Siemens SCALANCE W1750D CLI Function Manual

Siemens SCALANCE W1750D CLI Function Manual

Simatic net industrial wireless lan
Table of Contents

Advertisement

Quick Links

SIMATIC NET
Industrial Wireless LAN
SCALANCE W1750D CLI
Function Manual
03/2019
C79000-G8976-C452-04
About this guide
___________________
Security recommendations
___________________
SCALANCE W CLI
___________________
___________________
CLI Commands
___________________
Appendix A
1
2
3
4
A

Advertisement

Table of Contents
loading

Summary of Contents for Siemens SCALANCE W1750D CLI

  • Page 1 About this guide ___________________ Security recommendations ___________________ SIMATIC NET SCALANCE W CLI ___________________ ___________________ CLI Commands Industrial Wireless LAN SCALANCE W1750D CLI ___________________ Appendix A Function Manual 03/2019 C79000-G8976-C452-04...
  • Page 2 Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems.
  • Page 3: Table Of Contents

    ............................46 4.1.23 ap1x-peap-user ........................47 4.1.24 ap-frequent-scan ........................48 4.1.25 ap-installation .......................... 49 4.1.26 apply............................49 4.1.27 arm ............................50 4.1.28 attack............................56 4.1.29 auth-failure-blacklist-time ......................57 4.1.30 auth-survivability cache-time-out .................... 58 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 4 ......................93 4.4.12 dpi ............................94 4.4.13 dpi-error-page-url ........................95 4.4.14 dynamic-cpu-mgmt ........................ 95 4.4.15 dynamic-dns ........................... 96 4.4.16 dynamic-dns-ap........................98 4.4.17 dynamic-dns-interval ......................99 4.4.18 dynamic-radius-proxy ......................100 4.4.19 dynamic-tacacs-proxy ......................100 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 5 4.9.2 ids............................160 4.9.3 ignore-image-check ......................168 4.9.4 inactivity-ap-timeout ......................169 4.9.5 inbound-firewall ........................170 4.9.6 internal-domains ........................172 4.9.7 iot transportProfile ......................... 173 4.9.8 iot usetransportProfile ......................177 4.9.9 ip-address ..........................178 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 6 4.14.9 proxy ............................ 219 4.15 R ............................221 4.15.1 radius-vsa-redirect-url ......................221 4.15.2 reload ........................... 222 4.15.3 remove-blacklist-client ......................223 4.15.4 reset drt ..........................224 4.15.5 restrict-corp-access ......................224 4.15.6 restrict-mgmt-access ......................225 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 7 ..................... 319 4.16.43 show ap debug auth-trace-buf ....................320 4.16.44 show ap debug ble-config ..................... 321 4.16.45 show ap debug ble-counters ....................323 4.16.46 show ap debug ble-daemon ....................323 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 8 ..........................404 4.16.93 show attack .......................... 405 4.16.94 show audit-trail ........................407 4.16.95 show auth-surviveability ....................... 408 4.16.96 show backup-config ......................409 4.16.97 show banner ......................... 411 4.16.98 show blacklist-client ......................412 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 9 ......................514 4.16.146 show ip igmp ......................... 515 4.16.147 show ip interface ........................517 4.16.148 show ip route ......................... 518 4.16.149 show ipv6 interface ....................... 519 4.16.150 show ipv6 route ........................520 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 10 ........................567 4.16.197 show rlts-logs ........................568 4.16.198 show rlts-tags ........................569 4.16.199 show running-config ......................569 4.16.200 show snmp-configuration ..................... 573 4.16.201 show snmp trap-queue ......................574 4.16.202 show ssh ..........................575 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 11 ......................... 632 4.17 T ............................633 4.17.1 telnet ............................. 633 4.17.2 telnet-server .......................... 633 4.17.3 terminal-access ........................634 4.17.4 tftp-dump-server ........................635 4.17.5 traceroute ..........................636 4.17.6 time-range ..........................636 4.18 U ............................639 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 12 ....................... 718 4.21 X ............................721 4.21.1 xml-api-server ........................721 4.22 Z ............................723 4.22.1 zeroize-tpm-keys ........................723 4.22.2 zonenmane .......................... 724 Appendix A ............................725 Glossary of Terms ........................ 725 Index ..............................757 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 13: About This Guide

    Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers’...
  • Page 14 About this guide SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 15: Security Recommendations

    ● Keep the software up to date. Check regularly for security updates of the product. You will find information on this on the Internet pages "Industrial Security (https://www.siemens.com/industrialsecurity)" . ● Inform yourself regularly about security advisories and bulletins published by Siemens ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm). ● Only activate protocols that you really require to use the device.
  • Page 16 ● Verify certificates and fingerprints on the server and client to avoid "man in the middle" attacks. ● We recommend that you use certificates with a key length of 2048 bits. ● Change keys and certificates immediately, if there is a suspicion of compromise. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 17 ● Factory setting – Open: The factory setting of the port is "Open". – Closed: The factory setting of the port is "Closed". ● Authentication Specifies whether or not the protocol is authenticated. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 18 UDP/8612 Open Open (dTable) RADIUS UDP/1616 Open Open UDP/1892 Open Open SNMPv1 UDP/161 Open Open SNMPv3 UDP/161 Open Open TCP/22 Open Open TCP/2322 Open Open Syslog UDP/514 Open Open Telnet TCP/23 Open Open SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 19: Scalance W Cli

    You can use the question mark (?) to view the commands available in a privileged mode, configuration mode, or sub-mode Note Although automatic completion is supported for some commands such as configure terminal, the complete exit and end commands must be entered at command prompt for successful execution. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 20 You can exit a sub-command mode and return to the basic configuration mode or the privileged Exec (enable) mode at any time by executing the exit or end command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 21 Using Sequence Sensitive Commands The SCALANcE W CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, Siemens recommends that you remove the existing configuration before adding or modifying the configuration details for sequence-sensitive commands. You can either delete an existing profile or remove a specific configuration by using the no…...
  • Page 22: Saving Configuration Changes

    AP to reboot. Verify the current network loads and conditions before executing the commands that enforce a reboot of the AP, as they may cause a momentary disruption in service as the unit resets. command resets an AP. reload SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 23: Command Line Editing

    Clear the line. Ctrl W Delete Word Delete the characters from the cursor up to and including the first space encountered. Ctrl X Delete Left Delete all characters to the left of the cursor. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 24: Specifying Addresses And Identifiers In Commands

    AP. Use the same format as for a MAC address. ESSID Typically the unique logical name of a wireless network. If the ESSID includes spaces, enclose the name in quotation marks. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 25: Typographic Conventions

    Note Indicates helpful suggestions, pertinent information, and important things to remember. NOTICE Indicates a risk of damage to your hardware or loss of data. WARNING Indicates a risk of personal injury or death. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 26: Industry Online Support

    3.5 Industry Online Support Industry Online Support In addition to the product documentation, also check out the comprehensive online information platform of Siemens Industry Online Support at the following Internet address: https://support.industry.siemens.com/cs/en/ Apart from news, there you will also find: ●...
  • Page 27: Cli Commands

    Use this command to configure radio channels for the 5 GHz band for a specific AP. Example The following example configures the 5 GHz radio channel: (scalance)# a-channel 44 18 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 28: Aaa Dns-Query-Interval

    Use this command to configure the time interval for sending out dns queries. Example The following example shows the output of the aaa dns-query-interval command: 20:4c:03:24:89:18 (config) # aaa dns-query-interval 15 Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 29: Aaa Radius-Attributes

    RADIUS attributes recognized by the Mobility Master. To add a RADIUS attribute to the list, use the aaa radius-attributes command. Example The following command adds the VSA-User-Role: (scalance) (config)# aaa radius-attributes add User-Role 1 string vendor Siemens 4239 Command Information AP Platform Command Mode...
  • Page 30: Aaa Radius Modifier

    (scalance) (Radius Modifier Profile "radmodifier1") # no exclude BW-Area-Code Example for modified attribute Default attributes to carry to radius server can be modified with include option. (scalance) Radius Modifier Profile "radmodifier1") # include "Siemens -location-id" static "Shim- office" SCALANCE W1750D CLI...
  • Page 31: Aaa Test-Server

    The following example shows the output of the aaa test-server command: Authentication is successful Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.1.6 a-ant-pol Description This command configures the antenna polarization value for 5 GHz radio channels. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 32: Advanced-Zone

    ● A zone can be assigned to a maximum of up to 16 SSIDs. However, if the extended SSID is disabled, a zone can be assigned to a maximum of up to 14 SSIDs wherein the first two virtual APs are reserved for mesh. Syntax advanced-zone no… SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 33: Aeroscout-Rtls

    RTLS. You can also send the RFID tag information for the stations that are not associated with any AP. Example The following example configures the Aeroscout RTLS server: (scalance)(config)# aeroscout-rtls 192.0.2.2 3030 include-unassoc-sta (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 34: Airgroup

    When dlna-only command is executed with enable, the DLNA support is enabled for AirGroup enabled devices. When mdns-only command is executed with enable, the Bonjour support is enabled for AirGroup enabled devices. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 35 (scalance)(airgroup)# enable (scalance)(airgroup)# cppm enforce-registration (scalance)(airgroup)# cppm-server Test (scalance)(airgroup)# cppm-query-interval 10 (scalance)(airgroup)# enable-guest-multicast (scalance)(airgroup)# multi-swarm (scalance)(airgroup)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and AirGroup configuration sub-mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 36: Airgroupservice

    DLNA Print—This service is used by printers that support DLNA. • You can allow all services or add custom services. Up to 10 services can be configured on an AP. description Adds a description to the AirGroup service profile. — <description> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 37: Airwave-Rtls

    4.1.11 airwave-rtls Description This command integrates AirWave RTLS settings for Scalance W and sends the RFID tag information to an AirWave RTLS server with the RTLS feed to accurately locate the wireless clients. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 38: Ale-Report-Interval

    (scalance)(config) # airwave-rtls ams-ip 192.0.2.3 3030 pass@1234 5 include-unassoc- Command Information AP Platform Command Mode All platforms Configuration mode 4.1.12 ale-report-interval Description This command configures the interval at which an AP sends data to the ALE server. Syntax ale-report-interval <seconds> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 39: Ale-Server

    Allows you to specify the FQDN or IP address of the ALE server. er> no… Removes the specified configuration parameter. Usage Guidelines Use this command to enable an AP for ALE support. Example The following example configures the ALE server details: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 40: Alg

    Use this command to functions such as SIP, Vocera, and Cisco Skinny protocols for ALG. Example The following example configures the ALG protocols: (scalance)(config)# alg (scalance)(ALG)# sccp-disable (scalance)(ALG)# no sip-disable (scalance)(ALG)# no vocera-disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 41: Allowed-Ap

    Usage Guidelines Use this command to allow an AP to join the cluster. Example The following command configures an allowed AP: (scalance)(config)# allowed-ap 01:23:45:67:89:AB Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 42: Allow-New-Aps

    (scalance)(config)# allow-new-aps Command Information AP Platform Command Mode All platforms Configuration mode 4.1.17 a-max-clients Description This command configures the maximum number of clients allowed for an SSID profile on a 5 GHz radio channel. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 43: Ams-Backup-Ip

    <IP-address or domain name> no… Parameter Description <IP-address or domain Configures the IP address or domain name of the secondary Air- name> Wave Management Server. no… Removes the specified configuration parameter. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 44: Ams-Identity

    Groups tab in the AirWave UI. Usage Guidelines Use this command to assign an identity for the APs monitored or managed by the AirWave Management Server. Example The following command configures an AirWave identifier: (scalance)(config)# ams-identity aruba SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 45: Ams-Ip

    The following command configures the AirWave Management Server. (scalance)(config)# ams-ip 192.0.1.2 Command Information AP Platform Command Mode All platforms Configuration mode 4.1.21 ams-key Description This command assigns a shared key for service authorization. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 46: Ap1X

    Configures TLS based 802.1X authentication type. Configures a factory- installed TPM certificate for AP authentication. validate-server Validates the authentication server credentials against the CA certifi- cate in the AP database. no… Removes the configuration. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 47: Ap1X-Peap-User

    This configuration is required for AP to authenticate as 802.1X supplicant against the wired ports that are configured to use 802.1X protocols for authenticating clients. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 48: Ap-Frequent-Scan

    Example The following example triggers the ARM to perform frequent scanning on a 2.4 GHz frequency band radio profile: (scalance)# ap-frequent-scan 2.4 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 49: Ap-Installation

    This command is used to save or apply the configuration settings on the AP. Syntax apply {cplogo-install| cplogo-uninstall| debug-command| delta-config} Parameter Description cplogo-install Installs the captive portal logo on the AP. cplogo-uninstall Uninstalls the captive portal logo on the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 50: Arm

    This command assigns an ARM profile for an AP and configures ARM features such as band steering, spectrum load balancing, airtime fairness mode, and access control features. Syntax 80mhz-support a-channels <channel> air-time-fairness-mode {<default-access>| <fair-access>| <preferred-access>} backoff-time <secs> band-steering-mode {balance-bands|prefer-5ghz| force-5ghz| disable} channel-quality-aware-arm-disable channel-quality-threshold channel-quality-wait-time client-aware SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 51 802.11a or 802.11g clients get more air- time than 802.11b. The ratio is 16:4:1. backoff-time <secs> Configures the time when an AP backs off 10 - 3600 after requesting a new channel or power. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 52 AP will not change channels for the Access Points when clients are active, except for high priority events such as radar or ex- cessive noise. The client aware feature must be enabled in most deployments for a stable WLAN. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 53 Configures the maximum number of requests 0 - 100 for client match nb-matching <per- Configures a percentage value to be consid- 20 - 100% centage> ered in the same virtual RF neighborhood of Client match. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 54 AP is not supported by the AP model, the value is reduced to the highest supported power setting. NOTE: Higher power level settings may be constrained by local regulatory requirements and AP capabilities. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 55 The following example configures an ARM profile: (scalance)(config)# arm (scalance)(ARM)# 80mhz-support (scalance)(ARM)# a-channels 44 (scalance)(ARM)# min-tx-power 18 (scalance)(ARM)# max-tx-power 127 (scalance)(ARM)# band-steering-mode prefer-5ghz (scalance)(ARM)# air-time-fairness-mode fair-access (scalance)(ARM)# backoff-time 600 (scalance)(ARM)# scanning (scalance)(ARM)# client-aware SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 56: Attack

    APs. Enabling this parameter triggers alerts when a known client on the AP spoofs the base MAC ad- dress of the AP. no… Removes the specified configuration parameter. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 57: Auth-Failure-Blacklist-Time

    Usage Guidelines Use this command to dynamically blacklist the clients that exceed the authentication failure threshold configured for a network profile. Example The following example blacklists the clients dynamically: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 58: Auth-Survivability Cache-Time-Out

    To enable the authentication survivability feature, use the auth-survivability in WLAN SSID profile sub-mode. Example (scalance) (config)# auth-survivability cache-time-out 60 Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 59: Banner

    (scalance)(config)# banner motd "######welcome to login instant###########" (scalance)(config)# banner motd "####please start to input admin and password#########" (scalance)(config)# banner motd "###Don't leak the password###" (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 60: Blacklist-Client

    Command Information AP Platform Command Mode All platforms Configuration mode 4.2.3 blacklist-time Description This command sets the duration in seconds for which the clients can be blacklisted due to an ACL rule trigger. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 61: Ble

    (scalance) (config) # blacklist-time 30 Command Information AP Platform Command Mode All platforms Configuration mode 4.2.4 Description This command enables BLE beacon management by BMC and configures the BLE operation mode. Syntax config <token> <url> mgmt-server <type> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 62 BLE Console needs to be enabled. PersistentConsole: The built-in BLE chip of the AP • provides access to the AP console over BLE and also operates in the Beaconing mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 63 (scalance)(config)# end (scalance)(config)# commit apply The following example enables the beaconing BLE operation mode: (scalance)(config)# ble mode beaconing (scalance)(config)# end (scalance)(config)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 64: Calea

    In the United States, SPs are required to ensure LI compliance based on CALEA specifications. LI compliance in the United States is specified by the CALEA. Configuration Manual For more information on configuringAPs for CALEA integration, see "SCALANCE W UI" SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 65: Cellular-Uplink-Profile

    This command provisions the cellular (3G or 4G) uplink profiles on an AP. Syntax cellular-uplink-profile <profile> 4g- usb-type <4G-usb-type> modem-country <modem-country> modem-isp <modem_isp> usb-auth-type <usb_authentication_type> usb-dev <usb-dev> usb-dial <usb-dial> usb-init <usb-init> usb-modeswitch <usb-modeswitch> usb-passwd <usb-passwd> usb-tty <usb-tty> usb-type <usb-type> usb-user <usb-user> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 66 Internet backhaul to a network. The 3G or 4G USB modems can be used to extend client connectivity to places where an Ethernet uplink cannot be configured. This enables the APs to automatically choose the available network in a specific region. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 67 (scalance)(config) # cellular-uplink-profile (scalance)(cellular-uplink-profile)# usb-type rndis-uml295 (scalance)(cellular-uplink-profile)# usb-dev 0x10a96064 (scalance)(cellular-uplink-profile)# usb-tty ttyACM0 (scalance)(cellular-uplink-profile)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and cellular uplink profile configuration sub-mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 68: Clarity

    These statistics are sent to AirWave to derive conclusions on the client connectivity issues. Example The following example configures a clarity profile: (scalance)(config)# clarity (scalance)(clarity)# inline-auth-stats (scalance)(clarity)# inline-dhcp-stats (scalance)(clarity)# inline-dns-stats (scalance)(clarity)# inline-sta-stats (scalance)(clarity)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 69: Clear

    Usage Guidelines Use the clear command to clear the current information stored in the running configuration of an AP Example The following command clears all information related to an AP: (scalance)# clear ap 192.0.2.3 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 70: Clear Airgroup State Statistics

    This command is used to delete the DHCP option 82 XML file from the AP. This command must be executed only from the master AP. Further, this will be allowed only if the XML file is disabled from the configure terminal. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 71: Clear-Cert

    All platforms Privileged EXEC mode 4.3.7 clear-cert Description This command clears client and server customized CA certificates from the AP database. Syntax clear-cert airwaveca ap1x ap1xca clearpassca datatunnel datatunnelca default [clearpassca] radsec radsecca server SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 72: Clock Set

    The following command shows an example for clearing server certificates: (scalance)# clear-cert server Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.3.8 clock set Description This command sets the date and time on the AP system clock. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 73: Clock Summer-Time

    Privileged EXEC mode 4.3.9 clock summer-time Description This command configures daylight saving for the time zones that support DST. Syntax clock summer-time <timezone> recurring <start-week> <start-day> <start-month> <start- hour> <eweek> <eday> <emonth> <ehour> no… SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 74 The following example configures daylight saving for a timezone: (scalance)(config)# clock summer-time PST recurring 7 10 March 9PM 38 10 October 9PM (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 75: Clock Timezone

    All platforms Configuration mode 4.3.11 cluster-security Description This command enables cluster security in DTLS mode and also provides an option for users to allow or deny a DTLS connection for low assurance APs. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 76 (scalance)(config)# cluster-security (scalance)(cluster-security)# allow-low-assurance-devices (scalance)(cluster-security)# end (scalance)# commit apply The following example allows a non-DTLS slave AP to join a DTLS enabled cluster: (scalance)(config)# cluster-security (scalance)(cluster-security)# no disallow-non-dtls-slaves (scalance)(cluster-security)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 77: Cluster-Security Logging

    Set the log-level to debug to log only the control messages. debug1 Set the log level to debug1 to log both control and data messages. Usage Guidelines Use this command to change the per module logging level of cluster security. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 78: Commit

    The changes configured in a CLI session are saved in the CLI context. The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session: therefore, Siemens recommends that you configure fewer changes at a time and apply the changes at regular intervals.
  • Page 79: Configure Terminal

    The following command allows you to enter configuration commands: (scalance) # configure terminal Command Information AP Platform Command Mode All platforms Privileged EXEC mode. 4.3.15 console Description This command enables console access to an AP through the serial port SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 80: Content-Filtering

    Console configuration sub mode 4.3.16 content-filtering Description This command enables content filtering feature. When content filtering is enabled on an SSID, all DNS requests to non-corporate domains on this wireless network are sent to OpenDNS. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 81: Convert-Aos-Ap

    Command Information AP Platform Command Mode All platforms Configuration mode 4.3.17 convert-aos-ap Description This command allows you to provision an AP as a Campus AP or Remote AP in a controller- based network. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 82: Copy

    This command copies files to and from the AP. Syntax copy config tftp <ip-address> <filename> core-file tftp <ip-address> flash tftp <ip-address> <filename> tftp <ip-address> <filename> {ap1x {ca|cert} <password> format pem}| cpserver cert <password> format {p12|pem}| clearpassca| portal logo| radsec {ca|cert <password>} SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 83 TFTP server to the AP database. Example The following example copies a configuration file to the TFTP server: (scalance)# copy config tftp 10.0.0.1 filename.cfg Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 84: Custom_Var

    Disables the custom string length that has been set. — Example The following example sets the custom string length: (scalance)# custom_var 12 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 85: Debug-Rtls-Logs

    This command disables bridging traffic between two clients of an AP on the same VLAN. Bridging traffic between the clients will be sent to the upstream device to make the forwarding decision. Syntax deny-inter-user-bridging SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 86: Deny-Local-Routing

    This command disables routing traffic between two clients of an AP on different VLANs. Routing traffic between the clients will be sent to the upstream device to make the forwarding decision. Syntax deny-local-routing no… Parameter Description deny-local-routing Disables local routing of traffic. no… Removes the configuration. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 87: Device-Id

    Configures an ID for the AP device. Usage Guidelines Use this command to configure a device identification. Example The following example configures a device ID: (scalance)(config)# device-ID Device1 (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 88: Dhcp

    Removes the DHCP option 82 XML based configuration. Example The following command configures DPI support: (scalance)(config)# dhcp option82-xml file (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 89: Disable-Prov-Ssid

    This command disconnects the clients from an AP. Syntax disconnect-user {<addr>|all|mac <mac>| network <name>} Parameter Description <addr> Allows you to disconnect a client by specifying the IP address of the client. Disconnects all users associated with an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 90: Dot-11A-Radio-Disable

    Removes the radio profile from the disabled mode. Usage Guidelines Use this command to disable a 5 GHz radio profile on an AP. Example The following example disables the 5 GHz radio profile: (scalance)# dot11a-radio-disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 91: Dot11G-Radio-Disable

    Privileged EXEC mode. 4.4.10 download-cert Description This command allows you to download the authentication, captive portal and RadSec server certificates, and CA certificates from an FTP or TFTP server, or through an HTTP URL. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 92 Captive portal certificate—PEM format with PSK • RadSec—PEM format with PSK • Usage Guidelines Use this command to download certificates. Example The following command shows an example for downloading CA client certificates: (scalance)# download-cert ca ftp://192.0.2.7 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 93: Download-Dhcpopt82

    XML file omitting any whitespace characters in the file. This command must be executed only from master AP. Example The following command shows an example for downloading DHCP option 82: (scalance)# download-dhcpopt82 xml http://10.20.52.131/googledhcp.xml Command Information AP Platform Command Mode All platforms Privileged EXEC mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 94: Dpi

    SCALANCE W UI” “ and the wlan access-rule command page. Example The following command configures DPI support: (scalance)(config)# dpi (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 95: Dpi-Error-Page-Url

    Command Information AP Platform Command Mode All platforms Configuration mode 4.4.14 dynamic-cpu-mgmt Description This command enables or disables the dynamic CPU management feature, to manage resources across different functions performed by an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 96: Dynamic-Dns

    All platforms Configuration mode 4.4.15 dynamic-dns Description This command makes a one time dynamic update of the DNS records of the AP and its clients after the user has manually configured the dns values. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 97 The following example manually deletes the SOA record. (scalance)# dynamic-dns delete 10.17.132.7 test.ddns host-anand 10.17.132.85 key hmac- sha1:arubaddns:16YuLPdH21rQ6PuK9udsVLtJw3Y= (scalance)# commit apply Note The colon (:) functions as an input separator in the shared secret key entry. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 98: Dynamic-Dns-Ap

    Usage Guidelines Dynamic DNS configuration is allowed only on Master APs. Example The following example enables the dynamic dns feature: (scalance)(config)# dynamic-dns-ap (scalance)(config)# dynamic-dns-ap key hmac- sha1:arubaddns:16YuLPdH21rQ6PuK9udsVLtJw3Y= (scalance)(config)# dynamic-dns-ap server 10.1.1.23 (scalance)(config)# end SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 99: Dynamic-Dns-Interval

    Use this command to set a time interval during which the DNS are periodically updated on the server. Example The following example configures a DDNS time interval: (scalance)(config)# dynamic-dns-interval 900 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 100: Dynamic-Radius-Proxy

    AP Platform Command Mode All platforms Configuration mode 4.4.19 dynamic-tacacs-proxy Description This command enables the Virtual Controller network to use the IP Address of the Virtual Controller for communication with external TACACS servers. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 101 APs to the external TACACS server. Example The following example enables the dynamic TACACS proxy feature: (scalance)(config)# dynamic-tacacs-proxy (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 102: Enet-Vlan

    VLAN as the native VLAN of the upstream switch, to which the AP is connected. Example The following example configures a non-default VLAN value for the Ethernet ports: (scalance)(config)# enet-vlan 200 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 103: Enet0-Bridging

    <pro- Assigns a wired profile to the Ethernet 0 interface port. file> Usage Guidelines Use this command to assign a wired profile to the Ethernet 0 port to activate the wired profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 104: Enet1-Port-Profile

    Use this command to assign a wired profile to the Ethernet 1 port to activate the wired profile. Example The following command assigns a wired profile to the Ethernet 1 port: (scalance)(config)# enet1-port-profile <name> (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 105: Enet3-Port-Profile

    Description This command assigns a wired profile to the ENET 2 port on an AP. Syntax enet2-port-profile <profile> Parameter Description enet2-port-profile <pro- Assigns a wired profile to the ENET 2 interface port. file> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 106: Enet4-Port-Profile

    Use this command to assign a wired profile to the ENET 4 port to activate the wired profile. Example The following command assigns a wired profile to the ENET 4 port: (scalance)(config)# enet4-port-profile <name> (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 107: Enhanced-Mesh-Role-Detect

    Use this command to enhance mesh role detection during AP boot up and AP running time. Example Thq following example enables the configuration of extended SSIDs: (scalance)(config)# enhanced-mesh-role-detect (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 108: Extended-Ssid

    SSIDs. With the Extended SSID option enabled, you can create up to 16 WLANs. Example The following example enables the configuration of extended SSIDs: (scalance)(config)# extended-ssid (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 109: Facebook

    AP with Facebook. Command Information AP Platform Command Mode All platforms Configuration mode 4.6.2 factory-ssid-enable Description This command resets the AP to use the factory configuration. Syntax factory-ssid-enable Parameter Description factory-ssid-enable Enables factory SSID configuration. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 110: Firewall

    Inbound Firewall rule is set using the Scalance W UI, the user rules take precedence over the guest VLAN ACL expansion and overrides the auto-expanded rules. However, the corporate and local VLAN expansions will continue to take precedence over the user rules. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 111: Firewall-External-Enforcement

    Configures PAN firewall IP address on the port <port> Configures a port for the PAN firewall. 1 ... 65535 user <name> <pass- Configures administrator user credentials of word> PAN firewall on an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 112 (scalance)(firewall-external-enforcement pan)# ip 192.0.2.11 (scalance)(firewall-external-enforcement pan)# port 443 (scalance)(firewall-external-enforcement pan)# user admin1 admin1 (scalance)(firewall-external-enforcement pan)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and firewall-external- enforcement sub-mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 113: G-Channel

    The following example configures the 2.4 GHz radio channel: (scalance)# g-channel 11 18 Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.7.2 g-ant-pol Description This command configures the antenna polarization value for 2.4 GHz radio channels. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 114: G-Max-Clients

    Denotes the SSID profile for which the maximum clients — limit is to be configured. <max-clients> Denotes the maximum number of clients that can be con- 1 to 255. figured on the 2.4 GHz radio channel of the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 115: Gre

    This command allows you to manually configure an IPv4 or IPv6 GRE tunnel on an AP. Syntax primary <name> backup <name> disable-preemption disable-reconnect-user-on-failover hold-time <hold_time> per-ap-tunnel ping-frequency <freq> ping-retry-count <new_count> reconnect-time-on-failover <down_time> > type <type no… SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 116 The following example configures a IPv4 or IPv6 GRE tunnel : (scalance)(config)# gre primary pendpoint@arubanetworks.com (scalance)(config)# gre backup sendpoint@arubanetworks.com (scalance)(config)# gre disable-preemption (scalance)(config)# gre disable-reconnect-user-on-failover (scalance)(config)# gre hold-time 600 (scalance)(config)# gre per-ap-tunnel (scalance)(config)# gre ping-frequency 15 (scalance)(config)# gre ping-retry-count <new_count> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 117 CLI Commands 4.7 G (scalance)(config)# gre reconnect-time-on-failover <down_time> (scalance)(config)# gre type 25944 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 118: Hash-Mgmt-Password

    (scalance) # commit apply Command Information AP Platform Command Mode All platforms Configuration mode 4.8.2 hash-mgmt-user Description This command is used to configure management users by using clear text or hash as the password input. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 119 (scalance) # commit apply The following examples removes a management user with read-only privilege: (scalance)(config) # no hash-mgmt-user read-only (scalance)(config) # end (scalance) # commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 120: Help

    Ctrl-T ..transpose previous character Ctrl-P ..go to previous line in history buffer Ctrl-N ..go to next line in history buffer Ctrl-Z ..return to root command prompt Tab ..command-line completion SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 121: Hostname

    The hostname is used as the default prompt. You can use any alphanumeric character, punctuation, or symbol characters. When spaces, plus symbols (+), question marks (?), or asterisks (*) are used, enclose the text in quotes. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 122: Hotspot Anqp-3-Gpp-Profile

    GAS query response from an AP in a cellular network hotspot. The 3GPP MCC and the 12-bit Mobile Network Code data in the IE can help the client select a 3GPP network when associated with a hotspot profile and enabled on a WLAN SSID profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 123: Hotspot Anqp-Domain-Name-Profile

    Parameter Description hotspot anqp-domain- Creates a domain profile. name-profile <profile-name> domain-name <domain- Configures a domain name of the hotspot operator. name> enable Enables the configuration profile. no… Removes the existing configuration SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 124: Hotspot-Anqp-Ip-Addr-Avail-Profile

    GAS query response. Syntax hotspot anqp-ip-addr-avail-profile <profile-name> enable ipv4-addr-avail ipv6-addr-avail no… Parameter Description hotspot anqp-ip-addr- Creates an ANQP IP Address availability profile. avail-profile <profile-name> enable Enables the IP address availability profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 125 (scalance)(IP-addr-avail "default")# ipv4-addr-avail (scalance)(IP-addr-avail "default")# ipv6-addr-avail (scalance)(IP-addr-avail "default")# enable (scalance)(IP-addr-avail "default")# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and the ANQP IP address availability profile configuration sub-mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 126: Hotspot Anqp-Nai-Realm-Profile

    Use the nai-realm-auth-id-1 command to send the one of the following authentication methods for the primary NAI realm ID. Use the nai-realm-auth-id-2 command to send the one of the following authentication methods for the secondary NAI realm ID. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 127 2 authentication value for the authentication method specified by nai-realm-auth-id-1. Use the nai-realm- auth-value-2 command to select the authentication value for the authentication method specified by nai- realm-auth-id-2. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 128 • eap as the authentication value For non-eap-inner-auth<auth-ID> specify any of • the following values: – reserved – – chap – mschap – mschapv2 nai-realm-eap- Configures an EAP method for NAI realm. method SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 129 NAI realm elements that are included as part of a GAS Response frame. Example The following example creates an NAI realm profile: (scalance)(config)# hotspot anqp-nai-realm-profile home (scalance)(nai-realm "home")# nai-realm-name home-hotspot.com (scalance)(nai-realm "home")# nai-realm-encoding utf8 (scalance)(nai-realm "home")# nai-realm-eap-method eap-sim (scalance)(nai-realm "home")# nai-realm-auth-id-1 non-eap-inner-auth SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 130: Hotspot Anqp-Nwk-Auth-Profile

    Description Range hotspot anqp-nwk- Configures an ANQP network authentication profile. — auth-profile <profile-name> enable Enables the network authentication profile. — nwk-auth-type Defines the network Authentication type being used — by the hotspot network. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 131 (scalance)(network-auth "default")# nwk-auth-type dns-redirection (scalance)(network-auth "default")# url http://www.example.com (scalance)(network-auth "default")# enable (scalance)(network-auth "default")# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and the ANQP network authentication profile configuration sub-mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 132: Hotspot Anqp-Roam-Cons-Profile

    AP transmitting this IE. Example The following command defines the roaming consortium OI and OI length in the ANQP roaming consortium profile: (scalance)(config)# hotspot anqp-roam-cons-profile profile1 (scalance)(roaming-consortium "profile1")# roam-cons-oi 506F9A SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 133: Hotspot Anqp-Venue-Name-Profile

    <language> venue- name <name> venue-type <type> no… Parameter Description Range Default hotspot anqp- Creates a ANQP venue name pro- — — venue-name- profile file. <profile-name> enable Enables the ANQP venue name — — profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 134 Use this command to configure the venue group and venue type in an ANQP Venue Name profile. If a client uses the GAS to post an ANQP query to an Access Point, the AP will return ANQP Information Elements with the values configured in this profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 135 • attorney-office • unspecified • educational school-primary • school-secondary • univ-or-college • unspecified • factory-and-industrial factory • unspecified • institutional hospital • long-term-care • alc-drug-rehab • group-home • prison-or-jail • unspecified • SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 136 The following command defines an ANQP Venue Name profile for a shopping mall: (scalance)(config)# hotspot anqp-venue-name-profile Mall1 (scalance)(venue-name "Mall1")# venue-name ShoppingCenter1 (scalance)(venue-name "Mall1")# venue-group mercantile (scalance)(venue-name "Mall1")# venue-type shopping-mall (scalance)(venue-name "Mall1")# venue-lang-code EN (scalance)(venue-name "Mall1")# enable (scalance)(venue-name "Mall1")# end SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 137: Hotspot H2Qp-Conn-Cap-Profile

    Enables the connection capability H2QP profile. esp-port Enables the ESP port used by IPsec VPNs. (port 0) icmp Indicates that the ICMP port is enabled and available. (port 0) tcp-ftp Enables the FTP port. (port 20) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 138: Hotspot H2Qp-Oper-Class-Profile

    All platforms Configuration mode and the H2QP connection capability profile configuration sub-mode 4.8.13 hotspot h2qp-oper-class-profile Description This command configures a H2QP profile that defines the Operating Class to be sent in the H2QP IE. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 139 (scalance)(config) # hotspot h2qp-oper-class-profile Profile1 (scalance)(operator-class"Profile1")# op-class 1 (scalance)(operator-class"Profile1")# enable (scalance)(operator-class"Profile1")# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and the H2QP operating class profile configuration sub-mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 140: Hotspot-H2Qp-Oper-Name-Profile

    Example The following example configures an operator friendly profile: (scalance)(config)# hotspot h2qp-oper-name-profile Profile1 (scalance)(operator-friendly-name "Profile1")# op-fr-name hotspot1 (scalance)(operator-friendly-name "Profile1")# op-lang-code EN (scalance)(operator-friendly-name "Profile1")# enable (scalance)(operator-friendly-name "Profile1")# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 141: Hotspot H2Qp-Osu-Provider-Profile

    <lang code> icon1-file <idx> <File Name> icon1-height <height> icon1-lang-code <lang code> icon1-type <file type> icon1-width <width> icon2-file <idx> <File Name> icon2-height <height> icon2-lang-code <lang code> icon2-type <file type> icon2-width <width> iconfile-count <count> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 142 Indicates the language used in the — — first icon image. icon1-type Type of the image file used as first — — icon. icon1-width Width of the first icon image file 1 ... 256 — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 143 Number of descriptions to be provided — — for the OSU provider Usage Guidelines Use this command to create an OSU provider profile that can be attached to a hotspot profile for enabling wireless devices to use OSU. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 144 (scalance) (osu-provider OSU) # srvc-desc1-hex (scalance) (osu-provider OSU) # srvc-desc2-lang-code kor (scalance) (osu-provider OSU) # srvc-desc2 "" (scalance) (osu-provider OSU) # srvc-desc2-hex ed858cec8aa4ed8ab820ebaaa9eca081ec9cbceba19c20ebacb4eba38c20ec849cebb984ec8aa4 (scalance) (osu-provider OSU) # osu-server-uri https://osu-server.r2-testbed-aru.wi- fi.org:443/guest/HotSpot2OnlineSignUp.php (scalance) (osu-provider OSU) # osu-method SOAP-XML SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 145: Hotspot H2Qp-Wan-Metrics-Profile

    1-100 <load> downlink that is currently utilized. If no (unspecified) value is set, this parameter will show a default value of 0 to indicate that the downlink speed is unknown or unspec- ified. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 146 WAN link to the Internet. Example The following example configures a WAN metric profile: (scalance)(config)# hotspot h2qp-wan-metrics-profile Wan1 (scalance)(WAN-metrics "Wan1")# at-capacity (scalance)(WAN-metrics "Wan1")# downlink-load 5 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 147: Hotspot Hs-Profile

    Description This command configures a hotspot profile for an 802.11u public access service provider. Syntax hotspot hs-profile <profile-name> access-network-type <type> addtl-roam-cons-ois <addtl-roam-cons-ois> advertisement-profile {anqp-3gpp-profile |anqp-domain-name-profile |anqp-ip-addr--profile |anqp-nai-realm-profile |anqp-nwk-auth-profile |anqp-roam-cons-profile |anqp-venue-name-profile |h2qp-conn-cap-profile |h2qp-oper-class-profile |h2qp-osu-provider-profile SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 148 <delay> group-frame-block hessid <id> internet osen osu-nai <osu-nai> osu-ssid <ssid> p2p-cross-connect p2p-dev-mgmt pame-bi qos-map-excp qos-map-range query-response-length-limit <len> roam-cons-len-1 0|3|5 roam-cons-len-2 0|3|5 roam-cons-len-3 0|3|5 roam-cons-oi-1 <roam-cons-oi-1> roam-cons-oi-2 <roam-cons-oi-1> roam-cons-oi-3 <roam-cons-oi-1> venue-group <venue-group> venue-type <venue-type> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 149 Configures the number of additional roaming consor- — — tium OIs advertised bythe AP. This feature supports <addtl-roam- cons-ois> up to three additional OIs, which are defined using the roam-cons-oi-1, roam-cons-oi-2 and roam-cons-oi-3 parameters. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 150 Allows the AP to send an — — Information Element indicating that the network allows the Internet access. By default, a hotspot profile does not advertise network internet access. Removes any existing configuration. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 151 Request frame, the responding AP will provide the query response (or information on how to receive the query response) in a GAS Initial Response frame. release-number Indicates the release number of Hotspot. 1 - 2 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 152 • NOTE: This parameter only defines the venue group advertised in the IEs from hotspot APs. To define the venue group to be included in ANQP responses, use anqp-venue- name-profile <profile-name> command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 153 If the client does recognize the OI, that client can send a GAS query to the AP to request more information more about the network before associating. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 154 OI length, and the venue group and venue type associated with those OIs. Venue Types The following list describes the different venue types for each venue group: Venue Group Associated Venue Type Value unspecified — The associated numeric value is 0. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 155 1. • ong-term-care—The associated numeric value is 2. • alc-drug-rehab—The associated numeric value is 3. • group-home—The associated numeric value is 4. • prison-or-jail—The associated numeric value is 5. • SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 156 6 • Example The following commands configure a hotspot profile: (scalance)(config)# hotspot hs-profile hs1 (scalance)(Hotspot2.0 "hs1")# enable (scalance)(Hotspot2.0 "hs1")# comeback-mode (scalance)(Hotspot2.0 "hs1")# gas-comeback-delay 10 (scalance)(Hotspot2.0 "hs1")# no asra SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 157: Hs2-Osu-Icon-Delete

    Command Information AP Platform Command Mode All platforms Configuration mode and the hotspot profile con- figuration sub- mode 4.8.18 hs2-osu-icon-delete Description This command deletes the specified OSU icon file downloaded in the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 158: Hs2-Osu-Icon-Download

    Usage Guidelines se this command to download the icon file from a stored location. The icon file is downloaded from the specified location and stored in flash with the specified index as reference. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 159 Example To download the icon file to the AP, execute the following command: (scalance)# hs2-osu-icon-download <idx> <ftp/tftp/http URL syntax> (scalance)# commit apply Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 160: Iap-Master

    Example The following example provisions a master AP: (scalance)# iap-master Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.9.2 Description This command configures an IDS policy for an AP. Syntax SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 161 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 162 AP tha tassumes the BSSID and ESSID of a valid AP. AP impersonation attacks can be done for man-in-the-middle attacks, a rogue AP attempting to bypass detection, or a honeypot attack. detect-ap-spoofing Enables AP Spoofing detection. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 163 OUI checking causes analarm to be trig- gered if anunrecognized MAC address is inuse. detect-malformed- Enables detection of malformed association — — assoc-req requests. detect-malformed- Enables detection of malformed authentica- — — frame- auth tion frames SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 164 When AP impersonation is detect- ed, both the legitimate and impersonating AP are disabled using a denial of service attack. protect-ssid Enables use of SSID by valid APs only. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 165 AP that is being contained. deauth-only— Enables Containment using deauthentication only. none— Disables wireless containment. tarpit-all-sta—Enables wireless containment by tarpit of all stations. tarpit-non-valid-sta— Enables wireless con- tainment by tarpit of non-valid clients SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 166 ● Off ● Low ● Medium ● High Example The following example configures detection and protection policies: (scalance)(config)# ids (scalance)(IDS)# infrastructure-detection-level low (scalance)(IDS)# client-detection-level low (scalance)(IDS)# infrastructure-protection-level low (scalance)(IDS)# client-protection-level low (scalance)(IDS)# wireless-containment deauth-only SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 167 (scalance)(IDS)# detect-invalid-addresscombination (scalance)(IDS)# detect-malformed-htie (scalance)(IDS)# detect-malformed-assoc-req (scalance)(IDS)# detect-malformed-frame-auth (scalance)(IDS)# detect-overflow-ie (scalance)(IDS)# detect-overflow-eapol-key (scalance)(IDS)# detect-beacon-wrong-channel (scalance)(IDS)# detect-invalid-mac-oui (scalance)(IDS)# detect-valid-clientmisassociation (scalance)(IDS)# detect-disconnect-sta (scalance)(IDS)# detect-omerta-attack (scalance)(IDS)# detect-fatajack (scalance)(IDS)# detect-block-ack-attack (scalance)(IDS)# detect-hotspotter-attack (scalance)(IDS)# detect-unencrypted-valid (scalance)(IDS)# detect-power-save-dos-attack (scalance)(IDS)# detect-eap-rate-anomaly SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 168: Ignore-Image-Check

    AP boots up and every week thereafter. Syntax ignore-image-check Usage Guidelines Use this command to disable the automatic image check feature. Example The following example disables the image check feature: (scalance)# ignore-image-check SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 169: Inactivity-Ap-Timeout

    Use this command to configure an inactivity timeout interval for an AP. Example The following example configures the inactivity timeout interval: (scalance)(config)# inactivity-ap-timeout 180 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 170: Inbound-Firewall

    Specifies the starting port number from which the 1-65534 — rule applies. <eport> Specifies the ending port number until which the 1-65534 — rule applies dst-nat Allows the AP to perform destination NAT on — — packets. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 171 Note Management access to the AP is allowed irrespective of the inbound firewall rule. For more information on configuring restricted management access, see restricted-mgmt-access. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 172: Internal-Domains

    <domain-name> no… Parameter Description Range Default internal-domains Enables the internal-domain configuration — — sub-mode domain-name <domain- name> Defines the valid domain names — — no… Removes any existing configuration — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 173: Iot Transportprofile

    BLE information from an AP to an endpoint server. Syntax iot transportProfile <profile> ageFilter <ageout> authenticationURL <url> cellSizeFilter <cellsize> endpointID <id> endpointToken <token> endpointType {Meridian-Asset-Tracking | Meridian-Beacon-Management | ZF | telemetry-https | telemetry-websocket} endpointURL <url> movementFilter <threshold> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 174 Size is specified in meters. Setting to 0 disables the cell size filter. endpointID <id> Endpoint ID of the IoT management — — server endpointToken <to- Endpoint token of the IoT manage- — — ken> ment server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 175 Setting to 0 disables the movement filter. uuidFilter Denotes the universal unique identi- — — fiers (UUIDs) through comma sepa- rated strings. password <password> Endpoint password. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 176 5 to 3600 sec- — <interval> onds username <user> Endpoint user name. — 300 seconds no… Removes any existing configuration. — — Usage Guidelines Use this command to create or modify an IoT transport profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 177: Iot Usetransportprofile

    Syntax iot usetransportProfile <profile> Parameter Description <profile> Type of IoT management server profile. Example The following example sets an IoT transport profile: (scalance)(config)# iot usetransportProfile sample (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 178: Ip-Address

    Use this command to assign a static IP address to the AP. Example The following example configures an IP address for the AP. (scalance)# ip-address 192.0.2.0 255.255.255.0 192.0.2.3 192.0.2.2 example.com Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 179: Ip Dhcp

    <exclude_address> host <mac> ip-range <start_IP> <end_IP> lease-time <lease_time> option <option_type> <option_value> option82 {alu|xml} reserve {first <count>| last <count>} server-type <server_type> server-vlan <idx> subnet <subnet> subnet-mask <Subnet-Mask> vlan-ip <VLAN_IP> mask <VLAN mask> no… SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 180 <dhcp_ Defines the IP address of the corporate — — server> DHCP server for DHCP request relay. dynamic-dns Enables dynamic dns updates for this pool. — Disabled SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 181 Based on the size of the subnet, the IP addresses that come before or after the IP address value specified in this field are excluded. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 182 To enable ALU based DHCP option 82, ensure that dhcp-option82-xml is disabled. reserve {first Reserves the first few and last few IP ad- — — <count>| last dresses in the subnet. <count>} SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 183 The network address is translated appropriately and the packet is forwarded through the IPSec tunnel or through the uplink. This DHCP assignment mode is used for the NAT forwarding mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 184 "MCIPADD=10.72.80.34,MCPORT=1719,TFTPSRVR=10.80.0.5,L2Q=1,L2QVLAN=2,L2QAUD=5,L2QSIG=3 " (scalance)(DHCP Profile"corpNetwork1")# end (scalance)# commit apply The following example configures a Distributed,L3 DHCP scope: (scalance)(DHCP Profile <profile-name>)# ip dhcp server-type <Distributed,L3> (scalance)(DHCP Profile <profile-name>)# server-vlan <vlan-ID> (scalance)(DHCP Profile <profile-name>)# client-count <number> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 185: Ip Dhcp Pool

    All platforms Configuration mode and IP DHCP profile configu- ration sub- mode. 4.9.11 ip dhcp pool Description This command configures a DHCP pool on the Virtual Controller. Syntax ip dhcp pool dns-cache dns-server <IP-address> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 186 DHCP pool, the AP answers the request. Example The following command configures a DHCP pool: (scalance)(config)# ip dhcp pool (scalance)(DHCP)# domain-name example.com (scalance)(DHCP)# dns-cache (scalance)(DHCP)# dns-server 192.0.2.1 (scalance)(DHCP)# lease-time 20 (scalance)(DHCP)# subnet 192.0.2.0 (scalance)(DHCP)# subnet-mask 255.255.255.0 (scalance)(DHCP)# end SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 187: Ip-Mode

    Use this command to configure IP modes to enable global processing of IPv4 packets. Example The following example configures the IPv4 mode: (scalance)(config)# ip-mode v4-only (scalance)(config)# end (AP )# commit apply Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 188: Ipm

    Example The following example enables IPM: (scalance)(config)# ipm (scalance)(ipm)# enable (scalance)(ipm)# end (scalance)# commit apply The following example alters the IPM priority list: (scalance)(ipm)# ipm-power-reduction-step-prio ipm-step (scalance)(ipm)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 189: Ip Radius

    RADIUS server configuration to take effect. Example The following example configures the UDP port: (scalance)(config)# ip radius rfc-3576-server udp-port 1700 (scalance)(config)# end (AP )# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 190: L3-Mobility

    Virtual Controller IP address. To allow clients to roam seamlessly among all the APs, theVirtual Controller IP for each of the foreign subnets must be configured for each AP cluster. no… Removes the configuration. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 191: Lacp-Mode

    LACP mode. disable This parameter disables the static LACP configuration. The AP will not work on LACP mode even it detects any LACP PDUs from the peer switch. Removes the static LACP configuration SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 192: Led-Off

    Command/Parameter Description led-off Disables LED display. no… Re-enables LED display. Usage Guidelines Use this command to disable the LED display. Example The following example disables LED display on an AP: (scalance)(config)# led-off SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 193: Loginsession

    The following example configures management sessions on the AP to not time out: (scalance)(config) # loginsession timeout 0 (scalance)(config) # end (scalance) # commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 194: Logout

    Syntax logout Usage Guidelines Use this command to log out of the current CLI session and return to the user login prompt. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 195: Mas-Integration

    AP. GVRP also enables the switch to propagate the registered VLAN information to the neighboring switches in the network. Note The associated static VLANs in the wired and wireless profiles are propagated to the upstream Mobility Access Switch using GVRP messages. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 196: Managed-Mode-Profile

    This command is used to enable auto configuration of the APs in the management mode. Syntax managed-mode-profile automatic config-filename <filename> debug-managed-mode download-method <method> retry-poll-period <time-in-sync> server <server name> sync-time day <dd> | hour <hh> | min <mm> | window <window> username <username> password <password> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 197 ● When the APs are in the management mode, ensure that the APs are not managed by AirWave. Example The following example configures an AP for automatic configuration: (scalance)(config)# managed-mode-profile (scalance)(managed-mode-profile)# username <username> (scalance)(managed-mode-profile)# password <password> (scalance)(managed-mode-profile)# config-filename instant.cfg (scalance)(managed-mode-profile)# download-method ftps SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 198: Managed-Mode-Sync-Server

    Use this command for a real-time retrieve and apply of the configuration from the server, even before its actual set sync-time. Command Information AP Platform Command Mode All platforms Configuration mode 4.11.4 mesh Description This command sets up mesh network on an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 199 After that, mesh works on AP ROWs like any other regulatory domain. Example The following example enables mesh network on an AP: (scalance)(config)# mesh (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 200: Mesh-Cluster

    After that, mesh works on AP ROWs like any other regulatory domain Example The following example enables mesh network key on an AP: (scalance)# mesh-cluster-key 12345678 The following example enables mesh network name on an AP: (scalance)# mesh-cluster-name Hallmark SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 201: Mesh-Disable

    (scalance)# mesh-disable Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.11.7 mgmt-accounting Description This command is used to enable accounting privileges on TACACS+ servers for management users. Syntax mgmt-accounting command all SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 202: Mgmt-Auth-Server

    Description This command configures authentication servers for management UI of the Virtual Controller. Syntax mgmt-auth-server <server> no… Parameter Description mgmt-auth-server Configures a server for management user authentication. <server> no… Removes the configuration. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 203: Mgmt-Auth-Server-Load-Balancing

    Enables load balancing between the primary and the backup authentica- load-balancing tion servers no… Removes the configuration. Usage Guidelines Use this command to enable load-balancing when two servers are configured. Example The following example enables load-balancing between two authentication servers. (scalance)(config)# mgmt-auth-server-load-balancing SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 204: Mgmt-Auth-Server-Local-Backup

    Usage Guidelines Use this command to configure a backup authentication server for the Virtual Controller management interface. Example The following example configures a backup internal authentication server: (scalance)(config)# mgmt-auth-server-local-backup (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 205: Mgmt-User

    Example The following example configures administrator login credentials for the AP management interface: (scalance)(config)# mgmt-user User1 Password123 guest-mgmt (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 206: Mtu

    3G or 4G. The configured MTU size is applied when the uplink changes. Example The following example sets the MTU size to 1200 bytes: (scalance)(config)# mtu <1200> (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 207: Name

    The following example configures a name for the AP: (scalance)# hostname <system-name> Command Information AP Platform Command Mode All platforms Configuration mode 4.12.2 ntp-server Description This command configures NTP server for an AP. Syntax ntp-server <Name> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 208 Example The following command configures an NTP server for an AP: (scalance)(config)# ntp-server <name> (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 209: Opendns

    Use this command to configure OpenDNS credentials to allow Scalance W to filter content at the enterprise-level. Example The following example configures OpenDNS credentials: (scalance)(config)# opendns <username <password> (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 210: Openflow-Server

    The following example shows how to configure a TLS authentication between the OpenFlow agent and OpenFlow controller: (scalance)(config)# openflow-server tls-enable (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 211: Organization

    AirWave administrator to accurately represent the deployment of each AP. This string is defined by the installation personnel on the site. Example The following command configures an AirWave organization string: (scalance)(config)# organization aruba SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 212: Out-Of-Service-Hold-On-Time

    Use this command to configure a hold time after which the out-of-service operation is triggered. Example The following example sets the out of service hold on interval to 45 seconds: (scalance)(config)# out-of-service-hold-on-time 45 Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 213: Pcap

    AP. Example The following example starts the packet capture configuration: (scalance)# pcap start ac:a3:1e:57:bd:60 10.163.148.35 5555 0 1518 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 214: Per-Ap-Ssid

    The following example sets the environment variable: (scalance)# per-ap-ssid <essid> Command Information AP Platform Command Mode All platforms Privileged Exec mode 4.14.3 per-ap-vlan Description This command assigns a VLAN to a given SSID profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 215: Pin-Enable

    PIN code that is currently used. no… Disables SIM PIN locking. Usage Guidelines Use this command to enable locking of SIM PIN of the cellular modem connected to an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 216: Pin-Puk

    Use this command to unlock a cellular modem using the PUK code provided by your ISP. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.14.6 pin-renew Description This command renews PIN for the SIM card of the 3G or 4G modem. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 217: Ping

    <address> ndicates the source IP address to send Ping. — Usage Guidelines You can send up to five ICMP echo packets to a specified IP address. The AP times out after two seconds. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 218: Pppoe-Uplink-Profile

    PPPoE interface and allows the entire Local, L3 DHCP subnet to be allocated to clients. no… Removes the configuration. Usage Guidelines Use this command to configure PPPoE uplink connection for an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 219: Proxy

    This command configures the HTTP proxy settings in an AP to download the image from the cloud server. This command also configures the HTTP proxy settings in an AP to route the web classification queries through the proxy server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 220 The following example configures an HTTP proxy settings in an AP: (scalance)(config)# proxy exception 10.15.107.214 (scalance)(config)# proxy server 10.15.107.210 1337 user1 passwd1 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 221: Radius-Vsa-Redirect-Url

    0e:00:32:f8:ef:10 https://172.10.10.10/guest 1 c8:b5:ad:c3:af:16# sh radius-redirect-url Radius VSA Redirect URL ----------------------- 0e:00:32:f8:ef:10 https://172.10.10.10/guest The following output is displayed for radius-vsa-redirect-url clear command: c8:b5:ad:c3:af:16# radius-vsa-redirect-url clear c8:b5:ad:c3:af:16# sh radius-redirect-url Radius VSA Redirect URL SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 222: Reload

    Do you really want to reset the system(y/n): ● Enter y to reboot the AP. ● Enter n to cancel this action. The command will timeout if you do not enter y or n. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 223: Remove-Blacklist-Client

    Use this command to remove the entries for the clients that are dynamically blacklisted. Example The following command deletes the blacklisted AP client entries: (scalance)(config)# remove-blacklist-client d7:a:b2:c3:45:67 AP125 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 224: Reset Drt

    DRT is already in default status. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.15.5 restrict-corp-access Description This command configures restricted access to the corporate network. Syntax restrict-corp-access no… Parameter Description no… Removes the configuration. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 225: Restrict-Mgmt-Access

    Use this command to configure management subnets. This ensures that the AP management is carried out only from these subnets. When the management subnets are configured, Telnet, SSH, and UI access is restricted to these subnets only. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 226: Rf-Band

    5 GHz and 2.4 GHz bands are selected. Usage Guidelines Use this command to configure RF band for an AP. Example The following example configures the 5 GHz RF band for an AP. (scalance)(config)# rf-band 5 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 227: Rf-Zone

    The following example configures the RF zone of a guest SSID. (scalance)# rf-zone guest Command Information AP Platform Command Mode All platforms Privileged Exec mode 4.15.9 rf dot11g-radio-profile Description This command configures a 2.4 GHz or 802.11g radio profile for an AP SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 228 40 MHzoperation. beacon- Enter the Beacon period for theAP in milliseconds. 60-500 interval When enabled, the 802.11 beaconmanagement <interval> frames aretransmitted by the access point atthe speci- fied interval. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 229 AP is heavily loaded or not. The WIDS functionality will not take effect. dot11h Allows the AP to advertise its 802.11d (country infor- — Disabled mation) and 802.11h (transmit power control) capabili- ties. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 230 This value is used to derive ACK and CTS timeout times. A value of 0 specifies the default settings for this pa- rameter, where timeouts are only modified for outdoor mesh radios which use a distance of 16km. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 231 (scalance)(RF dot11g Radio Profile)# max-tx-power 33 (scalance)(RF dot11g Radio Profile)# min-tx-power 10 (scalance)(RF dot11g Radio Profile)# max-distance 600 (scalance)(RF dot11g Radio Profile)# csa-count 2 (scalance)(RF dot11a Radio Profile)# free-channel-index 40 (scalance)(RF dot11g Radio Profile)# spectrum-monitor SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 232: Rf Dot11A-Radio-Profile

    Syntax rf dot11a-radio-profile [<profile_name>] 40MHZ-intolerance beacon-interval <interval> cell-size-reduction <reduction> csa-count <count> csd-override disable-arm-wids-functions dot11h honor-40MHZ-intolerance-disable interference-immunity <level> free-channel-index <idx> legacy-mode max-distance <count> max-tx-power <power> min-tx-power <power> spectrum-band <type> spectrum-monitor very-high-throughput-disable zone <zone> no… SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 233 AP must support legacy clients such as Cisco 7921g VoIP phones, or older 802.11g clients (e.g. IntelCen- trino clients). NOTE: Enabling this feature can reduce overall throughput rates. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 234 Level 5— The AP completely disables PHY • error reporting, improving performance by eliminating the time the AP would spend on PHY processing. NOTE: Increasing the immunity level makes the AP to lose a small amount of range. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 235 Removes the configuration. — — Usage Guidelines Use this command to create a 5 GHz radio profile on an AP. Example The following example configures the 5 GHz radio profile: (scalance)(config)# rf dot11a-radio-profile SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 236: Routing-Profile

    Configures route parameters. <destination> Configures the destination network that is reachable through the VPN tunnel. <mask> Specify the subnet mask of network that is reachable through the VPN tunnel. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 237 The following example configures a routing profile: (scalance)(config)# routing-profile (scalance)(Routing-profile)# route 192.0.1.0 255.255.255.0 192.0.2.0 15 (scalance)(Routing-profile)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and routing profile configuration sub-mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 238: Show 1Xcert

    AP authenticates as a 802.1X supplicant. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.2 show aaa Description This command displays the AAA profile details. Syntax show aaa dns-query-interval fqdn-server-names SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 239: Show About

    Privileged EXEC mode 4.16.3 show about Description This command displays information about SCALANCE W. Syntax show about Usage Guidelines Use this command to view information such as SCALANCE W version, build time and AP model. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 240: Show Access-Rule

    Type SCALANCE-W1750D-2IA-RJ45 Build Time 2018-06-23 23:46:04 UTC Version ::8.4.0.0 Website https://www.siemens.com/iwlan Legal All Rights Reserved (c) 1996-2019,Siemens AG. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.4 show access-rule Description This command displays the details of access rules configured for the wired or wireless clients associated with an AP.
  • Page 241 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 242: Show Access-Rule-All

    Bandwidth Limit :downstream disable upstream disable Access Rule Name :NewRole17 In Use :No Access Rules ------------ Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Application ------- --------- ---------- ------------------------- ----------- 10.17.88.188 255.255.255.255 match http 10.17.88.188 255.255.255.255 match 6:4343:4343 any any match dhcp SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 243: Show Acl

    AP Platform Command Mode All platforms Privileged EXEC mode 4.16.6 show acl Description This command displays the ACL configuration details. Syntax show acl [domains] Parameter Description domains Displays the domains configured with an ACL. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 244: Show Airgroup

    Displays AirGroup cache details for a specific AP or for the AP cli- entries [dlna| mdns] ents in a cluster. cppm {auth server [coa- Displays ClearPass Policy Manager server details associated with capable | non- AirGroup configuration. coa-only] | entries | query-interval | server} SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 245 AirGroup Blocked Service IDs ---------------------------- Origin Service ID #response-hits ------ ---------- -------------- Num Blocked Service-ID:0 show airgroup cache entries The following output is displayed for the show airgroup cache entries command: Cache Entries SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 246 Server IP-Address Port timeout rfc3576 rfc3576-only rfc3576-port ------ ---------- ---- ------- ------- ------------ ------------ server1 192.0.1.1 1812 5 Enabled Enabled 5999 show airgroup cppm server The following output is displayed for the show airgroup cppm server command: CPPM Servers SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 247 Indicates the shared location ID associated with the AP name AP-name shared location-id Indicates the shared location ID associated with the FQDN of the AP AP-FQLN shared location-id Indicates the shared location ID associated with the AP group. AP-group SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 248 8240(8240) mdns ap to ap mac sync resp rx 57(57) mdns master to vc mac req rx 1580(1580) swarm update counter rx 1(1) mdns recieved valid swarm packet 11978(11978) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 249 CPPM Device- Deleted N/A Entry Internal MDNS Statistics ------------------------ Functionality Hit Count Since Last Read Hit Count Total Average Time in microsec (since last read) Average Time in microsec (alltime) ------------- ------------------------- --------------- ---------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 250 Query - Response packet send Query The output of this command displays information about queries and responses, and RADIUS client messages. show airgroup servers The following output is displayed for the show airgroup servers command: AirGroup Servers SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 251 The following output is displayed for the show airgroup status command: AirGroup Feature ---------------- Status ------ Disabled AirGroup- MDNS Feature ---------------------- Status ------ Disabled AirGroup- DLNA Feature ---------------------- Status ------ Disabled SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 252 CPPM Server dead time 100 Seconds AirGroup Service Information ---------------------------- Service Status ------- ------ airplay Disabled airprint Disabled itunes Disabled remotemgmt Disabled sharing Disabled chat Disabled Chromecast Disabled DLNA Media Disabled DLNA Print Disabled allowall Disabled SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 253 The following output is displayed for the show airgroup users command: AirGroup Users -------------- MAC IP Host Name VLAN Wired/Wireless Role Username AP-Mac Query/Resp --- -- --------- ---- -------------- ---- -------- ------ ---------- Num Users:0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 254: Show Airgroupservice

    VLAN will not be able to use the AirGroup service. Usage Guidelines Use the show airgroupservice command to view the AirGroup services configured on an AP. Example The following output is displayed for the show airgroupservice command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 255 ._sub._ipp._tcp _cups ._sub._fax-ipp._tcp _ica- networking._tcp _ptp. _tcp _cano n-bjnp1._tcp _ipps ._tcp _ica- networking2._tcp itunes iTunes Disabled _home-sharing_tcp _appl e-mobdev._tcp _daap ._tcp _dacp ._tcp remotemgmt Remote management Disabled _ssh. _tcp _sftp -ssh._tcp _ftp. _tcp SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 256 The following example shows the partial output displayed for the show airgroupservice disallow role command: airplay ------- default_wired_port_profile port airprint -------- default_wired_port_profile port The following example shows the partial output displayed for the show airgroupservice disallow vlan SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 257: Show Aigroupservice-Ids

    Usage Guidelines Use the show airgroupservice command to view the IDs of the AirGroup services configured on an AP. Example The following output is displayed for the show airgroupservice-ids command for the AirPlay service: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 258: Show Ale

    Displays the status of ALE server. Usage Guidelines Use this command to view the ALE configuration status. Example The following example shows the output of the show ale config command: (scalance)# show ale config ALE Config ---------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 259 ---- ----- ale login status False ale login status code ale fail times ale request state Idle The output of this command displays information about the ALE server status and data request status. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 260: Show Ale Stats

    (scalance)# show ale stats Stats ----- ---- Type Value ---- ----- package 0 RSSI package 0 APPRF package 0 URLv package 0 STATE package 0 STAT package 0 UPLINK BW package 0 Total SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 261: Show Alert Global

    Description Timestamp Displays the time at which the client alert was recorded. Type Displays the numeric value to indicate the type of event that triggered the alert. For more information, see Table 11. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 262 Integrity check failure in encrypted message The AP cannot receive data from this client because the integrity check of the received MIC has failed. Recommend checking the encryption setting on the client and on the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 263: Show Alg

    NAT used in a network. Example The following output is displayed for the show alg command: Current ALG ----------- ALG Status --- ------ sccp Enabled sip Enabled vocera Enabled SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 264: Show All Monitor

    ------------------------------- bssid channel rssi ap name lms ip master ip inactive time reported by ----- ------- ---- ------- ------ --------- ------------- ----------- Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 265: Show Allowed-Aps

    Indicates if the new APs are allowed to join the network. MAC Address Displays the MAC address of the APs that are allowed to join the network. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 266: Show A-Max-Clients

    The following show a-max-clients <ssid_profile> command output displays the maximum number of clients allowed to connect to the test1 SSID: (scalance)# show a-max-clients test1 a-max-clients: 30 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 267: Show Amp-Audit

    "nr1" enable nai-realm-name "name1" nai-realm-eap-method eap-sim nai-realm-auth-id-1 non-eap-inner-auth nai-realm-auth- value-1 mschapv2 nai-realm-auth-id-2 credential nai-realm-auth-value-2 uname-password nai-realm- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 268 "rc1" enable roam-cons-oi-len 3 roam-cons-oi "888888" hotspot anqp-3gpp-profile "3g" enable 3gpp-plmn1 "40486" 3gpp-plmn2 "" 3gpp-plmn3 "" 3gpp-plmn4 "" 3gpp-plmn5 "" 3gpp-plmn6 "" hotspot anqp-ip-addr-avail-profile "ip1" enable ipv4-addr-avail no ipv6-addr-avail hotspot anqp-domain-name-profile "dn1" enable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 269 3 roam-cons-oi-1 "123456" roam-cons-len-2 3 roam-cons-oi-2 "223355" roam-cons-len-3 0 roam-cons- oi-3 "" advertisement-profile anqp-nai-realm "nr1" wlan ssid-profile test enable index 0 type employee essid instant opmode opensystem max-authentication-failures 0 rf-band all SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 270 1 inactivity-timeout 1000 broadcast-filter none radius-accounting blacklist dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 hotspot- profile "hs1" auth-survivability cache-time-out 24 wlan external-captive-portal url "/" auth-text "Authenticated" auto-whitelist-disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 271 1 shutdown access-rule-name default_wired_port_profile speed auto duplex full no poe type employee captive-portal disable no dot1x enet0-port-profile default_wired_port_profile uplink preemption enforce none failover-internet-pkt-lost-cnt 10 failover-internet-pkt-send-freq 30 failover-vpn-timeout 180 airgroup disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 272: Show Ap Allowed-Channels

    Usage Guidelines Specify the country code for your AP during the initial setup. Changing the country code causes the valid channel lists to be reset to the defaults for that country. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 273: Show Ap Allowed-Max-Eirp

    Description This command displays the maximum EIRP settings for the country in which the AP is currently operational. You can also view the maximum EIRP settings for a specific country. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 274 * * * 20 20 20 20 23 23 23 23 22 22 22 22 * * * * 22 22 22 22 22 22 20 17 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 275: Show Ap Arm

    Interface :wifi1 Shaping Table ------------- Client Tx Pkt Tx Byte (KB) Tx Alloc (ms) Tx Time (ms) Rx Time (ms) Active Time (ms) - ----- --- --- ------------ ------------- ------------ ------------ -------------- Tx Rate (mbps) --------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 276 161- 2013-05-10 12:17:34 157+ 149+ 2013-05-10 12:10:21 153- 157+ 2013-05-10 11:12:04 157+ 153- 2013-05-10 11:00:07 149+ 157+ 2013-05-10 10:54:39 157+ 149+ 2013-05-10 10:49:33 149+ 157+ 2013-05-10 10:44:34 157+ 149+ 2013-05-10 10:39:51 149+ 157+ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 277 Displays the channel number used by the AP before the ARM change. New channel Displays the channel number used by the AP after the ARM change. Old Power Indicates power values configured on the AP before the ARM change. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 278 The show ap arm rf-summary command shows the statistics for all channels monitored by an AP. The following example shows the output of the show ap arm rf-summary command: Channel Summary SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 279 Next Check channel/pwr :2m:36s/2m:15s Assignment Mode :Single Band Interface Name :wifi1 Current ARM Assignment :1/24 Covered channels a/g :0/1 Free channels a/g :0/2 ARM Edge State :disable Last check channel/pwr :5m:31s/3m:33s Last change channel/pwr :15m:50s/1d:23h:47m:13s SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 280 Displays the ARM Edge status. If ARM edge status is enabled, the ARM-enabled APs on the network edge will not function as Air Moni- tors. Last check channel/pwr Indicates the time since the channel and power assignment was veri- fied. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 281 6 40459820 2562 0 0 DVACT 172110 7 334620 3042 0 0 DVACF 172137 8 89210 811 0 0 DC 171627 9 92620 842 0 0 DC 171684 10 192940 1754 0 0 DAC 172144 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 282 Indicates if the scan mode enabled on the Wi-Fi interface. channel Indicates the channels available on the Wi-Fi interface. (under WIFI Scanning State) current-scan-channel Indicates the current channel scanned. last-dos-channel Indicates the last channel on which Denial of Service (DOS) was detected. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 283: Show Ap Association

    <n>ss: <n> spatial streams Association Table ----------------- Name bssid mac auth assoc aid l-int essid vlan-id tunnel-id phy assoc.time num assoc ---- ----- --- ---- ----- --- ----- ----- ------- --------- --- ----------- ------ Flags ----- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 284: Show Ap Bss-Table

    Indicates the number of clients associated with the AP. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.22 show ap bss-table Description This command displays the BSS of anAP. Syntax show ap bss-table SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 285 4.16 S Usage Guidelines The output of the show ap bss-table command shows the Siemens AP BSS table for all APs. To filter this information and view BSS table data for an individual AP or a specific port and slot number, include the ap-name, bssid, essid, ip-addr or port keywords.
  • Page 286: Show Ap Cacert

    RSA Key size :2048 bits Version Serial Number Issuer :/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root Subject :/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root Issued On :May 30 10:48:38 2000 GMT SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 287 Subject :/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority Issued On :Jun 29 17:06:20 2004 GMT Expires On :Jun 29 17:06:20 2034 GMT Signed Using :SHA1-RSA RSA Key size :2048 bits SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 288: Show Ap Mesh Cluster

    IP Address Path Cost Node Cost Link Cost ---- ------- -------- ------ ---------- -------- -------- -------- a8:bd:27:c9:84 AP-207 Portal (AC) - 192.168.1. HopCount Rate RSSI Last Up- Uplink Age Children Tx/Rx date -------- --------- ---- ---------- ---------- 1m:58s 6m:1s SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 289 Indicates when the entries were last updated. — Uplink Indicates the AP's current active uplink. — The mesh link’s uptime. — Children Indicates the number of slave APs in the mesh network 0 - 8 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 290: Show Ap Mpskcache

    Indicates the user role assigned to the client. VLAN Indicates the VLAN to which the client is assigned. ESSID Displays the ESSID details to which the client is connected. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 291: Show Ap Checksum

    Custom AWC CA from Airwave Default clearpass ca:749098642 clearpass ca:0 Resource files Download role Checksum 54474 Audit Checksum 34063 Calc time :2018-11-22 07:01:04 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 292: Show Ap Client-Match-Live

    00:db:df:0a:57:4e Target Adopted Client match succeed 0 5m:17s 00:db:df:0a:57:4e Deny Normal Client match succeed 1 5m:17s a0:88:b4:41:64:18 Deny Normal State aged out 2m:27s a0:88:b4:41:64:18 Deny Normal State aged out 2m:23s Total 11 Records SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 293: Show Ap Client-Match-History

    I am not the better AP 7m:9s a0:88:b4:41:64:18 Normal Deny I am not the better AP 5m:20s a0:88:b4:41:64:18 Normal Deny I am not the better AP 5m:20s 00:db:df:0a:57:4e Target Adopted Client match succeed 5m:17s SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 294: Show Ap Client-Match-Refused

    This command displays the list of clients for which the channel allocation is refused based on the client match configuration parameters. Syntax show ap client-match-refused [<radio>] Parameter Description <radio> Allows you to filter the output based the ID number of the radio (for ex- ample, 0 or 1). SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 295 Last Refused Clients Table -------------------------- RSSI Refused Count Last Refused Time ---- ------------- ----------------- 02:99:00:00:01:33 00:db:df:0a:6a:db fc:75:16:03:40:d9 18:3d:a2:09:79:ac 00:db:df:05:1f:d6 02:21:00:00:00:14 00:27:10:cf:ef:b4 00:27:10:cf:f2:4c Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 296: Show Ap Client-Match-Ssid-Table Radio-Mac

    Client Match SSID Table -------------------------- SSI Count SSID Name Clients Threshold --------- --------- --------- -------- 02:99:00:00:01:33f0: CM_zone_a 5c:19:1c:92:50 CM1_zone_a Total 1 Radios Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 297: Show Ap Client-Match-Triggers

    ------- ------- ---- ---- ---- ----- ------ ---- ---- ---- ---- ----- A_CCNT Time --- ---- 00:15:00:5e:7e:3c 0 9c:1c:12:3a:e9:70 DynamicLoad Balanc- 3h:11m:19s 5a:15:00:00:00:16 9c:1c:12:3a:e9:1 Stricky Client 2h:11m:40s 00:15:00:5e:77:c8 9c:1c:12:3a:e9:1 Dynamic Load Balanc- 2h:11m:40s SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 298: Show Ap Client-Probe-Report

    The following example shows the output of the show ap client-probe-report command. AP Client Probe Report for Wifi0 (5G) ------------------------------------- RSSI In Swarm Flags Matched Received ---- -------- ----- ------- -------- 00:27:10:a9:98:60 1m:5s 60:f8:1d:ad:7f:f0 24:77:03:8f:78:30 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 299: Show Ap Client-View

    The following example shows the output of show ap client-view command: Client Match Neighbor Table --------------------------- Channel RSSI Clients Threshold Channel Util (%) VC Key Flags ------- ---- ------- --------- ---------------- ------ ----- ----- d8:c7:c8:44:50:c 8m:27s d8:c7:c8:44:50:d d8:c7:c8:44:51:b 2m:49s d8:c7:c8:44:61:a d8:c7:c8:44:61:b d8:c7:c8:44:51:a d8:c7:c8:44:62:a SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 300: Show Ap Debug Airwave

    Total 1 Client Matches Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.34 show ap debug airwave Description This command displays the list of AirWave servers configured on an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 301 ----- Preferred Channel Tx Power 27.0 VHT Enabled Radio Configuration for wifi1 ----------------------------- Parameter Value --------- ----- Preferred Channel Tx Power 24.0 VHT Enabled ARM Configuration for wifi0 ---------------------------- Parameter Value --------- ----- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 302 Mode Aware OTA Updates Scanning Scan Interval Rogue AP Aware Max Tx Power (cfg/internal) 12/[282208.333178] ieee80211_smart_ant_ init: Smart Antenna is not supported Min Tx Power (cfg/internal) 01. Jan Scan Mode reg-domain 40 MHz/80 MHz SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 303 Dwell Time: Reg-Domain Channel Dwell Time: Other Reg-Domain Channel Dwell Time: Rare Channel Regulatory Domain Configuration ------------------------------- Parameter Value --------- ----- Country Code G-Band 20MHz Channels ----------------------- Reg Info Type Channels ------------- -------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 304 112 116 120 124 128 132 136 140 144 149 153 157 161 Valid (Assignment) Channels 36 52 100 116 132 149 A- Band 160MHz Channels ------------------------ Reg Info Type Channels ------------- -------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 305 Frame Receive Error Rate Low Watermark Frame Retry Rate High Watermark Frame Retry Rate Low Watermark Interference Configuration -------------------------- Parameter Value --------- ----- Detect Interference Disable Interference In- crease Threshold Interference Increase Timeout SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 306 Station RSSI Message Disable Station RSSI Message Interval AP Neighbors Message Disable AP Neighbors Message Interval IDS DOS Configuration --------------------- Parameter Value --------- ----- Detect Disconnect Station Attack Disable Disconnect STA Detection Assoc Resp Threshold SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 307 Invalid Address Combination Qui- et Time Detect Malformed Assoc Request Disable Malformed Assoc Request Quiet Time Detect Malformed HT IE Disable Malformed HT IE -Jack Quiet Time 900 Detect Overflow EAPOL Key Disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 308 Detect Channel Based MitM(Man in Disable Channel Based ##### the Middle) MitM Quiet Time ##### Detect Beacon on Wrong Channel Disable Beacon on Wrong Channel Quiet Time Detect Hotspotter Attack Disable Hotspotter Quiet Time SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 309 Detect STA Assoc To Rogue Disable Detect Wireless Hosted Network Disable Wireless Hosted Network Quiet Time Protect From Wireless Hosted Disable Valid 802.11b Network channel Valid 802.11a channel Config Wired MAC Table ----------------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 310 Server Debug Statistics ------ ----- ---------- Value ----- Connect establish success 3(3) Authentication failed 3(3) Login done times 1(1) Connect retry times 3(3) Last connect status ------------------- Last connect ID Last connect time :2018-01-25 07:12:36 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 311: Show Ap Debug Airwave-Config-Received

    Command Mode All platforms Privileged EXEC mode 4.16.35 show ap debug airwave-config-received Description This command indicates if any configuration information is received by the AP from the AirWave server. Syntax show ap debug airwave-config-received SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 312: Show Ap Debug Airwave-Data-Sent

    Use this command to view information about the data sent to the AirWave server. Example The following example shows the output of the show ap debug airwave-data-sent command: cat: /tmp/awc_buf.txt: No such file or directory Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 313: Show Ap Debug Airwave-Events-Pending

    The following example shows the partial output of the show ap debug airwave-events- pending command: <t11> <e61>1106</e61> <e62>654</e62> <e1005>6c:f3:7f:56:7f:60</e1005> <e1006>7SPOT</e1006> <e1001>d8:c7:c8:cb:d4:20</e1001> <e1056>2</e1056> <e1017>d8:c7:c8:cb:d4:20</e1017> <e1018>1</e1018> <e1058>Varbind deprecated</e1058> </t11> Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 314: Show Ap Debug Airwave-Restore-Status

    Description This command displays the AirWave sign on key used by the used by the administrator to manually authorize the first Virtual Controller for an organization. Syntax show ap debug airwave-signon-key SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 315: Show Ap Debug Airwave-State

    Use this command to view the current state of AirWave events associated with the AP. Example The following example shows the output of the show ap debug airwave-state command: <t1> <e1>fc6520ad018ee6eb13bdc6b985e0fe6361bd37f7d25212a77e</e1> <e2>scalance-CF:AA:F2</e2> <e3></e3> <e5>0.0.0.0</e5> <e8>8.4.0.0-8.4.0.0_68230</e8> <e60>Siemens</e60> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 316 <e64></e64> </t1> <t4> <e25>test</e25> <e26>2</e26> <e27></e27> <e28>64</e28> <e29>1</e29> <e30>2</e30> </t4> <t4> <e25>test123</e25> <e26>3</e26> <e27></e27> <e28>64</e28> <e29>1</e29> <e30>2</e30> </t4> <t2> <e1>d8:c7:c8:c4:42:98</e1> <e6>BE0000315</e6> <e2>d8:c7:c8:c4:42:98</e2> <e7>1.3.6.1.4.1.14823.1.2.34</e7> <e18></e18> <e5>10.17.88.59</e5> <e15>10</e15> <e16>129183744</e16> <e17>71094272</e17> <e13>1</e13> <e14>257137</e14> <e65>0</e65> <t3> <e1>d8:c7:c8:c4:29:88</e1> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 317: Show Ap Debug Airwave-Stats

    This command displays the configuration statistics associated with an AP managed or monitored by the AirWave server. Syntax show ap debug airwave-stats [<def>] Usage Guidelines Use this command to view configuration details of an AP managed or monitored by the AirWave server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 318 <e21>1</e21> <e19>2</e19> <e20>1</e20> </t7> <t7> <e1>6c:f3:7f:a5:df:32</e1> <e25>sw-san-rapng-l3</e25> <e23>153</e23> <e22>1</e22> <e21>1</e21> <e19>1</e19> <e20>1</e20> </t7> <t7> <e1>d8:c7:c8:3d:46:d2</e1> <e25>test_1x_term</e25> <e23>48</e23> <e22>1</e22> <e21>1</e21> <e19>1</e19> <e20>2</e20> </t7> Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 319: Show Ap Debug Am-Config

    1024 Max Unassociated Stations Unclassified AP Updates Disable Unclassified STA Updates Disable Unclassified Device Update Interval Client Detection Mode normal Valid 802.11b channel Valid 802.11a channel Config Wired MAC Table ----------------------- Valid OUIs SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 320: Show Ap Debug Auth-Trace-Buf

    May 10 13:06:30 station-up * 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - - wpa2 psk aes May 10 13:06:30 wpa2-key1 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117 May 10 13:06:30 wpa2-key2 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117 May 10 13:06:30 wpa2-key3 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 151 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 321: Show Ap Debug Ble-Config

    Beacon Management Console (BMC), BLE token, and the operation mode. Syntax show ap debug ble-config Usage Guidelines Use this command to view the BLE configuration details. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 322 A_1.2-19.bin) Bank B(/aruba/bin/Beacon Nano OAD-B 1.2-19.bin) ----------------- BLE IoT Transport Context Configuration #0 Config ID: 4 ---------------------------------------- --------------- Item Value ---- ----- Endpoint Type 0 (Meridian Beacon Management) Interval Content 0 (Managed Beacons) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 323: Show Ap Debug Ble-Counters

    Privileged Exec mode 4.16.46 show ap debug ble-daemon Description This command displays the BLE daemon log messages. Syntax show ap debug ble-daemon Usage Guidelines Use this command to view the BLE daemon log messages. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 324: Show Ap Debug Ble-Relay

    Tag messages WS queue success 5114 Tag messages WS queue unavailable 4359 Tag messages WS not connected 55629 Tag messages WS sent 5114 The following command displays the WebSocket logs of the AP: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 325 08:18:04 Protocol: http-only 2017-03- 08:18:04 libwebsocket_client_connect: direct conn 2017-03- 08:18:04 libwebsocket_client_connect_2 2017-03- 08:18:04 libwebsocket_client_connect_2: address tags.meridianapps.com 2017-03- 08:18:34 Unable to get host name from tags.meridianapps.com The following command displays the IoT profile details: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 326 We are completely uploaded and fine < HTTP/1.1 200 OK < Date: Wed, 27 Sep 2017 04:05:22 GMT < Content-Type: application/json; application/vnd.meridian.v1+json; < Content-Length: 112 Connection #0 to host edit.meridianapps.com left intact Server response: {"next_sync":60,"updates":[{"mac":"987BF358E010","firmware":{"B": {"url":null,"version":""}},"type":"location"}]} SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 327: Show Ap Debug Ble-Table

    The following example shows the output of the show ap debug ble-table assettags command: (scalance) # show ap debug ble-table assettags BLE Device Table [Asset Tags] ------------------------------ MAC HW_Type FW_Ver Flags Status Batt(%) RSSI Asset_Tag_Id Last Update Uptime SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 328: Show Ap Debug Ble-Table Assettags

    (scalance)# show ap debug ble-table assettags BLE Device Table [Asset Tags] ------------------------------ MAC HW_Type FW_Ver Flags Status Batt(%) RSSI Asset_Tag_Id Last Update Uptime --- ------- ------ ----- ------ ------- ---- ------------ --- -------- ------ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 329: Show Ap Debug Client-Frame-History

    Use this command to verify if the RSSI information is frequently updated. If the RSSI information is not frequently updated, a client may be steered to an improper new AP in the cluster. Example The following example shows the output of show ap debug client-frame-history command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 330: Show Ap Debug Client-Match

    Use this command to view the status of client match configuration for a specific radio interface. Example The following example shows the output of show ap debug client-match <radio ID> command: Client Match Status:: RUNNING SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 331: Show Ap Debug Client-Stats

    Tx Bytes Rcvd Tx Bytes Transmitted 287317 Tx Time Frames Rcvd 349004 Tx Time Frames Dropped 15376 Tx Time Frames Transmitted 333628 Tx PS Unicast Tx Success With Retry Tx Multiple Retries Tx Mgmt Frames SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 332 Tx WMM [BE] 1027 Tx WMM [BE] Dropped Tx UAPSD OverflowDrop Tx AMSDU pkt count Tx EAPOL Frames Rcvd Tx EAPOL Frames Dropped Tx Data Frames MCS 0 : Tx Data Frames MCS 1 : SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 333 Tx Data Frames MCS 1 : Tx Data Frames MCS 2 : Tx Data Frames MCS 3 : Tx Data Frames MCS 4 : Tx Data Frames MCS 5 : Tx Data Frames MCS 6 : SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 334 Rx HT 57.8 Mbps Rx HT 65 Mbps Rx WMM [BE] 1860 Max Negotiated Tx Rate (Kbps) 144400 SLB: Probe Requests Sent SLB: Probe Responses Sent SLB: Probe Requests Received SLB: Probe Response Received SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 335 If the AP has not transmitted packets in a category type, this data row will not be displayed in the output of the command. Tx WMM [BE]: Best Effort Tx WMM [BK]: Background Tx WMM [VO]: VoIP Tx WMM [VI]: Video SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 336 If the AP has not transmitted packets in a category type, this data row will not be displayed in the output of the command. Tx WMM [BE]: Best Effort Tx WMM [BK]: Background Tx WMM [VO]: VoIP Tx WMM [VI]: Video SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 337: Show Ap Debug Client-Table

    50 3[0x7] Sun May 12 07:41:25 2013 Sun May 12 07:42:13 2013 (0,0) UAPSD:(VO,VI,BK,BE,Max SP,Q Len) HT Flags: A - LDPC Coding; W - 40Mhz; S - Short GI HT40; s - Short GI HT20 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 338 Shows the packet rate from the AP to client. Rx_Pkts Show the packet rate from the client to AP. Tx_Retries Shows the number of packets that the client had to resend due to an initial transmission failure. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 339: Show Ap Debug Core-Info

    Compiled on 2017-11-14 at 07:27:21 UTC (build 62273) by p4build This time core files: ----------------------------------------------------------- Previous core files: ----------------------------------------------------------- core.20171122_182111.f05c19ca1a92.meshd.4193.Hercules_62273.1.tgz core.20171122_182213.f05c19ca1a92.meshd.8525.Hercules_62273.2.tgz core.20171122_182303.f05c19ca1a92.meshd.8793.Hercules_62273.3.tgz core.20171122_182352.f05c19ca1a92.meshd.8974.Hercules_62273.4.tgz core.20171122_182442.f05c19ca1a92.meshd.9084.Hercules_62273.5.tgz core.20171122_182532.f05c19ca1a92.meshd.9280.Hercules_62273.6.tgz core.20171122_182621.f05c19ca1a92.meshd.9460.Hercules_62273.7.tgz core.20171122_182711.f05c19ca1a92.meshd.9647.Hercules_62273.8.tgz core.20171122_184400.f05c19ca1a92.sapd.4091.Hercules_62273.9.tgz core.20171123_145733.f05c19ca1a92.meshd.4193.Hercules_62273.10.tgz core.20171123_145822.f05c19ca1a92.meshd.17677.Hercules_62273.11.tgz core.20171123_145912.f05c19ca1a92.meshd.18013.Hercules_62273.12.tgz core.20171123_150001.f05c19ca1a92.meshd.18355.Hercules_62273.13.tgz core.20171123_150051.f05c19ca1a92.meshd.18694.Hercules_62273.14.tgz core.20171123_150140.f05c19ca1a92.meshd.19028.Hercules_62273.15.tgz Core file URL: http://10.65.120.185/core/ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 340: Show Ap Debug Crash-Info

    Use this command to view the AP crash information for debugging purpose. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.56 show ap debug dhcp-packets Description This command displays information about the DHCP packets sent or received by an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 341 Indicates the source IP address from which the DHCP packets originated. Indicates the Gateway IP address. Cmac Indicates the MAC address of the client. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 342: Show Ap Debug Dot1X-Statistics

    Displays the MAC address of the authenticated client. Name Displays the name of the client device Displays the AP device details to which the client is connected. Auth-Succs Displays the number of times the client authenticated successfully. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 343: Show Ap Debug Driver-Config

    AP driver. The following output is displayed for the show ap debug driver-config command: Downloaded Config for WIFI 0 ---------------------------- Item Value ---- ----- BSSID d8:c7:c8:3d:42:12 LMS IP Master IP 0.0.0.0 Mode AP Mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 344 RX Sensitivity Tuning Based Channel Reuse disable Active Scan Enabled ARM Over the Air Updates Disabled VoIP Aware Scan Enabled Power Save Aware Scan Disabled Video Aware Scan Enabled Load aware Scan Threshold 1048576 Bps SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 345 Station Ageout Time 1000 sec Max Transmit Attempts 16 RTS Threshold 2333 bytes Max Associations 64 Wireless Multimedia (WMM) Enabled Wireless Multimedia U-APSD (WMM-UAPSD) Powersave Enabled WMM TSPEC Min Inactivity Interval 0 msec SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 346 Short guard interval in 20 MHz mode Enabled Short guard interval in 40 MHz mode Enabled Supported MCS set Explicit Transmit Beamforming Disabled Transmit Beamforming Compressed Steering Disabled Transmit Beamforming non Compressed Steering Disabled Transmit Beamforming delayed feedback support Disabled SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 347 Dynamic Multicast Optimization (DMO) Disabled Dynamic Multicast Optimization (DMO) Threshold 0 VAP on radio 1 : is not created and is not enabled -------------------------------------------------- Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 348: Show Ap Debug Lldp

    Number of times that an LLDP neighbor could not be added to the neighbor table (there is a limit of 8 per port). Transmitted Number of packets transmitted from that interface. The following example shows the output of show ap debug lldp neighbor command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 349 Shows if the AP has enabled or disabled processing of received LLDP PDUs. LLDP-MED Shows if LLDP MED protocol is enabled or disabled. TX interval Indicates the LLDP transmit interval in seconds. Hold Timer Indicates the LLDP transmit hold multiplier. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 350: Show Ap Debug Lldp Neighbor

    00:0b:86:6b:57:80 B:R GE0/0/22 93 The output of this command includes the following information: Parameter Description <interface> Indicates the interface on the AP sending or receiving LLDP PDUs. Neighbor ID Indicates the LLDP neighbor number. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 351: Show Ap Debug Lldp State

    (scalance)# show ap debug lldp state LLDP Interface Information -------------------------- Interface LLDP TX LLDP RX LLDP-MED TX interval Hold Timer --------- ------- ------- -------- ----------- ---------- eth0 Enabled Enabled Disabled 30 120 eth1 Enabled Enabled Disabled 30 120 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 352: Show Ap Debug Mgmt-Frames

    --------- ----- ------- ------ ---- May 9 23:09:42 deauth d8:c7:c8:c4:29:82 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15 - May 9 23:09:42 disassoc d8:c7:c8:c4:29:82 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15 - May 9 23:09:03assoc-respd8:c7:c8:c4:29:82 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15Success May 9 22:02:40 auth d8:c7:c8:c4:29:8b c4:85:08:de:06:d4 d8:c7:c8:c4:29:8b 15Success SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 353: Show Ap Debug Network-Bssid

    Displays the mapping of WLAN index and BSSID along with the MAC address. Displays the virtual AP status that includes all types of status details. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 354: Show Ap Debug Persistent-Clients

    Indicates if the client session is expired. Update Time Indicates the update time. Expiration Time Indicates the time at which the client session expires. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 355: Show Ap Debug Power-Table

    18.0 18.0 18.0 18.0 18.0 18.0 17.0 16.0 15.0 14.0 TXBF 18.0 18.0 18.0 18.0 18.0 18.0 17.0 16.0 15.0 14.0 TXBF+CRPOL 18.0 18.0 18.0 18.0 18.0 18.0 17.0 16.0 15.0 14.0 Note: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 356: Show Ap Debug Radio-Stats

    Use this command to view the radio debug statistics for an AP. Example The output of this command displays general statistics for the radio, as well as statistics for transmitted and received frames. RADIO Stats ----------- Parameter Value SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 357 Tx Data Bytes 12 Mbps (Mon) 0 Tx Data Bytes 24 Mbps (Mon) 0 Tx Data Bytes 36 Mbps (Mon) 0 Tx Data Bytes 54 Mbps (Mon) 0 Tx Data Bytes 108 Mbps (Mon) 0 RADIO Stats ----------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 358 Rx Total Control Frames Recvd 736829 Rx Total Bytes Recvd 755424522 Rx Total Data Bytes Recvd 78179450 Rx Total RTS Frames Recvd 230212 Rx Total CTS Frames Recvd 204854 Rx Total ACK Frames 2344801 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 359: Show Ap Debug Radius-Statistics

    Not used Not used In Service: Example1 Not used 67920s used Not used Accounting Requests 0 Raw Requests 0 PAP Requests 0 CHAP Requests 0 MS-CHAP Requests 0 MS-CHAPv2 Requests 0 Mismatch Response 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 360: Show Ap Debug Rfc3576-Radius-Statistics

    Use this command to view the CoA details for debugging authentication and authorization related issues. Example The following example shows the output of the show ap debug rfc3576-radius-statistics command: RADIUS RFC3576 Statistics ------------------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 361 Not used Not used Not used In Service: booth-dot1x-225 used Not used Not used Not used In Service: aaa used Not used Not used Not used Disconnect Requests 0 Disconnect Accepts 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 362: Show Ap Debug Shaping-Table

    Use this command to view the shaping information for clients connected to an AP. Example The following output is displayed for the show ap debug shaping-table command: Interface :wifi1 VAP aruba102 in out drop fail q cmn[C:O:H] Numcl TotCl BWmgmt SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 363 Shows the number of queued packets tx-t Shows the total time spent transmitting data. rx-t Shows the total time spent receiving data. al-t Shows the total time allocated for transmitting data to this station. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 364: Show Ap Debug Spanning-Tree

    34.04 bridge forward delay 15.00 ageing time 13.29 hello timer 0.82 tcn timer 0.00 topology change timer 0.00 gc timer 22.55 flags Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 365: Show Ap Debug Stm-Config

    Indicates if server load balancing is enabled. MAC Authentication Indicates if MAC authentication is enabled. RADIUS Accounting Indicates if RADIUS accounting is enabled. Associated RADIUS Serv- Displays the authentication server details configured for an SSID. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 366: Show Ap Debug Stm-Role

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.73 show ap debug stystem-status Description This command displays the detailed system configuration information for an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 367: Show Ap Debug Tacas-Statistics

    Description This command displays the TACACS statistics for the authentication servers configured on an AP. Syntax show ap debug tacacs-statistics Usage Guidelines Use this command to view the authentication server details. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 368: Show Ap Dot11K-Beacon-Report

    Outstanding Auths SEQ first/last/free Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.75 show ap dot11k-beacon-report Description This command displays the beacon report details for the 802.11k clients of an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 369: Show Ap Dot11K-Nbrs

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.76 show ap dot11k-nbrs Description This command displays the neighboring details of the 802.11k clients connected to an AP. Syntax show ap dot11k-nbrs SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 370: Show Ap Flash-Config

    This command shows the statistics of the AP configuration stored in flash memory. Syntax show ap flash-config Usage Guidelines Use this command to view the configuration details in the flash memory. Example The following example shows the output of show ap flash-config command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 371: Show Ap Mesh Counters

    Usage Guidelines Use this command to view a list of mesh counters available for an AP. Example The following example shows the output of show ap mesh counter command. Mesh Packet Counters -------------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 372 Echo Sent Number of echo packets sent. Echo Recv Number of echo packets received. Probe Req Number of probe request packets sent from the interface specified in the Mesh-IF parameter. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 373: Show Ap Mesh Link

    MAC Portal Channel Age Hops Cost Relation Flags RSSI Rate Tx/Rx --- ------ ------- --- ---- ---- -------- ----- ---- ---------- 00:0b:86:e8:09:d1 00:1a:1e:88:01:f0 157 0 1 11.00 C 3h:15m:42s - 65 54/54 00:1a:1e:88:02:91 00:1a:1e:88:01:f0 157 0 1 4.00 C 3h:35m:30s HL 59 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 374 For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 375: Show Ap Mesh Neighbors

    6c:f3:7f:a5:df:90 5.00 N 23s 6c:f3:7f:a5:df:30 5.00 N 3d:18h:16m: d8:c7:c8:3d:3b:10 5.00 N 15s Flags RSSI Rate Tx/Rx A-Req A-Resp HT-Details Clus- Fail ----- ---- ---------- ----- ------ ----- ---------- ----- ----- 20MHzsgi- 78042e34005c8b372de0472df0727 20MHzsgi- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 376 Number of association requests from clients. A-Resp Number of association responses from the mesh node. A-Fail Number of association failures. Cluster ID Name of the Mesh cluster that includes the specified AP or BSSID. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 377: Show Ap Monitor

    Shows list of APs being monitored. ap-wired-mac Shows the MAC address of the wired AP. arp-cache Shows ARP Cache of learned IP to MAC binding arp-vlan-cache Shows ARP cache that contains VLAN tags. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 378 Last Wired Containment Timer Tick • Last Tagged Wired Containment Timer Tick • Spoof frames sent • Spoof frames sent on tagged VLAN • enet-wired-mac Shows Wired MAC Addresses learned. ids-state <type> Shows IDS State. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 379 Example show ap monitor active-laser-beams The following example shows the output of show ap monitor active-laser-beams command: Active Laser Beam Sources ------------------------- bssid channel rssi ap name lms ip master ip inactive time SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 380 80211b/g-HT-20 disable 12174/1934 wpa2-8021x-aes 80211b/g-HT-20 disable 12146/543 open 80211b/g-HT-20 disable 12117/387 11/0 wpa2-psk-aes 80211b/g-HT-20 disable 12098/5402 32/31 open 80211b/g disable 11897/2280 47/1 wpa2-psk-aes 80211a-VHT-80 disable 7640/7640 open 80211a-VHT-80 disable 2834/63 22/0 wpa2-psk-aes SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 381 ARP Cache Table mac ip vlanid age --- -- ------ --- d8:c7:c8:cb:d4:20 10.17.88.188 d8:c7:c8:cb:d3:d4 10.17.88.186 00:0b:86:40:1c:a0 10.17.88.129 1m:18s show ap monitor arp-vlan-cache The following example shows the output of show ap monitor arp-vlan-cache command: br0:10.65.130.92 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 382 ● Detect Power Save DOS Attack ● Detect Rate Anomaly ● Sequence ● IDS Signature— Deauthentication Broadcast and Deassociation Broadcast ● Detect AP Spoofing ● Valid and Protected SSIDs (from IDS Unauthorized Device Profile) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 383 00:24:d7:40:bb:b0 00:1a:1e:17:dc:62 00:00:00:00:00:00 00:00:00:00:00:00 133 50 7 44 60:67:20:5f:e1:94 00:1a:1e:17:d4:a0 00:00:00:00:00:00 00:00:00:00:00:00 6 43 7 0 58:94:6b:a0:47:74 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 217 104 7 0 b0:ec:71:98:da:44 00:24:6c:80:55:b0 00:00:00:00:00:00 00:00:00:00:00:00 37 2 7 0 00:27:10:2a:c6:ac 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 72 50 7 30 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 384 WIF Scanning State: wifi0: d8:c7:c8:3d:42:10 --------------------------------------------- Parameter Value --------- ----- Probe Type m-portal Phy Type 80211a-HT-40 Scan Mode reg-domain Scan Channel no Disable Scanning yes RegDomain Scan Completed yes DOS Channel Count 0 Current Channel 149+ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 385 ----- --------- ----------- ---------- ---- ------ 0 0 0 0 0 0 RSSI ---- avg-signal low-signal high-signal count duration (sec) ---------- ---------- ----------- ----- -------------- 40 40 40 748 70 AP Impersonation State SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 386 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 rx 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 HT RX Rate Stats SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 387 The following example shows the output of show ap monitor status command. AP Info ------- key value --- ----- Uptime 233059 AP Name d8:c7:c8:cb:d4:20 LMS IP 0.0.0.0 Master IP 0.0.0.0 AP Type 135 Country Code 21 Wired Interface SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 388 RTLS Configuration and State ----------------------------- Type Server IP Port Freq Active Rpt-Tags Tag-Mcast-Addr Tags-Sent Rpt-Sta Incl- Unassoc-Sta Sta-Sent Cmpd-Msgs-Sent ---- --------- ---- ---- ------ -------- -------------- --------- ------- ----------- ----- --- ----- -------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 389: Show Ap Pmkcache

    Usage Guidelines Use this command to view PMK cache table contents for the clients associated with an AP. Example The following example shows the output of show ap pmkcache command. PMK Cache Table --------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 390: Show Ap Virtual-Beacon-Report

    Usage Guidelines Use this command to view virtual beacon table of an AP. The virtual beacon table with the details of clients associated an AP is broadcast by each table. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 391 Too many clients try to move to me Done Current AP just deauth the client Adopted Client has moved to me successfully Total 2 VBRs 00:24:6c:c8:74:4c# show ap debug client-match 0 Client Match Status:: RUNNING BALANCING Associated:1, Threshold:1 Leaving:0, Coming:0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 392: Show Ap1X

    Use this command to view the 802.1X supplicant configuration details on an AP. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.85 show ap1xcert Description This command displays the details of certificates used for 802.1X authentication with wired ports. Syntax show ap1xcert SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 393: Show Ap-Alert

    Indicates the type of alert received for the AP. MAC Address Indicates the MAC address of the AP clients. IP Address Indicates the IP address associated with the AP. Description Displays a brief description of the alert received. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 394: Show Ap-Env

    344# The output of this command indicates if the AP is configured to use an external or integrated antenna and if the AP is configured as a master AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 395: Show Aps

    (dBm) Need Antenna Config From Port Config Id Config Csum Ext SSID Active Age Link Local IP Address ---- ---------- ---- -------- ------- ---- ------------ --------- ---- -------- ----------- -------------- ------------------- -------- ------------- ----------- -------------- ------------------- --------------------- -- ---- ------------- --------- --------- ----------- --------------- --- -------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 396 The following output is displayed for the show aps scanning command: AP Scanning Stats ----------------- Name IP Address 2.4 Reqs 2.4 Voice Rejs 2.4 Video Rejs 5.0 Reqs ---- ---------- -------- -------------- -------------- ----- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 397 The maximum power consumption value of APs sampled over the previous one minute, in mW. The following output is displayed for the show aps sync command: AP Sync List ------------ MAC IP Address Class Current Version --- ---------- ----- --------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 398: Show App-Services

    The following example shows the output of the show app-services command: Application Service ------------------- Name IP Protocol Start Port End Port ---- ----------- ---------- -------- 65535 8200 8200 bootp cfgm-tcp 8211 8211 cups dhcp 65535 65535 h323-tcp 1720 1720 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 399 Displays the IP protocol numbers for each application service. Start Port and End Port Indicates the range of port numbers on which the application ser- vices are enabled. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 400: Show Arm Config

    SLB NB Matching Percent :75 SLB Calculating Interval :30 SLB Threshold :2 Custom Channels :No 2.4 GHz Channels ---------------- Channel Status ------- ------ 1 enable 2 disable 3 disable 4 disable 5 disable 6 enable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 401 36 enable 40 enable 44 enable 48 enable 52 enable 56 enable 60 enable 64 enable 149 enable 153 enable 157 enable 161 enable 165 enable 36+ enable 44+ enable 52+ disable 60+ disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 402: Show Arm-Channels

    Indicates if the channels in the 2.4 GHz and 5 GHz bands are ena- bled or disabled. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.91 show arm-channels Description This command displays the ARM channel details configured on an AP. Syntax show arm-channels SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 403 9 disable 10 disable 11 enable 12 disable disable 1+ enable 2+ disable 3+ disable 4+ disable 5+ disable 6+ disable 7+ enable 5.0 GHz ------- Channel Status ------- ------ 36 disable 40 disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 404: Show Arp

    Indicates if the channels in the 2.4 GHz and 5 GHz bands are enabled or disabled. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.92 show arp Description This command displays the ARP entries for the Virtual Controller. Syntax show arp SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 405: Show Attack

    ARP attacks or malformed DHCP packets. Syntax show attack {config| stats} Parameter Description config Displays firewall configuration details to protect the network from wired attacks. stats Displays attack counters. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 406 0 send dhcp attack alert counter 0 arp poison check counter 0 garp send check counter 1628 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 407: Show Audit-Trail

    Displays the time when the configuration command was executed. From Displays the source from which the configuration command was executed (CLI, WebUI, or other servers) Command Displays the configuration details. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 408: Show Auth-Surviveability

    The output of these commands provide the following information: Parameter Description UserName Indicates the username of the client whose credentials are cached. Remaining Cache-Time Displays the remaining duration for cache expiry. Auth Survivability time Indicates the configured duration for cache expiry. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 409: Show Backup-Config

    The following text provides an example for the show backup-config command output: version 6.4.0.0-4.1.0 virtual-controller-country IN virtual-controller-key 0cb5770401cdeb6e4363c25fdfde17d907c4b095a9be5e4258 name instant-C4:42:98 terminal-access clock timezone none 00 00 rf-band all allow-new-aps allowed-ap d8:c7:c8:c4:42:98 wide-bands 5ghz 80mhz-support min- tx-power 18 max-tx-power 127 band-steering-mode prefer-5ghz air-time-fairness-mode fair-access client-aware SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 410 3 rule any any match any any any deny wlan external-captive-portal server localhost port 80 url "/" auth-text "Authenticated" auto-whitelist-disable https blacklist-time 3600 auth-failure-blacklist-time 3600 ids classification wireless-containment none airgroup disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 411: Show Banner

    The following output is displayed for the show banner command: (scalance)# show banner ######welcome to login instant########### ####please start to input admin and password######### ###Don't leak the password### Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 412: Show Blacklist-Client

    The following output is displayed for the show blacklist-client config command: Blacklist Time :3600 Auth Failure Blacklist Time :3600 Manually Blacklisted Clients ---------------------------- MAC Time --- ---- 00:24:6c:ca:41:51 14:46:18 Dynamically Blacklisted Clients ------------------------------- MAC Reason Timestamp Remaining time(sec) AP name SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 413: Show Ble-Config

    Displays the BLE configuration details. Usage Guidelines Use this command to view the BLE configuration. Example The following example shows the output of the show ble-config command: (scalance)# show ble-config BLE Configuration ----------------- Item Value SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 414: Show Calea Config

    Usage Guidelines Use this command to CALEA configuration details. Example The following example shows the output of the show calea config command: (scalance)# show calea config calea-ip :10.0.0.5 encapsulation-type :gre gre-type :25944 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 415: Show Calea Statistics

    0 Alloc failure : 0 Fragged packets : 0 Jumbo packets : 263 Total Tx fail : 0 Total Tx ok : 263 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 416: Show Cellular

    The following example shows the partial output of the show cellular config command: No Comm USB Plugged in Cellular configuration ---------------------- Type Value ---- ----- 4g-usb-type usb-type usb-dev usb-tty usb-init usb-auth-type usb-user usb-passwd usb-dial usb-modeswitch modem-isp modem-country Supported Modem Types --------------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 417 Supported Country list ---------------------- Country list ------------ France Israel Sweden Spain China Norway Germany Croatia Saudi-Arabia Japan SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 418 Product USB2.0 Hub Serial Number Driver Vendor ID 05e3 Product ID 0608 Manufacturer ZTE, Incorporated Product ZTE Wireless Ethernet Adapter Serial Number MF8310ZTED000000 Driver option Vendor ID 19d2 Product ID 1405 Model MF831 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 419: Show Cert All

    Description This command displays the details about the certificates uploaded on an AP. Syntax show cert all Usage Guidelines Use this command to view information about the certificates uploaded to an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 420 The output of this command displays details such as the version, serial number, subject, issue date, expiry date, type of encryption, and RSA key information for the certificates uploaded to the AP. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 421: Show Clarity

    AUTHSERVER TIMEOUT Jan 1 15:47:59 DOT1X_EVENT 00:db:df: 0a:41:6e ac:a3:1e:c9:32:31 192.168.0.118 AUTHSERVER TIMEOUT Jan 1 16:05:03 DOT1X_EVENT 00:db:df:0a:41:6e ac:a3:1e:c9:32:31 192.168.0.118 3 6 AUTHSERVER TIMEOUT Jun 21 09:25:27 00:db:df:0a:41:6e ac:a3:1e:c9:32:21 192.168.0.118 3 DOT1X_EVENT AUTHSERVER TIMEOUT SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 422 DHCP Server Stats Table ---- In Pending Send ------------------------------------------ Client Mac Sequence Timestamp Time Diff1 Time Diff2 Time Diff3 Time Diff4 Server Ip ---------- -------- --------- ---------- ---------- ---------- ---------- --------- Total pending send: 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 423: Show Clearpassca

    Use this command to view the details of the ClearPass Policy Manager certificate uploaded on an AP. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.106 show clients Description This command displays details about the AP clients. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 424 Channel Type Role IPv6 Address Signal Speed (mbps) ------- ---- ---- ------------ ------ ------------ 36+ AN rev_ipv6 2001:470:36:5c3:ffff:ffff:ffff:64 0(poor) 0(poor) Number of Clients 1 Info timestamp :605085 A similar output is displayed for the show clients wired command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 425 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 426 Speed (mbps) Reauth Age ------- ---- ---- ------------ ------ ------------ ----------- rev_ipv6 2001:470:36:5c3:ffff:ffff:ffff: 0(poor) 0(poor) Reauth Interval Reauth ESSID Auth Type Authenticated DEL Age Vlan ESSID ---------------- ------------- --------- -------------- --- --- ---- ------ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 427: Show Clock

    IP address of the AP to which the client is roamed. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.107 show clock Description This command displays the system clock, current timezone, and the daylight saving time configured on an AP SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 428 Guadalajara UTC-06 CDT first sunday april 02:00last sunday october 02:00 Mexico-City UTC-06 CDT first sunday april 02:00 last sunday october 02:00 Monterrey UTC-06 CDT first sunday april 02:00 last sunday october 02:00 Saskatchewan UTC-06 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 429 Enter the weekday when the time change ends. End Month Enter the month when the time change ends. End Hour Enter the hour when the time change ends. End Hour Enter the hour when the time change ends. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 430: Show Cluster-Security

    Use this command to view information about the cluster security configuration and monitoring statistics for the APs in the cluster. Example The following output is displayed for the show cluster-security command: Cluster Security Profile ------------------------ Parameter Value --------- ----- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 431 10.17.142.73[4434] active 19bb00b1 10.17.142.75[4434] active 19bb00b4 10.17.142.74[4434] active 19bb00b0 10.17.142.71[4434] active 19bb00b3 Total peers count:5 The following output is displayed for the show cluster-security stats command: Cluster Security Statistics --------------------------- Statistic Name Counts SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 432 Cluster Security Connections Statistics for: Local Idx = 19bb00b0 ---------------------------------------------------------- -------- Statistic Name Counts -------------- ------ IO Send success/fail 1835/0 IO Receive success/fail 2583/0 IO Receive peek fail Peer connection mismatch SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 433 SSL msg write fail (error) SSL msg read fail (out of resources) SSL msg read fail (error) Total DTLS msg tx/rx 1072/1514 Cluster Security Connections Statistics for: Local Idx = 19bb00b2 ---------------------------------------------------------- -------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 434 Verify peer mac address fail Verify peer certificate fail Retransmitted handshakes SSL msg write fail (out of resources) SSL msg write fail (error) SSL msg read fail (out of resources) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 435 Cluster Security Peers' Statistics for: Remote Address = 10.17.142.73 ---------------------------------------------------------- ------------ Statistic Name Counts -------------- ------ Peer collisions occurred/resolved Peer connections active/connected/recv da- 36/21/0/1 ta/close notify/shutdown 5/0 Peer connec- tions being renegoti- ated SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 436: Show Config-Status

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.109 show config-status Description This command displays the details about the configuration status of an AP. Syntax show config-status SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 437: Show Configuration

    Use this command to view the entire configuration saved on the AP, including all wireless and wired profiles, uplink configuration, ARM settings, radio profiles, ACLs, and interface settings. Example The following example displays the show configuration command output: version 6.2.1.0-3.3.0.0 virtual-controller-country IN SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 438 192.0.2.1 255.255.255.255 match tcp 80 80 permit rule 192.0.2.2 255.255.255.255 match tcp 4343 4343 permit rule any any match udp 67 68 permit SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 439 "test" enable 3gpp-plmn1 "" 3gpp-plmn2 "" 3gpp-plmn3 "" 3gpp-plmn4 "" 3gpp-plmn5 "" 3gpp-plmn6 "" hotspot anqp-ip-addr-avail-profile "test" enable ipv4-addr-avail no ipv6-addr-avail hotspot h2qp-wan-metrics-profile "test" enable wan-metrics-link-status (null) no symm-link no at-capacity uplink-speed 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 440 "" roam-cons-len-2 0 roam-cons-oi-2 "" roam-cons-len-3 0 roam-cons-oi-3 "" wlan ssid-profile profile-1 enable index 0 type employee essid profile-1 wpa-passphrase c52acfeb3e59ef254a6d14fe2ad565382e46f7eecde33af3 opmode wpa2-psk-aes max-authentication-failures 0 vlan 333 rf-band all captive-portal disable dtim-period 1 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 441 1 inactivity-timeout 1000 broadcast- filter none dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 auth-survivability cache-time-out 24 wlan external-captive-portal server localhost port 80 url "/" auth-text "Authenticated" auto- whitelist-disable blacklist-time 3600 auth-failure-blacklist-time 3600 ids classification SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 442 1 shutdown access-rule-name default_wired_port_profile speed auto duplex full no poe type employee captive-portal disable no dot1x enet0-port-profile default_wired_port_profile SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 443: Show Console-Setttings

    Usage Guidelines Use this command to view if the access to AP console is enabled or disabled. Example The following example shows the output of the show console-settings command: (scalance)# show console-settings Console Setting SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 444: Show Country-Codes

    This command shows the list of supported country codes for the AP. Example The following example shows a partial output of the show country-codes command . CA:Canada DE:Germany NL:Netherlands IT:Italy PT:Portugal LU:Luxembourg NO:Norway SE:Sweden FI:Finland DK:Denmark CH:Switzerland CZ:Czech Republic SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 445 MY:Malaysia BR:Brazil SA:Saudi Arabia LB:Lebanon AE:United Arab Emirates ZA:South Africa AR:Argentina AU:Australia AT:Austria BO:Bolivia CL:Chile GR:Greece HU:Hungary IS:Iceland IN:India IE:Ireland KW:Kuwait LV:Latvia LI:Liechtenstein LT:Lithuania MX:Mexico MA:Morocco NZ:New Zealand PL:Poland PR:Puerto Rico SK:Slovak Republic SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 446 CR:Costa Rica EC:Ecuador HN:Honduras KE:Kenya UA:Ukraine VN:Vietnam BG:Bulgaria CY:Cyprus EE:Estonia MT:Malta MU:Mauritius RO:Romania CS:Serbia and Montenegro ID:Indonesia PE:Peru VE:Venezuela JM:Jamaica BH:Bahrain OM:Oman JO:Jordan BM:Bermuda CO:Colombia DO:Dominican Republic GT:Guatemala PH:Philippines LK:Sri Lanka SV:El Salvador SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 447: Show Cpcert

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.113 show cpcert Description This command displays the details of the captive portal server certificate used by the AP for guest authentication. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 448: Show Cpu

    RSA key information for the captive portal certificates uploaded to the AP. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.114 show cpu Description This command displays the CPU details. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 449 1278 root S < 728 1 0.0 0.5 mini httpd 1450 root S < 796 1377 0.0 0.6 hostapd 1382 root S < 688 1377 0.0 0.5 msgHandler 1451 root S < 624 1377 0.0 0.4 wpa_supplicant SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 450: Show Datapath

    Displays datapath statistics for IPv6 users. dmo-session Displays details of a DMO session. dmo-station <mac> Displays details of a DMO station. dns-id-map Displays IP address of the domain name configured in a domain-based ACL. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 451 The following example shows the output of show datapath acl-all command. ACL Name {magic-vlan} Number {106} 01:00 17 0-65535 8209- 8211 02:00 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any 03:00 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 any P4 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 452 17 0-65535 53-53 255.255.254.0 224.0.0.0 11:00 192.168.10.0 17 0-65535 53-53 255.255.254.0 12:00 17 0-65535 53-53 13:00 192.168.10.0 192.168.10.0 6 0-65535 8081-8081 P4 255.255.254.0 255.255.254.0 14:00 192.168.10.0 224.0.0.0 6 0-65535 8081-8081 P4 255.255.254.0 224.0.0.0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 453 I - Invert SA, i - Invert DA, H - high prio, O - set prio, C - Classify Media A - Disable Scanning, B - black list, T - set TOS, 4 - IPv4, 6 - IPv6 ---------------------------------------------------------------- ACL Name {test 0} Number {142} 1: any any 17 0-65535 8209-8211 P4 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 454 S - split-tunnel, B - bridge, M - mesh, P - PPPoE C - content-filter, O - corp-access, h - to HAP, f - to FAP h - dhcp-redirect Dev Name VLANs PVID ACLs FramesRx FramesTx Flags SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 455 175 up 1111000 175 down 1111000 177 up 1111000 177 down 1111000 179 up 1111000 179 down 1111000 181 up 1111000 181 down 1111000 183 up 1111000 183 down 1111000 185 up 1111000 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 456 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 1111000 4340 4340 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 457 0/0, 3907, r:1111000 13(cpu:0): flags 0, 1000192 bps, policed 0, dropped queued avail pktq 0/0 0/0, 3907, r:1111000 14(cpu:0): flags 0, 1000192 bps, policed 0, dropped queued avail pktq 0/0 0/0, 3907, r:1111000 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 458 CPU 1: Tlet Calls=0 Rx=0/329806 SJRx=0/0 Tx=21835 yields=0/2 EthIn=329806 GMAC 0 Statistics: RX Frames: bf5690c0 Frames: 00000000 RX Failures: 00055d99 Failures: 00000000 Dot1dDiscards: 000000c7 Policed Frames: 00000000 v4 FW Denied: 00000008 v6 FW Denied: 00000000 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 459 Route Table Statistics: Cur Entries(v4/v6): 00000003/00000000 High Entries: 00000003 Max Entries: 00000080 Total Entries: 00000009 Patricia: Cur 00000003 Full 00000000 Dup 00000000 Ignore 00000000 Null: Cur 00000000 Full 00000000 ECMP Full 00000000 Session Statistics: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 460 C - client, M - mirror, V - VOIP Deep inspect, U - Locally destined s - media signal, m - media mon, a - rtp analysis E - Media Deep Inspect, G - media signal SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 461 - local, I - Intercept, D - Deny local routing FM(Forward Mode), S - Split, B - Bridge, N - N/A IP MAC ACLs Contract Location Age ---------------------------------- ----------------- ------ --------- -------- ----- 2001:470:36:5c3:ffff:ffff:ffff:5b AC:A3:1E:CD:47:1A 105/0 0/0 0 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 462 104.244.42.129 104.244.42.1 74.117.182.194 show datapath https-blocked-ip-cache The following example shows the output of show datapath https-blocked-ip-cache command. Network LifeTime ------------------- ------------------------------ ------------- 106.38.179.32 106.39.178.1 54.239.25.192 54.239.26.128 119.188.142.1 61.135.144.254 show datapath mcast SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 463 --------------- ----------------- ----------- ----- 10.17.88.2 00:0B:86:40:1C:A0 1 A 10.17.88.59 D8:C7:C8:C4:42:98 1 LP 192.168.10.1 D8:C7:C8:C4:42:98 3333 LP show datapath sbr The following example shows the partial output of show datapath sbr command. Source Based Routing Datapath Table SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 464 I - Deep inspect, U - Locally destined s - media signal, m - media mon, a - rtp analysis E - Media Deep Inspect, G - media signal A - Application Firewall Inspect L - ALG session SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 465 ---------------- -------------- ---- ----- ----- -------------------------- --------- ------- --------- ------ ------- ----- ------- ----- --------- 173.223. 63421 80 linkedin [305 ] content- 235.19 abcdefg 50338 53 incom- ] Web-Not-Class plete FCIA 63460 ] Web-Not-Class https SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 466 37685 8080 incom- ] category-unknown plete 10.20.12 50119 [1448] computer- 0.173 and- fice365 abcefg 10.20.12 49543 [191 ] private-ip- 0.153 soap abcefg 10.20.12 63997 [198 ] category- 0.173 unknown acef App-Not- ] Web-Not-Class Class SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 467 Frames dropped for ingress change on permanent bridge entry 0 Frames received on port not in VLAN 0 Unicast frames filtered 86 Frames dropped due to FP firewall 6 Frames that failed FP spoofing check 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 468 Frames to session processing 718714 Frames to SP 21792 Frames bridged by SP 396 Frames routed by SP 0 Frames for SP session processing 17454 Frames for FP application processing 3942 Frames bridged by FP 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 469 The following example shows the partial output of show datapath vlan command. Datapath VLAN Table Entries --------------------------- Flags: N - Nat Inside, M - Route Multicast, R - Routing S - Snoop MLD, G - Snoop IGMP, P - Proxy IGMP SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 470 ● Details of a DMO session. ● Multicast table statistics for the AP. ● Route table statistics for the AP. ● Datapath session table statistics for the AP ● Hardware packet statistics for the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 471: Show Ddns

    Domain Name IP Address DHCP profile name Success Count Failure Count --------- ----------- ---------- ----------------- ------------- ------------- iap1-ddns-home test.ddns 192.192.192.17 None 132-13-Auto-PC test.ddns 192.168.99.18 DistL3 132-14-Auto-PC test.ddns 192.168.99.4 DistL3 Last updated Last update status ------------ ------------------ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 472: Show Delta-Config

    Syntax show delta-config [<cfgid>] Usage Guidelines Use this command to view the difference between the current configuration information stored in the AP flash memory and the configuration information saved in the AP memory. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 473: Show Derivation-Rules

    -------- --------- ------- --------- ----- ---- Filter-Id contains 123456 Example1 8 0 AP-Name contains instant instant 9 0 Vlan Derivation Rules --------------------- Attribute Operation Operand Vlan Id Hits -------- --------- ------- ------- ---- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 474: Show Dhcp-Allocation

    Use this command to view DHCP address allocation for network address translated clients to allow mobility of the clients across APs. Example The following example shows the output of show dhcp-allocation command: (scalance)# show dhcp-allocation ---------------------/etc/dnsmasq.conf-------------------- listen-address=127.0.0.1 addn-hosts=/etc/ld_eth_hosts addn-hosts=/etc/ld_ppp_hosts dhcp-src=192.168.10.1 dhcp-leasefile=/tmp/dnsmasq.leases dhcp-authoritative filterwin2k #magic-vlan vlan-id=3333 dhcp-range=192.168.10.3,192.168.11.254,255.255.254.0,12h SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 475: Show Dhcps Config

    DHCP Option Reserve Reserve Count First Last 43200 ---------------- ----------- 0 Branch ID Branch Netmask Branch DHCP Host DHCP DDNS DDNS Key Router --------- -------------- ----------- --------- --------- -------- 0.0.0.0 0.0.0.0 0.0.0.0 Disabled SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 476 Displays the DHCP assignment modes. The current release of Scalance W supports the following DHCP assignment modes. Distributed, L2 • Distributed, L3 • Local • Local, L3 • Centralized, L2 • VLAN Indicates the VLAN ID assigned to DHCP scope. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 477: Show Dhcpc-Opts

    Indicates if DNS caching is enabled or disabled. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.121 show dhcpc-opts Description This command displays the DHCP options configured on an AP. Syntax show dhcpc-opts SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 478: Show Dhcp

    Use this command to view the subnet details for the Distributed, L2 and Distributed, L3 networks. Example The following example shows the output of the show dhcp subnets command: DHCP Subnet Table ----------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 479 ----------------------------------- ->:Circuit_ID is added first in DHCP Opt82 ->:SubOption APMAC to be added in ASCII format separated with <-> in lower-case at position 1 in Circuit_ID of DHCP option82 DHCP Option82 Remote_ID -------------------------------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 480: Show Distributed-Dhcp-Branch-Counts

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.123 show distributed-dhcp-branch-counts Description This command displays the branch count for the distributed DHCP scopes configured on an SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 481 Displays the number of clients allowed for each DHCP branch. Branch Count Displays the number of branches allowed for the specified range of IP ad- dresses. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 482: Show Domain-Names

    The following example shows the output of the show domain-names command: example1.com example.com Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.125 show dpi Description This command displays the DPI configuration information. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 483 The following example shows the output of the show dpi appcategory all command: (scalance)# show dpi appcategory all Pre- defined Application Categories SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 484 800(765) dpimgr qsession total uapp alloc free 799(764) dpimgr qsession total session age 1024(979) dpimgr qsession classified skipped 73(73) dpimgr qsession event param error 16(16) dpimgr qsession total classified 562(537) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 485 0 number of bytes in rx socket buffer 0 total number of incomplete session 0 number of dpi session mismatch 0 AP average cpu usage in 10 secs 20 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 486 Established—Denotes that a TCP connection has been estab- • lished between the AP and the BCA proxy server. Failure—Denotes a failure in establishing a TCP connection • between the AP and the BCA proxy server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 487 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 488 Input URL: www.yahoo.com Request sent for CLOUD LOOKUP, please try again. On running command again, the following information is retrieved from the cloud server and displayed as the output: Input URL: www.yahoo.com Found CACHED RESULT: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 489: Show Dpi-Error-Page-Urls

    The following example shows the output of the show dpi-error-page-url command: (scalance)# show dpi-error-page-url Global DPI error page URLs Config --------------------------------- ID URL -- --- 0 https://www.yahoo.com 1 https://www.test.com The output of this command displays ID and URLs that are blocked. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 490: Show Dpi-Stats

    Displays the complete DPI statistics for the application, application category, session, web category, and web reputation stored on the AP since the last 15 minutes. deny Displays the blocked URLs and web content related traffic. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 491 The following example shows the output of the show dpi-stats appcategory full command: Last snapshot timestamp 17:10:47 Dpi Top Application category list --------------------------------- App Category App Category Id Total bytes ------------ --------------- ----------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 492 4339 Datapath DPI CDR Session Table Entries -------------------------------------- Source IP Webcat Webrep TX Bytes Rx Bytes --------- ------ ------ -------- -------- 10.17.139.167 ssdp(197) Not-Classified(0) (0) Not-Classified 6923 10.17.139.183 ssdp(197) Not-Classified(0) (0) Not-Classified 5458 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 493 Dpi Top Web Reputation list --------------------------- Web Reputation Web Reputation Id Total bytes -------------- ----------------- ----------- trustworthy-sites 1211900 moderate-risk-sites 2998 --------------------------- Total bytes :1214898 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 494: Show Drt State

    Shows the DRT version of the AP. DRT build time Shows the date the DRT build has passed. Default from Image Shows whether the AP is using the default DRT from the image. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 495: Show Election

    The following example shows the output of show election statistics command: State : Master master_beacon : sent=8162 rcvd=0 hierarchy_beacon: sent=7685 rcvd=0 hierarchy_ack : sent=0 rcvd=0 beacon_req : sent=0 rcvd=0 Slave->Pot-Master : 0 time Pot-master->Master: 0 time Pot-master->Slave : 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 496 Displays the time between the current hierarchy beacon and last hierar- received ticks chy beacon. provisioned master Indicates that the preferred AP has been denied as a denied master. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 497: Show Esl

    Displays the configuration status of the specified ESL profile. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.131 show esl-radio Description This command displays the status of Electronic Shelf Label Radio (USB dongle) traffic. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 498: Show Facebook

    The following output is displayed for the show cluster-security command: Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.132 show facebook Description This command displays the Facebook configuration details when an AP successfully registers with Facebook. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 499: Show Fault

    Usage Guidelines Use this command to view the active faults for an AP. Active faults are generated due to system faults. Example The following example shows the output for the show fault command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 500: Show Fiewall

    Privileged EXEC mode 4.16.134 show fiewall Description This command displays the status of firewall settings of an AP. Syntax show firewall Usage Guidelines Use this command to view the firewall configuration details of the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 501: Show G-Max-Clients

    SSID profile. Example The following show g-max-clients command output displays the maximum number of clients allowed to connect to the each SSID: (scalance)# show g-max-clients test1 : 77 test2 : 200 test3 : 64 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 502: Show Gre Config

    GRE Backup IP :2000:172:16:168::2 GRE Type :25944 (0x6558) GRE Per AP Tunnel :disable GRE Preemption :enable GRE Holdon Time :60 (secs) GRE Failover type :ping GRE Ping Interval :10 (secs) GRE Allowed Inactive Time :10 (secs) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 503: Show Gre Status

    4.16.137 show gre status Description This command displays the various parameters indicating the status of GRE. Syntax show gre status Usage Guidelines Use this command to view the GRE status on an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 504 If endpoint is backup, the value starts increas- ing. When it reaches its upper limit, the ping to primary is done and accordingly the tunnel endpoint is changed. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 505: Show Ids

    6c:f3:7f:94:63:02 avyas_vap2 Interfering 6 G 17:40:20 00:24: 6c:2a:7d:0b edward-suiteb Interfering 149 AN 40MZ 17:39:19 6c:f3:7f:a5:df:34 sw-san-rapng-nat Interfering 153 AN 20MZ 17:38:49 6c:f3:7f:56:7d:00 7SPOT Interfering 1 GN 20MZ 17:32:19 00:24:6c:80:8e:82 instant Interfering 11 GN 20MZ 17:29:48 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 506 The following output is displayed for the show ids phy-types command: Physical Types -------------- Keyword Value ------- ----- ag 3 The following output is displayed for the show ids rap-types command: RAP Types --------- Keyword Value ------- ----- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 507: Show Ids-Detection Config

    SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 508 Indicates if the detection level for a policy is set to medium. High Indicates if the detection level for a policy is set to high. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 509: Show Ids-Protection Config

    Policies Displays the list of wired and wireless network infrastructure protection policies. Status Indicates if a policy is enabled or disabled. Indicates if the protection level for a policy is set to low. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 510: Show Inbound-Firewall-Rules

    It also indicates if other options such as logging and prioritizing traffic are enabled when the rule is triggered. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 511: Show Interface Counters

    Receive missed errors 0 Receive overrun errors 0 Receive frame errors 0 Receive CRC errors 0 Receive length errors 0 T ransmitted packets 16435 Transmitted bytes 841278 Transmitted dropped 0 Transmission errors 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 512: Show Image

    The following example shows the output of show image version command: Primary Partition 0 Primary Partition Build Time :2018-07-15 14:28:33 PDT Primary Partition Build Version :8.4.0.0_65801 (Digitally Signed - Production Build) Backup Partition 1 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 513: Show Iot Transportprofile

    This command displays the IoT profile status information. Syntax show iot transportProfile [<profile-name>] Example The following example shows the output of show iot transportProfile command: Default Meridian Profile for BLE --------------------- Endpoints References --------- ---------- Beacon-Management Asset-Tracking-WSS Asset-Tracking-HTTPS ========================================= SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 514: Show Ip Dhcp Database

    Username ankur.kamthe@gmail.com Password It2GbjTXFAYEpHg43VOK2_2KrWePwmVPKwSHBTEj-jM Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.145 show ip dhcp database Description This command displays the DHCP server settings. Syntax show ip dhcp database SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 515: Show Ip Igmp

    Indicates if the DNS cache is enabled. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.146 show ip igmp Description This command displays information about the Internet Group Management Protocol (IGMP) group table. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 516 Indicates the VLAN ID associated with the multicast groups or a specific multicast group address. Destination Indicates the destination to which the multicast packets are routed. Indicates the aging time of the forwarding table entries. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 517: Show Ip Interface

    • Disabled—down • Protocol Displays the status of the IP on the interface. Enabled—up • Disabled—down • The following output is displayed for the show ip interface detail command: ifname : br0 -------------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 518: Show Ip Route

    The following output shows the ip address of routers and the VLANs to which they are connected. Kernel IP routing table Destination Gateway Genmask Flags Window irtt Iface 172.16.10.1 0.0.0.0 255.255.255.255 tun0 10.17.88.128 0.0.0.0 255.255.255.192 2.2.2.0 0.0.0.0 255.255.255.0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 519: Show Ipv6 Interface

    Displays detailed information on the interfaces that support IPv6. Usage Guidelines Use this command to view IPv6 related information on an AP. Example The following example shows the output of the show ipv6 interface brief command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 520: Show Ipv6 Route

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.150 show ipv6 route Description This command displays the IPv6 routing table. Syntax show ipv6 route SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 521: Show L3-Mobility

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.151 show l3-mobility Description This command displays details about the Layer-3 (L3) events, mobility configuration, and roaming status of the AP clients. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 522 ------------ Peer IP Local Tunnel ID Remote Tunnel ID Use Count Type ------- --------------- ---------------- --------- ---- Virtual Controller Table ------------------------ Virtual Controller IP Type HAP IP Local Tunnel ID Remote Tunnel ID SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 523 Client Index Client MAC Home Vlan VAP Vlan Destinaton Device Index HAP IP Virtual Controller IP Packets Forwarded -------------- ----------------- L3 Mobility Datapath Tunnel Table --------------------------------- Tunnel Device Remote Protocol Dest IP Clients Idle Time Rx Packets Tx Packets Rx Mcasts Tx SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 524 IP Mismatch - Indicates IP address mismatch if any • Type • Vlan Translations - Displays details about VLAN translation • show l3-mobility events The following example shows the output of the show l3-mobility events command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 525 VC IP Indicates the IP address of the Virtual Controller. Additional Info Displays additional information if any. show l3-mobility status The following example shows the output of the show l3-mobility status command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 526: Show Lacp Status

    The following example shows the output of the show lacp status command: AP LACP Status -------------- Link Status LACP Rate Num Ports Actor Key Partner Key Partner MAC ----------- --------- --------- --------- ----------- ----------- slow 70:81:05:11:3e:80 Slave Interface Status SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 527: Show Ldap-Servers

    Use this command to view the LDAP server configuration information available on an AP. Example The following example shows the output of show ldap-servers command: LDAP Servers ------------ Name IP Address Port Timeout Retry Count Admin-DN Admin Password SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 528: Show Lhm

    This command displays the periodic and on-demand WAN link health monitoring policies (tests) that are configured on an AP; it also shows the number of times each policy has run on an AP Syntax show lhm policy SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 529 Available Tokens :950 Executing :No Queued Periodic Policies Queue-0 :Empty Queue-1 :Empty Queue-2 :Empty Queue-3 :Empty On-demand policy :No on-demand Policy in progress Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 530: Show Log Ap-Debug

    443, path /ws/CNBVHN75NS Jul 25 13:53:34 awc[4594]: wsc lib: Initial logging level 7 Jul 25 13:53:34 awc[4594]: wsc lib: Library version: 1.2 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 531: Show Log Apifmgr

    This command shows image conversion details for the AP. Syntax show log convert Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.158 show log debug Description This command shows the AP full log. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 532: Show Log Drive

    This command displays the status of drivers configured on the AP. Syntax show log driver <count> Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.160 show log kernel Description This command shows AP’s kernel logs. Syntax show log kernel SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 533: Show Log L3-Mobility

    May 9 01:25:53: Too many retries: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 1 tid oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 01:25:52: Potential Foreign Client Information: mac 08:ed:b9:e1:51:87 rcvd from self SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 534: Show Log Network

    <count> Parameter Description <count> Starts displaying the log output from the specified number of lines from the end of the log. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 535: Show Log Openflow

    Starts displaying the log output from the specified number of lines from the end of the log. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.165 show log pppd Description Shows the Point-to-Point Protocol daemon (PPPd) network connection details. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 536: Show Log Rapper

    AP Platform Command Mode All platforms Privileged EXEC mode 4.16.167 show log rapper-brief Description This command provides brief information about IKE message transactions with the exact message and timestamp details. Syntax show log rapper-brief SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 537: Show Log Rapper-Counter

    The following example shows the output of show log rapper-counter command. AP Mac: 18:64:72:c8:20:00 TIME PEER IP COOKIES SPI EXCH ERR ---- ------- ------- --- ---- --- 2017-05-02 06:49:38 | 10.17.140.252 | {6904164c4f81ce9d : e37903823fa5ca58} | {0x7a379000 : 0x4c966100} | IKE_AUTH | SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 538: Show Log Sapd

    2017-05-02 15:14:04 | 10.17.140.252 | {8048813ca5b1eef9 : af50609e79ce0102} | {0x6b0f4400 : 0x61f8bf00} | CREATE_CHILD_SA | SUCCESS Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.169 show log sapd Description This command shows the SAPd details. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 539: Show Log Scd

    [5998]2018-05-24 07:21:22 Handling SYNC packet read [5998]2018-05-24 07:21:22 Accepting SYNC packet [5998]2018-05-24 07:21:22 Adding SYNC with slotId = 368! [5998]2018-05-24 07:21:22 Adding SYNC with slotId = 369! [5998]2018-05-24 07:21:22 Adding SYNC with slotId = 370! SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 540: Show Log Security

    Description This command shows system logs of AP. Syntax show log system <count> Parameter Description <count> Starts displaying the log output from the specified number of lines from the end of the log. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 541: Show Log Upgrade

    [count] Parameter Description count Starts displaying the log output from the specified number of lines from the end of the log. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 542: Show Log User-Debug

    Use this command to view a table of a primary VPN tunnel status. Example The following example shows the output of show log vpn-tunnel-primary command: 2017-04-19 10:07:49 [primary tunnel] cli_proc_rapper_msg(852): Receive rapper msg from 8423 port. 2017-04-19 10:07:49 [primary tunnel] Error!!!: Received RC_OPCODE_ERROR lms 10.17.132.51 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 543: Show Log Vpn-Tunnel-Backup

    2017-05-02 06:49:53 [backup tunnel] SM Handler not needed for state TUNNEL_STATE_INIT event TUNNEL_EVENT_TUNNEL_DISCONNECT 2017-05-02 06:49:53 [backup tunnel] tunnel_unregister_action(2372): unregister ipsec action. 2017-05-02 06:49:53 [backup tunnel] tunnel_unregister_action(2388): ipsec client space already free. E_TIMEOUT) SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 544: Show Log Vpn-Tunnel

    2017-05-02 06:49:36 addroute(529):Dst 0 mask 0 gw a118cee 2017-05-02 06:49:36 addroute(529):Dst a118cfc mask 0 gw a118cee 2017-05-02 06:49:36 tunnel_start_status_monitor_timer(1101): start tunnel status monitor timer. 2017-05-02 06:49:36 tunnel_sysctl_set_hbt_booster: enable heartbeat tunnel 2017-05-02 06:49:53 tunnel_preempt_config(2985): send message to config preemption option none-preempt SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 545: Show Log Wireless

    Starts displaying the log output from the specified number of lines from the end of the log. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.180 show memory Description Displays the information about memory utilization for an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 546 Slab: 32252 SReclaimable: SUnreclaim: 31368 KernelStack: PageTables: NFS Unstable: Bounce: WritebackTmp: CommitLimit: 124024 Committed AS: 33616 VmallocTotal: 516096 VmallocUsed: 39452 VmallocChunk: 449532 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 547: Show Mgmt-User

    Column Description Server Load Balancing Indicates if load balancing is enabled when two authentication servers are used. Local User DB Backup Indicates if the backing up of the local user database is enabled. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 548: Show Network

    Command Mode All platforms Privileged EXEC mode 4.16.182 show network Description This command shows network configuration details for an AP. Syntax show network <name> Parameter Description <name> Displays the name of a network profile. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 549 Blacklisting :Disabled WISPr :Disabled Accounting mode :Authentication Work without usable uplink :Disabled Percentage of Airtime: :Unlimited Overall Limit: :Unlimited Per-user Limit: :Unlimited Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 550: Show Network-Summary

    Indicates the status of the Primary VPN configu- ration. Secondary VPN Indicates the status of the Secondary VPN con- nection. Airwave Indicates the status of the AirWave configuration. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 551: Show Openflow

    OpenFlow MAC Bridge List OpenFlow Dynamic Tunnel List The following example displays the output of the show openflow flow-table command: Flow: <Add at Sun Jun 18 09:19:49 2017><bytes:0, pkts:0, idletmo:0, hardtmo:0 last:1497777589> Match:<17, 222.173.190.239, 186.173.202.254, 60000, 60000> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 552: Show Opendns

    Displays if the OpenDNS credentials if the OpenDNS service is configured on the AP. Usage Guidelines Use this command to view open DNS configuration details. The OpenDNS credentials are used by Scalance W to access OpenDNS to provide enterprise-level content filtering. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 553: Show Out-Of-Service

    Use this command to view the out-of-service operations and the SSID availability based on the out-of-service states detected on the AP. Example The following example shows the output of the show out-of-service command: Out of service trigger Status SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 554: Show Pppoe

    The following example shows the configuration of the PPPoE show pppoe config command. PPPoE Configuration ------------------- Type Value ---- ----- User user Password d226ccefac5a95cd6bb04ca74f20473eae9085fb16892b66 Service name ServiceA CHAP secret 8acc867926ad85681fd0b0c1a15bb818 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 555: Show Port Status

    ---- ---- ----------- ---------- --------- ------ eth0 Disable eth1 Disable eth2 down Disable Loop-Protect Storm-Control Loop-Detection-TX Loop-Detection-RX ------------ ------------- ----------------- ----------------- 39153 The output of this command provides the following information: Parameter Description SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 556 Shows the number of bytes transmitted on the interface. Speed Shows the speed of the Ethernet interface. Duplex Shows the full or half duplex value of the Ethernet interface. Link Shows the Up or Down state of the Ethernet interface. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 557: Show Process

    992 root 348 S /sbin/udhcpc -i br0 -b 1343 root 744 S /aruba/bin/tinyproxy 1344 root 476 S /aruba/bin/tinyproxy 1345 root 476 S /aruba/bin/tinyproxy 1348 root 476 S /aruba/bin/tinyproxy 1349 root 476 S /aruba/bin/tinyproxy 1350 root 476 S /aruba/bin/tinyproxy SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 558: Show Proxy Config

    Example The following example shows the output of show proxy config command: Proxy server :10.15.107.210 Proxy port 1337 Proxy username :user1 Proxy password :******* Exceptions ---------- No Exception -- --------- 1 10.15.107.214 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 559: Show Radio Config

    Use this command to view the 2.4 GHz and 5 GHz radio configuration details for an AP. Example The following example shows the output of show radio config command: (scalance)# show radio config Legacy Mode:enable Beacon Interval:100 802.11d/802.11h:enable Interference Immunity Level:2 Channel Switch Announcement Count:0 MAX Distance:600 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 560 AP or between a mesh point and a mesh portal. Channel Reuse Type Indicates if channel reuse type is enabled. Channel Reuse Threshold Displays the channel reuse threshold configured for channel reuse type. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 561: Show Radio Profile

    The following example shows the output of show radio profile command: (scalance)# show radio profile 2.4G Radio profile ------------------ Name Legacy Mode Single Chain Legacy Beacon Interval 802.11d/802.11h Interference Immunity Level CSA Count MAX Distance Channel Reuse Type Channel Reuse Threshold Spectrum SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 562 ---- ------------------------ ------------ ------------ ------------------- --------- ---- --- ---- ------------- ------ --------------- -------------------- default disable disable disable 0 600 disable disable 5ghz-upper disable enable dynamic Yes disable enable aaa disable disable 0 600 disable disable disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 563: Show Radius-Redirect-Url

    The following example shows the output of show radius-redirect-url command: c8:b5:ad:c3:af:16# sh radius-redirect-url Radius VSA Redirect URL ----------------------- MAC URL --- --- Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 564: Show Radius-Servers Support

    Airgroup RFC3576-ONLY Airgroup RFC3576 port Deadtime DRP IP DRP IP Mask ------- ------ ------------ ------ ------------- ---------------------- 5999 DRP VLAN DRP Gateway Radsec Radsec port --------- ----------- -------- ----------- Disabled Disabled Enabled 2083 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 565: Show Radius Status

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.195 show radius status Description This command displays the status of TLS tunnel between the AP and RadSec proxy. Syntax show radius status SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 566 Indicates the time stamp during which the last connection between the server and client was attempt. Next connection at Indicates the time at which the next attempt will be made to establish the connection with the RADIUS server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 567: Show Radseccert

    :Mar 24 15:14:41 2011 GMT Expires On :Mar 21 15:14:41 2021 GMT Signed Using :SHA1-RSA RSA Key size :1024 bits Current radsec Certificate: Version Serial Number :DE:DF:11:F6:AC:C0:91:03 Issuer :/C=GB/ST=Berkshire/O=My Company Ltd/OU=Leon/CN=Leon/emailAddress=lzheng@arubanetworks.com Subject :/C=GB/ST=Berkshire/L=Newbury/O=My Company SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 568: Show Rlts-Logs

    2018-04-13 07:49:33 DFactor 0 DTimeout 0 2018-04-13 07:49:33 Report Tag - 0, Report MU - 0 2018-04-13 07:49:33 Tag Sent - 0, MU Sent – 0 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 569: Show Rlts-Tags

    AP Platform Command Mode All platforms Privileged EXEC mode 4.16.199 show running-config Description This command displays the current configuration running on an AP, including the current changes that are yet to be saved. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 570 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 571 0 rf-band all captive-portal disable dtim-period 1 inactivity-timeout 1000 broadcast- filter none dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 dot11k dot11v auth-survivability cache-time-out 24 wlan external-captive-portal server localhost port 80 url "/" auth-text "Authenticated" SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 572 1 shutdown access-rule-name default_wired_port_profile speed auto duplex full no poe type employee captive-portal disable no dot1x enet0-port-profile default_wired_port_profile uplink preemption enforce none failover-internet-pkt-lost-cnt 10 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 573: Show Snmp-Configuration

    Usage Guidelines Use this command to view the SNMP information configured on a Virtual Controller. Example The following example shows the output of show snmp-configuration command: Engine ID:D8C7C8CBD420 Community Strings ----------------- Name ---- Test SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 574: Show Snmp Trap-Queue

    Displays the SNMP inform messages to send to the configured host. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.201 show snmp trap-queue Description This command displays the list of SNMP traps in queue. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 575: Show Ssh

    Command Mode All platforms Privileged EXEC mode 4.16.202 show ssh Description This command displays the SSH cipher configuration details. Syntax show ssh Example The following example shows the output of show ssh command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 576: Show Spectum-Alert

    --------- ---- -- ------------ The output of this command provides the following information: Parameter Description Timestamp Displays the time at which alert was recorded. Type Displays the type of the device that generated the alert. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 577: Show Speed-Test

    Time of Execution :Mon, 02 Nov 2015 09:18:07 GMT Server IP :10.17.138.2 Local IP :10.17.138.188 Local Port :51308 Remote Port :5201 Protocol :UDP Duration :20 Bytes Txferred :249271000 Bandwitdh(bps) :99706100 Jitter(millisec) :0 Datagrams sent :249270 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 578: Show Stats

    AP to which it is cur- rently connected. global Displays global statistics for the AP cluster, and the APs and clients connected to the AP cluster. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 579 --------- ------------------- ---------------- ----------------------- -------------- --------- ------ ----------------------- --------------------------- -------------------------- ------- - ------ ---------------------- --------------------- 00:34:46 8 164 4 239 0 1 8 1 93 99 00:34:17 8 164 4 239 0 1 8 1 186 199 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 580 Name IP Address Mode Spectrum Clients Type CPU Utilization %: Memory Free (MB): Serial Number: Need Antenna Config From Port ---- ---------- ---- -------- ------- ---- ------------------ ----------------- ----- --------- ------------------- --------- d8:c7:c8:cb:d4:20 10.17.88.188 access disable 1 135 8 164 AX0059921 No none SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 581 Client Heatmap -------------- Client Signal Speed IP Address ------ ------ ----- ---------- 169.254.90.154 good good 169.254.90.154 Access Point Heatmap -------------------- Access Point Utilization Noise Errors ------------ ----------- ----- ------ d8:c7:c8:cb:d4:20 good good good SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 582 Access Points Utilization Noise Errors ------------- ----------- ----- ------ Client Heatmap -------------- Clients Signal Speed IP Address ------- ------ ----- ---------- show stats network The following example shows the output for the show stats network <network-name> command: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 583 Clients Signal Speed IP Address ------- ------ ----- ---------- Name :test123 ESSID :test123 Status :Enabled Mode :wpa2-aes Band :all Type :employee Termination :Disabled Passphrase : WEP Key : WEP Key Index :1 VLAN : SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 584 Work without usable uplink :Disabled Percentage of Airtime: :Unlimited Overall Limit: :Unlimited Per-user Limit: :Unlimited Access Control Type: :Role Machine-only Role: :test1 User-only Role: :test1 Dynamic Multicast Optimization :Disabled DMO Channel Utilization Threshold :90 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 585 0 5 3 Access Rules ------------ Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Action Log TOS 802.1P Blacklist Mirror DisScan ClassifyMedia ------- --------- ---------- ------------------------- ------ --- --- ------ -------- - ------ ------- ------------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 586: Show Subscription-Aps

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.206 show subscription-aps Description This command displays the subscription status of an AP. Syntax show subscription-aps Example (scalance) (config) # show subscription-aps SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 587: Show Summary

    {<difference> | support} Parameter Description <difference> Shows the difference in configuration. support Shows the summary support containing the configuration details used by support. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 588: Show Supported-Cert-Formats

    ---- PEM CA Certificate Formats ---------------------- Name ---- Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.209 show swarm Description This command displays the various entities associated with the swarm. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 589 The output of this command describes synchronization status of the AP cluster. The following text shows an example output for the show swarm mode command: Swarm Mode :Cluster Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 590: Show Syslog-Level

    Generates a log for network security, for example, when a client connects using wrong password. system Generates a log about the system configuration and status. user Generates a log for the AP clients. user-debug Generates a detailed log about the clients for debugging purposes. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 591: Show Tacas-Servers

    The following example shows the output of the show tacacs-servers command: TACACS Servers -------------- Name IP Address Port Key Timeout Retry Count In Use ---- ---------- ---- --- ------- ----- ----- ------ tacacs1 10.64.16.240 49 pass123 20 1 Yes SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 592: Show Tech-Support

    Syntax show tech-support Usage Guidelines Use this command to view and analyze AP configuration details for debugging any AP related issues. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 593: Show Time-Profile

    The WLAN SSID profiles for which the time profile is applied. Enable/Disable Status of the time range profile on the SSID. Rule Displays the access rule configuration. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 594: Show Time-Range

    Valid column displays the status as No. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 595: Show Tspec-Calls

    Client Client MAC Allocated Bandwidth Active flows ------ ---------- ------------------- ------------ TSPEC SSIDs ------------ SSID Radio Max Bandwidth Available Bandwidth ---- ----- ------------- ------------------- scalance-ap 0.00 0.00 TSPEC Calls ----------- Client Client MAC Allocated Bandwidth Active flows SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 596: Show Usb Status

    (scalance)(config)# show usb status Cellular Status --------------- card detect link SIM PIN ---- ------ ---- ------- Present detect-ok Linkup USB Modem Information --------------------- Parameter Value --------- ------ Manufacturer Linux Product OHCI Host Controller Serial Number 0000:00:04.0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 597 Indicates if cellular modems are detected on the AP. link Indicates the current status of cellular link. SIM PIN Displays the SIM PIN of the model. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 598: Show Uncommitted-Config

    This command displays the image upgrade details for an AP. Example The following example shows the output of show upgrade info command: swarm upgrade status -------------------- IP Address Seed AP AP Class Status Image Info ---------- ------- -------- ------ ---------- SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 599: Show Uplink

    Displays the uplink interface configuration details for an AP. show uplink stats Displays the aggregate uplink statistics for an AP. Usage Guidelines Use this command to view the information about uplink status and configuration for an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 600 Wifi-sta INIT 6 No 3G/4G INIT 7 No Internet failover :disable Max allowed test packet loss:10 Secs between test packets :30 VPN failover timeout (secs) :180 ICMP pkt sent :0 ICMP pkt lost :0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 601: Show Uplink-Vlan

    Indicates the time since the VPN connection is unavailable. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.220 show uplink-vlan Description This command displays the uplink VLAN configuration details for the management traffic. Syntax show uplink-vlan SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 602: Show Url-Visibility

    Use this command to view the list of client URLs that are yet to be forwarded to the ALE server. Example The following output is displayed for the show url-visibility command: Client URL List SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 603 Non-HTTP • Last hit timestamp Indicates the last hit timestamp of the URL. HitCount Indicates the number of hits on the URL. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 604: Show User

    The output of this command provides the following information: Column Description Name Indicates the username of the AP, portal, and the RADIUS users. Password Indicates the password details of the users. Attribute Indicates the attributes SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 605: Show Valid-Channels

    Usage Guidelines Use this command to view the list of valid channels that can be configured on your AP. Example The following example shows the output of show valid-channels command: 2.4 GHz SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 606 Displays the list of channels valid for an AP in the 2.4 GHz band. 5.0 GHz Displays the list of channels valid for an AP in the 5 GHz band. Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 607: Show Vlan

    Displays the configured VLAN ID for an SSID profile. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.225 show version Description This command displays the Scalance W software version running on an AP. Syntax show version SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 608: Show Vpn

    The following example shows the output of the show version command: SIEMENS. SIEOS (MODEL: SCALANCE-W1750D-2IA-RJ45), Version 8.4.0.0 Website: http://www.siemens.com/iwlan All Rights Reserved (c) 1996-2018, Siemens AG. Compiled on 2018-12-13 at 14:56:13 UTC (build 68230) by p4build FIPS Mode :disabled AP uptime is 2 days 21 hours 29 minutes 36 seconds...
  • Page 609 The output displayed for this command provides information on the parameters configured for the VPN concentrator. For more information on the VPN configuration parameters, see the following commands: ● vpn primary ● vpn backup ● vpn preemption ● vpn fast-failover ● vpn gre-outside SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 610 The show vpn status command displays the current status of VPN connection, IP address configured for VPN/IPSec connections, and the tunnel details. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 611: Show Vpn Tunnels

    The following example shows the output of show vpn-tunnels command: Tunnel Flags: M = Master AP; S = Slave AP; Primary = Primary Tunnel B = Backup Tunnel; R = Registered; H = Heartbeat Enable Tunnel Info for peer address 172.16.0.254 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 612: Show Walled-Garden

    This works for client devices with or without HTTP proxy settings. When a user attempts to navigate to other websites, which are not in the whitelist of the walled garden profile, the user is redirected to the login page. In addition, a blacklisted SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 613: Show Wifi-Uplink

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.229 show wifi-uplink Description This command displays the configuration details, the status, and authentication log for the Wi-Fi uplinks configured on an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 614 Displays the encryption settings configured for the Wi-Fi uplink. For exam- ple, wpa-tkip-psk or wpa2-ccmp-psk. Passphrase Displays the WPA passphrase configured for the Wi-Fi uplink. uplink-band <band> Displays the band configured for the Wi-Fi uplink connection. For example, dot11a and dot11g. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 615: Show Wired-Port

    This command displays the configuration details associated with a wired profile configured on an AP. Example The following example shows the output of the show wired-port <profile-name> command: Name :default_wired_port_profile VLAN Mode :Trunk Allowed VLANs :all Native VLAN :1 Admin Status :Down SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 616 ---- ---------- ---- --- ------- ----------- -------------- -------------- ------- LDAP Servers ------------ Name IP Address Port Timeout Retry Count Admin-DN Admin Password Base-DN ---- ---------- ---- ------- ----------- -------- -------------- ------- Access Rules ------------ SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 617: Show Wired-Port-Settings

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.231 show wired-port-settings Description This command displays the list of wired profiles configured on an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 618 Indicates the name of switchport mode for the wired profiles. The VLAN modes can be Access or Trunk. Allowed VLAN Indicates the list of allowed VLANs. The Allowed VLAN refers to the VLANs carried by the port in Access mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 619: Show Wispr Config

    Use this command to view the WISPr configuration details for an AP. Example The following example shows the output of show wispr config command: WISPr ISO Country Code :91 WISPr E.164 Country Code :IN WISPr E.164 Area Code :80 WISPr SSID :Network1 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 620: Show Xml-Api-Server

    Syntax show xml-api-server config Usage Guidelines Use this command to view the XML API server configuration details. Example The following example shows the output of the show xml-api-server command: ip :192.0.2.5 key :user1234 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 621: Sesimagotag-Esl-Channel

    (scalance)# sesimagotag-esl-channel 6 Command Information AP Platform Command Mode All platforms Privileged Exec mode 4.16.235 sesimagotag-esl-profile Description This command is used to configure SES-imagotag's Electronic Shelf Label system details. Syntax sesimagotag-esl-profile sesimagotag-esl-channel <channel> sesimagotag-esl-serverip <addr> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 622: Snmp-Server

    <name> <auth-prot> <password> <priv-prot> <password> Parameter Description Range Default community Sets the read-only community string. — — engine-id Sets the SNMP server engine ID as a hexadecimal num- 24 characters — ber. maximum SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 623: Speed Test

    Description This command enables the user to configure a speed test to run each time the AP boots up and additionally configure time intervals at which it is executed periodically. Syntax speed-test SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 624 60 secs. window Indicates the TCP window size or socket 64000– — buffer size sent to the server while run- 16384000 ning speed test. Removes the speed-test profile configura- — — tion. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 625: Speed Test

    Description This command enables the user to run a speed test on the Iperf server at any point in time. The speed test configuration is not saved and can be executed only once. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 626 The following example runs a speed test on the Iperf server: (scalance)# speed-test 10.17.138.2 udp bandwidth 100 sec-to-measure 20 server-port 5201 parallel 12 omit 2 window 1 Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 627: Ssh

    The following command enables the disabled cipher encryptions on the SSH server: (scalance)(config) #no ssh disable-ciphers Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.16.240 subscription-ap Description This command configures the subscription status for an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 628: Subscription-Ap-Enable

    This command enables the subscription of an AP. Syntax subscription-ap-enable no… Command/Parameter Description subscription-ap-enable Enables the subscription for an AP. Removes the configuration. Usage Guidelines Use this command to enable the subscription of the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 629: Swarm-Mode

    Virtual Controller APs in the same VLAN. Example The following command allows you to convert an AP to a standalone AP: (scalance)# swarm-mode standalone Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 630: Syslog-Level

    Generates a log for the AP clients. — — user-debug Generates a detailed log about the clients for — — debugging purposes. wireless Generates a log about radio configuration. — — no… Removes the configuration. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 631: Syslocation

    Removes the configuration. Usage Guidelines Use this command to define the physical location of the AP. Example The following example sets the physical location of the AP to Sunnyvale: (scalance)(config) # syslocation <Sunnyvale> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 632: Syslog-Server

    Example The following command configures the IP address of the syslog server for an AP. (scalance)(config)# syslog-server 192.0.2.9 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 633: Telnet

    The following example initiates a telnet session with external servers: (scalance) telnet 10.0.0.1 23 Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.17.2 telnet-server Description This command enables Telnet access to SCALANCE W CLI. Syntax telnet-server SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 634: Terminal-Access

    This command enables SSH access to SCALANCE W CLI. Syntax terminal-access no… Command/Parameter Description terminal-access Enables terminal access to the SCALANCE W CLI. no… Removes the configuration. Usage Guidelines Use this command to enable SSH access to the SCALANCE W CLI. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 635: Tftp-Dump-Server

    Removes the configuration Usage Guidelines Use this command to configure TFTP dump server for storing core dump files. Example The following example configures a TFTP dump server: (scalance)(config)# tftp-dump-server <IP-address> (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 636: Traceroute

    All platforms Privileged EXEC mode 4.17.6 time-range Description This command allows you to create time range profiles on an AP to enable or disable access to an SSID during a specific period of time. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 637 These time based profiles can be applied to existing SSIDs in the AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 638 (scalance) (config) # time-range test12 periodic weekend 10:20 to 10:30 The following example removes the time range configuration: (scalance) (config) # no time-range testhshs12 Command Information AP Platform Command Mode All platforms Configuration mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 639: Upgrade-Drt

    The following example shows how to upgrade an AP by using a DRT file from the TFTP server: (scalance)# upgrade-drt tftp://192.168.0.1/reg-data-1.0_62178.dat Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.18.2 upgrade-image Description These commands allow you to upgrade an AP to use a new image file. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 640 The following examples upgrade an AP by using an image file from the FTP server: (scalance)# upgrade-image ftp://192.0.2.7/Siemens_Hercules_8.4.0.x_xxxx (scalance)# upgrade-image2-no-reboot ftp://192.0.2.7/Siemens_Hercules_8.4.0.x_xxxx To upgrade images for a multi-class AP cluster: (scalance)# upgrade-image2 Orion@tftp://192.168.0.1/mips32.ari;Cassiopeia@tftp://192.168.0.1/armv5te.ari Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 641: Uplink

    {ethernet|cellular Enforces the specified uplink connec- ethernet, None |wifi | none} tion. cellular, wifi, You can specify the following types of none uplink: ethernet • cellular • wifi • none • SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 642 If Ethernet uplink <priority>} needs to be prioritized, specify the interface port number. no… Disables the parameters configured — — under the uplink command. no uplink Removes the uplink configuration. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 643 VPN on the Ethernet 0. If the AP succeeds, then the AP switches to Ethernet 0. If the AP does not succeed, then the AP restores the VPN connection to the current uplink. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 644: Uplink-Vlan

    When configured, the uplink management VLAN allows you to tag management traffic and connect multiple AP clusters to the same port on an upstream switch (for example, AirWave server). Example The following example configures uplink management VLAN: SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 645: Usb-Port-Disable

    The following example shows how to disable the USB port on the AP: (scalance)# usb-port-disable Remind: Command takes effect after AP reboot. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.18.6 user Description This command creates users for an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 646 256 user entries. If there are already 512 users, AP-9x will not be able to join the cluster. Example The following example configures an employee user for an AP: (scalance)(config)# user user1 password123 radius (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 647: Url-Visibility

    Dpimgr Hello count :1 Dpimgr Agent :App Dpimgr Status value :0x17d Dpimgr Visibility Status :URL + App Dpimgr Enforcement Status :App Dpimgr External Visibility Status :AMP Command Information AP Platform Command Mode All platforms Configuration mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 648 CLI Commands 4.18 U SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 649: Version

    Configuration mode 4.19.2 virtual-controller Description This command configures the virtual controller settings such as country code and VC key, and network parameters such as IPv4 or IPv6 addresses, VLAN, and DNS IP address. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 650 The following example configures a DNS IP address for the virtual controller: (scalance)(config)# virtual-controller-dnsip 192.0.2.2 (scalance)(config)# virtual-controller-ip 192.0.2.2 (scalance)(config)# virtual-controller-ipv6 10.17.154.132 (scalance)(config)# virtual-controller-key 541a271a01f722ac28c1f8cfcbc4529021bcfb130d4e59ac93 (scalance)(config)# virtual-controller-vlan 1961 255.255.255.240 10.17.196.17 (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 651: Vlan

    Example The following example configures VLAN ID mapping to a specific VLAN name. (scalance)(config)# vlan myvlan 30 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 652: Vlan-Name

    (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode 4.19.5 vpn backup Description This command configures a secondary or backup VPN server for VPN connections. Syntax vpn backup <name> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 653: Vpn Fast-Failover

    Configuration mode 4.19.6 vpn fast-failover Description This command configures fast failover feature for VPN connections. Syntax vpn fast-failover no… Parameter Description vpn fast-failover Enables fast failover feature for VPN connections. no… Removes the configuration. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 654: Vpn Gre-Outside

    Use this command to enable automatic configuration of the GRE tunnel between the controller to provide L2 connectivity. Example The following example configures an automatic GRE tunnel: (scalance)(config)# vpn gre-outside (scalance)(config)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 655: Vpn Hold-Time

    Example The following example configures a hold-time to switch to the primary host server: (scalance)(config)# hold-time <seconds> (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 656: Vpn Ikepsk

    AP Platform Command Mode All platforms Configuration mode 4.19.10 vpn monitor-pkt-lost-cnt Description This command configures the number of lost packets after which the AP can determine that the VPN connection is not available. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 657: Vpn Monitor-Pkt-Send-Freq

    <frequency> no... Parameter Description Default vpn monitor-pkt- send- Configures a frequency interval in seconds at which the freq test packets are sent. <frequency> no… Removes the VPN monitoring frequency configuration. — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 658: Vpn Reconnect-User-On-Failover

    Use this command to allow the users to reconnect to the VPN after a VPN failover. When enabled , the AP reconnects the user during a VPN failover. Example The following example enables users to reconnect to VPN after a failover: (scalance)(config)# vpn reconnect-user-on-failover (scalance)(config)# end SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 659: Vpn Reconnect-Time-On-Failure

    AP reconnects the user session when the interval specified for this command expires. Example The following example configures a VPN reconnection duration: (scalance)(config)# vpn reconnect-time-on-failover 20 (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 660: Vpn Preemption

    The following example enables VPN pre-emption. Command Information AP Platform Command Mode All platforms Configuration mode 4.19.15 vpn primary Description This command configures a primary VPN server for VPN connections. Syntax vpn primary <name> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 661 Example The following example configures a primary VPN server: (scalance)(config)# vpn primary <name> (scalance)(config)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 662: Wlan Walled-Garden

    HTTP 403 response to the client with a simple error message. no… Removes the configuration settings of the white-list — — and black-list parameters. no wlan walled- Deletes the walled garden configuration. — — garden SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 663: Web-Server

    AP Platform Command Mode All platforms Configuration mode 4.20.2 web-server Description This command allows you to configure web server and enable or disable the TLS protocol. Syntax web-server ciphers <security_level> {high|medium|low} ssl-protocol {all|tlsvl|tlsvl.1|tlsvl.2} SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 664: Wlan Captive-Portal

    (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode 4.20.3 wlan captive-portal Description This command customizes the appearance of the internal captive portal splash page of the guest users. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 665 URL that was originally requested. When a URL is configured for redirection, it overrides the user’s original request and redirects them to URL configured for redirection. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 666 (scalance)(Captive Portal)# terms-of-use "This network is not secure, and use is at your own risk" (scalance)(Captive Portal)# use-policy "Please read terms and conditions before using Guest Network" (scalance)(Captive Portal)# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 667: Wlan Ssid-Profile

    <limit> auth-pkt-mac-format {delimiter|upper-case} auth-req-thresh <threshold> auth-server <name> auth-survivability bandwidth-limit <limit> blacklist broadcast-filter {All|ARP|Unicast-ARP-Only|Disabled} called-station-id {type{ap-group|ap-name|ipaddr|macaddr|clan-id} |include-ssid [delimiter]} captive-portal {<type> [exclude-uplink <types>] | external [Profile <name>] [exclude-uplink<types>]} captive-portal-proxy-server <ip> <port> content-filtering deny-inter-user-bridging deny-local-routing disable SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 668 <essid> explicit-ageout-client external-server g-basic-rates g-min-tx-rate <rate> g-max-tx-rate <rate> g-tx-rates hide-ssid high-efficiency-enable high-efficiency-disable hotspot-profile <name> inactivity-timeout <interval> index <idx> key-duration <duration> l2-auth-failthrough leap-use-session-key legacy-support local-probe-req-thresh <threshold> mac-authentication mac-authentication-delimiter <delim> mac-authentication-upper-case max-authentication-failures <limit> max-clients-threshold <Max_clients> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 669 <minutes> radius-reauth-interval <minutes> rf-band <band> rrm-quiet-ie rts-threshold rx-ampdu-agg-disable server-load-balancing set-role <attribute> {{contains|ends-with|equals|matches-regular-expression|not- equals|starts-with} <operand> <role>|value-of} set-role-by-ssid set-role-mac-auth <mac_only> set-role-machine-auth {<machine_only>|<user_only>} set-role-pre-auth <role> set-role-unrestricted set-vlan <attribute> {{contains|ends-with|equals|matches-regular-expression|not- equals|starts-with} <operand> <vlan>|value-of} short-preamble-disable strict-svp supported-mcs-set SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 670 Creates a WLAN SSID profile. — — <ssid profile> a-basic-rates Allows you to define a set of modulation 6,9,12,18,24,36,48 6, 12, 24 rates to use for the clients on the 5 GHz ,54 in Mbps radio band. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 671 Configures an aggregate amount of 1—65535 — <limit> bandwidth that each radio is allowed to provide for the connected clients. blacklist Enables dynamic blacklisting of clients. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 672 SSID. If the external captive uplink profiles are created, you can specify the <types>] |external[exclude- profile name by using the external and uplink profile keywords and associated pa- <types>|profile <name> [exclude- rameters. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 673 The 802.11k protocol enables APs and clients to dynamically measure the available radio resources. When 802.11k is enabled, APs and clients send neighbor reports, beacon reports, and link measurement reports to each other. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 674 DMO feature is enabled on all SSIDs configured in the same VLAN. enable Re-enables the deactivated SSIDs. — Enabled enforce-dhcp Blocks AP traffic to the clients that do — Disabled obtain IP address from DHCP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 675 WEP and if you do not want use a session key from the RADIUS Server to derive pair wise unicast keys. legacy-support Enables the behaviour prior to enabling — — wpa3 for wpa3-open and wpa3-sae-aes opmodes SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 676 When enabled, the SSID supports only — Disabled the clients that exhibt the MFP functionality max-clients-threshold Configures the maximum number of 0-255 <threshold> clients for a BSSID on a WLAN. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 677 802.1X authentication is required whenever it roams to a new AP. OKC is supported on WPA2-AES Enterprise network only. openflow-enable Configures OpenFlow to an AP. — — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 678 VPN down option from select enable or the dropdown and set the status to disable. enabled, the SSID is enabled when the VPN connection is down and is disabled when the VPN connection is restored. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 679 RADIUS <minutes> INTERIM accounting records to the RADIUS server. When configured, the AP sends interim- update messages with current user statistics to the RADIUS server at regu- lar intervals. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 680 RADIUS <minutes> INTERIM accounting records to the RADIUS server. When configured, the AP sends interim- update messages with current user statistics to the RADIUS server at regu- lar intervals. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 681 SSID will be broadcast. You can select either 2.4GHz, 5 GHz, or all to specify both bands. rrm-quiet-i Configures a radio resource manage- — — ment IE profile to define the information elements advertised by an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 682 Enabled reject A- MPDU based aggregations in the Add Block Acknowledgement re- sponse frames. server-load-balancing Enables load balancing across two — Enabled RADIUS servers if two authentication servers are configured for the SSID. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 683 Machine authentication is only support- ed on Windows devices, so this can be used to distinguish between Windows devices and other devices such as iPads. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 684 Enables Strict Spectralink Voice Proto- col (SVP) and prioritizes voice traffic for SVP handsets. supported-mcs-set Allows you to define a set of Modulation 0-23 0-23 and Coding Scheme (MCS) rates for High Throughput (HT) channels. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 685 The AP by itself acts as an authentication server and terminates the outer layers of the EAP protocol, only relaying the innermost layer to the ex- ternal RADIUS server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 686 Configures the type of network such as — — {employ- employee, voice, guest network. ee|voice|guest} utf8 Encodes the SSID. When enabled, the — — SSID name is displayed in the UTF-8 format. SSIDs are not encoded by default. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 687 QoS. wmm-uapsd-disable Disables Unscheduled Automatic Power — — Save Delivery (UAPSD) on all WMM access categories (ACs). By default, UAPSD or WMM power save is enabled. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 688 (scalance)(SSID Profile "employee1")# wpa-passphrase user@123 (scalance)(SSID Profile "employee1")# opmode wpa2-psk-aes (scalance)(SSID Profile "employee1")# max-authentication-failures 0 (scalance)(SSID Profile "employee1")# mac-authentication (scalance)(SSID Profile "employee1")# l2-auth-failthrough (scalance)(SSID Profile "employee1")# termination (scalance)(SSID Profile "employee1")# blacklist (scalance)(SSID Profile "employee1")# mac-authentication SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 689 (scalance)(SSID Profile "guestNetwork")# a-min-tx-rate 6 (scalance)(SSID Profile "guestNetwork")# a-max-tx-rate 54 (scalance)(SSID Profile "guestNetwork")# inactivity-timeout 1000 (scalance)(SSID Profile "guestNetwork")# vlan 1 (scalance)(SSID Profile "guestNetwork")# dmo-channel-utilization-threshold 90 (scalance)(SSID Profile "guestNetwork")# max-clients-threshold 64 (scalance)(SSID Profile "guestNetwork")# local-probe-req-thresh 0 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 690: Wlan-External-Captive-Portal

    4.20.5 wlan-external-captive-portal Description This command configures profiles for external captive portal. Syntax wlan external-captive-portal [profile-name] auth-text <text> auto-whitelist-disable https port <port> prevent-frame-overlay redirect-url <redirection-url> out-of-service-page <url> server <server-name> server-fail-through switch-ip server-offload SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 691 When enabled, this feature prevents the non- browser client applications from following un- necessary 302- redirects generated by their background HTTP or HTTPS requests. url <url> Configures the URL of the external captive por- — — tal server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 692 (scalance)(External Captive Portal "AuthText1")# server CPServer1 (scalance)(External Captive Portal "AuthText1")# url "/aruba.php" (scalance)(External Captive Portal "AuthText1")# server-fail-through (scalance)(External Captive Portal "AuthText1")# switch-ip (scalance)(External Captive Portal "AuthText1")# no auto-whitelist-disable (scalance)(External Captive Portal "AuthText1")# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 693: Wlan Auth-Server

    <rfc3576-port> deadtime <time> drp-ip <IP> <mask> vlan <vlan> gateway <gateway> ip <host> key <key> nas-id <ID> nas-ip <IP-address> port <port> radsec [port <port>] retry-count <count> rfc3576 rfc5997 {auth-only|acct-only} service-type-framed-user {1x|cp|mac} timeout <value> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 694 TLS tunnel between the AP and the server. When RadSec is enabled, the port command can be used for specifying the communication port number for RadSec TLS connection. By default, the port number is set to 2083. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 695 Use this command to configure an external RADIUS server and a ClearPass Policy Manager server as a RADIUS server for AirGroup CoA requests. Example The following example configures the external RADIUS server parameters: (scalance)(config)# wlan auth-server RADIUS1 (scalance)(Auth Server <RADIUS1>)# ip 192.0.0.5 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 696: Wlan Access-Rule

    This command configures access rules for WLAN SSID or wired profile. Syntax wlan access-rule <name> bandwidth-limit {downstream <kbps>| upstream <kbps>| peruser { downstream <kbps>| upstream<kbps>}} calea captive-portal {external [profile <name>]|internal} dpi-error-page-url <idx> index <index> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 697 <dest> Allows you to specify the destination IP address. — <mask> Specifies the subnet mask for the destination IP — address. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 698 <webgrp> Specifies a rule to allow or deny access to websites To view the list of based on website category. website categories, run the show dpi webcategory all command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 699 WLAN SSID or Wired profile. vlan <vlan-id> Configures an access rule for VLAN assignment. 1–4093 no… Removes the definition of parameters under wlan — access-rule command. no wlan access-rule Removes the WLAN access rule configuration — SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 700 (scalance)(Access Rule "WirelessRule")# rule any any match webreputation high-risk- sites deny (scalance)(Access Rule "WirelessRule")# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and access rule configuration sub-mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 701: Wifi1-Mode

    Use this command to configure a Wi-Fi interface of an AP to function in the access, monitor, or spectrum monitor mode. Example The following example configures the wifi1 interface to use the access mode: (scalance)# wifi-mode access Command Information AP Platform Command Mode All platforms Privileged EXEC mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 702: Wificall-Dns-Pattern

    — — Usage Guidelines Use this command to configure a DNS pattern for the wi-fi calling client. Example The following example configures the DNS pattern for a Wi-Fi calling client: (scalance)(config)# wificall-dns-pattern xo.xyz.com SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 703: Wlan Wispr-Profile

    <location-name> wispr-location-name-operator- Associates the hotspot operator profile to the WISPr authenti- name <operator-name> cation profile. no... Removes the parameters configured under the wlan wispr-profile command. no wlan wispr-profile Removes the wlan wispr-profile command. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 704: Wifi0-Mode

    (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and WISPr profile sub-mode. 4.20.11 wifi0-mode Description This command configures an AP to function in the Access, Monitor, or Spectrum Monitor mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 705: Wlan Ldap-Server

    Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.20.12 wlan ldap-server Description This command configures a LDAP server for user authentication on the virtual controller. Syntax wlan ldap-server <server-name> admin-dn <domain-name> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 706 LDAP server. timeout <seconds> Configures a timeout value for LDAP requests 1-30 from the clients seconds retry-count <count> Defines the number of times that the clients can attempt to connect to the server. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 707 (scalance)(LDAP Server <name>)# key-attribute sAMAccountName (scalance)(LDAP Server <name>)# timeout 5 (scalance)(LDAP Server <name>)# retry-count 3 (scalance)(LDAP Server <name>)# end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and LDAP server sub-mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 708: Write

    The following command saves your changes so they are retained after a reboot: write memory Save configuration. Command Information AP Platform Command Mode All platforms Privileged EXEC mode 4.20.14 wired-port-profile Description This command configures a wired port profile for wired AP clients. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 709 <interval> loop-protect l2-auth-failthrough mac-authentication native-vlan <vlan> no... radius-accounting radius-accounting-mode {user-association|user-authentication} radius-interim-accounting-interval <minutes> radius-reauth-interval <minutes> server-load-balancing set-role <attribute>{{equals|not-equal|starts-with|ends- with|contains}<operator> <role>|value-of} set-role-mac-auth <mac-only> set-role-machine-auth <machine-only> <user-only> set-role-pre-auth <role> set-role-unrestricted set-vlan <attribute>{equals|not-equals|starts-with|ends-with|contains} <operator> <VLAN- ID>|value-of} SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 710 Specify the time, in seconds, to auto- 30– 43200 300 seconds <interval> matically recover the port in the AP that seconds is shut down because of loop protec- tion. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 711 Allows the clients to use 802.1X au- — Disabled thentication when MAC authentication fails. loop-detection-interval Specify the time, in seconds, to send 1–10 sec- 2 second s <interval> loop detection packets on the ports of onds an AP. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 712 0–32768 — <minutes> at which all associated and authenti- cated clients must be reauthenticated. server-load-balancing Enables load balancing across two — Enabled RADIUS servers if two authentication servers are configured for the SSID. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 713 <mac- Configures a MAC authentication — — only> based user role. set-role-pre-auth <role> Configures a pre-authentication role to — — allow some access to the guest users before the client authentication. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 714 Specify the broadcast packets per 100 - 2000 <threshold> second on each Ethernet port of an AP 1000000 packets per before the Ethernet port is shut down. packets per second second SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 715 The following example configures a wired profile for an employee network: (scalance)(config)# wired-port-profile employeeWired1 (scalance)(wired ap profile"employeeWired1")# type employee (scalance)(wired ap profile"employeeWired1")# speed auto (scalance)(wired ap profile"guestWired1")# dot3bz (scalance)(wired ap profile"employeeWired1")# duplex auto (scalance)(wired ap profile"employeeWired1")# no shutdown (scalance)(wired ap profile"employeeWired1")# poe SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 716 (scalance)(wired ap profile"guestWired1")# uplink-enable (scalance)(wired ap profile"guestWired1")# content-filtering (scalance)(wired ap profile"guestWired1")# switchport-mode trunk (scalance)(wired ap profile"guestWired1")# allowed-vlan 200,201,400 (scalance)(wired ap profile"guestWired1")# native-vlan 1 (scalance)(wired ap profile"guestWired1")# captive-portal external exclude-uplink Ethernet (scalance)(wired ap profile"guestWired1")# mac-authentication SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 717: Wlan Sta-Profile

    <band> no… no wlan sta-profile Command/Parameter Description wlan sta-profile Configures a Wi-Fi uplink profile for an AP. essid<ESSID> Defines a unique name for the network on which the Wi-Fi uplink will be enabled. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 718: Wlan Tacacs-Server

    (scalance)(sta uplink)# wpa-passphrase user@123 Command Information AP Platform Command Mode All platforms Configuration mode and Wi-Fi uplink (sta) sub- mode. 4.20.16 wlan tacacs-server Description This command is used to configure a TACACS server for management users. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 719 Example The following example configures the TACACS protocols: (scalance)(config)# wlan tacacs-server Server1 (scalance)(TACACS Server < Server1>) # ip <10.17.121.54> (scalance)(TACACS Server <Server1>) # port <49> (scalance)(TACACS Server <Server1>) # key <pass123> SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 720 (scalance)(TACACS Server <Server1>) # retry-count <4> (scalance)(TACACS Server <Server1>) # deadtime <30> (AP TACACS Server <Server1>) # end (scalance)# commit apply Command Information AP Platform Command Mode All platforms Configuration mode and TACACS server profile sub-mode. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 721: Xml-Api-Server

    Use this command to integrate an AP with an external XML API interface. Example The following command configures the XML API Server details on an AP: (scalance)(config)# xml-api-server test-xml (scalance)(xml-api-server "test-xml")# ip 12.0.132.61 (scalance)(xml-api-server "test-xml")# key123 (scalance)(xml-api-server "test-xml")# end (scalance)# commit apply SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 722 CLI Commands 4.21 X Command Information AP Platform Command Mode All platforms Configuration mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 723: Zeroize-Tpm-Keys

    You are about to wipe the contents of the TPM and render the AP permanently inoperable. Are you ready to go ahead?(y/n):y Running Clear Command..Completed Executing Clear Command. Running tcsd -c command Completed executing tcsd -c Command. TPM Keys Cleared Successfully. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 724: Zonenmane

    ● If an SSID does not belong to any zone, all APs can broadcast this SSID. Example The following example configures a zone name on an AP: (scalance)# zonename zoneA Command Information AP Platform Command Mode All platforms Privileged EXEC mode SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 725: Glossary Of Terms

    802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath- propagation interference.802.11b operates in the 2.4 GHz band and the max- imum data transfer rate is 11 Mbps. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 726 600 Mbps with the use of four spatial streams at a channel width of 40 MHz. 802.11r 802.11r is an IEEE standard for enabling seamless BSS transitions in a WLAN. 802.11r standard is also referred to as Fast BSS transition. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 727 RADIUS packet sent to a RADIUS server requesting authorization. Request Accounting- RADIUS packet type sent to a RADIUS server containing accounting sum- Request mary information. Accounting- RADIUS packet sent by the RADIUS server to acknowledge receipt of an Response Accounting-Request. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 728 AirWave Man- AirWave Management Client is a Windows software utility that enables client agement Client devices (such as a laptop) to act as passive RF sensors and augments the AirWave RAPIDS module. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 729 MAC address of a device. ASCII American Standard Code for Information Interchange. An ASCII code is a numerical representation of a character or an action. band Band refers to a specified range of frequencies of electromagnetic radiation. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 730 Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 731 Captive Network Assistant. CNA is a popup page shown when joining a net- work that has a captive portal. Change of Authorization. The RADIUS CoA is used in the AAA service framework to allow dynamic modification of the authenticated, authorized, and active subscriber sessions. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 732 Distributed Antenna System. DAS is a network of antenna nodes strategically placed around a geographical area or structure for additional cellular cover- age. Decibel. Unit of measure for sound or noise and is the difference or ratio between two signal levels. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 733 Disconnect- Disconnect-Ack is a NAS response packet to a Disconnect-Request, which indicates that the session was disconnected. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 734 Digital Subscriber Line. The DSL technology allows the transmission of digital data over telephone lines. A DSL modem is a device used for connecting a computer or router to a telephone line that offers connectivity to the Internet. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 735 See RFC 5216. EAP-TTLS EAP–Tunneled Transport Layer Security. EAP-TTLS is an EAP method that encapsulates a TLS session, consisting of a handshake phase and a data phase. See RFC 5281. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 736 Federal Information Processing Standards. FIPS refers to a set of standards that describe document processing, encryption algorithms, and other infor- mation technology standards for use within non-military government agen- cies, and by government contractors and vendors who work with these agencies. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 737 MSCHAPv2 is not supported by the data- base. GVRP GARP VLAN Registration Protocol or Generic VLAN Registration Protocol. GARP is an IEEE 802.1Q-compliant protocol that facilitates VLAN registra- tion and controls VLANs within a larger network. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 738 Internet Key Exchange. IKE is a key management protocol used with IPsec protocol to establish a secure communication channel. IKE provides addi- tional feature, flexibility, and ease of configuration for IPsec standard. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 739 A keepalive can also be used to indicate that the connection should be preserved so that the receiving de- vice does not consider it timed out and drop it. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 740 Long Term Evolution. LTE is a 4G wireless communication standard that provides high-speed wireless communication for mobile phones and data terminals. See 4G. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 741 (transmitter) and destination (receiver). The antennas at each end of the communications cir- cuit are combined to minimize errors and optimize data speed. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 742 Network Access Device. NAD is a device that automatically connects the user to the preferred network, for example, an AP or an Ethernet switch. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 743 OCSP Online Certificate Status Protocol. OCSP is used for determining the current status of a digital certificate without requiring a CRL. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 744 These credentials are used for establishing an authenti- cation tunnel between the client and the authentication server. Password Authentication Protocol. PAP validates users by password. PAP does not encrypt passwords for transmission and is thus considered inse- cure. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 745 Public-key cryptography standard n. PKCS#n refers to a numbered standard related to topics in cryptography, including private keys (PKCS#1), digital certificates (PKCS#7), certificate signing requests (PKCS#10), and secure storage of keys and certificates (PKCS#12). SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 746 Per-VLAN Spanning Tree+. PVST+ is an extension of the PVST standard that uses the 802.1Q trunking technology. Quality of Service. It refers to the capability of a network to provide better service and performance to a specific network traffic over various technolo- gies. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 747 Warranty period contact the manufacturer to initiate the product returning process. The manufacturer or the seller generates an authorization number for the RMA, which is used by the customers, when returning a product to the warehouse. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 748 Software-Defined Networking. SDN is an umbrella term encompassing sev- eral kinds of network technology aimed at making the network as agile and flexible as the virtualized server and storage infrastructure of the modern data center. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 749 SINR is defined as the power of a certain signal of interest divided by the sum of the interference power (from all the other inter- fering signals) and the power of some background noise. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 750 Space-Time Block Coding. STBC is a technique used in wireless communi- cations to transmit multiple copies of a data stream across a number of an- tennas and to exploit the various received versions of the data to improve the reliability of data transfer. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 751 Internet. TLS encrypts the segments of net- work connections above the Transport Layer by using asymmetric cryptog- raphy for key exchange, symmetric encryption for privacy, and message authentication codes for message integrity. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 752 MAC address, BSSID, DHCP-Option, encryption type, SSID, and the loca- tion of a user. For example, for an SSID with captive portal in the initial role, a UDR can be configured for scanners to provide a role based on their MAC OUI. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 753 Internet using the technology specified in IEEE 802.11b. Rout- ing mobile calls over the Internet makes them free, or at least much less ex- pensive than they would be otherwise. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 754 Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and pri- vacy comparable to what is usually expected of a wired LAN. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 755 Wi-Fi Protected Access 2. WPA2 is a certification program maintained by IEEE that oversees standards for security over wireless networks. WPA2 supports IEEE 802.1X/EAP authentication or PSK technology, but includes advanced encryption mechanism using CCMP that is referred to as AES. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 756 Zero Touch Provisioning. ZTP is a device provisioning mechanism that al- lows automatic and quick provisioning of devices with a minimal or at times no manual intervention. SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 757: Index

    100 dynamic-tacacs-proxy, 100 banner, 59 blacklist-client, 60 blacklist-time, 60 ble, 61 enet0-bridging, 103 enet0-port-profile, 103 enet1-port-profile, 104 enet2-port-profile, 105 calea, 64 enet3-port-profile, 105 cellular-uplink-profile, 65 enet4-port-profile, 106 clarity, 68 enet-vlan, 102 clear, 69 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 758 160 ignore-image-check, 168 pcap, 213 inactivity-ap-timeout, 169 per-ap-ssid, 214 inbound-firewall, 170 per-ap-vlan, 214 internal-domains, 172 pin-enable, 215 iot transportProfile, 173 ping, 217 iot usetransportProfile, 177 pin-puk, 216 ip dhcp, 179 pin-renew, 216 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 759 377 show ap client-match-ssid-table radio-mac, 296 show ap mpskcache, 290 show ap client-match-triggers, 297 show ap pmkcache, 389 show ap client-probe-report, 298 show ap virtual-beacon-report, 390 show ap client-view, 299 show ap1x, 392 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 760 498 show out-of-service, 553 show fault, 499 show port status, 555 show firewall, 500 show pppoe, 554 show g-max-clients, 501 show process, 557 show gre config, 502 show proxy config, 558 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 761 622 web-server, 663 speed test, 623 wifi0-mode, 704 wifi1-mode, 701 spped test <server>, 625 ssh, 627 wificall-dns-pattern, 702 subscription-ap, 627 wired-port-profile, 708 subscription-ap-enable, 628 wlan access-rule, 696 swarm-mode, 629 wlan auth-server, 693 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...
  • Page 762 Index wlan captive-portal, 664 wlan external-captive-portal, 690 wlan ldap-server, 705 wlan ssid-profile, 667 wlan sta-profle, 717 wlan tacacs-server, 718 wlan walled-garden, 662 wlan wispr-rpofile, 703 write, 708 xml-api-serer, 721 zeroize-tpm-keys, 723 zonename, 724 SCALANCE W1750D CLI Function Manual, 03/2019, C79000-G8976-C452-04...

Table of Contents