Download Print this page

Motorola RFS Series Reference Manual

Wireless lan switches.
Hide thumbs
   
1
2
Table of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990

Advertisement

Motorola RFS Series Wireless
LAN Switches
WiNG CLI Reference Guide

Advertisement

   Related Manuals for Motorola RFS Series

   Summary of Contents for Motorola RFS Series

  • Page 1

    Motorola RFS Series Wireless LAN Switches WiNG CLI Reference Guide...

  • Page 2

    © 2010 Motorola, Inc. All rights reserved. MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Symbol is a registered trademark of Symbol Technologies, Inc. All other product or service names are the prop-...

  • Page 3: Table Of Contents

    Motorola Enterprise Mobility Support Center ........

  • Page 4: Table Of Contents

    TOC-2 Motorola RF Switch CLI Reference Guide 1.4.5 Command Output pagination ........... 1-13 1.4.6 Transposing Mistyped Characters .

  • Page 5: Table Of Contents

    Contents - TOC-3 2.1.32 smtp-notification ............2-86 2.1.33 snmp .

  • Page 6: Table Of Contents

    TOC-4 Motorola RF Switch CLI Reference Guide Chapter 3. User Exec Commands 3.1 User Exec Commands ............. . . 3-1 3.1.1 clear .

  • Page 7: Table Of Contents

    Contents - TOC-5 4.1.22 more ..............4-37 4.1.23 page .

  • Page 8: Table Of Contents

    TOC-6 Motorola RF Switch CLI Reference Guide 5.1.18 license..............5-69 5.1.19 line .

  • Page 9: Table Of Contents

    Contents - TOC-7 Chapter 6. Crypto-isakmp Instance 6.1 Crypto ISAKMP Config Commands ........... . . 6-1 6.1.1 authentication.

  • Page 10: Table Of Contents

    TOC-8 Motorola RF Switch CLI Reference Guide Chapter 9. Crypto-ipsec Instance 9.1 Crypto IPSec Config Commands ............9-1 9.1.1 end .

  • Page 11: Table Of Contents

    Contents - TOC-9 11.1.14 subject-name ............. . 11-19 Chapter 12.

  • Page 12: Table Of Contents

    TOC-10 Motorola RF Switch CLI Reference Guide 13.1.6 name ..............13-8 13.1.7 no .

  • Page 13: Table Of Contents

    Contents - TOC-11 15.1.8.1 Permitting IP Based Traffic ..........15-27 15.1.8.2 Permitting Telnet Based Traffic .

  • Page 14: Table Of Contents

    TOC-12 Motorola RF Switch CLI Reference Guide 17.1.6 mark ..............17-10 17.1.6.1 Example - Marking dot1p Priority Value for 802.1q Tagged Traffic .

  • Page 15: Table Of Contents

    Contents - TOC-13 18.1.22 option ..............18-29 18.1.23 service.

  • Page 16: Table Of Contents

    TOC-14 Motorola RF Switch CLI Reference Guide 19.1.11 ldap-server ..............19-29 19.1.12 nas .

  • Page 17: Table Of Contents

    Contents - TOC-15 20.1.23 dot11-shared-key-auth ............20-46 20.1.24 end .

  • Page 18: Table Of Contents

    TOC-16 Motorola RF Switch CLI Reference Guide 21.1.2 clear ..............21-3 21.1.3 clrscr .

  • Page 19: Table Of Contents

    Contents - TOC-17 23.1.7 reader ..............23-9 23.1.8 service.

  • Page 20: Table Of Contents

    TOC-18 Motorola RF Switch CLI Reference Guide 25.1.17 select-channels............. 25-23 25.1.18 service.

  • Page 21: Who Should Use This Guide

    About This Guide This Motorola RF Switch CLI Reference Guide and contains the following sections: • Who Should Use this Guide • How to Use this Guide • Conventions Used in this Guide • Motorola Enterprise Mobility Support Center •...

  • Page 22: How To Use This Guide

    Motorola RF Switch CLI Reference Guide The syntax, parameters and descriptions within this guide can also be used generically for a RFS7000, RFS6000 and RFS4000 model switch. However, some subtle differences do exist amongst these switches. These differences are strongly noted within the specific commands impacted.

  • Page 23

    Chapter Jump to this section if you want to... Chapter 10, “Crypto-map Summarizes the commands within the (crypto-map) Instance” switch CLI. Chapter 11, “Crypto- Summarizes the commands (crypto trustpoint) trustpoint Instance” within the switch CLI. Chapter 12, “Interface Summarizes the commands within the (config-if) Instance”...

  • Page 24

    Motorola RF Switch CLI Reference Guide Chapter Jump to this section if you want to... Chapter 24, “SOLE Instance” Summarizes the instance (config-rtls-sole) commands within the switch CLI Chapter 25, “Smart RF Summarizes the (config-wireless-smart-rf) Instance” instance commands within the switch CLI Chapter 26, “Role Instance”...

  • Page 25: Conventions Used In This Guide, Notational Conventions

    xxiii Conventions Used in this Guide This section describes the following topics: • Annotated Symbols • Notational Conventions Annotated Symbols The following document conventions are used in this document: NOTE: Indicates tips or special requirements. CAUTION: Indicates conditions that can cause equipment damage or data loss.

  • Page 26

    Motorola RF Switch CLI Reference Guide • action items • lists of alternatives • lists of required steps that are not necessarily sequential • Sequential lists (those describing step-by-step procedures) appear as numbered lists. Understanding Command Syntax command / keyword The first word is always a command. Keywords are words that must be entered as is.

  • Page 27

    The pipe symbol. This is used to separate the variables/keywords in a list. For example, the command RFSwitch> show ..is documented as show [autoinstall|banner|ip|ldap|..] where: • set – The command • [autoinstall|banner|ip|ldap|..] – Indicates the different commands that can be combined with the show command. However, only one of the above list can be used at a time.

  • Page 28

    Motorola RF Switch CLI Reference Guide Any command/keyword/variable or a combination of them inside a ‘{‘ & ‘}’ pair is optional. All optional commands follow the same conventions as listed above. However they are displayed itali- cized. For example, the command RFSwitch>...

  • Page 29: General Information

    • Model number or product name • Software type and version number Motorola responds to calls by email, telephone or fax within the time limits set forth in support agreements. If you purchased your Enterprise Mobility business product from a Motorola business partner, contact that business partner for support.

  • Page 30

    Motorola RF Switch CLI Reference Guide Website: http://www.motorola.com...

  • Page 31

    OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO BIND THAT COMPANY, PERSON OR ENTITY. 1. LICENSE GRANT. Subject to the terms of this Agreement, Motorola, Inc. and/or its subsidiaries ("Licensor") hereby grants Licensee a limited, personal, non-sublicensable, non transferable, non-exclusive license to use the software that Licensee is about to download or install and the documentation that accompanies it (collectively, the "Software") for...

  • Page 32: Contents -

    Motorola RF Switch CLI Reference Guide 3. INTELLECTUAL PROPERTY; CONTENT. All title and intellectual property rights in and to the Software (including but not limited to any images, photographs, animations, video, audio, music, text and "applets" incorporated into the Software), and any copies you are permitted to make herein are owned by Licensor or its suppliers.

  • Page 33

    xxxi 6. DISCLAIMER OF WARRANTIES. To the maximum extent permitted by applicable law, Licensor and its suppliers provide the Software and any (if any) Support Services AS IS AND WITH ALL FAULTS, and hereby disclaim all warranties and conditions, either express, implied or statutory, including, but not limited to, any (if any) implied warranties or conditions of merchantability, of fitness for a particular purpose, of lack of viruses, of accuracy or completeness of responses, of results, and of lack of negligence or lack of...

  • Page 34

    "Restricted Rights" as provided for in FAR, 48 CFR 52.227-14 (JUNE 1987) or DFAR, 48 CFR 252.227- 7013 (OCT 1988), as applicable. The "Manufacturer" for purposes of these regulations is Motorola, Inc., One Symbol Plaza, Holtsville, NY 11742. 12. EXPORT RESTRICTIONS. Licensee shall comply with all export laws and restrictions and regulations of the Department of Commerce, the United States Department of Treasury Office of Foreign Assets Control ("OFAC"), or other United States or foreign agency or...

  • Page 35

    xxxiii waiver. This Agreement shall be governed by the laws of the State of New York without regard to the conflicts of law provisions thereof. The application the United Nations Convention of Contracts for the International Sale of Goods is expressly excluded. Unless waived by Licensor for a particular instance, any action or proceeding arising out of this Agreement must be brought exclusively in the state or federal courts of New York and Licensee hereby consents to the jurisdiction of such courts for any such action or proceeding.

  • Page 36

    Motorola RF Switch CLI Reference Guide...

  • Page 37

    Introduction This chapter describes the commands defined by the switch Command Line Interface (CLI). Access the CLI (on the supported RFS6000, RFS4000, and RFS7000 models) by running a terminal emulation program on a computer connected to the serial port on the front of the switch, or by using a Telnet session via secure shell (SSH) to access the switch over the network.

  • Page 38: Cli Overview

    Motorola RF Switch CLI Reference Guide 1.1 CLI Overview The CLI is used for configuring, monitoring, and maintaining the switch managed network. The user interface allows you to execute commands (on the supported RFS6000, RFS4000, and RFS7000 models) using either a serial console or a remote access method.

  • Page 39: Cli Modes

    Introduction 1- 1.1.2 CLI Modes The CLI is segregated into different command modes. Each mode has its own set of commands for configuration, maintenance and monitoring. The commands available at any given time depend on the mode you are in, and to a lesser extent, the particular RFS6000 or RFS7000 model used.

  • Page 40

    Motorola RF Switch CLI Reference Guide You can also access sub-modes from the global configuration mode. Configuration sub- modes define specific features within the context of a configuration mode. Table 1.1 summarizes the commands available from the switch. Table 1.1 RF Switch CLI Hierarchy...

  • Page 41

    Introduction 1- Table 1.1 RF Switch CLI Hierarchy User Exec Mode Priv Exec Mode Global Configuration Mode halt line help local kill logging logout mkdir mac-address-table more mac-name management page ping prompt quit radius-server reload redundancy rename rtls rmdir service service show show...

  • Page 42

    Motorola RF Switch CLI Reference Guide Table 1.1 RF Switch CLI Hierarchy User Exec Mode Priv Exec Mode Global Configuration Mode write format wireless wireless-acl firewall network-element-id ratelimit role virtual-ip wwan To return from the Global Config mode to the Privilege Exec mode use:...

  • Page 43: Getting Context Sensitive Help

    Introduction 1- 1.2 Getting Context Sensitive Help Enter a question mark (?) at the system prompt to display a list of commands available for each mode. Obtain a list of arguments and keywords for any command using the CLI context-sensitive help. Use the following commands to obtain help specific to a command mode, command name, keyword or argument: Command...

  • Page 44

    Motorola RF Switch CLI Reference Guide When using context-sensitive help, the space (or lack of a space) before the question mark (?) is significant. To obtain a list of commands that begin with a particular sequence, enter the characters followed by a question mark (?). Do not include a space. This form of help is called word help, because it completes a word.

  • Page 45: Using The No And Default Command Forms

    Introduction 1- 1.3 Using the No and Default Command Forms Almost every command has a form. Use no to disable a feature or function. Use the command without the keyword to re-enable a disabled feature or enable a feature disabled by default. 1.3.1 Basic Conventions Keep the following conventions in mind while working within the CLI: •...

  • Page 46: Using Cli Editing Features And Shortcuts

    1-10 Motorola RF Switch CLI Reference Guide 1.4 Using CLI Editing Features and Shortcuts A variety of shortcuts and edit features are available. The following describe these features: • Moving the Cursor on the Command Line • Completing a Partial Command Name •...

  • Page 47: Completing A Partial Command Name

    Introduction 1- Function Keystrokes Summary Function Details Esc, B Back word Moves the cursor back one word Esc, F Forward word Moves the cursor forward one word Ctrl-A Beginning of line Moves the cursor to the beginning of the line Ctrl-E End of line Moves the cursor to the end of the...

  • Page 48: Deleting Entries

    1-12 Motorola RF Switch CLI Reference Guide The CLI recognizes a command once you have entered enough characters to make the command unique. If you enter “conf” within the privileged EXEC mode, the CLI associates the entry with the configure command, since only the configure command begins with...

  • Page 49: Re-displaying The Current Command Line

    Introduction 1- 1.4.4 Re-displaying the Current Command Line If entering a command and the system suddenly sends a message, you can recall the current command entry. To re-display the current command line (refresh the screen), use the following key combination: Keystrokes Purpose Ctrl-L...

  • Page 50

    1-14 Motorola RF Switch CLI Reference Guide...

  • Page 51: Common Commands

    Common Commands This chapter describes the CLI commands used in the USER EXEC, PRIV EXEC, and GLOBAL CONFIG modes. The PRIV EXEC command set contains those commands available within the USER EXEC mode. Some commands can be entered in either mode. Commands entered in either USER EXEC mode or PRIV EXEC mode are referred to as EXEC mode commands.

  • Page 52: Clrscr

    Motorola RF Switch CLI Reference Guide 2.1.1 clrscr  Common Commands Clears the screen and refreshes the prompt (#) Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clrscr Parameters None Example RFSwitch#clrscr RFSwitch#...

  • Page 53: Exit

    Common Commands 2.1.2 exit  Common Commands Ends the current mode and moves to the previous mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax exit Parameters None Example RFSwitch(config)#exit RFSwitch#...

  • Page 54: Help

    Motorola RF Switch CLI Reference Guide 2.1.3 help  Common Commands Use this command to access the advanced help feature. Use “?” anytime at the command prompt to access the help topic. Two kinds of help are provided: 1. Full help is available when ready to enter a command argument.

  • Page 55

    Common Commands 2.1.4 no  Common Commands Negates a command or sets its defaults Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax Parameters None Example (User Exec) RFSwitch>no ? cluster-cli Cluster context mobile-unit mobile-unit index page Toggle paging service Service Commands...

  • Page 56

    Motorola RF Switch CLI Reference Guide Address Resolution Protocol (ARP) access-list Configure access-lists autoinstall autoinstall configuration command banner Reset login banner to nothing bridge Bridge group commands country-code Clear the currently configured country code. All existing configurations will be erased...

  • Page 57: Service

    Common Commands 2.1.5 service  Common Commands Service commands are used to manage the switch configuration in all modes. Depending on the mode, different service commands will display. • RFS7000 • RFS6000 • RFS4000 Syntax (User Executable Mode) service [clear|diag|encrypt|kill|locator|save-cli|show| undefine|wireless] service [locator|save-cli|undefine] service clear [command-history|reboot-history|...

  • Page 58

    Motorola RF Switch CLI Reference Guide service show [cli|command-history|crash-info|diag|info| memory|process|reboot-history|rtls|startup-log| upgrade-history|watchdog] service show [cli|command-history|crash-info|info|memory| process|reboot-history|startup-log|upgrade-history| watchdog] service show diag [hardware|led-status|limits|period|stats| tech-support-period|tech-support-url|top] service show rtls [location-history|rfid] service show rtls location-history service show rtls rfid events reader {<1-48>} service undefine ecspec {<ECSpec-name>}...

  • Page 59

    Common Commands diag Diagnostics commands [enable|identify|limit| • enable – Enables in-service diagnostics period|poe • identify – Identifies a switch by flashing its LEDs tech-support-period| • limit [buffer|fan|filesys|inodes|load|maxFDs| tech-support-url] pkbuffers|procRAM|ram|routecache|temperature] – Sets the diagnostic limit command • buffer []<0-65535> – Configures the buffer usage warning limit.

  • Page 60

    2-10 Motorola RF Switch CLI Reference Guide • routecache <0-65535> – Configures IP route cache usage. Set a value between 0 and 65553. • temperature <1-6> [critical|high|low] – Sets the number of temperature sensors for the switch. • critical <0.0 - 250.0> – Critical temperature limit •...

  • Page 61

    Common Commands 2-11 locator Locates the switch by flashing all LEDs. save-cli Saves the CLI tree for all modes in HTML show [cli|command- Displays running system information history|crash-info|diag| • cli – Shows the CLI tree of the current mode info|memory|process| •...

  • Page 62

    2-12 Motorola RF Switch CLI Reference Guide • info – Shows a snapshot of available support information • memory – Shows memory statistics • watchdog – Shows watchdog status • process – Shows processes (sorted by memory usage) • reboot-history – Shows a reboot history •...

  • Page 63

    Common Commands 2-13 service diag [enable|identify|limit|period| tech-support-period|tech-support-url] service encrypt secret 2 <pass-phrase> <plain-text> service firewall disable service firewall ip igmp snooping robustness-variable <1-7> service kill conncection {<1-64>} service pktcap on [bridge|deny|drop|interface|router|vlan] service pktcap on [bridge|drop] {[count <1-1000000>|filter| hex|snap <1-1518>|verbose|write]} service pktcap on bridge filter on [<LINE>|arp|capwap|dst|ether|host|icmp|igmp|ip|ip6|l2|l3| l4|net|not|port|src|tcp|udp|vlan|wlan] service pktcap on bridge filter [arp|capwap|icmp|ip|ip6|...

  • Page 64

    2-14 Motorola RF Switch CLI Reference Guide service pktcap on bridge filter src [<IP>|net <IP/MASK>| port <0-65536>] {[and|or] <LINE>} service pktcap on bridge filter tcp {[[and|or] <LINE>|[ack|fin|or|rst|syn] {[and|or] <LINE>]} service pktcap on bridge filter vlan <1-4095> {[and|or] <LINE>} service pktcap on bridge filter wlan <1-2> {[and|or] <LINE>} service pktcap on bridge [hex|verbose] {[count <1-1000000>|...

  • Page 65

    Common Commands 2-15 service show rtls grid x <0-9000> y <0-9000> service show rtls rfid events reader {<1-48>} service show securitymgr flows [details|source] service show securitymgr flows details {source [<IP>|any] destination [<IP>|any] protocol [any|icmp|tcp|udp]} service show securitymgr flows source [<IP>|any] destination [<IP>|any] protocol [any|icmp|tcp|udp] service show smart-rf [debug-config|sensitivity] service show smart-rf debug-config...

  • Page 66

    2-16 Motorola RF Switch CLI Reference Guide service smart-rf interference [<radio-mac>|<radio-index>| <radio-index-list>] service undefine ecspec {<SPECNAME>} service wireless [ap-history|clear-ap-log|custom-cli|dot11i| dump-core|enhanced-beacon-table|enhanced-probe-table| free-packet-watermark|idle-radio-send-multicast| legacy-load-balance|map-radios|radio-misc-cfg|rate-scale| request-ap-log|save-ap-log|snmp-trap-throttle| sync-radio-entries|vlan-cache] service wireless [dumpcore|legacy-load-balance|rate-scale| save-ap-log|sync-radio-entries] service wireless ap-history [clear|enable] service wireless clear-ap-log {<1-1024>} service wireless custom-cli [sh-wi-mobile-unit|sh-wi-radio]...

  • Page 67

    Common Commands 2-17 service wireless radio-misc-cfg <hex-mask> service wireless request-ap-log <ap-index> service wireless snmp-trap-throttle <1-20> service wireless vlan-cache enable Parameters (Privilege Executable Mode) clear Performs a variety of reset functions [all|aplogs|clitree|cores| • all – Removes all core, dump and panic files dumps|fw|panics| •...

  • Page 68

    2-18 Motorola RF Switch CLI Reference Guide copy tech-support Copies files for tech support purposes [<file>|<URL>] • tech-support [<file>|<URL>] [tftp|ftp|sftp] – Copies [tftp|ftp|sftp] extensive system information useful to technical support for troubleshooting. • FILE – File to which to copy •...

  • Page 69

    Common Commands 2-19 diag [enable|identify| Sets or displays switch diagnostic values limit|period| • enable – Enables in-service diagnostics tech-support-period| • fanduty <40-100> – CPU fan PWM duty cycle. tech-support-url] Set a value between 40-100%. Setting a value below 60 is considered unreliable. •...

  • Page 70

    2-20 Motorola RF Switch CLI Reference Guide • routecache <0-65535> – Configures IP route cache usage. Set between 0 and 65553. • temperature <1-6> [critical|high|low] – Sets the number of temperature sensors for the switch. • critical <0.0 - 250.0> – Critical temperature limit •...

  • Page 71

    Common Commands 2-21 pktcap on Packet capturing [bridge|interface|router| • on – Defines the packet capture location vpn] • bridge [count|hex|snap|verbose|write|filter] – Captures [count|filter|verbose| packet at the bridge write] • count <1-1000000> – Limits the captured packet count • filter [<LINE>|arp|capwap|dst|ether|host|icmp|igmp| ip|ip6|l2|l3|l4|net|not|port|src|tcp|udp|vlan|wlan] –...

  • Page 72

    2-22 Motorola RF Switch CLI Reference Guide • verbose <1-1000000> – Displays full packet body • filter – Captures the filter • snap <1-1518>– Captured data length • write [<FILE>|URL] – Captures to a file • FILE – File to which to copy •...

  • Page 73

    Common Commands 2-23 • count <1-1000000> – Limits capture packet count • filter – Captures filter • verbose – Displays full packet body • write – Captures to a file • snap <1-1518> – Captured data length • hex – Show full packet body •...

  • Page 74

    2-24 Motorola RF Switch CLI Reference Guide securitymgr [disable| Securitymgr parameters disable-flow-rate-limit| • disable – Disables securitymgr dump-core| • disable-flow-rate-limit – Disables flow rate limiting enable-http-stats|tftplag] • dump-core – Creates a core file of the securitymgr process • enable-http-stats – Enables the securitymgr HTTP statistics interface •...

  • Page 75

    Common Commands 2-25 show [cli| Displays running system information command-history| • cli – Shows the CLI tree of the current mode crash-info|diag|fw|info| • command-history – Displays a command (except show ip|last-passwd|memory| commands) history pm|process| • crash-info – Displays information about core, panic and reboot-history|rtls| AP dump files securitymgr|smart-rf|...

  • Page 76

    2-26 Motorola RF Switch CLI Reference Guide • pm history – Process Monitor • history [WORD|all] – Displays state changes for a process, the time they happened and events • WORD – Process name • all – All processes • process – Shows processes (sorted by memory usage) •...

  • Page 77

    Common Commands 2-27 show securitymgr flows Service Security Manager parameters • flows [details|source] – Sessions established • details – Shows detail flow statistics • source [A.B.C.D|any] – Shows the source IP address • [A.B.C.D|any] – Flows where source address is A.B.C.D or flows with any source address •...

  • Page 78

    2-28 Motorola RF Switch CLI Reference Guide smart-rf [clear- Displays Smart-RF Management Commands history|load-from- • clear-history– clears assignment history file|replay|rescue|restore| • load-from-file – load record from file save-to-file|simulate] • replay enable – set replay mode • enable – enable replay mode •...

  • Page 79

    Common Commands 2-29 watchdog Enables the switch watchdog wireless [ap-history| Wireless parameters clear-ap-log • ap-history [clear|enable] – Access-port history |custom-cli|dot11i| • clear – Delete all history of all APs dump-core| • enable – Enable the tracking of AP history enhanced-beacon-table| •...

  • Page 80

    2-30 Motorola RF Switch CLI Reference Guide • radio-desc – description of radio where the mobile- unit is associated • radio-id – The radio index to which the mobile-unit is associated • ssid – The ssid of the mobile-units wlan •...

  • Page 81

    Common Commands 2-31 • num-mu – The number of mobile devices associated with this radio • power – The configured and current transmit power of the radio • pref-id – The adoption preference id of the radio • radio-desc – The description of the radio •...

  • Page 82

    2-32 Motorola RF Switch CLI Reference Guide • enhanced-probe-table [enable|erase-report|max-mu| preferred|window-time] – Enhanced probe table for MU locationing. • enable – Enables the Enhanced Probe Table feature for MU locationing. • erase-report – Erases the reports for Enhanced Probe Table feature.

  • Page 83

    Common Commands 2-33 Syntax (Global Config Mode) (Global Config) service [advanced-vty|dhcp|diag|password-encryption|pm| prompt|radius|redundancy|set|show|terminal-length| watchdog] service [advanced-vty|dhcp|watchdog] service diag [enable|limit|period|tech-support-period| tech-support-url] service password-encryption secret 2 <pass-phrase> service pm sys-restart service prompt crash-info service radius {restart} service redundancy dynamic-ap-load-balance start service set [command-history|reboot-history|upgrade-history] <10-100>...

  • Page 84

    2-34 Motorola RF Switch CLI Reference Guide pm sys-restart Process Monitor • sys-restart – Enables the PM to restart the system when a processes fails prompt crash-info Enable crash-info prompt • crash-info – Enables a crash-info prompt radius restart Enable radius server •...

  • Page 85

    Common Commands 2-35 Usage Guidelines set by the user cannot be disabled without knowing service password-encryption the old password. Refer the note below for more clarification. NOTE: The command used to no service password-encryption disable the encryption, now requires the user to know the old password.

  • Page 86

    2-36 Motorola RF Switch CLI Reference Guide 128k 128k byte buffer limit 16k byte buffer limit 1k byte buffer limit 256 byte buffer limit 2k byte buffer limit 32 byte buffer limit 32k byte buffer limit 4k byte buffer limit...

  • Page 87

    Common Commands 2-37 May 23 19:06:59 2010 admin vty 131 enable May 23 14:36:09 2010 admin vty 130 enable May 21 16:37:13 2010 admin vty 130 enable May 21 16:34:36 2010 admin con 0 enable RFSwitch>service show reboot-history Configured size of reboot history is 50 Date &...

  • Page 88: Show

    2-38 Motorola RF Switch CLI Reference Guide 2.1.6 show  Common Commands Displays the settings for the specified system component. There are a number of ways to invoke the show command: • When invoked without any arguments, it displays information about the current context.

  • Page 89

    Common Commands 2-39 Display Parameters Description Mode Example Displays the internet protocol Common page 2-53 ldap Displays the LDAP server Common page 2-60 configuration licenses Displays the installed licenses, if Common page 2-62 logging Displays the logging configuration Common page 2-63 and buffer Displays the media access control IP Common...

  • Page 90

    2-40 Motorola RF Switch CLI Reference Guide Display Parameters Description Mode Example redundancy group Displays redundancy group Common page 2-78 parameters redundancy Displays the state transition history Common page 2-81 history of the switch redundancy Displays redundancy group Common page 2-82...

  • Page 91

    Common Commands 2-41 Display Parameters Description Mode Example wlan-acl Displays WLAN ACL information Common page 2-125 access-list Displays the access list Internet Privilege/ page 2-126 Protocol (IP) configuration Global Config aclstats Displays ACL statistics Privilege/ page 2-127 Global Config alarm-log Displays all the alarms currently in Privilege/ page 2-128...

  • Page 92

    2-42 Motorola RF Switch CLI Reference Guide Display Parameters Description Mode Example startup-config Displays the content of the startup Privilege/ page 2-142 configuration Global Config upgrade-status Displays the status of the last image Privilege/ page 2-145 upgrade Global Config mac-name...

  • Page 93: Autoinstall

    Common Commands 2-43 2.1.7 autoinstall  Common to all modes Displays the autoinstall configuration information Syntax show autoinstall status Parameters status Displays status of autoinstall Example RFSwitch>show autoinstall RFSwitch>feature enabled config --not-set-- cluster cfg yes --not-set-- image --not-set-- expected image version --not-set-- RFSwitch>...

  • Page 94: Banner

    2-44 Motorola RF Switch CLI Reference Guide 2.1.8 banner  Common to all modes Displays the message of the day string. This string can be used to alert the user to specific information that might be of interest. Syntax show banner motd...

  • Page 95: Commands

    Common Commands 2-45 2.1.9 commands  Common to all modes Displays the available commands for the current mode Syntax RFSwitch>show commands Parameters None Example RFSwitch#show commands acknowledge alarm-log (all|<1-65535>) acknowledge alarm-log (all|<1-65535>) archive tar /create (FILE|URL) .FILE archive tar /create (FILE|URL) .FILE archive tar /table (FILE|URL) archive tar /table (FILE|URL) archive tar /xtract (FILE|URL) DIR...

  • Page 96: Crypto

    2-46 Motorola RF Switch CLI Reference Guide 2.1.10 crypto  Common to all modes Displays the encryption mode information Syntax show crypto[ipsec|isakmp|key|map|pki] show crypto ipsec[sa| security-association|transformset] show crypto isakmp[policy <1-10000>|sa] show crypto keymy pubkey rsa show crypto map[interface <interface-name>|tag <tag-name>] show crypto pki[request <trustpoint-name>|trustpoints]...

  • Page 97

    Common Commands 2-47 pki [request|trustpoints] Displays Public Key Infrastructure (PKI) commands • request <trustpoint-name> – Displays the certificate requests • trustpoints – Displays the trustpoints and their configuration Usage Guidelines The security engine periodically updates the IPSec and Isakamp statistics (every 60 seconds) Example RFSwitch(config)#show crypto pki request tptest...

  • Page 98

    2-48 Motorola RF Switch CLI Reference Guide Subject Name: Common Name: MotorollaMotorolla Issuer Name: Common Name: Motorolla Valid From: Sep 13 16:14:49 2010 GMT Valid Until: Sep 13 16:14:49 2010 GMT Trustpoint :tptest ----------------------------------------------- CA certificate configured Subject Name: Common Name:...

  • Page 99: Environment

    Common Commands 2-49 2.1.11 environment  Common to all modes Displays the environmental information such as fan speed, ambient temperature inside the switch and CPU temperature. Syntax show environment Parameters None Example RFSwitch>show environment upwind of CPU temperature : 30.0 C CPU die temperature : 49.0 C left side temperature : 29.0 C by FPGA temperature : 28.0 C...

  • Page 100: History

    2-50 Motorola RF Switch CLI Reference Guide 2.1.12 history  Common to all modes Displays the command history Syntax show history Parameters None Example RFSwitch>show history 1 admin 2 enable 3 con ter 4 exit 5 show autoinstall 6 con ter...

  • Page 101: Interfaces

    Common Commands 2-51 2.1.13 interfaces  Common to all modes Displays the status of the different switch interfaces Syntax show interfaces [WORD|ge|me1|sa|switchport|vlan] Parameters show interfaces Displays the interface name [WORD|ge|me1|sa| • WORD– Displays interface name switchport|vlan] • ge – Displays Gigabit Ethernet interface information •...

  • Page 102

    2-52 Motorola RF Switch CLI Reference Guide Output packets 0, bytes 0, dropped 0 Sent 0 broadcasts, 0 multicasts Output errors 0, collisions 0, late collisions 0, excessive collisions 0 RFS6000#show interfaces wan Interface wan Hardware Type PPP, Interface Mode Layer 3 index=8, metric=1, mtu=1500, (PAL-IF) <UP,POINTOPOINT,RUNNING,NOARP,MULTICAST...

  • Page 103

    Common Commands 2-53 2.1.14 ip  Common to all modes Displays Internet Protocol (IP) related information Syntax show ip [access-group|arp|ddns|dhcp| dhcp-vendor-options|domain-name|dos|http|igmp|interface| name-server|nat|route|routing|ssh|telnet] show ip access-group [<interface-name>|all|ge|me1|role|sa| vlan <1-4094>] show ip arp show ip ddnsbinding show ip dhcp[binding|class|pool|sharednetwork|] show ip dhcp-vendor-options show ip domain-name show ip dos [config|stats] show ip http [secure-server|server]...

  • Page 104

    2-54 Motorola RF Switch CLI Reference Guide Parameters access-group Displays the ACLs attached to an interface [<interface-name> • <interface-name> – Enter the name of the interface to |all|ge|me1|role|sa|> which the ACL is associated. access-group lists the |vlan <1-4094>] details of the ACLs configured on the particular Layer 3 or Layer 2 interface.

  • Page 105

    Common Commands 2-55 http Hyper Text Transfer Protocol (HTTP) [secure-server|server] • secure-server – Secure HTTP server • server – HTTP server interface [<interface- Use the show ip interface command to display the name>|brief|ge|me1|sa| administrative and operational status of all Layer-3 vlan] interfaces or a specified Layer-3 interface.

  • Page 106

    2-56 Motorola RF Switch CLI Reference Guide route [<IP>|<IP/Mask> Display IP routing table entries |detail] • <IP> – Network in the IP routing table • <IP/Mask> – Number of valid bits in the network prefix IP prefix <network>/<length>, e.g., 35.0.0.0/8 •...

  • Page 107

    Common Commands 2-57 interface. In this case, it is the physical interface that is disconnected not the virtual interface. When the ethernet interface comes back up, it will restart the DHCP client on any virtual interfaces (SVIs) of which the physical interface is a member port. This ensures if the interface was disconnected and reconnected to a different interface, it obtains a new IP address, route, name server, domain name etc.

  • Page 108

    2-58 Motorola RF Switch CLI Reference Guide ip dhcp pool pl ip dhcp pool pool1 domain-name test.com bootfile 123 network 10.10.10.0/24 address range 10.10.10.2 10.10.10.30 ip dhcp pool poo110 next-server 1.1.1.1 netbios-node-type b-node RFSwitch#show ip dhcp-vendor-options Server Info: Firmware Image File:...

  • Page 109

    Common Commands 2-59 RFSwitch#show ip interface vlan 1 brief Interface IP-Address Status Protocol vlan1 157.235.208.233 (DHCP)up RFSwitch#show ip name-server 157.235.3.195 dynamic 157.235.3.196 dynamic RFSwitch#show ip routing IP routing is on RFSwitch(config)#show ip route detail Codes: K - kernel/icmp, C - connected, S - static, D - DHCP >...

  • Page 110: Ldap

    2-60 Motorola RF Switch CLI Reference Guide 2.1.15 ldap  Common to all modes Displays LDAP information Syntax show ldap configuration [primary|secondary] Parameters ldap configuration Displays LDAP information. [primary|secondary] • Configuration [primary|secondary] – Sets the LDAP configuration server parameters • primary – Defines the Primary LDAP server •...

  • Page 111

    Common Commands 2-61 (sAMAccountName=%{Stripped-User-Name:-%{User-Name}}) Bind DN cn=kumar,ou=symbol,dc=activedirectory,dc=com Base DN : ou=symbol,dc=activedirectory,dc=com Password : 0 symbol@123 Password Attribute : UserPassword Group Name : cn Group Membership Filter: (&(objectClass=group)(member=%{Ldap-UserDn})) Group Member Attr : radiusGroupName Net timeout : 1 second(s)

  • Page 112: Licenses

    2-62 Motorola RF Switch CLI Reference Guide 2.1.16 licenses  Common to all modes Displays the different licenses installed on the switch Syntax show licenses Parameters None Example RFSwitch(config)#show licenses feature usage license string license value usage 2FFD7fE9 CD016155 14A92C70 48...

  • Page 113: Logging

    Common Commands 2-63 2.1.17 logging  Common to all modes Displays logging status and other information Syntax show logging Parameters None Example RFSwitch(config)#show logging Logging module: enabled Aggregation time: disabled Console logging: level debugging Buffered logging: level informational Syslog logging: level debugging Facility: local7 Logging to: 157.235.203.37 Logging to: 10.0.0.2...

  • Page 114

    2-64 Motorola RF Switch CLI Reference Guide 2.1.18 mac  Common to all modes Shows all MAC information with respect to groups and access lists Syntax show mac [access-list|access-group] interface>|all|ge <1-4>| show mac access-group [< me1|sa <1-4>|vlan <1-4094>] Parameters mac [access-list...

  • Page 115: Mac-address-table

    Common Commands 2-65 2.1.19 mac-address-table  Common to all modes Displays the MAC address table entries Syntax show mac-address-table Parameters None Example RFSwitch(config)#show mac-address-table Bridge VLAN Port ------------ ---- ------------ -------------- --- 00a0.f865.ea8f 1 0015.7038.0653 1 0015.7014.fec4 1 0015.7041.9f7f 1 RFSwitch(config)

  • Page 116: Management

    2-66 Motorola RF Switch CLI Reference Guide 2.1.20 management  Common to all modes Displays the L3 management interface name Syntax show management Parameters None Example RFSwitch>show management Mgmt Interface: vlan1 Management access permitted via any vlan interface RFSwitch>...

  • Page 117: Mobility

    Common Commands 2-67 2.1.21 mobility  Common to all modes Displays the mobility parameters Syntax show mobility [event-log|forwarding|global| mobile-unit|peer|statistics] show mobility event-log [mobile-unit|peer] show mobility forwarding <MAC> show mobility mobile-unit [MAC>|detail] show mobility peer [<IP>|detail] show mobility statistics <MAC> Parameters event-log[ Displays mobility event logs mobile-unit|peer]...

  • Page 118

    2-68 Motorola RF Switch CLI Reference Guide global Global Mobility parameters mobile-unit Mobile-units in the Mobility Database peer Mobility peers statistics Mobile-unit Statistics RFSwitch(config)#show mobility event-log mobile-unit Time Event Evt-Src-IP MU-Mac MU-IP HS-IP CS-IP 09/14 19:17:52 IP-UPD-MU 00-0f-3d-e9-a6-54 157.235.208.134 157.235.208.16 157.235.208.16 09/14 19:17:51 ADD-MU 00-0f-3d-e9-a6-54 0.0.0.0...

  • Page 119

    Common Commands 2-69 Foreign MU Database: Total=0 RFSwitch(config)#show mobility peer detail Mobility Peers: Total=1, Established=0 Peer: 1.1.1.1, State: PASSIVE-CONNECTING Join-Sent : 0 Join-Rcvd : 0 Leave-Sent : 0 Leave-Rcvd Rehome-Sent: 0 Rehome-Rcvd: 0 L3roam-Sent: 0 L3roam- Rcvd: 0 Num-flaps : 0 Connect-retries: 0 Peer-Uptime: 0 days, 00:00:00...

  • Page 120

    2-70 Motorola RF Switch CLI Reference Guide 2.1.22 ntp  Common to all modes Displays NTP protocol information Syntax show ntp [association|status] Parameters ntp [association Displays the Network Time Protocol (NTP) configuration detail|status] • association detail – Displays existing NTP associations •...

  • Page 121

    Common Commands 2-71 rcv time 00000000.00000000 (Feb 07 06:28:16 UTC 2036) xmt time c8b42a7e.6eb04252 (Sep 14 19:22:38 UTC 2010) filtdelay = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 RFSwitch>show ntp status Clock is synchronized, stratum 0, actual frequency is 0.0000 Hz, precision is 2^0 reference time is 00000000.00000000 (Feb 07 06:28:16 UTC 2036)

  • Page 122: Port-channel

    2-72 Motorola RF Switch CLI Reference Guide 2.1.23 port-channel  Common to all modes Displays port-channel load-balance information • RFS7000 SWITCH NOTE: This command is not supported on: • RFS6000 • RFS4000 Syntax show port-channel load-balance Parameters load-balance Displays the existing load balancing configuration Example RFSwitch>show port-channel load-balance...

  • Page 123: Power

    Common Commands 2-73 2.1.24 power  Common to all modes Displays the power configuration and status for the RFS6000 switch Supported in the following platforms: • RFS4000 • RFS6000 SWITCH NOTE: This command is not supported on: • RFS7000 Syntax show power [configuration|status] Parameters configuration...

  • Page 124: Privilege

    2-74 Motorola RF Switch CLI Reference Guide 2.1.25 privilege  Common to all modes Displays the privileges of the current user Syntax show privilege Parameters None Example RFSwitch>show privilege Current user privilege: superuser RFSwitch>...

  • Page 125: Radius

    Common Commands 2-75 2.1.26 radius  Common to all modes Displays RADIUS status and information Syntax show radius [configuration|eap configuration|group| A.B.C.D/M|proxy|rad-user|trust-point] Parameters radius [configuration| Displays RADIUS configuration commands eap configuration group| • configuration – RADIUS server configuration nas <IP/Mask>|proxy| parameters rad-user|trust-point] •...

  • Page 126

    2-76 Motorola RF Switch CLI Reference Guide Proxy Realm Details ___________________ Realm : symbol.com IP Address : 10.10.10.5 Port : 1812 Shared secret : 0 secret123...

  • Page 127: Redundancy Dynamic-ap-load-balance

    Common Commands 2-77 2.1.27 redundancy dynamic-ap-load-balance  Common to all modes Displays the configuration for the Dynamic AP Load Balancing feature Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show redundancy dynamic-ap-load-balance config Parameters config Displays configuration details for dynamic AP load balance Example RFSwitch(config)#show redundancy dynamic-ap-load-balance config Dynamic AP Load Balance Configuration:...

  • Page 128: Redundancy Group

    2-78 Motorola RF Switch CLI Reference Guide 2.1.28 redundancy group  Common to all modes This command displays the switch’s IP address, number of active neighbors, group license, installed license, cluster AP adoption count, switch adoption count, hold time, discovery time, heartbeat interval, cluster id and switch mode.

  • Page 129

    Common Commands 2-79 Redundancy Protocol Version : 2.0 Redundancy Group License Cluster AP Adoption Count : Not Applicable Switch AP Adoption Count : Not Applicable Redundancy State : Disabled Radio Portals adopted by Group : Not Applicable Radio Portals adopted by this Switch : Not Applicable Rogue APs detected in this Group : Not Applicable Rogue APs detected by this Switch...

  • Page 130

    2-80 Motorola RF Switch CLI Reference Guide Redundancy Protocol Version : 2.0 Redundancy Group License Cluster AP Adoption Count : Not Applicable Switch AP Adoption Count : Not Applicable Redundancy State : Disabled Radio Portals adopted by Group : Not Applicable...

  • Page 131: Redundancy History

    Common Commands 2-81 2.1.29 redundancy history  Common to all modes Displays the switch state transition history Syntax show redundancy history Parameters None Example RFSwitch>show redundancy history State Transition History Time Event Triggered state --------------------------------------------------------- Sat Oct 06 12:07:55 Redundancy Enabled Startup Sat Oct 06 12.07.56 Startup Done...

  • Page 132: Redundancy Members

    2-82 Motorola RF Switch CLI Reference Guide 2.1.30 redundancy members  Common to all modes Displays the member switches in the cluster. The user can provide the of the IP address switch in cluster whose information alone is needed. Syntax show redundancy members [<IP>|brief]...

  • Page 133: Rtls

    Common Commands 2-83 2.1.31 rtls  Common to all modes Displays the Real Time Locating System status and information Syntax show rtls [aeroscout|espi|filter|ekahau| reference-tags|rfid|site|sole|tags|zone]...

  • Page 134

    2-84 Motorola RF Switch CLI Reference Guide Parameters rtls [aeroscout|espi|filter| Displays the Real Time Locating System status and ekahau| information. reference-tags| • aeroscout – Displays aeroscout configurations rfid|site|sole|tags|zone] • espi [adapter|ecspecs|subscriber|tags] – Displays ESPI configuration • adapter [active|ale-tcp] – Displays Adapter Configuration •...

  • Page 135

    Common Commands 2-85 rtls tags [<tag-id>| Displays Tags/Assets (passive, active, wi-fi, uwb) aeroscout|all|ekahau|g2| Information mobile-unit| • <tag-id> – Displays detailed tag information for specific |rfid|uri|zone|] tag ID • aeroscout – Displays located aeroscout tags • all – Displays all tags •...

  • Page 136: Smtp-notification

    2-86 Motorola RF Switch CLI Reference Guide 2.1.32 smtp-notification  Common to all modes Displays the set smtp-notification parameters Syntax show smtp-notification traps Parameters traps Displays trap enable flags Example RFSwitch(config)#show smtp-notification traps ----------------------------------------------------------------- -Global enable flag for Trap SMTP-Notification...

  • Page 137

    Common Commands 2-87 redundancy memberMisConfigured redundancy adoptionExceeded redundancy grpAuthLevelChanged redundancy resourceUp redundancy resourceDown misc lowFsSpace misc processMaxRestartsReached misc savedConfigModified misc serverCertExpired misc caCertExpired misc periodicHeartbeat misc switchEvent wireless station associated wireless station disassociated wireless station deniedAssociationOnCapability wireless station deniedAssociationOnShortPream wireless station deniedAssociationOnSpectrum wireless station deniedAssociationOnErr...

  • Page 138: Snmp

    2-88 Motorola RF Switch CLI Reference Guide 2.1.33 snmp  Common to all modes Displays SNMP user information Syntax show snmp user [snmpmanager|snmpoperator|snmptrap] Parameters snmp user Displays SNMP user information [snmpmanager| • snmpmanager – Shows SNMP manager information snmpoperator|snmptrap • snmpoperator – Shows SNMP operator information •...

  • Page 139: Snmp-server

    Common Commands 2-89 2.1.34 snmp-server  Common to all modes Displays SNMP server information Syntax show snmp-server traps wireless-statistics[mesh|mobile-unit| radio|wireless-switch|wlan] Parameters traps wireless-statistics Displays existing wireless-stats rate trap enabled flags [mesh| • mesh – Displays existing mesh rate traps mobile-unit| radio| •...

  • Page 140

    2-90 Motorola RF Switch CLI Reference Guide redundancy grpAuthLevelChanged misc lowFsSpace misc processMaxRestartsReached wireless station associated wireless station disassociated wireless station deniedAssociationOnCapability wireless station deniedAssociationOnShortPream wireless station deniedAssociationOnSpectrum wireless station deniedAssociationOnErr wireless station deniedAssociationOnSSID wireless station deniedAssociationOnRates wireless station deniedAssociationOnInvalidWPAWPA2IE...

  • Page 141

    Common Commands 2-91 gave-up-percent-greater-than disabled avg-retry-greater-than disabled undecrypt-percent-greater-than disabled num-stations-greater-than disabled RFSwitch> RFSwitch>show snmp-server traps wireless-statistics wireless-switch pktsps-greater-than disabled tput-greater-than disabled num-stations-greater-than disabled RFSwitch> RFSwitch>show snmp-server traps wireless-statistics wlan pktsps-greater-than disabled tput-greater-than disabled avg-bit-speed-less-than disabled avg-signal-less-than disabled nu-percent-greater-than disabled gave-up-percent-greater-than disabled avg-retry-greater-than disabled...

  • Page 142: Spanning-tree

    2-92 Motorola RF Switch CLI Reference Guide 2.1.35 spanning-tree  Common to all modes Displays Spanning Tree information Syntax show spanning-tree mst [config|detail|instance] show spanning-tree mst detail interface [<interface-name>|ge|me1|sa|vlan <1-4094>] show spanning-tree mst instance <1-15> interface <IF NAME>||vlan <1-4094>}] Parameters...

  • Page 143

    Common Commands 2-93 %------------------------------------------------------ RFSwitch(config)# RFSwitch(config)#show spanning-tree mst detail interface ge % Bridge up - Spanning Tree Enabled % CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768 % Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20 % 1: CIST Root Id 800000157037fabf % 1: CIST Reg Root Id 800000157037fabf % 1: CST Bridge Id 800000157037fabf...

  • Page 144: Static-channel-group

    2-94 Motorola RF Switch CLI Reference Guide 2.1.36 static-channel-group  Common to all modes Displays the members of the static channel groups Supported in the following platforms: • RFS7000 • RFS4000 SWITCH NOTE: This command is not supported in: • RFS6000...

  • Page 145: Terminal

    Common Commands 2-95 2.1.37 terminal  Common to all modes Displays the terminal information for the device Syntax show terminal Parameters None Example RFSwitch>show terminal Terminal Type: vt102 Length: 44 Width: 125 RFSwitch>...

  • Page 146: Timezone

    2-96 Motorola RF Switch CLI Reference Guide 2.1.38 timezone  Common to all modes Displays the timezone set on the device Syntax show timezone Parameters None Example RFSwitch>show timezone Timezone is Etc/UTC RFSwitch>...

  • Page 147: Traffic-shape

    Common Commands 2-97 2.1.39 traffic-shape  Common to all modes Displays traffic shaping parameters Supported in the following platforms: • RFS7000 SWITCH NOTE: This command is not supported in: • RFS6000 Syntax show traffic-shape [config|priority-map|statistics] Parameters • config class – Displays traffic shaping configuration config| priority-map| •...

  • Page 148: Users

    2-98 Motorola RF Switch CLI Reference Guide 2.1.40 users  Common to all modes Displays a list of users connected to the device Syntax show users Parameters None Example RFSwitch>show users Line User Uptime Location 0 con 0 316 admin...

  • Page 149: Version

    Displays software and hardware version information Example RFSwitch>show version RFSwitch version 4.3.0.0-046B MIB=01a Copyright (c) 2006-2009 Motorola, Inc. Booted from secondary. switch uptime is 8 days, 19 hours 32 minutes CPU is RMI XLR V0.4 255476 kB of on-board RAM RFSwitch>show version verbose...

  • Page 150: Wireless

    2-100 Motorola RF Switch CLI Reference Guide 2.1.42 wireless  Common to all modes range differs from switch to switch. radio-group • RFS7000 – Supports a range between 0-255 • RFS6000 – Supports a range between 0-64 • RFS4000 – Supports a range between 1-6...

  • Page 151

    Common Commands 2-101 show wireless mesh statistics {<1-32> {detail}} show wireless mobile-unit {[<1-8192>|<MAC>|association- history|association-stats|probe-history|radio| roaming|statistics|voice|wlan]} show wireless mobile-unit [<1-8192>|<MAC>|association-stats] show wireless mobile-unit association-history {<MAC>} show wireless mobile-unit probe-history [<1-200>|config- list] show wireless mobile-unit radio <1-4096> show wireless mobile-unit roaming database show wireless mobile-unit statistics [<1-4096>|<MAC>...

  • Page 152

    2-102 Motorola RF Switch CLI Reference Guide show wireless wips [configured-ap-def-essids| configured-bad-essids|fake-ap-flood|filter-list| suspicious-ap] Parameters aap-version Displays the minimum adaptive firmware version string ap [<1-48>|<MAC>| Status of the adopted access port config [<1-48>|<MAC>]] • <1-48> – Defines the index of the access port •...

  • Page 153

    Common Commands 2-103 channel-power Lists the channels and power levels available for a radio [11a|11b|11bg] • 11a – Defines the radio as 802.11a [indoor|outdoor] • 11b – Defines the radio as 802.11b • 11bg – Defines the radio as 802.11bg These options are available for all the above radio types: •...

  • Page 154

    2-104 Motorola RF Switch CLI Reference Guide ignored-aps Displays list of ignored-aps detected by the switch known {ap statistics Displays known AP parameters. {<1-1024>}} • ap – Optional. Defines a known AP index <1-1024> • statistics – Optional. Displays known adaptive AP stats •...

  • Page 155

    Common Commands 2-105 mobile-unit {[<1- Displays the parameters of associated mobile units. All 8192>|<MAC>|associatio parameters are optional. n-history| • <1-8192> – Index of mobile unit association-stats|probe- • <MAC> – MAC address of mobile unit history|radio|roaming|sta • association-history {<MAC>}– Displays the association tistics| history of the Mobile Units with the MAC address and its voice|wlan]}...

  • Page 156

    2-106 Motorola RF Switch CLI Reference Guide multicast-packet-limit Displays the multicast-packet-limit non-preferred-ap- Displays non preferred AP attempt threshold attempts-threshold phrase-to-key Displays the WEP keys generated by a passphrase [wep128|wep64] • wep128 – Displays WEP128 keys <pass-phrase> • wep64 – Displays WEP64 keys •...

  • Page 157

    Common Commands 2-107 radio {[<1-4096>| Radio related commands. All parameters are optional. admission-control|all| • <1-4096> – Defines information on a single radio’s index beacon-table|config| • admission-control voice {<1-4096>} – Displays summary monitor-table|statistics| information for all radios that have admission control unadopted|uptime| enabled.

  • Page 158

    2-108 Motorola RF Switch CLI Reference Guide • unadopted – Displays a list of unadopted radios • uptime – Displays the uptime of all adopted radios • voice <1-4094> – Displays voice call details • <1-4094> – Optional. Defines a single radio’s index radio-group {<1-256>}...

  • Page 159

    Common Commands 2-109 smart-rf Displays smart-rf related management information [calibration-status| • calibration-status – Displays smart-rf calibration status. configuration| • configuration – Displays smart-rf configuration history|radio] information • history – Displays smart-rf assignment history since last calibration • radio [config|local-status|map|master- status|neighbors|spectrum] {[<1-4096>|<MAC>| all-11a|all-11bg]} –...

  • Page 160

    2-110 Motorola RF Switch CLI Reference Guide wlan [config|statistics] Displays wireless LAN parameters. The following information is displayed: • config [<1-256>|all|enabled] – Displays the wireless LAN configuration information. All parameters optional. • <1-256> – The selected wlan • all – all wlans in the configuration •...

  • Page 161

    Common Commands 2-111 (config-wireless) Executable Mode Displays the (config- wireless) configuration parameters and information Syntax show wireless ap [LIST|config] show wireless config [<1-1024>|LIST] show wireless radio [<1-4096>|admission-control|all| beacon-table|config|monitor-table|statistics|unadopted| uptime|voice]} show wireless wlan [config|statistics] show wireless wlan config [<1-256>|all|enabled] show wireless wlan statistics <1-256> detail Parameters (config-wireless) Executable Mode show wireless ap Displays wireless LAN parameters.

  • Page 162

    2-112 Motorola RF Switch CLI Reference Guide show wireless wlan Configures wireless LAN related parameters [config • config [<1-256>|all|enabled] – Configures wlan {all|enabled}| statistics • <1-256> – Displays wlan index detail} <1-256> • all – Displays all the configured wlans •...

  • Page 163

    Common Commands 2-113 RFS6000(config)#show wireless ap-images ap-type Image-Name Size (bytes) Version ap300 AP300-WISP 325212 00.02-37 ap300 AP300-WISPe 319776 01.00-2281r ap300 AP300-IDS-Sensor 350092 00.00-04 ap100 AP100 31066 02.05-00 ap4131 AP4131 191316 07.00-08 ap4131 Revert-AP4131 665704 00.00-00 ap650 AP650 2392082 0.1-1061B RFS6000(config)# RFSwitch>show wireless ap-unadopted RFSwitch>...

  • Page 164

    2-114 Motorola RF Switch CLI Reference Guide 2 00-A0-F8-BF-89-45 2 [ 5 6 ] WSAP-5100-100-WW L2 (vlan: 3 00-A0-F8-00-00-00 2 [ 1 2 ] AP-0650-00000-XX L2 (vlan: RFS6000(config)# RFSwitch(config)#show wireless config country-code : None secure-wispe-default-secret default adoption-pref-id proxy-arp : enabled...

  • Page 165

    Common Commands 2-115 dhcp one portal forward : disabled dhcp fix broadcast-rsp : disabled broadcast-tx-speed : optimize-for-range wlan bw allocation : disabled smart-channels used 1,6,11,36,40,44,48,52,56,60,64,100,104,108,112,116,136,140,1 49,153,157,161,165 smart-channels excluded : 2,3,4,5,7,8,9,10 Adaptive ap parameters: config-apply def-delay : 30 seconds config-apply mesh-delay: 180 seconds user load balance mode : disabled secure-wispe-default-secret : 0 defaultS...

  • Page 166

    2-116 Motorola RF Switch CLI Reference Guide same-source-destination disabled multicast-source disabled weak-wep-iv disabled tkip-countermeasures enabled invalid-frame-length enabled invalid-8021x-frame disabled invalid-frame-type enabled beacon-broadcast-essid disabled bad-essid-frame enabled unencrypted-traffic enabled non-changing-wep-iv enabled detect-adhoc-networks disabled deauth-broadcast-smac enabled invalid-sequence-number enabled ap-default-ssid enabled identity-theft enabled suspicious-ap...

  • Page 167

    Common Commands 2-117 -- MORE --, next page: Space, next line: Enter, quit: Control-C Avg mobile-unit SNR(dB): 16.00 0.00 ------ Errors----------------------------------------------- 30s 1hr Avg number of retries: 0.42 0.00 % gave up pkts: 0.00 0.00 % Non-decryptable pkts: 0.00 0.00 RFSwitch(config)#show wireless mobile-unit index MAC-address...

  • Page 168

    2-118 Motorola RF Switch CLI Reference Guide #enabled ssid authentication encryption vlan(s) description TechDoc_02 none wep128 TechDoc_Test_02 TechDoc_01 none wep128 TechDoc_Test_01 TechDoc_02 none none WLAN8 ---- RFSwitch(config)# RFSwitch(config)#show wireless wlan config 5 RFS7000(config)#show wireless wlan config 8 WLAN: 8, status: disabled, description: WLAN8, ssid:...

  • Page 169

    Common Commands 2-119 RFS7000(config-wireless)# RFS7000(config-wireless)#show wireless wlan config 9 WLAN: 9, status: disabled, description: WLAN9, ssid: 109 auth: none, encr: none, mfp: none inactivity-timeout : 1800 seconds hold-time : 5 seconds nas-id : "" nas-port-id : "" vlan : unlimited users query smart-channels used 1,6,11,36,40,44,48,52,56,60,64,149,153,157,161...

  • Page 170

    2-120 Motorola RF Switch CLI Reference Guide 11.0 12.0 18.0 22.0 24.0 36.0 48.0 54.0 Retry Counts Packets ------------ ------- RFSwitch(config)# RFS6000(config)#show wireless radio statistics 3 ***** Radio-3 ********************* mobile-units Associated : Voice Prioritized : ------ Traffic ------------------------------------------------- Total ---------------- ---------------- -------- Pkts per sec: 0.00...

  • Page 171

    Common Commands 2-121 Avg bit speed: 0.00 0.00 Mbps % Non-unicast pkts: 0.00 0.00 ------ RF Status------------------------------------------------ Avg mobile-unit signal: 0.00 0.00 dBm Avg mobile-unit noise: -92.25 -93.50 dBm Avg mobile-unit SNR(dB): 92.25 93.50 ------ Errors--------------------------------------------------- Avg number of retries: 0.00 0.00 % gave up pkts:...

  • Page 172

    2-122 Motorola RF Switch CLI Reference Guide Voice failed Tx BCMC drops : RFS6000(config)# RFS6000(config)#show wireless wlan statistics 2 mobile-units Associated : Radios active : Voice mobile-units Associated : ------ Traffic ------------------------------------------------- Total ---------------- ---------------- -------- Pkts per sec: 0.00 0.00...

  • Page 173

    Common Commands 2-123 % gave up pkts: 0.00 0.00 % Non-decryptable pkts: 0.00 0.00 RFS6000(config)# RFS6000(config)#show wireless mobile-unit statistics 00-A0-F8- BF-61-6E ***** mobile-unit 1: <00-A0-F8-BF-61-6E>********************* WLAN : wlan-4 ------ Traffic ------------------------------------------------- Total ---------------- ---------------- -------- Pkts per sec: 0.00 0.01 0.00 0.00 0.00...

  • Page 174

    2-124 Motorola RF Switch CLI Reference Guide RFS6000(config)#show wireless mobile-unit statistics 00-A0-F8- BF-61-6E detail mu_idx = 0 Retry Counts Packets ------------ ------- Voice failed : RFS6000(config)#...

  • Page 175: Wlan-acl

    Common Commands 2-125 2.1.43 wlan-acl  Common to all modes Displays the WLAN based access control list information Syntax show wlan-acl [<1-256>|all] Parameters wlan-acl [ <1-256>|all] Displays WLAN based access control list information • <1-256> – Displays ACLs attached to the specified WLAN ID •...

  • Page 176: Access-list

    2-126 Motorola RF Switch CLI Reference Guide 2.1.44 access-list  Privilege / Global Config Displays the access lists (numbered and named) configured on the switch. The numbered access list displays numbered ACLs. The named access list displays named ACL details.

  • Page 177: Aclstats

    Common Commands 2-127 2.1.45 aclstats  Privilege / Global Config Displays the statistics of configured access lists Syntax show aclstats [access-list|vlan <1-4094>] show aclstats {<1-99>|<100-199>|<1300-1999>|<2000-2699>| <acl-name>} show aclstats vlan <1-4094> Parameters access-list {<1- Displays configured access lists. 99>|<100-199>|<1300- • <1-99> - IP standard access list 1999>|<2000-2699>| •...

  • Page 178: Alarm-log

    2-128 Motorola RF Switch CLI Reference Guide 2.1.46 alarm-log  Privilege / Global Config Displays the contents of the alarm log on the device Syntax show alarm-log {<1-65535>|acknowledged|all|count|new| severity-to-limit} show alarm-log severity-to-limit {critical| informational|major|normal|warning} Parameters alarm-log [<1-65535>| Displays the contents of the alarm log on the device.

  • Page 179: Boot

    Common Commands 2-129 2.1.47 boot  Privilege / Global Config Displays the boot configuration of the device Syntax show boot Parameters None Example RFSwitch#show boot Image Build Date Install Date Version ----- -------------------- -------------------- ------ -------- Primary Oct 16 03:55:43 2009 Sep 15 00:53:56 2009 4.3.0.0-046B Secondary...

  • Page 180: Clock

    2-130 Motorola RF Switch CLI Reference Guide 2.1.48 clock  Privilege / Global Config Displays the system clock Syntax show clock Parameters None Example RFSwitch#show clock Jun 01 00:51:34 UTC 2010 RFSwitch#...

  • Page 181: Debugging

    Common Commands 2-131 2.1.49 debugging  Privilege / Global Config Displays the debugging configuration information Syntax show debugging mstp Parameters mstp Displays the current MSTP configuration Example RFSwitch(config)#show debugging mstp MSTP debugging status: RFSwitch(config)#...

  • Page 182: Dhcp

    2-132 Motorola RF Switch CLI Reference Guide 2.1.50 dhcp  Privilege / Global Config Displays existing DHCP server configurations Syntax show dhcp [config|status] Parameters config Displays the current DHCP server configuration status Displays whether the DHCP server is running Example...

  • Page 183: File

    Common Commands 2-133 2.1.51 file  Privilege / Global Config Displays the file system information Syntax show file [information|systems] Parameters file Displays the filesystem information. [information|systems] • information <FILE> Displays file information • <FILE> Displays the information on file • systems Lists existing filesystems Example RFSwitch#show file systems...

  • Page 184

    2-134 Motorola RF Switch CLI Reference Guide 2.1.52 ftp  Privilege / Global Config Displays the FTP server configuration Syntax show ftp Parameters None Example RFSwitch#show ftp FTP Server: Disabled User Name: anonymous or ftpuser Password: ******** Root dir: flash:/...

  • Page 185: Password-encryption

    Common Commands 2-135 2.1.53 password-encryption  Privilege / Global Config Displays the global password encryption status Syntax show password-encryption status Parameters status Displays the existing password-encryption status Example RFSwitch#show password-encryption status Password encryption is disabled RFSwitch#...

  • Page 186: Running-config

    2-136 Motorola RF Switch CLI Reference Guide 2.1.54 running-config  Privilege / Global Config Displays the contents of those configuration files wherein all configured MAC and IP access lists are applied to an interface Syntax show running-config [full|include-factory] Parameters running-config...

  • Page 187

    Common Commands 2-137 snmp-server engineid netsnmp 6b8b456749d9e5c1 snmp-server sysname RFS7000 snmp-server manager v2 snmp-server manager v3 snmp-server user snmptrap v3 encrypted auth md5 0x22b4e8506bf66b435abdde2 b996e8100 snmp-server user snmpmanager v3 encrypted auth md5 0x22b4e8506bf66b435abd de2b996e8100 snmp-server user snmpoperator v3 encrypted auth md5 0x0153e87f2d43032f221 b1f3e340942d2 firewall dhcp-snoop-conflict-detection disable...

  • Page 188

    2-138 Motorola RF Switch CLI Reference Guide ip dhcp trust interface me1 ip address 10.1.1.100/24 interface vlan1 ip address 172.16.10.2/24 rtls rfid espi sole line con 0 line vty 0 24 RFSwitch(Config)# RFSwitch(config)#show running-config include-factory ! configuration of RFSwitch version 4.0.0.0-008D version 1.0...

  • Page 189

    Common Commands 2-139 spanning-tree mst config name My Name no management secure ip domain-lookup service diag period 1000 service diag enable country-code us redundancy group-id 1 redundancy interface-ip 0.0.0.0 redundancy mode primary redundancy hold-period 15 redundancy heartbeat-period 5 redundancy discovery-period 30 no redundancy handle-stp enable no redundancy dhcp-server enable no redundancy enable...

  • Page 190: Securitymgr

    2-140 Motorola RF Switch CLI Reference Guide 2.1.55 securitymgr  Privilege / Global Config Displays the security manager event-logs Syntax show securitymgr event-logs Parameters None Example RFSwitch#show securitymgr event-log RFSwitch#...

  • Page 191: Sessions

    Common Commands 2-141 2.1.56 sessions  Privilege / Global Config Displays the list of current active open sessions on the device Syntax show sessions Parameters None Example RFSwitch#show sessions SESSION USER LOCATION IDLE START TIME Console 06:24m May 31 18:31:36 2010 ** 2 10.10.10.1 00:00m...

  • Page 192: Startup-config

    2-142 Motorola RF Switch CLI Reference Guide 2.1.57 startup-config  Privilege / Global Config Displays the complete startup configuration script on the console Syntax show startup-config Parameters None Example RFS7000(config)#show startup-config ! configuration of RFS7000 version 4.1.0.0-003D version 1.3 aaa authentication login default local none...

  • Page 193

    Common Commands 2-143 snmp-server user snmptrap v3 encrypted auth md5 0x22b4e8506bf66b435abdde2 b996e8100 snmp-server user snmpmanager v3 encrypted auth md5 0x22b4e8506bf66b435abd de2b996e8100 snmp-server user snmpoperator v3 encrypted auth md5 0x0153e87f2d43032f221 b1f3e340942d2 firewall dhcp-snoop-conflict-detection disable firewall dhcp-snoop-conflict-logging disable ip http server ip http secure-trustpoint default-trustpoint ip http secure-server ip ssh ip telnet...

  • Page 194

    2-144 Motorola RF Switch CLI Reference Guide interface vlan1 ip address 172.16.10.2/24 rtls rfid espi sole line con 0 line vty 0 24 RFS7000(config)#...

  • Page 195: Upgrade-status

    Common Commands 2-145 2.1.58 upgrade-status  Privilege / Global Config Displays the last image-upgrade status Syntax show upgrade-status {detail} Parameters None Example RFSwitch#show upgrade-status Last Image Upgrade Status : Successful Last Image Upgrade Time : Mon May 21 16:27:40 2010 RFSwitch#...

  • Page 196: Mac-name

    2-146 Motorola RF Switch CLI Reference Guide 2.1.59 mac-name  User /Privilege Exec Displays the configured MAC name Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show mac-name Parameters None Example RFSwitch(config-wireless)#show mac-name Index MAC Address...

  • Page 197: Firewall

    Common Commands 2-147 2.1.60 firewall  Priv Exe Mode Displays wireless firewall Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show firewall [config|dhcp|flow] show firewall [config|dhcp snoop-table|flow timeouts] Parameters firewall [config|dhcp Displays firewall configuration information. snoop-table| •...

  • Page 198: Role

    2-148 Motorola RF Switch CLI Reference Guide 2.1.61 role  Priv Exe Mode Displays existing role name Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show role [<role-name>|mobile-units] Parameters role [<role-name>| Displays existing role name mobile-units] •...

  • Page 199: Virtual-ip

    Common Commands 2-149 2.1.62 virtual-IP  Global Config Mode Displays all the virtual-IPs present in the configuration Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show virtual-ip [config|status] Parameters show virtual-ip Displays all the virtual-ip’s present in the configuration. [config|status] •...

  • Page 200

    2-150 Motorola RF Switch CLI Reference Guide RFS7000>show virtual-ip config RFS7K-1(config)#show virtual-ip config Virtual-IP Status : Enabled Cluster Redundancy Status : Enabled Priority Selection Mode : Automatic Learning Timeout(sec) Advertisement Timeout(sec) Gratuitous ARP Timeout(sec) : 180 Virtual-IP Server Port : 51525 Switch IP : 192.168.11.4...

  • Page 201

    Common Commands 2-151 Total Number of Peers Peer Status Information +--------------------------------------------------------- -------------+ Peer IP Status Advts Sent Advts Recvd +--------------------------------------------------------- -------------+ | 192.168.11.5 | Slave 600214 +--------------------------------------------------------- -------------+ Virtual IP Master Details +--------------------------------------------------+ | Vlan | Priority | SwitchID Virtual IP ---------------------------------------------------+ | 3232238340| 192.168.11.4|...

  • Page 202

    2-152 Motorola RF Switch CLI Reference Guide RFS7K-1(config)#no virtual-ip vmac Removes the configured vmac on the switch...

  • Page 203: Wwan

    Common Commands 2-153 2.1.63 wwan  Common to all modes Configures wireless wan feature Supported in the following platforms: • RFS6000 • RFS4000 Syntax show wwan [config|dns-server] Parameters config Displays wwan signal configuration dns-server Displays wwan DNS server addresses Example RFS6000#show wwan config Access Port Name : isp.cingular Auth-type: chap...

  • Page 204

    2-154 Motorola RF Switch CLI Reference Guide output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0 collisions 0 RFS6000# RFS6000#show ip interface brief Interface IP-Address/Mask Status Protocol 10.1.1.100/24 down vlan1 192.168.1.1/24 vlan11 192.168.11.1/24 vlan2 64.171.249.249/24 166.129.246.245/32 up...

  • Page 205: Aap-wlan-acl

    Common Commands 2-155 2.1.64 aap-wlan-acl  Privilege / Global Config Applies an ACL on WLAN for AAP Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax In RFS6000, show aap-wlan-acl [<1-32>|all] In RFS7000, show aap-wlan-acl [<1-256>|all] Parameters aap-wlan-acl [<1-32>|all] Applies an ACL on wlan for an aap.

  • Page 206: Aap-wlan-acl-stats

    2-156 Motorola RF Switch CLI Reference Guide 2.1.65 aap-wlan-acl-stats  Privilege / Global Config Displays the acl stats for wlan Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show aap-wlan-acl-stats Parameters aap-wlan-acl-stats Displays IP filtering wlan based statistics...

  • Page 207: Protocol-list

    Common Commands 2-157 2.1.66 protocol-list  Common to all Modes Displays the list of protocols Supported in the following platforms: • RFS7000 • RFS6000 Syntax show protocol-list Parameters show protocol-list Displays the list of protocols Example RFS6000(config)#show protocol-list Protocol Name Protocol Number icmp igmp...

  • Page 208: Service-list

    2-158 Motorola RF Switch CLI Reference Guide 2.1.67 service-list  Common to all Modes Displays the list of services Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax show service-list Parameters show service-list Displays the list of services...

  • Page 209: User Exec Commands

    User Exec Commands Logging in to the switch places you within the USER EXEC command mode. Typically, a login requires a user name and password. You have three login attempts before a connection attempt is refused. USER EXEC commands (available at the user level) are a subset of the commands available at the privileged level.

  • Page 210

    Motorola RF Switch CLI Reference Guide Table 3.1 User Exec Mode Command Summary Command Description Ref. exit Ends the current mode and moves down to the page 2-3 previous mode help Describes the interactive help system page 2-4 logout Exits the EXEC mode...

  • Page 211: Clear

    User Exec Commands 3.1.1 clear  User Exec Commands Resets the previous (last saved) command Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 NOTE: Refer to the interface details below when using clear counter interface • ge <index> – RFS4000 supports 4GEs and RFS6000 supports 8 GEs •...

  • Page 212

    Motorola RF Switch CLI Reference Guide Parameters crypto [ipsec|isakmp] sa Clears IPSec/ISAKMP SAs for a given peer {<IP>} • ipsec sa {<IP> } – Clears IPSec SA’s • isakmp sa {<IP> } – Clears ISAKMP SA’s • sa – Clears all IPSec/ISAKMP SA's •...

  • Page 213: Cluster-cli

    User Exec Commands 3.1.2 cluster-cli  User Exec Commands Use this command to enter the cluster-cli context. The cluster-cli context provides centralized management to configure all cluster members from any one member. Any command executed under this context will be executed to all the switches in the cluster. A new context redundancy supports the cluster-cli.

  • Page 214: Disable

    Motorola RF Switch CLI Reference Guide 3.1.3 disable  User Exec Commands Enables the PRIV mode to use the disable command. Use the command to exit disable the PRIV mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000...

  • Page 215: Enable

    User Exec Commands 3.1.4 enable  User Exec Commands Use the enable command to enter the PRIV mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax enable Parameters None Example RFSwitch>enable RFSwitch#...

  • Page 216: Logout

    Motorola RF Switch CLI Reference Guide 3.1.5 logout  User Exec Commands Use this command instead of the command to exit the EXEC mode exit Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax logout Parameters None...

  • Page 217: Page

    User Exec Commands 3.1.6 page  User Exec Commands Use the command to toggle the switch paging function. Enabling this command displays the CLI command output page by page, instead of running the entire output at once. Supported in the following platforms: •...

  • Page 218: Ping

    3-10 Motorola RF Switch CLI Reference Guide 3.1.7 ping  User Exec Commands Sends ICMP echo messages to a user-specified location Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax ping {[<IP>|<hostname>]} Parameters ping {[<IP>|<hostname>]} Pings the specified destination IP address or hostname.

  • Page 219: Quit

    User Exec Commands 3-11 3.1.8 quit  User Exec Commands Use this command to exit the current mode and move to the previous mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax quit Parameters None Example The switch logs off upon execution of the command...

  • Page 220: Telnet

    3-12 Motorola RF Switch CLI Reference Guide 3.1.9 telnet  User Exec Commands Opens a telnet session Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax telnet <IP> port Parameters telnet <IP> port Defines the IP address or hostname of a remote system •...

  • Page 221

    User Exec Commands 3-13 3.1.10 terminal  User Exec Commands Sets the length/number of lines displayed within the terminal window Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax terminal [length <0-512>|no [length <0-512>|width]| width <0-512>] Parameters length <0-512>...

  • Page 222: Traceroute

    3-14 Motorola RF Switch CLI Reference Guide 3.1.11 traceroute  User Exec Commands Traces the route to its defined destination Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax traceroute [[<IP>|<hostname>]|ip [<IP>|<hostname>]] Parameters [<IP>|<hostname>] Traces the route to a destination IP address or a hostname ip [<IP>|<hostname>]...

  • Page 223: Priv Exec Command

    Privileged Exec Commands Most PRIV EXEC commands set operating parameters. Privileged-level access is password protected to prevent unauthorized use. The PRIV EXEC command set includes commands contained within the USER EXEC mode. The PRIV EXEC mode also provides access to configuration modes, and includes advanced testing commands.

  • Page 224

    Motorola RF Switch CLI Reference Guide Table 4.1 Priv Exec Mode Command Summary Command Description Ref. clear Resets switch functions to last saved configuration page 4-9 clock Configures the software system clock page 4-13 clrscr Clears the displayed screen page 2-2...

  • Page 225

    Privileged Exec Commands Table 4.1 Priv Exec Mode Command Summary Command Description Ref. Negates a command or sets its defaults page 2-5 page Toggles the paging function page 4-39 ping Sends ICMP echo messages to a specified location page 4-40 Displays the current directory page 4-41 quit...

  • Page 226: Acknowledge

    Motorola RF Switch CLI Reference Guide 4.1.1 acknowledge  Priv Exec Command Acknowledges alarms Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax acknowledge alarm-log [<1-65535>|all] Parameters alarm-log [<1-65535>|all] Acknowledges alarms • <1-65535> – Acknowledges the specific alarm ID •...

  • Page 227: Archive

    Privileged Exec Commands 4.1.2 archive  Priv Exec Command Manages file archive operations Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax archive tar /table [<FILE>|<URL>] archive tar /create [<FILE>|<URL>] [<FILE>|<DIR>] archive tar /xtract [<FILE>|<URL>] <DIR> Parameters Manipulates (creates, lists or extracts) a tar file /table Lists the files in a tar file...

  • Page 228

    Motorola RF Switch CLI Reference Guide flash/log/startup.log flash/log/radius/ RFSwitch#dir flash:/ How to view the output tar file? Directory of flash:/ drwx 1024 Thu Apr 17 08:25:50 2010 hotspot drwx Fri Apr 8 12:27:20 2010 drwx 1024 Thu Apr 7 16:23:34 2010...

  • Page 229

    Privileged Exec Commands 4.1.3 cd  Priv Exec Command Changes the current directory Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax cd {<DIR>} Parameters <DIR> Changes current directory to DIR. This parameter is optional. When this parameter is not provided, the current directory name is displayed.

  • Page 230: Change-passwd

    Motorola RF Switch CLI Reference Guide 4.1.4 change-passwd  Priv Exec Command Changes the password of a logged user Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax change-passwd Parameters None Usage Guidelines A password must be between 8 to 32 characters in length. For security, the console does not display user entered key words or the old password and new password fields.

  • Page 231

    Privileged Exec Commands 4.1.5 clear  Priv Exec Command Resets the current context Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clear [aclstats|alarm-log|arp-cache|counters|crypto| dosstats|ip|logging|mac-address-table|mobility| spanning-tree] clear [aclstats|arp-cache|dosstats|logging] clear alarm-log [<1-65535>|acknowledge|all|new] clear counters [all|bridge|firewall|igmp-snooping|interface| router|thread] clear counters interface [<interface>|all|ge <1-8>|me1|sa <1-4>|up1|vlan <1-4094>] NOTE: In RFS4000, clear counters interface [<interface>|all|ge <1-5>|me1|...

  • Page 232

    4-10 Motorola RF Switch CLI Reference Guide clear spanning-tree detected-protocols {interface <interface-name>} Parameters aclstats Clears ACl statistics alarm-log [<1-65535>| Clears the alarm-log acknowledge|all|new] • <1-65535> – Clears the specific alarm ID • acknowledge – Clears acknowledged alarms • all – Clear all alarms •...

  • Page 233

    Privileged Exec Commands 4-11 ip [dhcp| Clears Internet Protocol (IP) DHCP/NAT pmtu-discovery- • dhcp binding [*|<IP>|all]– DHCP server configuration blackhole-cache] • binding [*|<IP>|all]– DHCP address bindings • * – Clears all bindings • <IP> – Clears a specific IP binding •...

  • Page 234

    4-12 Motorola RF Switch CLI Reference Guide mobility [event-log| Clears mobility attributes mobile-unit| • event-log [mobile-unit|peer]– Clears the event log peer-statistics] • mobile-unit – Clears MU event-logs for • peer – Clears peer event logs • mobile-unit [<MAC>|all|foreign-database home-database] – Clears MU information.

  • Page 235

    Privileged Exec Commands 4-13 4.1.6 clock  Priv Exec Command Configures the software system clock Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clock set HH:MM:SS <1-31> <MONTH> <1993-2035> Parameters HH:MM:SS Sets the time in hours, minutes, and seconds <1-31>...

  • Page 236

    4-14 Motorola RF Switch CLI Reference Guide 4.1.7 cluster-cli  Priv Exec Command Use this command to access the cluster-cli context. The cluster-cli context provides centralized management to configure all members of cluster from one member. Any command executed under this context is executed on all switches in the cluster.

  • Page 237: Configure

    Privileged Exec Commands 4-15 4.1.8 configure  Priv Exec Command Enters the configuration mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax configure terminal Parameters terminal Enables configuration from the terminal Example RFSwitch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. RFSwitch(config)#...

  • Page 238: Copy

    4-16 Motorola RF Switch CLI Reference Guide 4.1.9 copy  Priv Exec Command Copies any file (config,log,txt ...etc) from any location to the switch and vice-versa NOTE: Copying a new config file onto an existing running-config file merges it with the existing running-config on the switch. Both, the existing running-config and the new config file are applied as the current running-config.

  • Page 239: Debug

    Privileged Exec Commands 4-17 4.1.10 debug  Priv Exec Command Use this command for debugging Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax debug [all|cc|ccstats|certmgr|dhcpsvr|imi|ip|logging|mgmt| mobility|mstp|nsm|radius|redundancy|rns|securitymgr|sole] debug all debug cc [access-port|all|alt|ap-containment|ap-detect| capwap|cluster|config|dot11|eap|ids|kerberos|l3-mob| loc-ap|loc-mu|media|mobile-unit|radio|radius|self-heal| smart|snmp|system|wips|wisp|wlan] {[debug|err|info|warn]} debug ccstats <statsmodule> debug [certmgr|dhcpsvr] [all|error|info] debug imi [all|cli-client|cli-server|errors|init|ntp] debug ip [https|ssh]...

  • Page 240

    4-18 Motorola RF Switch CLI Reference Guide cc [access-port|all|alt| Cellcontroller (wireless) debugging message ap-containment| • access-port [debug|err|info|warn] – Debugs access port apetect|capwap|cluster| logs config|dot11|eap|ids| • debug ebugs all default messages – D kerberos|l3-mob|loc-ap| • err – Debugs error and higher severity messages loc-mu|media| •...

  • Page 241

    Privileged Exec Commands 4-19 ccstats <stats-module> Cellcontroller statistics (wireless) debugging messages • stats-module [debug|error|info|warn] – Statistics Module to be debugged • debug – Debugs all default messages • err – Debugs error and higher severity messages • info – Debugs information and higher severity messages •...

  • Page 242

    4-20 Motorola RF Switch CLI Reference Guide ip [https|ssh] Internet protocol debugging messages • https – Secure HTTP <HTTPS> Server • ssh – Secure Shell <SSH> Server logging Modify message logging facilities for debugging messages [all|errors|init|monitor| • all – All debugging subagent] •...

  • Page 243

    Privileged Exec Commands 4-21 mstp Multiple Spanning Tree Protocol (MSTP) debugging [all|cli|packet|protocol| message timer] • all – all • cli – CLI commands • packet [rx|tx] – MSTP packets • rx – receive packet • tx – transmit packet • protocol detail – Protocol •...

  • Page 244

    4-22 Motorola RF Switch CLI Reference Guide redundancy Redundancy protocol debugging messages [all|ccmsg|config|errors| • all – Debugging all general|heartbeats|init| • ccmsg – Msg exchange with CC packets|proc|shutdown| • config – Configuration processing states|subagent|timer| • errors – Errors warnings] • general – General •...

  • Page 245

    Privileged Exec Commands 4-23 securitymgr Security manager debugging messages [acldebug|aclerror|all| • acldebug – Trace debug messages from ACL module debug|dosdebug| • aclerror – Trace error messages from ACL module doserror|error|ikedebug| • all – Trace all messages from Security Manager natdebug|naterror| •...

  • Page 246

    4-24 Motorola RF Switch CLI Reference Guide sole [adapters|aeroscout| Location engine debugging messages algo|all|cclib|ekahau|erro • adapters – SOLE Adapter manager logs rs|info|init] • aeroscout – Aeroscout logs • algo – Location algorithm logs • all – All module logs • cclib – cc library logs •...

  • Page 247: Delete

    Privileged Exec Commands 4-25 4.1.11 delete  Priv Exec Command Deletes a specified file from the system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax delete [/force <FILE>|/recursive <FILE>|<FILE>] Parameters /force Forces deletion without a prompt /recursive Performs a recursive delete Specifies the filename(s) to be deleted...

  • Page 248: Diff

    4-26 Motorola RF Switch CLI Reference Guide 4.1.12 diff  Priv Exec Command Displays the differences between 2 files Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax diff [<FILE>|<URL>] [<FILE>|<URL>] Parameters <FILE> The first <FILE> is the source file for the diff. The second <FILE>...

  • Page 249

    Privileged Exec Commands 4-27 rad-user sumi policy wlan 2 policy vlan 44 policy wlan 10 group kumar3...

  • Page 250

    4-28 Motorola RF Switch CLI Reference Guide 4.1.13 dir  Priv Exec Command View the list of files on a filesystem Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax dir {[/all|/recursive] [<DIR>|all-filesystems]} Parameters /all Lists all files...

  • Page 251

    Privileged Exec Commands 4-29 4.1.14 disable  Priv Exec Command Turns off the privileged mode command Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax disable Parameters None Example RFSwitch#disable RFSwitch>...

  • Page 252: Edit

    4-30 Motorola RF Switch CLI Reference Guide 4.1.15 edit  Priv Exec Command Edits a text file Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax edit <FILE> Parameters <FILE> Name of the file to be modified...

  • Page 253

    Privileged Exec Commands 4-31 4.1.16 enable  Priv Exec Command Turns on the privileged mode command Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax enable Parameters None Example RFSwitch#enable RFSwitch#...

  • Page 254: Erase

    4-32 Motorola RF Switch CLI Reference Guide 4.1.17 erase  Priv Exec Command Erases a target filesystem Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax erase [nvram:|flash:|startup-config|usb1:|usb2:|cf:] Parameters nvram: Erases everything in nvram flash: Erases everything in flash...

  • Page 255: Halt

    Privileged Exec Commands 4-33 4.1.18 halt  Priv Exec Command Stops (halts) the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax halt Parameters None Example RFSwitch#halt Wireless switch will be halted, do you want to continue? (y/n): y Do you want to save current configuration? (y/n/d): y [OK]...

  • Page 256: Kill

    4-34 Motorola RF Switch CLI Reference Guide 4.1.19 kill  Priv Exec Command Kills (terminates) a specified session and stops (halts) the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax kill session <1-16> Parameters session...

  • Page 257

    Privileged Exec Commands 4-35 4.1.20 logout  Priv Exec Command Exits the EXEC mode and stops (halts) the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax logout Parameters None Example RFSwitch#logout RFSwitch release 4.3.0.0-200B Login as 'cli' to access CLI. RFSwitch login:...

  • Page 258: Mkdir

    4-36 Motorola RF Switch CLI Reference Guide 4.1.21 mkdir  Priv Exec Command Creates a new directory in the filesystem Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax mkdir <DIR> Parameters <DIR> Directory name Example RFSwitch#mkdir TestDIR...

  • Page 259: More

    Privileged Exec Commands 4-37 4.1.22 more  Priv Exec Command Displays the contents of a file Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax more <FILE> Parameters <FILE> Displays the contents of the file Example RFSwitch#more flash:/log/messages.log Sep 08 12:27:30 2010: %PM-5-PROCSTOP: Process "radiusd"...

  • Page 260

    4-38 Motorola RF Switch CLI Reference Guide User 'admin' logged in with role of ' superuser' from auth source 'local' Sep 08 12:28:01 2010: %NSM-6-DHCPDEFRT: Default route with gateway 157.235.208.246 learnt via DHCP Sep 08 12:28:01 2010: %NSM-6-DHCPIP: Interface vlan1 acquired IP address 157.235.208.93/24 via DHCP...

  • Page 261

    Privileged Exec Commands 4-39 4.1.23 page  Priv Exec Command Toggles switch paging. Enabling this command displays the command output page by page instead of running the entire output at once. Supported in the following platforms: • RFS7000 • RFS6000 •...

  • Page 262

    4-40 Motorola RF Switch CLI Reference Guide 4.1.24 ping  Priv Exec Command Send (transmits) ICMP echo messages Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax ping {<IP>} Parameters <IP> Sets the ping destination address or hostname Example RFSwitch#ping 157.235.208.39...

  • Page 263

    Privileged Exec Commands 4-41 4.1.25 pwd  Priv Exec Command View the contents of the current directory Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax Parameters None Example RFSwitch#pwd flash:/ RFSwitch#...

  • Page 264

    4-42 Motorola RF Switch CLI Reference Guide 4.1.26 quit  Priv Exec Command Exits the current mode and moves to the previous mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax quit Parameters None Example RFSwitch#quit RFSwitch release 4.3.0.0-XXXX...

  • Page 265: Reload

    Privileged Exec Commands 4-43 4.1.27 reload  Priv Exec Command Halts the switch and performs a warm reboot Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax reload Parameters None Example RFSwitch#reload...

  • Page 266: Rename

    4-44 Motorola RF Switch CLI Reference Guide 4.1.28 rename  Priv Exec Command Renames a file in the existing filesystem Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax rename <FILE> <FILE> Parameters <FILE> Specifies the file to rename. The first <FILE> is the old file name.

  • Page 267: Rmdir

    Privileged Exec Commands 4-45 4.1.29 rmdir  Priv Exec Command Deletes an existing file from the file system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax rmdir <DIR> Parameters <DIR> Defines the name of the directory to delete Example RFSwitch#rmdir flash:/NewTestDir/ RFSwitch#DIR...

  • Page 268

    4-46 Motorola RF Switch CLI Reference Guide 4.1.30 telnet  Priv Exec Command Opens a telnet session Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax telnet <IP> {<port>} Parameters telnet <IP> {<port>} Defines the IP address or hostname of a remote system •...

  • Page 269

    Privileged Exec Commands 4-47 4.1.31 terminal  Priv Exec Command Sets the length/number of lines displayed within the terminal window Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax terminal [length <0-512>|no [length <0-512>|width]| width <0-512>] Parameters length <0-512>...

  • Page 270

    4-48 Motorola RF Switch CLI Reference Guide 4.1.32 traceroute  Priv Exec Command Traces a route to a destination Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax traceroute [[<IP>|<hostname>]|ip [<IP>|<hostname>]] Parameters [<IP>|<hostname>] Traces the route to a destination IP address or a hostname ip [<IP>|<hostname>]...

  • Page 271: Upgrade

    Privileged Exec Commands 4-49 4.1.33 upgrade  Priv Exec Command Upgrades the software image Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax upgrade <URL> {background} Parameters <URL> Location of the target firmware image used in upgrade background Optional.

  • Page 272

    4-50 Motorola RF Switch CLI Reference Guide kernel/ISR 100.00%) Sep 08 15:58:44 2009: %PM-4-PROCNORESP: Process "logd" is not responding Jan 08 15:58:44 2009: %PM-4-PROCNORESP: Process "logd" is not responding Jan08 15:58:44 2009: %PM-4-PROCNORESP: Process "logd" is not responding Jan 08 15:58:44 2009: %PM-4-PROCNORESP: Process "logd"...

  • Page 273: Upgrade - Abort

    Privileged Exec Commands 4-51 4.1.34 upgrade-abort  Priv Exec Command Aborts an ongoing upgrade process Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax upgrade-abort Parameters None Example RFSwitch#upgrade-abort...

  • Page 274: Write

    4-52 Motorola RF Switch CLI Reference Guide 4.1.35 write  Priv Exec Command Writes the running configuration to memory or a terminal Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax write [memory|terminal] Parameters memory Writes to NV memory...

  • Page 275

    Privileged Exec Commands 4-53 ip http secure-trustpoint local ip http secure-server ip ssh ip telnet snmp-server manager v2 snmp-server manager v3 crypto isakmp identity address crypto isakmp keepalive 10 crypto ipsec security-association lifetime kilobytes 4608000 !........

  • Page 276: Format

    4-54 Motorola RF Switch CLI Reference Guide 4.1.36 format  Priv Exec Command Formats file system Supported in the following platforms: • RFS7000 Syntax format cf: Parameters Formats compact flash Example RFSwitch#format cf:...

  • Page 277: Global Configuration Commands

    Global Configuration Commands The term global is used to indicate characteristics or features effecting the system as a whole. Use the Global Configuration Mode to configure the system globally, or enter specific configuration modes to configure specific elements (such as interfaces or protocols).

  • Page 278: Global Configuration Commands

    Motorola RF Switch CLI Reference Guide 5.1 Global Configuration Commands Table 5.1 summarizes the Global Config commands Table 5.1 Global Config Mode Command Summary Command Description Ref. Configures the current authentication, authorization page 5-5 and accounting (aaa) login settings access-list...

  • Page 279

    Global Configuration Commands Table 5.1 Global Config Mode Command Summary Command Description Ref. dns-whitelist Specifies a list of hosts (IPs or DNS names) for which page 5-54 Internet access is allowed to hotspot users before authentication. interface Defines an interface to configure page 5-55 Internet Protocol (IP) page 5-57...

  • Page 280

    Motorola RF Switch CLI Reference Guide Table 5.1 Global Config Mode Command Summary Command Description Ref. show Displays the running system information page 2-38 service Service commands page 5-94 smtp-notification Modifies SMTP notification parameters page 5-97 snmp-server Modifies SNMP engine parameters...

  • Page 281

    Global Configuration Commands 5.1.1 aaa  Global Configuration Commands Configures the current Authentication, Authorization and Accounting (AAA) login settings Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax aaa [authentication|nas|vpn-authentication] aaa authentication login default [local|none|radius] aaa nas <name> aaa vpn-authentication [primary|secondary] <IP>...

  • Page 282

    Motorola RF Switch CLI Reference Guide vpn-authentication Sets the configuration for VPN authentication using [primary|secondary] RADIUS. [<IP> key [0 <secret>| • primary – Sets the configuration for the primary server 2 <secret>|<secret>] • secondary – Sets the configuration for the secondary {authport <1024-65535>}...

  • Page 283

    Global Configuration Commands 5.1.2 access-list  Global Configuration Commands Adds an Access List (ACL) entry. Use the command (under Global access-list Configuration) to configure the access list mechanism for filtering frames by protocol type or vendor code. ACLs control access to the network through a set of rules. Each rule specifies an action which is taken when a packet matches it within the given set of rules.

  • Page 284

    Motorola RF Switch CLI Reference Guide For Extended IP ACLs: access-list [<100-199>|<2000-2699>] [deny|permit|mark] [icmp|ip|tcp|upd] access-list [<100-199>|<2000-2699>] [deny|permit|mark] icmp [<source-IP/Mask>|any|host <IP>] [<dest-IP/Mask>|any|host <IP>] {<ICMP-type> {<ICMP-code>}} {log} {rule-precedence <1- 5000>} access-list [<100-199>|<2000-2699>] [deny|permit|mark]ip [<source-IP/Mask>|any|host <IP>] [<dest-IP/Mask>|any|host <IP>] {log} {rule-precedence <1-5000>} access-list [<100-199>|<2000-2699>] [deny|permit|mark] [tcp|udp] [<source-IP/Mask>|any|host <IP>] {eq...

  • Page 285

    Global Configuration Commands Parameters access-list Adds a standard access list entry. [<1-99>|<1300-1999>] • [<1-99>|<1300-1999>] – Defines access list number from [permit|deny] 1-99 or 1300-1999 [<IP/MASK>|any| • [deny|permit] – Defines action types on an ACL. host <IP>] {[rule- • [<IP/MASK>| host <IP>| any] – <IP/MASK> is the precedence <1-5000>...

  • Page 286

    5-10 Motorola RF Switch CLI Reference Guide access-list [<1- Adds a standard access list entry. 99>|<1300-1999>] • [<1-99>|<1300-1999>] – Defines access list number from mark [8021p <0- 1-99 or 1300-1999 7>|dscp <0-63>|tos • mark – Marks a packet. The action type mark <0-255>] [<IP/...

  • Page 287

    Global Configuration Commands 5-11 access-list Adds an Extended IP access list entry. [<100-199>|<2000- • (<100-199>|<2000-2699>) – For ICMP extended ACLs, the 2699>] [permit|deny] ACL must be between 2000-2699 [icmp|ip|tcp|udp] • [deny|permit] – Defines action types on an ACL. [<IP/MASK>|any| • [icmp|ip|tcp|udp] – The protocol type for the extended host <IP>] {[rule- ACL entry precedence <1-5000>...

  • Page 288

    5-12 Motorola RF Switch CLI Reference Guide access-list Adds an Extended IP access list entry. [<100-199>|<2000- • (<100-199>|<2000-2699>) – For ICMP extended ACLs, the 2699>] mask [8021p ACL must be between 2000-2699 <0-7>|dscp <0-63>|tos • mark – Marks a packet. The action type mark <0-255>]...

  • Page 289

    Global Configuration Commands 5-13 Use an access list command under the global configuration to create an access list. The switch supports port, router and WLAN ACLs • When the access list is applied on an Ethernet port, it becomes a port ACL •...

  • Page 290

    5-14 Motorola RF Switch CLI Reference Guide 5.1.3 autoinstall  Global Configuration Commands Autoinstalls the switch image Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax autoinstall [clear-config-history|cluster-config|config| image|reset-config|start] autoinstall [clear-config-history|reset-config|start] autoinstall [cluster-config|config] {url <URL>} autoinstall image {[url <URL>|version <version>]}...

  • Page 291

    Global Configuration Commands 5-15 config {url <URL>} Autoinstalls a config setup. • url – Optional. Sets the URL of the item • URL – Remote/external location of the file URLS: tftp://<hostname|IP>[:port]/path/file ftp://<user>:<passwd>@<hostname|IP>[:port]/ path/file http://<hostname|IP>[:port]/path/file cf:/path/file usb1:/path/file usb2:/path/file image {[url <URL>| Autoinstalls the image setup.

  • Page 292

    5-16 Motorola RF Switch CLI Reference Guide 5.1.4 banner  Global Configuration Commands Defines a login banner for the switch. Use to delete a previously configured {no} banner banner. Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax {no} banner motd [<message>|default]...

  • Page 293

    Global Configuration Commands 5-17 5.1.5 boot  Global Configuration Commands Reboots the switch with an image in the mentioned partition (either the primary or secondary partition) Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax boot system [primary|secondary] Parameters system Specifies the boot image used after reboot...

  • Page 294: Bridge

    5-18 Motorola RF Switch CLI Reference Guide 5.1.6 bridge  Global Configuration Commands Configures bridge specific commands Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 SWITCH NOTE: The interfaces mentioned below are supported in the following platforms: •...

  • Page 295

    Global Configuration Commands 5-19 Parameters bridge <bridge-group> Bridge groups available for bridging. address <MAC> • <bridgegroup> – Bridge group value between 1 and 32 [discard|forward] • address <MAC> – Unique hardware address in the [<interface>|ge <1-8>| HHHH.HHHH.HHHH format me1|sa <1-4>|up1| •...

  • Page 296

    5-20 Motorola RF Switch CLI Reference Guide RFSwitch(config)# RFSwitch(config)#bridge 2 address 1a2b:3c4d:5e6f forward eth 1 vlan 2 RFSwitch(config)#...

  • Page 297: Country-code

    Global Configuration Commands 5-21 5.1.7 country-code  Global Configuration Commands Sets the country of operation Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax {no} country-code <code> Parameters <code> A two (2) letter ISO-3166 country code. To view country codes, use the show wireless country-code-list command.

  • Page 298

    5-22 Motorola RF Switch CLI Reference Guide 5.1.8 crypto  Global Configuration Commands Use crypto to define system level local ID for ISAKMP negotiation and to enter the ISAKMP Policy, ISAKMP Client or ISAKMP Peer command set. NOTE: moves to the crypto isakmp(policy)Priority instance.

  • Page 299

    Global Configuration Commands 5-23 crypto isakmp [client|keepalive|key|peer|policy] crypto isakmp client configuration group default crypto isakmp keepalive <10-3600> crypto isakmp key [0 <secret>|2 <secret>|<secret>] [address <IP>|hostname <HOST>] crypto isakmp peer [address <IP>|dn <distinguished-name>| hostname <HOST>] crypto isakmp policy <1-10000> crypto key [export|generate|import|zeroize] crypto key export rsa <rsa-keypair>...

  • Page 300

    5-24 Motorola RF Switch CLI Reference Guide Parameters ipsec (security- Configures IPSEC policies. association| transform- • security-association – Defines the security association set) parameter used to define its lifetime • lifetime (kilobyte | seconds) – The lifetime of IPSEC security association. It can be defined in either: kilobytes –...

  • Page 301

    Global Configuration Commands 5-25 isakmp Configures the Internet Security Association and Key Management Protocol (ISAKMP) policy. [client|keepalive|key| • client configuration (group) (default) – Leads to the peer|policy] config-cryptogroup instance For more details see Crypto-group Instance on page 7-1. • keepalive <10-3600> – Sets a keepalive interval for use with remote peers.

  • Page 302

    5-26 Motorola RF Switch CLI Reference Guide Authentication key management functions. [export|generate|import| • export rsa <name> URL [tftp|ftp] – Exports a keypair related configuration zeroize] • generate rsa <name> <1024-2048> – Generates a keypair • <1024-2048> – Size of keypair in bits •...

  • Page 303

    Global Configuration Commands 5-27 pki [authenticate|enroll| Configures certificate parameters. The public key export|import|trustpoint] infrastructure is a protocol that creates encrypted public keys using digital certificates from certificate authorities. The PKI ensures each online party is who they claim to be. •...

  • Page 304

    5-28 Motorola RF Switch CLI Reference Guide Usage Guidelines Follow the table to calculate how many character are required to add the key size for authentication and encryption. This is used while configuring Manual IPSEC only. For example, To create a key with authentication type as ESP-SHA and encryption type as AES-192, enter 20+16=36 characters.

  • Page 305

    Global Configuration Commands 5-29 RFSwitch(config-crypto-map)#set session-key inbound esp 257 cipher 12345678901234567890123456789012345678901234 authenticator 12345678901234567890123456789012345678901234 RFSwitch(config-crypto-map)#set session-key outbound esp 258 cipher 12345678901234567890123456789012345678901234 authenticator 12345678901234567890123456789012345678901234 RFSwitch(config-crypto-map)#exit RFSwitch(config)#interface vlan11 RFSwitch(config-if)#crypto map manual RFSwitch(config-if)#show running-config ! configuration of RFS7000 version 1.2.0.0-024D version 1.1 aaa authentication login default none service prompt crash-info username "admin"...

  • Page 306

    5-30 Motorola RF Switch CLI Reference Guide crypto isakmp key 0 12345678 address 21.1.1.1 ........................crypto ipsec transform-set tfset1 esp-3des esp-sha-hmac mode tunnel crypto ipsec transform-set tfset-manual esp-3des esp-sha- hmac mode tunnel crypto map MAP1 10 ipsec-isakmp set peer 11.1.1.1...

  • Page 307

    Global Configuration Commands 5-31 set transform-set tfset-manual ........................interface vlan11 ip address 11.1.1.2/24 crypto map manual ........................RFSwitch(config-if)# Usage Guidelines A peer address can be deleted with a wrong isakmp value. Crypto currently matches only the IP address when a command is issued RFSwitch(config)#crypto isakmp key 12345678 address 4.4.4.4 RFSwitch(config)#show running-config...

  • Page 308: Use Case 1: Configuring Remote Vpn

    (trusted network) using IPSec VPN functionality. A Motorola client is associated to a WLAN (say wlan1) attached to vlan2 on the switch. vlan2 is on subnet 10.1.1.x and is running a DHCP server that assigns IP addresses for this subnet.

  • Page 309

    Global Configuration Commands 5-33 In case the client is VPN enabled, it initiates a connection with the VPN server on our switch, the “conversation” that occurs between the peers consists of device authentication via Internet Key Exchange (IKE), followed by user authentication using IKE Extended Authentication (Xauth), push client relate configuration (using Mode Configuration), and IPsec security association (SA) creation.

  • Page 310

    5-34 Motorola RF Switch CLI Reference Guide 4. Create and configure another VLAN interface named vlan3. RFSwitch(config)#interface vlan 3 RFSwitch(config-if)#ip address dhcp Use the commands below to configure IPSec VPN on the switch: 1. Create an Extended ACL. RFSwitch(config-ext-nacl)#ip access-list extended 101 2.

  • Page 311: Use Case 2: Configuring Site-to-site Vpn

    Global Configuration Commands 5-35 5.1.8.2 Use Case 2: Configuring Site-to-Site VPN Intranets use unregistered addresses connected over the public internet by site-to-site VPN. In this scenario, NAT is required for the connections to the public internet. However NAT is not required for traffic between the two intranets, which can be transmitted using a VPN tunnel over the public Internet.

  • Page 312

    5-36 Motorola RF Switch CLI Reference Guide RFSwitch(config-crypto-map)#set peer 15.1.1.20 RFSwitch(config-crypto-map)#match address 150 RFSwitch(config-crypto-map)#set transformset TFSET RFSwitch(config-crypto-map)#set security-association lifetime seconds 3600 f.Associate the crypto map with a VLAN interface. RFSwitch(config)#interface vlan1 RFSwitch(config-if)#ip address 11.1.1.10/24 RFSwitch(config-if)#crypto map THIRDMAP RFSwitch(config-if)#interface vlan2100 RFSwitch(config-if)#ip address 12.1.1.10/24 RFSwitch(config-if)#ip route 0.0.0.0/0 11.1.1.2...

  • Page 313

    Global Configuration Commands 5-37 RFSwitch(config-crypto-map)#set transformset TFSET RFSwitch(config-crypto-map)#set security-association lifetime seconds 3600 f.Associate the crypto map with a VLAN interface. RFSwitch(config)#interface vlan1 RFSwitch(config-if)#ip address 15.1.1.20/24 RFSwitch(config-if)#crypto map THIRDMAP RFSwitch(config-if)#interface vlan2100 RFSwitch(config-if)#ip address 13.1.1.20/24 RFSwitch(config-if)#ip route 0.0.0.0/0 15.1.1.2...

  • Page 314

    5-38 Motorola RF Switch CLI Reference Guide 5.1.9 do  Global Configuration Commands Runs commands from either the User Exec or Priv Exec mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax do <privilege mode commands>...

  • Page 315

    Global Configuration Commands 5-39 5.1.10 end  Global Configuration Commands Ends the current mode and changes to the EXEC mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax Parameters None. Example RFSwitch(config)#end RFSwitch#? Priv Exec commands: acknowledge Acknowledge alarms archive...

  • Page 316: Errdisable

    5-40 Motorola RF Switch CLI Reference Guide 5.1.11 errdisable  Global Configuration Commands Enables the timeout mechanism for the port to be enabled back after an error Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax errdisable recovery [cause bpduguard|interval <10-1000000>]...

  • Page 317

    Global Configuration Commands 5-41 5.1.12 ftp  Global Configuration Commands Configures the switch as an FTP server Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax ftp [enable|password|rootdir|username] ftp password [0 <secret>|1 <secret>|<secret>] ftp rootdir <DIR> ftp username <LINE> Parameters enable Enables the FTP server...

  • Page 318

    5-42 Motorola RF Switch CLI Reference Guide Usage Guidelines NOTE: The string size of encrypted password (option 1, Password is encrypted with SHA1 algorithm) must be exactly 40 characters. Example RFSwitch(config)#ftp enable RFSwitch(config)#...

  • Page 319: Hostname

    Global Configuration Commands 5-43 5.1.13 hostname  Global Configuration Commands Changes the system’s network name Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax hostname <host-name> Parameters <host-name> The name of the switch. This name is displayed when the switch is accessed from any network.

  • Page 320: Hotspot

    5-44 Motorola RF Switch CLI Reference Guide 5.1.14 hotspot  Global Configuration Commands Displays the configuration commands for wired hotspots Supported in the following platforms: RFS7000 RFS6000 RFS4000 Syntax hotspot vlan[<1-4094>|VLAN][accounting|allow- list|connection-mode|dns-whitelist|enable|radius|redirect- to-hostname|simultaneous users|syslog|webpage|webpage- location] hotspot vlan[<1-4094>|VLAN]accounting[none|radius|syslog] hotspot vlan[<1-4094>|VLAN]allow-list <1-32> <A.B.C.D>...

  • Page 321

    Global Configuration Commands 5-45 hotspot vlan[<1-4094>|VLAN]webpage[external|internal] hotspot vlan[<1-4094>|VLAN]webpage external[failure<URL>|login<URL>|welcome<URL>] hotspot vlan[<1-4094>|VLAN]webpage internal[failure|login|terms|welcome] hotspot vlan[<1-4094>|VLAN]webpage internal[failure|login]<URL> hotspot vlan[<1-4094>|VLAN]webpage internal terms [description <LINE>|header <LINE>] hotspot vlan[<1-4094>|VLAN]webpage internal welcome [description|footer|header]<LINE> hotspot vlan[<1-4094>|VLAN]webpage internal welcome [main- logo|small-logo]<URL> hotspot vlan[<1-4094>|VLAN]webpage- location[advanced|external|internal] hotspot vlan[<1-4094>|VLAN]webpage-location internal {logout-on-browser-close} Parameters vlan[<1-4094>|VLAN] Specifies the VLAN on which a wired hotspot has to be...

  • Page 322

    5-46 Motorola RF Switch CLI Reference Guide allow-list Modifies the hotspot allow-list parameters. <1-32> <A.B.C.D> Unauthenticated users will be allowed access to the IP addresses in the allow-list field. • <1-32> – Allow-list rule index • <A.B.C.D> – Refers to a specific IP address to which unauthenticated wired hosts can connect to.

  • Page 323

    Global Configuration Commands 5-47 radius[accounting| Modifies Radius-related parameters authentication- • accounting [mode|server|timeout] – Describes the protocol|dscp| Radius accounting parameters dynamic-authorization • mode start-interim-stop interval <60-3600> – |server] Specifies the accounting mode on this VLAN • start-interim-stop interval <60-3600> – Sends Accounting Start-Interim-Stop •...

  • Page 324

    5-48 Motorola RF Switch CLI Reference Guide • CHAP – Challenge Handshake Authentication Protocol • PAP – Password Authentication Protocol • dscp <1-63> – Specifies a Differentiated Services Code Point (DSCP) value to provide QoS to Radius packets • <1-63> – Specifies the DSCP value •...

  • Page 325

    Global Configuration Commands 5-49 simultaneous users Enforces that a particular username can only be used by a <0-2000> certain number of MAC addresses at a time. • <0-2000> – The number of MAC addresses that are allowed to use that username at the same time. The value 0 implies disabling this feature.

  • Page 326

    5-50 Motorola RF Switch CLI Reference Guide webpage Modifies the hotspot page parameters. [external|internal] • external [failure|login|welcome] – Modifies the hotspot External page • failure <URL> – Users are redirected to this web page if they fail in the authentication •...

  • Page 327

    Global Configuration Commands 5-51 • <URL> – Specifies the URL from where the image is loaded and cached onto the wireless switch • title <LINE> – Displays the title text • <LINE> – A string of upto 2048 characters • login – Users are prompted for their username and password on this web page.

  • Page 328

    5-52 Motorola RF Switch CLI Reference Guide • welcome [description|header|footer|main-logo|small- logo|title] – Users are redirected to this web page when they are authenticated successfully. • description<LINE> – Text that is displayed as the main body of the web page • header<LINE> – Text that is displayed as the header of the web page •...

  • Page 329

    Global Configuration Commands 5-53 Example RFSSwitch(config)#hotspot vlan 8 radius server primary 1.2.3.4 auth-port 1812 RFSSwitch(config)# RFSSwitch(config)#hotspot vlan 8 allow-list 30 1.2.3.4 RFSSwitch(config)# RFSSwitch(config)#hotspot vlan 8 simultaneous-users 1000 RFSSwitch(config)#...

  • Page 330: Dns-whitelist

    5-54 Motorola RF Switch CLI Reference Guide 5.1.15 dns-whitelist  Global Configuration Commands Specifies a list of hosts (IPs or DNS names) for which Internet access is allowed to hotspot users before authentication. Syntax dns-whitelist <NAME> Parameters <NAME> The name of the DNS whitelist.

  • Page 331: Interface

    Global Configuration Commands 5-55 5.1.16 interface  Global Configuration Commands Configures a selected interface This command is used to enter the interface configuration mode for the specified physical Switch Virtual Interface (SVI) interface. If the VLANx (SVI) interface does not exist, it is automatically created.

  • Page 332

    5-56 Motorola RF Switch CLI Reference Guide Parameters <interface-name> The name of the interface that is selected ge <1-8> Gigabit Ethernet interface (4 for RFS7000 and 8 for RFS6000) Fast Ethernet interface sa <1-4> Static Aggregate interface (in RFS7000 only) WAN interface (in RFS6000 only) vlan <1-4094>...

  • Page 333

    Global Configuration Commands 5-57 5.1.17 ip  Global Configuration Commands Configures a selected Internet Protocol (IP) component Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 NOTE: Using moves you to the access-list extended instance. For more information, see (config-ext-nacl) Chapter , Extended ACL Instance.

  • Page 334

    5-58 Motorola RF Switch CLI Reference Guide ip dhcp excluded-address <IP-range-low> {<IP-range-high>} ip dhcp option <option-name> <option-code> [ascii|ip] ip dhcp ping timeout <1-10> ip dhcp pool <pool-name> ip domain-name <domain-name> ip dos [ascend|bcast-mcast-icmp|chargen|enable|fraggle| ftp-bounce|invalid-protocol|option-route| router-solicit|router-advt| smurf|snork|tcp-intercept|tcp-max-incomplete|twinge] log [<0-8>|alerts|critical|debugging|emergencies|error| informational|none|notifications|warnings] ip http [secure-server|secure-trustpoint|server] ip http [secure-server|server] ip http secure-trustpoint <trustpoint-name>...

  • Page 335

    Global Configuration Commands 5-59 ip nat inside destination static <IP> <port> [tcp|udp] <outside-global-IP> {<outside-port>} ip nat inside destination static <IP> {<outside-global-IP> <outside-port>} ip nat inside source list <acl-name> interface [<interface- name>|vlan <1-4094>] overload ip nat inside source static <local-IP> <outside-global-IP> ip nat outside destination static <IP>...

  • Page 336

    5-60 Motorola RF Switch CLI Reference Guide ip dhcp [bootp|class| DHCP server configuration excluded-address|option| • bootp ignore – Defines the BOOTP specific configuration. ping|pool] • ignore – Configures the DHCP server to ignore BOOTP requests • class <class-name> – Defines a DHCP class and enters the DHCP class configuration mode •...

  • Page 337

    Global Configuration Commands 5-61 http [secure-server| Hyper Text Transfer Protocol (HTTP) configuration secure-trustpoint| • secure-server – Sets the device to start the Secure HTTP server] Server (HTTPS) • secure-trustpoint <trustpoint-name> – Sets the name of the trustpoint used for secure connection to <trustpoint- name>...

  • Page 338

    5-62 Motorola RF Switch CLI Reference Guide nat [inside|outside] Defines Network Address Translation (NAT) configuration [destination|source] values. These following commands are possible for NAT • ip nat [inside|outside] destination static <IP> <port> [tcp|udp] <outside-global-IP> {<outside-port>} – Sets the parameters for translation for inside destination •...

  • Page 339

    Global Configuration Commands 5-63 • ip nat [inside|outside] source static <outside-global-IP> <local-IP> – Sets the parameters for translation for inside sources • inside – Indicates inside address translation • outside – Indicates outside address translation • source – Indicates source address translation •...

  • Page 340

    5-64 Motorola RF Switch CLI Reference Guide dos [ascend| Configures the Denial of Service (DOS) attack parameters. bcast-mcast-icmp| • ascend – Enables Ascend DoS checks chargen|enable|fraggle| • bcast-mcast-icmp – Detects Broadcast/Multicast Icmp ftp-bounce| traffic as attack invalid-protocol| • chargen – Enables chargen DoS checks option-route|router-advt| •...

  • Page 341

    Global Configuration Commands 5-65 • tcp -max-incomplete – Configures the maximum half- open TCP connections in the system • high <1-1000> – Sets the upper threshold value between 1 and 1000 • low <1 - 1000> – Sets the lower threshold value between 1 and1000...

  • Page 342

    5-66 Motorola RF Switch CLI Reference Guide igmp snooping Configures IGMP Snooping parameters. {[querier|unknown- • unknown-multicast-fwd – Optional. Forwards packets multicast-fwd|vlan]} from unregistered multicast servers • querier {[address|max-response-time|query- interval|timer|version]}}– Configures IGMP querier. All options are optional • address <IP> – Sets GMP querier source IP address •...

  • Page 343

    Global Configuration Commands 5-67 Usage Guidelines 1 1. Use the command along with ip to undo any IP based configuration. [no] ip(access-list|default-gateway|dos|dhcp|domain-lookup| domain-name|http|local|name-server|nat|route|routing|ssh|telnet) 2. When using the parameter, enter the following contexts: ip access-list • ext-nacl – Extended ACL. For more information, see Chapter , Extended ACL Instance •...

  • Page 344

    5-68 Motorola RF Switch CLI Reference Guide 5. The switch leads you to a new mode (config-dhcp-class). Use this mode to add an address range used with the DHCP class associated with the pool. RFSwitch(config-dhcp-class)#address range 11.22.33.44 Example RFSwitch(config)#ip access-list extended TestACL...

  • Page 345: License

    Global Configuration Commands 5-69 5.1.18 license  Global Configuration Commands Adds a feature license Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax license <feature> <license-key> Parameters <feature> The feature for which the license is to be added <license-key>...

  • Page 346: Line

    5-70 Motorola RF Switch CLI Reference Guide 5.1.19 line  Global Configuration Commands Configures the terminal line Opens the config-line mode, where you can configure the various parameters for the selected terminal. Supported in the following platforms: • RFS7000 • RFS6000 •...

  • Page 347: Local

    Global Configuration Commands 5-71 5.1.20 local  Global Configuration Commands Sets the username and password for local user authentication Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax local username <username> password [<password>|0 <password>| 2 <password>] Parameters username <username>...

  • Page 348

    5-72 Motorola RF Switch CLI Reference Guide 5.1.21 logging  Global Configuration Commands Modifies message logging facilities Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax logging [aggregation-time|buffered|cli-commands|console| facility|host|monitor|on|snmp-set|syslog] logging aggregation-time <1-60> logging [buffered|console|monitor|syslog] [<0-7>|alerts| critical|debugging|emergencies|errors|informational| notifications|warnings]...

  • Page 349

    Global Configuration Commands 5-73 buffered [<0-7>|alerts| Sets the buffered logging level critical|debugging| • <0-7> – Enter the logging severity level (0-7) emergencies|errors| • alerts – Immediate action needed, (severity=1) informational| • critical – Critical conditions, (severity=2) notifications|warnings] • debugging – Debugging messages, (severity=7) •...

  • Page 350

    5-74 Motorola RF Switch CLI Reference Guide monitor [<0-7>|alerts| Sets the terminal lines logging level critical|debugging| emergencies|errors| informational| notifications|warnings] Enables the logging of system messages snmp-set enable Set logging for SNMP set requests • enable – Enable SNMP set logging syslog [<0-7>|alerts|...

  • Page 351

    Global Configuration Commands 5-75 5.1.22 mac  Global Configuration Commands Configures MAC access lists (goes to the MAC ACL mode) For more information on this mode, see Chapter , Extended MAC ACL Instance. Supported in the following platforms: • RFS7000 •...

  • Page 352

    5-76 Motorola RF Switch CLI Reference Guide 5.1.23 mac-address-table  Global Configuration Commands Configures the MAC address table Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax mac-address-table aging-time [0|<10-1000000>] Parameters aging-time The duration for which a learned mac address persists after [0|<10-1000000>]...

  • Page 353

    Global Configuration Commands 5-77 5.1.24 mac-name  Global Configuration Commands Sets a name to the MAC address Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax mac-name <MAC> <mac-name> Parameters <MAC> <name> The MAC address to set a ease-of-use name for <mac-name>...

  • Page 354

    5-78 Motorola RF Switch CLI Reference Guide 5.1.25 management  Global Configuration Commands Sets management interface properties Limits local access (through web/telnet) to management interfaces only. Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax management secure...

  • Page 355

    Global Configuration Commands 5-79 5.1.26 ntp  Global Configuration Commands Configure Network Time Protocol (NTP) values Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax ntp [access-group|authenticate|authentication-key|autokey| broadcast|broadcastdelay|master|peer|server|trusted-key] ntp access-group [peer|query-only|serve|serve-only] [<1-99>|<100-199>|<1300-1999>|<2000-2699>] ntp authenticate ntp authentication-key <key> md5 [0 <secret>|2 <secret>|<secret>] ntp autokey [client-only|host] ntp broadcast [client|destination]...

  • Page 356

    5-80 Motorola RF Switch CLI Reference Guide Parameters access-group Controls NTP access. [peer|query-only|serve| • peer – Provides full access serve-only] [<1-99>| • query-only – Allows only control queries <100-199>|<1300-1999>| • serve – Provides server and query access <2000-2699>] • serve-only – Provides only server access •...

  • Page 357

    Global Configuration Commands 5-81 broadcast Configures the NTP broadcast service. [client|destination] • client – Listens to NTP broadcasts • destination <IP> {[key <1-65534>|version <1-4>]}– Configures broadcast destination address • IP Address – Defines the destination broadcast IP address • key <1-65536> – Optional. Sets the broadcast key number •...

  • Page 358

    5-82 Motorola RF Switch CLI Reference Guide • prefer {version <1-4>} – Sets the preference for autokey. Optionally set the NTP version to use • version <1-4> {prefer} – Sets the NTP version to use. Optionally set this peer as preferred peer server Configures the NTP server.

  • Page 359

    Global Configuration Commands 5-83 RFSwitch(config)#ntp peer TestPeer autokey ? prefer Prefer this peer when possible version Configure NTP version <cr> RFSwitch(config)#ntp peer TestPeer autokey prefer ? version Configure NTP version <cr> RFSwitch(config)#ntp peer TestPeer autokey prefer version ? <1-4> NTP version number RFSwitch(config)#ntp peer TestPeer autokey prefer version 3 RFSwitch(config)# RFSwitch(config)#ntp peer TestPeer key ?

  • Page 360: Prompt

    5-84 Motorola RF Switch CLI Reference Guide 5.1.27 prompt  Global Configuration Commands Configures and sets the systems prompt Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax prompt <prompt> Parameters <prompt> Enter the new prompt displayed by the system. The following operational modifiers are available.

  • Page 361: Radius-server

    Global Configuration Commands 5-85 5.1.28 radius-server  Global Configuration Commands Enters the RADIUS server mode, the system prompt changes from the default config mode to the RADIUS server mode Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 NOTE: mode takes you to the RADIUS server radius-server local...

  • Page 362

    5-86 Motorola RF Switch CLI Reference Guide retransmit <1-100> Specifies the number of retries to active server. • <0-100> – Number of retries for a transaction (default is 3) timeout <1-1000> Time to wait for a RADIUS server to reply.

  • Page 363: Ratelimit

    Global Configuration Commands 5-87 5.1.29 ratelimit  Global Configuration Commands Configures rate limit parameters Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax ratelimit [arp|bcast|mcast|ucast] [<0-7>|alerts|critical| debugging|emergencies|errors|informational|notifications| warnings] Parameters ratelimit Sets the logging levels for ratelimit feature. [arp|bcast|mcast|ucast] •...

  • Page 364: Redundancy

    5-88 Motorola RF Switch CLI Reference Guide 5.1.30 redundancy  Global Configuration Commands Configures redundancy group parameters Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax redundancy [auto-revert|auto-revert-period| critical-resource-ip|dhcp-server|discovery-period| dynamic-ap-load-balance|enable|group-id|handle-stp| heartbeat-period|hold-period|interface-ip|manual-revert| member-ip|mode] redundancy auto-revert enable redundancy auto-revert-period <1-1800>...

  • Page 365

    Global Configuration Commands 5-89 Parameters auto-revert enable Enables auto-revert auto-revert-period Sets the redundancy auto-revert delay interval in <1-1800> minutes. The default is 5 minutes critical-resource-ip Sets critical resource IP address <ip_address> • <ip_address> – IP address of the critical resource dhcp-server enable Enables the DHCP redundancy protocol discovery-period <10-60>...

  • Page 366

    5-90 Motorola RF Switch CLI Reference Guide interface-ip <IP> Sets the redundancy interface IP address manual-revert Reverts standby to non-active mode member-ip <IP> Adds a member with the IP <IP> to this redundancy group mode [primary|standby] Sets the mode to either primary or standby...

  • Page 367

    Global Configuration Commands 5-91 5.1.31 role  Global Configuration Commands Configures role parameters Opens the role configuration mode to enable further configuration of the (confi-role) role. For more information, see Chapter , Role Instance. NOTE: Avance Security Licence must be installed for Role Based Firewall to work.

  • Page 368

    5-92 Motorola RF Switch CLI Reference Guide RFSwitch(config-role)# ? RFSwitch(config)#role assignment immediate enable RFS7000(config)#show role role officeuser 10 authentication-type any encryption-type any ap-location exact "office" essid office mu-mac any group any role globaluser 11 authentication-type any encryption-type any ap-location any...

  • Page 369

    Global Configuration Commands 5-93 5.1.32 rtls  Global Configuration Commands Configures Real Time Location System (RTLS) parameters This enables the Switch to provide complete visibility to the location of assets and thereby enabling location based service. Supported in the following platforms: •...

  • Page 370

    5-94 Motorola RF Switch CLI Reference Guide 5.1.33 service  Global Configuration Commands Retrieves system data (tables, log files, configuration, status and operation) for debugging and problem resolution Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 To view the command of User Exec and Priv Exec Mode, refer to Chapter 2.1.5,...

  • Page 371

    Global Configuration Commands 5-95 diag [enable|limit|period| Services diagnostics configuration. tech-support-period| • enable – Enable in service diagnostics tech-support-url] • limit – Displays diagnostic limit command • period <100-30000> – Sets diagnostics period • tech-support-period <10-10080> – Sets the tech support period.

  • Page 372

    5-96 Motorola RF Switch CLI Reference Guide set [command- Sets service parameters. history|reboot- • command-history <10-300> – Sets the number of history|upgrade-history] previous commands to remember. Default 200 • reboot-history <10-100> – Sets the number of previous reboot details to remember. Default 50 •...

  • Page 373

    Global Configuration Commands 5-97 5.1.34 smtp-notification  Global Configuration Commands Modifies SMTP notification parameters Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax smtp-notification [authenticate|enable|password|port|prefix| recipient|sender|smtp-server-address|user] smtp-notification authentication enable smtp-notification enable {traps [all|dhcp-server| diagnostics|miscellaneous|mobility|nsm|radius-server| redundancy|snmp|wireless] smtp-notification enable traps all smtp-notification enable traps dhcp-server {[dhcpServerDown|dhcpServerUp]} smtp-notification enable traps diagnostics {[cpuLoad1Min|...

  • Page 374

    5-98 Motorola RF Switch CLI Reference Guide smtp-notification enable traps wireless ap-detection {[externalAPDetected|externalAPRemoved]} smtp-notification enable traps wireless ids {[muExcessiveEvents|radioExcessiveEvents| switchExcessiveEvents]} smtp-notification enable traps wireless radio {[adopted|unadopted|detectedRadar]} smtp-notification enable traps wireless self-healing activated smtp-notification enable traps wireless station {[associated|deniedAssociationAsPortCapacityReached| deniedAssociationOnCapability|deniedAssociationOnErr| deniedAssociationOnInvalidWPAWPA2IE|...

  • Page 375

    Global Configuration Commands 5-99 Parameters authenticate enable Enables SMTP Server authentication enable traps [all| Enables SMTP notification for traps dhcp-server|diagnostics| • all – Enables SMTP Notification for all traps miscellaneous|mobility| • dhcp-server [dhcpServerDown|dhcpServerUp]– Enables nsm|radius-server| dhcp-server traps redundancy|snmp • dhcpServerDown – DHCP Server down |wireless] •...

  • Page 376

    5-100 Motorola RF Switch CLI Reference Guide • miscellaneous [caCertExpired|lowFsSpace|periodicHeartbeat| processMaxRestartsReached|savedConfigModified| serverCertExpired|switchEvent] – Enables miscellaneous traps • caCertExpired – CA certificate has expired • lowFsSpace – Available file system space is lower than the limit • periodicHeartbeat – Periodic Heartbeat •...

  • Page 377

    Global Configuration Commands 5-101 • nsm [dhcpIPChanged] – Enables nsm traps and changes the DHCP IP • radius-server [radiusServerDown|radiusServerUp] – Enables radius-server traps • radiusServerDown – Radius Server is down • radiusServerUp – Radius Server is up • redundancy [adoptionExceeded|criticalResourceDown| criticalResourceUp|grpAuthLevelChanged|memberDown| memberMisConfigured|memberUp] –...

  • Page 378

    5-102 Motorola RF Switch CLI Reference Guide • wireless [ap-detection|ids|radio|self-healing|station| wlan] – Enables wireless traps • ap-detection [externalAPDetected| externalAPRemoved] – Enables wireless AP detection traps • externalAPDetected – Detects an external AP • externalAPRemoved – Removes an external AP • id [muExcessiveEvents|radioExcessiveEvents| switchExcessiveEvents] –...

  • Page 379

    Global Configuration Commands 5-103 • associated – Wireless station associated • deniedAssociationAsPortCapacity Reached – Wireless station denied association due to port capacity reached • deniedAssociationOnCapability – Wireless station denied association due to unsupported capability • deniedAssociationOnErr – Wireless station denied association due to internal error •...

  • Page 380

    5-104 Motorola RF Switch CLI Reference Guide • wlan [vlanUserLimitReached|webPortalUnavailable| webPortalUnconnected||webPortalUnreachable] – Enables wireless wlan traps when: • vlanUserLimitReached – WLAN-VLAN user limit is reached • webPortalUnavailable – Web portal unavailable • webPortalUnconnected – Web portal disconnected • webPortalUnreachable – Web portal unreachable password 0 <password>...

  • Page 381

    Global Configuration Commands 5-105 5.1.35 snmp-server  Global Configuration Commands Modifies SNMP engine parameters Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax snmp-server [community|contact|enable|engine-id|host| location|manager|periodic-heartbeat-interval|sysname|user] snmp-server community <community-string> [ro|rw] snmp-server contact <contact-person> snmp-server enable traps {[all|dhcp-server|diagnostics| miscellaneous|mobility|nsm|radius-server|redundancy|snmp| wireless|wireless-statistics]} snmp-server enable traps all...

  • Page 382

    5-106 Motorola RF Switch CLI Reference Guide snmp-server enable traps wireless ids {[muExcessiveEvents|radioExcessiveEvents| switchExcessiveEvents]} snmp-server enable traps wireless radio {[adopted|unadopted|detectedRadar]} snmp-server enable traps wireless self-healing activated snmp-server enable traps wireless station {[associated|deniedAssociationAsPortCapacityReached| deniedAssociationOnCapability|deniedAssociationOnErr| deniedAssociationOnInvalidWPAWPA2IE| deniedAssociationOnRates|deniedAssociationOnShortPream| deniedAssociationOnSpectrum|deniedAssociationOnSSID| deniedAuthentication|disassociated|radiusAuthFailed| tkipCounterMeasures|vlanChanged]} snmp-server enable traps wireless wlan...

  • Page 383

    Global Configuration Commands 5-107 pktsps-greater-than|tput-greater-than| undecrypt-percent-greater-than] snmp-server engineid [netsnmp {<word>}|text <word>] snmp-server host <IP> [v2c|v3] {<1-65535>} snmp-server location <location-text> snmp-server manager [all|v2|v3] snmp-server periodic-heartbeat-interval <interval> snmp-server sysname snmp-server user [snmpmanager|snmpoperator|snmptrap] Parameters community Sets the community string and access privileges. <community-string> •...

  • Page 384

    5-108 Motorola RF Switch CLI Reference Guide enable traps dhcp-server Enables dhcp-server traps. {[dhcpServerDown| • dhcpServerDown – DHCP server down dhcpServerUp]} • dhcpServerUp – DHCP server up enable traps diagnostics Enables diagnostics traps. {[cpuLoad1Min| • cpuLoad15Min cpuLoad5Min| • cpuLoad1Min cpuLoad15Min| •...

  • Page 385

    Global Configuration Commands 5-109 enable traps mobility Enable mobility traps {[operationallyDown| • operationallyDown – Mobility down operationallyUp| • operationallyUp – Mobility up peerDown|peerUp]} • peerDown – Mobility peer down • peerUp – Mobility peer up enable traps nsm Enables nsm traps {dhcpIPChanged} •...

  • Page 386

    5-110 Motorola RF Switch CLI Reference Guide enable traps wireless Enables wireless traps {[ap-detection|ids| • ap-detection {[externalAPDetected| radio|self-healing| externalAPRemoved]} – Enables wireless AP station|wlan]} detection traps • externalAPDetected – External AP detected • externalAPRemoved – External AP detected • ids {[muExcessiveEvents| radioExcessiveEvents|switchExcessiveEvents]} –...

  • Page 387

    Global Configuration Commands 5-111 deniedAssociationOnSpectrum| deniedAssociationOnSSID|deniedAuthent ication| disassociated|radiusAuthFailed| tkipCounterMeasures|vlanChanged]} – Enables wireless station traps • associated– Wireless station associated • deniedAssociationAsPortCapacityReached – Wireless station denied association - port capacity reached • deniedAssociationOnCapability – Wireless station denied association due to unsupported capability •...

  • Page 388

    5-112 Motorola RF Switch CLI Reference Guide • tkipCounterMeasures – TKIP counter measures invoked • vlanChanged – Wireless station VLAN ID has changed • wlan {[vlanUserLimitReached|webPortal Unavailable|webPortalUnreachable|webPortal Unconnected]}– Enables wireless wlan traps • vlanUserLimitReached – WALN/VLAN user limit reached • webPortalUnavailable – Webportal is unavailable •...

  • Page 389

    Global Configuration Commands 5-113 snmp-server enable traps Modifies wireless-stats rate traps wireless-statistics [mesh| • mesh [avg-bit-speed-less-than| min-packets|mobile-unit| avg-retry-greater-than|avg-signal-less-than| radio|wireless-switch|wlan] gave-up-percent-greater-than| nu-percent-greater-than| num-mobile-units-greater-than| pktsps-greater-than|tput-greater-than| undecrypt-percent-greater-than] – Modifies mesh rate traps • avg-bit-speed-less-than – Average bit speed in Mbps between <0.00> and <54.00> •...

  • Page 390

    5-114 Motorola RF Switch CLI Reference Guide • tput-greater-than – Throughput in Mbps is greater than 0.00 and less than or equal to 100000.00 • undecrypt-percent-greater-than – Percentage of undecryptable pkts is greater than 0.00 and less than or equal to 100.00 •...

  • Page 391

    Global Configuration Commands 5-115 • pktsps-greater-than – Packets per sec is greater than 0.00 and less than or equal to 100000.00 • tput-greater-than – Throughput in Mbps is greater than 0.00 and less than or equal to 100000.00 • undecrypt-percent-greater-than – Percentage of undecryptable pkts is greater than 0.00 and less than or equal to 100.00 engineid [netsnmp {<word>}|...

  • Page 392

    5-116 Motorola RF Switch CLI Reference Guide user [snmpmanager| Defines a user who can access the SNMP engine. snmpoperator|snmptrap] • snmpmanager v3– Manager user • v3 [auth|encrypted] – User using v3 security model • auth md5 <password> – Sets authentication parameters for the user •...

  • Page 393

    Global Configuration Commands 5-117 RFSwitch(config)#snmp-server enable traps wireless detection externalAPDetected RFSwitch(config)# RFSwitch(config)#snmp-server enable traps wireless excessiveProbes RFSwitch(config)# RFSwitch(config)#snmp-server enable traps wireless radio adopted RFSwitch(config)# RFSwitch(config)#snmp-server enable traps wireless self- healing activated RFSwitch(config)# RFSwitch(config)#snmp-server enable traps wireless station tkipCounterMeasures RFSwitch(config)# RFSwitch(config)#snmp-server enable traps wireless- statistics min-packets 120 RFSwitch(config)# RFSwitch(config)#snmp-server location "Located at thh 5th...

  • Page 394

    5-118 Motorola RF Switch CLI Reference Guide 5.1.36 spanning-tree  Global Configuration Commands Configures spanning-tree commands Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax spanning-tree [mst|portfast] spanning-tree mst [<0-15> priority <0-61440>| cisco-interoperability [enable|disable]|configuration| forward-time <4-30>|hello-time <1-10>|max-age <6-40>| max-hops <7-127>]...

  • Page 395

    Global Configuration Commands 5-119 Parameters mst [<0-15> priority Enables the Multiple Spanning Tree Protocol on a bridge <0-61440>| • <0-15> priority <0-61440> – Set the bridge priority for an cisco-interoperability MST instance to the value specified. Use the no [enable|disable]| parameter with this command to restore the default configuration| bridge priority value...

  • Page 396

    5-120 Motorola RF Switch CLI Reference Guide • max-age <6-40> – Max-age is the maximum time in seconds for which (if a bridge is the root bridge) a message is considered valid. This prevents the frames from looping indefinitely. The value of max-age must be...

  • Page 397

    Global Configuration Commands 5-121 portfast Enables the portfast feature on a bridge. It has the [bpdufilter|bpduguard] following options: default • bpdufilter default – Use the command to bpdu-filter set the portfast BPDU filter for the port. Use the parameter with this command to revert the port BPDU filter value to default.

  • Page 398

    5-122 Motorola RF Switch CLI Reference Guide 5.1.37 timezone  Global Configuration Commands Configures switch timezone settings Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax timezone <timezone> Parameters <timezone> Press <tab> to traverse a list of files. This displays a list of files containing timezone information.

  • Page 399

    Global Configuration Commands 5-123 5.1.38 traffic-shape  Global Configuration Commands Optimizes network traffic Supported in the following platforms: • RFS7000 SWITCH NOTE: This command is not supported with: • RFS6000 • RFS4000 Syntax traffic-shape [class|priority-map] traffic-shape class <class-identifier> [max-buffers| max-latency|rate] traffic-shape class <class-identifier>...

  • Page 400

    5-124 Motorola RF Switch CLI Reference Guide Parameters class <class-identifier> Traffic shaping packet class. Select an identifier between max-buffers ... red-level 1-4. Traffic shaping also uses queues numbered 0-7 • max-buffers – Maximum traffic-shape queue length in class <class-identifier> packets max-buffers ...

  • Page 401

    Global Configuration Commands 5-125 RFSSwitch(config)#show traffic-shape config Traffic shaping class 1 Rate: 10 Mbps Prio-| max | | max rity | pkts | pkts pcnt | latency 0 | 1000 | 75% | - 1 | 1000 | 75% | - 2 | 1000 | 75% | - 3 | 1000 |...

  • Page 402: Username

    5-126 Motorola RF Switch CLI Reference Guide 5.1.39 username  Global Configuration Commands Establishes user name authentication Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax username <name> [access|password|privilege] username <name> access [console|ssh|telnet|web] username <name> password [0 <password>|1 <password>| <password>]...

  • Page 403: Encrypting A Password

    1. Enable password encryption and provide the passphrase required for encrypting the passwords. RFS7000(config)#service password-encryption secret 2 Symbol RFS7000(config)#username Jiri password Motorola 2. On completion of the above step, all the passwords, crypto keys, shared secrets etc are displayed in an encrypted format in the running/startup configuration.

  • Page 404

    5-128 Motorola RF Switch CLI Reference Guide username admin password 1 8e67bb26b358e2ed20fe552ed6fb832f397a507d username admin privilege superuser username operator password 1 fe96dd39756ac41b74283a9292652d366d73931f username Jiri password 1 399f01e13e372ba2dc02f37d869021873e60aa85 3. The password in the above running configuration is displayed in an encrypted format...

  • Page 405

    Global Configuration Commands 5-129 5.1.40 vpn  Global Configuration Commands Configures VPN authentication settings Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax vpn authentication-method [local|radius] Parameters authentication-method Selects the authentication scheme. [local|radius] • local – Used for user based authentication •...

  • Page 406

    5-130 Motorola RF Switch CLI Reference Guide 5.1.41 wireless  Global Configuration Commands Configures switch wireless parameters This command moves you to the instance. For more information, see config-wireless Chapter , Wireless Instance. Supported in the following platforms: • RFS7000 •...

  • Page 407

    Global Configuration Commands 5-131 5.1.42 wlan-acl  Global Configuration Commands Applies an ACL on a WLAN index Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax wlan-acl <1-256> [<1-99>|<100-199>|<1300-1999>| <2000-2699>|<acl-name>] [in|out] Parameters WLAN index number <1-256> [<1- 99>|<100- •...

  • Page 408

    5-132 Motorola RF Switch CLI Reference Guide When a packet goes out of a access port, it becomes outbound traffic to the wireless LAN index. Apply an ACL to a WLAN index in outbound direction to filter traffic from both wired and wireless interfaces.

  • Page 409

    Global Configuration Commands 5-133 ip access-list standard stdacl3 deny host 30.0.0.14 rule-precedence 54 no access-list stdacl wlan-acl 5 stdacl1 in wlan-acl 6 stdacl2 in The stdacl must be detached from the interface to which it was associated and stdacl3 must be attached to that interface. When the user explicitly creates ACL rules with WLAN index as selector, the switch consumes that ACL without WLAN index selector.

  • Page 410: Network-element-id

    5-134 Motorola RF Switch CLI Reference Guide 5.1.43 network-element-id  Global Configuration Commands Use this command to set system’s network-element-ID Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax network-element-id <element-id> Parameters <element-id> Specifies system’s network element ID...

  • Page 411

    <8-1500> firewall vlan-stacking permit Parameters enable Enables the firewall for this switch. 802.2.-encapsulation Sets 802.2 packet encapsulation. permit • permit – Allow 802.2 packet encapsulations which can bypass the firewall. Enabling this option is not recommended by Motorola...

  • Page 412

    5-136 Motorola RF Switch CLI Reference Guide clamp [path-mtu| Configures wireless firewall tcp-mss] • clamp [path-mtu|tcp-mss] – Displays clamp value • path-mtu – Displays limit discovered path-mtu • tcp-mss – Displays limit TCP to inner path-mtu dhcp-snoop-conflict- Displays IP Address, MAC Address conflict detection...

  • Page 413

    1st fragment to a value between 8 and 1500 vlan-stacking permit Configures 802.1q VLAN stacking. • permit – Permits 802.1q VLAN stacking that can bypass the firewall. Motorola does not recommend the use of this option Example RFSwitch(config)#firewall clamp RFSwitch(config)#...

  • Page 414

    5-138 Motorola RF Switch CLI Reference Guide 5.1.45 virtual-ip  Global Configuration Commands Displays virtual-ip configuration of the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax virtual-ip [<A.B.C.D/M>|advt-timeout <1-5>|enable| garp-timeout <30-600>|learning-timeout <2-5>|priority|vmac] virtual-ip <A.B.C.D/M> vlan <1-4096>...

  • Page 415

    Global Configuration Commands 5-139 vmac Virtual MAC to be used by the master <AA-BB-CC-DD-EE-FF> • <AA-BB-CC-DD-EE-FF> – Allowed VMACs: from 00:15:70:88:8a:90 to 00:15:70:88:8b:8f Example RFS7K-1(config)#virtual-ip 192.168.11.10/24 vlan 11 RFS7K-1(config)# RFS7K-1(config)#show virtual-ip config VIP Status : Disabled Cluster Redundancy Status : Enabled Priority Selection Mode : Automatic VMAC Selection Mode...

  • Page 416

    5-140 Motorola RF Switch CLI Reference Guide 5.1.46 wwan  Global Configuration Commands Configures wireless wwan interface Supported in RFS6000 and RFS4000 platforms only Syntax wwan [apn<STRING>|disable|enable|password<STRING> |username<STRING>] Parameters apn <STRING> Enter the access point name provided by the service provider.

  • Page 417

    Global Configuration Commands 5-141 5.1.47 aap-wlan-acl  Global Configuration Commands Applies an acl on wlan for aap Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax aap-wlan-acl <1-256> [<100-199>|<WORD>]{in/out} For RFS6000, aap-wlan-acl <1-32>[<100-199>|<WORD>]{in/out} Parameters aap-wlan-acl <1-256> Applies an acl on wlan for an aap [<100-199>| •...

  • Page 418

    5-142 Motorola RF Switch CLI Reference Guide 5.1.48 arp  Global Configuration Commands Configures Address Resolution Protocol Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax arp [<WORD>|ge <1-5>|sa <1-6>|up1|vlan <1-4094| wwan]{<AB.C.D> <AA-BB-CC-DD-EE-FF>} Parameters arp [<WORD>|ge <1-5>|sa Configures address resolution protocol.

  • Page 419

    Global Configuration Commands 5-143 5.1.49 power  Global Configuration Commands Configures PoE commands Supported in the following platforms: • RFS6000 • RFS4000 Syntax power trap-percent <0-100> Parameters power trap-percent Configures PoE commands <0-100> • trap-percent <0-100> – Configures PoE traps •...

  • Page 420: Aap-ipfilter-list

    5-144 Motorola RF Switch CLI Reference Guide 5.1.50 aap-ipfilter-list  Global Configuration Commands Applies ipfilter to WLAN/LAN Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 NOTE: command initiates aap-ipfilter-list (config-aap-ip- instance. For more details see Chapter , AAP IP filter-list) Filtering.

  • Page 421: Whitelist

    Global Configuration Commands 5-145 5.1.51 whitelist  Global Configuration Commands White list is a list of host names and IP addresses that are permitted access by default. Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 NOTE: command instantiates whitelist (config-whitelist) instance.

  • Page 422

    5-146 Motorola RF Switch CLI Reference Guide Example RFSwitch(config-whitelist)#permit 172.16.10.3 RFSwitch(config-whitelist)#permit symbol suffix RFSwitch(config-whitelist)#...

  • Page 423: Crypto Isakmp Config Commands

    Crypto-isakmp Instance The (config-crypto-isakmp) instance is used to configure ISAKMP policies. To enter this instance, use this command: RFSwitch(config)#crypto isakmp policy <1-10000> RFSwitch(config-crypto-isakmp)# 6.1 Crypto ISAKMP Config Commands Table 6.1 summarizes commands crypto-isakmp Table 6.1 Crypto ISAKMP Command Summary Command Description Ref.

  • Page 424

    Motorola RF Switch CLI Reference Guide Table 6.1 Crypto ISAKMP Command Summary Command Description Ref. lifetime Sets the lifetime for the ISAKMP security association page 6-11 Negates a command or sets its defaults page 6-12 service Defines the switch’s service commands...

  • Page 425: Authentication

    Crypto-isakmp Instance 6.1.1 authentication  Crypto ISAKMP Config Commands Authenticates rsa-sig and pre-share keys Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax authentication [pre-share|rsa-sig] Parameters pre-share pre shared key rsa-sig rsa signature Example RFSwitch(config-crypto-isakmp)#authentication pre-share RFSwitch(config-crypto-isakmp)# RFSwitch(config-crypto-isakmp)#authentication rsa-sig RFSwitch(config-crypto-isakmp)#...

  • Page 426

    Motorola RF Switch CLI Reference Guide 6.1.2 clrscr  Crypto ISAKMP Config Commands Clears the display screen Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clrscr Parameters None. Example RFSwitch(config-crypto-isakmp)#clrscr RFSwitch(config-crypto-isakmp)#...

  • Page 427: Encryption

    Crypto-isakmp Instance 6.1.3 encryption  Crypto ISAKMP Config Commands Configures the encryption level of the data transmitted using the crypto-isakmp command Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax encryption [3des|aes|aes-192|aes-256|des] Parameters 3des Triple data encryption standard Advanced data encryption standard aes-192 Advanced data encryption standard...

  • Page 428

    Motorola RF Switch CLI Reference Guide 6.1.4 end  Crypto ISAKMP Config Commands Ends and exits the current mode and changes to the PRIV EXEC mode. The prompt changes RFSwitch# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000...

  • Page 429

    Crypto-isakmp Instance 6.1.5 exit  Crypto ISAKMP Config Commands Ends the current mode and moves to the previous mode (GLOBAL-CONFIG). The prompt changes to RFSwitch(config)# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax exit Parameters None. Example RFSwitch(config-crypto-isakmp)#exit RFSwitch(config)#...

  • Page 430: Group

    Motorola RF Switch CLI Reference Guide 6.1.6 group  Crypto ISAKMP Config Commands Specifies the Diffie-Hellman group (1 or 2) used by the IKE policy to generate keys (which is then used to create an IPSec SA) Supported in the following platforms: •...

  • Page 431: Hash

    Crypto-isakmp Instance 6.1.7 hash  Crypto ISAKMP Config Commands Specifies the hash algorithm used to authenticate data transmitted over the IKE SA Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax hash [md5|sha] Parameters Choose the MD5 hash algorithm Choose the SHA hash algorithm Example RFSwitch(config-crypto-isakmp)#hash sha...

  • Page 432

    6-10 Motorola RF Switch CLI Reference Guide 6.1.8 help  Crypto ISAKMP Config Commands Displays the system’s interactive help system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax help Parameters None Example RFSwitch(config-crypto-isakmp)#help CLI provides advanced help feature.

  • Page 433: Lifetime

    Crypto-isakmp Instance 6-11 6.1.9 lifetime  Crypto ISAKMP Config Commands Specifies how long an IKE SA is valid before it expires • RFS7000 • RFS6000 • RFS4000 Syntax lifetime <seconds> Parameters <seconds> Specifies how many seconds an IKE SA lasts before it expires.

  • Page 434

    6-12 Motorola RF Switch CLI Reference Guide 6.1.10 no  Crypto ISAKMP Config Commands Negates a command or sets its defaults Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax no [authentication|encryption|group|hash|lifetime] Parameters None. Example RFSwitch(config-crypto-isakmp)#no lifetime...

  • Page 435

    Crypto-isakmp Instance 6-13 6.1.11 service  Crypto ISAKMP Config Commands Invokes service commands to troubleshoot or debug the (config-crypto-isakmp) instance configurations. Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax service show cli Parameters Displays the CLI tree of current mode Example RFSwitch(config-crypto-isakmp)#service show cli Crypto Isakmp Config mode:...

  • Page 436

    6-14 Motorola RF Switch CLI Reference Guide +-1 [group (1|2|5)] +-2 [group (1|2|5)] +-5 [group (1|2|5)] +-hash +-md5 [hash (sha|md5)] ....RFSwitch(config-crypto-isakmp)#...

  • Page 437

    Crypto-isakmp Instance 6-15 6.1.12 show  Crypto ISAKMP Config Commands Displays current system information running on the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 SWITCH NOTE: The following commands display only for RFS6000 and RFS4000: •...

  • Page 438

    6-16 Motorola RF Switch CLI Reference Guide banner Display Message of the Day Login banner boot Display boot configuration. clock Display system clock commands Show command lists crypto encryption module debugging Debugging information outputs dhcp DHCP Server Configuration environment show environmental information...

  • Page 439

    Crypto-isakmp Instance 6-17 terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version wireless Wireless configuration commands virtual-ip IP Redundancy Feature wlan-acl wlan based acl...

  • Page 440

    6-18 Motorola RF Switch CLI Reference Guide...

  • Page 441: Crypto Group Config Commands

    Crypto-group Instance The ( instance configures the default group properties of the config-crypto-group) ISAKMP client. To navigate to this instance, use the command: RFSwitch(config)#crypto isakmp client configuration group default RFSwitch(config-crypto-group)# 7.1 Crypto Group Config Commands Table 7.1 summarizes the switch commands config-crypto-group Table 7.1 Crypto Group Command Summary...

  • Page 442

    Motorola RF Switch CLI Reference Guide Table 7.1 Crypto Group Command Summary Command Description Ref. show Shows running system information page 7-9 wins Defines a Windows Name Server (WINS) page 7-12...

  • Page 443

    Crypto-group Instance 7.1.1 clrscr  Crypto Group Config Commands Clears the display screen Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clrscr Parameters None Example RFSwitch(config-crypto-group)#clr RFSwitch(config-crypto-group)#...

  • Page 444

    Motorola RF Switch CLI Reference Guide 7.1.2 dns  Crypto Group Config Commands Specifies the DNS server address(es) to assign to a client Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax dns <IP> <IP > The first DNS server address to assign Example RFSwitch(config-crypto-group)#dns-server 172.1.17.1...

  • Page 445

    Crypto-group Instance 7.1.3 end  Crypto Group Config Commands Ends and exits the current mode and changes to the PRIV EXEC mode. The prompt changes RFSwitch# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax Parameters None Example RFSwitch(config-crypto-group)#end RFSwitch#...

  • Page 446

    Motorola RF Switch CLI Reference Guide 7.1.4 exit  Crypto Group Config Commands Ends the current mode and moves to the previous mode (GLOBAL-CONFIG). The prompt changes to RFSwitch(config)# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000...

  • Page 447

    Crypto-group Instance 7.1.5 help  Crypto Group Config Commands Displays the system’s interactive help system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax help Parameters None Example RFSwitch(config-crypto-group)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'.

  • Page 448

    Motorola RF Switch CLI Reference Guide 7.1.6 service  Crypto Group Config Commands Invokes service commands used troubleshoot or debug (config-crypto-isakmp) instance configurations Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax service show cli Parameters Displays the CLI tree of current mode...

  • Page 449

    Crypto-group Instance 7.1.7 show  Crypto Group Config Commands Displays current system information running on the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 SWITCH NOTE: The following commands display only for RFS6000 and RFS4000: • power The following commands display only for RFS7000 : •...

  • Page 450

    7-10 Motorola RF Switch CLI Reference Guide banner Display Message of the Day Login banner boot Display boot configuration. clock Display system clock commands Show command lists crypto encryption module debugging Debugging information outputs dhcp DHCP Server Configuration environment show environmental information...

  • Page 451

    Crypto-group Instance 7-11 terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl...

  • Page 452: Wins

    7-12 Motorola RF Switch CLI Reference Guide 7.1.8 wins  Crypto Group Config Commands Specifies the Windows Internet Naming Service (WINS) servers to assign to a client Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax wins <IP>...

  • Page 453: Crypto Peer Config Commands

    Crypto-peer Instance instance to configure ISAKMP peers. To enter this (config-crypto-peer) instance, use the command: RFSwitch(config)#crypto isakmp peer [address|dn|hostname] RFSwitch(config-crypto-peer)# 8.1 Crypto Peer Config Commands Table 8.1 summarizes the commands config-crypto-peer Table 8.1 Crypto Peer Command Summary Command Description Ref. clrscr Clears the display screen page 8-3...

  • Page 454

    Motorola RF Switch CLI Reference Guide Table 8.1 Crypto Peer Command Summary (Continued) Command Description Ref. show Displays running system page 8-...

  • Page 455

    Crypto-peer Instance 8.1.1 clrscr  Crypto Peer Config Commands Clears the display screen Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clrscr Parameters None Example RFSwitch(config-crypto-peer)#clrscr RFSwitch(config-crypto-peer)

  • Page 456

    Motorola RF Switch CLI Reference Guide 8.1.2 end  Crypto Peer Config Commands Ends and exits the current mode and moves to the PRIV EXEC mode. The prompt changes RFSwitch# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000...

  • Page 457

    Crypto-peer Instance 8.1.3 exit  Crypto Peer Config Commands Ends the current mode and moves to the previous mode (GLOBAL-CONFIG). The prompt changes to RFSwitch(config)# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax exit Parameters None Example RFSwitch(config-crypto-peer)#exit RFSwitch(config)#...

  • Page 458

    Motorola RF Switch CLI Reference Guide 8.1.4 help  Crypto Peer Config Commands Accesses the system’s interactive help system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax help Parameters None Example RFSwitch(config-crypto-peer)#help CLI provides advanced help feature.

  • Page 459

    Crypto-peer Instance 8.1.5 no  Crypto Peer Config Commands Negates a command or sets it’s defaults Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax no set aggressive-mode password Parameters command for parameters details Example RFSwitch(config-crypto-peer)#no set aggrerssive-mode password RFSwitch(config-crypto-peer)#...

  • Page 460

    Motorola RF Switch CLI Reference Guide 8.1.6 service  Crypto Peer Config Commands Invokes service commands to troubleshoot or debug the (config-crypto-peer) instance configuration Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax service show cli Parameters...

  • Page 461

    Crypto-peer Instance 8.1.7 set  Crypto Peer Config Commands Configures the aggressive-mode of config-crypto-peer • RFS7000 • RFS6000 • RFS4000 set aggerssive-mode password [0 <password>|2 <password>| <password>] Parameters aggressive-mode Defines aggressive mode attributes password [0 • password – Specifies a tunnel-password attribute <password>|2 •...

  • Page 462

    8-10 Motorola RF Switch CLI Reference Guide 8.1.8 show  Crypto Peer Config Commands Displays current system information running on the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 SWITCH NOTE: The following commands display only for RFS6000 and RFS4000: •...

  • Page 463

    Crypto-peer Instance 8-11 banner Display Message of the Day Login banner boot Display boot configuration. clock Display system clock commands Show command lists crypto encryption module debugging Debugging information outputs dhcp DHCP Server Configuration environment show environmental information file Display filesystem information firewall Wireless firewall Display FTP Server configuration...

  • Page 464

    8-12 Motorola RF Switch CLI Reference Guide terminal Display terminal configuration parameters timezone Display timezone upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless...

  • Page 465: Crypto Ipsec Config Commands

    Crypto-ipsec Instance Use the instance to define the transform configuration for (config-crypto-ipsec) securing data (esp-3des, esp-sha-hmac etc.). To navigate to this instance, use the command RFSwitch(config)#crypto ipsec transform-set <transform-set-name> <encryption-type> <auth-type> RFSwitch(config-crypto-ipsec)# The transform set is assigned to a crypto map using the map’s transform-set command. For more details, see crypto-map transform set page...

  • Page 466

    Motorola RF Switch CLI Reference Guide Table 9.1 Crypto IPsec Command Summary (Continued) Command Description Ref. Negates a command or set its defaults page 9-7 service Invokes service commands to troubleshoot or debug page 9-11 instance configurations (config-crypto-isakmp)

  • Page 467

    Crypto-ipsec Instance 9.1.1 end  Crypto IPSec Config Commands Ends and exits the current mode and moves to the PRIV EXEC mode. The prompt changes RFSwitch# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax Parameters None Example RFSwitch(config-crypto-ipsec)#end RFSwitch#...

  • Page 468

    Motorola RF Switch CLI Reference Guide 9.1.2 exit  Crypto IPSec Config Commands Ends the current mode and moves to the previous mode (GLOBAL-CONFIG). The prompt changes to RFSwitch(config)# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000...

  • Page 469

    Crypto-ipsec Instance 9.1.3 help  Crypto IPSec Config Commands Accesses the system’s interactive help system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax help Parameters None Example RFSwitch(config-crypto-peer)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'.

  • Page 470: Mode

    Motorola RF Switch CLI Reference Guide 9.1.4 mode  Crypto IPSec Config Commands Configures the IPSec mode of operation Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax mode [transport|tunnel] Parameters transport Transport mode tunnel Tunnel mode...

  • Page 471

    Crypto-ipsec Instance 9.1.5 no  Crypto IPSec Config Commands Negates a command or sets it’s defaults Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax no mode Parameters mode Sets default to tunnel mode. Example RFSwitch(config-crypto-ipsec)#no mode RFSwitch(config-crypto-ipsec)#...

  • Page 472

    Motorola RF Switch CLI Reference Guide 9.1.6 show  Crypto IPSec Config Commands Use this command to view current system information running on the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 SWITCH NOTE: The following commands display only for RFS6000 and RFS4000: •...

  • Page 473

    Crypto-ipsec Instance debugging Debugging information outputs dhcp DHCP Server Configuration environment show environmental information file Display filesystem information firewall Wireless firewall Display FTP Server configuration history Display the session command history interfaces Interface status Internet Protocol (IP) ldap LDAP server licenses Show any installed licenses logging...

  • Page 474

    9-10 Motorola RF Switch CLI Reference Guide users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl wwan Wireless wan interface RFSwitch(config-crypto-ipsec)#show...

  • Page 475

    Crypto-ipsec Instance 9-11 9.1.7 service  Crypto IPSec Config Commands Invokes service commands to troubleshoot or debug the (config-crypto-peer) instance configuration Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax service show cli Parameters Displays the CLI tree of current mode Example RFS7000(config-crypto-ipsec)#service show cli Crypto Ipsec Config mode:...

  • Page 476

    9-12 Motorola RF Switch CLI Reference Guide...

  • Page 477: Crypto Map Config Commands

    Crypto-map Instance The ( commands define a Certificate Authority (CA) trustpoint. config-crypto-map) This is a separate instance, but belongs to the mode under the crypto pki trustpoint instance. config To navigate to this instance, use the command: RFSwitch(config)#crypto map <map-name> <sequence> [ipsec-isakmp|ipsec-manual] {dynamic} RFSwitch(config-crypto-map)# 10.1 Crypto Map Config Commands...

  • Page 478

    10-2 Motorola RF Switch CLI Reference Guide Table 10.1 Crypto Map Command Summary (Continued) Command Description Ref. service Invokes service commands to troubleshoot or debug the page 10-10 instance configurations Sets values for encryption/decryption parameters page 10-12 show Displays the running system information...

  • Page 479

    Crypto-map Instance 10-3 10.1.1 clrscr  Crypto Map Config Commands Clears the display screen Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax clrscr Parameters None Example RFSwitch(config-crypto-map)#clrscr RFSwitch(config-crypto-map)#...

  • Page 480

    10-4 Motorola RF Switch CLI Reference Guide 10.1.2 end  Crypto Map Config Commands Ends and exits the current mode and moves to the to PRIV EXEC mode. The prompt changes RFSwitch# Supported in the following platforms: • RFS7000 • RFS6000 •...

  • Page 481

    Crypto-map Instance 10-5 10.1.3 exit  Crypto Map Config Commands Ends the current mode and moves to the previous mode (GLOBAL-CONFIG). The prompt changes to RFSwitch(config)# Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax exit Parameters None Example RFSwitch(config-crypto-map)#exit...

  • Page 482

    10-6 Motorola RF Switch CLI Reference Guide 10.1.4 help  Crypto Map Config Commands Displays the system’s interactive help system Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax help Parameters None Example RFSwitch(config-crypto-map)#help CLI provides advanced help feature.

  • Page 483: Match

    Crypto-map Instance 10-7 10.1.5 match  Crypto Map Config Commands Use this command to assign an IP access-list to a crypto map definition. The access-list designates the IP packets to be encrypted by this crypto map. A crypto map entry is a single policy that describes how certain traffic is secured. There are two types of crypto map entries: ipsec-manual and ipsec-ike entries.

  • Page 484

    10-8 Motorola RF Switch CLI Reference Guide Usage Guidelines Crypto map entries do not directly contain the selectors used to determine which data to secure. Instead, the crypto map entry refers to an access control list. An access control list (ACL) is assigned to the crypto map using the match address command.

  • Page 485

    Crypto-map Instance 10-9 10.1.6 no  Crypto Map Config Commands Negates a command or sets its defaults Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax no [match|set] Parameters Use the commands configured under this instance. Example RFSwitch(config-crypto-map)#no match address <WORD>...

  • Page 486

    10-10 Motorola RF Switch CLI Reference Guide 10.1.7 service  Crypto Map Config Commands Invokes service commands to troubleshoot or debug the (config-crypto-peer) instance configuration Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax service show cli...

  • Page 487

    Crypto-map Instance 10-11 +-remote-type [no set remote-type] +-security-association +-level +-perhost [no set security-association level perhost] +-lifetime [no set security-association lifetime] +-session-key +-inbound +-ah [no set session-key ( inbound | outbound ) ah] +-esp [no set session-key ( inbound | outbound ) esp] ............

  • Page 488

    10-12 Motorola RF Switch CLI Reference Guide 10.1.8 set  Crypto Map Config Commands Configures set parameters for the peer device Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 Syntax set [localid|mode|peer|pfs|remote-type {ipsec-l2tp|xauth}| security-association|session-key|transform-set) set localid [dn|hostname]<name>...

  • Page 489

    Crypto-map Instance 10-13 mode [aggressive|main] Sets the mode of the tunnels for this Crypto Map • aggressive – Initiates aggressive mode • main – Initiates main mode peer Sets the IP address of the peer device. This can be set for [ipaddress| multiple remote peers.

  • Page 490

    10-14 Motorola RF Switch CLI Reference Guide security-association Defines the lifetime (in kilobytes and/or seconds) of the [level perhost|lifetime IPSec SAs created by this crypto map {kilobyte|seconds}] • level perhost – Specifies the security association granularity level for identities • lifetime [kilobyte|seconds] – Security an association...

  • Page 491

    Crypto-map Instance 10-15 RFSwitch(config-crypto-map)#set pfs If left at the default setting, no perfect forward secrecy (PFS) is used during IPSec SA key generation. If PFS is specified, the specified Diffie-Hellman Group exchange is used for the initial (and all subsequent) key generations. This means no data linkage between prior keys and future keys.

  • Page 492

    10-16 Motorola RF Switch CLI Reference Guide 10.1.9 show  Crypto Map Config Commands Displays current system information running on the switch Supported in the following platforms: • RFS7000 • RFS6000 • RFS4000 SWITCH NOTE: The following commands display only for RFS6000 and RFS4000: •...

  • Page 493

    Crypto-map Instance 10-17 dhcp DHCP Server Configuration environment show environmental information file Display filesystem information firewall Wireless firewall Display FTP Server configuration history Display the session command history interfaces Interface status Internet Protocol (IP) ldap LDAP server licenses Show any installed licenses logging Show logging configuration and buffer...

  • Page 494

    10-18 Motorola RF Switch CLI Reference Guide version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl wwan Wireless wan interface RFSwitch(config-crypto-map)#show...

  • Page 495: Trustpoint (pki) Config Commands

    Crypto-trustpoint Instance c