Main
3Com Corporation 350 Campus Drive Marlborough, MA USA 01752-3064
C
ABOUT THIS GUIDE
1
2
3
4
5
6
7
Page
8
9
10
11
Page
Page
Page
12
13
14
15
16
17
18
19
20
21
22
23
24
A
Page
Page
ABOUT THIS GUIDE
Conventions
Documentation
Documentation Comments
Page
1
I
Overview
CLI Conventions
Page
Page
Page
Page
Command-Line Editing
Page
Using CLI Help
at your access level, type the help command. For example:
Understanding Command Descriptions
2
Commands by
disable
enable
quit
set enablepass
Page
3
Use system services commands to configure and monitor system information for a WX switch.
Table 6 System Services Commands by Usage
clear banner motd
clear history
clear prompt
clear system
display banner motd
display base-information
display license
display load
display system
Examples To show system information, type the following command:
Table 7 describes the fields of display system output.
Table 7 display system output
Table 7 display system output (continued)
help
history
quickstart
set auto-config
Page
set banner acknowledge
for example, double quotes ().
Page
set banner motd
set confirm
set length
set license
set prompt
set system contact
set system countrycode
switch. You can specify one of the codes listed in Table 8.
Table 8 Country Codes
Tab le 8 Country Codes (continued)
Table 8 Country Codes (continued)
Page
set system idle-timeout
Page
set system location
set system name
4
Use port commands to configure and manage individual ports and load-sharing port groups.
Table 9 Port Commands by Usage
clear ap
clear port counters
clear port-group
clear port media-type
clear port name
clear port mirr or
clear port preference
clear port type
display port
display port-group
display port mirr or
display port poe
display port status
Examples The following command displays information for all ports on a WX1200 switch:
Table 13 describes the fields in this display.
Table 13 Output for display port status
display port media-type
monitor port
Page
Page
Page
Table 16 Output for monitor port counters (continued)
reset port
set ap
Page
set port
set port-group
set port media-type
set port mirror
set port name
set port negotiation
set port poe
set port speed
set port trap
set port type ap
Page
Page
set port type wired-auth
Page
Page
5
Table 19 VLAN Commands by Usage
clear fdb
clear security 12-restrict
clear security 12-restrict counters
clear vlan
clear vlan-pr ofile
switched by
from VLAN profile locals:
display fdb
Page
display fdb agingtime
display fdb count
display roaming station
Table 21 Output for display roaming station (continued)
display roaming vlan
display security 12-restrict
display tunnel
display vlan config
Table 25 describes the fields in this display.
Table 25 Output for display vlan config
display vlan-pr ofile
profiles
profile locals:
set fdb
set fdb agingtime
set security l
2-restrict
set vlan name
set vlan port
set vlan tunnel-affinity
set vlan profile
is
VLAN
VLAN profile locals:
Page
6
Commands by
clear qos
Page
set qos cos-to-dscp-map
set qos dscp-to-cos-map
display qos
display qos dscp-table
7
Table 28 IP Services Commands by Usage
Table 28 IP Services Commands by Usage (continued)
clear interface
clear ip alias
clear ip dns domain
clear ip dns server
clear ip r oute
clear ip telnet
clear ntp server
clear ntp update-interval
clear snmp
clear snmp notify
clear snmp usm
clear summertime
clear system
clear timezone
display arp
display dhcp-client
Examples The following command displays DHCP client information:
Table 30 describes the fields in this display.
Table 30 Output for display dhcp-client
display dhcp-server
Table 31 and Table 32 describe the fields in these displays.
Table 31 Output for display dhcp-server
Table 32 Output for display dhcp-server verbose
display interface
display ip alias
display ip dns
display ip https
display ip route
Page
display ip telnet
display ntp
Examples To display NTP information for a WX switch, type the following command:
Table 39 describes the fields in this display.
Table 39 Output for display ntp
Page
display snmp
display snmp notify
display snmp status
display snmp usm
display summertime
display timedate
display timezone
ping
Page
set arp
set arp agingtime
set interface
set interface dhcp-client
set interface dhcp-server
set interface status
set ip alias
set ip dns
set ip dns domain
set ip dns server
set ip https server
set ip route
Page
set ip snmp server
set ip ssh
set ip ssh server
set ip telnet
set ip telnet server
set ntp
set ntp server
set ntp update-interval
set snmp
Page
Page
Page
Page
Page
Page
set snmp notify
Page
Page
Page
Page
set snmp protocol
set snmp security
set snmp usm
Page
Page
set summertime
Page
set timedate
set timezone
telnet
traceroute
Page
Page
Page
8
Table 41 AAA Commands by Usage (continued)
clear accounting
clear authentication admin
clear authentication console
clear authentication dot1x
Page
clear authentication proxy
clear authentication web
clear location policy
clear mac-user
clear mac-user attr
clear mac-user
clear mac-usergroup
clear mac-usergroup attr
clear mobility-profile
clear user
clear user attr
clear user gr oup
clear user lockout
login attempts.
in within the
had
clear usergroup
clear usergroup attr
display aaa
Table 42 describes the fields that can appear in display aaa output.
Table 42 display aaa Output
Page
display accounting
Table 43 describes the fields that can appear in display accounting statistics output.
Table 43 display accounting statistics Output
display location policy
display mobility-profile
set accounting {admin | console}
Page
set accounting {dot1x | mac | web | last-resort}
Page
set authentication admin
Page
set authentication console
Page
set authentication dot1x
Page
Page
Page
Page
Page
Page
set authentication max-attempts
set authentication minimum-password -length
32 characters. Specifying 0 removes the restriction on password
passwords.
characters, type the
set authentication password-restrict
set authentication proxy
set authentication web
Page
set location policy
Page
Page
Page
set mac-user
set mac-user attr
Table 44 Authentication Attributes for Local Users
Page
Page
Page
Page
set mac-usergroup attr
Page
set mobility-profile
Page
set mobility-profile
set user
Page
set user attr
set user expire-password-in
of time can be specified in days (for example, 30 or 30d), hours (720h), or a combination of days
password is
be valid for
set user group
set usergroup
Page
set usergroup expire-password-in
set web-portal
9
clear
clear mobility-domain member
Page
display mobility-domain config
display mobility-domain status
set mobility-domain member
set mobility-domain mode member secondary seed-ip
Page
set mobility-domain mode secondary-seed
secondary seed in a
set mobility-domain mode seed
set domain security
Page
10
Network Domain Commands by
Page
Page
clear network-domain peer
Page
Page
Table 49 describes the fields in the display.
Table 49 Radio-Specific Parameters
Page
set network-domain peer
set network-domain mode seed
11
MAP Access Point Commands by
Page
Page
Page
Page
Page
clear ap local-switching vlan-profile
VLAN
been
clear ap radio
Syntax clear ap ap-num } radio {1 | 2 | all}
single-radio models.)
Table 51 Radio-Specific Parameters
Page
clear ap
clear ap radio load-balancing
group, you can
load
clear radio-profile
clear service-profile
display ap arp
Table 52 describes the fields in this display.
Table 52 Output for display ap arp
display ap config
for MAP 2:
Table 53 Output for display ap config
Page
display ap counters
Examples The following command shows statistics counters for Distributed MAP 7:
Table 54 describes the fields in this display.
Table 54 Output for display ap counters
Page
Page
Page
display ap fdb
display ap qos-stats
display ap etherstats
Table 57 describes the fields in this display.
Table 57 Output of display ap etherstats
display ap gr oup
display ap mesh-links
Table 58 describes the fields in the display ap mesh-links output.
Table 58 Output for display ap mesh-links
Field Description
display ap status
Examples The following command displays the status of a MAP access point:
The following command displays the status of a directly connected MAP:
The following command uses the terse option to display brief information for MAPs:
Table 59 and Table 60 describe the fields in this display.
Table 59 Output for display ap status
Page
Page
Table 60 Output for display ap status terse
display ap vlan
VLANs
display auto-tune attributes
Page
display auto-tune neighbors
Page
Page
display ap connection
Table 64 Output for display ap boot-configuration
Page
display ap global
Page
display ap unconfigured
display load-balancing
dap option.
load-balancing
MAP radios that
display radio-profile
Table 69 describes the fields in this display.
Table 69 Output for display radio-profile
Page
display service-profile
Page
Examples The following command displays information for service profile spl:
Table 70 describes the fields in this display.
Table 70 Output for display service-profile
Page
Page
Page
Page
Page
res et ap
set ap auto
Page
set ap auto persistent
set ap auto radiotype
set ap auto mode
set ap bias
set ap blink
set ap boot- configuration ip
set ap boot- configuration mesh
set ap boot-configuration mesh psk-phrase
string can contain blanks if you use quotatio n
Access
Mesh AP uses to
passphrase
set ap boot-configuration mesh psk-raw
Access
Mesh AP uses to
PSK to
set ap boot-configuration mesh ssid
command to
associate with
set ap boot- configuration switch
set ap boot-configuration vlan
set ap contact
set ap fingerprint
Page
set ap force-image- download
set ap group
set ap location
set ap local-switching
switched by the
7:
set ap local-switching vlan-profile
profile isconfigured, then a default VLAN profile is used. The default VLAN profile
VLAN
profile locals:
set ap name
set ap radio antenna-location
set ap radio antennatype
set ap radio auto-tune max-power
set ap radio auto-tune max- retransmissions
Page
set ap radio channel
set ap radio link-calibration
calibration packets to
for MAP radio 1 on MAP 7:
set ap radio load balancing
Use this
MAP radio 1 on
set ap radio load balancing group
group.
When you
load balancing
set ap radio mode
set ap radio radio-profile
set ap radio tx-power
Page
set ap security
set ap upgrade-firmware
set band-prefer ence
802.11a and
the 802.11a
set load-balancing
Use this
balancing for all
set load-balancing strictness
steer clients to
to the
set radio-profile 11g-only
set radio-profile active-scan
set radio-profile auto-tune 11a-channel-range
set radio-profile auto-tune channel-config
set radio-profile auto-tune channel-holddown
set radio-profile auto-tune channel-interval
set radio-profile auto-tune channel-lockdown
are changed into statically configured channel assignments on the radios. RF Auto-T u
commands
for radios in
set radio-profile auto-tune power-config
set radio-profile auto-tune power-interval
set radio-profile auto-tune power-lockdown
set radio-profile auto-tune power-ramp-interv al
set radio-profile beacon-interval
Page
Page
set radio-profile dtim-interval
set radio-profile frag-threshold
set radio-profile long-retry
set radio-profile max-rx-lifetime
set radio-profile max-tx-lifetime
Page
Page
Page
set radio-profile preamble-length
set radio-profile qos-mode
set radio-profile rfid-mode
set radio-profile rate-enforcement
profile.
Page
set radio-profile rts-threshold
set radio-profile service-profile
Page
Page
Page
Page
Page
set radio-profile short-retry
set radio-profile wmm
set radio-profile wmm-powersave
set service-profile attr
Page
set service-profile auth-dot1x
set service-profile auth-fallthru
set service-profile auth-psk
set service-profile beacon
set service-profile bridging
configuration,
service profile
set service-profile cac-mode
set service-profile cac-session
set service-profile cipher-ccmp
set service-profile cipher-tkip
set service-profile cipher-wep104
set service-profile cipher-wep40
set service-profile cos
set service-profile dhcp-restrict
set service-profile idle-client-probing
set service-profile keep-initial-vlan
set service-profile load-balancing- exempt
balancing for all
balancing.
RF load
set service-profile long-retry-count
set service-profile mesh
set service-profile no-broadcast
set service-profile proxy-arp
set service-profile psk-phrase
set service-profile psk-raw
set service-profile rsn-ie
set service-profile shared-key-auth
set service-profile short-retry-count
set service-profile soda agent-directory
set service-profile soda enforce-checks
set service-profile soda failure-page
set service-profile soda logout-page
Page
set service-profile soda mode
set service-profile soda remediation-acl
set service-profile soda success-page
set service-profile ssid-name
set service-profile ssid-type
set service-profile tkip-mc-time
set service-profile static-cos
set service-profile transmit-rates
Page
set service-profile use-client-dscp
QoS level is
of IP packets
set service-profile user-idle-timeout
set service-profile web-portal-acl
set service-profile web-portal-form
Page
set service-profile web-portal-logout logout-url
the
if you
URL as:
set service-profile web-portal-logout
Web Portal
functionality
set service-profile web-portal-session- timeout
set service-profile wep active-multicast- index
set service-profile wep active-unicast- index
set service-profile wep key-index
set service-profile wpa-ie
Page
12
STP Commands by
Table 74 STP Commands by Usage
clear spantree portcost
clear spantree portpri
clear spantree
clear spantree portvlanpri
Page
display spantree
Table 75 describes the fields in this display.
Table 75 Output for display spantree
Table 75 Output for display spantree (continued)
display spantree backbonefast
Access All. History Introduced in MSS Version 3.0.
Table 75 Output for display spantree (continued)
display spantree blockedports
display spantree portfast
Page
Page
Table 77 describes the fields in this display.
Table 77 Output for display spantree statistics
Page
Table 77 Output for display spantree statistics (continued)
display spantree uplinkfast
set spantree
set spantree backbonefast
set spantree fwddelay
set spantree hello
set spantree maxage
set spantree portcost
set spantree portfast
set spantree portpri
Page
set spantree portvlanpri
set spantree priority
set spantree uplinkfast
Page
Page
13
Table 80 IGMP Commands by Usage
clear igmp statistics
display igmp
Examples The following command displays IGMP information for VLAN orange:
Table 81 describes the fields in this display.
Table 81 Output for display igmp
Table 81 Output for display igmp (continued)
display igmp mrouter
display igmp querier
Page
display igmp receiver-table
Table 84 describes the fields in this display.
Table 84 Output for display igmp receiver-table
Page
Table 85 Output of display igmp statistics
set igmp
set igmp lmqi
set igmp mrouter
set igmp mrsol
set igmp mrsol mrsi
set igmp oqi
set igmp proxy-report
set igmp qi
set igmp qri
set igmp querier
set igmp receiver
set igmp rv
Page
Page
14
Security ACL Commands by
clear security acl
clear security acl map
Page
commit security acl
display security acl
display security acl editbuffer
display security acl hits
display security acl info
display security acl map
display security acl resource-usage
Examples To display security ACL resource usage, type the following command:
Table 87 explains the fields in the display security acl resource-usage output.
Table 87 Output of display security acl resource-usage
Table 87 Output of display security acl resource-usage (continued)
rollback security acl
set security acl
Page
Page
Page
Page
set security acl map
Page
set security acl hit-sample-rate
Page
15
Commands by
crypto ca-certificate
Page
crypto certificate
crypto generate key
crypto generate request
Page
crypto generate self-signed
Page
crypto otp
Page
crypto pkcs12
display crypto ca-certificate
display crypto certificate
Page
display crypto key domain
display crypto key ssh
16
clear radius
clear radius client system-ip
clear radius proxy client
clear radius proxy port
clear radius server
clear server group
set radius
Page
set radius client system-ip
set radius proxy client
set radius proxy port
set radius server
Page
set server group
set server group load-balance
Page
Page
17
clear dot1x bonded-period
clear dot1x max- req
clear dot1x port-control
clear dot1x quiet-period
clear dot1x reauth-max
clear dot1x reauth-period
clear dot1x timeout auth-server
clear dot1x timeout supplicant
clear dot1x tx-period
display dot1x
Type the following command to display the 802.1X configuration:
Type the following command to display 802.1X statistics:
Table 93 explains the counters in the display dot1x stats output.
set dot1x authcontrol
use the authentication specified per port by the set dot1X port-control command.
unconditionally accept all 802.1X authentication attempts with an EAP Success message (ForceAuth).
Table 93 display dot1x stats Output
set dot1x bonded-period
set dot1x key-tx
set dot1x max-req
set dot1x port-control
set dot1x quiet-period
set dot1x reauth
set dot1x reauth-max
set dot1x reauth-period
set dot1x timeout auth-server
set dot1x timeout supplicant
set dot1x tx-period
set dot1x wep-rekey
set dot1x wep-rekey-period
18
Use session management commands to display and clear administrative and network user sessions.
Commands by
clear sessions
Page
clear sessions network
display sessions
Page
Page
display sessions mesh-ap
following
display sessions network
Page
Page
Table 98 display sessions network (summary) Output
Table 99 Additional display sessions network verbose Output
Table 98 display sessions network (summary) Output
Table 99 Additional display sessions network verbose Output (continued)
Table 100 display sessions network session-id Output
Table 100 display sessions network session-id Output (continued)
Page
19
Page
clear rfdetect
clear rfdetect ignore
clear rfdetect ssid-list
Page
rfping
The output of
switch and
Page
Page
display rfdetect clients
Table 103 display rfdetect clients Output
Table 104 display rfdetect clients mac Output
Page
Page
Examples The following command shows counters for rogue activity detected by a WX switch:
display rfdetect data
Table 106 display rfdetect data Output
display rfdetect ignore
display rfdetect
Page
Page
Table 107 and Table 108 describe the fields in these displays.
Table 107 display rfdetect mobility-domain Output
Table 108 display rfdetect mobility-domain ssid or bssid Output
Table 108 display rfdetect mobility-domain ssid or bssid Output (continued)
display rfdetect ssid-list
display rfdetect
display rfdetect visible
Table 109 describes the fields in this display.
Table 109 display rfdetect visible Output
set rfdetect active-scan
Page
set rfdetect
set rf detect
Page
set rfdetect ignore
set rfdetect log
set rfdetect signature
set rfdetect signature key
set rfdetect ssid-list
Page
test rflink
Page
20
Use file management commands to manage system files and to display software and boot information.
Table 111 File Management Commands by Usage
backup
Page
clear boot backup-configuration
clear boot config
copy
Page
delete
dir
Examples The following command displays the files in the root directory:
The following command displays the files in the old subdirectory:
Page
install soda agent
display boot
Table 114 describes the fields in the display boot output.
display config
Syntax display config [area area] [all]
following:
Table 114 Output for display boot
If you do not specify a configuration area, nondefault information for all areas is displayed.
display version
Examples The following command displays version information for a WX switch:
load config
Page
md5
mkdir
Page
reset system
res to re
rmdir
save config
set boot backup-configuration
set boot configuration-file
set boot partition
uninstall soda agent
Page
Page
21
clear log trace
clear trace
display trace
save trace
set trace authentication
set trace authorization
set trace dot1x
set trace sm
Page
22
clear snoop
clear snoop map
set snoop
Page
Page
set snoop map
set snoop mode
display snoop
display snoop info
display snoop map
display snoop stats
Table 118 describes the fields in this display.
Table 118 display snoop stats Output
Page
23
Commands by
clear log
display log buffer
Page
display log config
display log trace
set log
Page
Page
set log mark
Page
24
Boot Prompt Commands by
autoboot
boot
Page
change
create
delete
dhcp
diag
dir
display
Page
fver
help
ls
next
res et
test
version
A
Y
Register Your Product to Gain Service Benefits
Solve Problems Online
Purchase Extended Warranty and Professional Services
Access Software Downloads
Contact Us
Page
Page
Page
Page
I
A
B
C
D
E
F
H
I
L
S
Page
T
U
V
