Wireless Mobility 5.4 CLI Reference Guide Software Version 5.4

Extreme Networks, Inc.3585 Monroe StreetSanta Clara, California 95051(888) 257-3000(408) 579-2800

http://www.extremenetworks.com

Published: January 2013Part number: 120811-00 Rev 1

http://www.extremenetworks.com

AccessAdapt, Alpine, Altitude, BlackDiamond, EPICenter, ExtremeWorks Essentials, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ExtremeXOS ScreenPlay, ReachNXT, Sentriant, ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack, the Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, and the Powered by ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other countries.

sFlow is a registered trademark of InMon Corporation.

Specifications are subject to change without notice.

All other registered trademarks, trademarks, and service marks are property of their respective owners.

2012 Extreme Networks, Inc. All Rights Reserved.

Wireless Mobility 5.4 CLI Reference Guide

2

Table of Contents

Chapter 1: About This Guide.....................................................................................................................1

Documentation Set ...................................................................................................................................................1Document Conventions ............................................................................................................................................2Notational Conventions ............................................................................................................................................2

Understanding Command Syntax .....................................................................................................................2

Chapter 2: Introduction..............................................................................................................................5

CLI Overview............................................................................................................................................................6Command Modes..............................................................................................................................................7

Getting Context Sensitive Help ................................................................................................................................9Using the No Command .........................................................................................................................................11

Basic Conventions ..........................................................................................................................................11Using CLI Editing Features and Shortcuts .............................................................................................................11

Moving the Cursor on the Command Line.......................................................................................................11Completing a Partial Command Name............................................................................................................12Command Output pagination ..........................................................................................................................13Creating Profiles..............................................................................................................................................13Change the default profile by creating vlan 150 and mapping to ge3 Physical interface................................13

Viewing Configured APs ..........................................................................................................................14Remote Administration....................................................................................................................................14

Configuring Telnet for Management Access............................................................................................14Configuring ssh ........................................................................................................................................16

Chapter 3: User Exec Mode Commands ................................................................................................19

User Exec Commands............................................................................................................................................20ap-upgrade......................................................................................................................................................21change-passwd ...............................................................................................................................................26clear ................................................................................................................................................................27clock ................................................................................................................................................................31cluster..............................................................................................................................................................32connect............................................................................................................................................................33crypto ..............................................................................................................................................................35disable.............................................................................................................................................................47enable .............................................................................................................................................................48exit...................................................................................................................................................................49logging.............................................................................................................................................................50mint .................................................................................................................................................................52no ....................................................................................................................................................................54page ................................................................................................................................................................58ping .................................................................................................................................................................59ssh...................................................................................................................................................................60telnet ...............................................................................................................................................................61terminal ...........................................................................................................................................................62time-it ..............................................................................................................................................................63traceroute ........................................................................................................................................................64watch...............................................................................................................................................................66

Wireless Mobility 5.4 CLI Reference Guide

3

Table of Contents

Chapter 4: Privileged Exec Mode Commands .......................................................................................67

Privileged Exec Mode Commands .........................................................................................................................68ap-upgrade......................................................................................................................................................71archive.............................................................................................................................................................76boot .................................................................................................................................................................78cd ....................................................................................................................................................................79change-passwd ...............................................................................................................................................80clear ................................................................................................................................................................81clock ................................................................................................................................................................85cluster..............................................................................................................................................................86configure .........................................................................................................................................................87connect............................................................................................................................................................88copy.................................................................................................................................................................90crypto ..............................................................................................................................................................92delete ............................................................................................................................................................104disable...........................................................................................................................................................106diff .................................................................................................................................................................107dir ..................................................................................................................................................................108edit ................................................................................................................................................................110enable ...........................................................................................................................................................111erase .............................................................................................................................................................112exit.................................................................................................................................................................113format ............................................................................................................................................................114halt ................................................................................................................................................................115join-cluster .....................................................................................................................................................116logging...........................................................................................................................................................117mkdir .............................................................................................................................................................119mint ...............................................................................................................................................................120more ..............................................................................................................................................................122no ..................................................................................................................................................................124page ..............................................................................................................................................................128ping ...............................................................................................................................................................129pwd................................................................................................................................................................130reload ............................................................................................................................................................131rename ..........................................................................................................................................................133rmdir ..............................................................................................................................................................135self.................................................................................................................................................................136ssh.................................................................................................................................................................137telnet .............................................................................................................................................................139terminal .........................................................................................................................................................141time-it ............................................................................................................................................................142traceroute ......................................................................................................................................................143upgrade .........................................................................................................................................................144upgrade-abort................................................................................................................................................146watch.............................................................................................................................................................147

Chapter 5: Global Configuration Commands ......................................................................................149

Global Configuration Commands .........................................................................................................................151aaa-policy......................................................................................................................................................153advanced-wips-policy....................................................................................................................................154ap4021 ..........................................................................................................................................................155ap4600 ..........................................................................................................................................................156ap4511 ..........................................................................................................................................................157ap4521 ..........................................................................................................................................................158ap4532 ..........................................................................................................................................................159ap47xx...........................................................................................................................................................160association-acl-policy ....................................................................................................................................161auto-provisioning-policy ................................................................................................................................162

Wireless Mobility 5.4 CLI Reference Guide

4

Table of Contents

captive portal .................................................................................................................................................163captive-portal .........................................................................................................................................163captive-portal-mode commands.............................................................................................................164

clear ..............................................................................................................................................................182critical-resource-policy...................................................................................................................................183

critical-resource-policy ...........................................................................................................................183critical-resource-policy-mode .................................................................................................................184

customize ......................................................................................................................................................187device............................................................................................................................................................194device-categorization ....................................................................................................................................196

device-categorization .............................................................................................................................196device-categorization-mode commands ................................................................................................197

dhcp-server-policy .........................................................................................................................................201dns-whitelist ..................................................................................................................................................202

dns-whitelist ...........................................................................................................................................202dns-whitelist mode commands...............................................................................................................203

do ..................................................................................................................................................................206end ................................................................................................................................................................218event-system-policy ......................................................................................................................................219

event-system-policy ...............................................................................................................................219event-system-policy mode commands...................................................................................................220

firewall-policy.................................................................................................................................................241host ...............................................................................................................................................................242igmp-snoop-policy .........................................................................................................................................243ip ...................................................................................................................................................................245l2tpv3.............................................................................................................................................................247mac ...............................................................................................................................................................249management-policy.......................................................................................................................................251mint-policy .....................................................................................................................................................252nac-list ...........................................................................................................................................................253

nac-list....................................................................................................................................................253nac-list-mode .........................................................................................................................................254

no ..................................................................................................................................................................258password-encryption .....................................................................................................................................260profile ............................................................................................................................................................261radio-qos-policy.............................................................................................................................................265radius-group ..................................................................................................................................................266radius-server-policy.......................................................................................................................................267radius-user-pool-policy..................................................................................................................................268rf-domain .......................................................................................................................................................269

rf-domain................................................................................................................................................269rf-domain-mode......................................................................................................................................270

wm3400.........................................................................................................................................................290wm3600.........................................................................................................................................................291wm3700.........................................................................................................................................................292role-policy......................................................................................................................................................293self.................................................................................................................................................................294smart-rf-policy ...............................................................................................................................................295wips-policy.....................................................................................................................................................296wlan...............................................................................................................................................................297

wlan........................................................................................................................................................297wlan-mode commands...........................................................................................................................298

wlan-qos-policy .............................................................................................................................................342

Chapter 6: Common Commands...........................................................................................................343

Common Commands............................................................................................................................................343clrscr..............................................................................................................................................................343commit...........................................................................................................................................................344

Wireless Mobility 5.4 CLI Reference Guide

5

Table of Contents

end ................................................................................................................................................................345exit.................................................................................................................................................................346help ...............................................................................................................................................................347no ..................................................................................................................................................................352revert .............................................................................................................................................................354service...........................................................................................................................................................355show..............................................................................................................................................................382write...............................................................................................................................................................384

Chapter 7: Show Commands.................................................................................................................387

show commands ..................................................................................................................................................387show..............................................................................................................................................................389adoption ........................................................................................................................................................394advanced-wips ..............................................................................................................................................396ap-upgrade....................................................................................................................................................399boot ...............................................................................................................................................................401captive-portal.................................................................................................................................................403cdp ................................................................................................................................................................406clock ..............................................................................................................................................................408cluster............................................................................................................................................................409commands.....................................................................................................................................................411context...........................................................................................................................................................413critical-resources ...........................................................................................................................................415crypto ............................................................................................................................................................416debug ............................................................................................................................................................419debugging .....................................................................................................................................................422device-categorization ....................................................................................................................................424event-history..................................................................................................................................................425event-system-policy ......................................................................................................................................427file..................................................................................................................................................................428firewall ...........................................................................................................................................................430interface ........................................................................................................................................................434ip ...................................................................................................................................................................437ip-access-list-stats.........................................................................................................................................444l2tpv3.............................................................................................................................................................446licenses .........................................................................................................................................................448lldp.................................................................................................................................................................449logging...........................................................................................................................................................450mac-access-list-stats.....................................................................................................................................452mac-address-table ........................................................................................................................................453mint ...............................................................................................................................................................455noc ................................................................................................................................................................458ntp .................................................................................................................................................................461password-encryption .....................................................................................................................................463power ............................................................................................................................................................464remote-debug................................................................................................................................................466rf-domain-manager........................................................................................................................................467role ................................................................................................................................................................468running-config ...............................................................................................................................................469session-changes ...........................................................................................................................................473session-config ...............................................................................................................................................474sessions ........................................................................................................................................................476smart-rf ..........................................................................................................................................................477spanning-tree ................................................................................................................................................480startup-config ................................................................................................................................................484terminal .........................................................................................................................................................486timezone........................................................................................................................................................487upgrade-status ..............................................................................................................................................488

Wireless Mobility 5.4 CLI Reference Guide

6

Table of Contents

version...........................................................................................................................................................490vrrp ................................................................................................................................................................491what...............................................................................................................................................................493wireless .........................................................................................................................................................494wwan .............................................................................................................................................................505

Chapter 8: Profiles..................................................................................................................................507

Creating Profiles...................................................................................................................................................507ap-upgrade....................................................................................................................................................510arp .................................................................................................................................................................512auto-learn-staging-config ..............................................................................................................................514autoinstall ......................................................................................................................................................515bridge commands..........................................................................................................................................516

bridge .....................................................................................................................................................517bridge-vlan-mode commands ................................................................................................................518

cdp ................................................................................................................................................................532cluster............................................................................................................................................................534configuration-persistence ..............................................................................................................................537controller .......................................................................................................................................................539critical-resource.............................................................................................................................................541crypto ............................................................................................................................................................543Crypto-auto-ipsec-secure Commands...........................................................................................................549

groupid ...................................................................................................................................................550remotegw-ike-version.............................................................................................................................551no ...........................................................................................................................................................552

crypto-ikev1 policy commands ......................................................................................................................553dpd-keepalive.........................................................................................................................................554dpd-retries..............................................................................................................................................555isakmp-proposal.....................................................................................................................................556lifetime....................................................................................................................................................558mode ......................................................................................................................................................559no ...........................................................................................................................................................560

crypto-ikev1-peer commands........................................................................................................................561authentication.........................................................................................................................................562ip ............................................................................................................................................................563localid.....................................................................................................................................................564remoteid .................................................................................................................................................565use .........................................................................................................................................................566no ...........................................................................................................................................................567

crypto map commands..................................................................................................................................568local-endpoint-ip.....................................................................................................................................569mode ......................................................................................................................................................570peer........................................................................................................................................................571security-association ...............................................................................................................................572session-key ............................................................................................................................................573use .........................................................................................................................................................575no ...........................................................................................................................................................576

dscp-mapping................................................................................................................................................577email-notification ...........................................................................................................................................578enforce-version .............................................................................................................................................581events............................................................................................................................................................583ip ...................................................................................................................................................................584l2tpv3.............................................................................................................................................................589nat-pool .........................................................................................................................................................592

address ..................................................................................................................................................593no ...........................................................................................................................................................594

interface ........................................................................................................................................................595Interface Config Instance ..............................................................................................................................597

Wireless Mobility 5.4 CLI Reference Guide

7

Table of Contents

cdp .........................................................................................................................................................599channel-group ........................................................................................................................................600description..............................................................................................................................................601dot1x ......................................................................................................................................................602duplex ....................................................................................................................................................604ip ............................................................................................................................................................606lldp .........................................................................................................................................................608no ...........................................................................................................................................................609qos .........................................................................................................................................................611shutdown................................................................................................................................................613spanning-tree .........................................................................................................................................614speed .....................................................................................................................................................617switchport ...............................................................................................................................................619use .........................................................................................................................................................621

Interface vlan Instance ..................................................................................................................................622crypto .....................................................................................................................................................623description..............................................................................................................................................624dhcp-relay-incoming...............................................................................................................................625ip ............................................................................................................................................................626no ...........................................................................................................................................................628shutdown................................................................................................................................................631use .........................................................................................................................................................632

led .................................................................................................................................................................633legacy-auto-downgrade.................................................................................................................................634legacy-auto-update .......................................................................................................................................635lldp.................................................................................................................................................................636load-balancing...............................................................................................................................................638logging...........................................................................................................................................................643mac-address-table ........................................................................................................................................645mint ...............................................................................................................................................................647misconfiguration-recovery-time .....................................................................................................................651monitor ..........................................................................................................................................................652neighbor-inactivity-timeout ............................................................................................................................654neighbor-info-interval ....................................................................................................................................655no ..................................................................................................................................................................656noc ................................................................................................................................................................659ntp .................................................................................................................................................................660preferred-controller-group .............................................................................................................................662preferred-tunnel-controller.............................................................................................................................663power-config..................................................................................................................................................664radius ............................................................................................................................................................666router .............................................................................................................................................................667 rf-domain-manager.......................................................................................................................................669spanning-tree ................................................................................................................................................670tunnel-controller ............................................................................................................................................674use ................................................................................................................................................................675vrrp ................................................................................................................................................................678wep-shared-key-auth ....................................................................................................................................682

Device Specific Commands..................................................................................................................................683area ...............................................................................................................................................................687channel-list ....................................................................................................................................................688contact...........................................................................................................................................................689country-code .................................................................................................................................................690dhcp-redundancy ..........................................................................................................................................691floor ...............................................................................................................................................................692hostname ......................................................................................................................................................693layout-coordinates.........................................................................................................................................695location..........................................................................................................................................................697

Wireless Mobility 5.4 CLI Reference Guide

8

Table of Contents

mac-name .....................................................................................................................................................699neighbor-info-interval ....................................................................................................................................701no ..................................................................................................................................................................703override-wlan.................................................................................................................................................706remove-override ............................................................................................................................................708rsa-key ..........................................................................................................................................................710sensor-server ................................................................................................................................................712stats...............................................................................................................................................................714timezone........................................................................................................................................................716trustpoint .......................................................................................................................................................717

Chapter 9: AAA Policy ...........................................................................................................................719

aaa-policy .............................................................................................................................................................720accounting.....................................................................................................................................................720authentication................................................................................................................................................724health-check..................................................................................................................................................728mac-address-format ......................................................................................................................................729no ..................................................................................................................................................................731server-pooling-mode .....................................................................................................................................733use ................................................................................................................................................................734

Chapter 10: Auto Provisioning Policy ..................................................................................................737

auto-provisioning-policy........................................................................................................................................738adopt .............................................................................................................................................................738default-adoption ............................................................................................................................................742deny ..............................................................................................................................................................742no ..................................................................................................................................................................745

Chapter 11: Advanced WIPS Policy......................................................................................................747

advanced-wips-policy ...........................................................................................................................................747event .............................................................................................................................................................748no ..................................................................................................................................................................754server-listen-port ...........................................................................................................................................757terminate .......................................................................................................................................................758use ................................................................................................................................................................759

Chapter 12: Association ACL Policy ....................................................................................................761

association-acl-policy ...........................................................................................................................................761deny ..............................................................................................................................................................762no ..................................................................................................................................................................763permit ............................................................................................................................................................765

Chapter 13: Access List.........................................................................................................................769

ip-access-list.........................................................................................................................................................770deny ..............................................................................................................................................................770no ..................................................................................................................................................................775permit ............................................................................................................................................................781

mac-access-list.....................................................................................................................................................786deny ..............................................................................................................................................................787no ..................................................................................................................................................................790permit ............................................................................................................................................................792

Chapter 14: DHCP Server Policy...........................................................................................................797

dhcp-server-policy ................................................................................................................................................798bootp .............................................................................................................................................................798dhcp-class .....................................................................................................................................................799

Wireless Mobility 5.4 CLI Reference Guide

9

Table of Contents

dhcp-class..............................................................................................................................................799dhcp-class-mode....................................................................................................................................800

dhcp-pool ......................................................................................................................................................803dhcp-pool ...............................................................................................................................................804dhcp-pool-mode .....................................................................................................................................805static-binding..........................................................................................................................................825

no ..................................................................................................................................................................841option ............................................................................................................................................................843ping ...............................................................................................................................................................844

Chapter 15: Firewall Policy....................................................................................................................847

firewall-policy........................................................................................................................................................848alg .................................................................................................................................................................849clamp.............................................................................................................................................................850 dhcp-offer-convert ........................................................................................................................................851dns-snoop .....................................................................................................................................................851firewall ...........................................................................................................................................................852flow................................................................................................................................................................853ip ...................................................................................................................................................................855ip-mac ...........................................................................................................................................................860logging...........................................................................................................................................................863no ..................................................................................................................................................................864proxy-arp .......................................................................................................................................................871stateful-packet-inspection-12 ........................................................................................................................872storm-control .................................................................................................................................................872virtual-defragmentation .................................................................................................................................875

Chapter 16: MINT Policy ........................................................................................................................877

mint-policy ............................................................................................................................................................878level ...............................................................................................................................................................878mtu ................................................................................................................................................................879udp ................................................................................................................................................................880no ..................................................................................................................................................................881

Chapter 17: Management Policy ...........................................................................................................885

management-policy ..............................................................................................................................................886aaa-login .......................................................................................................................................................886banner ...........................................................................................................................................................888ftp ..................................................................................................................................................................889http ................................................................................................................................................................891https ..............................................................................................................................................................892idle-session-timeout ......................................................................................................................................893no ..................................................................................................................................................................894restrict-access ...............................................................................................................................................897snmp-server ..................................................................................................................................................900ssh.................................................................................................................................................................903telnet .............................................................................................................................................................904user ...............................................................................................................................................................906

Chapter 18: RADIUS Policy ...................................................................................................................909

radius-group .........................................................................................................................................................909guest .............................................................................................................................................................910policy .............................................................................................................................................................911rate-limit ........................................................................................................................................................913no ..................................................................................................................................................................914

radius-server-policy ..............................................................................................................................................917authentication................................................................................................................................................917

Wireless Mobility 5.4 CLI Reference Guide

10

Table of Contents

crl-check........................................................................................................................................................919ldap-group-verification...................................................................................................................................920ldap-server ....................................................................................................................................................920local ...............................................................................................................................................................922nas ................................................................................................................................................................923no ..................................................................................................................................................................924proxy .............................................................................................................................................................927session-resumption .......................................................................................................................................929use ................................................................................................................................................................929

radius-user-pool-policy .........................................................................................................................................930user ...............................................................................................................................................................931no ..................................................................................................................................................................932

Chapter 19: Radio QoS Policy...............................................................................................................935

radio-qos-policy ....................................................................................................................................................936accelerated-multicast ....................................................................................................................................936admission-control ..........................................................................................................................................937no ..................................................................................................................................................................939wmm..............................................................................................................................................................942

Chapter 20: Role Policy .........................................................................................................................945

role-policy .............................................................................................................................................................946default-role ....................................................................................................................................................946no ..................................................................................................................................................................948user-role ........................................................................................................................................................950

user-role .................................................................................................................................................950user-role commands ..............................................................................................................................951

Chapter 21: Smart RF Policy .................................................................................................................965

smart-rf-policy.......................................................................................................................................................966assignable-power ..........................................................................................................................................966auto-assign-sensor........................................................................................................................................967channel-list ....................................................................................................................................................968channel-width ................................................................................................................................................969coverage-hole-recovery ................................................................................................................................971enable ...........................................................................................................................................................972group-by ........................................................................................................................................................973interference-recovery ....................................................................................................................................974neighbor-recovery .........................................................................................................................................976no ..................................................................................................................................................................978sensitivity.......................................................................................................................................................980smart-ocs-monitoring ....................................................................................................................................981smart-ocs-monitoring ....................................................................................................................................984

Chapter 22: WIPS Policy ........................................................................................................................987

wips-policy ............................................................................................................................................................988ap-detection ..................................................................................................................................................988enable ...........................................................................................................................................................989event .............................................................................................................................................................990history-throttle-duration .................................................................................................................................994no ..................................................................................................................................................................995signature .......................................................................................................................................................999

signature ................................................................................................................................................999signature mode commands..................................................................................................................1000

use ..............................................................................................................................................................1013

Wireless Mobility 5.4 CLI Reference Guide

11

Table of Contents

Chapter 23: WLAN QoS Policy ............................................................................................................1015

wlan-qos-policy...................................................................................................................................................1016accelerated-multicast ..................................................................................................................................1016classification................................................................................................................................................1018multicast-mask ............................................................................................................................................1019no ................................................................................................................................................................1020qos ..............................................................................................................................................................1023rate-limit ......................................................................................................................................................1024svp-prioritization ..........................................................................................................................................1026voice-prioritization .......................................................................................................................................1027wmm............................................................................................................................................................1027

Chapter 24: Interface Radio Commands ............................................................................................1031

interface-radio Instance......................................................................................................................................1032ack-timeout..................................................................................................................................................1033aggregation .................................................................................................................................................1034airtime-fairness............................................................................................................................................1037antenna-gain ...............................................................................................................................................1037antenna-mode .............................................................................................................................................1038beacon ........................................................................................................................................................1039channel........................................................................................................................................................1041data-rates ....................................................................................................................................................1042description...................................................................................................................................................1044dynamic-chain-selection..............................................................................................................................1045guard-interval ..............................................................................................................................................1046lock-rf-mode ................................................................................................................................................1047max-clients ..................................................................................................................................................1047mesh ...........................................................................................................................................................1048no ................................................................................................................................................................1050non-unicast..................................................................................................................................................1053off-channel-scan..........................................................................................................................................1055placement....................................................................................................................................................1057power ..........................................................................................................................................................1057preamble-short ............................................................................................................................................1058probe-response ...........................................................................................................................................1059radio-tap-mode............................................................................................................................................1060rf-mode........................................................................................................................................................1061rifs ...............................................................................................................................................................1062rts-threshold ................................................................................................................................................1063shutdown.....................................................................................................................................................1064sniffer-redirect .............................................................................................................................................1064use ..............................................................................................................................................................1065wireless-client..............................................................................................................................................1066wlan.............................................................................................................................................................1067

Chapter 25: Firewall Logging ..............................................................................................................1069

Firewall Log Terminology and Syslog Severity Levels .......................................................................................1070Date format in Syslog messages ................................................................................................................1070FTP data connection log .............................................................................................................................1071

The FTP connection is Control Connection .........................................................................................1071The Data Connection in Active Mode ..................................................................................................1071The Data Connection in Passive Mode................................................................................................1071

UDP packets log .........................................................................................................................................1072DHCP Release.....................................................................................................................................1072DHCP Renew.......................................................................................................................................1072

ICMP type logs............................................................................................................................................1072ICMP type logs............................................................................................................................................1073

Wireless Mobility 5.4 CLI Reference Guide

12

Table of Contents

Raw IP Protocol logs.................................................................................................................................1074 Raw IP Protocol logs..................................................................................................................................1075Firewall startup log ................................