Page 1 Avaya WLAN 8100 CLI Reference Release 2.1.0 NN47251-107 Issue 05.02 August 2013...
Page 2 Avaya. All content on this site, the documentation and the Product provided by Avaya including the selection, arrangement and THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA design of the content is owned either by Avaya or its licensors and is WEBSITE, HTTP://SUPPORT.AVAYA.COM/LICENSEINFO...
Page 3 Marks of Avaya, its affiliates, or other third parties. Users are not permitted to use such Marks without prior written consent from Avaya or such third party which may own the Mark. Nothing contained in this site, the Documentation and Product(s)
Page 4 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 5: Table Of Contents
Configuring IP routing........................271 Configuring Access Lists........................305 Configuring Elements, Classifiers, and Classifier Blocks..............309 Configuring wired Quality of Service....................316 Configuring Serviceability......................... 351 Configuring diagnostics and graphing....................361 Appendix A: Supported Country Codes................Avaya WLAN 8100 CLI Reference August 2013...
Page 6 Avaya WLAN 8100 CLI Reference August 2013...
Page 7: Chapter 1: Introduction
• ACLI reference for wired networks This chapter describes typical ACLI commands for wired network configuration. For further information on the features of the Wireless LAN 8100 solution, see Avaya WLAN 8100 Fundamentals (NN47251–102). Related Resources...
Page 8: Avaya Mentor Videos
7D00060A Wireless LAN 8100 Implementation Assessment (online test) Avaya Mentor videos Avaya Mentor is an Avaya-run channel on YouTube that includes technical content on how to install, configure, and troubleshoot Avaya products. Go to http://www.youtube.com/AvayaMentor and perform one of the following actions: •...
Page 9: Chapter 2: New In This Release
Chapter 2: New in this release The following sections detail what's new in the Avaya WLAN 8100 — CLI Reference (NN47251-107), for release 2.1.0. The Features section describes new features, and the Other Changes section describes non-feature changes in Release 2.1.0.
Page 10: Other Changes
This document does not contain feature updates. For more information on the features and enhancements for release 2.1.0, see the Avaya WLAN 8100 Fundamentals (NN47251– 102). For more information on the WMS enhancements see the Avaya WLAN 8100 GUI Reference (NN47251–108). Other Changes...
Page 11: Chapter 3: Overview Of Wlan Deployment Solutions
8180 platform. This device then hosts only the wireless control function and is called a wireless control point (WCP). A switch such as the Avaya ERS 8600/8800 introduced into the network, tunnels traffic (data) and is known as the wireless switching point (WSP). The APs and WSPs tunnel traffic between each other over an access tunnel and the WSPs tunnel traffic between each other over a mobility tunnel.
Page 12 Overview of WLAN deployment solutions Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 13: Chapter 4: Acli Reference For Wireless Lan (Wlan) 8100
Configuration utility The WC 8180 Quick Configuration utility allows you to perform a quick configuration of the WLAN 8100 controller. This utility is run from the Avaya CLI and consists of a series of prompts Avaya WLAN 8100 CLI Reference...
Page 14 3. Verify that the baud rate and other console parameters are properly configured. You can view console parameters using the PuTTY application. a. Open a PuTTY session. b. On the left-hand-side tree view, click Serial. c. Verify that the parameters are configured as follows: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 15 Procedure 1. Verify controller configuration: WC8180#show wireless Operation Mode : WC Status : Enabled Interface IP : 192.168.34.4 TCP/UDP base port : 61000 Base MAC Address : 58:16:26:FD:FE:00 Tunnel Path MTU : 1492 Avaya WLAN 8100 CLI Reference August 2013...
Page 16: Viewing Wlan 8100 Current Configuration
Display Asset ID configuration Display AUR configuration banner Display Custom Banner configuration core Display Core configuration default-cmd-interface Display Default Command Interface configuration dhcp-relay Display DHCP Relay configuration dhcp-snooping Display DHCP Snooping configuration Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 17 Display domain load balance configs domain-wsp Display domain wsp configs network-profile Display wireless network-profile configs. radio-profile Display wireless radio-profile configs. security Display wireless security config system Display wireless system configs vlan-map Display wireless valn-map configs <cr> Avaya WLAN 8100 CLI Reference August 2013...
Page 18: Configuring And Managing Remote Packet Capture
Before you start a packet capture, ensure that you do the following on the Observer host • Download the Netcat application from http://netcat.sourceforge.net/download.php to a location on the PC. • Open a UDP port for listening. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 19 - Also ensure that you deselect Swap Frame Control. • Figure 2: Configuration of the CAPWAP UDP port on Wireshark Procedure 1. Create a capture profile on the AMDC using the following command. WC8180(config-wireless)#capture-profile ? <1-4> Capture Profile ID Avaya WLAN 8100 CLI Reference August 2013...
Page 20 5.0 GHz radio interface only All radio interfaces b-radio 2.4 GHz radio interface only Configure the IP address of the observer host PC. WC8180(config-capture-profile)#observer-ip ? ipaddr IP address of Observer machine Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 21 WC8180#wireless capture-instance ? Packet capture instances delete Delete capture instance restart Restart capture instance start Start capture instance stop Stop capture instance Start packet capture instances: WC8180# wireless capture-instance start ap <ap-mac> profile <profile-id> Avaya WLAN 8100 CLI Reference August 2013...
Page 22 View packet capture instances: To view capture-instances for specific AP, use: WC8180# show wireless capture-instance ap <ap-mac> To view capture-instances for a specific profile, use: WC8180# show wireless capture-instance profile <profile-id> Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 23 • no promisc-mode + include-beacon + include-probe — you see beacons/probes from all APs. • promisc-mode + include-beacon + include-probe — you see beacons/probes from all APs. • no promisc-mode + include-data — you see data to/from only your AP. Avaya WLAN 8100 CLI Reference August 2013...
Page 24 Include 802.11 beacons frames from captures on radio interfaces. This filter is disabled by default. When a station MAC filter is set, it is not applied for selection of beacon frames Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 25 Specifies the name of the profile. By default, a capture profile is created with the profile name capture_profile_00n promisc-mode Enable/Disable: When promiscuous mode is disabled, only traffic directed to the AP is captured. Note that enabling promiscuous Avaya WLAN 8100 CLI Reference August 2013...
Page 26 APs reporting copies of the same packets. Promiscuous capture is disabled by default. For more information on the promiscous mode of operation, see the Avaya WLAN 8100 Fundamentals (NN47251–102). snap-length <32–1024> Specifies the file size of the packet capture, after which the capture is truncated.
Page 27: Configuring And Managing Client Band Steering And Client Load Balancing
Procedure 1. Create an Access Radio profile. Configure A-N and BG-N radio profiles to support different radio frequencies. The following examples shows the creation of A-N and BG-N radio profiles with the Avaya WLAN 8100 CLI Reference August 2013...
Page 28: Configuring And Managing Captive Portals
Configuring the Web hostname in Captive Portals on page 35 Customizing Captive Portals — updating Captive Portal locale on page 36 Customizing Captive Portal using static HTML pages on page 37 Managing Captive Portals on page 40 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 29: Configuring Captive Portal General Settings
TFTP server. The controller when configured with the TFTP server IP address can access the server and upload the customization files. Avaya WLAN 8100 CLI Reference August 2013...
Page 30: Configuring Captive Portal Profiles
The current release of WLAN 8100 allows you to configure up to 8 Captive Portal IP addresses for a single Captive Portal profile. Avaya recommends that you configure as many Captive Portal IP addresses for a Captive Portal profile as there are controllers in the domain.
Page 31 For more information, see Customizing Captive Portals — updating captive portal locale on page 36. 10. Use the command captive portal profile <profile_number> max- bandwidth to configure the maximum transmit and receive bandwidth limits. Avaya WLAN 8100 CLI Reference August 2013...
Page 32 WLAN 8100 allows configuration of the IP addresses of Web hosts in a Captive Portal profile so that the user can access these hosts without the need for authentication. This is the Captive Portal Walled Garden feature. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 33 View a sample Captive Portal profile configuration using the command show running- config module wireless captive-portal. WC8180(config-cp-profile)#show running-config module wireless captive-portal ! Embedded ASCII Configuration Generator Script ! Model = Wireless LAN Controller WC8180 ! Operation Mode = WC ! Software version = v2.1.0.015 Avaya WLAN 8100 CLI Reference August 2013...
Page 34: Redirecting The Url For Captive Portals
Use the following commands to configure the redirect URL in a Captive Portal: 1. Enter the wireless configuration mode of the ACLI. 2. Enter Captive Portal profile configuration. 3. Use the command captive portal profile <profile_number> redirect enable HTTP redirect mode after authentication. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 35: Configuring The Web Hostname In Captive Portals
2. Enter Captive Portal configuration. 3. Use the command captive-portal profile <ID> to go to the captive portal profile. 4. Use the command web-hostname <avaya-guest.com> to change the Web hostname. 5. Use the command default web-hostname to reset the Web hostname to the default value.
Page 36: Customizing Captive Portals - Updating Captive Portal Locale
Set text to notify user if their browser has javascript disabled success-msg Configure captive portal locale logout success message welcome-msg Configure captive portal locale welcome message wip-msg Set message indicating authentication in progress WCP8180(config-cp-locale)# Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 37: Customizing Captive Portal Using Static Html Pages
• You have configured the TFTP server IP address on the controller, using the following command: In this example, 172.16.1.11 is a sample TFTP server IP address. WC8180#config t Enter configuration commands, one per line. End with CNTL/Z. Avaya WLAN 8100 CLI Reference August 2013...
Page 38 • The image filename does not exceed 31 characters. 3. After creating the .zip file, copy the file to a TFTP server to upload it to the AMDC of the domain. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 39 • Internal Error — the file size is too big or the flash file system is full • File Max Size Exceeded — the TFTP file exceeds the file size limit (For image, 1Mb. For package, 4Mb) Avaya WLAN 8100 CLI Reference August 2013...
Page 40: Managing Captive Portals
<authenticated client MAC address> to revoke authentication on a specific client. 5. Use the command wireless captive-portal client-deauthenticate network profile <network profile Id> to revoke authentication from all clients associated with a particular network profile. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 41: Configuring And Managing Radius
The following sections describe the configuration and management of Remote Authentication Dial-In User Service (RADIUS) for authentication, using ACLI. Related topics: Configuring a RADIUS server on page 42 Configuring Radius Health Check on page 44 Avaya WLAN 8100 CLI Reference August 2013...
Page 42 5. Configure a RADIUS server and associate it with a RADIUS profile using the command radius server <host IP Address> <profile name>. 6. Configure the attributes of a RADIUS server using the following parameters: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 43 The default port number for RADIUS authentication is 1812. The default port number for RADIUS accounting is 1813. 7. Use the command no radius profile <radius profile name> to delete a RADIUS profile. Avaya WLAN 8100 CLI Reference August 2013...
Page 44 2. Use the command security to enter Security Configuration mode. 3. Create a user name. Use the command radius server <server-ip> healthcheck user <user-name> to configure the RADIUS health check user name. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 45 Use the command default radius server 172.16.2.13 IAS health- check-interval to set the default value of the RADIUS server health check interval. 8. View the health check configuration in detail. Use the command show wireless security radius server detail. Avaya WLAN 8100 CLI Reference August 2013...
Page 46 For Captive Portals, this certificate is used for the secured HTTPS certificate handshake. We can also import certificates that are generated by a 3rd party Certificate Authority (CA), into the WLAN 8100 controller. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 47 Assign a certificate to an application WC8180(config-crypto)#certificate import ? pkcs12 Import a PKCS12 certificate WC8180(config-crypto)#certificate import pk WC8180(config-crypto)#certificate generate ? <1-16> Certificate Index WC8180(config-crypto)#certificate generate Use the following variables to help you create a specified certificate. Avaya WLAN 8100 CLI Reference August 2013...
Page 48 Use the following command to import a self-signed certificate: WC8180(config-crypto)#certificate import pkcs12 3 ? filename Name of the file to import tftp-ip TFTP Server IP WC8180(config-crypto)#certificate import ? pkcs12 Import a PKCS12 certificate Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 49 Enter the wireless or crypto configuration mode of the ACLI. b. Use the command certificate map {Captive Portal|radius} certificate-index to map the certificate to a RADIUS application or a Captive Portal. WC8180(config-crypto)#certificate map ? captive-portal Captive Portal application radius RADIUS application Avaya WLAN 8100 CLI Reference August 2013...
Page 50 Use the command show wireless crypto certificate <index> to display a particular certificate. d. Use the command show wireless crypto certificate <index> detail to display a particular certificate in detail. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 51 Note: If RADIUS AAA offloading is enabled on the network, external RADIUS servers perform only MSCHAPv2 authentication. Avaya therefore recommends not including load balancing with RADIUS offloading. About this task Use the procedure to create a RADIUS profile for server load balancing.
Page 52 3. Enable RADIUS accounting in the network profile and also map the RADIUS accounting profile with the network profile. WC8180(config-network-profile)#radius accounting? accounting accounting-profile WC8180(config-network-profile)#radius accounting WC8180(config-network-profile)#radius accounting-profile <radius accounting profile name> Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 53: Auto-Rf
WC8180(config-wireless)# WC8180(config-wireless)#auto-rf channel-plan bg-n ? history-depth Set channel plan history depth interval Set interval used for "interval" plan mode mode Set channel plan mode time Set time used for "time" plan mode WC8180(config-wireless)# Avaya WLAN 8100 CLI Reference August 2013...
Page 54 Procedure 1. Enter Wireless Configuration mode of the CLI. 2. Use the command auto-rf channel-plan {a-n | bg-n} history-depth <0 - 10> to set the number of saved historical channel plans. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 55 Sample Auto-RF Configuration using the CLI: 1. Enable APA at the domain level. Execute the following command: WC8180(config-wireless)#auto-rf power-plan mode auto Verify the configuration: WC8180(config-wireless)#show wireless auto-rf power-plan Power plan mode : auto Avaya WLAN 8100 CLI Reference August 2013...
Page 56 4. Verify that each AP is set to use Auto power and channel in the Domain AP database. Note: The default is auto. AMDC#show wireless domain ap database detail Total number of entries in AP database = 106 ------------------------------------------------------- Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 57 This following procedure is used to manage automatic radio frequency functionality. Procedure 1. Enter Privileged mode of the CLI. 2. Use the command wireless auto-rf channel-plan {a-n | b/g-n} start to run the channel adjustment algorithm. Avaya WLAN 8100 CLI Reference August 2013...
Page 58 View the AP radio power plan status. WC8180#show wireless ap radio power-plan status ? detail Show mananged AP radio status in detail H.H.H AP MAC Address <cr> This command has further viewing options for a particular AP. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 59 WC8180#show wireless ap radio power-plan status 00:1B:4F:6A:18:E0 2 ------------------------------------------------------------------------- ----- Int_AP Int_VAP Last Adjust Power Power AP MAC Radio Channel Power Count Count Status Incr Decr ----------------- ----- ------- ------- ------ ------- ----------- ----- ----- 00:1B:4F:6A:18:E0 2 None ------------------------------------------------------------------------- Avaya WLAN 8100 CLI Reference August 2013...
Page 60 [1|2] to view the AP radio power status for an AP and for a specific radio channel. Sample output: WC8180#show wireless ap radio power status 00:1B:4F:6A:18:E0 1 AP (mac=00:1B:4F:6A:18:E0) Radio 1 (mac=41:00:5E:3B:E1:00) Manual Power Adjustment Status : None Transmit Power : 80 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 61 Auto RF channel plan. Sample output: WC8180#show wireless auto-rf channel-plan proposed ------------------------------------------------------------------------- ----- Phy Mode AP Mac Address Radio Interface Current Channel Channel ------------ ----------------- --------------- --------------- ----------- 802.11 b/g/n 58:16:26:ac:75:60 Avaya WLAN 8100 CLI Reference August 2013...
Page 62: Configuring And Viewing The Tunnel Path Mtu
Access points always receive the tunnel-path MTU configuration from its managing controller. Note: Tunnel Path MTU configuration is supported only in Overlay deployments. The following sections describe configuration of the Tunnel Path MTU using the Avaya CLI. CLI reference: WC8180(config-wireless)#tunnel-path-mtu ? <1250-2372>...
Page 63: Diffserv
(QoS) to wireless clients, on modern IP networks. The following sections describe the configuration and management of DiffServ using ACLI. ACLI reference: WCP8180(config-wireless)# DiffServ ? Differentiated Services classifierblock Classifier Block policy DiffServ Policy Avaya WLAN 8100 CLI Reference August 2013...
Page 64 Do not configure policy and classifier names that have similar letters and characters and differ only in their case. Before you begin • Ensure that you are in the Wireless Configuration mode on the Avaya CLI. Use the following commands: WCP8180#conf t...
Page 65 WCP8180(config-diffserv-classifierelement)#match ethtype ? <0x600-0xFFFF> Ethernet Type in HEX WCP8180(config-diffserv-classifierelement)#match precedence ? <0-7> WCP8180(config-diffserv-classifierelement)#match protocol ? <0-255> WCP8180(config-diffserv-classifierelement)#match src-ip ? A.B.C.D WCP8180(config-diffserv-classifierelement)#match srcport ? <1-65535> WCP8180(config-diffserv-classifierelement)#match tos ? <0x00-0xFF> 3. Configure a DiffServ policy. Avaya WLAN 8100 CLI Reference August 2013...
Page 66 WCP8180#sh wireless diffserv classifierblock Classifier Blocks ----------------- Total number of classifier blocks: 1 WCP8180(config-diffserv-policy)#show wireless diffserv classifierblock classifier1 detail Sample Output: WCP8180(config-diffserv-policy)#show wireless diffserv classifierblock classifier1 detail Classifier block classifier1 ------------------------ Element ID: 1 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 67 SSIDs can have a maximum of 32 characters. Also, ensure that you do not configure SSIDs that have similar characters but are different only in their case. For example, do not configure the SSIDs avaya- demo and AVAYA-DEMO within the same network.
Page 68 WCP8180(config-wireless)# 8. Enable client-QoS and Domain AP-client-QoS and map the created Diffserv policy to the AVAYA-Demo network profile, to prioritize WMM (Wireless Multi-Media) traffic in the network. By default, in WMM, voice traffic has a higher priority over video traffic. You can, for example, configure DiffServ policies to reverse this traffic priority in the network.
Page 69 Direction: Uplink ClassifierBlock Name Hits -------------------------------------------- 10280 Client (MAC=00:05:03:01:00:01) Policy: p1 Direction: Downlink ClassifierBlock Name Hits -------------------------------------------- Use the following command to view the DiffServ statistics in detail. WCP8180#show wireless diffserv statistics detail Avaya WLAN 8100 CLI Reference August 2013...
Page 70 QoS Bandwidth limit: 64000 64000 Diffserv Policy Name: None None WC8180# WC8180#show wireless client qos cached-status Client Mac Address: cc:52:af:0e:c6:81 Client to AP(Ingress) AP to Client(Egress) --------------------- -------------------- QoS Bandwidth limit: 40000 40000 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 71 Note: This field is required when you configure a source IP address. Avaya WLAN 8100 CLI Reference August 2013...
Page 72 • TOS Mask: This value is a hexadecimal number from Specifies the bit positions that are used for comparison against the IP TOS field in a packet. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 73: Aeroscout
The WLAN 8100 solution supports AeroScout enablement on an AP profile. Important: AeroScout enablement is supported only on indoor APs. It is not supported on the AP 8120– O, which is an outdoor AP. The following sections describe AeroScout enablement using the Avaya CLI. ACLI reference: WC8180(config-wireless)#ap-profile ? <1-32>...
Page 74 ACLI reference for Wireless LAN (WLAN) 8100 Enabling AeroScout on an AP profile Before you begin Ensure that you are in the wireless configuration mode on the Avaya CLI. Use the following commands: WC8180#conf t WC8180(config)#wireless WC8180(config-wireless)# About this task Use this procedure to create a sample AP profile and enable AeroScout on that profile.
Page 75: Station Isolation
Enabling Station Isolation on a network profile on page 75 Enabling Station Isolation on a network profile Before you begin Ensure that you are in the wireless configuration mode of the Avaya CLI. Use the following commands: WC8180#conf t WC8180(config)#wireless...
Page 76 ----------------- --------------- ----------------- --------------- ----------- 00:05:02:01:00:01 10.1.21.180 00:1B:4F:6C:01:00 default-MVLAN Auth View the client status in detail. WC8180#sh wireless client status detail Total number of clients: 1 Client (MAC=00:05:02:01:00:01) Client IP Address : 10.1.21.180 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 77: Ekahau Rtls Support
(e.g. signal strength measurements) to the Ekahau Engine, a core component of the Ekahau visibility system, that calculates the accurate location of the tag. The WLAN 8100 solution supports Ekahau enablement on an AP profile. Avaya WLAN 8100 CLI Reference August 2013...
Page 78 Use this procedure to create a sample AP profile and enable Ekahau on that profile. Note: Ekahau is disabled on an AP profile by default. Before you begin Ensure that you are in the wireless configuration mode of the Avaya CLI. Use the following commands: WC8180(config)#wireless WC8180#conf t...
Page 79 WC8180#(config-ap-profile)#ekahau server-port 8000 The following command resets the Ekahau server port to the default value 8569. WC8180(config-ap-profile)# default ekahau server port 7. Optionally, to disable Ekahau support, use the following command: WC8180(config-ap-profile)# default ekahau enable Avaya WLAN 8100 CLI Reference August 2013...
Page 80: Wi-Fi Zoning
The maximum value over 64 samples is compared against the configured drop threshold. When the maximum value falls below the configured drop threshold, the client is explicitly de-authenticated from the AP. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 81 Wi-Fi roaming zone with thresholds value -80 dBm or -65 dBm. The recommended range for optimal zoning is -90 dBm to -65 dBm. The following sections describe the configuration of Wi-Fi Zoning using the Avaya CLI. Related topics: Configuring Wi-Fi Zoning —...
Page 82 AP in a 10 feet high ceiling mount position. Ekahau 802.11n USB IPAD-2 (40 MHz, MIMO) (20 MHz, SISO) Distance (ft) SSI-Max SSI-AVG SSI-Max SSI-Avg from AP (dBm) (dBm) (dBm) (dBm) Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 83 Update image on a managed AP power Change radio transmit power on a managed AP reset Reset a managed AP tech-dump Request AP tech-dump Update the AP radio power using the following commands: Avaya WLAN 8100 CLI Reference August 2013...
Page 84 Auto tune the locked channel and power of the radio profile, by configuring the channel and power in auto mode in domain AP database. 2. Verify creation of the radio profile. WC8180(config-radio-profile)#show wireless radio-profile 20 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 85 Max Transmit Lifetime : 512 msec Max Receive Lifetime : 512 msec Max Clients : 200 Auto Channel Adjustment Mode : Yes Auto Power Adjustment Mode : Yes Auto Power Minimum : 40 % Avaya WLAN 8100 CLI Reference August 2013...
Page 86 Select extension cable type for the specified radio power Configure power setting for the specified radio roam-zone Configure dissociation RSSI threshold 2. Configure thresholds value for the Wi-Fi association zone and roaming zone. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 87: Domain Ap Configuration
Related topics: Configuring domain AP parameters on page 88 Enabling or disabling radios on a domain AP on page 90 Saving AP radio channel and power configuration to the domain AP database on page Avaya WLAN 8100 CLI Reference August 2013...
Page 88 End configuration mode exit Exit from domain AP configuration mode label Configure AP Label led-state Configure the operating state of LEDs on the AP location Configure AP Location model Configure AP Model Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 89 WORD Enter campus string (limit: 1-8 chars) Configure the AP model. WC8180(config-domain-ap)#model ? ap8120 Avaya AP8120 ap8120-E Avaya AP8120-E (with external antennas) Configure the preferred controller IP address. WC8180(config-domain-ap)#preferred-controller ? A.B.C.D Controller IP Address Configure an AP profile. WC8180(config-domain-ap)#profile-id ? <1-32>...
Page 90 Radio 1 Channel : 44 Power : 80 External Antenna : N/A Extension Cable : N/A Assoc-zone : Auto Roam-zone : Auto Admin-Enable : False Radio 2 Channel : Automatic Adjustment Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 91 Preferred Controller : 0.0.0.0 Alternate Controller : 0.0.0.0 Location Campus Building Floor Sector Radio 1 Channel : 36 Power : Automatic Adjustment External Antenna : WL81AT070E6 Extension Cable : 3-ft Assoc-zone : Auto Roam-zone : Auto Avaya WLAN 8100 CLI Reference August 2013...
Page 92 View the current channel configuration of the AP. WC8180#show wireless domain ap database 00:1B:4F:6A:05:00 ---------------------------------------------------------- Profile/ Radio 1 Radio 2 Preferred AP MAC Country Channel Channel WC ----------------- ------- ------- ------- --------------- 00:1B:4F:6A:05:00 10/CN Auto Auto 192.168.14.11 ---------------------------------------------------------- Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 93 Radio Oper-Down Reason : None b. Save the AP channel configuration to the domain AP database. CLI Reference: WC8180#wireless ap channel <AP-MAC-address> <radio> ? <1-216> Enter a valid channel number. Use 'show wireless ap radio Avaya WLAN 8100 CLI Reference August 2013...
Page 94 00:1B:4F:6A:05:00 2/IN 192.168.14.13 -------------------------------------------------------- WC8180#show wireless ap radio status 00:1B:4F:6A:05:00 -------------------------------------------------------------------- AP MAC Radio Operation Channel Power 802.11 Mode Auth Clients ----------------- ----- --------- ------- ----- --------------- ---- 00:1B:4F:6A:05:00 802.11a/n 802.11b/g/n Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 95 Verify that the configuration is propagated to all APs in the domain. WC8180#show wireless ap radio status ------------------------------------------------------------------- AP MAC Radio Operation Channel Power 802.11 Mode Auth Clients ----------------- ----- --------- ------- ----- ------------ ------ 00:1B:4F:69:F4:20 802.11a/n 802.11b/g/n ------------------------------------------------------------------- 00:1B:4F:6A:05:00 802.11a/n 802.11b/g/n ------------------------------------------------------------------- WC8180# Avaya WLAN 8100 CLI Reference August 2013...
Page 96 Turn-off all LEDs on the AP Use the following command to turn off LEDs on the AP: WC8180(config-domain-ap)#led-state off WC8180(config-domain-ap)#end 3. Perform a controller configuration synchronization (config-sync) to apply changes to the AP. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 97 The AP LED status is set to LED-OFF. WC8180#show wireless ap status 58:16:26:AC:75:60 detail Sample Output: --------------------------------------------------------------- AP (MAC=58:16:26:AC:75:60) IP Address : 172.16.8.13 Status : Managed WC Assignment-Method : Least-Load AP Label Hardware Type : Avaya AP8120-E Avaya WLAN 8100 CLI Reference August 2013...
Page 98 : 60 External Antenna : WL81AT070E6 Extension Cable : 3-ft Assoc-zone : Auto Roam-zone : Auto Admin-Enable : True Radio 2 Channel : 11 Power : 60 External Antenna : WL81AT070E6 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 99: Wireless Security - Wids-Wips Configuration And Management
(WIPS) takes proactive action to mitigate the threat posed by rogue devices. The WIDS/WIPS policy specifies the configuration elements for the WIDS/WIPS feature. This includes the rogue classification criterion, known AP database and rogue AP database. Avaya WLAN 8100 CLI Reference August 2013...
Page 100 WIDS in the 2.4GHz band (e.g., 802.11n and 802.11b/g). Each radio shares its time between providing data services for clients and performing the WIDS functionality. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 101 5 country-code US profile-name mixed radio 1 enable radio 2 enable radio 1 profile-id 7 radio 2 profile-id 4 exit Configuring WIDS-WIPS CLI Reference: WCP8180(config-security)#wids ? Configure Wireless Intrusion Detection Avaya WLAN 8100 CLI Reference August 2013...
Page 102 Fake AP detected with managed SSID managed-ssid-rcvd-from-unknown-ap Unknown AP using managed SSID managed-ssid-with-invalid-security AP using invalid security on managed SSID no-ssid-rcvd-from-ap AP with no SSID unexpected-wids-device Unexpected WDS device unmanaged-ap-on-wired-net Unmanaged AP detected on wired network Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 103 Set interval for calculating rate threshold Set threshold for calculating rate <cr> Use the following commands to configure options within the probe-req-rate threat. WCP8180(config-security)# wids rogue-client threat probe-req-rate ? interval Set interval for calculating rate Avaya WLAN 8100 CLI Reference August 2013...
Page 104 Set the expected WDS mode wired-mode Set the expected wired network mode Use the following command to configure the channel. WCP8180(config-security)#wids known-ap 00:88:99:66:66:88 channel ? <0-216> expected channel number, 0 for any channel Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 105 SSIDs can have a maximum of 32 characters. Also, ensure that you do not configure SSIDs that have similar characters but are different only in their case. For example do not configure SSIDs avaya-demo and AVAYA-DEMO within the same network.
Page 106 WIDS/WIPS or just the WIDS functionality, scan radio bands/channels to collect information about neighboring APs and detected clients in those bands/channels. They then send this information to their managed WLAN switches over UDP. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 107 Detected AP MAC SSID Status Mitigation LastSeen ----------------- ---------------- --- ------- ---------- ------------ 00:02:6F:14:30:10 CP-User-OAP Unknown NotRogue 0d:22:48:33 00:02:6F:BD:94:70 Dinesh-OAP-Test Unknown NotRogue 0d:00:00:29 00:02:6F:BD:94:B0 user-db-test.17 Unknown NotRogue 0d:00:01:48 00:02:6F:BD:95:20 test123 Unknown NotRogue 0d:00:00:29 Avaya WLAN 8100 CLI Reference August 2013...
Page 108 AP is operating on an illegal channel Enabled Known Standalone AP is incorrectly configured Enabled AP is operating as a WDS device Enabled Unmanaged AP detected on wired network Enabled Show wireless security wids-wips rogue-ap-classification Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 109 Client is not in known DB Disabled Authenication request exceeded Enabled Probe request exceeded Enabled DeAuthenication request exceeded Enabled Authenication failure exceeded Enabled Client is authenicated with unknown AP Disabled Show wireless security wids-wips rogue-client-classification Avaya WLAN 8100 CLI Reference August 2013...
Page 110: Configuring A Mac Filter Blacklist
MAC independent of a Whitelist or RADIUS based MAC validation, by configuring the client in a MAC filter blacklist. Procedure 1. Enter wireless security configuration mode of the CLI. WCP8180#conf t Enter configuration commands, one per line. End with CNTL/Z. WCP8180(config)#wireless WCP8180(config-wireless)#security Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 111: Wireless Security - Client Mac Validation
• Using blacklists and whitelists: The WLAN 8100 maintains two locally configured databases; the white list and the black list. If the client MAC is configured in the white list, the system grants access to the client. Avaya WLAN 8100 CLI Reference August 2013...
Page 112 802.1X or the WPA authentication methods. It is also useful in enterprise networks that support the Bring Your Own Device (BYOD) policy, personally-owned devices, IT-issued devices and guests. For more information, see the Avaya WLAN 8100 Fundamentals (NN47251–102). Related topics: Configuring the client MAC validation mode in a network profile...
Page 113 Entering network-profile (id = 2) ... WCP8180(config-network-profile)#no mac-validation 5. (Optional) Use the following commands to set the default client MAC validation mode, which is local-whitelist. WC8180(config-network-profile)#default mac-validation ? mode Set mac-validation mode to default value local-whitelist <cr> Avaya WLAN 8100 CLI Reference August 2013...
Page 114 WCP8180(config-network-profile)#mac-validation mode local-whitelist b. Verify the MAC validation mode using the following command: WC8180(config-wireless)#show wireless network-profile detail 3. Use the following commands to configure blacklist and whitelist devices for your network. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 115 If the client device MAC address is added to the RADIUS server, MAC validation succeeds and the client device is granted wireless network access. Otherwise, the client device continues to be blacklisted. Avaya WLAN 8100 CLI Reference August 2013...
Page 116 The following example uses a sample network profile with profile Id 2. WC8180(config-wireless)#show wireless network-profile detail Network Profile ID: 2 Name : Default SSID : Guest-Network Hide SSID : No Mobility Vlan Name : default-MVLAN Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 117 Configuring the known-client-ageout for MAC validation against a RADIUS server When the MAC address of a wireless client is not configured on the validating RADIUS server, MAC validation for that device against the validating RADIUS server fails and the wireless Avaya WLAN 8100 CLI Reference August 2013...
Page 118 Enter configuration commands, one per line. End with CNTL/Z. WCP8180(config)# 2. Enable the authentication-failure trap. WC8180(config)#snmp-server notification-control avWlanClientAuthenticationFail Note: To view a complete list of snmp-server notification types and their status, execute the command show snmp-server notification-control. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 119: Load Balancing Of Aps And Wsps
Load Balancing of WSPs are only applicable to Unified Access deployments. For more information on AP and WSP load balancing, see Avaya WLAN 8100 Fundamentals (NN47251–102). The following sections describe the mechanisms of load balancing for APs and WSPs.
Page 120 Controller load balance configuration commands default Set load-balance parameters to default End configuration mode exit Exit from domain load-balance configuration mode lb-metric Load balance metric for both AP and WSP Remove AP/WSP lb metrics Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 121 WORD Enter campus string (limit: 1-8 chars) WCP8180(config-domain-ap)#location <campus-string> ? WORD Enter building string (limit: 1-8 chars) WCP8180(config-domain-ap)#location <campus-string> <Building-string> ? WORD Enter floor string (limit: 1-8 chars) WCP8180(config-domain-ap)#location <campus-string> <Building-string> <floor-string> ? Avaya WLAN 8100 CLI Reference August 2013...
Page 122 Use the following commands to verify configuration of load balancing. CLI Reference: WC8180#show wireless domain load-balance ? Display load-balancing information action-status Display load-balancing action-status information ap-lb-table Display AP load-balancing table information Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 123 Total number of WCs in the database: 2 4. Verify controller load-balancing status. WC8180#show wireless domain load-balance controller-lb-status Sample output: OL-AMDC#show wireless domain load-balance controller-lb-status --------------------------------------------- Controller Load Balance Status --------------------------------------------- Controller IP Cap. Cnt. Assign Conn. --------------------------------------------- 192.171.0.56 Avaya WLAN 8100 CLI Reference August 2013...
Page 124 LeftWi Second Lab2 Floor Table 4: AP location parameters MAC address AP IP Campus Building Floor Sector address 00:1B:4F:6A:18:E1 172.16.2.101 Avaya LeftWing First Lab1 Floor 00:1B:4F:6A:18:E2 172.16.2.102 Avaya LeftWing FirstFl Lab1 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 125 -------------------------------------------------------------------- Preferred Alternate LeastLoad Location Unknown --------------- --------- --------- --------- -------- -------- APs load-balanced to WC -------------------------------------------------------------------- b. Configure the load balancing metric as location on both controllers (WC1 and WC2). WC8180(config-wireless-lb)#lb-metric location Avaya WLAN 8100 CLI Reference August 2013...
Page 126 Configure the C.B.F.S parameters for AP1 and AP2: WC8180(config-wireless)#domain ap 00:1B:4F:6A:18:E1 Entering domain AP (mac = 00:1B:4F:6A:18:E1) configuration mode... WC8180(config-domain-ap)#location Avaya LeftWing FirstFloor Lab1 WC8180(config-wireless)#domain ap 00:1B:4F:6A:18:E2 Entering domain AP (mac = 00:1B:4F:6A:18:E2) configuration mode... WC8180(config-domain-ap)#location Avaya LeftWing FirstFloor Lab1 Configure the C.B.F.S parameters for AP3 and AP4:...
Page 127 Mobility Domain AP License : 4096 Mobility Domain AP License In Use Configured Load Balancing Metric : Location Domain Load Balance Status per Method: -------------------------------------------------------------------- Preferred Alternate LeastLoad Location Unknown --------------- --------- --------- --------- -------- -------- Avaya WLAN 8100 CLI Reference August 2013...
Page 128 View the load-balance status on WC2: WC8180#show wireless domain load-balance status Mobility Domain AP License : 4096 Mobility Domain AP License In Use Configured Load Balancing Metric : none Domain Load Balance Status per Method: -------------------------------------------------------------------- Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 129: Commonly Used Configuration Procedures
Discovered AP load-balance Enter load balance configuration mode mobility-vlan Create a mobility domain VLAN WC8180(config-wireless)#domain ap ? Parameters: H.H.H AP MAC Address to create/modify an AP entry in AP database Sub-Commands/Groups: Avaya WLAN 8100 CLI Reference August 2013...
Page 130 7. Use the command domain tspec-violation-report-interval <0 - 900> to configure the TSPEC violators reporting interval in seconds. 8. Use the command domain ap <ap_mac> image-update to configure AP image update related parameters. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 131 Use the command domain ap <ap_mac> radio to configure the AP radio. g. Use the command domain ap <ap_mac> serial to configure the AP serial number. 20. Use the command domain mobility-vlan <vlan_name> to create a new mobility VLAN. Avaya WLAN 8100 CLI Reference August 2013...
Page 132 Create a mobility domain VLAN Add a WSP entry to domain WSP database WCP8180(config-wireless)#domain ap ? Parameters: H.H.H AP MAC Address to create/modify an AP entry in AP database Sub-Commands/Groups: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 133 AP profile and then create a new profile. Multiple- country domain names support a maximum of 32 countries. 7. Use the command domain tspec-violation-report-interval <0 - 900> to configure the TSPEC violators reporting interval in seconds. Avaya WLAN 8100 CLI Reference August 2013...
Page 134 AP controller. Use the command domain ap <ap-mac> preferred-wsp to configure a preferred WSP. g. Use the command domain ap <ap_mac> profile-id to assign the appropriate AP profile ID. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 135 Configuring wireless profiles Configure Radio Profiles, Network Profiles and AP Profiles. CLI reference: WCP8180(config-wireless)#ap-profile ? <1-32> AP Profile ID WCP8180(config-wireless)#network-profile ? <1-64> Network Profile ID WCP8180(config-wireless)#radio-profile ? <1-64> Radio Profile ID Avaya WLAN 8100 CLI Reference August 2013...
Page 136 SSIDs can have a maximum of 32 characters. Also, ensure that you do not configure SSIDs that have similar characters but are different only in their case. For example do not configure SSIDs avaya-demo and AVAYA-DEMO within the same network.
Page 137 These commands have the options listed in the following table. Command Options Description radio-profile <1- apsd Enable auto powersave delivery mode. 64> beacon-interval Set the beacon interval. channel Configure radio channel settings. data-rates Configure basic/ supported data rates. Avaya WLAN 8100 CLI Reference August 2013...
Page 138 Configure the radio power settings. profile-name Set the radio profile name. Configure radio QoS queues. rate-limit Configure the broadcast and multicast rates. rf-scan Configure the RF scan mode parameters. Enable Radio Resource Measurement. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 139 Create a radio profile with a 2.4 GHz or 5 GHz scan band or both. ap-model Configure AP Model • ap8120-O • Avaya outdoor AP (AP • ap8120/E 8120-O) • Avaya indoor (AP 8120) and external antenna (AP 8120-E) Note:...
Page 140 Set an AP profile name radio Configure Radio Profile mapping on a radio ap-model Configure the AP model ap8120-O • • Avaya outdoor AP (AP • ap8120/E 8120-O) • Avaya indoor (AP 8120) and external antenna (AP 8120-E) Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 141 Configure AP Label location Configure AP Location model {ap8120 | Configure the AP model ap8120-E | • Avaya indoor AP (AP ap8120-O} 8120) • Avaya indoor AP8120- E (with external antennas) Avaya WLAN 8100 CLI Reference August 2013...
Page 142 ACLI reference for Wireless LAN (WLAN) 8100 Command Option Description • Avaya outdoor AP (AP 8120-O) Note: If you do not choose an AP model the default is AP8120. preferred- Configure preferred wireless controller controller profile-id Assign AP profile ID used for AP configuration <1-32>...
Page 143 ACLI reference for the Wireless LAN (WLAN) 8100 Command Option Description • auto – Automatic power level adjustment serial WORD – Enter AP serial number 6. Use the command captive-portal profile <1 - 10> to create a captive portal profile. Avaya WLAN 8100 CLI Reference August 2013...
Page 144 ACLI reference for Wireless LAN (WLAN) 8100 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 145: Chapter 5: Acli Reference For Wired Networks
Chapter 5: ACLI Reference for wired networks ACLI reference for wired networks The following sections describe typical Avaya Command Line Interface (ACLI) commands for wired network configuration. Related topics: Configuring system options on page 145 Configuring system security on page 195...
Page 146 Configuring RADIUS authentication on page 193 General switch administration About this task This section outlines the Avaya CLI commands used in general switch administration. See the following topics for more information: Related topics: Assigning and clearing IP addresses on page 147...
Page 147 The following table describes the parameters for the ip address command. Table 5: ip address parameters Parameters Description A.B.C.D Denotes the IP address in dotted-decimal notation; netmask is optional. netmask Signifies the IP subnet mask. source BootP/DHCP mode Avaya WLAN 8100 CLI Reference August 2013...
Page 148 IP address. ip default-gateway command The ip default-gateway command sets the default IP gateway address for a switch to use. This command is executed in the Global Configuration command mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 149 Display IP route information routing Display global routing enable/disable WCP8180(config)# The following table describes the parameters for the show ip command. Parameters Description bootp Displays BootP/DHCP-related IP information. The possibilities for status returned are: Avaya WLAN 8100 CLI Reference August 2013...
Page 150 The syntax for the show interfaces command is: show interfaces [names] [<portlist>] CLI reference: WCP8180(config-security)#show interfaces ? gbic-info Display gbic details LINE List of ports names Display interface names verbose Display contains informations about STP, VLACP, EAP and AES <cr> Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 151 Configuring the EDM Help File Path About this task Use the following procedure to change the location of EDM help files Procedure 1. Enter Privileged mode of the CLI. 2. Enter Configuration mode by entering the config command. Avaya WLAN 8100 CLI Reference August 2013...
Page 152 Enter the port numbers you want to configure. Note: If you omit this parameter, the system uses the port number you specified in the interface command. 10|100|1000|auto Sets speed to: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 153 The default value is autonegotiation. Note: If you omit this parameter, the system uses the ports you specified in the interface command. full | half | auto Sets duplex to: Avaya WLAN 8100 CLI Reference August 2013...
Page 154 Use of the TDR does not affect 1 GB/s links. See the Troubleshooting Guide (NN47251-700) for more information on troubleshooting cables and for connector pin tables. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 155 ACLI reference for wired networks Note: The accuracy margin of cable length diagnosis is between three to five meters. Avaya suggests the shortest cable for length information be five meters long. Use the following CLI commands to initiate a TDR cable diagnostic test and obtain test reports.
Page 156 See the following commands to enable flow control using the CLI. Related topics: flow control command on page 157 no flowcontrol command on page 157 default flowcontrol command on page 158 default rate-limit command on page 158 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 157 Table 11: no flowcontrol command parameters Parameters Description port <portlist> Specifies the port numbers for which to disable flow control. Note: If you omit this parameter, the system uses the ports you specified in the Avaya WLAN 8100 CLI Reference August 2013...
Page 158 Enabling rate-limiting About this task The percentage or packets per seconds of multicast traffic, broadcast traffic, or both, can be limited using the CLI. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 159 For 10 Gb/s links, the default value for limiting both broadcast and multicast is 10 percent. Rate limiting using packet per seconds can only be configured using CLI. no rate-limit command The no rate-limit command disables rate-limiting on the port. Avaya WLAN 8100 CLI Reference August 2013...
Page 160 If you have trouble using this feature, try various NTP servers. Some NTP servers can be overloaded or currently inoperable.The system retries connecting with the NTP server a maximum of three times, with 5 minutes between each retry. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 161 The SNTP enable command enables SNTP. The syntax for the SNTP enable command is: sntp enable The SNTP enable command is executed in the Global Configuration command mode. Note: The default setting for SNTP is disabled. Avaya WLAN 8100 CLI Reference August 2013...
Page 162 The no SNTP server command clears the NTP server IP addresses. The command clears the primary and secondary server addresses. The syntax for the no SNTP server command is: no sntp server {primary | secondary} Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 163 This RTC provides the switch information in the instance that SNTP time is not available. Use the following CLI commands to view and configure the RTC. Related topics: clock set command on page 164 Avaya WLAN 8100 CLI Reference August 2013...
Page 164 The syntax for this command is: default clock sync-rtc-with-sntp enable This command is executed in the Global Configuration command mode. Clock source command This command sets the default clock source for the switch. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 165 To view the autonegotiation advertisements for the device, enter the following command: show auto-negotiation-advertisements [port <portlist>] Setting default auto-negotiation-advertisements The default auto-negotiation-advertisements command makes a port advertise all its auto-negotiation-capabilities. The syntax for the default auto-negotiation-advertisements command is: default auto-negotiation-advertisements [port <portlist>] Avaya WLAN 8100 CLI Reference August 2013...
Page 166 WCP8180#ping 1.1.1.1 ? Timeout in seconds continuous Ping in continuous mode count Number of packets datasize Packet size debug Enable ping debug interval Interval to retransmit in seconds timeout Timeout in seconds <cr> Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 167 <cr> Domain Name Server (DNS) Configuration Domain name servers are used when the switch needs to resolve a domain name to an IP address. Use the following CLI commands for DNS configuration. Avaya WLAN 8100 CLI Reference August 2013...
Page 168 Because this default is an empty string, this command has the same effect as the no ip domain-name command. The syntax for this command is: default ip domain-name This command is executed in the Global Configuration command mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 169 <ip_address_3> Optional. The IP address of a domain name server to remove from the list of servers used by the switch. This command is executed in the Global Configuration command mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 170 Download Image [/] Saving Image [-] Finishing Upgrading Image Note: Before upgrading to the latest software image, Avaya recommends to take the backup of the binary & ASCII configuration on the controller and save it. During the download process the switch is not operational.
Page 171 Note the action commands that were part of the pre-export configuration so they can be manually executed after the configuration file is imported. Avaya WLAN 8100 CLI Reference August 2013...
Page 172 Use this command to restore a configuration file stored on a TFTP server. The syntax for this command is: copy tftp config address <A.B.C.D> filename <name> The following table outlines the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 173 • use-bootp - specifies loading the ASCII configuration file at boot and using BootP to obtain values for the TFTP address and filename • use-config - specifies loading the ASCII configuration file at boot and using the Avaya WLAN 8100 CLI Reference August 2013...
Page 174 The syntax of the terminal command is: terminal speed {2400 | 4800 | 9600 | 19200 | 38400} length <0-132> width <1-132> The terminal command is executed in the User EXEC command mode. The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 175 1. Enter Privileged mode of the CLI. 2. Enter Configuration mode by entering the config command. 3. Use the command serial-console unit <1–8> to set the unit you want to enable serial console port access. Avaya WLAN 8100 CLI Reference August 2013...
Page 176 Enter an integer between 1 and 10. retry <1-100> Specify the number of times the user can enter an incorrect password before closing the connection. Enter an integer between 1 and 100. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 177 The boot command performs a soft-boot of the switch. The syntax for the boot command is: boot [default] [partial default] The boot command is executed in the Privileged EXEC command mode. The following table describes the parameters for the boot command. Avaya WLAN 8100 CLI Reference August 2013...
Page 178 {always | disable | last | needed} The ip bootp server command is executed in the Global Configuration command mode. The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 179 The shutdown command has the following syntax: shutdown [force] [minutes-to- wait <1-60>] [cancel] The following table describes the parameters of the shutdown command. Avaya WLAN 8100 CLI Reference August 2013...
Page 180 If no value is specified, the default value of 10 minutes is used. cancel This parameter cancels a scheduled reload any time during the time period specified by the minutes-to-wait parameter. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 181 A short explanation of each command is also included. Use help modes to obtain information about command modes available and CLI commands used to access them. These commands are available in any command mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 182 About this task Use the following procedure to configure the daylight savings time adjustment with CLI: Procedure 1. In CLI, set the Global Configuration command mode. configure 2. Enable sntp server. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 183 Use the following commands to configure the Dual Agent feature with CLI. Related topics: Enhanced download command on page 184 toggle next boot image command on page 184 boot secondary command on page 184 Show agent images on page 185 Avaya WLAN 8100 CLI Reference August 2013...
Page 184 You can use CLI commands to change the next boot image of the device. Use the boot secondary command to use the secondary boot image. The syntax for this command is: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 185 The following table defines the variables for the clock time-zone command: Table 35: clock time-zone command Variables Description zone Time zone acronym to be displayed when showing system time (up to 4 characters). Avaya WLAN 8100 CLI Reference August 2013...
Page 186 {static | custom} <line number> "<LINE>" The following table outlines the parameters for this command. Table 37: banner command parameters Parameters Description static | custom Sets the display banner as: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 187 <port-list> Substitute <port-list> with the GBIC ports for which to display information. If no GBIC is detected, this command does not show any information. This command is available in all command modes. Avaya WLAN 8100 CLI Reference August 2013...
Page 188 Use the following procedure to configure UI button options. Procedure 1. Enter Privileged mode of the CLI. 2. Enter Configuration mode by entering the config command. 3. Use the command ui-button unit <1–8> to set the unit to enable. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 189 Setting the server for Web-based management with CLI You can use the CLI to enable or disable a web server for use with Web-based management. Related topics: web-server command on page 190 no web-server command on page 190 Avaya WLAN 8100 CLI Reference August 2013...
Page 190 1. Access CLI through the Telnet protocol or a Console connection. 2. From the command prompt, use the cli password command to change the desired password. cli password {read-only | read-write} <password> The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 191 Table 40: cli password parameters Parameter Description {telnet | serial} This parameter specifies if the password is enabled or disabled for telnet or the console. Telnet and web access are tied together so that Avaya WLAN 8100 CLI Reference August 2013...
Page 192 In particular, ensure that you set the appropriate Service-Type attribute in the user accounts as follows: • for read-write access, Service-Type = Administrative • for read-only access, Service-Type = NAS-Prompt Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 193 Use the following commands to configure WLAN 8100 controller so that it can communicate with the RADIUS server and allow authentication management for users on the controller. Avaya WLAN 8100 CLI Reference August 2013...
Page 194 The password is hidden when entered. [password fallback] This parameter is optional and enables the password fallback feature on the RADIUS server. This option is disabled by default. 3. Press Enter. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 195: Configuring System Security
222 Configuring IP Manager using CLI on page 225 Configuring password security using CLI on page 227 Configuring Avaya Secure Network Access Options on page 229 Displaying CLI Audit log using CLI on page 229 Enabling Audit Log Save Settings...
Page 196 [address <madaddr>] Displays contents of BaySecure table of allowed MAC addresses: • address—specifies a single MAC address to display; enter the MAC address port Displays the BaySecure status of all ports. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 197 The following table outlines the parameters for this command. Table 43: mac-security parameters Parameter Description auto-learning Configure MACE auto-learning disable|enable Disables or enables MAC address-based security. filtering {enable|disable} Enables or disables DA filtering on intrusion detected. Avaya WLAN 8100 CLI Reference August 2013...
Page 198 The following table outlines the parameters for this command. Table 44: no mac-security mac-address-table parameters Parameter Description <H.H.H> Enter the MAC address in the form of H.H.H.H.H.H port <portlist> Enter the port number. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 199 Substitute the <1-32> with the number of the security list to be cleared. The no mac-security security-list command executes in the Global Configuration mode. mac-security command for specific ports The mac-security command for specific ports configures the BaySecure status of specific ports. Avaya WLAN 8100 CLI Reference August 2013...
Page 200 The syntax for the mac-security mac-da-filter command is mac-security mac-da-filter {add|delete} <H.H.H> Substitute the {add|delete} <H.H.H> with either the command to add or delete a MAC address and the MAC address in the form of H.H.H. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 201: Mac-Security Auto-Learning Aging-Time Command
MAC Security Table to the default of 60 minutes. The syntax for the command is default mac-security auto-learning aging-time The default mac-security auto-learning aging-time command executes in the Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 202: Mac-Security Auto-Learning Port Command
<portlist> [enable] [max- addrs] The following table outlines the parameters for this command. Table 48: default mac-security auto-learning parameters Parameters Description <portlist> The ports to configure for auto-learning. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 203 2. Configure a RADIUS server using the command radius server <host IP Address>, where <host IP address> is the IP address of the primary RADIUS server you want to configure. 3. Configure a RADIUS profile using the command radius profile <profile name> type . Avaya WLAN 8100 CLI Reference August 2013...
Page 204 This user name must be configured in the Active Directory. health-check-password Specifies the user password for RADIUS health check. The password (for the health-check-user) must be configured in the Active Directory. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 205 You can use the Console Interface to disable the RADIUS password fallback without erasing other RADIUS server settings. From the main menu, choose Console/Comm Port Configuration, then toggle the RADIUS Password Fallback field to No. Avaya WLAN 8100 CLI Reference August 2013...
Page 206 215 default snmp-server location command on page 215 snmp-server name command on page 216 no snmp-server name command on page 216 default snmp-server name command on page 216 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 207 The WLAN 8100 Series software supports MD5 and SHA authentication, as well as AES and DES encryption. The SNMP agent supports exchanges using SNMPv1, SNMPv2c and SNMPv3. Support for SNMPv2c introduces a standards-based GetBulk retrieval capability using SNMPv1 communities. SNMPv3 support introduces industrial-grade user authentication and message Avaya WLAN 8100 CLI Reference August 2013...
Page 208 Displays the trap receivers configured in the SNMPv3 MIBs. user Displays the SNMPv3 users, including views accessible to each user. view Displays SNMPv3 views. notification-control Displays SNMPv3 notification controls. notify-filter Displays SNMPv3 notification filters. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 209 The following table outlines the parameters for this command. Table 51: snmp-server community command parameters Parameter Description read-view <view-name> Changes the read view used by the new community string for different types of SNMP operations. Avaya WLAN 8100 CLI Reference August 2013...
Page 210 Changes the settings for SNMP: • ro|rw—sets the specified old-style community string value to NONE, thereby disabling it. • community-string—deletes the specified community string from the SNMPv3 MIBs (that is, from the new-style configuration). Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 211 The default snmp-server contact command executes in the Global Configuration mode. snmp-server command The snmp-server command enables or disables the SNMP server. The syntax for the snmp-server command is: snmp-server {enable|disable} The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013...
Page 212 The new standards-based method syntax for the snmp-server host command is snmp-server host <host-ip> [port <trap-port>] {v1 <community-string>| v2c <community-string>|v3 {auth|no-auth|auth-priv}<username> The snmp-server host command executes in the Global Configuration mode. The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 213 The show snmp-server host command displays the current SNMP host information including the configured trap port. The syntax for the show snmp-server host command is Avaya WLAN 8100 CLI Reference August 2013...
Page 214 SNMP trap port. v1|v2c|v3|<community-string> Using the standards-based method, specifies trap receivers in the SNMPv3 MIBs. <community-string>—the community string that works as a password and permits access to the SNMP protocol. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 215 The default snmp-server location command restores sysLocation to the default value. The syntax for the default snmp-server location command is: default snmp-server location The default snmp-server location command is executed in the Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 216 • for authenticated and encrypted access The syntax for the snmp-server user command for unauthenticated access is: snmp-server user <username> [read-view<view-name>] [write-view<view- name>] [notify-view<view-name] The syntax for the snmp-server user command for authenticated access is: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 217 255 characters. write-view <view-name> Specifies the write view to which the new user has access: • view-name—specifies the viewname; enter an alphanumeric string that can contain at least some of the nonalphanumeric characters. Avaya WLAN 8100 CLI Reference August 2013...
Page 218 Specifies the user to be removed. snmp-server view command The snmp-server view command creates an SNMPv3 view. The view is a set of MIB object instances which can be accessed. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 219 The no snmp-server view command deletes the specified view. The syntax for the no snmp-server view is: no snmp-server view <viewname> The no snmp-server view is executed in the Global Configuration mode. The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013...
Page 220 In this configuration, restricted contains a smaller subset of views than internet view. The subsets are defined according to RFC 3515 Appendix A. <very-secure> Specifies a maximum security configuration that allows no access to the users. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 221 The syntax for the no snmp-server notification-control command is no snmp-server notification-control <WORD/1-128> The no snmp-server notification-control command executes in Global Configuration mode. The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013...
Page 222 5. Enable TACACS+ accounting. Important: You can enable TACACS+ authorization without enabling TACACS+ accounting, and you can enable TACACS+ accounting without enabling TACACS+ authorization. Use the following commands to configure TACACS+. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 223 0-65535. The default port number is 49. To delete a TACACS+ server, use one of the following commands in Global or Interface Configuration mode: no tacacs default tacacs Avaya WLAN 8100 CLI Reference August 2013...
Page 224 Global or Interface Configuration mode: tacacs authorization level all|<level>|none The following table describes the parameters for this command. Table 68: tacas authorization command parameters Parameter Description Authorization is enabled for all privilege levels. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 225 About this task To enable IP Manager to control Telnet, SNMP, SSH, or HTTP access, use the following command in Global Configuration mode: ipmgr {telnet|snmp|web|ssh} The following table describes the parameters for this command. Avaya WLAN 8100 CLI Reference August 2013...
Page 226 Global Configuration mode: no ipmgr source-ip [<list ID>] <list ID> is an integer in the range 1-50 for Ipv4 addresses that uniquely identifies the entry in the IP Manager list. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 227 The password security command enables the Password Security feature on the WLAN 8100 Series. The syntax of the password security command is password security Disabling password security The no password security command disables the Password Security feature on the WLAN 8100 Series. Avaya WLAN 8100 CLI Reference August 2013...
Page 228 3. Displaying password history settings The show password password-history command is used to display the number of passwords currently stored in the password history table. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 229 ACLI reference for wired networks Configuring Avaya Secure Network Access Options About this task Use the following procedure to configure Avaya Secure Network Access (formerly Nortel Secure Network Access or NSNA). Procedure 1. Enter Privileged mode of the CLI. 2. Enter Configuration mode by entering the config command.
Page 230 SSLCERT.DAT. The new certificate file replaces the existing file. On deletion, the certificate in NVRAM is also deleted. The current SSL server operation is not affected by the create or delete operation. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 231 About this task Secure Shell protocol is used to improve Telnet and provide a secure access to the CLI interface. There are two versions of the SSH Protocol. The WLAN 8100 Series SSH supports SSH2. Avaya WLAN 8100 CLI Reference August 2013...
Page 232 The show ssh global command is executed in the Privileged EXEC command mode. ssh dsa-host-key command The ssh dsa-host-key command triggers the DSA key regeneration. The syntax for the ssh dsa-host-key command is: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 233 The no ssh dsa-auth-key command deletes the DSA authentication key stored in the switch. The syntax for the no ssh dsa-auth-key command is: no ssh dsa-auth-key The no ssh dsa-auth-key command is executed in the Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 234 The ssh secure command is executed in the Global Configuration mode. ssh dsa-auth command The ssh dsa-auth command enables the user log on using DSA key authentication. The syntax for the command is: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 235 The default ssh pass-auth command enables user log on using password authentication. The syntax for the default ssh pass-auth command is: default ssh pass-auth The default ssh pass-auth command is executed in the Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 236: Configuring Vlans And Link Aggregation
The default ssh timeout command is executed in the Global Configuration mode. Configuring VLANs and Link Aggregation About this task The following sections describe the methods and procedures necessary to configure VLANs, Spanning Tree and Link Aggregation on the WC 8180. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 237 VLAN and whether it is a management VLAN. Procedure To display VLAN information, use the command show vlan in the Privileged EXEC mode. CLI reference: WCP8180#show vlan ? configcontrol Display VLAN control mode Avaya WLAN 8100 CLI Reference August 2013...
Page 238 Specifies a decEther2 protocol-based VLAN. protocol-snaEther2 Specifies an snaEther2 protocol-based VLAN. protocol-Netbios Specifies a NetBIOS protocol-based VLAN. protocol-xnsEther2 Specifies an xnsEther2 protocol-based VLAN. protocol-vinesEther2 Specifies a vinesEther2 protocol-based VLAN. protocol-ipv6Ether2 Specifies an ipv6Ether2 protocol-based VLAN. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 239 To set the management VLAN, use the following command from Global Configuration mode. vlan mgmt <1-4094> Resetting the management VLAN to default About this task Use the following procedure to reset the management VLAN to VLAN1. Avaya WLAN 8100 CLI Reference August 2013...
Page 240 Specifies an ipxSnap protocol-based VLAN. protocol-ipxEther2 Specifies an ipxEther2 protocol-based VLAN. protocol-decEther2 Specifies a decEther2 protocol-based VLAN. protocol-snaEther2 Specifies an snaEther2 protocol-based VLAN. protocol-Netbios Specifies a NetBIOS protocol-based VLAN. protocol-xnsEther2 Specifies an xnsEther2 protocol-based VLAN. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 241 To configure the VLAN name, use the following command from Global Configuration mode. vlan name <1-4094> <line> Enabling automatic PVID About this task Use the following procedure to enable the automatic PVID feature. Avaya WLAN 8100 CLI Reference August 2013...
Page 242 Sets the port as a priority for the switch to consider as it forwards received packets. name <line> Enter the name you want for this port. Note: This option can only be used if a single port is specified in the <portlist> Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 243 VLAN Configuration Control is only applied to ports with the tagging modes of Untag All and Tag PVID Only. See the following commands for VLAN configuration control using the CLI. Related topics: Displaying VLAN Configuration Control settings on page 244 Avaya WLAN 8100 CLI Reference August 2013...
Page 244 Since flushing the MAC address table is not considered an urgent task, MAC flush commands are assigned the lowest priority and placed in a queue. The MAC flush commands are supported in CLI, SNMP, DM, and Web-based Management. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 245 Enter the number of the VLAN for which you want to display the forwarding database. Default is to display the management VLAN’s database. aging-time Displays the time in seconds after which an unused entry is removed from the forwarding database. Avaya WLAN 8100 CLI Reference August 2013...
Page 246 Clearing the MAC address table About this task Use the following procedure to clear the MAC address table. Procedure To flush the MAC address table, use the following command from Privileged EXEC mode. clear mac-address-table Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 247 IP directed broadcasting in a VLAN forwards direct broadcast packets in two ways: • Through a connected VLAN subnet to another connected VLAN subnet. • Through a remote VLAN subnet to the connected VLAN subnet. By default, this feature is disabled. Avaya WLAN 8100 CLI Reference August 2013...
Page 248 Use the following procedure to configure STP BPDU Filtering on a port. This command is available in all STP modes (STPG, RSTP, and MSTP). Procedure 1. To enable STP BPDU filtering, use the following command from Interface Configuration mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 249 250 Creating a Spanning Tree Group on page 251 Deleting a Spanning Tree Group on page 251 Enabling a Spanning Tree Group on page 251 Disabling a Spanning Tree Group on page 252 Avaya WLAN 8100 CLI Reference August 2013...
Page 250 Spanning Tree Group or to the port. Procedure To display STP configuration information, use the following command from Privileged EXEC mode. show spanning-tree [stp <1-8>] {config | port| port-mode | vlans} Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 251 To delete a Spanning Tree Group, use the following command from Global Configuration mode. spanning-tree stp <1-8> delete Enabling a Spanning Tree Group About this task Use the following procedure to enable a Spanning Tree Group. Avaya WLAN 8100 CLI Reference August 2013...
Page 252 4 -- 30, and the default value is 15. hello-time <1-10> Enter the hello time of the STG in seconds; the range is 1 --10, and the default value is Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 253: Restoring Default Spanning Tree Values
Sets the forward time to the default value of 15 seconds. hello-time Sets the hello time to the default value of 2 seconds. max-age Sets the maximum age time to the default value of 20 seconds. Avaya WLAN 8100 CLI Reference August 2013...
Page 254: Adding A Vlan To A Stg
Tree Group (STG) participation for the ports within the specified Spanning Tree Group. Procedure To configure STP and MSTG participation, use the following command from Interface Configuration mode. [no] spanning-tree [port <portlist>] [stp <1-8>] [learning {disable | normal | fast}] [cost <1-65535>] [priority] Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 255: Resetting Spanning Tree Values For Ports To Default
Spanning Tree Group to the factory default settings. Procedure To reset Spanning Tree values to default, use the following command from Interface Configuration mode. default spanning-tree [port <portlist>] [stp <1-8>] [learning] [cost] [priority] Avaya WLAN 8100 CLI Reference August 2013...
Page 256: Managing Rstp Using The Cli
Procedure To configure RSTP parameters, use the following command from Global Configuration mode. spanning-tree rstp [ forward-time <4-30>] [hello-time <1-10>] [max-age <6-40>] [pathcost-type {bits16 | bits32}] [priority Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 257 {config | status | statistics | role} [<portlist>] Variable Definitions Variable Value config Displays RSTP port-level configuration. status Displays RSTP port-level role information. statistics Displays RSTP port-level statistics. role Displays RSTP port-level status. Avaya WLAN 8100 CLI Reference August 2013...
Page 258 RSTP BPDUs when set to true, while operating in RSTP mode; the default is false. Displaying RSTP configuration About this task Use the following procedure to display the Rapid Spanning Tree Protocol (RSTP) related bridge-level configuration details. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 259 To display MLT configuration and utilization, use the following command from Privileged EXEC mode. show mlt [utilization <1-32>] Configuring a Multi-Link trunk About this task Use the following procedure to configure a Multi-Link trunk (MLT). Avaya WLAN 8100 CLI Reference August 2013...
Page 260 To disable a MLT, use the following command from Global Configuration mode. no mlt [<id>] Displaying MLT properties About this task Use the following procedure to display the properties of Multi-Link trunks (MLT) participating in Spanning Tree Groups (STG). Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 261 Configuring Link Aggregation using CLI on page 261 Configuring VLACP using CLI on page 267 Configuring Link Aggregation using CLI The following sections describe the commands necessary to configure and manage Link Aggregation using the CLI. Avaya WLAN 8100 CLI Reference August 2013...
Page 262 Use the following procedure to display information on the per-port LACP configuration. Select ports either by port number or by aggregator value. Procedure To display per port configuration, use the following command from Privileged EXEC mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 263 Use the following procedure to clear existing LACP port statistics. Procedure To clear statistics, use the following command from Interface Configuration mode. lacp clear-stats <portList> Displaying LACP port debug information About this task Use the following procedure to display port debug information. Avaya WLAN 8100 CLI Reference August 2013...
Page 264 Use the no form of the command to disable. Configuring the LACP administrative key About this task Use the following procedure to configure the administrative LACP key for a set of ports. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 265 Link Aggregation port. Ports in passive mode send LACPDUs only when the configuration is changed or when its link partner communicates first. • off -- The port does not participate in Link Aggregation. Avaya WLAN 8100 CLI Reference August 2013...
Page 266 {long | short} Specify the long or short timeout interval. Configuring LACP port mode About this task Use the following procedure to configure the LACP port mode on the switch. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 267 Use the following procedure to configure VLACP parameters on a port. Procedure To configure parameters, use the following command from Interface Configuration mode. [no] vlacp port <port> [enable | disable] [timeout <long/ short>][fast-periodic-time <integer>] [slow-periodic-time <integer>] [timeout-scale <integer>] [funcmac-addr <mac>] [ethertype <hex>] Avaya WLAN 8100 CLI Reference August 2013...
Page 268 VLACPDU. The port expects to receive a VLACPDU at the same moment the partner port sends it. Therefore, the delayed VLACPDU results in the link being blocked, and then enabled again when the packet Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 269 VLACP frame. The range is 8101-81FF. Default is 8103. Configuring VLACP multicast MAC address About this task Use the following procedure to set the multicast MAC address used by the device for VLACPDUs. Avaya WLAN 8100 CLI Reference August 2013...
Page 270 Note: If VLACP is enabled on an interface, the interface will not forward traffic unless it has a valid VLACP partner. If one partner has VLACP enabled and the other is not Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 271: Configuring Ip Routing
Configuring IP routing status on a VLAN on page 273 Displaying the IP address configuration and routing status for a VLAN on page 274 Displaying IP routes on page 275 Performing a traceroute on page 275 Avaya WLAN 8100 CLI Reference August 2013...
Page 272 Variable Definitions Variable Value Disables IP routing on the switch Displaying global IP routing status About this task Use this command to display the status of IP blocking on the switch. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 273 Use this procedure to enable and disable routing for a particular VLAN. Procedure To configure the status of IP routing on a VLAN, enter the following from the VLAN Interface Configuration mode: [default] [no] ip routing Avaya WLAN 8100 CLI Reference August 2013...
Page 274 Offset Specifies the value used to calculate the VLAN MAC address, which is offset from the switch MAC address. Routing Specifies the status of routing on the VLAN: enabled or disabled. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 275 Specifies the IP address of the remote host. Specifies the maximum time to live (ttl). The value for this parameter is in the rage from 1-255. The default value is 10. Example: traceroute 10.3.2.134 -m 10 Avaya WLAN 8100 CLI Reference August 2013...
Page 276 • Enable IP routing globally • Enable IP routing and configure an IP address on the VLANs to be routed. Procedure To configure a static route, enter the following from the Global Configuration command mode: Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 277 [-s <subnet IP Address> <mask>] show ip route <Subnet IP Address> —s [<subnet IP Address> <mask>] Example WCP8180#show ip route static =============================================================================== Ip Static Route =============================================================================== DEST MASK NEXT COST PREF LCLNHOP STATUS ENABLE ------------------------------------------------------------------------------- Avaya WLAN 8100 CLI Reference August 2013...
Page 278 ENABLE Identifies whether the route is enabled. The following table shows the field descriptions for the show ip route command. Field Description Identifies the route destination. MASK Identifies the route mask. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 279 <next-hope> Specifies the next hop IP address for the route being added. Displaying the management routes About this task Use this procedure to display the static routes configured for the management VLAN. Avaya WLAN 8100 CLI Reference August 2013...
Page 280 281 Displaying the global DHCP relay status on page 281 Specifying a local DHCP relay agent and remote DHCP server on page 282 Displaying the DHCP relay configuration on page 283 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 281 About this task Use this procedure to display the current DHCP relay status for the switch. Procedure To display the global DHCP relay status, enter the following from the User EXEC command mode: Avaya WLAN 8100 CLI Reference August 2013...
Page 282 DHCP packets are to be relayed. [enable] Enables the specified DHCP relay forwarding path. [disable] Disables the specified DHCP relay forwarding path. [mode {bootp | bootp-dhcp | dhcp}] Specifies the mode for DHCP relay. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 283: Job Aid
VLAN, enter the command with no optional parameters. Procedure To configure DHCP relay on a VLAN, enter the following from the VLAN Interface Configuration mode: [no] ip dhcp-relay [broadcast] [min-sec <min-sec>] [mode {bootp | dhcp | bootp_dhcp}] Avaya WLAN 8100 CLI Reference August 2013...
Page 284: Displaying The Dhcp Relay Configuration For A Vlan
Indicates the VLAN interface index. MIN_SEC Indicates the minimum time, in seconds, to wait between receiving a DHCP packet and forwarding the DHCP packet to the destination device. A value of Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 285: Clearing Dhcp Relay Counters For A Vlan
Clearing DHCP relay counters for a VLAN About this task Use this procedure to clear the DHCP relay counters for a VLAN. Procedure To clear the DHCP relay counters, enter the following from the VLAN Interface Configuration command mode: Avaya WLAN 8100 CLI Reference August 2013...
Page 286 Use this procedure to display the status of directed broadcasts on the switch. By default, directed broadcasts are disabled. Procedure To display directed broadcast status, enter the following from the User EXEC mode: show ip directed-broadcast Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 287 ARP entry. < port> Specifies the port number to which the static ARP entry is being added. vid <1-4094> Specifies the VLAN ID to which the static ARP entry is being added. Avaya WLAN 8100 CLI Reference August 2013...
Page 288 Displays the ARP age time. MAC Address Specifies the MAC address of the ARP entry. VLAN-Unit/Port/Trunk Specifies the VLAN/port of the ARP entry. Flags Specifies the type of ARP entry. S=Static, D=Dynamic, L=Local, B=Broadcast. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 289 Use this procedure to enable proxy ARP functionality on a VLAN. By default, proxy ARP is disabled. Prerequisites • Enable IP routing globally. • Enable IP routing and configure an IP address on the VLAN to be configured as a Proxy ARP interface. Avaya WLAN 8100 CLI Reference August 2013...
Page 290 Specifies the status of Proxy ARP on the VLAN. IGMP snooping configuration using the CLI About this task Use the following procedures to configure IGMP snooping on a VLAN using the CLI. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 291 To configure IGMP snooping, the only required configuration is to enable snooping on the VLAN. All related configurations, listed below, are optional and can be configured to suit the requirements of your network. Avaya WLAN 8100 CLI Reference August 2013...
Page 292 IGMP send query is disabled by default. Prerequisites • You must enable snoop on the VLAN. Procedure To enable IGMP send query, enter the following command from the VLAN Interface Configuration mode: ip igmp send-query Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 293 IGMPv1, IGMPv2, or IGMPv3 (IGMPv3 is supported for IGMP snooping only; it is not supported with PIM-SM). The default is IGMPv2. Procedure To configure the IGMP version, enter the following from the VLAN Interface Configuration mode: [default] ip igmp version <1-3> Avaya WLAN 8100 CLI Reference August 2013...
Page 294 Specifies whether to add or remove the static mrouter ports. Displaying IGMP snoop, proxy, and mrouter configuration About this task Use this procedure to display the IGMP snoop, proxy, and mrouter configuration per VLAN. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 295 Procedure To configure IGMP parameters, enter the following from the VLAN Interface Configuration mode: [default] ip igmp [last-member-query-interval<last-mbr-query- in>] [query-interval<query-int>] [query-max-response<query- max-resp>] [robust-value<robust-val>] [version<1-3>] enter the following from the Global Configuration command mode: Avaya WLAN 8100 CLI Reference August 2013...
Page 296 Avaya recommends configuring this parameter to values higher than 3. If a fast leave process is not required, Avaya recommends values above 10. (The value 3 is equal to 0.3 of a second, and 10 is equal to 1.0 second.) <query-int>...
Page 297 ACLI reference for wired networks Important: To maximize your network performance, Avaya recommends that you set the router alert option according to the version of IGMP currently in use: IGMPv1—Disable IGMPv2— Enable IGMPv3—Enable Procedure To configure the router alert option on a VLAN, enter the following from the VLAN...
Page 298 Indicates the frequency (in seconds) at which host query packets are transmitted on the interface. IGMPv1 Static Router Ports Indicates the IGMPv1 static mrouter ports. IGMPv2 Static Router Ports Indicates the IGMPv2 static mrouter ports. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 299 Identifies the member port for the group. This is the port on which group traffic is forwarded and in those case where the type is dynamic, it is the port on which the IGMP join was received. Avaya WLAN 8100 CLI Reference August 2013...
Page 300 Use this procedure to display the status of unknown multicast filtering: enabled (no flooding) or disabled (flooding allowed). Procedure To display the unknown multicast flooding configuration, enter: show vlan igmp unknown-mcast-no-flood Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 301 Specifies the multicast IP address to be flooded. Displaying the multicast MAC addresses for which flooding is allowed About this task Use this procedure to display the multicast MAC addresses for which flooding is allowed on all switch VLANs. Avaya WLAN 8100 CLI Reference August 2013...
Page 302 Indicates the group expiration time (in seconds). V1 Host Timer Indicates the time remaining until the local router assumes that no IGMP version 1 members exist on the IP subnet attached to the interface. Upon Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 303 Deleting an IGMP profile on page 304 • Applying the IGMP filter profile on interface on page 304 • Removing a profile from an interface on page 304 • Displaying an IGMP profile on page 305 Avaya WLAN 8100 CLI Reference August 2013...
Page 304 Use this procedure to remove a profile from an interface. Procedure 1. From Global Configuration mode enter the interface <interface-id> command. 2. Enter the no ip igmp filter <profile number> command. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 305: Configuring Access Lists
Creating a Layer 2 access list on page 308 Removing a Layer 2 access list on page 309 Assigning ports to an access list About this task Assign ports to an access list by performing this the procedure. Avaya WLAN 8100 CLI Reference August 2013...
Page 306 <name> [addr-type <addrtype>] [src-ip <source_ip>] [dst-ip <destination_ip>] [ds-field <dscp>] [{protocol <protocol_type> | next_header <header>}] [src-port- min <port> src-port-max <port>] [dst-port-min <port> dst-port- max <port>] [flow-id <flowid>] [drop-action {drop | pass}] Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 307 Removing an IP access list About this task Remove an IP access list by performing this procedure. Procedure Remove an access list by using the following command from Global Configuration mode. no qos ip-acl <aclid> Avaya WLAN 8100 CLI Reference August 2013...
Page 308 Specifies the destination MAC address mask to use for this <destination_mac_addre access list. ss_mask> vlan-min <vid_min> vlan- Specifies the minimum and maximum VLANs to use with this max <vid_max> access list. Both values must be specified. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 309: Configuring Elements, Classifiers, And Classifier Blocks
312 Adding Layer 2 elements on page 312 Viewing Layer 2 elements on page 313 Removing Layer 2 elements on page 314 Linking IP and L2 classifier elements on page 314 Avaya WLAN 8100 CLI Reference August 2013...
Page 310 Specifies the IPv6 flow identifier. ip-flag <ip-flags> Specifies the flags present in an IPv4 header. ipv4-options <no-opt | with-opt> Specifies whether the Option field is present in the packet header. Valid values are Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 311 Use the data in the following table to use show qos ip element command. Variable Description <1–65535> Displays the specified IP classifier element entry. Displays all user-created, default, and system entries. system Displays system entries only. user Displays only user-created and default entries. Avaya WLAN 8100 CLI Reference August 2013...
Page 312 Valid format is H.H.H. dst-mac-mask <dst-mac-mask> Specifies the destination MAC mask element criteria. Valid format is H.H.H. ethertype <etype> Specifies the Ethernet type. Valid format is 0xXXXX, for example, 0x0801. Default is ignore. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 313 View Layer 2 element entries by using the following commands from the Privileged EXEC Configuration mode. show qos l2-element [<1-65535>] [all] [system] [user] Variable definitions Use the data in the following table to use show qos l2– element command. Avaya WLAN 8100 CLI Reference August 2013...
Page 314 Value classifier <1-55000> Specifies the classifier ID; range is 1–55000. set-id <1-55000> Specifies the classifier set ID; range is 1–55000. name <WORD> Specifies the set label; maximum is 16 alphanumeric characters. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 315 <1-55000> | in-profile-action-name <WORD>} | {meter <1-55000> | meter-name <WORD>}] Variable Definitions Variable Value classifier-block<1-55000> Specifies an the classifier block ID; range is 1–55000. block-number <1-55000> Specifies the classifier block number; range is 1–55000. Avaya WLAN 8100 CLI Reference August 2013...
Page 316: Configuring Wired Quality Of Service
When the ignore value is used in QoS, the system matches all values for that parameter. Related topics: Displaying QoS Parameters on page 317 Displaying QoS capability policy configuration on page 321 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 317 | <1-65535>] | nsna | policy [user | system | all | <1-65535>] | queue-set | queue-set-assignment | statistics <1-65535> | system-element [user | system | all |<1-65535>] | ubp | user- policy} Avaya WLAN 8100 CLI Reference August 2013...
Page 318 [unit] Displays the diagnostics entries. unit <1-8>—displays diagnostic entries for particular unit egressmap Displays the association between the DSCP and the 802.1p priority and drop precedence. filter-limiting Displays QoS filter limiting. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 319 | system | user] values are: • <1-65535>—displays a particular entry. • all—displays all user-created, default, and system entries. • system—displays only system entries. • user—displays only user-created and default entries. Default is all. Avaya WLAN 8100 CLI Reference August 2013...
Page 320 • system—displays only system entries. • user—displays only user-created and default entries. traffic-profile Displays QoS Traffic Profile entries. ubp [classifier | interface | Displays QoS UBP entries. The applicable values are: name] Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 321 Displays the information for particular ports QoS Agent configuration Related topics: Globally enabling and disabling QoS Agent support on page 322 Configuring a default queue set on page 322 Modifying default queue configuration on page 323 Avaya WLAN 8100 CLI Reference August 2013...
Page 322 Procedure Configure the queue set by using the following command from Global Configuration mode. default qos agent [aq-mode| buffer | dos-attack-prevention | nvram-delay | oper-mode | queue-set | statistics-tracking | ubp] Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 323 Modify the configuration by using the following command from Global Configuration mode. qos agent queue-set <1-8> Configuring Default Buffering Capabilities Use the following CLI commands to display and modify the buffer allocation mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 324 Maximum IPv4 ICMP Length: 512 Maximum IPv6 ICMP Length: 512 Auto QoS Mode: Disabled QoS Trusted Processing Mode: Partial QoS Policy Device Ident. Descr: Avaya QoS Policy Agent (QPAv2) v6.2.0 QoS Policy Device Max. Message Size: 2048 bytes Policy Class Name Current...
Page 325 Use the following procedure to associate the 802.1p priority values with a specific queue within a specific queue set. This association determines the egress scheduling treatment that traffic with a specific 802.1p priority value receives. Avaya WLAN 8100 CLI Reference August 2013...
Page 326 Configuring ports for an interface group on page 327 Removing ports from an interface group on page 327 Creating an interface group on page 327 Removing an interface group on page 328 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 327 About this task Use the following procedure to create interface groups. Procedure Create interface groups by using the following command from Global Configuration mode. qos if-group name <WORD> class <trusted | untrusted | unrestricted> Avaya WLAN 8100 CLI Reference August 2013...
Page 328 About this task Use the following procedure to configure DSCP-to-802.1p priority and drop precedence associations that are used for assigning these values at packet egress, based on the DSCP in the received packet. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 329 1p <0-7> Specifies the 802.1p priority value associated with the DSCP; range is between 0 and 7. dp <low-drop | high-drop> Specifies the drop precedence values associated with the DSCP: • low-drop • high-drop Avaya WLAN 8100 CLI Reference August 2013...
Page 330 Specifies the 802.1p priority used as lookup key for DSCP assignment at ingress; range is between 0 and 7. ds <0-63> Specifies the DSCP value associated with the target 802.1p priority; range is between 0 and 63. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 331 Specifies the system classifier element entry id; range is 1–55000. known-ip-mcast Matches the frames containing a known IP multicast destination address. known-non-ip-mcast Match frames containing a known non-IP multicast destination address. name Specifies the name of the system element. Avaya WLAN 8100 CLI Reference August 2013...
Page 332 [<1-65535>] [all] [system] [user] Variable definitions Use the data in the following table to use show qos system– element command. Variable Description <1–65535> Displays the specified system classifier element entries. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 333 <10-55000> [name <WORD>] [drop-action <enable | disable | deferred-pass>] [update-dscp <0-63>] [update-1p {<0-7> | use-tos-prec | use-egress}] [set-drop-prec <low-drop | high-drop>] [action-ext <1-55000> | action-ext-name <WORD>] 2. View QoS action by using the following command: Avaya WLAN 8100 CLI Reference August 2013...
Page 334 Specifies the action extension; range is 1–55000. action-ext-name <WORD> Specifies a label for the action extension; maximum is 16 alphanumeric characters. Removing QoS actions About this task Use the following procedure to delete QoS action entries. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 335 ID. Enter the name for the action; maximum is 16 alphanumeric characters egress-ucast <port> | egress-non- Specifies redirection of unicast/non-unicast to ucast <port> specified port. session-id Specifies the session id for QoS action. Avaya WLAN 8100 CLI Reference August 2013...
Page 336 <WORD> Specifies name for meter; maximum is 16 alphanumeric characters. committed-rate <64-10230000> Specifies rate that traffic must not exceed for extended periods to be considered in-profile. Enter the rate in Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 337 Remove QoS meter entries by using the following command from Global Configuration mode. no qos meter <1-55000> Configuring QoS Interface Shaper Related topics: Configuring interface shaping on page 338 Disabling interface shaping on page 338 Avaya WLAN 8100 CLI Reference August 2013...
Page 338 1–4294967295 ms. Disabling interface shaping About this task Use the following procedure to disable interface shaping. Procedure Disable interface shaping by using the following command from Interface Configuration mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 339 <portlist> Specifies the ports to which to directly apply this policy. if-group <WORD> Specifies the interface group name to which this policy applies; maximum number of characters is 32 US- Avaya WLAN 8100 CLI Reference August 2013...
Page 340 Use the following procedure to disable QoS policy entries. Policies can be enabled using the qos policy <policynum> enable command. Procedure Remove QoS policy entries by using the following command from Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 341 (packet is not dropped). enable Enables the traffic profile. Deleting a classifier, classifier block, or an entire filter set About this task Delete a filter classifier or set by performing this procedure. Avaya WLAN 8100 CLI Reference August 2013...
Page 342 Destination L4 Port Min: Ignore Destination L4 Port Max: Ignore Source L4 Port Min: Ignore Source L4 Port Max: Ignore IPv6 Flow Id: Ignore IP Flags: Ignore TCP Control Flags: Ignore IPv4 Options: Ignore Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 343 [vlan-min] [ vlan-tag] elements that are of the same block. • drop-action specifies whether or not to drop non- conforming traffic. • ds-field specifies the value for the DiffServ Codepoint (DSCP) in a packet. Avaya WLAN 8100 CLI Reference August 2013...
Page 344 • vlan-tag specifies the type of VLAN tagging in a packet. set name [commited-rate] [drop- Creates the User Based Policy set. nm-action] [drop-out-action] [max- Optional parameters: burst-rate] [max-burst-duration] Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 345 Note: You cannot delete a filter set while it is in use. 2. Delete a classifier by using the following command from the Global configuration mode. no qos ubp name <filter name> eval-order <value> Avaya WLAN 8100 CLI Reference August 2013...
Page 346 Note 1: You cannot reset QoS defaults if the NSNA application references a QoS NSNA filter set. Note 2: You cannot reset QoS defaults if the EAP/NEAP UBP support references a QoS UBP filter set. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 347 Procedure Configure the UBP support level by using the following command from Global Configuration mode. qos agent ubp [disable|epm|high-security-local|low-security- local] Variable Definitions Variable Value disable QoS agent rejects information forwarded by other applications. Avaya WLAN 8100 CLI Reference August 2013...
Page 348 This can aid QoS agent efficiency if a large amount of QoS data is being configured. Procedure Configure NVRAM delay by using the following command from Global Configuration mode. qos agent nvram-delay <0-604800> Default is 10 seconds. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 349 This procedure describes the steps necessary to enable DAPP. Procedure Enable DAPP by using the following command from Global Configuration mode: [no] qos agent dos-attack-prevention enable Use the no form of this command to disable. Avaya WLAN 8100 CLI Reference August 2013...
Page 350 This procedure describes how to set the maximum IPv4 ICMP length used by DAPP. Procedure Set the maximum IPv4 ICMP length by using the following command from Global Configuration mode: qos agent dos-attack-prevention max-ipv4-icmp <0-1023> Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 351: Configuring Serviceability
Viewing RMON alarms About this task Use the following procedure to view RMON alarms. Procedure 1. Enter Privileged Executive mode. 2. Use the show rmon alarm command to display information about RMON alarms. Avaya WLAN 8100 CLI Reference August 2013...
Page 352 If unspecified, defaults to 50. The range is from 1 to 65535. Buckets Granted Indicates the value associated with the number of buckets specified for the RMON collection history group of Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 353 The sampling interval, in seconds. absolute Use absolute values (value of the MIB object is compared directly with thresholds). delta Use delta values (change in the value of the MIB object between samples is compared with thresholds). Avaya WLAN 8100 CLI Reference August 2013...
Page 354 2. Enter the rmon event <1-65535> [log] [trap] [description <LINE>] [owner <LINE>] command. Variable Definitions Parameter Description <1-65535> Unique index for the event entry. [log] Record events in the log table. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 355 Specify the port number to be monitored. <1-65535> The number of history buckets (records) to keep. <1-3600> The sampling rate (how often a history sample is collected). [owner <LINE>] Specify an owner string to identify the history entry. Avaya WLAN 8100 CLI Reference August 2013...
Page 356 Use this procedure to disable RMON statistics. If the variable is omitted, all entries in the table are cleared. Procedure 1. Enter Global Configuration mode. 2. Enter the no rmon stats [<1-65535>] command to disable RMON statistics. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 357 IPFIX data is not load balanced when two collectors are in use. Identical information is sent to both collectors. Use the following procedure to configure the IPFIX collectors. Procedure 1. Enter Global Configuration mode. 2. Use the ip ipfix collector <unit_number> <collector_ip_address> command to configure the IPFIX collector. Avaya WLAN 8100 CLI Reference August 2013...
Page 358 The unit number of the collector. Currently up to two collectors are supported so the values 1 or 2 are valid. <aging_interval> The IPFIX aging interval. This value is in seconds from 0 to 2147400. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 359 Single or comma-separated list of ports. Deleting the IPFIX information for a port About this task Use the following procedure to delete the collected IPFIX information for a port. Procedure 1. Enter Privileged Executive mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 360 The value on which the data is sorted. Valid options are: • byte-count • dest-addr • first-pkt-time • last-pkt-time • pkt-count • port • protocol • source-addr • TCP-UDP-dest-port • TCP-UDP-src-port • TOS Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 361: Configuring Diagnostics And Graphing
About this task Use this procedure to view the statistics for the port on both received and transmitted traffic. Procedure 1. Enter Global Configuration mode. 2. Enter the show port-statistics [port <portlist>] command. Avaya WLAN 8100 CLI Reference August 2013...
Page 362 Use this procedure to display the port operational status. Important: If you use a terminal with a width of greater than 80 characters, the output is displayed in a tabular format. Procedure 1. Enter Privileged Executive mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 363 After a while (15 seconds is the forward delay default value, only if you did not configure another time interval for STP forward delay), if you type show interfaces again, STP Status should be forwarding. Showing port information About this task Perform this procedure to display port configuration information. Avaya WLAN 8100 CLI Reference August 2013...
Page 364 Viewing CPU utilization on page 365 Viewing memory utilization on page 365 Configuring the system log on page 365 Configuring remote logging on page 368 Configuring port mirroring on page 371 Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 365 Peak --------------------------------------------------------- Host 1024 1635 1091 1094 WCP8180(config)# Configuring the system log Use the following CLI commands to configure and manage the system log. Related topics: Displaying the system log on page 366 Avaya WLAN 8100 CLI Reference August 2013...
Page 366 Display informational log messages in reverse chronological order (beginning with most recent). Configuring the system log About this task Use this procedure to configure the system settings for the system event log. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 367 Use this procedure to default the system event log configuration. Procedure Enter the default logging command in global configuration mode. Clearing the system log About this task Use this procedure to clear all log messages in DRAM. Avaya WLAN 8100 CLI Reference August 2013...
Page 368 1. Enter Global Configuration mode. 2. Enter the show logging command to display the log. Enabling remote logging About this task Use this procedure to enable remote logging. By default, remote logging is disabled. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 369 The default address is 0.0.0.0. Clearing the remote server IP address About this task Use this procedure to clear the IP address of the remote server. Procedure 1. Enter Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013...
Page 370 The level is set to none. Setting the default remote logging level About this task Use this procedure to set the remote logging level to default. Procedure 1. Enter Global Configuration mode. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 371 <portlist> mirror-port-X <portlist> | XrxOrYtx monitor- port <portlist> mirror-port-X <portlist> mirror-port-Y <portlist> | XrxYtxmonitor-port <portlist> mirror-port-X <portlist> mirror-port-Y <portlist> | XrxYtxOrYrxXtx monitor- port <portlist> mirror-port-X <portlist> mirror-port-Y <portlist> | Asrc monitor-port <portlist> mirror-MAC-A Avaya WLAN 8100 CLI Reference August 2013...
Page 372 Enter the MAC address in format H.H.H. Asrc Mirror packets with source MAC address A. Adst Mirror packets with destination MAC address A. AsrcOrAdst Mirror packets with source or destination MAC address A. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 373 AsrcBdst | AsrcBdstOrBsrcAdst | AsrcOrAdst | ManyToOneRx | ManyToOneRxTx | ManyToOneTx | Xrx | XrxOrXtx | XrxOrYtx | XrxYtx | XrxYtxOrYrxXtx | Xtx} command. 3. Enter the command from step 2 for up to four instances. Avaya WLAN 8100 CLI Reference August 2013...
Page 374 Use this procedure to disable Many-to-Many port-mirroring Procedure 1. Enter Global Configuration mode 2. Enter the port-mirroring [<1-4>] mode disable or no port- mirroring [<1-4>] command to disable a specific instance. Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 375 ACLI reference for wired networks 3. Enter the no port-mirroring command to disable all instances. Variable Definitions Variable Definition <1-4> The port-mirroring instance. Avaya WLAN 8100 CLI Reference August 2013...
Page 376 ACLI Reference for wired networks Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 377: Appendix A: Supported Country Codes
Country Name Code United Arab Emirates Antigua and Barbuda Netherlands Antilles Argentina American Samoa Austria Australia Aruba Azerbaijan Bosnia Barbados Bangladesh Belgium Bulgaria Bahrain Bermuda Brunei Bolivia Brazil Bahamas Bhutan Belarus Canada Switzerland Chile Avaya WLAN 8100 CLI Reference August 2013...
Page 378 Denmark Dominica Dominican Republic Ecuador Estonia Egypt Spain Finland Falkland Islands Federated States of Micronesia France United Kingdom French Guiana Guernsey Gibraltar Guadeloupe Greece Guatemala Guam Hong Kong Honduras Croatia Haiti Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 379 Iran Iceland Italy Jersey Jamaica Jordan Japan Kenya Kiribati Korea Republic Kuwait Cayman Islands LAO People's Democratic Republic Lebanon Liechtenstein Sri Lanka Lesotho Lithuania Luxembourg Latvia Morocco Monaco Macedonia Macao Northern Mariana Islands Avaya WLAN 8100 CLI Reference August 2013...
Page 380 Nigeria Nicaragua Netherlands Norway New Zealand Oman Panama Peru Papua New Guinea Philippines Pakistan Poland St. Pierre and Miquelon Portugal Puerto Rico Qatar Reunion Romania Serbia Russia Saudi Arabia Sweden Singapore Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...
Page 381 Thailand Tajikistan Tunisia Turkey Trinidad & Tobago Taiwan Tanzania Ukraine US(Minor Outlying Islands) United States Uruguay Uzbekistan Holy See (Vatican City) Venezuela Virgin Islands(British) US Virgin Isle Vietnam Yemen Mayotte South Africa Zambia Avaya WLAN 8100 CLI Reference August 2013...
Page 382 Supported Country Codes Avaya WLAN 8100 CLI Reference August 2013 Comments? infodev@avaya.com...

Avaya WLAN 8100 Series Reference

Table of Contents

Chapter 1: Introduction

Chapter 2: New in this Release

Chapter 3: Overview of WLAN Deployment Solutions

Chapter 4: ACLI Reference for Wireless LAN (WLAN) 8100

Configuring and Managing Captive Portals

Chapter 5: ACLI Reference for Wired Networks

No Mac-Security Auto-Learning Aging-Time Command

Section 4

Section 5

Quick Links

Chapters

Related Manuals for Avaya WLAN 8100 Series

Summary of Contents for Avaya WLAN 8100 Series

Table of Contents