3CRWXR10095A, 3CRWX120695A, 3CRWX440095A
Wireless LAN Mobility System
 3Com Corporation 350 Campus Drive Marlborough, MA USA
 Contents
 Set system location
Clear banner motd Clear history Clear prompt
 104
102
 126 Display ip alias 127
 187
174 Set summertime 177 Set system ip-address 179
180 Set timezone 181 Display dhcp-client 182
183 Display snmp community 186
 245
 267
MAP Access Point Commands by Usage
272 Clear radio-profile 274 Clear service-profile 275 276
Set user group 258 Set usergroup 259 Set web-aaa 260
 318
 STP Commands
 414
Security ACL Commands by Usage 423 clear security acl
395
Set spantree portvlanpri 396 Set spantree priority 397
 448 Crypto certificate 449
Commands by Usage 447
Display security acl hits 430 Display security acl info 431
432
 503
500
 530
525
525 Display rfdetect visible 526
528
 Clear log trace 562 Clear trace
Dir Display boot 547 Display config 548
549
561
 Register Your Product 607
System LOG Commands
Page
 List conventions that are used throughout this guide
Conventions
  Wireless LAN Switch and Controller Release Notes
 Wireless LAN Switch Manager 3WXM Release Notes
Documentation
  Document part number and revision on the title
Comments
Pddtechpubscomments@3com.com
 Document title
 Example
 Overview
 Clear interface vlan-idip
Set enablepass
Clear fdb dynamic port port-list vlan vlan-id
 Notation
Text Entry
Conventions
MAC Address
 User Globs
Masks
Subnet Masks
Wildcard Masks
 MAC Address Globs
Gives examples of user globs
User Globs
  a single port number. For example
WX1200# set port enable
Vlan Globs
Matching Order for Globs
 Operating systems
Command-Line
WX1200# reset port
Editing
 WX1200# display i Tab
 At your access level, type the help command. For example
Using CLI Help
WX1200# display i?
 WX1200# display ip telnet
Understanding Command Descriptions
Set ap dap name command has the following complete syntax
WX1200# display ip ?
 Usage
Commands by
Disable
Syntax disable Defaults None
 Quit
Enable
 Set enablepass
 Access Commands
 To located commands in this chapter based on their use
System Service Commands
  display banner motd on
Banner with an empty banner by typing the following command
Clear banner motd
Clear history
 Clear system
Clear prompt
 Motd
Display banner
 Base-information
Display
 clear banner motd on
 See Also  set license on
Defaults None Access All
Display license
Display system
 Display system output
Describes the fields of display system output
 Nvram size /SDRAM size percent of total
 Syntax help
WX switch
 Using CLI Help on
Help
  clear history on
Set auto-config
History
Syntax history
 Set auto-config
 Common Name remoteswitch1@example.com
Enable the Dhcp client on Vlan
Enable the auto-config option
WX-1200#crypto generate key admin 1024 key pair generated
  Delimiting character that begins and ends the message
Save the configuration changes
Syntax set banner motd text
 Syntax set confirm on off
Set confirm
See Also  clear banner motd on  display banner motd on
That might have a large impact on the network
 WX4400# set confirm off
Set length
Examples To turn off these confirmation messages, type
WX4400# clear vlan red
 Set license
Installs an upgrade license, for managing more MAPs
See Also  display license on
 Syntax set prompt string
Set prompt
 Country Codes
Set system contact Stores a contact name for the WX switch
Set system
Countrycode
 Country Code
 Country Codes
 WX1200# set system country code CA
Ip-address
Mobility Domain
 ip-addr- IP address, in dotted decimal notation
 Syntax set system name string
Syntax set system location string
 Set system name
 System Service Commands
 Locate commands in this chapter based on their use
Port Commands
  set dap on
That are using the MAP
Clear dap
Removes a Distributed MAP
 Syntax clear port-group name name
Clear port-group
 name name Name of the port group
See Also  set port-groupon  display port-groupon
 See Also  display port status on  set port name on
Clear port
Preference
Clear port name Removes the name assigned to a port
 Port
Clear port type
 display port preference on
 set port preference on
 Counters
Display port
 WX1200 display port counters octets port
Display port-groupShows port group information
Syntax display port-group all name group-name
 Output for display port-group
Describes the fields in the display port-group output
See Also  clear port-groupon  set port-groupon
Describes the fields in this display
 Display port
 WX4400# display port preference Port Preference
Output for display port preference
Syntax display port status port-list
 WX1200# display port status
Output for display port status
  set port speed on
Monitor port
See Also  clear port type on
 set port negotiation on
 Key Controls for Monitor Port Counters Display
 WX4400# monitor port counters
Output for monitor port counters
 Correct length but contained an invalid
 See Also  display port counters on
 Set dap
Reset port
 Port Commands
 Set dap
 Set port
Following command removes Distributed MAP
Administratively disables or reenables a port
Syntax set port enable disable port-list
 With no spaces
See Also  reset port on
Configured together as a single logical link
Single logical link
 Syntax set port port name name
Name or number in other CLI commands
Set port name
See Also  clear port-groupon  display port-groupon
 WX1200# set port negotiation 2 enable
Following command enables autonegotiation on port
Syntax set port negotiation port-listenable disable
WX1200# set port negotiation 3,5 disable
 Set port poe
Access points
Following command enables PoE on ports 4
See Also  set port type ap on  set port type wired-authon
 WX4400# set port preference 2 rj45
Set port speed
Changes the speed of a port
Syntax set port preference port-listrj45
 Set port trap
Set snmp profile command
 WX1200# set port trap 3-4 enable
Mp-352mp-372- MAP access point model
  11a 802.11a  11b 802.11b  11g 802.11g
 poe enable disable Power over Ethernet PoE state
 radiotype 11a 11b 11g Radio type
 Defaults All WX ports are network ports by default
 WX1200# set port type ap 1-3,5 model ap3750 poe enable
MAP Access Port Defaults
WX1200# set port type ap 1-3,5 model ap8250 poe enable
 Set port type
Wired-auth
Before changing the port type from ap to wired-author from
Command
 Vlan membership
Wired Authentication Port Details
 See Also  clear port type on  set port type ap on
 Port Commands
 Vlan Commands
 Deletes an entry from the forwarding database FDB
Clear fdb
Syntax clear fdb perm static dynamic
  display fdb on
Clear vlan
Port from the VLAN, make sure you specify the port number
 Displays entries in the forwarding database
Following command completely removes Vlan marigold
See Also  set vlan port on  display vlan config on
Display fdb
 WX4400# display fdb all
 WX4400# display fdb
Describes the fields in the display fdb output
See Also  clear fdb on
Output for display fdb
 See Also  set fdb agingtime on
Agingtime
 Station
Display roaming
 See Also  display roaming vlan on
Describes the fields in the display
Output for display roaming station
 Syntax display roaming vlan
Output for display roaming vlan
WX4400# display roaming vlan
 Syntax display tunnel
See Also  display vlan config on
Display tunnel
Output for display tunnel
 WX1200# display vlan config burgundy
Display vlan config
Output for display vlan config
Syntax display vlan config vlan-id
 Adds a permanent or static entry to the forwarding database
Set fdb
Syntax set fdb perm static
 Syntax set fdb agingtime vlan-idage seconds
See Also  clear fdb on  display fdb on
 Syntax set vlan vlan-numname name
Set vlan name
See Also  display fdb agingtime on
Creates a Vlan and assigns a number and name to it
 Set vlan port
 Adds ports 1 through 3 to the Vlan
Tag value to be the same but some other switches do
Set vlan
Tunnel-affinity
 See Also  display roaming vlan on  display vlan config on
 To locate commands in this chapter based on their use
IP Services Commands
 DNS
IP Services Commands by Usage
 Syntax clear interface vlan-idip
Access Enabled History Introduced in MSS Version
Clear interface
Removes an IP interface
 See Also  display ip alias on
Clear ip alias
Syntax clear ip alias name
 WX1200# clear ip dns domain
Clear ip dns domain Removes the default DNS domain name
 ip-addr- IP address of a DNS server
Syntax clear ip dns domain
 See Also  display ip route on  set ip route on
Default is an alias for IP address 0.0.0.0/0
Clear ip route
 clear ip dns domain on
 Clear ip telnet
Defaults The default Telnet port number is
Telnet management traffic to its default
Removes an NTP server from a WX switch configuration
 Clear ntp
Update-interval
  display snmp community on
Clear snmp
Community
Syntax clear snmp community name comm-string
 Clear snmp usm
Clear snmp profile
Clear snmp trap
Receiver
 Syntax clear summertime
See Also  set snmp usm on  display snmp usm on
 Use the address
Clear timezone
 Syntax display arp ip-addr
Display arp
Usage All
Shows the ARP table
  set arp agingtime on
 set arp on
Output for display arp
 Output for display interface
Shows the IP aliases configured on the wireless LAN switch
Display ip alias
See Also  set interface on  set interface status on
  set ip alias on
Examples The following command displays the DNS information
Display ip dns
 clear ip alias on
 Syntax display ip https
Display ip https
Shows information about the Https management port
Output for display ip dns
 WX4400# display ip https
Output for display ip https
 WX4400# display ip route
Display ip route
Shows the IP route table
Syntax display ip route destination
 FieldDescription
Output of display ip route
 Syntax display ip telnet
Output for display ip telnet
WX4400 display ip telnet
 Output for display ntp
Examples To display NTP information for a WX switch, type
Display ntp
Shows NTP client information
  set ntp server on  set summertime on  set timezone on
 Display snmp
Configuration
Shows Snmp settings on a wireless LAN switch
Examples To display Snmp settings on a WX switch, type
 Output of display snmp configuration
 WX1200# display summertime
Defaults There is no summertime offset by default
Summertime
Syntax display summertime
 Syntax display timezone
WX1200# display timedate
WX4400# display timezone
  set timedate on  set timezone on
Defaults  count
  traceroute on
Set arp
 WX1200# set arp agingtime
Following command disables ARP aging
See Also  set arp agingtime on
Syntax set arp agingtime seconds
 Set interface
 Dhcp-client
Syntax set interface vlan-idip dhcp-client enable disable
 clear interface on
 Defaults The Dhcp server is enabled by default on a new
Configures the MSS Dhcp server
 enable Enables the Dhcp server
 disable Disables the Dhcp server
 Syntax set interface vlan-idstatus up down
See Also  display dhcp-serveron
 See Also  clear ip alias on  display ip alias on
Aliases as shortcuts in CLI commands
Set ip alias
Set ip dns
 WX1200# set ip dns domain example.com
Syntax set ip dns domain name
 Syntax set ip dns server ip-addrprimary secondary
 Set ip route
WX switch is disabled
Syntax set ip https server enable disable
Syntax set ip route default ip-addr mask
 Set ip route
 Syntax set ip snmp server enable disable
 Secure Shell SSH management traffic
WX4400# set ip snmp server enable
Set ip ssh
 clear snmp notify target on
  set ip ssh server on
Absolute-timeout
 set ip ssh absolute-timeouton
 set ip ssh idle-timeouton
 Also disabled
Idle-timeout
Set ip ssh server
 Telnet management traffic
Maximum number of SSH sessions supported on a WX switch is
Set ip telnet
History -Introduced in MSS Version
 Syntax set ip telnet server enable disable
 Set ntp server
Enables or disables the NTP client on a wireless LAN switch
Configures a wireless LAN switch to use an NTP server
Set ntp
 NTP server
RFC 1305, Network Time Protocol Version 3 Specification
Defaults The default NTP update interval is 64 seconds
Implementation and Analysis
 User. SNMPv3 does not use community strings
Set snmp
 Set snmp community
 Target
Set snmp notify
SNMPv3 with Informs
 Usm trap user username
SNMPv3 with Traps
 SNMPv2c with Informs
 SNMPv1 with Traps
SNMPv2c with Traps
 Success change accepted
 Snmp notification types
 notification-type- Any of the items in Table
 Point
 Snmp notification types
 WX-1200#set snmp notify profile snmpprofrfdetect send
 RFDetectRogueDisappearTraps success change accepted
 Syntax set snmp protocol v1 v2c usm all enable disable
 WX-1200# set snmp security encrypted success change accepted
 Community strings
Versions, use the set snmp community command to configure
Set snmp trap
Set snmp usm
  auth-type none md5 sha auth-pass-phrase string
 IP Services Commands
 Auth-type sha auth-pass-phrase myauthpword
WX-1200# set snmp usm securesnmpmgr1 snmp-engine-id
Encrypt-type 3des encrypt-pass-phrase mycryptpword
 WX1200# set summertime PDT success change accepted
 WX4400# set interface taupe ip 10.10.20.20/24
Following
 WX4400# set timedate date feb 29 2004 time 235800
Sets the time of day and date on the wireless LAN switch
Set timedate
Syntax set timedate date mmm dd yyyy time hhmmss
 Set timezone
It is enabled
WX1200# set timezone PST
 Syntax display dhcp-client
Output for display dhcp-client
WX-1200# display dhcp-client
 WX-1200#display dhcp-server
See Also  set interface dhcp-clienton
Display dhcp-serverDisplays MSS Dhcp server information
Syntax display dhcp-server interface vlan-id verbose
 Output for display dhcp-server
Describe the fields in these displays
Display dhcp-server
 Output for display dhcp-client verbose
See Also  set interface dhcp-serveron
 WX-1200#display snmp community
Displays the configured Snmp community strings
Outpot for display snmp community
Syntax display snmp community
 Syntax display snmp counters
Displays Snmp statistics counters
WX-1200#display snmp counters
 WX-1200#display snmp notify profile
Syntax display snmp notify profile
 Syntax display snmp notify target
See Also  clear snmp profile on  set snmp profile on
WX-1200#display snmp notification target
 User Name of the Snmp user EngineID
Output for display snmp notification target
 WX-1200#display snmp status
Output for display Snmp status
 Switch has booted
 Output for display snmp usm
 display snmp notify target on  display snmp usm on
WX-1200#display snmp usm USM users
 See Also  clear snmp usm on  display snmp usm on
 Opens a Telnet client session with a remote device
Telnet
WX4400# telnet
 See Also  clear sessions on  display sessions on
Defaults
 dnf Disabled
Traceroute
 Ctrl+C
 no-dns- Disabled  port
 queries  size  ttl
 wait
  ping on
Error messages for traceroute
 This chapter presents AAA commands alphabetically. Use to
Locate commands in this chapter based on their use
AAA Commands by Usage
 Display accounting statistics on
 WX4400# clear accounting dot1x Nin
Syntax clear accounting admin dot1x user-glob
 Admin
Clear authentication
 WX4400# clear authentication console Regina
Syntax clear authentication console user-glob
ConsoleConsole
 Syntax clear authentication dot1x ssid ssid-namewired
 Syntax clear authentication mac ssid ssid-namewired
Clear authentication Removes a MAC authentication rule. mac
Syntax clear authentication last-resort ssid ssid-namewired
WX4400# clear authentication last-resort wired
 WX4400# clear authentication mac ssid thatcorp aabbcc
Access Enabled History -Introduced in MSS
Syntax clear authentication proxy ssid ssid-nameuser-glob
  on Clear authentication Removes a WebAAA rule. web
See Also  set authentication proxy on
WX-1200#clear authentication proxy ssid mycorp
 Syntax clear location policy rule-number
 Syntax clear mac-user mac-addr
User who is authenticated by a MAC address
Clear mac-user
Radius server
 For your Radius server
WX switch, for a user who is authenticated by a MAC address
Group
ACL from the profile of a user at MAC address
 Mac-usergroup
Clear
 Mac-usergroup attr
  set mobility-profileon
 set mobility-profile mode on
Mobility-profile
Clear user
  set user on
Database on the WX switch, for a user with a password
Clear user attr
Nin
  clear usergroup on
Clear user group
Clear usergroup
Usergroup
 Syntax clear usergroup group-name attr attribute-name
 Time-Of-Day attribute from the group
Displays all current AAA settings
Secion added to indicate the state of the WebAAA feature
Display aaa
 Display aaa Output
Describes the fields that can appear in display aaa output
 Display aaa Output
 Statistics output
Stored in the local database on the WX switch
Display accounting
Statistics
 Display accounting statistics
  clear location policy on
On an WX switch
Display location
Policy
 Set accounting
Admin console
Are sent
 Authenticated by MAC authentication
Server when the user roams
Accesses the switch using Telnet or Web Manager
Authenticated by
 Set accounting dot1x mac web
 Set authentication
 Set authentication admin
 Following methods in priority order. MSS applies multiple
Through the switch’s console
Completing logon
Globs on
 For more information, see Usage
 Syntax set authentication dot1x ssid ssid-namewired
 Set authentication dot1x
 AAA Commands
 Success change accepted
 Syntax set authentication last-resort
 235
 Syntax set authentication mac
 Set authentication mac
 Proxy
 Syntax set authentication web ssid ssid-namewired
WX-1200#set authentication proxy ssid mycorp ** srvrgrp1
 AAA Commands
 Set location policy
 For details, see Vlan Globs on
 Set location policy
 WX4400# set location policy deny if user eq *.theirfirm.com
 Tempvendora into Vlan kiosk1
Set mac-user
 See Also  clear mac-useron  display aaa on
 Authentication Attributes for Local Users
 Filter-id outboundacl.out
Authentication Attributes for Local Users
 YY/MM/DD-HHMM
 Time-of-day
 WX4400# set mac-user 010203040506 attr filter-id acl-03.in
 Syntax set mac-usergroup
See Also  clear mac-user attr on  display aaa on
 Syntax set mobility-profile name name port none all
See Also  clear mac-usergroup attr on  display aaa on
 AAA Commands
  set user attr on  set usergroup on
Syntax set mobility-profile mode enable disable
 Set user
 Orange
Set user attr
29Jan04
 clear user on
 Server
That exists in the local database on the WX switch
Set user group
 clear user attr on
 To add a user to a group, user the command set user group
Assigns authorization attributes for the group
Set usergroup
 Syntax set web-aaa enable disable
Examples To disable WebAAA, type the following command
Set web-aaa
 Mobility Domain Commands by Usage
To locate commands in this chapter based on their use
 Member
Mobility-domain
 See Also  set mobility-domain member on
Display mobility-domain config
Displays the configuration of the Mobility Domain
Status
 WX4400# display mobility-domain status
Display mobility-domain Output
 Set
Command is rejected
Syntax set mobility-domain member ip-addr
 192.168.1.8
Mode member
Seed, this command overwrites that configuration
Seed-ip
 Syntax set mobility-domain mode seed domain-name
Set mobility-domain mode seed domain-name
 Mobility Domain Commands
 Commands
 Type Command Set ap dap radio auto-tune max-power on
 Set ap dap radio auto-tunemin-client-rateon
 Radio
Clear ap dap
Syntax clear ap port-listdap dap-num radio 1 2 all
 WX1200# clear ap 3 radio
Radio-Specific Parameters
 Syntax clear radio-profile name parameter
 Syntax clear service-profile name
 name Service profile name
 See Also  clear radio-profileon  set radio-profile mode on
 WX4400# display dap config
WX1200# display ap config
 DAP
Output for display ap config
  set port type ap on  set ap dap bias on
 WX1200# display ap counters
 Tkip Pkt Replays
Output for display ap counters
 Ccmp Pkt Replays
See Also  display sessions network on
 WX-1200#display dap qos-stats
Output for display ap dap qos-stats
 Syntax display ap dap etherstats port-listdap-num
Output of display ap etherstats
WX4400# display dap etherstats
  name Name of an MAP group or Distributed MAP group
Access point groups
Syntax display ap dap group name
 Output for display ap group
 set ap dap group on
WX1200# display ap group loadbalance1
 WX4400# display dap status
MAP
 WX1200# display ap status
Output for display ap status
 Output for display ap status
 Syntax display auto-tune attributes
Decide whether to change channel or power settings
Display auto-tune
Attributes
 Output for display auto-tune attributes
See Also  display auto-tune neighbors on
WX1200# display auto-tune attributes ap 2 radio
 Ap map-numradio 1 2all
Neighbors
3Com radio can hear
Syntax display auto-tune neighbors
 Display auto-tune Neighbors ap 2 radio
Output for display auto-tune neighbors
 Display dap
Display dap global command
Connection
 Dap connection serial-id M9DE48B6EAD00
Output of display dap connection
Syntax display dap global dap-numserial-id serial-ID
 WX4400# display dap global
Output for display dap global
 Network port is a member of a Vlan
Unconfigured
But that are not configured on any WX switches
Longer appears in the command’s output
 Syntax display radio-profile name ?
Output for display dap unconfigured
Radio-profile
Displays radio profile information
 Output for display radio-profile
WX4400# display radio-profile default
 Tune Channel
 Ssid
  ? Displays a list of service profiles
Service-profile
Displays service profile information
 name Displays information about the named service profile
 Display service-profile
 Other WPA parameters
 Reset ap dap
 Configurable Template Parameters for Distributed MAPs
Dap auto mode enable command
Usage lists the configurable template parameters and their
Listed in . The commands are listed in the See Also section
 WX1200# set dap auto success change accepted
 Syntax set dap auto mode enable disable
 See Also  set dap auto on
Radiotype
Template
 Radio type  11a-802.11a  11b-802.11b  11g-802.11g
 Syntax set ap port-listdap dap-numauto bias high low
 See Also  display ap dap config on
 Syntax set dap num fingerprint hex
Blink enable disable
  ap port-list- List of MAP access ports to add to the group
 WX1200# set ap 4 group none success change accepted
 Set ap dap name Changes an MAP name
  antennatype ANT5060 ANT5120 ANT5180 internal
 antennatype ANT1060 ANT1120 ANT1180 internal
 Radio 1 2 auto-tune max-power power-level
Set ap dap radio auto-tune max-power
 Radio 1 2 auto-tune max-retransmissions retransmissions
Set ap dap radio auto-tune max- retransmissions
 Set ap dap radio auto-tune max- retransmissions
 Sets an MAP radio’s channel
Set ap dap radio channel
Syntax set ap port-listdap dap-numradio 1
 Set ap dap radio auto-tune min-client-rate
 display ap dap config on
Radio 1 2 auto-tune min-client-rate rate
 Set ap 6 radio 1 min-client-rate
Examples
 Radio 1 2 mode enable disable
Set ap dap radio mode
Enables or disables a radio on an MAP access point
Following command enables radio 2 on ports 1 through
 Defaults None
 Sets an MAP radio’s transmit power
Set ap dap radio tx-power
 Syntax set dap security require none optional
 WX-1200#set dap security require
 Set ap dap
Upgrade-firmware
 11g-only
Set radio-profile
 Syntax set radio-profile name active-scan enable disable
Set radio-profile auto-tune channel-config
 Syntax set radio-profile name auto-tune channel-holddown
Set radio-profile auto-tune channel-holddown
 Syntax set radio-profile name auto-tune channel-interval
Set radio-profile auto-tune channel-interval
 Syntax set radio-profile name auto-tune power-backoff-timer
Set radio-profile auto-tune power-backoff- timer
 WX4400# set radio-profile rp2 auto-tune power-backoff-timer
Set radio-profile auto-tune power-config
 Set radio-profile auto-tune power-interval
 Beacon-interval
 Following command disables countermeasures in radio profile
Clients from being able to use rogue access points
 rogue Configures radios to attack rogues only
Defaults Countermeasures are disabled by default
 Syntax set radio-profile name dtim-interval interval
 Syntax set radio-profile name long-retry threshold
Syntax set radio-profile name frag-threshold threshold
 Syntax set radio-profile name max-rx-lifetime time
 Syntax set radio-profile name max-tx-lifetime time
 Mode
 Set radio-profile mode
 WX4400# set radio-profile rp1 mode enable
 Syntax set radio-profile name
 Syntax set radio-profile name rts-threshold threshold
Syntax set radio-profile name service-profile name
 Parameter Default Value To Default Value
Defaults for Service Profile Parameters
 Set radio-profile auth-psk command
 349
 Wmm
Short-retry
 Syntax set service-profile Name auth-dot1x enable disable
 WPA IE
 Set service-profile auth-fallthru
 Syntax set service-profile name auth-psk enable disable
 Syntax set service-profile name beaconed enable disable
 Cipher-ccmp
Set service-profile
 Cipher-tkip
 Cipher-wep104
Use the set service-profile wep commands
 Cipher-wep40
 Syntax set service-profile name psk-phrase passphrase
 Syntax set service-profile name psk-raw hex
 Syntax set service-profile name rsn-ie enable disable
See Also  set service-profilecipher-ccmpon
 Syntax set service-profile name ssid-name ssid-name
Set service-profile auth-psk command
 Syntax
See Also  set service-profilessid-typeon
 Syntax set service-profile name tkip-mc-time wait-time
See Also  set service-profilessid-nameon
 WX4400# mkdir corpa-ssid success change accepted
Ssid managed by the service profile
Syntax set service-profile name web-aaa-form url
Web-aaa-form
  copy on  dir on
Set service-profile wep active-multicast- index
 mkdir on
 Syntax set service-profile name wep active-unicast-index num
Set service-profile wep active-unicast- index
 Wep key-index
 Syntax set service-profile name wpa-ie enable disable
 Table to locate commands in this chapter based on their use
STP Commands by
STP Commands by Usage
 Syntax clear spantree portcost port-list
STP root bridge in all VLANs on a WX switch
Clear spantree
Portcost
  set spantree portpri on
Portpri
Portvlancost
 clear spantree portvlanpri on
  clear spantree portcost on
Portvlanpri
 See Also  display spantree statistics on
 clear spantree portpri on
 Syntax display spantree
Spantree vlan default
 Root
Output for display spantree
  display spantree blockedports on
Or disabled
Display spantree
Backbonefast
  set spantree backbonefast on
Blockedports
See Also  display spantree on
 Output for display spantree portfast
Portfast
For one or more network ports
See Also  set spantree portfast on
 Syntax display spantree statistics
Port’s VLANs
 port-list- List of ports
Syntax display spantree portvlancost port-list
 WX4400# display spantree statistics
 Topology change Timer value Hold timer
 Vlan Vlan ID
Output for display spantree statistics
 Configpending
 Switch is the root or is attempting to become the root
 Syntax display spantree uplinkfast vlan vlan-id
See Also  clear spantree statistics on
  set spantree uplinkfast on
Set spantree
 An indirect link
Examples The following command enables STP on all VLANs
Configured on a WX switch
Following command disables STP on Vlan burgundy
  display spantree backbonefast on
Fwddelay
  all Changes the maximum age on all VLANs
Issues a topology change message
Maxage
VLANs to 4 seconds
 65,535. STP selects lower-cost paths over higher-cost paths
Type. lists the defaults for STP port path cost
STP Port Path Cost Defaults
Path to the STP root bridge
 Portvlancost command
 Syntax set spantree portpri port-listpriority value
See Also  display spantree portfast on
 To 20 in Vlan mauve
Bridge for a specific Vlan on a wireless LAN switch
 all Changes the cost on all VLANs
Type. See on
  all Changes the priority on all VLANs
Path to the STP root bridge, on one Vlan or all VLANs
Ports
Highest priority through 255 lowest priority
 Uplinkfast
Priority
 See Also  display spantree uplinkfast on
 Igmp Commands by Usage
Igmp Snooping Commands
 Display igmp
Clear igmp statistics
See Also display igmp statistics on
 TTL
 Output for display igmp
 TTL
 Syntax display igmp mrouter vlan vlan-id
Mrouter
WX1200# display igmp Mrouter vlan orange
 Only one querier
Defaults None Access Enabled
Syntax display igmp querier vlan vlan-id
 WX1200# display igmp querier vlan red
WX1200# display igmp querier vlan default
Output for display igmp mrouter
WX1200# display igmp querier vlan orange
  set igmp querier on
Receiver-table
 Output for display igmp receiver-table
See Also  set igmp receiver on
Igmp Receiver-table group 237.255.255.0/24
 WX1200# display igmp statistics vlan orange
Shows Igmp statistics
 vlan vlan-id Vlan name or number. If you do not specify a
Syntax display igmp statistics vlan vlan-id
 From the multicast routers in the subnet
Output of display igmp statistics
 See Also  set igmp rv on
Wireless LAN switch
 From 1 through 65,535
VLANs on a wireless LAN switch
VLAN, the timer change applies to all VLANs
Set igmp lmqi
 See Also  display igmp statistics on
Syntax set igmp mrouter port port-listenable disable
 See Also  set igmp mrsol mrsi on
Enables or disables multicast router solicitation by a WX
Syntax set igmp mrsol enable disable vlan vlan-id
Set igmp mrsol
 Syntax set igmp oqi seconds vlan vlan-id
Set igmp oqi
See Also  set igmp mrsol on
All VLANs on a WX
  set igmp qri on
Set igmp
Proxy-report
 set igmp lmqi on
 Syntax set igmp qi seconds vlan vlan-id
Set igmp qi
 VLANs on a WX
Set igmp qri
Group. You can specify a value from 1 through 65,535
 Syntax set igmp receiver port port-listenable disable
Syntax set igmp querier enable disable vlan vlan-id
See Also  display igmp querier on
 Set igmp rv
 Set igmp rv
 Igmp Snooping Commands
 Security ACL
Security ACL Commands
 Syntax clear security acl acl-name all editbuffer-index
 WX4400# commit security acl acl133 configuration accepted
 Syntax clear security acl map acl-nameall vlan vlan-id
 Syntax commit security acl acl-nameall
 WX4400# display security acl
WX4400# commit security acl all
Syntax display security acl dscp
 Syntax display security acl editbuffer
Examples The following command displays the table
See Also  set security acl on
WX-1200#display security acl dscp
 Syntax display security acl hits
WX4400# display security acl editbuffer
 WX4400# display security acl hits
See Also  hit-sample-rateon  set security acl on
Syntax display security acl info acl-nameall editbuffer
 Syntax display security acl map acl-name
Display security acl
Map
Security ACL is assigned
 WX4400# display security acl map acl111
Resource-usage
ACL acl111 is mapped
Support for your Product on
 WX4400# display security acl resource-usage
 Output of display security acl resource-usage
 Output of display security acl resource-usage
 Packets filtered by the security ACL or hits
Hit-sample-rate
Syntax hit-sample-rate seconds
 Syntax rollback security acl acl-nameall
 Protocol, or IP, ICMP, TCP, or UDP packet information
Set security acl
 By TCP packets
By Icmp packets
By UDP packets
  ip  tcp  udp  icmp
 Security ACL Commands
 Set security acl
 WX4400# set security acl ip acl123 deny 192.168.2.11
 Set security acl map
 Security ACL Commands
 Cryptography Commands by Usage
To locate commands in this chapter based on their use
 Syntax crypto ca-certificate admin eap webaaa
 See Also  display crypto ca-certificateon
Syntax crypto certificate admin eap webaaa
 Access Enabled History -Introduced in MSS Version
 See Also display crypto key ssh on
Syntax crypto generate key admin eap ssh webaaa 512 1024
 Syntax crypto generate request admin eap webaaa
 Email Address admin@example.com
WX4400# crypto generate request admin
 See Also  crypto certificate on  crypto generate key on
Syntax crypto generate self-signed admin eap webaaa
 WX4400# crypto generate self-signed admin
 Crypto otp
  crypto pkcs12 on
Crypto pkcs12
 WX4400# crypto otp eap hap9iN#ss
See Also  crypto otp on
 Display crypto ca-certificate Output
Display crypto
Ca-certificate
Pkcs #7 certificate
 Describes the fields of the display
On the WX switch
Syntax display crypto certificate admin eap webaaa
Certificate
 Syntax display crypto key ssh
See Also crypto generate key on
 Cryptography Commands
 Radius Commands by Usage
Locate commands in this chapter based on their uses
 Clear radius
 Syntax clear radius client system-ip
See Also  display aaa on  set radius client system-ipon
 Syntax clear radius proxy port all
See Also  set radius proxy client on
See Also  set radius proxy port on
Syntax clear radius proxy client all
 Syntax clear radius server server-name
See Also  display aaa on  set radius server on
Syntax clear server group group-nameload-balance
  set server group on
Set radius
 System-ip
Set radius client
 clear radius server on
 WX4400# set radius client system-ipsuccess change accepted
 Port
Set radius proxy
 clear radius proxy client on
 To 32 characters long, with no spaces or tabs
 Set radius server
 WX1200# set server group shorebirds members heron egret
  group-name- Server group name of up to 32 characters
Load-balance group
Sandpiper
 Radius and Server Group Commands
 Performance
On the switch
Commands on
802.1X Commands by Usage
 See Also  display dot1x on  set dot1x bonded-periodon
Resets the Bonded Auth period to its default value
Clear dot1x
Bonded-period
  set dot1x max-reqon
Port-control
 Quiet-period
 See Also  display dot1x on  set dot1x reauth-periodon
Reauth-max
Reauth-period
 set dot1x reauth-maxon
 Supplicant
 set dot1x timeout auth-serveron
 set dot1x timeout supplicant on
Auth-server
 Display dot1x
Tx-period
 set dot1x tx-periodon
 WX4400# display dot1x clients
WX1200# display dot1x config
 Explains the counters in the display dot1x stats output
Type the following command to display 802.1X statistics
WX4400# display dot1x stats
 Set dot1x
Port-control command
Authcontrol
 Machine to start reauthentication for the user
Authentication is enabled
Examples To enable per-port 802.1X authentication on wired
Authentication ports, type the following command
 See Also  display dot1x on  clear dot1x bonded-periodon
Syntax set dot1x key-tx enable disable
 See Also  clear dot1x max-reqon  display dot1x on
See Also  display dot1x on
 See Also  display port status on  display dot1x on
Authentication dot1X command
 Syntax set dot1x reauth enable disable
To a supplicant after a failed authentication
Syntax set dot1x quiet-period seconds
 See Also  display dot1x on  clear dot1x reauth-maxon
Before the supplicant client becomes unauthorized
Syntax set dot1x reauth-max number-of-attempts
 See Also  display dot1x on  clear dot1x reauth-periodon
Set dot1x timeout
Attempts reauthentication
Out a request to a Radius authentication server
 Syntax set dot1x timeout supplicant seconds
Out an authentication session with a supplicant client
Syntax set dot1x tx-period seconds
 Broadcast and multicast encryption keys
Syntax set dot1X wep-rekey enable disable
Wep-rekey
See Also  display dot1x on  clear dot1x tx-periodon
 To 300 seconds
Defaults The default is 1800 seconds 30 minutes
Wep-rekey-period
 seconds Specify a value between 30 and 1,641,600 19 days
 Telnet sessions
Clear sessions
 VLANs, or session ID
Network
 WX4400# clear sessions network mac-addr
To clear session 9, type the following command
WX1200# clear sessions network session-id
 Display sessions
 WX4400 display sessions console
WX4400 display sessions admin
WX4400 display sessions telnet
 Display sessions telnet client Output
See Also  clear sessions on
 Syntax display sessions network
 WX1200# display sessions network mac-addr 00055d7e981a
 Summary display See on  Verbose display See on
 display sessions network session-id display See on
WX1200# display sessions network
 WX1200# display sessions network session-id
WX1200# display sessions network verbose
 Additional display sessions network verbose Output
Display sessions network summary Output
 Time
 Display sessions network session-id Output
802.1X protocol on a wired authentication port
 See Also  clear sessions network on
 Session Management Commands
 RF Detection Commands by Usage
To locate the commands in this chapter based on their use
 Removes a MAC address from the attack list
Examples The following command clears MAC address
Clear rfdetect
Attack-list
 Countermeasures Mac Clear rfdetect
Black-list
Ignore
  set rfdetect ssid-liston
Ssid-list
 display rfdetect ignore on
 set rfdetect ignore on
  display rfdetect vendor-liston
Vendor-list
Display rfdetect
 set rfdetect vendor-liston
 RF Detection Commands
 Display rfdetect countermeasures Output
Countermeasures
Mobility Domain
Domain
 Data
Displays information about the APs detected by a WX switch
Syntax display rfdetect data
 WX1200# display rfdetect data
Display rfdetect data Output
 Syntax display rfdetect ignore
Ignore list
WX4400# display rfdetect ignore Total number of entries
 WS1200# display rfdetect mobility-domain
Bssid mac-addr Displays rogues that are using the specified
During RF detection scans
Syntax display rfdetect mobility-domain
 WS1200# display rfdetect mobility-domain ssid 3Com-webaaa
Ssid 3Com-webaaa
 Display rfdetect mobility-domain Output
Following command displays detailed information for a Bssid
WX1200# display rfdetect mobility-domain bssid 000b0e0004d1
 Display rfdetect mobility-domain ssid or bssid Output
  clear rfdetect ssid-liston
WX switch
 display rfdetect data on
Displays the entries in the permitted Ssid list
 Visible
Display ap dap status command
 WX1200# display rfdetect visible Radio
Display rfdetect visible Output
 Active-scan
Set rfdetect
Addresses of APs and clients
 Configured. WX switches do not share client black lists
Configured. WX switches do not share attack lists
Examples The following command adds MAC address
Defaults The client black list is empty by default
 Countermeasures Mac Set rfdetect ignore
Set rf detect
 See Also  display log buffer on
 Signature
WX switches in a Mobility Domain
 Device’s OUI is in the permitted vendor list
Examples The following command adds Ssid mycorp to the list
Only for the SSIDs that are on the list
Permitted SSIDs
 Syntax display rfdetect attack-list
Trailing 000000 value is required
WX1200# display rfdetect attack-list
 WX1200# display rfdetect black-list
Displays the wireless clients detected by an WX switch
Clients
Syntax display rfdetect black-list
 WX1200# display rfdetect Clients
Display rfdetect clients Output
 Display rfdetect clients mac Output
 From the wired side of the network addressed to
 File Management Commands
  tftp/ip-addr/filename- Name of the archive file to create
Dir command output
Locally on the switch
Tape archive tar format
 Syntax clear boot config
  Copies a file from a Tftp server to nonvolatile storage
 reset system on
Copy
Performs the following copy operations
 WX4400# copy floorwx tftp//10.1.1.1/floorwx
WX4400# copy test-config new-config
 Syntax delete url
File or the running configuration
Delete
Immediately deletes the specified file
 Dir
  copy on  delete on
Describes the fields in the dir output
Output for dir
 Describes the fields in the display boot output
Display boot
Reboot and configured for use after the next reboot
Access Access
 Displays the configuration running on the WX switch
Display config
Syntax display config area area all
 Display version
See Also  load config on  save config on
And, optionally, for any attached MAP access points
WX4400# display config area vlan
 WX1200# display version details
WX1200# display version
 Output for display version
Load config
Running configuration with the commands in the loaded file
Describes the fields in the display version output
 WX4400# load config testconfig1
Following command loads configuration file testconfig1
Syntax load config url
WX4400# load config
 Creates a new subdirectory in nonvolatile storage
Mkdir
 Restarts an WX switch and reboots the software
Reset system
 dir on  rmdir on
 Generate new key pairs and certificates on the switch
Restore
 Removes a subdirectory from nonvolatile storage
 backup on
WX1200# restore system tftp/10.10.20.9/sysabak
Rmdir
  dir on  mkdir on
Save config
Saves the running configuration to a configuration file
Syntax save config filename
 Testconfig1
Set boot
Configuration-file
Configuration
 Syntax set boot partition boot0 boot1
 File Management Commands
 Trace Commands
 Deletes the log messages stored in the trace buffer
Deletes running trace commands and ends trace processes
Clear log trace
Clear trace
 WX4400# display trace
WX switch, or all possible trace options
Display trace
Syntax display trace all
 Save trace
Authentication
Set trace
 See Also  clear trace on  display trace on
Authorization
 Set trace dot1x
 Syntax set trace sm mac-addr mac-address port port-num
Set trace sm
 Trace Commands
 Snoop Commands
 Clear snoop map
Clear snoop
 display snoop info on
  display snoop map on
Set snoop
 set snoop map on
 display snoop on
 Chapter Snoop Commands
 WX1200# set snoop snoop1 observer 10.10.30.2 snap-length
 Radio 2 of the MAP. This option does not apply to
Set snoop map
Filter
Radio 1 of the MAP
 All snoop filters
Set snoop mode
To an MAP radio and enable the filter
Enable stop-afternum-pkts- Enables the snoop filter
 Displays the MAP radio mapping for all snoop filters
Display snoop map command
For all snoop filters configured on a WX switch
Display snoop
 WX1200# display snoop info snoop1
Display snoop info Shows the configured snoop filters
See Also  clear snoop on
Syntax display snoop filter-name
 Examples display snoop stats filter-namedap-numradio
Snoop map snoop1
 Display snoop stats Output
Snoop1
Snoop stats snoop1
 Chapter Snoop Commands
 Syntax clear log buffer server ip-addr
Clear log
 See Also  clear log trace on
 Log buffer facility ?
You can view event messages archived in the buffer
WX4400# display log buffer facility AAA
  set log on  clear log on
 display log config on
Log config
 clear log on
 Syntax display log trace +-/number-of-messages
 Address in dotted decimal notation
Set log
Storage
 console Sets log parameters for console sessions
  trace Sets log parameters for trace files
 See Also
 Set log trace
See Also  display log config on
Mbytes
 System LOG Commands
 Boot Prompt
Boot Prompt Commands
 Autoboot
  FN=filename System image filename
Boot
 BT=type Boot type
 DEV=device Location of the system image file
  change on  display on
 Syntax change
Change
 Syntax create
Create
 Syntax delete
Usage When you type the delete command, the next-lower
Examples To remove the currently active boot profile, type
Profiles, see display on
 Syntax diag
Diag
 Syntax display Defaults None
  change on  create on  delete on  next on
Output of display command
 Fver
  ls on
For an individual command
 command-name- Boot prompt command
Displays a list of the boot prompt commands
 Syntax next
Next
 Command at the boot prompt
Reset
Resets a WX switch’s hardware
Syntax reset
 Test
 on Enables the poweron test flag
 OFF Disables the poweron test flag
Defaults The poweron test flag is disabled by default
 Syntax version
Dir or fver command
Type the following command at the boot prompt
Version
 Purchase
Services
Register Your
Product
 Downloads
Access Software
Troubleshoot
Online
 Contact Us
 Latsupportanc@3com.com
Country Telephone Number
 Index
 Delete 544, 597 diag Dir 545, 598 disable 33 display
 Index
 Index
 Index
 Traceroute Version