Brocade Communications Systems RFS4000 Cli Reference Manual page 692

20
Wireless configuration commands
kdc
[password|realm|server]
mobility enable
client-client-disallow
nac-mode
[bypass-nac-except-include-l
ist|
do-nac-except-exclude-list|n
one]
690
Modifies KDC related parameters.
•
password [0 <secret>|2 <secret>|<secret>] – Create a KDC
server password (up to 127 characters)
•
0 <secret>– Password is specified unencrypted.
•
2 <secret>– Password is encrypted with a
password-encryption secret.
•
<secret> – Defines a KDC server password (up to 127
characters).
•
realm <realm> – Defines a KDC realm (up to 127
characters).
•
<realm> – Defines KDC realm (up to 127 characters)
•
server [primary|secondary|timeout] – Modifies KDC server
parameters.
•
primary <IP> {auth-port <port>} – Defines the primary
KDC server.
•
secondary <IP> {auth-port <port>}– Defines the
secondary KDC server.
•
<IP> – Sets the KDC server IP address
•
auth-port <port> – Optional. Sets the KDC server
authentication port to a value in the range 1 to
65535. Default is 88.
•
timeout <1-60> – Modifies KDC server parameters.
•
<1-60> – Defines the time the controller waits for
a response from the KDC Server before retrying.
Enables L3 Mobility on WLAN(s).
Disallows frames from one wireless client to another wireless
client on this WLAN.
Sets the Network Access Control (NAC) mode configuration
•
bypass-nac-except-include-list – No Client NAC check is done
except for those in include list. Devices in the include list
have NAC checks.
•
do-nac-except-exclude-list – A Client NAC check is done
except for those in the exclude list. Devices in the exclude list
will not have any NAC checks.
•
none – NAC disabled, no NAC is done. An Client can only get
authenticated by a Radius server.
Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide
53-1001931-01