Command Line Interface (CLI)
This section discusses the following:
CLI commands can be used to initialize, configure, and manage the Access Point.
- CLI commands may be entered in real time through a keyboard or submitted with CLI scripts.
- A CLI Batch file is a user-editable configuration file that provides a user-friendly way to change the AP configuration through a file upload. The CLI Batch file is an ASCII file that facilitates Auto Configuration because it does not require the user to access one of the AP's management interfaces to make configuration changes as is required with the proprietary LTV format configuration file.
- The CLI is available through both the Serial Port interface and over the Ethernet interface using Telnet.
NOTE: All CLI commands and parameters are case-sensitive.General Notes
Prerequisite Skills and Knowledge
To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts, network access infrastructures, and client-server relationships. In addition, you should be familiar with software setup procedures for typical network operating systems and servers.
Notation Conventions
- Computer prompts are shown as constant width type. For example:
[Device-Name]>- Information that you input as shown is displayed in bold constant width type. For example:
[Device name]>set ipaddr 10.0.0.12- The names of keyboard keys, software buttons, and field names are displayed in bold type. For example: Click the Configure button.
- Screen names are displayed in bold italics. For example, the System Status screen.
Important Terminology
- Configuration Files - Database files containing the current Access Point configuration. Configuration items include the IP Address and other network-specific values. Config files may be downloaded to the Access Point or uploaded for backup or troubleshooting.
- Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer files from the Access Point. The TFTP server performs file transfers in both directions.
- Group - A logical collection of network parameter information. For example, the System Group is composed of several related parameters. Groups can also contain Tables. All items for a given Group can be displayed with a show <Group> CLI Command.
- Image File - The Access Point software executed from RAM. To update an Access Point you typically download a new Image File. This file is often referred to as the "AP Image".
- Parameter - A fundamental network value that can be displayed and may be changeable. For example, the Access Point must have a unique IP Address and the Wireless interface must be assigned an SSID. Change parameters with the CLI set Command, and view them with the CLI show Command.
- Table - Tables hold parameters for several related items. For example, you can add several potential managers to the SNMP Table. All items for a given Table can be displayed with a show <Table> CLI Command.
- TFTP - Refers to the TFTP Server, used for file transfers.
Navigation and Special Keys
This CLI supports the following navigation and special key functions to move the cursor along the prompt line.
CLI Error Messages
The following table describes the error messages associated with improper inputs or expected CLI behavior.
Command Line Interface (CLI) Variations
Administrators use the CLI to control Access Point operation and monitor network statistics. The AP supports two types of CLI: the Bootloader CLI and the normal CLI. The Bootloader CLI provides a limited command set, and is used when the current AP Image is bad or missing. The Bootloader CLI allows you to assign an IP Address and download a new image. Once the image is downloaded and running, the Access Point uses the normal CLI. This guide covers the normal CLI unless otherwise specified.
Bootloader CLI
The Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration of the AP. This interface is only accessible via the serial interface if the AP does not contain a software image or a download image command over TFTP has failed.
The Bootloader CLI provides you with the ability to configure the initial setup parameters as well as download a software image to the device.
The following functions are supported by the Bootloader CLI:
The parameters supported by the Bootloader CLI (for viewing and modifying) are:
The following lists display the results of using the help command in the Bootloader CLI:
Figure A-1 Results of "help" bootloader CLI commandThe following lists display the results of using the show command in the Bootloader CLI:
Figure A-2 Results of "show" bootloader CLI commandCLI Command Types
This guide divides CLI Commands into two categories: Operational and Parameter Controls.
Operational CLI Commands
These commands affect Access Point behavior, such as downloading, rebooting, and so on. After entering commands (and parameters, if any) press the Enter key to execute the Command Line.
Operational commands include:
- ?: Typing a question mark lists CLI Commands or parameters, depending on usage (you do not need to type Enter after typing this command)
- done, exit, quit: Terminates the CLI session
- download: Uses a TFTP server to download "image" files, "config" files, "bootloader upgrade" files, a "license" file, "SSL certificates", "SSL private keys", "SSH public keys", "SSH private keys", or "CLI Batch Files" to the Access Point
- help: Displays general CLI help information or command help information, such as command usage and syntax
- history: Remembers commands to help avoid re-entering complex statements
- passwd: Sets the Access Point's CLI password
- reboot: Reboots the Access Point in the specified time
- search: Lists the parameters in a specified Table
- upload: Uses TFTP server to upload "config" files from Access Point to TFTP default directory or specified path
? (List Commands)
This command can be used in a number of ways to display available commands and parameters.
The following table lists each operation and provides a basic example. Following the table are detailed examples and display results for each operation.
Example 1. Display Command list
To display the Command List, enter ?.
[Device-Name]>?
Figure A-3 Result of "?" CLI commandExample 2. Display specific Commands
To show all commands that start with specified letters, enter one or more letters, then ? with no space between letters and ?.
[
Device-Name]>s?
Figure A-4 Result of "s?" CLI commandExample 3. Display parameters for set and show
Example 3a allows you to see every possible parameter for the set (or show) commands. Notice from example 3a that the list is very long. Example 3b shows how to display a subset of the parameters based on initial parameter letters.
Example 3a. Display every parameter that can be changed
[Device-Name]>set ?
Figure A-5 Result of "set ?" CLI commandExample 3b. Display parameters based on letter sequence
This example shows entries for parameters that start with the letter "i". The more letters you enter, the fewer the results returned. Notice that there is no space between the letters and the question mark.
[Device-Name]>show ipa?
Figure A-6 Result of "show ipa?" CLI command
[Device-Name]>show iparp?
Figure A-7 Result of "show iparp?" CLI commandExample 4. Display Prompts for Successive Parameters
Enter the command, a space, and then ?. Then, when the parameter prompt appears, enter the parameter value. The parameter is changed and a new CLI line is echoed with the new value (in the first part of the following example, the value is the IP Address of the TFTP server).
After entering one parameter, you may add another ? to the new CLI line to see the next parameter prompt, and so on until you have entered all of the required parameters. The following example shows how this is used for the download Command. The last part of the example shows the completed download Command ready for execution.
[Device-Name]>download ?
<TFTP IP Address>
[Device-Name]>download 192.168.0.101 ?
<File Name>
[Device-Name]>download 192.168.0.101 apimage ?
<file type (config/img/bootloader)>
[Device-Name]>download 192.168.0.101 apimage img <CR>
done, exit, quit
Each of the following commands ends a CLI session:
[Device-Name]>done[Device-Name]>exit[Device-Name]>quit
download
Downloads the specified file from a TFTP server to the Access Point. Executing download in combination with the asterisks character ("*") will make use of the previously set TFTP parameters. Executing download without parameters will display command help and usage information.
- Syntax to download a file:
[Device-Name]>download <tftp server address> <path and filename> <file type>
Example:[Device-Name]>download 192.168.1.100 APImage2 img- Syntax to display help and usage information:
[Device-Name]>download- Syntax to execute the download Command using previously set (stored) TFTP Parameters:
[Device-Name]>download *help
Displays instructions on using control-key sequences for navigating a Command Line and displays command information and examples.
history
Shows content of Command History Buffer. The Command History Buffer stores command statements entered in the current session. To avoid re-entering long command statements, use the keyboard "up arrow" (Ctrl-P) and "down arrow" (Ctrl-N) keys to recall previous statements from the Command History Buffer. When the desired statement reappears, press the Enter key to execute, or you may edit the statement before executing it.
[Device-Name]>historypasswd
Changes the CLI Password.
[Device-Name]>passwd oldpassword newpassword newpasswordreboot
Reboots Access Point after specified number of seconds. Specify a value of 0 (zero) for immediate reboot.
[Device-Name]>reboot 0[Device-Name]>reboot 30
search
Lists the parameters supported by the specified table. This list corresponds to the table information displayed in the HTTP interface. In this example, the CLI returns the list of parameters that make up an entry in the IP Access Table.
[
Device-Name]>search mgmtipaccesstbl
upload
Uploads a text-based configuration file from the AP to the TFTP Server. Executing upload with the asterisk character ("*") will make use of the previously set/stored TFTP parameters. Executing upload without parameters will display command help and usage information.
- Syntax to upload a file:
[Device-Name]>upload <tftp server address> <path and filename> <filetype>
Example:[Device-Name]>upload 192.168.1.100 APconfig.sys config- Syntax to display help and usage information:
[Device-Name]>help upload- Syntax to execute the upload command using previously set (stored) TFTP Parameters:
[Device-Name]>upload *Parameter Control Commands
The following sections cover the two Parameter Control Commands (show and set) and include several tables showing parameter properties. These commands allow you to view (show) all parameters and statistics and to change (set) parameters.
"show" CLI Command
Displays the value of the specified parameter, or displays all parameter values of a specified group (parameter table). Groups contain Parameters and Tables. Tables contain parameters for a series of similar entities.
To see a definition and syntax example, type only show and then press the Enter key. To see a list of available parameters, enter a question mark (?) after show (example: show ?).
Syntax:
[Device-Name]>show <parameter>[Device-Name]>show <group>[Device-Name]>show <table>
Examples:[Device-Name]>show ipaddr[Device-Name]>show network[Device-Name]>show mgmtipaccesstbl"set" CLI Command
Sets (modifies) the value of the specified parameter. To see a definition and syntax example, type only set and then press the Enter key. To see a list of available parameters, enter a space, then a question mark (?) after set (example: set?).
Syntax:
[Device-Name]>set <parameter> <value>[Device-Name]>set <table> <index> <argument 1> <value 1> ... <argument N> <value N>
Example:set sysloc "Main Lobby"
[Device-Name]>[Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0Configuring Objects that Require Reboot
Certain objects supported by the Access Point require a device reboot in order for the changes to take effect. In order to inform the end-user of this behavior, the CLI provides informational messages when the user has configured an object that requires a reboot. The following messages are displayed as a result of the configuring such object or objects.
Example 1: Configuring objects that require the device to be rebooted
The following message is displayed every time the user has configured an object that requires the device to be rebooted.
[Device-Name]>set ipaddr 135.114.73.10The following elements require reboot
ipaddrExample 2: Executing the "exit", "quit", or "done" commands when an object that requires reboot has been configured
In addition to the above informational message, the CLI also provides a message as a result of the exit, quit, or done command if changes have been made to objects that require reboot. If you make changes to objects that require reboot and execute the exit command the following message is displayed:
[Device-Name]>exit<CR> OR quit<CR> OR done<CR>
Modifications have been made to parameters that require the device to be rebooted. These changes will only take effect after the next reboot."set" and "show" Command Examples
In general, you will use the CLI show Command to view current parameter values and use the CLI set Command to change parameter values. As shown in the following examples, parameters may be set individually or all parameters for a given table can be set with a single statement.
Example 1 - Set the Access Point IP Address Parameter
Syntax:
[Device-Name]>set <parameter name> <parameter value>
Example:[Device-Name]>set ipaddr 10.0.0.12
IP Address will be changed when you reboot the Access Point. The CLI reminds you when rebooting is required for a change to take effect. To reboot immediately, enter reboot 0 (zero) at the CLI prompt.Example 2 - Create a table entry or row
Use 0 (zero) as the index to a table when creating an entry. When creating a table row, only the mandatory table elements are required (comment is usually an optional table element). For optional table elements, the default value is generally applied if you do not specify a value.
Syntax:
[Device-Name]>set <table name> <table index> <element 1> <value 1> ...
<element n> <value n>
Example:[Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0
A new table entry is created for IP address 10.0.0.10 with a 255.255.0.0 subnet mask.Example 3 - Modify a table entry or row
Use the index to be modified and the table elements you would like to modify. For example, suppose the IP Access Table has one entry and you wanted to modify the IP address:
[Device-Name]>set mgmtipaccesstbl 1 ipaddr 10.0.0.11
You can also modify several elements in the table entry. Enter the index number and specific table elements you would like to modify. (Hint: Use the search Command to see the elements that belong to the table.)
[Device-Name]>set mgmtipaccesstbl 1 ipaddr 10.0.0.12 ipmask 255.255.255.248
cmt "First Row"
Example 4 - Enable, Disable, or Delete a table entry or row
The following example illustrates how to manage the second entry in a table.
Syntax:
[Device-Name]>set <Table> index status <enable, disable, delete>[Device-Name]>set <Table> index status <1=enable, 2=disable, 3=delete>
Example:[Device-Name]>set mgmtipaccesstbl 2 status enable[Device-Name]>set mgmtipaccesstbl 2 status disable[Device-Name]>set mgmtipaccesstbl 2 status delete[Device-Name]>set mgmtipaccesstbl 2 status 2
NOTE: You may need to enable a disabled table entry before you can change the entry's elements.Example 5 - Show the Group Parameters
This example illustrates how to view all elements of a group or table.
Syntax:
[Device-Name]>show <group name>
Example:[Device-Name]>show network
The CLI displays network group parameters. Note show network and show ip return the same data.
Figure A-10 Results of "show network" and "show ip" CLI CommandsExample 6 - Show Individual and Table Parameters
1. View a single parameter.
Syntax:
[Device-Name]>show <parameter name>
Example:[Device-Name]>show ipaddr
Displays the Access Point IP address.
Figure A-11 Result of "show ipaddr" CLI Command2. View all parameters in a table.
Syntax:
[Device-Name]>show <table name>
Example:[Device-Name]>show mgmtipaccesstbl
The CLI displays the IP Access Table and its entries.Using Tables and Strings
Working with Tables
Each table element (or parameter) must be specified, as in the example below.
[Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0Below are the rules for creating, modifying, enabling/disabling, and deleting table entries.
- Creation
- The table name is required.
- The table index is required - for table entry/instance creation the index is always zero (0).
- The order in which the table arguments or objects are entered in not important.
- Parameters that are not required can be omitted, in which case they will be assigned the default value.
- Modification
- The table name is required.
- The table index is required - to modify the table, "index" must be the index of the entry to be modified.
- Only the table objects that are to be modified need to be specified. Not all the table objects are required.
- If multiple table objects are to be modified the order in which they are entered is not important.
- If the entire table entry is to be modified, all the table objects have to be specified.
- Enabling/Disabling
- Deletion
Using Strings
Since there are several string objects supported by the AP, a string delimiter is required for the strings to be interpreted correctly by the command line parser. For this CLI implementation, the single quote or double quote character can be used at the beginning and at the end of the string.
For example:
[Device-Name]>set sysloc Lobby - Does not need quote marks[Device-Name]>set sysloc "Front Lobby" - Requires quote marks.
The scenarios supported by this CLI are:
The string delimiter does not have to be used for every string object. The single quote or double quote only has to be used for string objects that contain blank space characters. If the string object being used does not contain blank spaces, then the string delimiters, single or double quotes, mentioned in this section are not required.
Configuring the AP using CLI commands
Log into the AP using HyperTerminal
- Open your terminal emulation program (like HyperTerminal) and set the following connection properties:
- Under File > Properties > Settings > ASCII Setup, enable the Send line ends with line feeds option.
HyperTerminal sends a line return at the end of each line of code.
- Enter the CLI password (default is public).
NOTE: Proxim recommends changing your default passwords immediately. To perform this operation using CLI commands, see Change Passwords.Log into the AP using Telnet
The CLI commands can be used to access, configure, and manage the AP using Telnet. Follow these steps:
- Confirm that your computer's IP address is in the same IP subnet as the AP.
NOTE: If you have not previously configured the Access Point's IP address and do not have a DHCP server on the network, the Access Point will default to an IP address of 169.254.128.132.- Go to the DOS command prompt on your computer.
- Type telnet <IP Address of the unit>.
- Enter the CLI password (default is public).
NOTE: Proxim recommends changing your default passwords immediately. To perform this operation using CLI commands, see Change Passwords.Set Basic Configuration Parameters using CLI Commands
There are a few basic configuration parameters that you may want to setup right away when you receive the AP. For example:
Set System Name, Location and Contact Information
NOTE: System name must:
[Device-Name]>set sysname <Name> sysloc <Unit Location>[Device-Name]>set sysctname <Contact Name>[Device-Name]>set sysctphone <Contact Phone Number> sysctemail <Contact E-mail address>[Device-Name]>show system
Figure A-12 Result of "show system" CLI CommandSet Static IP Address for the AP
NOTE: The IP Subnet Mask of the AP must match your network's Subnet Mask.
[Device-Name]>set ipaddrtype static[Device-Name]>set ipaddr <fixed IP address of unit>[Device-Name]>set ipsubmask <IP Mask>[Device-Name]>set ipgw <gateway IP address>[Device-Name]>show networkChange Passwords
[Device-Name]>passwd <Old Password> <New Password> <Confirm Password> (CLI password)[Device-Name]>set httppasswd <New Password> (HTTP interface password)[Device-Name]>set snmprpasswd <New Password> (SNMP read password)[Device-Name]>set snmprwpasswd <New Password> (SNMP read/write)[Device-Name]>set snmpv3authpasswd <New Password> (SNMPv3 authentication password)[Device-Name]>set snmpv3privpasswd <New Password> (SNMPv3 privacy password)[Device-Name]>reboot 0CAUTION: Proxim strongly urges you to change the default passwords to restrict access to your network devices to authorized personnel. If you lose or forget your password settings, you can always perform the Reset to Factory Default Procedure.Set Network Names for the Wireless Interface
[Device-Name]>set wif <3 (Wireless Interface A) or 4 (Wireless Interface B)> netname <Network Name (SSID) for wireless interface>[Device-Name]>show wif
Figure A-13 Results of "show wif" CLI command for an APEnable 802.11d Support and Set the Country Code
Perform the following command to enable 802.11d IEEE 802.11d support for additional regulatory domains.
[Device-Name]>set wif<3 (Wireless Interface A) or 4 (Wireless Interface B)>dot11dstatus <enable/disable>Perform the following command to set a country code:
[Device-Name]>set syscountrycode <country code>Select a country code from the following table. Note that not all countries are available for all products. This table is derived from ISO 3166.
Enable and Configure TX Power Control for the Wireless Interface(s)
The TX Power Control feature lets the user configure the transmit power level of the card in the AP.
Perform the following commands to enable TX Power Control and set the transmit power level:
[Device-Name]>set txpowercontrol enable
[Device-Name]>set wif <interface number> currentbackofftpcvalue <1-35 dBm>Configure SSIDs (Network Names), VLANs, and Profiles
Perform the following command to configure SSIDs and VLANS, and to assign Security and RADIUS Profiles.
[Device-Name]>set wifssidtbl <Wireless Interface Index.SSID Index> ssid <Network Name> vlanid <-1 to 1094> ssidauth <enable/disable> acctstatus <enable/disable> secprofile <Security Profile Nmuber> radmacprofile <MAC Authentication Profile Name> radeapprofile <EAP Authentication Profile Name> radacctprofile <Accounting Profile Name> radmacauthstatus <enable/disable> aclstatus <enable/disable>
Examples:[Device-Name]>set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication" radacctprofile "Accounting" radmacauthstatus enable aclstatus enable
[Device-Name]>set wifssidtbl 4.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication" radacctprofile "Accounting" radmacauthstatus enable aclstatus enableDownload an AP Configuration File from your TFTP Server
Begin by starting your TFTP program. It must be running and configured to transmit and receive.
[Device-Name]>set tftpfilename <file name> tftpfiletype config
tftpipaddr <IP address of your TFTP server>[Device-Name]>show tftp (to ensure the filename, file type, and the IP address are correct)[Device-Name]>download *[Device-Name]>reboot 0
After following the complete process (above) once, you can download a file of the same name (so long as all the other parameters are the same), with the following command:
[Device-Name]>download *Backup your AP Configuration File
Begin by starting your TFTP program. It must be running and configured to transmit and receive.
[Device-Name]>upload <TFTP Server IP address> <tftpfilename (such as "config.sys")> config[Device-Name]>show tftp (to ensure the filename, file type, and the IP address are correct)After setting the TFTP parameters, you can backup your current file (so long as all the other parameters are the same), with the following command:
[Device-Name]>upload *Set up Auto Configuration
The Auto Configuration feature which allows an AP to be automatically configured by downloading a specific configuration file from a TFTP server during the boot up process.
Perform the following commands to enable and set up automatic configuration:
NOTE: The configuration filename and TFTP server IP address are configured only when the AP is configured for Static IP. If the AP is configured for Dynamic IP these parameters are not used and obtained from DHCP.
The default filename is "config". The default TFTP IP address is "169.254.128.133".
[Device-Name]>set autoconfigstatus <enable/disable>set autoconfigfilename <filename>
[Device-Name]>Enter the filename of the configuration file that is used if the AP is configured for Static IP.set autoconfigTFTPaddr <IP address>
[Device-Name]>
Enter the TFTP server address that is used if the AP is configured for Static IP.Other Network Settings
There are other configuration settings that you may want to set for the AP. Some of them are listed below.
NOTE: See Advanced Configuration for more information on these settings.Configure the AP as a DHCP Server
NOTE: You must have at least one entry in the DHCP Server IP Address Pool Table before you can set the DHCP Server Status to Enable.
[Device-Name]>set dhcpstatus disable[Device-Name]>set dhcpippooltbl 0 startipaddr <start ip address>
endipaddr <end ip address>[Device-Name]>set dhcpgw <gateway ip address>[Device-Name]>set dhcppridnsipaddr <primary dns ip address>[Device-Name]>set dhcpsecdnsipaddr <secondary dns ip address>[Device-Name]>set dhcpstatus enable[Device-Name]>reboot 0
CAUTION: Before enabling this feature, confirm that the IP address pools you have configured are valid addresses on the network and do not overlap the addresses assigned by any other DHCP server on the network. Enabling this feature with incorrect address pools will cause problems on your network.Configure the DNS Client
[Device-Name]>set dnsstatus enable[Device-Name]>set dnsprisvripaddr <IP address of primary DNS server>[Device-Name]>set dnssecsvripaddr <IP address of secondary DNS server>[Device-Name]>set dnsdomainname <default domain name>[Device-Name]>show dns
Figure A-14 Results of "show dns" CLI commandConfigure DHCP Relay
Perform the following command to enable or disable DHCP Relay Agent Status.
NOTE: You must have at least one entry in the DHCP Relay Server Table before you can set the DHCP Relay Status to Enable.
[Device-Name]>set dhcprelaystatus enable
Configure DHCP Relay Servers
Perform the following command to configure and enable a DHCP Relay Server. The AP allows the configuration of a maximum of 10 server settings in the DHCP Relay Agents server table.
[Device-Name]>set dhcprlyindex 1 dhcprlyipaddr <ip address> dhcprlycmt <comment> dhcprlystatus 1 (1 to enable, 2 to disable, 3 to delete, 4 to create)
Maintain Client Connections using Link Integrity
[Device-Name]>show linkinttbl (this shows the current links)[Device-Name]>set linkinttbl <1-5 (depending on what table row you wish to address)>
ipaddr <ip address of the host computer you want to check>[Device-Name]>set linkintpollint <the interval between link integrity checks>[Device-Name]>set linkintpollretx <number of times to retransmit before considering the link down>[Device-Name]>set linkintstatus enable[Device-Name]>show linkinttbl(to confirm new settings)reboot 0
[Device-Name]>
Change Wireless Interface Settings
See Interfaces for information on the parameters listed below. The AP-4000/4000M/4900M uses index 3 for Wireless Interface A (802.11a/4.9 Ghz radio) and index 4 for Wireless Interface B (802.11b/g radio).
Operational Mode
[Device-Name]>set wif <index> mode <see table>
Autochannel Select (ACS)
ACS is enabled by default. Reboot after disabling or enabling ACS.
[Device-Name]>set wif <index> autochannel <enable/disable>[Device-Name]>reboot 0
Enable/Disable Closed System
[Device-Name]>set wif <index> closedsys <enable/disable>
Shutdown/Resume Wireless Service
[Device-Name]>set wif <index> wssstatus <1 (resume)/2 (shutdown)>
Set Load Balancing Maximum Number of Clients
[Device-Name]>set wif <index> lbmaxclients <1-63>
Set the Multicast Rate (802.11a/4.9 Ghz)
[Device-Name]>set wif 3 multrate <6, 12, 24(Mbits/sec)>Set the Multicast Rate (802.11b/g)
[Device-Name]>set wif 4 multrate <1, 2, 5.5, 11(Mbits/sec)>
Enable/Disable Super Mode (802.11a/g only)
[Device-Name]>set wif 3 supermode <enable/disable>Enable/Disable Turbo Mode (802.11a/g only)
[Device-Name]>set wif 3 turbo <enable/disable>NOTE: Super mode must be enabled on the interface before Turbo mode can be enabled.NOTE: Turbo mode and Mesh mode (either Mesh AP or Mesh Portal) can not be enabled on the same interface simultaneously.
Configure Antenna Diversity
NOTE: When the AP-4900M is configured to use 4.9 GHz Public Safety operational mode, antenna diversity is disabled by default, and antenna 3 is configured for use.
[Device-Name]>set wif 3 atdiversity <3, 4, 5(auto)> (see below)
[Device-Name]>set wif 4 atdiversity <1, 2, 5(auto)> (see below)
[Device-Name]>reboot
NOTE: See Antennas for more information on internal and external antenna ports.
Set the Distance Between APs
[Device-Name]>set wif <index> distaps <1-5> (see below)
[Device-Name]>reboot 0
Set Ethernet Speed and Transmission Mode
[Device-Name]>set etherspeed <value>(see below)reboot 0
[Device-Name]>
Set Interface Management Services
Edit Management IP Access Table
[Device-Name]>set mgmtipaccesstbl <index> ipaddr <IP address> ipmask <subnet mask>
Configure Management Ports
[Device-Name]>set snmpifbitmask <(see below)>[Device-Name]>set httpifbitmask <(see below)>[Device-Name]>set telifbitmask <(see below)>
Choose from the following values:
Set Communication Ports
[Device-Name]>set httpport <HTTP port number (default is 80)>[Device-Name]>set telport <Telnet port number (default is 23)>
Configure Secure Socket Layer (HTTPS)
Enabling SSL and configuring a passphrase allows encrypted Secure Socket Layer communications to the AP through the HTTPS interface.
[Device-Name]>set sslstatus <enable/disable>
The user must change the SSL passphrase when uploading a new certificate/private key pair, which will have a corresponding passphrase.[Device-Name]>set sslpassphrase <SSL certificate passphrase>
[Device-Name]>show http (to view all HTTP configuration information including SSL.)HTTP Group Parameters
=====================httpifbitmask : 15
httppasswd : ********
httpport : 80
httphelplink : file:///C:/Program Files/ORiNOCO/AP4xxx/HTML/index.htm
httpsetupwiz : disable
sslstatus : enable
sslpassphrase : ********
Figure A-15 Result of "show HTTP" CLI CommandSet Telnet Session Timeouts
[Device-Name]>set tellogintout <time in seconds between 1 and 300(default is 30)>[Device-Name]>set telsessiontout <time in seconds between 1 and 36000(default is 900)>
Configure Serial Port Interface
NOTE: To avoid unexpected performance issues, leave Flow Control at the default setting (none) unless you are sure what this setting should be.
[Device-Name]>set serbaudrate <2400, 4800, 9600, 19200, 38400, 57600>[Device-Name]>set serflowctrl <none, xonxoff>[Device-Name]>show serial
Figure A-16 Result of "show serial" CLI CommandConfigure Syslog
[Device-Name]>set syslogpriority <1-7 (default is 6)>[Device-Name]>set syslogstatus <enable/disable>[Device-Name]>set sysloghbstatus <enable/disable> (default is disable)[Device-Name]>set sysloghbinterval <1-604800> (default is 900 seconds)[Device-Name]>set sysloghosttbl <index> ipaddr <ipaddress> cmt <comment> status <enable/disable>Configure Intra BSS
[Device-Name]>set intrabssoptype <passthru (default)/block)>Configure Wireless Distribution System
Create/Enable WDS
[Device-Name]>set wdstbl <Index> partnermacaddr <MAC Address> status enableEnable/Disable WDS
[Device-Name]>set wdstbl <Index> status <enable/disable>NOTE: <Index> is 3.1-3.6 (Wireless A) or 4.1-4.6 (Wireless B). To determine the index, type show wdstbl at the prompt.NOTE: When WDS is enabled, spanning tree protocol is automatically enabled. It may be manually disabled. If Spanning Tree protocol is enabled by WDS and WDS is subsequently disabled, Spanning tree will remain enabled until it is manually disabled. See Spanning Tree Parameters.Configure MAC Access Control
Setup MAC (Address) Access Control
[Device-Name]>set wifssidtbl <index> aclstatus enable/disableset macacloptype <passthru, block>
[Device-Name]>[Device-Name]>reboot 0Add an Entry to the MAC Access Control Table
[Device-Name]>set macacltbl 0 macaddr <MAC Address> status enable[Device-Name]>show macacltblDisable or Delete an Entry in the MAC Access Control Table
[Device-Name]>set macacltbl <index> status <disable/delete>[Device-Name]>show macacltblNOTE: For larger networks that include multiple Access Points, you may prefer to maintain this list on a centralized location using the RADIUS parameters (see Set RADIUS Parameters).Set RADIUS Parameters
Configure RADIUS Authentication servers
Perform the following command to configure a RADIUS Server and assign it to a VLAN. The RADIUS Server Profile index is specified by the index parameter and the subindex parameter specifies whether you are configuring a primary or secondary RADIUS server.
[Device-Name]>set radiustbl <Index> profname <Profile Name> seraddrfmt <1 - IP Address 2 - Name> sernameorip <IP Address or Name> port <value> ssecret <value> responsetm <value> maxretx <value> acctupdtintrvl <value> macaddrfmt <value> authlifetm <value> radaccinactivetmr <value> vlanid <vlan id -1 to 4094> status enableNOTE: To create a new RADIUS profile, use 0 for <Index>.Examples of Configuring Primary and Secondary RADIUS Servers and Displaying the RADIUS Configuration
Primary server configuration:
[Device-Name]>set radiustbl 1.1 profname "MAC Authentication" seraddrfmt 1 sernameorip 20.0.0.20 port 1812 ssecret public responsetm 3 maxretx 3 acctupdtintrvl 0 macaddrfmt 1 authlifetm 900 radaccinactivetmr 5 vlanid 22 status enableSecondary server configuration:
[Device-Name]>set radiustbl 1.2 profname "MAC Authentication" seraddrfmt 1 sernameorip 20.0.0.30 port 1812 ssecret public responsetm 3 maxretx 3 acctupdtintrvl 0 macaddrfmt 1 authlifetm 900 radaccinactivetmr 5 vlanid 33 status enable[Device-Name]>show radiustblIndex : 1
Primary/Backup : Primary
Profile Name : MAC Authentication
Server Status : notReady
Server Addressing Format : ipaddr
IP Address/Host Name : 0.0.0.0
Destination Port : 1812
VLAN Identifier : -1
MAC Address Format : dashdelimited
Response Time : 3
Maximum Retransmission : 3
Authorization Lifetime : 0
Accounting Update Interval : 0
Accounting Inactivity Timer : 5
Index : 1
Primary/Backup : Backup
Profile Name : MAC Authentication
Server Status : notReady
Server Addressing Format : ipaddr
IP Address/Host Name : 0.0.0.0
Destination Port : 1812
VLAN Identifier : -1
MAC Address Format : dashdelimited
Response Time : 3
Maximum Retransmission : 3
..
.
Index : 4
Primary/Backup : Backup
Profile Name : Management Access
Server Status : notReady
Server Addressing Format : ipaddr
IP Address/Host Name : 0.0.0.0
Destination Port : 1812
VLAN Identifier : -1
MAC Address Format : dashdelimited
Response Time : 3
Maximum Retransmission : 3
Authorization Lifetime : 0
Accounting Update Interval : 0
Accounting Inactivity Timer : 5Figure A-17 Result of "showradiustbl" CLI CommandSet Rogue Scan Parameters
Perform the following command to enable or disable Rogue Scan on a wireless interface and configure the scanning parameters.
The cycletime parameter is only configured for background scanning mode.
[Device-Name]>set rscantbl <3, 4> mode <1 for background scanning, 2 for continuous scanning> cycletime <cycletime from 1-1440 minutes> status <enable, disable>NOTE: Rogue Scan cannot be enabled on a wireless interface when the Wireless Service Status on that interface is shutdown. First, resume service on the wireless interface.Set Hardware Configuration Reset Parameters
The Hardware Configuration Reset commands allows you to enable or disable the hardware reset functionality and to change the password to be used for configuration reset during boot up.
To disable hardware configuration reset, enter:
[Device-Name]>set hwconfigresetstatus disableTo enable hardware configuration reset, enter:
[Device-Name]>set hwconfigresetstatus enableTo define the Configuration Reset Password to be used for configuration reset during boot up, enter the following command
[Device-Name]>set configresetpasswd <password>It is important to safely store the
NOTE: It is important to safely store the configuration reset password. If a user forgets the configuration reset password, the user will be unable to reset the AP to factory default configuration if the AP becomes inaccessible and the hardware configuration reset functionality is disable.Set VLAN/SSID Parameters
Enable VLAN Management
[Device-Name]>set vlanstatus enable[Device-Name]>set vlanmgmtid <1-4094>
[Device-Name]>show wifssidtbl (to review your settings)[Device-Name]>reboot 0Disable VLAN Management
[Device-Name]>set vlanstatus disable or[Device-Name]>set vlanmgmtid -1[Device-Name]>reboot 0Add a Entry to the WIFSSID Table
[Device-Name]>set wifssidtbl <index> ssid <Network Name> vlanid <-1 (untagged) or 1-4094> status enable
Set Security Profile Parameters
Configure a Security Profile with Non Secure Security Mode
[Device-Name]>set secprofiletbl <index> secmode nonsecure status enableExample:
[Device-Name]>set secprofiletbl 2 secmode nonsecure status enableConfigure a Security Profile with WEP Security Mode
[Device-Name]>set secprofiletbl <index> secmode wep encryptkey<0-3> <value> encryptkeylength <value> encryptkeytx <value> status enableExample:
[Device-Name]>set secprofiletbl 3 secmode wep encryptkey0 12345 encryptkeylength 1 encryptkeytx 0 status enableConfigure a Security Profile with 802.1x Security Mode
[Device-Name]>set secprofiletbl <index> secmode 802.1x encryptkeylength <value> status enableExample:
[Device-Name]>set secprofiletbl 4 secmode 802.1x encryptkeylength 1 status enableConfigure a Security Profile with WPA Security Mode
[Device-Name]>set secprofiletbl <index> secmode wpa status enableExample:
[Device-Name]>set secprofiletbl 5 secmode wpa status enableConfigure a Security Profile with WPA-PSK Security Mode
[Device-Name]>set secprofiletbl <index> secmode wpa-psk passphrase <value> status enableExample:
[Device-Name]>set secprofiletbl 6 secmode wpa-psk passphrase 12345678 status enableConfigure a Security Profile with 802.11i Security Mode
[Device-Name]>set secprofiletbl <index> secmode 802.11i status enableExample:
[Device-Name]>set secprofiletbl 7 secmode 802.11i status enableConfigure a Security Profile with 802.11i-PSK Security Mode
[Device-Name]>set secprofiletbl <index> secmode 802.11i-psk passphrase <value> status enableExample:
[Device-Name]>set secprofiletbl 8 secmode 802.11i-psk passphrase 12345678 status enableCLI Monitoring Parameters
Using the show command with the following table parameters will display operating statistics for the AP (these are the same statistics that are described in the Monitoring section).
- staticmp: Displays the ICMP statistics.
- statarptbl: Displays the IP ARP Table statistics.
- statbridgetbl: Displays the Learn Table.
- statiapp: Displays the IAPP statistics.
- statradius: Displays the RADIUS Authentication statistics.
- statif: Displays information and statistics about the Ethernet and wireless interfaces.
- stat802.11: Displays additional statistics for the wireless interfaces.
- statethernet: Displays additional statistics for the Ethernet interface.
- statmss: Displays station statistics and Wireless Distribution System links.
- statmesh: Displays statistics about the Mesh network.
Parameter Tables
Objects contain groups that contain both parameters and parameter tables. Use the following Tables to configure the Access Point. Columns used on the tables include:
Access Point network objects are associated with Groups. The network objects are listed below and associated parameters are described in the following Parameter Tables:
- System Parameters - Access Point system information
- Inventory Management Information - Hardware, firmware, and software version information
- Network Parameters - IP and Network Settings
- IP Configuration Parameters - Configure the Access Point's IP settings
- DNS Client for RADIUS Name Resolution - Configure the Access Point as a DNS client
- DHCP Server Parameters - Enable or disable dynamic host configuration
- SNTP Parameters - Configure
- Link Integrity Parameters - Monitor link status
- Interface Parameters - Configure Wireless and Ethernet settings
- Channel Blacklist Parameters - View and configure blacklisted channels
- Wireless Distribution System (WDS) Parameters - Configure the WDS partnerships
- Wireless Interface SSID/VLAN/Profile Parameters - Configure the SSIDs, VLANs, and security modes for each interface. Up to 16 SSIDs per wireless interface are supported; different security settings can be applied to each SSID, and a unique VLAN can be configured per SSID.
- Ethernet Interface Parameters - Set the speed and duplex of the Ethernet port.
- Mesh Network Parameters - Configure the Mesh network.
- Management Parameters - Control access to the AP's management interfaces
- SNMP Parameters - Set read and read/write passwords
- HTTP Parameters - Set up the graphical web browser interface. If required, enable SSL and configure the SSL certificate passphrase.
- Telnet Parameters - Telnet Port setup
- Serial Port Parameters - Serial Port setup
- RADIUS Based Management Access Parameters - Configure RADIUS Based Management Access for HTTP and Telnet access.
- SSH Parameters - Enable SSH and configure the host key.
- TFTP Server Parameters - Set up for file transfers; specify IP Address, file name, and file type
- IP Access Table Parameters - Configure range of IP addresses that can access the AP
- Auto Configuration Parameters - Configure the Auto Configuration feature which allows an AP to be automatically configured by downloading a configuration file from a TFTP server during boot up.
- Ethernet Protocol Filtering Parameters - Control network traffic based on protocol type
- Static MAC Address Filter Table - Enable and disable specific addresses
- Proxy ARP Parameters - Enable or disable proxy ARP for wireless clients
- IP ARP Filtering Parameters - Control which ARP messages are sent to wireless clients based on IP settings
- Broadcast Filtering Table - Control the type of broadcast packets forwarded to the wireless network
- TCP/UDP Port Filtering - Filter IP packets based on TCP/UDP port
- SNMP Table Host Table Parameters - Enter the list of IP addresses that will receive alarms from the AP
- Syslog Parameters - Configure the AP to send Syslog information to network servers
- Spanning Tree Parameters - Used to help prevent network loops
- Storm Threshold Parameters - Set threshold for number of broadcast packets
- Intra BSS Subscriber Blocking - Enable or disable peer to peer traffic on the same AP
- Packet Forwarding Parameters - Redirect traffic from wireless clients to a specified MAC address
- Set RADIUS Parameters - Configure RADIUS Servers and assign them to VLANs.
- Security Parameters - Access Point security settings
- MAC Access Control Parameters - Control wireless access based on MAC address
- Rogue Scan Configuration Table - Enable and configure Rogue Scan to detect Rogue APs and clients.
- 802.1x Parameters - Configure 802.1X Supplicant Timeout parameter
- Hardware Configuration Reset - Disable or enable hardware configuration reset and configure a configuration reset password.
- Other Parameters - Configure Security Profiles that define allowed security modes (wireless clients), and encryption and authentication mechanisms.
- VLAN/SSID Parameters - Enable the configuration of multiple subnetworks based on VLAN ID and SSID.
- IAPP Parameters - Enable or disable the Inter-Access Point Protocol
- Wireless Multimedia Enhancements (WME)/Quality of Service (QoS) parameters - Enable and configure Wireless Multimedia Enhancement/Quality of Service parameters, QoS policies, mapping priorities, and EDCA parameters. Apply a configured QoS policy to a particular SSID.
System Parameters
max 254 characters
1
dd - days
hh - hours
mm - minutes
ss - seconds
Note: You must enter the following command twice to reset to defaults:
set sysresettodefaults 1
* Available only on APs with model numbers ending with -WD, -EU, or -UK . When available, this object must be configured before any inter- face parameters can be set.Country Identifiers
NOTE: All countries may not be available on your AP.
Inventory Management Information
The inventory management commands display advanced information about the AP's installed components. You may be asked to report this information to a representative if you contact customer support.
Network Parameters
IP Configuration Parameters
NOTE: The IP Address Assignment Type (ipaddrtype) must be set to static before the IP Address (ipaddr), IP Mask (ipmask) or Default Gateway IP Address (ipgw) values can be entered.DNS Client for RADIUS Name Resolution
DHCP Server Parameters
NOTE: The DHCP Server (dhcpstatus) can only be enabled after a DHCP IP Pool table entry has been created.DHCP Server table for IP pools
NOTE: Set either End IP Address or Width (but not both) when creating an IP address pool.DHCP Relay Group
The DHCP Relay Group allows you to enable or disable DHCP Relay Agent Status.
disable
DHCP Relay Server Table
The DHCP Relay Server Table contains the commands to set the table entries. The AP supports the configuration of a maximum of 10 server settings in the DHCP Relay Agents server table.
SNTP Parameters
Link Integrity Parameters
* Link integrity cannot be configured when the AP is configured to function as a Mesh AP.Link Integrity IP Target Table
Interface Parameters
Wireless Interface Parameters
The wireless interface group parameter is wif. Wireless Interface A (802.11a radio) uses table index 3 and Wireless Interface B (802.11b/g radio) uses table index 4.
Common Parameters to 4.9 Ghz, 802.11a, and 802.11/b/g
* For 802.11a APs certified in the ETSI and TELEC regulatory domains and operating in the middle frequency band, disabling Auto Channel Select will limit the available channels to those in the lower frequency band.† Wireless Service Status cannot be shut down on an interface where Rogue Scan is enabled.‡ Distance Between APs allows the AP to perform better in high noise environments by increasing the receive sensitivity and transmit defer threshold, as follows:
§ When the AP-4900M is configured to use the 4.9 GHz Public Safety operational mode, antenna diversity is disabled by default, and antenna 3 is configured for use.** Each 802.11 packet is acknowledged by the receiving station. On links longer than about 100m, the time that it takes for the ACK to get back to the sending station is long enough to cause the sending station to believe that the packet was not properly received. This problem can be corrected by adjusting the AP Link Length parameter to a value that is larger than the length in meters of the longest link being serviced by that AP.802.11a/4.9 GHz Only Parameters
0 (Auto Fallback)
6 Mbits/sec
9 Mbits/sec
12 Mbits/sec
18 Mbits/sec
24 Mbits/sec
36 Mbits/sec
48 Mbits/sec
54 Mbits/sec4.9 GHz (10 MHz):
0 (Auto Fallback)
3 Mbits/s
4.5 Mbits/s
6 Mbits/s
9 Mbits/s
12 Mbits/s
18 Mbits/s
24 Mbits/s
27 Mbits/s.
4.9 GHz (20 MHz):
0 (Auto Fallback)
6 Mbits/sec
9 Mbits/sec
12 Mbits/sec
18 Mbits/sec
24 Mbits/sec
36 Mbits/sec
48 Mbits/sec
54 Mbits/sec
disable (default)
disable (default)
* Available for the 5 GHz frequency band in the FCC regulatory domain only.† Super mode must be enabled on the wireless interface before Turbo mode can be enabled. Turbo mode and Mesh mode (either Mesh AP or Mesh Portal) can not be enabled on the same interface simultaneously.802.11b Only Parameters
2 Mbits/sec (2) (default)
5.5 Mbits/sec (3)
11 Mbits/sec (4)
disable (default)
2 Mbits/sec
5.5 Mbits/sec
11 Mbits/sec
1 Mbits/sec
2 Mbits/sec
5.5 Mbits/sec
11 Mbits/sec
Europe -- ETSI
Japan -- TELEC
802.11b/g Only Parameters
0 (auto fallback; default)
1 Mbits/sec
2 Mbits/sec
5.5 Mbits/sec
11 Mbits/sec
For 802.11g-only mode:*
0 (auto fallback; default)
6 Mbits/sec
9 Mbits/sec
12 Mbits/sec
18 Mbits/sec
24 Mbits/sec
36 Mbits/sec
48 Mbits/sec
54 Mbits/sec
For 802.11b/g mode:
0 (auto fallback; default)
1 Mbits/sec
2 Mbits/sec
5.5 Mbits/sec
11 Mbits/sec
6 Mbits/sec
9 Mbits/sec
12 Mbits/sec
18 Mbits/sec
24 Mbits/sec
36 Mbits/sec
48 Mbits/sec
54 Mbits/sec
disable (default)
* Also for 802.11g-wifi mode. 802.11g-wifi has been defined for Wi-Fi testing purposes; it is not recommended for use in your wireless network environment.† Available in 802.11b/g or 802.11g modes only.Channel Blacklist Parameters
Wireless Distribution System (WDS) Parameters
Wireless Interface SSID/VLAN/Profile Parameters
The Wireless Interface SSID table manages the SSIDs, VLANs, Security Profiles, and RADIUS Profiles associated to each SSID.
For configuration examples, see Configure SSIDs (Network Names), VLANs, and Profiles.
Wireless Distribution System (WDS) Security Table Parameters
The WDS Security Table manages WDS related security objects.
Ethernet Interface Parameters
Mesh Network Parameters
NOTE: Advanced Mesh parameters are available from the web interface only. See Advanced Mesh Parameters.* Higher RSSI smoothing and roaming threshold values create a more static mesh environment. Lower RSSI smoothing and roaming threshold values create a more dynamic mesh environmentManagement Parameters
Secure Management Parameters
2 (disable)
SNMP Parameters
HTTP Parameters
* The help link must be set to an HTTP address. Use the forward slash character ("/") rather than the backslash character ("\") when configur- ing the Help Link location.Telnet Parameters
Serial Port Parameters
RADIUS Based Management Access Parameters
The RADIUS Based Management Access parameters allow you to enable HTTP or Telnet Radius Management Access, enable or disable local user access, and configure the local user password.
The default local user ID is root and the default local user password is public. "Root" cannot be configured as a valid user for RADIUS based management access when local user access is enabled.
SSH Parameters
The following commands enable or disable SSH and set the SSH host key.
The AP SSH feature, open-SSH, confirms to the SSH protocol, and supports SSH version 2. The following SSH clients have been verified to interoperate with the AP's server. The following table lists the clients, version number, and the website of the client.
For key generation, only the OpenSSH client has been verified.
Auto Configuration Parameters
These parameters relate to the Auto Configuration feature which allows an AP to be automatically configured by downloading a specific configuration file from a TFTP server during the boot up process.
TFTP Server Parameters
These parameters relate to upload and download commands.
When you execute an upload and/or download Command, the specified arguments are stored in TFTP parameters for future use. If nothing is specified in the command line when issuing subsequent upload and/or download commands, the stored arguments are used.
IP Access Table Parameters
When creating table entries, you may either specify the argument name followed by argument value or simply enter the argument value. When only the argument value is specified, then enter the values in the order depicted by the following table. CLI applies default values to the omitted arguments. Due to the nature of the information, the only argument that can be omitted is the "comment" argument.
Filtering Parameters
Ethernet Protocol Filtering Parameters
Ethernet Filtering Table
Identify the different filters by using the table index.
NOTE: The filter Operation Type (passthru or block) applies only to the protocol filters that are enabled in this table.Static MAC Address Filter Table
Proxy ARP Parameters
disable (default)
IP ARP Filtering Parameters
Broadcast Filtering Table
TCP/UDP Port Filtering
The following parameters are used to enable/disable the Port filter feature.
disable
TCP/UDP Port Filtering Table
The following parameters are used to configure TCP/UDP Port filters.
Alarms Parameters
SNMP Table Host Table Parameters
When creating table entries, you may either specifying the argument name followed by argument value. CLI applies default values to the omitted arguments. Due to the nature of the information, the only argument that can be omitted is the "comment" argument.
Syslog Parameters
The following parameters configure the Syslog settings.
NOTE: When Heartbeat is enabled, the AP periodically sends a message to the Syslog server to indicate that it is active. The frequency with which the heartbeat message is sent depends upon the setting of the Heartbeat Interval.Syslog Host Table
The table described below configures the Syslog hosts that will receive message from the AP. You can configure up to ten Syslog hosts.
Bridge Parameters
Spanning Tree Parameters
Spanning Tree Priority and Path Cost Table
Storm Threshold Parameters
Storm Threshold Table
Intra BSS Subscriber Blocking
The following parameters control the Intra BSS traffic feature, which prevent wireless clients that are associated with the same AP from communicating with each other:
block
Packet Forwarding Parameters
The following parameters control the Packet Forwarding feature, which redirects wireless traffic to a specific MAC address:
RADIUS Parameters
General RADIUS Parameters
RADIUS Server Configuration Parameters
NOTE: Use a server name only if you have enabled the DNS Client functionality. See DNS Client for RADIUS Name Resolution.Security Parameters
MAC Access Control Parameters
disable (default)
block
MAC Access Control Table
Rogue Scan Configuration Table
The Rogue Scan Configuration Table allows you to enable or disable Rogue Scan and configure the scanning parameters.
802.1x Parameters
Hardware Configuration Reset
The Hardware Configuration Reset commands allows you to enable or disable the feature and to change the password to be used for configuration reset during boot up.
Security Profile Table
The Security Profile Table allows you to configure security profiles. A maximum of 16 security profiles are supported per wireless interface.
Each security profile can contain one or more enabled security modes (Non-secure station, WEP station, 802.1x station, WPA station, WPA-PSK station, 802.11i, 802.11i-PSK). The WEP/PSK parameters are separately configurable for each security mode. See the command examples in Set Security Profile Parameters.
Encryption Key Format
If WEP security mode is configured, then the appropriate key size must be configured. The AP supports 63-, 128-, and 152-bit encryption keys. Encryption keys may be configured using either hexadecimal or ASCII values, as described in the following table.
Each ASCII character corresponds to two hexadecimal digits. See ASCII Character Chart for ASCII/Hexadecimal correspondence.
VLAN/SSID Parameters
disable (default)
or 1 - 4094
Other Parameters
IAPP Parameters
NOTE: These parameters configure the Inter Access Point Protocol (IAPP) for roaming. Leave these settings at their default value unless a technical representative asks you to change them.Wireless Multimedia Enhancements (WME)/Quality of Service (QoS) parameters
The Wireless Multimedia Enhancements commands enable and configure Wireless Multimedia Enhancement/Quality of Service parameters per wireless interface. The following two commands are part of the Wireless Interface Properties table.
Enabling QoS
disable (default)
Configuring QoS Policies
The QoS group manages the QoS policies:
* QoS must be enabled on a wireless interface before spectralink can be enabled.† A priority mapping needs to be specified for a QoS Policy. The priority mapping depends on the type of policy configured. For Layer 2 policy types (inbound or outbound) a mapping index from the 802.1p to 802.1D table should be specified. For Layer 3 policy types (inbound or out- bound) a mapping index from the IP DSCP to 802.1D table should be specified. The mapping index, in both cases, depends on the number of mappings configured by the user. For SpectraLink policy type a mapping is not required.Specifying the Mapping between 802.1p and 802.1D Priorities
The QoS 802.1p to 802.1D Mapping Table specifies the mapping between 802.1P and 802.1D priorities.
Specifying the Mapping between IP Precedence/DSCP Ranges and 802.1D Priorities
The QoS IP DSCP to 802.1D Mapping Table specifies the mapping between IP Precedence/DSCP Ranges and 802.1D priorities.
QoS Enhanced Distributed Channel Access (EDCA) Parameters
The following commands configure the client (STA) and AP Enhanced Distributed Channel Access (EDCA) parameters. You can modify the EDCA values for both Wireless A and Wireless B.
The EDCA parameter set provides information needed by the client stations for proper QoS operation during the wireless contention period. These parameters are used by the QoS enabled AP to establish policy, to change policies when accepting new stations or new traffic, or to adapt to changes in the offered load. The EDCA parameters assign priorities to traffic types where higher priority packets gain access to the wireless medium more frequently than lower priority packets.
NOTE: We have defined default recommended values for EDCA parameters; we recommend not modifying EDCA parameters unless strictly necessary.Defining the QoS Policy used for a Wireless Interface SSID
The QoS Policy object configures the QoS policy to be used per wireless interface SSID. This object is part of the Wireless Interface SSID Table; the CLI command for this table is "wifssidtbl."
* A QoS Policy number needs to be specified in the SSID table. This depends on the QoS policies configured by the user. Once the user has configured QoS policies, the user should specify the policy to be used for that SSID.CLI Batch File
A CLI Batch file is a user-editable file that lists a series of CLI set commands, that can be uploaded to the Access Point to change its configuration. The Access Point executes the CLI commands specified in the CLI Batch file after upload and the configuration gets changed accordingly. A CLI Batch file can also be used for Auto Configuration.
The CLI Batch file does not replace the existing LTV format configuration file, which continues to define the configuration of the AP.
The CLI Batch file contains a list of CLI commands that the AP will execute. The AP performs the commands in the file immediately after the file is uploaded to the AP manually or during Auto Configuration. The AP parses the file and executes the CLI commands. Commands that do not require a reboot take effect immediately, while commands that require a reboot (typically commands affecting a wireless interface) will take effect after reboot.
Auto Configuration and the CLI Batch File
The Auto Configuration feature allows download of the LTV format configuration file or the CLI Batch file. The AP detects whether the file uploaded is LTV format or a CLI Batch file. If the AP detects a CLI Batch file (a file with extension .cli), the AP executes the file immediately.
The AP will reboot after executing the CLI Batch file. Auto Configuration will not result in repeated reboots if the CLI Batch file contains rebootable parameters.
CLI Batch File Format and Syntax
The CLI Batch file must be named with a .cli extension to be recognized by the AP. The maximum file size allowed is 100 Kbytes, and files with larger sizes cannot be uploaded to the AP. The CLI commands supported in the CLI Batch File are a subset of the legal AP CLI commands.
The follow commands are supported:
Each command must be separated by a new line.
NOTE: The following commands are not supported: Show command, Debug command, Undebug command, Upload command, Download command, Passwd command, Kill command, and the Exit, Quit, and Done commands.Sample CLI Batch File
The following is a sample CLI Batch File:
set sysname system1
set sysloc sunnyvale
set sysctname contact1
set sysctphone 1234567890
set sysctemail email@domain.com
set ipaddr 11.0.0.66
set ipaddrtype static
set ipsubmask 255.255.255.0
set ipgw 11.0.0.1
set wif 4 autochannel disable
set wif 4 mode 1
set syslogstatus enable
set sysloghbstatus enable
set sysloghbinterval 5
set wif 4 netname london
rebootFigure A-18 Sample CLI Batch FileReboot Behavior
When a CLI Batch file contains a reboot command, the reboot will occur only after the entire CLI Batch file has been executed.
There are two methods of uploading the CLI Batch File:
CLI Batch File Error Log
If there is any error during the execution of the CLI Batch file, the AP will stop executing the file. The AP generates traps for all errors and each trap contains the following information:
The AP logs all the errors during execution and stores them in the Flash memory in a CLI Batch File Error Log named "CBFERR.LOG". The CLI Batch File Error Log can be downloaded though TFTP, HTTP, or CLI file transfer to a specified host.
