Table of Contents

Advertisement

Quick Links

Wi² AP CLI
Reference Guide
SW Version 5.2
June 2008
P/N 215031

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Wi² AP CLI and is the answer not in the manual?

Questions and answers

Summary of Contents for Alvarion Wi² AP CLI

  • Page 1 Wi² AP CLI Reference Guide SW Version 5.2 June 2008 P/N 215031...
  • Page 3 © Copyright 2008 Alvarion Ltd. All rights reserved. The material contained herein is proprietary, privileged, and confidential and owned by Alvarion or its third party licensors. No disclosure thereof shall be made to third parties without the express written permission of Alvarion Ltd.
  • Page 4 BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING OR OTHER HAZARD. Disclaimer (a) The Software is sold on an "AS IS" basis. Alvarion, its affiliates or its licensors MAKE NO WARRANTIES, WHATSOEVER, WHETHER EXPRESS OR IMPLIED, WITH RESPECT TO THE SOFTWARE AND THE ACCOMPANYING DOCUMENTATION.
  • Page 5: Limitation Of Liability

    MAINTENANCE OR USE OF ITS PRODUCTS. Limitation of Liability (a) ALVARION SHALL NOT BE LIABLE TO THE PURCHASER OR TO ANY THIRD PARTY, FOR ANY LOSS OF PROFITS, LOSS OF USE, INTERRUPTION OF BUSINESS OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE OR...
  • Page 6: Important Notice

    Alvarion Ltd. reserves the right to alter the equipment specifications and descriptions in this publication without prior notice. No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty.
  • Page 7: About This Guide

    About This Guide This guide describes the Wi² AP CLI. This guide comprises the following parts: Chapter 1 - “Introduction” on page 1 Chapter 2 - “CLI Commands” on page 11...
  • Page 9: Table Of Contents

    Contents Chapter 1 - Introduction 1.1 About this guide ......................2 1.1.1 Products covered ....................2 1.1.2 Important terms ....................2 1.1.3 Typographical conventions .................. 2 1.2 CLI support in autonomous and controlled modes ........... 4 1.2.1 Controlled mode....................4 1.2.2 Autonomous mode ....................
  • Page 10 Contents arp ............................. 18 end ............................. 18 quit ............................. 18 rcapture ............................. 18 show arp ............................ 18 show bridge ..........................18 show bridge forwarding ......................18 show dns cache ......................... 19 show interfaces .......................... 19 show ip route ..........................19 show system info ........................
  • Page 11 Contents web admin kickout ........................26 web allow ........................... 26 world-mode dot11 country code ....................26 web access port-1 ........................27 web access port-2 ........................27 web access wireless ........................27 web access interface vlan ......................27 web access interface gre ......................27 web access local mesh ......................
  • Page 12 Contents soap-server ssl .......................... 36 soap-server ssl with client certificate ..................36 soap-server access interface gre ....................37 soap-server access wireless ..................... 37 soap-server access local mesh ....................37 snmp-server trap low-snr ......................37 snmp-server trap low-snr interval ....................37 snmp-server trap low-snr level ....................
  • Page 13 Contents discovery protocol device-id ...................... 47 bridge priority ..........................47 bridge protocol ieee ........................48 bridge protocol ieee vlan ......................48 ip route gateway ........................48 dot1x reauth ..........................48 dot1x reauth period ........................49 dot1x reauth terminate ....................... 49 dot1x supplicant timeout ......................
  • Page 14 Contents radio active ..........................59 rts threshold ..........................59 distance ............................. 60 dot11 ............................60 transmit power ........................... 60 antenna bidirectionnal ....................... 61 autochannel skip ........................61 beacon interval .......................... 61 dot11 automatic frequency ......................61 dot11 automatic frequency period ..................... 62 dot11 automatic frequency time ....................
  • Page 15 Contents dot1x mandatory authentication ....................72 add ip filter ..........................72 delete ip filter ..........................72 delete ip filter all ......................... 73 ip filters ............................73 active ............................73 beacon dtim count ........................73 public forwarding ........................73 fast authentication ........................74 layer3 mobility ..........................
  • Page 16 Contents snr cost per hop ......................... 83 2.11RADIUS Context......................84 end ............................. 84 radius-server accounting port ....................84 radius-server alternate hosts ..................... 84 radius-server authentication method ..................84 radius-server authentication port ....................85 radius-server deadtime ......................85 radius-server host ........................85 radius-server key 2 ........................
  • Page 17 Chapter 1 - Introduction In This Chapter: “About this guide” on page 2 “CLI support in autonomous and controlled modes” on page 4 “Configuring CLI support” on page 5 “SSH client support” on page 7 “Entering strings” on page 8 “Context Hierarchy”...
  • Page 18: Chapter 1 - Introduction

    Chapter 1 - Introduction About this guide This guide explains how to work with the Command Line Interface (CLI) on Alvarion MultiService Access Points points operating in autonomous mode. 1.1.1 Products covered This guide covers these access points: 1.1.2 Important terms The following terms are used in this guide.
  • Page 19: Management Tool

    About this guide Example Description A single item enclosed in angle brackets and all formatted in ip-qos profile <name> italic indicates a user-supplied item. Specify the item. Do not include the angle brackets. In this example, a valid QoS profile name is required.
  • Page 20: Cli Support In Autonomous And Controlled Modes

    Chapter 1 - Introduction CLI support in autonomous and controlled modes An AP operates in either controlled mode or autonomous mode. 1.2.1 Controlled mode Controlled mode is the factory default mode for all APs. When in controlled mode, an AP establishes a control channel with a Wi2 Controller series service controller.
  • Page 21: Configuring Cli Support

    Configuring CLI support Configuring CLI support Using the AP’s management tool, open the page Management > CLI. Use this page to enable/disable CLI support via an SSH or serial connection. A maximum of three concurrent CLI sessions are supported regardless of the connection type. Figure 1-1: Command Line Interface (CLI) Configuration The CLI supports SSH on the standard TCP port (22).
  • Page 22 Chapter 1 - Introduction Figure 1-2: Management Tool Configuration SSH connections to the CLI can be made on any active interface. Support for each interface must be explicitly enabled under Security. The login credentials for SSH connections are the same as those defined under Administrator authentication.
  • Page 23: Ssh Client Support

    SSH client support SSH client support The following SSH clients have been tested with the CLI. Others may work as well: OpenSSH Tectia SecureCRT Putty Wi² AP CLI Reference Guide...
  • Page 24: Entering Strings

    Chapter 1 - Introduction Entering strings When entering a value that contains spaces, you must enclose it in quotation marks. For example, if the command syntax is: ssid <name> you must specify one of the following: ssid ANameWithNoSpaces ssid “A name with spaces” Wi²...
  • Page 25: Context Hierarchy

    Context Hierarchy Context Hierarchy CLI commands are grouped into functional contexts. The following table shows the context hierarchy and the command used to switch from the parent context. Context hierarchy Command to switch from parent context View context (This is the first context.) Enable context enable Config context...
  • Page 27: Chapter 2 - Cli Commands

    Chapter 2 - CLI Commands...
  • Page 28: View Context

    Chapter 2 - CLI Commands View Context Context path: View This is the root of the command tree. arping Supported on: Wi² AP arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. curl Supported on: Wi²...
  • Page 29 View Context Specifies the SSL ciphers to use. SSL only. --ciphers <list> Specifies to request a compressed response (using --compressed deflate). Specifies to request a compressed response (using --compressed deflate). Specifies the maximum time allowed for connection. --connect-timeout <sec> Specifies to create the necessary local directory --create-dirs hierarchy.
  • Page 30: Enable

    Chapter 2 - CLI Commands When used as the first parameter disables .curlrc Specifies to send QUOTE command to FTP before file -Q <cmd> transfer. FTP only. Specifies to retrieve a byte range from a HTTP/1.1 or -r <range> FTP server. Sets the remote file's time on the local output.
  • Page 31: Nslookup

    View Context nslookup Supported on: Wi² AP nslookup [ -option authentication ] [ <host-to-find> | - [< server> Queries DNS servers for information on hosts or domains. ping Supported on: Wi² AP ping <host> [-c <count>] [-s <length>] [-q] Determines if the specified remote IP address is active. Parameters The IP address or DNS name of the host to ping.
  • Page 32: Traceroute

    Chapter 2 - CLI Commands Press “q” to exit “top”. traceroute Supported on: Wi² AP traceroute [-n] [-r] [-v] [-m <max_ttl>] [-p <port#>] [-q <nqueries>] [-s <src_addr>] [-t <tos>] [-w <wait>] <host> [<data size>] Show the hosts that are traversed to reach the specified IP address. Wi²...
  • Page 33: Enable Context

    Enable Context Enable Context Context path: View > Enable This context provides access to various utilities. reboot device Supported on: Wi² AP reboot device Restarts the system. show certificate Supported on: Wi² AP show certificate Display current certificates. show certificate binding Supported on: Wi²...
  • Page 34: Quit

    Chapter 2 - CLI Commands Supported on: Wi² AP arp [-evn] [-H <type>] [-i if] ?- [<hostname>] arp [-v] [-i if] -d <hostname> [pub] arp [-v] [-H <type>] [-i if] -s <hostname> <hw_addr> [temp] arp [-v] [-H <type>] [-i if] -s <hostname> <hw_addr>...
  • Page 35: Show Dns Cache

    Enable Context show dns cache Supported on: Wi² AP show dns cache [<serial>] Show DNS cache entries. Specify a serial number to display detailed information. show interfaces Supported on: Wi² AP show interfaces Show networking interfaces. show ip route Supported on: Wi² AP show ip route Show all IP routes.
  • Page 36: Show Dot11 Statistics Client-Traffic

    Chapter 2 - CLI Commands show dot11 statistics client-traffic Supported on: Wi² AP show dot11 statistics client-traffic Show current client matrix statistics. show local mesh Supported on: Wi² AP show local mesh Show current local mesh interfaces. show wireless neighborhood Supported on: Wi²...
  • Page 37: Config Context

    Config Context Config Context Context path: View > Enable > Config This is the root context for all configuration commands. certificate Supported on: Wi² AP certificate (authority | local) <uri> <certname> [<password>] Add a new certificate to the store, using the friendly name. certificate binding Supported on: Wi²...
  • Page 38: Reboot Device

    Chapter 2 - CLI Commands reboot device Supported on: Wi² AP reboot device Restarts the system. show certificate Supported on: Wi² AP show certificate Display current certificates. show certificate binding Supported on: Wi² AP show certificate binding Display how the certificates are used. show config Supported on: Wi²...
  • Page 39: Local Mesh Profile

    Config Context local mesh profile Supported on: Wi² AP local mesh profile <name> Switches to the specified local mesh link context. Parameters Number of the local mesh link to configure. <name> interface gre Supported on: Wi² AP interface gre <name> Switches to the specified GRE interface or creates a new GRE interface with the specified name.
  • Page 40: Clock Summer-Time

    Chapter 2 - CLI Commands no admin authentication radius Sets the authentication of administrator logins to occur using the specified RADIUS profile. Parameters RADIUS profile name. <name> clock summer-time Supported on: Wi² AP clock summer-time Enables support for daylight savings time. no clock summer-time Disables support for daylight savings time.
  • Page 41: Ntp Protocol

    Config Context ntp protocol Supported on: Wi² AP ntp protocol (ntp | sntp) Sets the network time protocol to use. ntp server Supported on: Wi² AP ntp server Enable this option to have the Wi² AP periodically contact a network time server to update its internal clock.
  • Page 42: Snmp-Server Trap Web-Login

    Chapter 2 - CLI Commands snmp-server trap web-login Supported on: Wi² AP snmp-server trap web-login Send a trap each time an administrator login is accepted. no snmp-server trap web-login Do not send a trap each time an administrator login is accepted. snmp-server trap web-logout Supported on: Wi²...
  • Page 43: Web Access Port-1

    Config Context Parameters An ISO3166 three-letter country code. <code> web access port-1 Supported on: Wi² AP web access port-1 Enables access to the management tool via Port-2. no web access port-1 Blocks access to the management tool via Port-2. web access port-2 Supported on: Wi²...
  • Page 44: Web Access Local Mesh

    Chapter 2 - CLI Commands web access local mesh Supported on: Wi² AP web access local mesh <name> Enables access to the management tool via the specified local mesh. no web access local mesh <name> Disables access to the management tool via the specified local mesh. clock Supported on: Wi²...
  • Page 45: Config-Update Operation

    Config Context The Wi² AP can automatically download the configuration file from a local or remote URL (restore). It is also possible to upload the current configuration to a given URL (backup). Theses operations can be done at preset times. config-update operation Supported on: Wi²...
  • Page 46: Snmp-Server Trap Config-Update

    Chapter 2 - CLI Commands snmp-server trap config-update Supported on: Wi² AP snmp-server trap config-update Send a trap whenever the firmware is updated. no snmp-server trap config-update Do not send this trap. logging destination Supported on: Wi² AP logging destination <name> Creates a new remote destination for syslog.
  • Page 47: Snmp-Server Allow

    Config Context snmp-server allow Supported on: Wi² AP snmp-server allow <ip address>/<mask> Adds a host to the list of IP address from which access to the SNMP interface is permitted. no snmp-server allow <ip address>/<mask> Removes a host from the list of IP address from which access to the SNMP interface is permitted.
  • Page 48: Snmp-Server Location

    Chapter 2 - CLI Commands snmp-server location Supported on: Wi² AP snmp-server location <name> Specifies the location where the Wi² AP is installed. no snmp-server location Deletes location information. Parameters Location where the Wi² AP is installed. <name> snmp-server port Supported on: Wi²...
  • Page 49: Snmp-Server Trap Community

    Config Context snmp-server trap community Supported on: Wi² AP snmp-server trap community <str> Sets the password required by the remote host that will receive the trap. no snmp-server trap community Deletes the password required by the remote host that will receive the trap. snmp-server trap destination Supported on: Wi²...
  • Page 50: Snmp-Server Version

    Chapter 2 - CLI Commands snmp-server version Supported on: Wi² AP snmp-server version (1 | 2c) Sets the SNMP version. snmp-server access interface vlan Supported on: Wi² AP snmp-server access interface vlan <name> Enables access to SNMP via the specified VLAN. no snmp-server access interface vlan <name>...
  • Page 51: Soap-Server

    Config Context no snmp-server access port-2 Blocks SNMP access on the upstream port. soap-server Supported on: Wi² AP soap-server Enables the SOAP server. no soap-server Disables the SOAP server. soap-server access interface vlan Supported on: Wi² AP soap-server access interface vlan <name> Enables access to SOAP via this VLAN.
  • Page 52: Soap-Server Http Authentication

    Chapter 2 - CLI Commands Parameters IP address. <address> Subnet mask in CIDR format. Specifies the number of </mask> bits in the mask. soap-server http authentication Supported on: Wi² AP soap-server http authentication Enable the SOAP server HTTP authentication. no soap-server http authentication Disable the SOAP server HTTP authentication.
  • Page 53: Soap-Server Access Interface Gre

    Config Context no soap-server ssl with client certificate Disable the use of client certificate with SSL for SOAP server. soap-server access interface gre Supported on: Wi² AP soap-server access interface gre <name> Enables access to SOAP via the specified GRE tunnel. no soap-server access interface gre <name>...
  • Page 54: Snmp-Server Trap Low-Snr Level

    Chapter 2 - CLI Commands snmp-server trap low-snr level Supported on: Wi² AP snmp-server trap low-snr level <number> Sets the SNR level that will trigger a trap. snmp-server trap new-association Supported on: Wi² AP snmp-server trap new-association Send trap on when a new wireless client station associates with any VAP (VSC).
  • Page 55: Snmp-Server Trap Wireless-Authentication-Fail

    Config Context snmp-server trap wireless-authentication-fail Supported on: Wi² AP snmp-server trap wireless-authentication-fail Send a trap when a wireless client station fails to authenticate. no snmp-server trap wireless-authentication-fail Do not send this trap. snmp-server trap wireless-authentication-success Supported on: Wi² AP snmp-server trap wireless-authentication-success Send a trap when a wireless client station is successfully associated.
  • Page 56: Snmp-Server Trap Wireless-Disassociation-Success

    Chapter 2 - CLI Commands snmp-server trap wireless-disassociation-success Supported on: Wi² AP snmp-server trap wireless-disassociation-success Send a trap when a wireless client station disassociates from the Wi² AP. no snmp-server trap wireless-disassociation-success Do not send this trap. snmp-server trap wireless-reassociation-fail Supported on: Wi²...
  • Page 57: Snmp-Server Trap Network-Trace

    Config Context snmp-server trap network-trace Supported on: Wi² AP snmp-server trap network-trace Send a trap when a network trace is started or stopped. no snmp-server trap network-trace Do not send this trap. firmware-update automatic Supported on: Wi² AP firmware-update automatic Enables scheduled firmware upgrades.
  • Page 58: Firmware-Update Uri

    Chapter 2 - CLI Commands firmware-update uri Supported on: Wi² AP firmware-update uri <uri> Sets the URI where the Wi² AP will retrieve new firmware. no firmware-update uri Clears the firmware URI. firmware-update weekday Supported on: Wi² AP firmware-update weekday (everyday | monday | tuesday | wednesday | thursday | friday | saturday | sunday) Sets the day when the scheduled firmware upgrade will take place.
  • Page 59: Service-Sensor

    Config Context service-sensor Supported on: Wi² AP service-sensor (gateway | address<ip address>) Sets the target device the service sensor will poll. This can be the default gateway or a specific IP address. no service-sensor Disables the service sensor. Parameters The service sensor will poll the default gateway. gateway The service sensor will poll another device.
  • Page 60: Ip Name-Server

    Chapter 2 - CLI Commands ip name-server Supported on: Wi² AP ip name-server <primary> [<secondary>] Sets the primary and secondary DNS servers overriding dynamically assigned ones. Parameters IP address of the primary DNS server. <primary> IP address of the secondary DNS server. <secondary>...
  • Page 61: Ip Name-Server Switch-Over

    Config Context ip name-server switch-over Supported on: Wi² AP ip name-server switch-over Switch over to primary when active. no ip name-server switch-over Do not switch over to primary when active. snmp-server trap unauthorized-ap Supported on: Wi² AP snmp-server trap unauthorized-ap Send a trap when a rogue access point is detected.
  • Page 62: Access Controller Shared Secret

    Sets the shared secret used to communicate with the access controller. The service controller will only accept authentication/location-aware information from Alvarion satellites that have a matching shared secret to its own. radius-server profile Supported on: Wi² AP radius-server profile <name>...
  • Page 63: Dot11 Igmp Snooping-Helper

    Disable IGMP snooping helpers. discovery protocol Supported on: Wi² AP discovery protocol Enables broadcast of Alvarion device information for interoperability with CDP-enabled networking hardware. no discovery protocol Disable broadcast of Alvarion device information. discovery protocol device-id Supported on: Wi²...
  • Page 64: Bridge Protocol Ieee

    Chapter 2 - CLI Commands bridge protocol ieee Supported on: Wi² AP bridge protocol ieee Enable the bridge spanning tree protocol to prevent undesirable loops from occurring in the network that may result in decreased throughput. no bridge protocol ieee Disable the bridge spanning tree protocol.
  • Page 65: Dot1X Reauth Period

    Config Context dot1x reauth period Supported on: Wi² AP dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802.1X reauthentication interval. Client stations must reauthenticate when this interval expires. dot1x reauth terminate Supported on: Wi²...
  • Page 66: Add Wireless Ip-Qos Profile

    Chapter 2 - CLI Commands add wireless ip-qos profile Supported on: Wi² AP add wireless ip-qos profile <name> Adds the specified profile to the list of IP QoS profiles in effect for the wireless links. Name of an existing IP QoS profile. <profile-name>...
  • Page 67: Sensor Network Detector

    Specify the Server ID of the RF Manager Server to connect to. Set the Server ID to 0 to have the Wi² AP send a discovery request to all active Alvarion InCharge RF Manager Servers. The Wi² AP will connect to the first server that responds to the discovery request.
  • Page 68: Port-2 Interface Context

    Chapter 2 - CLI Commands Port-2 Interface Context Context path: View > Enable > Config > Port-2 interface This context provides commands for configuring Port-2. duplex Supported on: Wi² AP duplex (auto | half | full) Sets the duplex mode on Port-2. Parameters Lets the Wi²...
  • Page 69: Vlan Compatibility Mode

    Port-2 Interface Context vlan compatibility mode Supported on: Wi² AP vlan compatibility mode When this option is enabled, the sends all management traffic AND all Wi² AP untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode.
  • Page 70: Port-1 Interface Context

    Chapter 2 - CLI Commands Port-1 Interface Context Context path: View > Enable > Config > Port-1 interface This context provides commands for configuring Port-1. duplex Supported on: Wi² AP duplex (auto | half | full) Sets the duplex mode on Port-1. Parameters Lets the Wi²...
  • Page 71: Vlan Compatibility Mode

    Port-1 Interface Context vlan compatibility mode Supported on: Wi² AP vlan compatibility mode When this option is enabled, the Wi² AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode.
  • Page 72: Wan Ip Interface Context

    Chapter 2 - CLI Commands WAN IP Interface Context Context path: View > Enable > Config > WAN IP interface This context provides commands for configuring various IP-networking related settings. pppoe client user Supported on: Wi² AP pppoe client user <username> <password> Sets the PPPoE username and password.
  • Page 73: Ip Address Dhcp Client-Id

    WAN IP Interface Context Subnet mask in CIDR format. Specifies the number of </mask> bits in the mask. ip address dhcp client-id Supported on: Wi² AP ip address dhcp client-id <id> Specifies an ID to identify the Wi² AP to a DHCP server. This parameter is not required by all ISPs.
  • Page 74: Pppoe Unnumbered

    Chapter 2 - CLI Commands Changes to this parameter should only be made according to the recommendations of your ISP. Incorrectly setting this parameter can reduce the throughput of your Internet connection. Parameters Maximum size (in bytes) of a PPPoE packet when <bytes>...
  • Page 75: Wireless Context

    Wireless Context Wireless Context Context path: View > Enable > Config > Wireless This context provides commands for configuring the wireless network. Supported on: Wi² AP Switches to parent context. radio active Supported on: Wi² AP radio active Enables the radio. no radio active Disables the radio.
  • Page 76: Distance

    Chapter 2 - CLI Commands distance Supported on: Wi² AP distance (small | medium | large) Sets the distance between access points. Use this parameter to adjust the receiver sensitivity of the Wi² AP. This parameter should only be changed if: •...
  • Page 77: Antenna Bidirectionnal

    Wireless Context Parameters Power is specified in steps of 1dBm. The maximum <db> setting is 18 dBm. Note: The actual transmit power used may less than the value specified. The Wi² AP determines the power to used based on the settings you made for regulatory domain, wireless mode, and operating frequency.
  • Page 78: Dot11 Automatic Frequency Period

    Chapter 2 - CLI Commands no dot11 automatic frequency Disable automatic frequency selection. dot11 automatic frequency period Supported on: Wi² AP dot11 automatic frequency period (disabled | 1h | 2h | 4h | 8h | 12h | 24h) Specify how often the frequency setting is re-evaluted when automatic frequency selection is enabled.
  • Page 79: Station Distance

    Wireless Context station distance Supported on: Wi² AP station distance (0km | 5km | 10km | 15km | 20km | 25km | 30km | 35km) Fine tunes internal timeout settings to account for the distance that wireless links span. For normal operation, the CNx is optimized for links of less than 1 km.
  • Page 80: Virtual Ap Context

    Context path: View > Enable > Config > Virtual AP This context provides commands for configuring Virtual AP profiles (VAP (VSC)s). By default one profile exists with the name "Alvarion Networks". This is the default profile and cannot be deleted.
  • Page 81: Max-Association

    Virtual AP Context max-association Supported on: Wi² AP max-association <stations> Sets the maximum number of clients stations that can associate with this VAP (VSC). Number of client stations. Range: 1 - 255. <stations> ssid name Supported on: Wi² AP ssid name <name> Specifies the WLAN name (SSID) for the profile.
  • Page 82: Encryption Key Format

    Chapter 2 - CLI Commands Key value. The number of characters you specify for a <value> key determines the level of encryption the Wi² AP will provide. For 40-bit encryption, specify 5 ASCII characters or 10 HEX digits. For 128-bit encryption, specify 13 ASCII characters or 26 HEX digits.
  • Page 83: Authentication Server Accounting Radius Profile

    Virtual AP Context authentication server accounting radius profile Supported on: Wi² AP authentication server accounting radius profile <name> Sets RADIUS accounting to use the specified RADIUS profile. no authentication server accounting radius profile Removes accounting support for 802.1x. authentication server radius Supported on: Wi²...
  • Page 84: Wireless Filters

    Supported on: Wi² AP wireless filters Enables the wireless security filters which only allow traffic to flow between the Wi² AP and a specific upstream device (such as a Alvarion service controller). no wireless filters Do not limit traffic flow between the Wi² AP and an upstream device.
  • Page 85: Wireless Filters Type

    Wi² AP to exchange traffic with a specific upstream device. If the Wi² AP is configured to use the services of a Alvarion access controller, then the default security filters are automatically enabled and all traffic is sent to the access controller.
  • Page 86: Mac-Filters Local

    TTPS traffic not addressed to the CNx (or upstream device) is also blocked, which means wireless client stations cannot access the management tool on other Alvarion products. Default filters for outgoing wireless traffic Applies to traffic sent from the CNx to wireless client stations.
  • Page 87: Mac-Filters Mode

    Virtual AP Context mac-filters mode Supported on: Wi² AP mac-filters mode (allow | block) Either allow or block access to the wireless network for client stations whose addresses appear in the MAC filter list. mac authentication accounting Supported on: Wi² AP mac authentication accounting Enables RADIUS accounting for this VAP (VSC).
  • Page 88: Mac Authentication Radius Stationid Delimiter

    Chapter 2 - CLI Commands mac authentication radius stationid delimiter Supported on: Wi² AP mac authentication radius stationid delimiter (null | colon | dash | dot | space | comma | under) Specifies the one-character delimiter that will be used to format both the calling station ID and the called station ID attributes in RADIUS packets.
  • Page 89: Delete Ip Filter All

    Virtual AP Context Subnet mask in CIDR format. Specifies the number of </mask> bits in the mask. delete ip filter all Supported on: Wi² AP delete ip filter all Deletes all addresses from the IP filter list. ip filters Supported on: Wi² AP ip filters Activates the IP filter which enables you to block wireless-to-wired LAN traffic on this profile based on its destination address.
  • Page 90: Fast Authentication

    Chapter 2 - CLI Commands fast authentication Supported on: Wi² AP fast authentication Enables WPA2 opportunistic key caching. no fast authentication Disables WPA2 opportunistic key caching. layer3 mobility Supported on: Wi² AP layer3 mobility Enables Layer 3 mobility. no layer3 mobility Disables Layer 3 mobility.
  • Page 91: Add Ip-Qos Profile

    Virtual AP Context add ip-qos profile Supported on: Wi² AP add ip-qos profile <name> Adds the specified profile to the list of IP QoS profiles in effect for this VAP (VSC). Name of an existing IP QoS profile. <profile-name> delete ip-qos profile all Supported on: Wi²...
  • Page 92: Upstream Diffserv Tagging

    Chapter 2 - CLI Commands Traffic from 802.1p client stations is classified based 802.1p on the VLAN priority field present within the VLAN header. When this mechanism is selected, the Wi² AP will advertise WME capabilities, enabling WME clients to associate and take advantage of them. This setting has no effect on legacy clients.
  • Page 93: Location-Aware Group

    Virtual AP Context location-aware group Supported on: Wi² AP location-aware group <name> Sets the specified group name for the access point. no location-aware group Deletes the specified group name for the access point. Supported on: Wi² AP Switches to parent context. security Supported on: Wi²...
  • Page 94: Vlan Interface Context

    Chapter 2 - CLI Commands VLAN interface Context Context path: View > Enable > Config > Port-2 interface > VLAN interface View > Enable > Config > Port-1 interface > VLAN interface View > Enable > Config > Local mesh > VLAN interface This context provides commands for configuring Virtual LANs (VLANs).
  • Page 95: Vlan Name

    VLAN interface Context This option enables you to manually assign an IP static address to the Wi² AP. This VLAN does not have an IP address. none vlan name Supported on: Wi² AP vlan name <name> Change the name of this VLAN interface. Wi²...
  • Page 96: Local Mesh Context

    Chapter 2 - CLI Commands 2.10 Local Mesh Context Context path: View > Enable > Config > Local mesh This context provides commands for configuring local meshes. Supported on: Wi² AP Switches to parent context. active Supported on: Wi² AP active Activates the local mesh.
  • Page 97: Security

    Local Mesh Context security Supported on: Wi² AP security Enables wireless security. no security Disables wireless security. security mode Supported on: Wi² AP security mode (wep | tkip | ccmp) Set the security mode. security psk Supported on: Wi² AP security psk <secret>...
  • Page 98: Accept Forced Links

    Chapter 2 - CLI Commands Parameters VLAN ID. Range: 1 - 4094. <id> accept forced links Supported on: Wi² AP accept forced links May accept master orders for selection. no accept forced links ignore master orders for selection. allowed downtime Supported on: Wi²...
  • Page 99: Minimum Snr

    Local Mesh Context minimum snr Supported on: Wi² AP minimum snr <number> Slave: Set the group’s minimum SNR. preserve master link Supported on: Wi² AP preserve master link Preserve master link across reboots. no preserve master link Do not preserve master link across reboots. promiscuous mode Supported on: Wi²...
  • Page 100: Radius Context

    Chapter 2 - CLI Commands 2.11 RADIUS Context Context path: View > Enable > Config > RADIUS This context provides commands for configuring RADIUS profiles. Supported on: Wi² AP Switches to parent context. radius-server accounting port Supported on: Wi² AP radius-server accounting port <number>...
  • Page 101: Radius-Server Authentication Port

    RADIUS Context radius-server authentication port Supported on: Wi² AP radius-server authentication port <number> Specifies the port to use for RADIUS authentication. By default, RADIUS servers use port 1812. Parameters Authentication port number. Range: 1 - 65535 <number> radius-server deadtime Supported on: Wi² AP radius-server deadtime <seconds>...
  • Page 102: Radius-Server Name

    Chapter 2 - CLI Commands radius-server name Supported on: Wi² AP radius-server name <name> Changes the name of the RADIUS profile. radius-server nasid Supported on: Wi² AP radius-server nasid <id> Sets the network access server ID you want to use for the Wi² AP. By default, the serial number of the Wi²...
  • Page 103: Ip_Qos Context

    IP_QOS Context 2.12 IP_QOS Context Context path: View > Enable > Config > IP_QOS This context provides commands for configuring IP QoS profiles. Supported on: Wi² AP Returns to a previous context. end-port Supported on: Wi² AP end-port <number> Specifies the end port to use for this IP QoS profile. Parameters End port number.
  • Page 104: Start-Port

    Chapter 2 - CLI Commands start-port Supported on: Wi² AP start-port <number> Specifies the start port to use for this IP QoS profile. Parameters Start port number. Range: 0 - 65535 <number> Wi² AP CLI Reference Guide...
  • Page 105: Gre Interface Context

    GRE Interface Context 2.13 GRE Interface Context Context path: View > Enable > Config > GRE interface Details of the GRE interface. end force Supported on: Wi² AP end [force] Quits the GRE context. gre name Supported on: Wi² AP gre name <name>...
  • Page 106: Syslog Destination Context

    Chapter 2 - CLI Commands 2.14 Syslog Destination Context Context path: View > Enable > Config > Syslog destination This context provides commands for configuring Syslog destinations. active Supported on: Wi² AP active Enables logging to the current destination. no active Disables logging to the current destination.
  • Page 107: End

    Syslog Destination Context Supported on: Wi² AP Switches to parent context. level Supported on: Wi² AP level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. level Supported on: Wi² AP level (lower | higher) (debug | info | notice | warning | error | critical | alert | emergency) Defines the severity of messages that will be logged.
  • Page 108: Message

    Chapter 2 - CLI Commands no message Disables filtering of the log file message field. message Supported on: Wi² AP message (matches | notmatches) <regex> Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field. process Supported on: Wi²...

Table of Contents