type the following command
Boot
Working with Files
Following command displays the files in the old subdirectory
WX1200# dir file
WX1200# dir boot0
URL can be one of the following
WX1200# dir core
„ boot0/filename „ boot1/filename
WX1200# copy floor2wx tftp//10.1.1.1/floor2wx
WX1200# copy tftp//10.1.1.107/wxb04102.rel boot1wxb04102.rel
Md5 boot0 boot1filename
To delete a file, use the following command
WX1200# md5 boot0wxb04102.rel
Delete url
To remove subdirectory corp2, type the following example
WX1200# mkdir corp2 success change accepted. WX1200# dir
WX1200# rmdir corp2 success change accepted
Configuration Files
Running
WX1200# display config area vlan
Save config filename
WX1200# save config newconfig
Set boot configuration-file filename
Load config url
WX1200# load config newconfig
Set boot backup-configuration filename
WX1200# clear boot backup-config
Backup boot configuration Backup.cfg
Clear boot config
System
Managing System Files
WX1200# backup system tftp/10.10.20.9/sysabak critical
Switch for
Upgrade
Upgrading
System Image
Upgrading an Individual Switch Using the CLI
Reset system force
Upgrade Scenario
WX1200# backup system tftp//172.16.0.10/sysabak
WX1200# copy tftp//172.16.0.10/WX040101.20 boot1WX040100.20
WX1200# reset system
Troubleshooting a
WX Setup Problems and Remedies
WX Setup Problems and Remedies
Type the save config
Recovering
Enable Password
System When
Is Lost
System Log
Log Message
Components
Levels
System Log Destinations and Defaults
Event Severity Levels
Display log buffer trace
Clear log buffer trace
Clear log server ip-addr
WX1200# display log buffer severity error
Logging to the Log Buffer
Set log buffer severity severity-level
To clear the buffer, type the following command
To disable console logging, type the following command
Logging to the Console
Setting Telnet Session Defaults
Set log sessions severity severity-levelenable
Logging Messages to a Syslog Server
For information on severity levels, see on
To disable session logging, use the following command
Changing the Current Telnet Session Defaults
To disable trace logging, use the following command
Logging to the Trace Buffer
Displaying the Log Configuration
Saving Trace Messages in a File
Using the Trace
Command
Tracing Authentication Activity
Tracing Session Manager Activity
Tracing Authorization Activity
Tracing 802.1X Sessions
WX1200# display trace
Clear trace all trace area
WX1200# display log trace severity error
WX1200# display log trace facility
WX1200# set trace ?
Using display
Commands
For more information about Vlan interfaces, see Configuring
Interfaces
Database FDB information, type the following command
Configuring Port
Port Mirroring
Requirements
Mirroring
Remotely
Monitoring Traffic
Remote Traffic
Monitoring
WX1200# set snoop snoop1 observer 10.10.30.2 snap-length
Displaying Configured Snoop Filters
To delete a snoop filter, use the following command
Editing a Snoop Filter
Deleting a Snoop Filter
Following command shows the mapping for snoop filter snoop1
Displaying the Snoop Filters Mapped to a Radio
Displaying the Snoop Filter Mappings for All Radios
Removing Snoop Filter Mappings
Filter operates until you manually disable it
Following command enables snoop filter snoop1
Following command shows statistics for snoop filter snoop1
Preparing an Observer Capturing Traffic
Set snoop filter-nameall mode enable disable
Capturing System
Sending it to
Technical Support
Corenetsys.core.217.tar
Corenetsys.core.217.tar
Support
WEB View
System Requirements
Logging Into Web View
3Com Mobility System Software MSS supports the standard
On page 652. Also supported are 3Com vendor-specific
Attributes VSAs, listed in on
Stated
Rcv Sent Access Acct Attribute Type Resp? Reqst? Description
Supported Standard Extended Attributes
Supported Standard and Extended Attributes
Filter-id inboundacl.in
Filter-id outboundacl.out
Displayed, they must
NAS
Radius
Acct-Output Yes
3Com
Vendor-Specific
Users, on
3Com VSAs
YY/MM/DD-HHMM
Traffic Ports Used by MSS
Protocol Port Function
IP/ICMP
Dhcp Server
Chapter E Dhcp Server
Set interface dhcp-server command’s primary-dns
Set ip dns server command
Dhcp Server
Displaying Dhcp
Server Information
Displayed instead
Service Benefits
Solve Problems Online
Register Your
Product to Gain
Warranty
Access Software
Purchase Extended
Professional
Country Telephone Number
Latin America Telephone Technical Support and Repair
US and Canada Telephone Technical Support and Repair
Glossary
Radio that can receive and transmit signals at Ieee 802.11b
802.11a
GHz and data rates of up to 54 Mbps
802.11b
See ACE
See security ACL
AES
BSS
Bssid
CBC-MAC
CCI
Ccmp
Chap
CPC
CRC
CSR
DES
Dhcp
Dynamic Host See Dhcp Configuration Protocol
EAP
EAP-TLS
ESS
Etsi
FCC
FDB
Fhss
Gbic
GMK
GTK
Hmac
Hpov
Https
IAS
ICV
Igmp snooping
Industry Canada
Information element
Infrastructure
ISL
ISO
Lawn
Ldap
MAC
MAP
MD5
MIC
Mpdu
MS-CHAP-V2
Msdu
MSS
MTU
NAT
Peap
PEM
PIM
Pkcs
PMK
PRF
Prng
PSK
PTK
PVST+
RC4
RSA
RSN
Rssi
SHA
SIP
SSH
Ssid
SSL
STP
TLS
TLV
Ttls
NII
Vlan
Vlan glob
VSA
Watch list
Web View
WEP
Wisp
Wlan
WPA
WPA IE
Glossary
Glossary
Index
Numbers
Sessions, clearing 557 sessions, displaying
Cipher suites, RSN enabling
ARP
Index
Index
See also MAC addresses MAC addresses
Names
Https
Radius
Repair support, Europe, Middle East, and Africa Configuring
717
Seed, Mobility Domain configuring 154 defined
STP
Index
Usernames Invalid certificate Case-sensitive
Index
Command Index
Clear summertime
Load config 61 Md5 606 mkdir Monitor port counters
Command Index
Set radius proxy port
729
Command Index
