Nortel 2300 Series Bedienungsanleitung

Part No. NN4725 0-100 June 2008 4655 Great America Parkway Santa Clara, CA 95054 Nor tel WLAN Security Switc h 2300 Series Command Line Ref erence[...]

2 NN47250-1 00 (Versio n 02.51) Copyright © 2007-2008 Nor tel Ne tworks. All rights reser ved. The information in this document is subj ect to change without notice. The statements, config urations, technical data, and recommendations in this docume nt are believ ed to be accura te and reliable, but are presen ted without e xpress or implied warra[...]

3 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SUCH POR T IONS OF THE SOFTW ARE ARE PR O VIDED “ AS IS” AND WITHOUT ANY EXPRESS OR IM PLIED W ARRANTIES, INCLUDING, WITHO UT LIMIT A TION, THE IM PLIED W ARRANTIES OF MERCHANT ABILITY AND FITNESS FOR A P AR TICULAR PURPOS E. In addition, the program and information contained h[...]

4 NN47250-1 00 (Versio n 02.51) de veloper and/or supplier is an intended be nef iciary of this Section. Some jurisd ictions do not allo w th ese limitations or exclusions and, in such e v ent, the y may not apply . 4.General a) If Customer is the United States Gov ernment, the follo wi ng p aragraph shall apply: All No rtel Software a v ailable un[...]

5 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Exclusive Remed y Your sole remedy under the limited warranty descr ibed above is, at Nort el’s sole option and expense, the repair or replacement of the non-conforming Product or refund of the purchase price o f the non-conforming Products. Nortel’s obligation under this limit[...]

6 NN47250-1 00 (Versio n 02.51) END CUSTOMER MAY ALSO HAVE OTHER RIGHTS, WHICH VA RY FROM STATE/JURISDICTION TO STATE/JURISDICTION. TO THE MAXIMUM EXTENT PERMITTED BY APPL ICABLE LAW, IN NO EVENT SHALL NORTEL OR ITS SUPPLIERS BE LIABLE FOR THE COS T OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, LOSS OF PROFITS, OR FOR ANY SPECIAL, CONSEQUENTIAL, [...]

7 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference (d) Nortel may provide up dates, corrections, e nhancements, modifications or bug fixes for the Licensed Materials (“Updates”) to Licens ee. Any such Update sh all be deemed part of t he Li cens ed Ma terial s an d sub ject to the lice nse and al l other terms and conditions he[...]

8 NN47250-1 00 (Versio n 02.51) that is not covered by the above provisions shall be d eemed “technical data-commercial item s” pursuant to DFAR section 227.7015(a). Any use, modification, reproduction, release, perfor mance, display or disclosure of such technical data shall be governed by the terms of DFAR section 227.7015(b). 8. Limitation o[...]

9 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference THIS SOFTWARE IS PROV IDED BY THE AUTH OR ``AS IS'' AND AN Y EXPR ESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANT ABILITY AND FITNESS FO R A PARTICULA R PURPOSE ARE DISCLAIMED. IN NO EVENT SH ALL THE AUTHOR BE LIAB LE FOR ANY D[...]

10 NN47250-1 00 (Versio n 02.51)[...]

11 Nortel WLAN— Manageme nt Softwar e 2300 S eries Refe rence Guide How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Introducing the Nortel WLAN 2300 Sy stem . . . . . . . . . . . . . . . . . . . . . . . 5 Nortel WLAN 2300 Syst em . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

12 NN47250-1 02 (Versio n 02.51) IP Services Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 AAA Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 Mobility Domain Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 Network Domain Comm[...]

13 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Ho w to get help This section explains how to get help for Nortel pr oducts and services. Getting help from the Nortel web site The best way to get technical suppor t for Nortel products is from the Nortel Technical Support Web site: http://www .nortel.com/support This site provid[...]

14 How to get help NN47250-1 00 (Versio n 02.51)[...]

15 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Intr oducing the Nor tel WLAN 2300 System This command reference expl ains WLAN Security Switch 2300 Series (W SS Software) command line interface (CLI) commands that you enter on a WLAN—Security Switch to configure and manage the Nortel WLAN 2300 System wireless LAN (WLAN). Rea[...]

16 Introdu cing the Nortel WLAN 2300 Syste m NN47250-1 00 (Versio n 02.51) Documentation Consult the following documents to plan, install, configure, and manage a Nortel WLAN 2300 System. Planning, Conf iguration, and Deployment • Nortel WLAN Manag ement Softwar e 2300 Series User Guide . Instructions for planning, configuring, deplo ying, and ma[...]

Introdu cing the Nortel WLAN 2300 Syste m 17 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Safety and Advisory Notices The following kinds of safety and advisory notic es appear in thi s manual. Caution! This situation o r condition can lead to data loss or damage to the product or other proper ty . Note. This inf or mation is o[...]

18 Introdu cing the Nortel WLAN 2300 Syste m NN47250-1 00 (Versio n 02.51) T e xt and Syntax Con ventions Nortel manuals use the followi ng text and syntax conventions: Convention Use Monospace text Sets of f command syntax or sample commands and system responses. Bold text Highlights commands that you enter or items you select. Italic te xt Design[...]

19 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Using the Command-Line Interface WLAN Security Switch 2300 Series (W SS Software) operates a No rtel WLAN 2300 System wireless LAN (WLAN) consisting of WLAN Management Software, WLAN—Security Sw itch (WSS), and Ac cess Points (APs). WSS Software has a command-line interface (CLI[...]

20 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) Command Pr ompts By default, the WSS Software CLI provides th e following prompt for re st ricted user s. The mm por tion shows the WSS model number (for example, 2360 ) and the nnnnnn portion shows the last 6 digits of the switch’s media access control (MAC) address. WSS- mmmm - n[...]

Using the Co mmand- Line Inte rface 21 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax Notation The WSS Software CLI uses standard syntax n otation: • Bold monospace font identifies the comma nd and ke ywords you mu st type. For e xample: set enablepass • Italic monospace font indica tes a placeholder for a value. For e[...]

22 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) MA C Address Notation WSS Software displays MAC a ddresses in hexadecimal numb ers with a col on (:) delimiter betwee n bytes—for example, 00:01:02:1a:00:01. You can enter MAC addres ses with either hyphen (-) or colon (:) delimiters, but colons are preferred. For shortcuts: • Y [...]

Using the Co mmand- Line Inte rface 23 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference number of characters up to , but not includi ng, a delimiter charac ter in the wildcard. Val id user wildcard delimiter chara cters are the at (@) sign and the per iod (.). For example, the following wildca rds identify the following users: MA C[...]

24 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) To match all VLANs, use the double-asterisk (**) wildcard ch aracters with no delimiters. To match any number of char- acters up to, but not including, a delimit er character in the wildcard, use the single-asterisk (*) wildcard. Valid VLAN wildcard delimite r characters are the at ([...]

Using the Co mmand- Line Inte rface 25 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Command-Line Editing WSS Softwar e editing functions are si milar to th ose of many other ne twork operating systems. Keyboard Shortcuts The following table lists the keyboard shor tcuts for entering a nd editing CLI commands: History Buffer The[...]

26 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) Tabs The WSS Softwa re CLI uses the Tab key for command completion. You can typ e th e first few characters of a command and press the Tab key to display the command(s) that begin with those cha racters. For e xample: WSS# show i <T ab> ifm Show interfaces maintain ed by the in[...]

Using the Co mmand- Line Inte rface 27 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference To see a subset of the online help, type the command for which you want more in formation. For exampl e, to display all the commands tha t begin with t he letter i , type the following command: WSS# show i? ifm Show interfaces maintain ed by the[...]

28 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51)[...]

29 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Commands Use access commands to control access to the WLAN Security Switch 2300 Series (WSS Software) (CLI). This chapter presents access co mmands alphabetically . Use the following ta ble to locate commands in this ch apter based on their use. disable Changes the CLI sess[...]

30 Access Commands NN47250-1 00 (Versio n 02.51) See Also • set enablepass on page 20 • set conf irm on page 60 quit Exit from the CLI session. Syntax quit Defaults None. Access All. Examples T o end the administrator’ s sessi on, type the follo wing command: WSS> quit set enablepass Sets the password that prov ides enabled access (f or co[...]

Access Commands 31 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • disable on page 19 • enable on page 19[...]

32 Access Commands NN47250-1 00 (Versio n 02.51)[...]

33 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference P or t Commands Use port commands to configure and manage individual ports and load -sharing port groups. This chapter presents port commands alp habetically. Use the following table to locate commands in this chapter based on their use. Port T ype set port type ap on page 41 set [...]

34 Port Comman ds NN47250-1 00 (Versio n 02.51) clear ap Removes a AP. Syntax clear ap ap-num Defaults None. Access Enabled. Examples The follo wing command clears AP 1: WSS# clear ap 1 This will clear specified AP devices. W ould you like to continue? (y/n) [n] y See Also • set ap on page 33 • set port type ap o n page 41 clear port counters C[...]

Port Commands 35 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • monitor port coun ters on page 28 • show port counters on page 46 clear port-group Removes a port group. Syntax clear port-group name name Defaults None. Access Enabled. Examples The follo wing command clears port group server1 : WSS# clear port-group [...]

36 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also • set port media-type on page 36 • show port media-type on page 48 clear port mirror Removes a port mirroring con figuration. Syntax clear port mirr or Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Examples The follo wing command clears the port mirroring[...]

Port Commands 37 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear port type Removes all configuration se tti ngs from a port and resets the port as a network port. Syntax clear port type port-list Defaults The cleared port becomes a network por t but is not placed in any VLANs. Access Enabled. Usage Use this command to change[...]

38 Port Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command clears port 5: WSS# clear port type 5 This may disrupt currently authenticat ed users. Are you sure? (y/n) [n] y success: change accepted. See Also • set port type ap o n page 41 • set port type wir ed-auth on page 44 monitor port counters Displays and continuall y [...]

Port Commands 39 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference For error reporting, the cyclic redundancy check (CRC) errors include misa lignment errors. Jumbo packets with valid CRCs are not counted. A short packet can be reported as a short packet, a CRC e rror, or an overrun. In some cir cum- stances, the transmitte d octets[...]

40 Port Comman ds NN47250-1 00 (Versio n 02.51) Table 3 describes the port statistics displayed by each statisti cs option. The Port and St atus fields are displayed for each option. T able 3: Output for monitor port counters Statistics Option Field Description Displayed f or All Options Port Port the statistics are displayed for . Status Port stat[...]

Port Commands 41 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference transmit-errors Tx Cr c Number of frames transmitted by the port that had the correct length b ut contained an in v alid FCS va l u e . Tx Short Number of frames tran smitted by the port that were fewer than 64 bytes long. Tx Fragment T otal number of frame s transmi[...]

42 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also show port counters on page 46 reset port Resets a port by toggling its link state a nd Power over Ethernet (PoE) state. Syntax res e t po r t port-lis t Defaults None. Access Enabled. Usage The res e t command disables the port’ s link and PoE (if applicable) for at least 1 second, then ree[...]

Port Commands 43 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set port on page 35 set ap Configures a AP for an AP that is indirectly con nected to the WSS through an intermediate Layer 2 or Layer 3 network. Syntax set ap ap-num serial-id seri al-ID model { 2330 | 23 30A | 2330B | 2332-A1 | 2332-A2 | 2332-A3 | 2332-A4 [...]

44 Port Comman ds NN47250-1 00 (Versio n 02.51) Defaults The def ault v ales are the same as the d efaults for the set p ort type ap command. Access Enabled. History Examples The follo wing command configures apAP 1 for AP model AP-2330A with serial-ID 0322199999: WSS# set ap 1 serial-id 0322199999 model 233 0A success: change accepted. ap-num Numb[...]

Port Commands 45 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command removes AP 1: WSS# clear ap 1 This will clear specified AP devices. W ould you like to continue? (y/n) [n] y See Also • clear ap on page 24 • clear port type on page 27 • set port type ap o n page 41 • set system countrycode on page 63 s[...]

46 Port Comman ds NN47250-1 00 (Versio n 02.51) Syntax set port-gr oup name gr oup-name po rt-list mode { on | off } Defaults Once configured, a group is enabled by default. Access Enabled. Usage Do not use dashes or hyphens in a port group name. If you do, WSS Software will not display or sav e the port group. You can configure up to 16 ports in a[...]

Port Commands 47 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set port media-type port-list rj45 Defaults The GBIC (f iber) interface is enabled, and the copper interface is disabled, by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage This command applies only to the 2380. If you set the [...]

48 Port Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command sets port 2 to monitor po rt 1’ s traff ic: WSS# set port 1 observ er 2 See Also • clear port mirror on page 26 • show port mirror on page 49 set port name Assigns a name to a port. After naming a port, you can use the port name or number in other CLI commands. Sy[...]

Port Commands 49 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set port negotia tion Disables or reenable s autonegotiation on gigabit Ethe rnet or 10/100 Ethernet ports. Syntax set port negotiation port-list { enable | disa ble } Defaults Autonegotiatio n is enabled on all Ethernet ports by default. Access Enabled. Usage The gi[...]

50 Port Comman ds NN47250-1 00 (Versio n 02.51) Defaults PoE is disabled on network and wired auth entication ports. The state o n AP ports depends on whether you enabled or disabl ed PoE when setting the port type. See set port type ap on page 41 . Access Enabled. Usage This command does not apply to an y gigabit Et hernet ports or to ports 7 and [...]

Port Commands 51 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference packets sent to a WSS port in such a conf igur ation can cause forw arding on the link to stop. Do not set the port speed of a gigabit port to auto . Although the CLI allo ws this setting, it is in valid. If you set the port speed of a gig abit port to auto , the lin[...]

52 Port Comman ds NN47250-1 00 (Versio n 02.51) Syntax set port type ap port-list model { 2330 | 23 30A | 2330 B | 2332-A1 | 2332-A2 | 2332-A3 | 2332-A4 | 2332-A5 | 2332-A6 | 2332-E1 | 23 32-E2 | 2332-E3 | 2332-E4 | 2332-E 5 |2332-E6 | 2332-E7 | 2332-E8 | 233 2-E9 | 233 2-J1 } poe { enable | disa ble } [ radiotyp e { 11a | 11b | 11g }] Note. Bef or[...]

Port Commands 53 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults All WSS ports are network ports by default. Model AP-2330, AP-2330A, AP-2330B, and Series 2332 APs have two radios. On two-radio models, one radio is always 802.11a. The other radio is 802.11b/ g, but can be configured for 802.11b or 802.11g exclusively. If [...]

54 Port Comman ds NN47250-1 00 (Versio n 02.51) To manage an AP on a switch model that do es not have 10/100 Ethernet ports, use the set ap command to configure a AP connec tion on the switch. Examples The follo wing commands set port 2 for AP model 2330, enable PoE on the p ort, and specify external antenna model 2445 3 for the 802.1 1b/g radio: W[...]

Port Commands 55 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set port type wired-auth port-list [ tag tag-list ] [ max-sessions num ] [ auth-fal l-thru { last-r esort | none | web-portal }] Defaults The default tag-list is null (no tag v alues). The default number of sessions is 1. The default f allthru a uthentication [...]

56 Port Comman ds NN47250-1 00 (Versio n 02.51) For 802.1X clients, wired auth entication works only if the cl ients are directly attached to the wired authentica- tion port, or are attached through a hub that does not bloc k forwarding of packets from the client to the PAE group address (01:80:c2:00:00:03). Wire d auth entication works in accord a[...]

Port Commands 57 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Y ou can specify one statistic type with the command. Examples The follo wing command shows octe t statistics for port 3: WSS> show port counters octets port 3 Port S tatus Rx Octets Tx Octets ======== ======== ========= ======== ====== ======== ========= ==[...]

58 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also • clear port-group on page 25 • set port-gr oup on page 35 show port media-type Displays the enabled interface types on a 2380 switch’s gigabit Ethernet ports. Syntax show port media-ty pe [ port-list ] Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. Usage Th[...]

Port Commands 59 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show port mirror Displays the port mirroring configuration. Syntax show port mirr or Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Examples The follo wing command displays the port mirroring configuration on the switch: WSS# show por[...]

60 Port Comman ds NN47250-1 00 (Versio n 02.51) 9 9 up AP enabl ed 1.44 10 10 up - disabl ed off 1 1 1 1 down - disa bled off 12 12 down - di sabled off 13 13 down - di sabled off 14 14 down - di sabled off 15 15 down - di sabled off 16 16 down - di sabled off 17 17 down - di sabled off 18 18 down - di sabled off 19 19 down - disabled off 20 20 dow[...]

Port Commands 61 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show port status Displays configuration and st atus information for ports. Syntax show port status [ port-list ] Defaults None. Access All. Examples The follo wing command displays information for all ports on a 22-port WSS: WSS# show port status Port Name Admin Oper[...]

62 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also • clear port type on page 27 • set port on page 35 • set port name on page 3 8 • set port negotiation on page 39 • set port speed on page 40 • set port type ap o n page 41 • set port type wir ed-auth on page 44 Admin Administra tiv e status of the port: • up—The port is enab[...]

63 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference System Services Commands Use system ser vices commands to configure and monitor system information for a WLAN—Security Swit ch (WSS). This chapter pr esents system services comma nds alphabetically. Use the following table to located commands in this chapter based on their use. [...]

64 System Services Commands NN47250-1 00 (Versio n 02.51) clear banner motd Deletes the message-of-the -day (MOTD) banner that is disp layed before the login prompt for each CLI session on the WSS. Syntax clear banner motd Defaults None. Access Enabled. Examples T o clear a banner , type th e follo wing command : WSS# clear banner motd success: cha[...]

System Services Commands 65 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear prompt Resets the system prompt to its previous ly configured value. If the pr ompt was not configured prev iously, this command resets the prompt to its default. Syntax clear prompt Defaults None. Access Enabled. Examples T o reset the prompt, type [...]

66 System Services Commands NN47250-1 00 (Versio n 02.51) Examples T o clear the location of the W SS, type the following command: WSS# clear system location success: change accepted. See Also • set system contact on page 62 • set system countrycode on page 63 • set system idle-timeout on page 64 • set system ip-address on page 65 • set s[...]

System Services Commands 67 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference traceroute P rint the r oute packets take to network host See Also “Using CLI Help” on pag e 16 history Displays the command history buffer for the current CLI session. Syntax history Defaults None. Access All. Examples T o sho w the history of you r s[...]

68 System Services Commands NN47250-1 00 (Versio n 02.51) Syntax set auto-config { enable | disabl e } Defaults The auto-conf ig option is automatically enable d on an unconfigured 2350 when the factory reset switch is pressed during power on. Ho we ver , auto -config is disabled by default on other models. Access Enabled. History Introduced in WSS[...]

System Services Commands 69 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference 1 Conf igure a VLAN: 2360# set vlan 1 port 7 success: change accepted. 2 Enable the DHCP client on VLAN 1: WSS# set interface 1 ip dhcp-client enable success: change accepted. 3 Enable the auto-conf ig option: WSS# set auto-config enable success: change ac[...]

70 System Services Commands NN47250-1 00 (Versio n 02.51) • Number sign (#) • Question mark (?) • Single quotation mark (') Examples T o create a banner that says Update meeting at 3 p.m. , type the following command: WSS# set banner motd ^Updat e meeting at 3 p.m.^ success: change accepted. See Also • clear banner motd on page 54 • [...]

System Services Commands 71 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set length number-of-lines Defaults WSS Software displays 24 lines by def ault. Access All. Usage Use this command if the output of a CLI comm and is greater than the number of lines allowed by default for a terminal type. Examples T o set the numbe[...]

72 System Services Commands NN47250-1 00 (Versio n 02.51) See Also show licenses on page 67 set prompt Changes the CLI prompt for the WSS to a string you specify. Syntax set promp t string Defaults The factory default for the WSS name is WSS- mm - nnn nnn , where mm is the model number an d nnnnnn is the last 6 digits of the 12-digit system MA C ad[...]

System Services Commands 73 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The following command sets the system cont act information to tamara@e xample.com : 23x0# set system contact tamara@example.com success: change accepted. See Also • clear system on page 55 • set system location on page 65 • set system name o[...]

74 System Services Commands NN47250-1 00 (Versio n 02.51) See Also show config on page 553 set system idle-timeout Specifies the maximum number of seconds a CLI management sessio n with the switc h can remain idle before WSS Software terminat es the session. Syntax set system idle-timeout seconds Defaults 3600 seconds (one hour). Access Enabled. Hi[...]

System Services Commands 75 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set system ip-address Sets the s ystem IP addres s so that i t ca n be used by various services in the WSS. Syntax set system ip-address ip-addr Defaults None. Access Enabled. Examples The follo wing command sets the IP address of the WSS to 192.168.253.1:[...]

76 System Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear system on page 55 • set system contact on page 62 • set system name on page 66 • show system on page 68 set system name Changes the name of the WSS fr om th e default system na me and also provides content for the CLI prompt, if you do not specify a prompt. Syntax se[...]

System Services Commands 77 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show banner motd Shows the banner that was configured with the set banner motd command. Syntax show banner motd Defaults None. Access Enabled. Examples T o display the banner with the message of the day , type the follo wing command: WSS# show ba nner motd[...]

78 System Services Commands NN47250-1 00 (Versio n 02.51) See Also show system on page 68 show system Displays system information. Syntax show system Defaults None. Access Enabled. History Examples T o sho w system informatio n, type the following command: WSS# show system ======== ======== ========= ======== ====== ======== ========= ======== ====[...]

System Services Commands 79 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference T able 1: show system output Field Description Product Name WSS model number . System Name System name (factory defa ult, or optionally c onfigu red with set system name ). System Countrycode Country-specific 802.11 code required for AP operation (conf igu[...]

80 System Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear system on page 55 • set system contact on page 62 • set system countrycode on page 63 • set system idle-timeout on page 64 • set system ip-address on page 65 • set system location on page 65 • set system name on page 66 show tech-support Provides an in-depth sn[...]

System Services Commands 81 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Enter this command before calling the Nort el Enterprise T echni cal Support (NETS). See “How to get help” on page 3 for more inf ormation. See Also • show boot on page 551 • show conf ig on page 553 • show licenses on page 67 • show syst[...]

82 System Services Commands NN47250-1 00 (Versio n 02.51)[...]

83 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference VLAN Commands Use virtual LAN (VLAN) commands to configure and manage para meters for individual por t VLANs on network ports, and to display information a bout clients roaming within a mobility domain. This chap ter presents VLAN commands alphabetically. Use the following table t[...]

84 VLAN Commands NN47250-1 00 (Versio n 02.51) clear fdb Deletes an entry from the fo rwarding database (FDB). Syntax clear fdb { perm | static | dynamic | port port-lis t } [ vlan vlan-id ] [ tag tag-value ] Defaults None. Access Enabled. Usage Y ou can delete forwarding databa se entries based on entry type, port, or VLAN. A VLAN name or number i[...]

VLAN Commands 85 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear security l2-restrict Removes one or more MAC addresses fro m the list of destination MAC addresses to which clients in a VLAN are allowed to send traf fic at Layer 2. Syntax clear security l2-r estrict vlan vlan-id [ permit-mac mac-addr [ mac-addr ] | all ] Def[...]

86 VLAN Commands NN47250-1 00 (Versio n 02.51) Defaults If you do not specify a VLAN or all , counters for all VLANs are cleared. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage T o clear MA C addresses from the list of addresses to which clients are allo wed to send data, use the clear security l2 -restrict command instead. [...]

VLAN Commands 87 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command removes port 1 from VLAN gr een : WSS# clear vlan green port 1 This may disrupt user connectivi ty . Do you wish to continue? (y/n) [n] y success: change accepted. The following command removes port 4, which uses tag value 69, from VLA[...]

88 VLAN Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command adds a permanent entry for MA C addres s 00:11:22:aa :bb:cc on ports 3 and 5 in VLAN blue : WSS# set fdb perm 00:11:22:aa:b b:cc port 3,5 vlan blue success: change accepted. The following command adds a st atic entry for MAC add ress 00: 2b:3c:4d:5e:6f on port 1 in the d[...]

VLAN Commands 89 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set security l2-restrict vlan vlan-i d [ mode { enable | disable }] [ permit-mac mac-addr [ mac-addr ]] Defaults Layer 2 restriction is disab led by default. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Y ou can specify multiple a ddr[...]

90 VLAN Commands NN47250-1 00 (Versio n 02.51) Nortel recommends that you do not use the name default . This name is already used for VLAN 1. Nortel also recommends that you do not rename the default VLAN. You cannot use numbers in the VLAN name. Nortel re commends that you do not use the same name with different capitalizations for VLANs. For exam[...]

VLAN Commands 91 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command adds port 16 to VLAN beige and assigns tag value 86 to the port: WSS# set vlan be ige port 16 tag 86 success: change accepted. See Also • clear vlan on page 76 • set vlan name on page 79 • show vlan conf ig on page 89 set vlan tunnel-affin[...]

92 VLAN Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access All. Usage T o display the entire forwarding database, enter the show fdb command without options. T o display only a portion of the data base, use optional parame ters to specify the types of entries you want to display . Examples The follo wing command displays all entries in th[...]

VLAN Commands 93 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear fdb on page 74 • set fdb on page 77 show fdb agingtime Displays the aging timeout period for forwarding database entries. Syntax show fdb agingtime [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command displays the aging tim[...]

94 VLAN Commands NN47250-1 00 (Versio n 02.51) See Also set fdb agingtime on page 78 show fdb count Lists the number of entries in the forwarding database. Syntax show fdb count { perm | static | dyn amic } [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command lists the number of dyna mic entries that the forwarding d atabase [...]

VLAN Commands 95 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage The output displays roaming stations within the previous 1 second. Examples T o display all stations roaming to the WSS, type the follo wing command: WSS # show r oaming station User Name Station Address VLAN State ---------------------- -- --------------- ----[...]

96 VLAN Commands NN47250-1 00 (Versio n 02.51) Syntax show r oam ing vlan Defaults None. Access Enabled. Examples The follo wing com mand sho ws the current roa ming VLANs: WSS# show r oaming vlan[...]

VLAN Commands 97 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference VLAN WSS Affinity -------- -- ------ ---- ------ -- --- ------ -- vlan-cs 192.168.14.2 5 vlan-eng 192.168.14.4 5 vlan-fin 192.168.14.2 5 vlan-it 192.168.14.4 5 vlan-it 192.168.14.2 5 vlan-pm 192.168.14.2 5 vlan-sm 192.168.14.2 5 vlan-tp 192.168.14.4 5 vlan-tp 192.168[...]

98 VLAN Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command sho ws Layer 2 forw arding restriction information for all VLANs: WSS# show security l2-r estrict VLAN Name En Drops Permit MAC Hits ---- ----- -- --------- -- ------ -- -- ------- -------- ---- --- --- -------- ------- 1 default Y 0 00:0b:0e:02:53:3e 5947 00:30:b6:3e:5c[...]

VLAN Commands 99 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o display all tunnels from a WSS to other swit ches in the Mobility Doma in, type the follo wing command. WSS # show tunnel VLAN Local Address Remote Address State Port L VID R VID --------------- --------------- ------ --------- ------- ----- ----- ----- [...]

100 VLAN Commands NN47250-1 00 (Versio n 02.51) WSS# show vlan conf ig b urgundy Admin VLAN T unl Port VLAN Name S tatus S tate Affin Port T ag S tate ---- ----- -- --------- ------ -- -- - ----- ---- -------- ---- --- -- ---------- -------- 2 bur gundy Up Up 5 2 none Up 3 none Up 4 none Up 6 none Up 1 1 none Up t:10.10.40.4 none Up Table 16 descri[...]

VLAN Commands 101 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear vlan on page 76 • set vlan name on page 79 • set vlan port on page 80 • set vlan tunnel-aff inity on page 81[...]

102 VLAN Commands NN47250-1 00 (Versio n 02.51)[...]

103 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Quality of Ser vice Commands Use Quality of Service (QoS) commands to configure packet prioritization in WSS Software. Pack et prioritization ensures that WSSs and APs give pr eferential treatment to high- priority traffic such as voice and v ideo. (To override the prioritiz atio[...]

104 Quality of Service Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command resets all QoS mappings: WSS# clear qos success: change accepted. The following command resets the mapping used to classify packets with DSCP value 44: WSS# clear qos dscp-to-qos-map 44 success: change accepted. set qos cos-to-dscp-map Changes the value to[...]

Quality of Service Commands 105 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set qos dscp-to-cos-map Changes the internal QoS value to whic h WSS Software maps a pa cket’s DSCP value when classifying inbound packets. Syntax set qos dscp-to-cos-map dscp-r ange cos level Defaults The defau lts are listed by the show qos command[...]

106 Quality of Service Commands NN47250-1 00 (Versio n 02.51) Ingress QoS Classification Map (dscp-to-cos) Ingress DS CP Co S Level ======== ======== ========= ======== ====== ======== ========= ======== ======== ====== = 00-09 0 0 0 0 0 0 0 0 1 1 10-19 1 1 1 1 1 1 2 2 2 2 20-29 2 2 2 2 3 3 3 3 3 3 30-39 3 3 4 4 4 4 4 4 4 4 40-49 5 5 5 5 5 5 5 5 6 [...]

107 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference IP Ser vices Commands Use IP services commands to configur e and manage IP interface s, management servic es, the Domain Na me Service (DNS), Network Time Protocol (NTP), and aliases, and to ping a host or trace a rou te. This chapter pr esents IP service s commands alphabeti cal[...]

108 IP Services Commands NN47250-1 00 (Versio n 02.51) Time and Date set timedate on page 142 set timezone on page 143 set summertime on page 140 show timedate on page 161 show timezone on page 161 show summertime on page 160 clear timezone on page 106 clear summertime on page 105 NTP set ntp on page 121 set ntp server on page 122 set ntp update-in[...]

IP Services Commands 109 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear interface Removes an IP interface. Syntax clear interface vlan-id ip Defaults None. Access Enabled. Usage If the interface you w ant to remov e is conf igured as the system IP address, remo ving the address can interfere with system ta sks that use the [...]

110 IP Services Commands NN47250-1 00 (Versio n 02.51) clear ip alias Removes an alias, which is a string that repres ents an IP a ddress. Syntax clear ip alias name Defaults None. Access Enabled. Examples The following command removes the alia s server1 : WSS# clear ip alias serv er1 success: change accepted. See Also • set ip alias on page 113 [...]

IP Services Commands 111 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear ip dns server Removes a DNS server from a WSS configuratio n. Syntax clear ip dns serv er ip-addr Defaults None. Access Enabled. Examples The follo wing command remove s DNS server 10.10.10 .69 from a WSS’ s conf iguration: WSS# clear ip dns serv er 1[...]

112 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • set ip route on page 116 • show ip r oute on page 153 clear ip telnet Resets the Teln et server’s TCP port n umber to its defa ult value. A WSS listens for Teln et management tr affic on the Telnet server port. Syntax clear ip telnet Defaults The default T elnet port number is [...]

IP Services Commands 11 3 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ntp on page 121 • set ntp serv er on page 122 • set ntp update-in terval on page 122 • show ntp on page 156 clear ntp update-interval Resets the NTP update interval to the default value. Syntax clear ntp update-int erval Defaults The default NT[...]

114 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • set snmp community on page 123 • show snmp c ommunit y on p age 158 clear snmp notify profile Clears an SNMP not ification profile. Syntax clear snmp notify prof ile pr of i le-name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo[...]

IP Services Commands 11 5 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set snmp notify target on page 131 • show snmp notify target on page 159 clear snmp usm Clears an SNMPv3 user. Syntax clear snmp usm usm-user name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The fol[...]

116 IP Services Commands NN47250-1 00 (Versio n 02.51) • show timedate on page 161 • show timezone on page 161 clear system ip-address Clears the sy stem IP address. Syntax clear system ip-address Defaults None. Access Enabled. Usage Clearing the system IP addr ess can interfere with system tasks that use the system IP address, including the fo[...]

IP Services Commands 11 7 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear summertime on page 105 • set summertime on page 140 • set timedate on page 142 • set timezone on page 143 • show summertime on page 160 • show timedate on page 161 • show timezone on page 161 ping Tests IP connectivity between [...]

118 IP Services Commands NN47250-1 00 (Versio n 02.51) • interval —100 (one tenth of a second) • size —56. Access Enabled. Usage T o stop a ping command that is in progress, press Ctrl+C. A WSS cannot ping itself. WSS Sof t ware does not supp ort this. Examples The follo wing command pings a de vi ce that has IP address 10.1.1.1: WSS# ping [...]

IP Services Commands 11 9 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set arp agingtim e on page 109 • show arp on page 144 set arp agingtime Changes the aging timeout for dynamic ARP entries. Syntax set arp agingtime seconds Defaults The default aging tim eout is 1200 seconds. Access Enabled. Usage Aging applie[...]

120 IP Services Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. Usage Y ou can assign one IP in terfac e to each VLAN. If an interface is already configured on the VLAN you specif y, this command replaces the interface. If you replace an interface that is in use as the syst em IP address, replacing the inte rface can interfere[...]

IP Services Commands 121 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS Software also has a con figurable DHCP server. (See set interface dhcp-ser ver on page 111 .) You can configure a DHCP client and DHCP server on the same VLAN, but only the client or the serv er can be enabled. The DHCP client and DHCP server cannot both [...]

122 IP Services Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Usage By default, all addresses e xcept the host address of the VLAN, th e network broadcast address, and the subnet broadcast addr ess are included in the range. If you specify th e range, the start address must be lo wer than the stop address, an d all addre sses must [...]

IP Services Commands 123 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults IP interfac es are enabled by defaul t. Access Enabled. Examples The follo wing command disables the IP interf ace on VLAN ma uve : WSS# set interface ma uv e status down success: set interface mauve to down See Also • clear interface on page 99 ?[...]

124 IP Services Commands NN47250-1 00 (Versio n 02.51) Access Enabled. Examples The follo wing command enables DNS on a WSS: WSS# set ip dn s enable St a r t D N S C l i e n t See Also • clear ip dns domain on page 100 • clear ip dns server on page 101 • set ip dns domain on page 114 • set ip dns serv er on page 115 • show ip dns on page [...]

IP Services Commands 125 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ip dns server Specifies a DNS server to use for resolv ing hostnames you enter in CLI commands. Syntax set ip dns serv er ip-addr { primary | secondary } Defaults None. Access Enabled. Usage Y ou can configure a WSS to use one primary DNS serv er and up t[...]

126 IP Services Commands NN47250-1 00 (Versio n 02.51) set ip https server Enables the HT TPS server on a WSS. The HTTPS server is required for We b View access to the s witch. Syntax set ip https serv er { enable | disab le } Defaults The HTTPS server is disabled by default. Access Enabled. Examples The follo wing command enables the HTTPS server [...]

IP Services Commands 127 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. Usage WSS Software can use a st atic route only if a direct route in the route ta ble resolves the static route. WSS Softwa re adds routes with next-hop types Lo cal and Direct when you add an IP interface to a VLAN, if the VLAN[...]

128 IP Services Commands NN47250-1 00 (Versio n 02.51) • clear ip route on page 101 • show interface on page 149 • show ip r oute on page 153 set ip snmp server Enables or disables the SNMP service on the WSS. Syntax set ip snmp server { enable | disable } Defaults The SNMP service is disabled by default. Access Enabled. Examples The follo wi[...]

IP Services Commands 129 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command changes the SSH port number on a WSS to 6000: WSS# set ip ssh port 6000 success: change accepted. See Also • set ip ssh serv er on page 119 • set ip ssh serv er on page 119 • set ip ssh serv er on page 119 set ip ssh serv[...]

130 IP Services Commands NN47250-1 00 (Versio n 02.51) set ip telnet Changes the TCP port number on which a WSS listen s for Telnet management tra ffic. Syntax set ip telnet port -num Defaults The default T elnet port number is 23. Access Enabled. Examples The follo wing command changes the T elnet port number on a WSS to 5000: WSS# set ip teln et [...]

IP Services Commands 131 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage The maximum number of T elnet sessions s upported on a WSS is eight. If SSH is also enabled, the switch can have up to eight T elnet or SSH sessions, in an y combination, and one console session. Examples The following command enables the T elnet server[...]

132 IP Services Commands NN47250-1 00 (Versio n 02.51) set ntp server Configures a WSS t o use an NTP server. Syntax set ntp ser ver ip-addr Defaults None. Access Enabled. Usage Y ou can configure up to three NTP serv ers. WSS Software queries all the servers and selects the best respons e based on the method de scribed in RFC 1305, Network T i me [...]

IP Services Commands 133 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ntp serv er on page 102 • clear ntp update-interv al on page 103 • set ntp on page 121 • set ntp serv er on page 122 • show ntp on page 156 set snmp community Configures a community string for SNMPv1 or SNMPv2c. Syntax set snmp comm[...]

134 IP Services Commands NN47250-1 00 (Versio n 02.51) History Usage SNMP community strings are passed as cl ear te xt in SNMPv1 and SNMPv2c . Nortel recommends that you use strings that cannot easily be guessed by unauthor ized users. F or example, do not use the well- kno wn strings public and private . If you are using SNMPv3, you can confi gure[...]

IP Services Commands 135 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set snmp notify profile Configures an SNMP notification profile. A notifica tion pr of ile is a named li st of all the notification types that can be generated by a switch, and for each notification type, the action to take (drop or send) when an event occurs[...]

136 IP Services Commands NN47250-1 00 (Versio n 02.51) notification-type Name of the notif ication type: • APBootT raps— Generated when an AP boots. • ApNonOperS tatusT raps —Generated to indicate an AP radio is nonoperational. • ApOperRadioS tatusT raps —Generated when the status of an AP radio changes. • AP T imeoutT raps— Generat[...]

IP Services Commands 137 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference notification-type (cont.) • CounterMeasur eS topT raps— Generated when WSS Software stops counterm easures against a rogue access point. • DAPConnectW arningT raps —Generated whe n a Distributed AP whose fingerprint has not been configured in WSS Soft[...]

138 IP Services Commands NN47250-1 00 (Versio n 02.51) Defaults A default notif ication profile (named default ) is already conf igured in WSS Software. All notif ications in the def ault profile are dropped by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command changes the action in the defaul[...]

IP Services Commands 139 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following commands cr eate notification profile snmppr of_rfdetect , and change the action to send for all R F detection notific ation types: WSS# set snmp notif y prof i le snmppr of_r fdetect send RFDetectAdhocUserT raps success: change accepted. WSS# s[...]

140 IP Services Commands NN47250-1 00 (Versio n 02.51) • show snmp notify pr ofile on page 158[...]

IP Services Commands 141 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set snmp notify target Configures a not ification target f or notifications from SNMP. A notification ta rget is a remote de vice to which W SS Software sends SNMP notif ications. You can configure the WSS Software SNMP engine to send confirmed not ifications[...]

142 IP Services Commands NN47250-1 00 (Versio n 02.51) SNMPv3 with T raps To configure a notification ta rget for traps f rom SNMPv3, use the following command: Syntax set snmp notify target tar get-num ip -addr [: udp-port-num ber ] usm trap user username [ prof ile pr ofile-name ] [ security { unsecured | authenticated | encrypted }] ret r ie s n[...]

IP Services Commands 143 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SNMPv2c with Inf orms To configure a notification ta rget for informs from SNMPv2c , use the following command: Syntax set snmp notify target tar get-num ip -addr [: udp-port-num ber ] v2c community-s tring inf orm [ prof ile pr ofile-name ] [ ret r i es num [...]

144 IP Services Commands NN47250-1 00 (Versio n 02.51) SNMPv1 with T raps To configure a notification ta rget for traps f rom SNMPv1, use the following command: Syntax set snmp notify target tar get-num ip -addr [: udp-port-num ber ] v1 community- string [ prof ile pr ofile-name ] Defaults The default UDP port number on the tar get is 162. The def [...]

IP Services Commands 145 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ip snmp server on page 118 • set snmp community on page 123 • set snmp notify pr of ile on page 125 • set snmp protocol on page 135 • set snmp security on page 13 6 • set snmp usm on page 136 • show snmp notify target on page 159 set snmp [...]

146 IP Services Commands NN47250-1 00 (Versio n 02.51) set snmp security Sets the minimum level of se curity WSS So ftware requires for SN MP message exc hanges. Syntax set snmp security { unsecured | authe nticated | encrypted | auth-req-unsec-notify } Defaults By default, WSS Software allo ws nonsecure ( unsecured ) SNMP message exchanges. Access[...]

IP Services Commands 147 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set snmp usm usm-username snmp-engine-id { ip ip-addr | local | hex hex-string } access { read-only | r ead-notify | notify- only | read-write | notify- read-write } auth-type { none | md5 | sha } { auth-pass-phrase string | auth-key he x-string } encr[...]

148 IP Services Commands NN47250-1 00 (Versio n 02.51) access { re ad-only | r ead-notify | notify-only | rea d- w ri t e | notify-read-write } Specif ies the access level of the user: • rea d - o n l y —An SNMP management application using th e string can get (read) object values on the switch but cannot set (write) them. • rea d - n o t if [...]

IP Services Commands 149 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults No SNMPv3 users are conf igured by defa ult. Wh en you configure an SNMPv3 user , the default access is re ad - on l y , and the def ault authentica tio n and encryption types are both none . Access Enabled. History Introduced in WSS Software V ersio[...]

150 IP Services Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command creates USM user snmpmgr1 , associat ed with the local SNMP engine ID. This user can se nd traps to notif ication re cei vers. WSS# set snmp us m snmpmgr1 snmp-engine- id local success: change accepted. The following command creates USM user securesnmpmgr1 , whic[...]

IP Services Commands 151 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults If you do not specify a start and end time, th e system implements the time change starting at 2:00 a.m. on the first Sunday in April and ending at 2:00 a.m. on the last Sunday in October , according to the North American standard. Access Enabled. Us[...]

152 IP Services Commands NN47250-1 00 (Versio n 02.51) Access Enabled. Usage Y ou must use an address that is co nfigured on one o f the WSS’ s VLANs. To display th e system IP address, use the show system command. Examples The following commands conf i gure an IP interface on VLAN taupe and conf igure the interf ace to be t he system IP address:[...]

IP Services Commands 153 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • clear timezone on page 106 • set summertime on page 140 • set timezone on page 143 • show summertime on page 160 • show timedate on page 161 • show timezone on page 161 set timezone Sets the number of hou rs, and optionally the number of minutes[...]

154 IP Services Commands NN47250-1 00 (Versio n 02.51) show arp Displays the ARP table. Syntax show arp [ ip-addr ] Defaults If you do not specify an IP address, the whole ARP table is displayed. Access All. Examples The follo wing command displays ARP entries: WSS # show arp ARP aging time: 1200 secon ds Host HW Address VLAN T ype State ----------[...]

IP Services Commands 155 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set arp on page 108 • set arp agingtim e on page 109 show dhcp-client Displays DHCP client in formation for all VLANs. Syntax show dhcp-client Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. T ype Entry type: • DYN[...]

156 IP Services Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command displa ys DHCP client information: WSS# show dhcp-client Interface: corpvlan(4) Configuration Status: Enabled DHCP S tate: IF_UP Lease Allocation: 65535 seconds Lease Remaining: 65532 seconds IP Address: 10.3.1.1 10 Subnet Mask: 255.255.255.0 Default Gateway: 10.[...]

IP Services Commands 157 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set interface dhcp-client on page 1 10 show dhcp-server Displays WSS Software DHCP server information. Syntax show dhcp-serv er [ interface vlan-id ] [ verbose ] Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. Examples The[...]

158 IP Services Commands NN47250-1 00 (Versio n 02.51) T able 3.Output f or show dhcp-ser ver Field Description VLAN VLAN number . Name VLAN name. Address IP address leased by the server . MA C Address MA C address of the de vice that holds the lease for the address. Lease Remaining Number of seconds rema ining before the address lease expires. T a[...]

IP Services Commands 159 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set interface dhcp-server on page 1 1 1 show interface Displays the IP interface s configured on the WSS. Syntax show interface [ vlan-id ] Defaults If you do not specify a VLAN ID, interf aces for all VLANs are displayed. Access All. History Usage T[...]

160 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear interface on page 99 • set interface on page 109 • set interface status on page 112 show ip alias Displays the IP aliase s configured on the WSS. Syntax show ip alias [ name ] Defaults If you do not specify an alias na me, all aliases are displayed. Access Enabled. Exampl[...]

IP Services Commands 161 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Table 22 describes the fields in this display. See Also • clear ip alias on page 100 • set ip alias on page 113 show ip dns Displays the DNS servers the WSS is configured to use. Syntax show ip dns Defaults None. Access All. Examples The follo wing comman[...]

162 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear ip dns domain on page 100 • clear ip dns server on page 101 • set ip dns on pa ge 113 • set ip dns domain on page 114 • set ip dns serv er on page 115 show ip https Displays information about the HTTPS management port. Syntax show ip https Defaults None. Access All. E[...]

IP Services Commands 163 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ip telnet on page 1 02 • set ip https server on page 116 • set ip telnet on page 120 • set ip telnet server on page 120 • show ip telnet on page 155 show ip route Displays the IP route table. Syntax show ip ro ute [ destination ] De[...]

164 IP Services Commands NN47250-1 00 (Versio n 02.51) Usage When you add an IP interf ace to a VLAN that is up, WSS Software adds direct and local routes for the interface to the route table. If the VLAN is do wn, WSS So ftware does not add the routes. If you add an interf ace to a VLAN b ut the routes for that interf ace do not appear in the rout[...]

IP Services Commands 165 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ip route on page 101 • set interface on page 109 • set ip route on page 116 • show interface on page 149 • show vlan conf ig on page 89 show ip telnet Displays information about the Telnet management port. Syntax show ip telnet Defa[...]

166 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear ip telnet on page 1 02 • set ip https server on page 116 • set ip telnet on page 120 • set ip telnet server on page 120 • show ip https on page 152 show ntp Displays NTP client infor mation. Syntax show ntp Defaults None. Access All. Examples T o display NTP informati[...]

IP Services Commands 167 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ntp serv er on page 102 • clear summertime on page 105 • clear timezone on page 106 • set ntp on page 121 T able 11: Output f or show ntp Field Description NTP client State of the NTP cl ient. The state ca n be one of the following: ?[...]

168 IP Services Commands NN47250-1 00 (Versio n 02.51) • set ntp serv er on page 122 • set summertime on page 140 • set timezone on page 143 • show timezone on page 161 show snmp community Displays the configured SNMP community str ings. Syntax show snmp community Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.[...]

IP Services Commands 169 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show snmp notify target Displays SNMP notification targets. Syntax show snmp notify target Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. See Also • clear snmp notify target on page 104 • set snmp notify target on page 131[...]

170 IP Services Commands NN47250-1 00 (Versio n 02.51) show snmp usm Displays information about SNMPv3 users. Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. See Also • clear snmp usm on page 105 • show snmp usm on page 160 show summertime Shows a WSS’s offset from its real-time clock. Syntax show summertime De[...]

IP Services Commands 171 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show timedate Shows the date and time of day curre ntly set on a WSS’s real-time clock. Syntax show timedat e Defaults None. Access All. Examples T o display the time an d date set on a WSS’ s real-time clock, type the follo wing command: 23x0# show timed[...]

172 IP Services Commands NN47250-1 00 (Versio n 02.51) telnet Opens a Teln et client sess ion with a remote device. Syntax telnet { ip-addr | hostname } [ port port-num ] Defaults WSS Software a ttempts to estab lish T eln et connections with TCP port 23 by default. Access Enabled. Usage T o end a T elnet session from the remo te de vice, press Ctr[...]

IP Services Commands 173 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference When the administrator presses Ctrl+t to end the Telnet connection, the management session returns to the local WSS prompt: WSS-r emote> Session 0 pty tt y2.d terminated tt name tty 2.d WSS# See Also • clear sessions on page 435 • show sessions on page[...]

174 IP Services Commands NN47250-1 00 (Versio n 02.51) WSS # traceroute ser ver1 traceroute to server1.example.com (192. 168.22.7), 30 hops max, 38 by te packets 1 engineering-1.example.com ( 192.168.192.206) 2 ms 1 ms 1 ms 2 engineering-2.example.com ( 192.168.196.204) 2 ms 3 ms 2 ms 3 gateway_a.example.com ( 192.168.1.201) 6 ms 3 ms 3 ms 4 server[...]

175 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference AAA Commands Use authentication, authoriz ation, and accounting (AAA) commands to prov ide a secure network connection and a record of user activity. Location policy comma nds override any virtual LAN (VLAN) or security ACL assignment by AAA or the loca l WSS database to help you[...]

176 AAA Commands NN47250-1 00 (Versio n 02.51) clear accounting Removes accounting services for spec ified wireless users with administ rative access or network access. Syntax clear accounting { admin | dot1x | system } { user-wildcar d } clear mac-usergr oup attr on page 174 clear mac-user group on page 173 clear mac-usergr oup on page 174 W eb au[...]

AAA Commands 177 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Examples The follo wing command remove s accounting se rvices for authorized n etwork user Nin: WSS# clear accounting dot1x Nin success: change accepted. See Also • set accounting {admin | console} on page 178 • set accounti[...]

178 AAA Commands NN47250-1 00 (Versio n 02.51) Access Enabled. Examples The follo wing command clears auth entication for administrator Jose: WSS# clear authentication admin Jose success: change accepted. See Also • clear authentication console on page 168 • clear authentication dot1x on page 169 • clear authentication mac on page 170 • cle[...]

AAA Commands 179 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference success: change accepted. See Also • clear authentication admin on page 1 67 • clear authentication dot1x on page 169 • clear authentication mac on page 170 • clear authentication web on page 171 • set authentication console on pa ge 183 • show aaa on pag[...]

180 AAA Commands NN47250-1 00 (Versio n 02.51) clear authentication mac Removes a MAC authentication rule. Syntax clear authentication mac { ssid ssid-name | wired } mac-addr -wildcar d Defaults None. Access Enabled. Examples The follo wing command rem ov es a MA C authenti cation rule for access to SSID thatcorp by MA C addresses beginn ing with a[...]

AAA Commands 181 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set authentication proxy on page 190 • show aaa on page 210 clear authentication web Removes a Web-based AAA rule. Syntax clear authentication web { ssid ssid-name | wir ed } user -wildcar d Defaults None. Access Enabled. Examples The follo wing comman[...]

182 AAA Commands NN47250-1 00 (Versio n 02.51) Usage T o determine the index numbers of location polic y rules, use t he sho w location p olicy command. Remo ving all the A CEs from the loc ation policy disab les this function on the WSS. Examples The follo wing command remove s location pol icy rule 4 from a WSS’ s location policy: WSS# clear lo[...]

AAA Commands 183 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax clear mac-user mac-addr attr attribute-name Defaults None. Access Enabled. Examples The follo wing comma nd remov es an access control list (A CL ) from the prof ile of a user at MA C address 01:02:03:04:05:06: WSS# clear mac-user 01:02:03:0 4:05:06 attr filte[...]

184 AAA Commands NN47250-1 00 (Versio n 02.51) clear mac-usergroup Removes a user group from the loca l database on the WSS, for a group of users who are authenticated by a MAC address. (To delete a MAC user group in RADIUS, se e the documentation for your RADIUS server.) Syntax clear mac-usergr oup gr oup-name Defaults None. Access Enabled. Usage [...]

AAA Commands 185 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS# clear mac-usergr oup eastc oasters attr vlan-name success: change accepted. See Also • clear mac-usergr oup on page 174 • set mac-usergr oup attr on page 203 • show aaa on page 210 clear mobility-profile Removes a Mobility Profile entirely. Syntax clear mo[...]

186 AAA Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing comma nd deletes th e user prof ile for user Nin: WSS# clear user Nin success: change accepted. See Also • set user on page 206 • show aaa on page 210 clear user attr Removes an authorization attribute from the use r profile in the local dat abase on the WSS, for a user with[...]

AAA Commands 187 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear user group Removes a user with a password from membersh ip in a user group in the local database on the WSS. (To remove a user from a user grou p in RADIUS , see the documentation for your RADIUS server.) Syntax clear user username gr oup Defaults None. Access [...]

188 AAA Commands NN47250-1 00 (Versio n 02.51) • set usergr oup on page 208 • show aaa on page 210 clear usergroup attr Removes an authorization attribute from a us er group in the local database on the WSS. (To remove an authorization attribute in RADI US, see the documentation for your RADIUS server.) Syntax clear usergr oup gr oup-name attr [...]

AAA Commands 189 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Accounting is disabled for all users by default. Access Enabled. Usage For netw ork users with start-st op accounting whose records are se nt to a RADIUS serv er , WSS Software sends interim updates to the RADIUS server when the user roams. Examples The foll[...]

190 AAA Commands NN47250-1 00 (Versio n 02.51) Syntax set accounting { dot1x | mac | we b | last-resort } { ssid ssid-name | wired } { user- wildcar d | mac-addr -wildcar d } { start-stop | stop-only } method1 [ metho d2 ] [ method3 ] [ met hod4 ] Defaults Accounting is disabled for all users by default. Access Enabled. dot1x Users with network acc[...]

AAA Commands 191 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage For netw ork users with start- stop accounting whose records ar e sent to a RADIUS server , WSS Software sends interim updates to the RADIUS server when the user roams. Examples The follo wing command issues stop-only records to the RADIUS serv er group sg2 for[...]

192 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear accounting on page 1 66 • show accounting statistics o n page 212 set authentication admin Configures authentic ation and defines where it is perfo rmed for specifie d users wi t h adminis trative acce ss through Telnet or Web View. Syntax set authenticatio n admin user - wildcar d[...]

AAA Commands 193 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults By default, authentication is deacti v ated for all ad min users. The def ault authentica tion method in an admin au thentication rul e is local . WSS Software checks the loca l WSS database for auth entication. Access Enabled. . Usage Y ou can configure dif[...]

194 AAA Commands NN47250-1 00 (Versio n 02.51) Syntax set authenticatio n console user - wildcar d method1 [ metho d2 ] [ method3 ] [ met hod4 ] Defaults By defa ult, authentica tion is deact iv at ed for all console users, and the default authentication method in a cons ole authentication rule is none . WSS Software requires no username or passwor[...]

AAA Commands 195 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. . Usage Y ou can configure dif ferent authen tication methods for dif ferent groups of users. (For details, see “User W ildcards, MA C Address W ildca rds, and VLAN W ildcards” on page 12 .) If you specify multiple authentication methods in the se[...]

196 AAA Commands NN47250-1 00 (Versio n 02.51) user-wildcar d A single user or a set of users with 802.1X network access. Specify a username, use the double-asterisk wildcard character (**) to specify all usernames, or use the single-asterisk wi ldca rd character (*) to specify a set of usernames up to or follo wing the f irst delimi ter character?[...]

AAA Commands 197 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference pr otocol Protocol used for authentication. Specify one of the follo wing: • eap-md5 —Extensible Authenticatio n Protocol (EAP) with message-digest algorithm 5. For wire d authentication clients : • Uses challenge-response to compare hashes •P r o v i d e s n[...]

198 AAA Commands NN47250-1 00 (Versio n 02.51) Defaults By default, auth entication is unconf igured for all clients with network access through AP ports or wired authentication por ts on the WSS. Connection, authorization, and accounting are also disable d for these users . Bonded authenticati on is disabled by default. Access Enabled. Usage Y ou [...]

AAA Commands 199 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set service-pr of ile auth-fallthru on page 308 • show aaa on page 210 set authentication last-resort Deprecated in WSS Software Version 5.0. T he last-r esort user is not required or supported in WSS Software Version 5.0. Instead, a user who accesses the netwo[...]

200 AAA Commands NN47250-1 00 (Versio n 02.51) Usage Y ou can configure dif ferent au th entication methods for dif fer ent groups of MA C addresses by “wildcarding. ” (For details, see “User W ildcards, MA C Address W i ldcards, and VLAN W ildcards” on page 12 .) If you specify multiple auth entication methods in the set authentication mac[...]

AAA Commands 201 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Usage AAA for third-party AP users has additi onal configuration re quirements. See the “Config uring AAA for Users of Third-Party APs” section in the “Configur ing AAA for Network Users” [...]

202 AAA Commands NN47250-1 00 (Versio n 02.51) Defaults By default, auth entication is unconf igured for all clients with network access through AP ports or wired authentication por ts on the WSS. Connection, authorization, and accounting are also disable d for these users . Access Enabled. Usage Y ou can configure dif ferent auth entication method[...]

AAA Commands 203 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set authentication admin on page 182 • set authentication console on pa ge 183 • set authentication dot1x on page 185 • show aaa on page 210 set location policy Creates and enables a location policy on a WSS. A location policy enables you to locally set or [...]

204 AAA Commands NN47250-1 00 (Versio n 02.51) Defaults By default, u sers are permitted VLAN access and assign ed security A CLs according to the VLAN-Name and Filter-Id attributes applied to the users during norma l authentic ation and au thorization. Access Enabled. Usage Only a single location policy is a llo wed per WSS. The location polic y c[...]

AAA Commands 205 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference •U s e inacl inacl-name to filter traf f ic that ente rs the switch from users via an AP access port or wired authentication port, or from the network via a network port. •U s e outacl outacl-name to filter traff ic sent from the s witch to users via an AP access[...]

206 AAA Commands NN47250-1 00 (Versio n 02.51) Syntax set mac-user mac-addr [ group gr oup-name ] Defaults None. Access Enabled. Usage WSS Software does not require MA C users to belong to user groups. Users authenticated by MAC address can be authenticate d only for network access thr ough the WSS. WSS Software does not support passwords for MAC u[...]

AAA Commands 207 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set mac-user attr Assigns an authorization attribute in th e local database on the WSS to a user w ho is authenticated by a MAC address. (To assign authorization at tributes through RADIUS, see the do cumentation for your RADIUS server.) Syntax set mac-user mac-addr [...]

208 AAA Commands NN47250-1 00 (Versio n 02.51) T able 1: A uthentication Attributes f or Local Users Attribute Description Valid Value(s) encryption-type T ype of encryption required for access by the client. Clients who attempt to use an unauthorized encryption method are rejected. Note: Encryption-T ype is a Nortel vendor -specif ic attribute (VS[...]

AAA Commands 209 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference fi lt er-i d (network access mode only) Security access control li st (A CL), to permit or den y traf fic recei ved (input) or sent (output) by the WSS. (For more information about security A CLs, see “Security A CL Commands” on page 449 .) Name of a n exist ing [...]

210 AAA Commands NN47250-1 00 (Versio n 02.51) service-type T ype of access the user is requesting. One of the following numbers: • 2 —Framed; for network user access • 6 —Administrative; for administrative access to the WSS, with authorization to access the enabled (configuration) mode. The user must enter the enable command and the correc[...]

AAA Commands 21 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference time-of-day (network access mode only) Day(s) and time(s) during which the user is permitted to log into the networ k. After authoriz ation, the user’ s session can last until either the T ime-Of-Day range or the Session- T imeout duration (if set) expires, whiche[...]

212 AAA Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command assigns i nput access cont rol list (A CL) acl-03 to f ilter the packets from a user at MA C address 01:02:03:04:05:06: WSS# set mac-us er 01:02:03:0 4:05:06 attr f i lter -i d acl-03.in success: change accepted. url (network access mode only) URL to which the user is re[...]

AAA Commands 213 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command restri cts a user at MAC address 06:05:04:03:02:0 1 to networ k access between 7 p.m. on Mondays and Wednesdays and 7 a.m. on Tuesdays and Thursdays: WSS# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-1159,tu0000 - 0700,we1900-1159,th0 [...]

214 AAA Commands NN47250-1 00 (Versio n 02.51) • show aaa on page 210 set mobility-profile Creates a Mobility Pr ofile and specifies th e AP and/ or wired authentication ports on the WSS through which any user assigned to the pr ofile is allowed ac cess. Syntax set mobility-p rof ile name name { port { none | all | p ort-list }} | { ap { none | a[...]

AAA Commands 215 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing commands crea te the Mobility Prof ile ma gnolia , which restrict s user access to port 12; enable the Mobility Prof ile feature on the WSS; and as sign the magnolia Mobility Prof ile to user Jos e . WSS# set mobili ty-pr of ile name magnolia [...]

216 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear mobility-prof ile on page 175 • set mobility-pr ofi le on page 204 • show mobility-prof ile on page 215 set user Configures a user profile in the local data base on the WSS for a user with a password. (To configure a user profile in RADIUS, s ee the documentation for your RADIUS [...]

AAA Commands 217 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command cha nges Nin’s password from goody to 29J an04: WSS# set user Nin passw ord 29Jan 04 See Also • clear user on page 175 • show aaa on page 210 set user attr Configures an authorization attribute in the loca l database on the WSS for a user [...]

218 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear user attr on page 176 • show aaa on page 210 set user group Adds a user to a user group. The user must have a passw ord and a profile that exists in the local database on the WSS. (To configure a user in RADIUS, see the documentation for your RADIUS server.) Syntax set user usernam[...]

AAA Commands 219 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set userg roup gr oup-na me attr attribute-name value Defaults None. Access Enabled. Usage T o change the value of an attrib ute, enter set usergroup attr with the ne w value . T o delete an attrib ute, use clear u sergr oup attr . To add a user to a group, us[...]

220 AAA Commands NN47250-1 00 (Versio n 02.51) History Usage This command disables or reenables support fo r W eb-based AAA. Ho we ver , W eb-based AAA has additional configuration re quirements. For information, see the “Configuring AAA fo r Netw ork Users” chapter in the Nortel WLAN Security Switch 2300 Series C onfigur ation Guide . Examples[...]

AAA Commands 221 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference sg3: rs-5 W eb Portal: enabled set authentication admin Jose sg3 set authentication con sole * none set authentication mac ssid mycorp * local set authentication dot1x ssid mycorp Geetha eap-tls set authentication do t1x ssid mycorp * peap-mschapv2 sg1 sg 2 sg3 set a[...]

222 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • set accounting {admin | console} on page 178 • set authentication admin on page 182 • set authentication console on pa ge 183 • set authentication dot1x on page 185 • set authentication mac on page 189 • set authentication web on page 191 show accounting statistics Displays the A[...]

AAA Commands 223 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax show accounting statistics Defaults None. Access Enabled. History Examples T o display the local ly stored accountin g records, type th e foll owi ng command: WSS# show accounting statistics Dec 14 00:39:48 Acct-Status-T ype=ST OP Acct-Authentic=0 Acct-Multi-S[...]

224 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear accounting on page 1 66 • set accounting {admin | console} on page 178 • show aaa on page 210 T able 3: show accounting statistics Output Field Description Date and time Date and time of the accounting recor d. Acct-Status-T ype T ype of accounting record: •S T A R T •S T O P[...]

AAA Commands 225 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show location policy Displays the li st of locati on policy rules that make up the location policy on a WSS. Syntax show location policy Defaults None. Access Enabled. Examples The follo wing comma nd displays the list o f location polic y rules in the location polic[...]

226 AAA Commands NN47250-1 00 (Versio n 02.51)[...]

227 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Mobility Domain Commands Use Mobility Domain commands to confi gure and manage Mobility Domain groups. A Mobility Domain is a syste m of WSSs and APs working together to sup port a ro aming user (client ). One WSS a cts as a seed switch, which maintains and distributes a list of [...]

228 Mobility Domain Commands NN47250-1 00 (Versio n 02.51) clear mobility-domain Clears all Mobility Doma in configurat ion and information from a WSS, regardle ss of whether the WSS is a seed or a member of a Mobility Domain. Syntax clear mobility-domain Defaults None. Access Enabled. Usage This command has no ef fect if the WSS is no t configured[...]

Mobility Domain Commands 229 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set domain security { none | req u i red } Defaults The defau lt is none . ( WSS - WSS security is disabled. ) Access Enabled. History Introduced in WSS Software 5.0. Usage The setting must be the same ( none or requir ed ) on all switches, the see[...]

230 Mobility Domain Commands NN47250-1 00 (Versio n 02.51) success: change accepted. WSS# set mobility-domain member 192.168.1.10 success: change accepted. See Also • clear mobility-domain member on page 218 • show mobility-domain conf ig on page 222 set mobility-domain mode member seed-ip On a nonseed WSS, sets the IP address of the seed WSS. [...]

Mobility Domain Commands 231 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set mobility-domain mode member secondary-s eed-ip secondary-seed-ip-addr Defaults None. Access Enabled. History Introduced in WSS Software V ersion 6.0. Examples Follo wing is the e xample of m obility-domain secon dary-seed-ip. WSS# set mobility-[...]

232 Mobility Domain Commands NN47250-1 00 (Versio n 02.51) set mobility-domain mode secondary-seed domain- name seed-ip Creates a Mobility Domain by setting th e current WSS as the secondary seed device and naming th e Mobility Domain. Syntax set mobility-dom ain mode se condary-seed domain-name domain-name seed-ip seed- ip Defaults None. Access En[...]

Mobility Domain Commands 233 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax show mobility-domain Defaults None. Access Enabled. History Upgraded in WSS Software V ersion 6.0. Examples T o display Mobility Domain status, type the follo wing command: WSS# show mobilit y-domain Mobility Domain name: Santa Clara Member S tate [...]

234 Mobility Domain Commands NN47250-1 00 (Versio n 02.51)[...]

235 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Netw ork Domain Commands Use Network Domain commands to confi gure and manage Network Domain groups. A Network Domain is a group of geographically dispersed Mo bility Domains that shar e information among themselves over a WAN link. This shared information allows a user configure[...]

236 Network Do main Comman ds NN47250-1 00 (Versio n 02.51) See Also • set network-domain mode member seed-ip on page 227 • set network-domain peer on page 228 • set network-domain mode se ed domain-name on page 229 clear network-domain mode Removes the Network Domain seed o r member confi gurat ion from the WSS. Syntax clear network-domain m[...]

Network Domain Commands 237 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Usage This command has no ef fect if the WSS is no t configured as a Network Domain seed. Examples The follo wing command clears the Network Doma in peer configuration for peer 192.168.[...]

238 Network Do main Comman ds NN47250-1 00 (Versio n 02.51) Syntax set network-domain mo de member seed-i p ip-addr [ aff in ity num ] Defaults The defau lt af finity for a Network Domain seed is 5. Access Enabled. History Introduced in WSS Software 4.1. Usage Y ou can specify multiple Netw ork Domain seeds on the WSS. When the WSS needs to connect[...]

Network Domain Commands 239 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS Software 4.1. Usage This command must be entered on a WSS c onfigur ed as a Network Domain seed. Examples The follo wing command sets the WSS with IP ad dress 192.168.9.254 as a peer of this Netw ork Domain seed: WSS# set network-[...]

240 Network Do main Comman ds NN47250-1 00 (Versio n 02.51) Syntax show netw ork-domain Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Examples T o display Networ k Domain status, type the follo wing command. The output of th e command dif fers based on whether the WSS is a member of a Network Domain or a Netw ork Domain see[...]

Network Domain Commands 241 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear network-domain on page 225 • set network-domain mode member seed-ip on page 227 • set network-domain mode se ed domain-name on page 229 • set network-domain peer on page 228 State State of the WSS in the Network Domain: •U P •D[...]

242 Network Do main Comman ds NN47250-1 00 (Versio n 02.51)[...]

243 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference AP Commands Use AP commands to configure and ma nage APs. Be sure to do t he fo llowing before using the commands: • Define the country-specifi c IEEE 802.11 regulations on the WSS. (See set system countrycode on page 63 .) • Install the AP and connect it to a port on the WSS[...]

244 AP Commands NN47250-1 00 (Versio n 02.51) AP-WSS security set ap fingerprint on page 257 set ap security on page 274 Static IP Address Assignment fo r A P s set ap boot-config uration ip on page 251 set ap boot-config uration switch on page 255 set ap boot-config uration vlan on page 256 clear ap boot-conf iguration on page 241 show ap boot-con[...]

AP Commands 245 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-pr ofile ci pher -wep104 on page 314 set serv ice-prof il e ci pher -wep40 on page 315 set servic e-prof ile psk-phrase on page 322 set service-pr ofile psk-raw on page 323 set servic e-prof ile tk ip-mc-time on page 333 set servic e-prof ile wep a ctive-m[...]

246 AP Commands NN47250-1 00 (Versio n 02.51) set radio-prof ile rate-enf or cement on page 295 T ransmissi on re tries set s ervic e-pr of ile long-r etry-count on page 319 set servic e-prof ile shor t-retry-count on pag e 325 RF Au to-T uning set radio-prof ile au to-tune channel-conf ig on page 279 set radio-prof ile auto-tune channel-holddo wn [...]

AP Commands 247 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear ap image Clears an AirDefense sens or software im age file from an AP’s configuration . Syntax clear ap ap - number image Defaults None. Access Enabled. show ap conf ig on page 344 show ap status on pa ge 358 show ap counters on page 348 show ap global on page[...]

248 AP Commands NN47250-1 00 (Versio n 02.51) History Usage Use this command to conf igure an AP that had been con verted to an AirDefense sensor to re vert b ack to an AP . to loa d the softw are. Whe n you do this, the next time the AP is booted, it becomes a Nortel Mobili ty Point. Examples The following command causes the AirDefense sensor soft[...]

AP Commands 249 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ap local-switching vlan-pr of ile on page 260 • set vlan-prof ile clear ap radio Disables an AP radio and resets it to its factory default sett ings. Syntax clear { ap port-list | ap ap-num } radio { 1 | 2 | all } Defaults The clear ap radio command resets t[...]

250 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled History Usage When you clear a radio, WSS Software performs the following action s: • Clears the transmit po wer , channel, and external antenna setting from the radio. • Removes the radio from its radio profile and places the radio in the default radio profile. This command does not [...]

AP Commands 251 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear ap boot-configuration Removes the static IP address conf iguration for a AP. Syntax clear ap boot-configuration ap-num Defaults None. Access Enabled. History Introduced in WSS Software 4.1. O ption dap removed in 6.0. Usage When the static IP conf iguration is c[...]

252 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command clears radio 1 on AP 7 from the load balancing group to which it had been assigned: WSS# clear ap 7 radio 1 load-balancing group success : change accepted. See Also • set load-balancing strictness on page 277 • set ap radio load-balancing on pa ge 268 • set ap local[...]

AP Commands 253 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage If you specify a parameter , the settin g for the parameter is reset to its default value. The settings of the other parameters are u nchanged and the radio prof il e remains in the conf iguration. If you do not specify a parameter, the entire radio prof[...]

254 AP Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage If the service prof ile is mapped to a radio prof ile, you must remov e it from the radio prof ile first. (After disabling all radios that use the radio prof ile, use the clear radio-pr of ile name service- prof ile name command.) Examples The follo wing comm[...]

AP Commands 255 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference reset ap Restarts a n AP. Syntax res e t { ap port-list | ap ap-num } Defaults None. Access Enabled. Usage When you enter this command, the AP drops all sessions and reboots. Examples The follo wing command resets the AP on port 7: WSS# res e t a p 7 This will reset s[...]

256 AP Commands NN47250-1 00 (Versio n 02.51) Usage T able 35 lists the conf igurable pr ofile parameters and their defaults. The only parameter that requires configuration is the prof ile mode. The profile is disabl ed by default. T o use the profile to configu re APs, you must en able the prof ile using the set ap auto mode enable command. The pr[...]

AP Commands 257 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ap radio auto-tune max-power on page 265 • set ap radio mode on page 270 • set ap radio radio-pr of ile on page 271 • set ap upgrade-f irmwar e on page 275 set ap auto mode Enables a WSS’s profile for automatic AP configuration. Syntax set ap auto mode[...]

258 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set ap auto persistent [ ap-num | all ] Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Opt ion dap removed in 6 .0. Usage T o display the AP numbers assigned to Auto-APs, use the show ap status auto command. Examples The follo wing command con verts the conf ig uration of [...]

AP Commands 259 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage If you set the radiotype to 11a and the AP configuration prof ile is used to configure a two-radio AP model, radio 1 is configured as an 802.11b/g radio and radio 2 is configured as the 80 2.11a radi o. Because this is the re verse o f the standard conf [...]

260 AP Commands NN47250-1 00 (Versio n 02.51) Usage High bias is preferred ov er lo w bias . Bias applies only to WSSs that are indirect ly attached to t he AP through an intermediate Layer 2 or Laye r 3 network. An AP al ways attempts to boot on AP port 1 first, and if a WSS is directly attached on AP port 1, the AP al ways boots from it. If AP po[...]

AP Commands 261 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Changing the LED blink mode does no t alter operation of the AP. Onl y the behavi or of the LEDs is affected. Examples The follo wing command enables LED blink mode on the AP connected to ports 3 and 4: WSS# set ap 3-4 blink enable success: change accepted. set [...]

262 AP Commands NN47250-1 00 (Versio n 02.51) • show ap boot-conf iguration on page 370 set ap boot-configuration mesh mode Enables WLAN mesh services on the AP. Syntax set ap ap-number boot-configuration mesh mode {enable | disable} Defaults Disabled. Access Enabled. History Introduced in WSS V ersion 6.0. Usage Use this command to e nable WLAN [...]

AP Commands 263 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Use this command to conf igure the preshared k ey that a Mesh AP uses to authenticate to a Mesh Portal AP . Y ou must connect the AP to an WSS switch and enter this command to configure the AP for mesh servic es prior to de ploying the Mesh AP in its final untet[...]

264 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command conf igures AP7 to use a ra w PSK to authenticat e with a Mesh Portal AP: WSS# set ap 7 boot-configuration mesh psk-raw c25d3fe4483e867d1df96eaacdf8b 02451fa0836162e75 8100f5f6b87965e5 9d success: change accepted. See Also • set ap boot-conf iguration mesh ssid on page [...]

AP Commands 265 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ap boot-conf iguration mesh mode on page 252 • set service-pr of ile mesh on page 320 • show ap mesh-links on page 357 set ap boot-configuration switch Specifies the WSS a AP contacts and attem pts to use as its boot device. Syntax set ap ap- num boot-conf[...]

266 AP Commands NN47250-1 00 (Versio n 02.51) See Also • clear ap boot-configuration on page 241 • set ap boot-conf iguration ip on page 25 1 • set ap boot-conf igura tion vlan on page 256 • show ap boot-conf iguration on page 370 set ap boot-configuration vlan Specifies 802.1Q VLAN taggi ng information for a AP. Syntax set ap ap-num boot-c[...]

AP Commands 267 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ap fingerprint Verifies an AP’s fingerprint on a WSS. If AP-WSS security is required by a WSS, an AP can es tablish a management session with the switch only if yo u have verified the AP’s identity by verifying its fingerpr int on the switch. Syntax set ap num[...]

268 AP Commands NN47250-1 00 (Versio n 02.51) Defaults Forced image do wnload is disabled by default. Access Enabled. History Introduced in WSS Software 5.0. O ptional dap removed 6.0. Usage A change to the forced image d ownl oad option ta k es place the next time the AP is restarted. Even when forced image do wnload is disabled (the defaul t), th[...]

AP Commands 269 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage Y ou can assign any subset or all of the APs connected to a WSS to a group on that switch. All access points in a group must be connected to the same WSS. If you use the name none , spelled in an y combination of capi tal or lo wercase letters, the speci[...]

270 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command causes AP 1 to load the adcon vert.bin f ile, then reboot as an AirDefense sensor: WSS# set ap 1 image adconvert.bin This will change the file a AP will boot. W ould you like to continue? (y/ n) [n] y set ap local-switching mode Enables local switch ing for a specified AP[...]

AP Commands 271 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set ap ap-number local-swit ching vlan-p rof ile pr of ile-name Defaults If local switching is enabled on an AP , b ut no VL AN prof ile is configured, then a defa ult VLAN profile is used. The default VLAN prof ile includes a single VLAN named default that is [...]

272 AP Commands NN47250-1 00 (Versio n 02.51) History Examples The follo wing command changes the name of the AP on port 1 to techpubs : WSS# set ap 1 name techpubs success: change accepted. See Also show ap config on page 34 4 set ap radio antenn a-location Specifies the location (indoors or outdoors) of an external antenna. Use this command to en[...]

AP Commands 273 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set ap radio antennatype on page 263 set ap radio antenn atype Sets the model number for the antenna to be used. Syntax set { ap port-list | ap ap-num } radio { 1 | 2 } antennatype {1 antennatype {internal | 24203 | 24403 | 24453 | 24553 | 24883 | mixed | 241[...]

274 AP Commands NN47250-1 00 (Versio n 02.51) ap port-list List of ports connected to the APs on which to set the channel. ap ap-num Number of a AP on which to set the channel. radio 1 Radio 1 of the AP. radio 2 Radio 2 of the AP. (This option does not apply to single-radio models.) antennatype { internal | 24203 | 24403 | 24453 | 24553 | mixed | 2[...]

AP Commands 275 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults All radios use the internal an tenna by default, if the AP model has an internal antenna . Access Enabled. History Usage This command applies only to th e 802.1 1b/g radio on model 2330. Examples The follo wing command configures the 802. 11b/g radio on AP 1 [...]

276 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set { ap port-list | auto }} radio { 1 | 2 } auto-tun e max-power power -level Defaults The default ma ximum po wer setting that RF Auto-T uning can set on a radio is the highest setting allo wed for the country of op eratio n or highest setting supported on the hardw are, whichev er is lo wer . [...]

AP Commands 277 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ap radio channel Sets an AP radio’s channel. Syntax set { ap port-list | ap ap-num } radio { 1 | 2 } channel channel-numbe r Defaults The default channel depends on the radio ty pe: • The default channel number for 802.11b/g is 6. • The default channel numbe[...]

278 AP Commands NN47250-1 00 (Versio n 02.51) set ap radio min-tx-datarate To specify the m inimum rate at whic h a radio is allowe d to transmit t raffic to cl ients, see Deprecated in WSS Software V ersion 5.0. on page 266 . set ap radio link-calibration Configures an AP radio to emit link calibration packets, which ca n aid in positioning a Mesh[...]

AP Commands 279 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set ap ap-num radio { 1 | 2 } load-bala ncing { enable | disable } Defaults RF load balancing is enabled by default for all AP radios. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage By default, RF lo ad balancing is enabled on all AP rad[...]

280 AP Commands NN47250-1 00 (Versio n 02.51) Defaults By default, AP radios are not pa rt of an RF load balancing group. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Assigning radios to specif ic load balanc ing groups is optional. When you do this, WSS Software considers them to ha ve e xactly o verla pping cov erage are[...]

AP Commands 281 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. History Usage T o enable or disable one or more radios to which a prof ile is assigned, use the set ap radio radio- prof ile command. T o enable or disable all radios that use a specif ic radio prof ile, use the set radio-prof ile command. Examples The[...]

282 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Usage When you create a ne w prof ile, the radio parameters in the prof ile are set to their factory defa ult val ue s . To enable or disable all radios th at use a specific radio pro file, use set radio -prof ile . Examples The follo wing command enables radio 1 on por ts 5 thro[...]

AP Commands 283 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. Usage Y ou also can configure a radio’ s cha nnel on the same command line. Use the channel option. This command is not valid if dynamic pow er tuning (RF Auto-Tuning) is en abled. Examples The follo wing command configures the tran smit po wer on th[...]

284 AP Commands NN47250-1 00 (Versio n 02.51) set ap security Sets security requirements for management sessions be tween a WSS and its APs. This feature applies to APs only, not to directly connected APs configured on AP access ports. Syntax set ap security { req ui re | option al | none } Defaults The defau lt setting is optional . Access Enabled[...]

AP Commands 285 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ap sticky-bit This command is deprec ated in WSS Software Version 4.0. WSS assignment is alwa ys sticky. If an AP fails over to another WSS connection, the AP stays on that connection until the c onnection goes down or the WSS or AP is restarted. set ap upgrade-fi[...]

286 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set band-prefer ence {none | 11bg | 11a} Defaults By default, clients are not steered to sp ecif ic AP rad ios for RF load balancing. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Use this command to steer cl ients that supp ort both the 802. 11a and 802.11b/g bands, to a[...]

AP Commands 287 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS V ersion 6.0. Usage By default, RF lo ad balancing is enabled on all AP radios. Us e this command to disable or re-enable RF load balancing globally for all AP radios managed by the WSS switch. If RF load balancing has been enab led or disabl[...]

288 AP Commands NN47250-1 00 (Versio n 02.51) across the AP radios in the load-balancing group. When low strictness is speci fied (t he def ault), WSS Software makes hea vily loaded AP radios less visible in order to steer clients to less-busy AP radios, b ut ensures that ev en if all the AP radios in the group are he avily load ed, clients are no [...]

AP Commands 289 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Y ou can enter this command on any WSS in the Mobility Doma in. The command tak es ef fect only on that switch. Examples The follo wing command disables activ e scan in radio profile ra dpr of3 : WSS# set radio-prof ile radpr of3 active-scan disable success: cha[...]

290 AP Commands NN47250-1 00 (Versio n 02.51) Even when RF Auto-Tuning for channels is enabled, WSS Software does not chan ge the channel on radios that have active client sessi ons, unless you use the no-client option. RF Auto-Tuning of channels on 802.11a radi os uses only the bottom eight channels in the band (36, 40, 44, 48, 52, 56, 60, and 64)[...]

AP Commands 291 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set radio-prof ile auto-tune channel-interval on page 281 • set radio-prof ile auto-tune ch annel-lockdown on page 2 82 • show radio-pr of ile on page 376 set radio-profile auto-tune channel-interval Sets the interval at which RF A uto-Tuni ng decides whether [...]

292 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile auto-tune channel-lockdown Locks down the current channel settings on all radios in a radio profile. The channel se tti ngs that are in effect when the command is entered ar e changed into statica lly configured channel assi gnments on the radios. RF Auto-Tuning of channels is then dis[...]

AP Commands 293 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set radio-pr of ile nam e auto-tune power -conf ig { enable | disable } Defaults Dynamic power assignment is disabled by def ault. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage When RF Auto-T uning for po wer is disabled, WSS Software d[...]

294 AP Commands NN47250-1 00 (Versio n 02.51) History Introduced in WSS Software V ersion 3.0. Examples The follo wing command sets the power in terv al for radios in radio prof ile rp2 to 240 seconds: WSS# set radio-prof ile rp2 auto-tune po wer -interval 240 success: change accepted. See Also • set ap radio auto-tune max-power on page 265 • s[...]

AP Commands 295 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile auto-tune power-ramp-interval Changes the interval at which power is in creased or dec reased, in 1 dBm incremen ts, on radios in a radio profile until the optimum power level calculated by RF Auto-Tuning is reached. Syntax set radio-pr of ile nam e [...]

296 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command changes the beacon interval for radio prof ile rp1 to 200 ms: WSS# set radio-prof ile rp1 beacon-interv al 200 success: change accepted. See Also • set radio-prof ile mode on page 291 • show radio-pr of ile on page 376 set radio-profile beaconed-ssid See set service-p[...]

AP Commands 297 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile countermeasures Enables or disables countermeasur es on the AP r adios managed by a radio profile. Countermeasures are packets sent by a radio to prevent clients from being able to use rogue access points. AP radios can also issue c ountermeasures ag[...]

298 AP Commands NN47250-1 00 (Versio n 02.51) The following command disables c ountermeasures in radio prof ile rad prof3 : WSS# clear radio-prof ile ra dpr of3 countermeasur es success: change accepted. The following command causes ra dios managed by radio profile r adpr of3 to issue countermeasures against devices in the WSS’s attack list: WSS#[...]

AP Commands 299 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set radio-prof ile mode on page 291 • show radio-pr of ile on page 376 set radio-profile frag-threshold Changes the fragmentation th reshold for the AP radios in a radio pr ofile. The fragmen tati on threshold is the threshold at which th e long-retry-c[...]

300 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile long-retry Deprecated in WSS Software Version 4.1. In 4.1, this parameter is associated with service profiles instea d of radio profiles. See set service-prof ile long-r etry-count on page 319 . set radio-profile max-rx-lifetime Changes the maximum receive threshold for the AP radios i[...]

AP Commands 301 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The default maximum transmit threshold for AP radios is 2000 ms (2 seconds). Access Enabled. Usage Y ou must disable all radios that are using a radio profile before you can change parameters in the prof ile. Use the set radio-pr of ile mode command . Example[...]

302 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled. countermeasu res Not conf igured Does not issu e countermeasures against any d evice. dtim-interval 1 Sends the deli v ery traf f ic indication map (DTIM) after ev ery beacon. frag-threshold 2346 Uses the sh ort-retry-count for frames shorter than 2346 bytes and uses the long-retry-count[...]

AP Commands 303 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage Use the command without an y optional parameters to create new prof ile. If th e radio prof ile does not already ex ist, WSS Soft ware cr eates a ne w radio prof ile. Use the enable or disabl e option to enable or disable all the radios using a profile. [...]

304 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile preamble-length Changes the preamble length for wh ich an 802.11b/g AP radio advertises sup port. This command does not apply to 802.11a. Syntax set radio-pr of ile na me pr eamble-l ength { long | short } Defaults The defau lt is short . Access Enabled. Usage Changing the preamble len[...]

AP Commands 305 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile qos-mode Sets the prioritizat ion mode for forwarding queu es on AP radios manage d by the radio profile. Syntax set radio-pr of ile na me qos-mode { svp | wmm } Defaults The defau lt QoS mode is wmm . Access Enabled. History Introduced in WSS Softwa[...]

306 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set radio-pr of ile nam e rate-enf or cement {enable | disable} Defaults Data rate e nforcement is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Each type of radio (802.11a, 802.11b, and 802.11g) pro viding service to an SSID has a set of radio rates [...]

AP Commands 307 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set radio-pr of ile na me rf id-mode { enable | disabl e } Defaults The defau lt is disable . Access Enabled. History Introduced in WSS Software V ersion 5.0. Examples The follo wing command enables ra dios managed by radio profile rp1 to act as asset location [...]

308 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile service-profile Maps a service profile to a radio profile. All radios that use the radio p rof ile also use the pa rameter settings, including SSID and encryption sett ings, in the service profile. Syntax set radio-pr of ile na me serv ice-prof ile name Defaults A radio prof ile does n[...]

AP Commands 309 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference cipher-ccmp disable Does not use Counter with Cipher Block Chaining Message Authentication Code Protocol (CCMP) to encrypt traff ic sent to WP A clients. cipher-tkip e nable When the WP A IE is e nabled, uses T emporal K ey Integ rity Protocol (TKIP) to encrypt traf f[...]

310 AP Commands NN47250-1 00 (Versio n 02.51) no-br oadcast disab le Does not reduce wireless broadcast traff ic by sending unicasts to clients for ARP requests and DHCP Of fers and Acks instead of forwarding them as multicasts. proxy-ar p disable Does not reply on behalf of wireless cli ents to ARP request s for client IP addr esses. Instead, the [...]

AP Commands 31 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference tkip-mc-time 60000 Uses Michael countermeasures for 60,000 ms (60 seconds) follo wing detection of a second MIC failure within 60 seconds. transmit-rates 802.11a: • mandatory: 6.0 ,12.0, 24.0 • beacon-rate: 6.0 • multicast-rate: auto • disabled: none 802.11b:[...]

312 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage Y ou must configure the service prof ile before you can map it to a radio profile. Y ou can map the same service prof ile to more than one radio prof ile. You must disable all radios that use a radio profile before you can change par[...]

AP Commands 313 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command maps service-profile wpa_clients to radio prof ile rp2 : WSS# set radio-profile r p2 service-prof ile wpa_clients success: change accepted. See Also • set service-pr of ile attr on page 306 • set service-pr of ile auth-dot1x on page[...]

314 AP Commands NN47250-1 00 (Versio n 02.51) • set service-pr of ile wep key-index on page 342 • set service-pr of ile wpa-ie on page 342 • show radio-pr of ile on page 376 • show service-pr of ile on page 380 set radio-profile shared-key-auth See set service-prof ile shar ed-key-auth on page 324 . set radio-profile short-retry Deprecated [...]

AP Commands 315 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile wmm-powersave Enables Unsche duled Automati c Powe rsave Delivery (U-APSD) on AP ra dios managed by the radio profile. U-APSD enables WMM clients that use powersave mode to mo re effi ciently request buffered unica st packets from AP radios. When U-A[...]

316 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile attr Configures authorization attributes that are applied by default to us ers accessing the SSI D managed by the service profile. These SSID de fault attributes are applied in addition to any supplied by the RADIUS server or from the lo cal database. Syntax set service-pr of ile nam[...]

AP Commands 317 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command assigns users accessing the SSID managed by service profile sp2 to the Mobility Profile tulip. WSS# set service-prof sp2 attr mobility-profile tulip success: change accepted. The following command limits the days and ti mes when users acc essing [...]

318 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set service-pr of ile auth-psk on page 309 • set service-pr of ile psk-phrase on page 322 • set service-pr of ile wpa-ie on page 342 • show service-pr of ile on page 380 set service-profile auth-fallthru Specifies the authentication type for users who do not ma tch an 802.1X or MAC au[...]

AP Commands 319 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The web-portal authentication type al so requires additional c onfiguration items. (See the “Configuring AAA for Network Users” chapter of the Nortel WLAN Security Switch 2300 Series Configuration Guide .) Examples The follo wing command sets the f allthru authen [...]

320 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile beacon Disables or reenab les beaconing of the SSID mana ged by the service profile. An AP radio responds to an 802.1 1 pr obe any request with only the beaconed SS ID(s). For a nonbeaconed SSID, radios respond only to directed 802.11 pr obe requests that match the nonbeaconed SSID?[...]

AP Commands 321 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage WLAN mesh services can be used in a wi reless br idge configuration, implementing APs as bridge endpoints in a transparent Layer 2 bri dge. A typical applicati on of wireless bridging is to provide network connectiv ity between two buil dings using a wireless li[...]

322 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile cac-session Specifies the maximum number of active sessions a radio can have when se ssion-based CAC is enabled. When an AP radio has reached the maximu m allowed number of acti ve sessions, the radio refuses connections from additional clients. Syntax set service-pr of ile name cac-[...]

AP Commands 323 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command conf igures service prof ile sp2 to use CCMP encryption: WSS# set service-pr of ile sp2 cipher -ccmp enable success: change accepted. See Also • set service-prof ile ci pher -tkip on page 313 • set service-pr of ile cipher -wep104 o[...]

324 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile cipher-wep104 Enables dynamic Wired Equivalent Privacy (WEP) with 104-bit keys, in a service profile. Syntax set service-pr of ile name cipher -wep104 { enable | di sable } Defaults 104-bit WEP encryption is disabled by def ault. Access Enabled. History Introduced in WSS Software V e[...]

AP Commands 325 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-profile cipher-wep40 Enables dynamic Wired Equivalent Privacy (WEP) with 40-bit keys, in a service profile. Syntax set service-pr of ile name cipher -wep40 { enable | disable } Defaults 40-bit WEP encryption is disabled by default. Access Enabled. History [...]

326 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name cos level Defaults The defau lt static CoS le vel is 0. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage This command applie s only when static CoS is enabled. If st atic CoS is disabled, prio ritization is based on the QoS mode configured in the r[...]

AP Commands 327 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set service-pr of ile no-broadcast on page 320 • set service-pr of ile proxy-ar p on page 321 • show service-pr of ile on page 380 set service-profile idle-client-probing Disables or reenable s periodic keepalives from AP radi os to clients on a servi[...]

328 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name keep-initial-vlan { enable | disable } Defaults This option is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 5.0. Usage Even when this option is enabled, the WSS to which a user roams (the r oamed-to switch) can reassign the VLAN in an[...]

AP Commands 329 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Use this command to exempt a service prof il e from RF load bala ncing. Ex empting a service prof ile from RF load balancing means that e ven if an AP rad io is attempting to steer clients aw ay , it does not reduce or conceal the av ailabil ity of the SSID name[...]

330 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile mesh Creates a service profile for use with WLAN mesh se rvices. Syntax set service-pr of ile name mesh mode {enabl e | disable} Defaults None. Access Enabled. History Introduced in WSS Software version 6.0. Usage Use this command to configure mesh services for a servic e profile. On[...]

AP Commands 331 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set service-pr of ile name no-br oadcast { enable | disabl e } Defaults The no-broadcast mode is disabled by defa ult. (Broadca st traf fi c not disabled.) Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage T o further reduce ARP traf fic on[...]

332 AP Commands NN47250-1 00 (Versio n 02.51) Usage T o further reduce broadcast traf f ic on a service prof ile, use the set service-prof ile no-br oadcast command to disable DHCP a nd ARP request broadcasts. Examples The follo wing command enables proxy ARP on service profile sp1 : WSS# set service-prof ile sp1 proxy-arp enable success: change ac[...]

AP Commands 333 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-profile psk-raw Configures a raw hexadecima l preshared key (PSK) to use for authenti cating WPA clien ts, in a service profile. Radios use the PSK as a pairwise ma ster key (PMK) to derive unique pairwise session keys for individual WPA clients. Syntax se[...]

334 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name rsn-ie { enable | disable } Defaults The RSN IE is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage When the RSN IE is enabled, the def ault authentication method is 802.1X. There is no default cipher suite. Y ou must enable th[...]

AP Commands 335 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Shared-ke y authentica tion is disabled by defau lt. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage Shared-ke y authentication is supported only for encrypted SSIDs. In addition, if you enable shared-key authenticati on, RSN, WP A, TKI[...]

336 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile soda agent-directory Specifies the directory on the WSS where the SODA agent files for a servic e profile are l ocated. Syntax set service-pr of ile name soda agent-directory dir ectory Defaults By default, the WSS expects SOD A agent f ile s to be located in a directory with the sam[...]

AP Commands 337 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled History Introduced in WSS Software V ersion 4.1. Usage When the SOD A age nt is enabled in a service prof ile, by defa ult the SOD A age nt checks are do wnloaded to a client and run before the c lient is allowed on the network. Y ou can use this comman[...]

338 AP Commands NN47250-1 00 (Versio n 02.51) This functionality occurs only when the enforce checks option is enabled for th e service profile . The enforce checks option is enabled by default. The page is assumed to reside in the root directory on th e WSS. You can optionally specif y a different directory where the page resides. Examples The fol[...]

AP Commands 339 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command specif ies logout.html as the page to load when a cl ient closes the S OD A virtual desktop: WSS# set service-pr of ile sp1 soda logout-page logout.html success: change accepted. The following command specifies logout.html , in the soda[...]

340 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile soda remediation-acl Specifies an ACL to be applied to a client if it fails the ch ecks performed by the SODA agent. Syntax set service-pr of ile name soda rem ediation-acl acl-name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage If the SOD A age[...]

AP Commands 341 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Use this command to sp ecify a custom page th at is loaded by the c lient when it passes the checks performed by the SOD A agent. After this page is loaded, the client is placed in its assigned VLA[...]

342 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command applies the name guest to the SSID managed by service prof ile clear_wlan : WSS# set service-pr of ile clear_wlan ssid-name guest success: change accepted. The following comma nd applies the name corporate users to the SSID managed b y service profile mycorp_srvcprf : WSS[...]

AP Commands 343 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference any ACLs that mark CoS. This option pr ovides a simple way to configure an SSID for priority traffic such as VoIP traffic. When static CoS is enable d, the st andard WSS Soft ware prio ritization mechanism is not used . Instead, the AP sets CoS as follows: • For tra[...]

344 AP Commands NN47250-1 00 (Versio n 02.51) History Introduced in WSS Software V ersion 3.0. Usage Countermeasures apply only to TK IP and WEP clients. This in cludes WP A WEP clien ts and non- WP A WEP clients. CCMP cl ients are not affected. The TKIP cipher su ite must be enabled. The WP A IE also must be enabled. Examples The follo wing comman[...]

AP Commands 345 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults This command has the follo win g default s: • mandatory : ● 11a— 6.0,12.0,24.0 ● 11b— 1.0,2.0 ● 11g— 1.0,2.0,5.5,11.0 • disabled —None. All rates applicable to the radio type are suppo rted by default. • beacon- rate : ● 11a— 6.0 ● 1[...]

346 AP Commands NN47250-1 00 (Versio n 02.51) See Also show service-profile on page 380 set service-profile user-idle-timeout Changes the number of seconds WSS Soft ware will leave a session up for a client that is not sendin g data and is not responding to keepalives (idle- client probe s). If the timer expire s, th e client’s session is changed[...]

AP Commands 347 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set service-pr of ile name web-portal-acl aclname Defaults By default, a service prof ile’ s web-portal-acl option is unset. Ho wev er , when you change the service profile’ s auth-fallthru option to web-portal , WSS Software sets the web- portal-acl option[...]

348 AP Commands NN47250-1 00 (Versio n 02.51) History Usage Nortel recommends that you create a subdirectory for the custom page and place all the page’ s f iles in that subdirectory . Do not place the custom page in the root directory of th e switch’ s user f ile area. If the custom login page includes gif or jpg images, their p ath names are [...]

AP Commands 349 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-profile web-portal-logout Changes the web po rtal logout mode. Syntax set service-pr of ile name web-portal-logout mode {enable | disable} Access Enabled. History Introduced in WSS Software V ersion 6.0. Examples The follo wing command allo ws the web port[...]

350 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name web-portal-session-timeout seconds Defaults The default W eb Portal W eb-base d AAA session timeout is 5 seconds. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage When a client that has connect ed through W eb Portal W eb-based AAA enters standby o[...]

AP Commands 351 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Before using this command, you must configur e values for the WEP k eys you plan to use. Use the set service-prof ile wep key-index command. Examples The follo wing command conf igures service prof ile sp2 to use WEP key 2 for encrypting multicast traf fi c: WSS[...]

352 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile wep key-index Sets the value of o ne of four static Wired-Equiva lent Privacy (WEP) keys for static WEP encryption. Syntax set service-pr of ile name wep key - i nd ex num ke y value Defaults By default, no static WEP ke ys are defined. Access Enabled. History Introduced in WSS Softw[...]

AP Commands 353 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The WP A IE is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage When the WP A IE is enabled, the default authenti catio n method is 802.1X. There is no default cipher suite. Y ou must enable the cipher su ites you w [...]

354 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set ap local-switching mode on page 26 0 • set vlan-prof ile show ap config Displays global and radio-spec ific settings for an AP. Syntax show ap conf ig [ port-list [ radio { 1 | 2 }]] Defaults None. T able 6: Output for sho w ap arp Field Description Host IP address, hos tnam e, or ali[...]

AP Commands 355 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. History Usage WSS Software lists informati on separately for each AP. Examples The follo wing example sho ws conf iguration information for an AP on WSS port 2: WSS # show ap conf ig 2 Port 2: AP model: 2330, POE: enable, bias: high, name: AP02 boot-do[...]

356 AP Commands NN47250-1 00 (Versio n 02.51) T able 7: Output f or show ap conf ig Field Description Port WSS port number . Note: This f ield is applicable only if the AP is directly connected to the WS S and the WSS’ s port is configured as an AP access port. AP Connection ID for the AP. Note: This f ield is applic able only if the AP is conf i[...]

AP Commands 357 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set ap on page 33 • set port type ap o n page 41 • set ap bias on page 249 • set ap f ingerprint on page 257 • set ap gr oup on page 258 • set ap name on page 261 • set ap upgrade-f irmwar e on page 275 • set ap radio mode on page 270 • se[...]

358 AP Commands NN47250-1 00 (Versio n 02.51) • show ap unconf igured on page 374 • show radio-pr of ile on page 376 show ap counters Displays AP and radio statistics counters. Syntax show ap counters [ port-list [ radio { 1 | 2 }]] Defaults None. Access Enabled. History Usage T o display statistics counters and other inform ation for indi vidu[...]

AP Commands 359 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference TKIP Pkt Replays 0 TKIP Decrypt Err 0 CCMP Pkt Decrypt Err 0 CCMP Pkt Replays 0 CCMP Pkt T ransfer Ct 0 RadioResets 0 Radio Recv Phy Er r Ct 0 T ransmit Retries 60501 Radio Adjusted Tx Pwr 15 Noise Floor -93 802.3 Packet Tx Ct 0 80 2.3 Packet Rx Ct 0 No Receive Descri[...]

360 AP Commands NN47250-1 00 (Versio n 02.51) TKIP Pkt Replays N umber of TKIP packets th at were resent to the AP by a client. A lo w value (under ab out one hundred) does not necessarily indicate a problem. Ho wev er , if th is counter is inc reasing steadily or has a very high value (in the hundreds or more), a Denial of Service (DoS) attack mig[...]

AP Commands 361 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference User Sessions Number of clients curre ntly associ ated with the radio. Generally , this counter is equal to the nu mber of sessions listed for the radio in show sessions output. Ho we v er , the counter can dif fer from the counter in show sessions output if a client [...]

362 AP Commands NN47250-1 00 (Versio n 02.51) See Also show sessions network on page 439 show ap dual-home To display connection information fo r APs configured on a WSS, use the show ap global command on one of the switches where the AP is configured. The counters abo ve are global for all data rates. The counters belo w are for indi vidual data r[...]

AP Commands 363 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap fdb Displays the entries in a spec ified AP’s forwarding database. Syntax show ap fdb ap-number Defaults None. Access All. History Introduced in WSS V ersion 6.0. Examples The follo wing command displays FDB entries fo r AP 7: WSS# show ap fdb 7 AP 7: # = Sy[...]

364 AP Commands NN47250-1 00 (Versio n 02.51) show ap qos-stats Displays statis tics fo r AP forwarding queues. Syntax show ap qos-stats [ ap-num ] [ clear ] Syntax show ap qos-stats [ port-list ] [ clear ] Defaults None. Access Enabled. History Usage Repeating this comma nd with the clear option at regular interv als allo ws you to monitor transmi[...]

AP Commands 365 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap etherstats Displays Ethernet statistics for an AP’s Ether net ports. Syntax show ap etherstats [ port-list | ap-num ] Defaults None. Access Enabled. History Introduced in WSS Software V ersion 3.0. O ption dap removed in v ersion 6.0. Examples The follo wing[...]

366 AP Commands NN47250-1 00 (Versio n 02.51) RxShortFrames: 0 TxUnderruns: 0 RxCrcErrors: 0 TxCarrierLoss: 0 RxOverruns: 0 TxDeferred: 150 RxDiscards: 0 AP: 1 ether: 2 ================================= RxUnicast: 64379 T xGoodFrames: 60621 RxMulticast: 21798 TxSingleColl: 32 RxBroadcast: 1 1 TxLateColl: 0 RxGoodFrames: 86188 TxMaxCol l: 0 RxAlignE[...]

AP Commands 367 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap group Deprecated in WSS Software Version 6.0. To display info rmation about RF load balanc ing, see show load-balancing group show ap mesh-links Displays information about th e links an AP has to Mesh APs and Mesh Portal APs. Syntax show ap mesh-links ap-numbe[...]

368 AP Commands NN47250-1 00 (Versio n 02.51) TX: 307 44279 RX: 315 215046 Table 45 on page 358 describes the fields in the show ap mesh-links output. T able 12: Output for sho w ap mesh-links See Also • set ap boot-conf iguration mesh ssid on page 2 54 • set service-pr of ile mesh on page 320 show ap status Displays AP and radio status informa[...]

AP Commands 369 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Examples The follo wing command displays the status of a AP: WSS# show ap status 1 ap: 1, IP-addr: 10.2.3 0.5 (vlan 'vlan-corp '), AP model:2330, manufacturer: Nortel, name: AP01 fingerprint: b4:f9:2a :52:37:58:f4:d0: 1[...]

370 AP Commands NN47250-1 00 (Versio n 02.51) Radio 1 type: 802.1 1g, state: config ure succeed [Enabled] (802.1 1b protect) operational channel: 1 operational power: 14 base mac: 00:0b:0e:00:d2:c0 bssid1: 00:0b:0e:00:d2:c0, ssid: publi c bssid2: 00:0b:0e:00:d2:c2, ssid: emplo yee-n et bssid3: 00:0b:0e:00:d2:c4, ssid: mycorp-tkip Radio 2 type: 802.[...]

AP Commands 371 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference ap100 oa- 10.8.255.1 1 AP-122 00:0b:0e:da:da: 82 E 1/17 E36/1 1 0d 0h 0m17s Table 46 and Table 46 describe the fields in these displays. T able 13: Output f o r show ap status Field Description AP Connection ID for the AP. Note: This f ield is applic able only if the [...]

372 AP Commands NN47250-1 00 (Versio n 02.51) State State of the AP: • init—The AP has been recognized by the WSS but has not yet begu n booting. • booting—The AP has ask ed the WSS for a boot image. • image do wnloading—The AP is receiving a boot image from the WSS. • image downloaded—The AP has received a boot image from the WSS a[...]

AP Commands 373 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Radio 1 type Radio 2 type 802.11 type and conf igurat ion state of the radio. •T h e configur e succeed state indicates that the AP has received configuratio n parameters for the radio and the radio is ready to accept client connectio ns. • 802.1 1b pr otect indic[...]

374 AP Commands NN47250-1 00 (Versio n 02.51) Radio 1 type Radio 2 type (cont.) • Radar Detected indicates that DFS has detected radar on the channel. Wh en this occurs, the AP stops transmitting on the ch annel for 30 minutes. If RF Auto-T uning is enabled for channel assignment, the radio selects another channel and performs the initial channel[...]

AP Commands 375 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap vlan Displays information about the VLANs that are either locally switched by the specified AP or tunneled from the AP to an WSS switch. bssid, ssid S SIDs configu red on the radio and th eir BSSIDs. RFID Reports Statu s of Ae roScout asset tag support. • Ac[...]

376 AP Commands NN47250-1 00 (Versio n 02.51) Syntax show ap vlan ap-number Defaults None. Access All. History Introduced in WSS V ersion 6.0. Examples The follo wing command displays informa tion about the VLANs switched by AP 7: WSS# show ap vlan 7 AP 7: VLAN Name Mode Port T ag -------- -- -- - --------- -- ---- -------- -- --- 1 default local 1[...]

AP Commands 377 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show auto-tun e attributes Displays the current values of the RF attributes RF Auto-Tuning uses to decide whether to change ch annel or power settings. Syntax show auto-tune attributes [ ap ap -num [ radio { 1 | 2 | all }]] Syntax show auto-tune attributes [ ap ap-num[...]

378 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set ap radio auto-tune max-power on page 265 • set radio-prof ile auto-tune channel-conf ig on page 279 • set radio-prof ile auto-tune channel-holddown on page 280 • set radio-prof ile auto-tune channel-interval on page 281 • set radio-prof ile auto-tune po wer -back off-timer on pa[...]

AP Commands 379 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage For simplici ty , this command displays a single entry for each Nortel radio, e v en if the radio is supporting multiple BSSIDs. Howe v er , BSSIDs for third-party 802.11 radios are listed separately , e ven if a radio is supporting more than one BSSID. Informat[...]

380 AP Commands NN47250-1 00 (Versio n 02.51) show ap boot-configuration Displays information about the static IP address conf iguration (if any) on a AP. Syntax show ap boot-conf iguration ap-num Defaults None. Access Enabled. History V ersion 4.1 Command introduced in WSS Software. V ersion 6.0 Option dap removed. Fi eld Mesh added Fi eld Mesh SS[...]

AP Commands 381 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap connection Displays the system IP addre ss of the WSS that booted a AP. Syntax show ap connection [ ap-num | serial-id serial-ID ] Defaults None. Access Enabled. Usage The serial-id parameter displays the activ e connection for the specif ied AP e ven if that [...]

382 AP Commands NN47250-1 00 (Versio n 02.51) If a AP is configured on this WSS (or another WSS in the same Mobility Domain) but does not hav e an acti v e connection, the command does not disp lay in formation for the AP. T o sho w connection information for APs, use the show ap global com mand on one of t he switches where the APs are co nfigured[...]

AP Commands 383 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap global Displays connection information for APs configured on a WSS. Syntax show ap gl obal [ ap-num | serial-id serial-ID ] Defaults None. Access Enabled. Usage Connections are sho wn only for the APs that are configur ed on the WSS from which you enter the co[...]

384 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set ap on page 33 • set ap bias on page 249 • show ap conf ig on page 344 • show ap connection on page 371 • show ap unconf igured on page 374 show ap unconfigured Displays APs that are physically c onnected to the network but that are not configured on any WSSs. Syntax show ap unco[...]

AP Commands 385 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • show ap connection on page 371 • show ap global on page 373 show load-balancing group Displays an RF load balanc ing group’s member radios and current load for each radio. Syntax show load-balancing group { gr oup-name | all | [ ap ap-number radio { 1[...]

386 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command displays information about the AP radios that are in the same group as radio 1 on AP 3: WSS# show load-balancing group ap 3 radio 1 Radios in the same load-bal ancing grou p as: ap3/radio1 -------- --------- -------- --------- -------- ------- - IP address AP Radio Overla[...]

AP Commands 387 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Usage WSS Software contains a def ault radio profile. Nortel recomme nds that you do not change this prof ile but instead keep the prof ile for r eference. Examples The follo wing command shows radi o prof ile information for the[...]

388 AP Commands NN47250-1 00 (Versio n 02.51) T able 23: Output f or show radio-pr of ile Field Description Beacon Interv al Rate (in mil liseconds) at which each AP radio in the profile adverti ses the beaconed SSID. DTIM Interval N umber of times a fter ev ery beacon that each AP radio i n the radio prof ile sends a deliv ery traf f ic indication[...]

AP Commands 389 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set radio-prof ile activ e-scan on page 278 • set radio-prof ile auto-tune channel-conf ig on page 279 • set radio-prof ile auto-tune channel-holddown on page 280 • set radio-prof ile auto-tune channel-interval on page 281 • set radio-prof ile aut[...]

390 AP Commands NN47250-1 00 (Versio n 02.51) • set radio-prof ile mode on page 291 • set radio-prof ile preamb le-length on page 294 • set radio-prof ile qos-mode on page 295 • set radio-prof ile rfid-mode on page 296 • set radio-prof ile rts -threshold on page 297 • set radio-prof ile serv ice-prof ile on page 298 • set radio-prof i[...]

AP Commands 391 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command displays inf ormation for service p rofile sp1 : WSS # show service -prof ile sp1 ssid-name: corp2 ssid-type: crypto Beacon: yes Proxy ARP: no DHCP restrict: no No broadcast: no Short retry limi t: 5 Long ret ry limit: 5 Auth fallthru: [...]

392 AP Commands NN47250-1 00 (Versio n 02.51) Enforce SODA checks: yes SODA remediation ACL: Custom succ ess web-page: Custom failure web-page: Custom logout web-page: Custom agent-directory: Static COS: no COS: 0 CAC mode: none CAC sessions: 14 User idle tim eout: 180 Idle client probing: yes Keep initial vlan: no W eb P ortal Session Timeout: 5 W[...]

AP Commands 393 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference No broadcast Indicate s whether broadcast restric tion is enabled. When this feature is e nabled, WSS Soft ware sends ARP requests and DHCP Of fers and Acks as unicasts to their tar get clie nts instead of forwarding them as broadcasts. Short retry limit Numbe r of ti[...]

394 AP Commands NN47250-1 00 (Versio n 02.51) Custom agent-directory The name of the dire ctory for SOD A agent f iles on t he WSS, if different from the default. By default, SODA agent f iles are stored in a directory with the sa me name as the servic e profile . Static COS Indicates whether stat ic CoS assignment is enable d. When this feature is[...]

AP Commands 395 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WEP Ke y 3 v alue State of static WEP key number 3: • none—The key is not con figured. • preset—The key is configured. WEP Ke y 4 v alue State of static WEP key number 4: • none—The key is not con figured. • preset—The key is configured. WEP Unicast In[...]

396 AP Commands NN47250-1 00 (Versio n 02.51) • set service-pr of ile attr on page 306 • set service-pr of ile auth-dot1x on page 307 • set service-pr of ile auth-fallthru on page 308 • set service-pr of ile auth-psk on page 309 • set service-pr of ile beacon on page 310 • set service-pr of ile cac-mode on page 311 • set service-pr of[...]

AP Commands 397 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set service-pr of ile psk-raw on page 323 • set service-pr of ile rsn-ie on page 323 • set service-pr of ile shared-k ey-auth on page 324 • set service-prof ile shor t-r etry-count on page 325 • set service-pr of ile soda mode on page 329 • set service-p[...]

398 AP Commands NN47250-1 00 (Versio n 02.51)[...]

399 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference STP Commands Use Spanning Tree Protocol ( STP) co mmands to configure and manage sp anning trees o n the virtual LANs (VLANs) configured on a WSS, to ma intain a loop-free network. This ch apter presents STP commands alpha- betically. Use the follo wing table to locate com m ands[...]

400 STP Commands NN47250-1 00 (Versio n 02.51) clear spantree portcost Resets to the default value the cost of a network port or ports on paths to th e STP root bridge in all VLANs on a WSS. Syntax clear spantree portcost port-list Defaults None. Access Enabled. Usage This command resets the co st in all VLANs. T o reset the cost for only specif ic[...]

STP Commands 401 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear spantree portvlanpri on page 391 • set spantr ee portpri on page 397 • set spantr ee portvlanpri on page 39 8 • show spantree on page 400 clear spantree portvlancost Resets to the default value the cost of a network port or ports on paths to [...]

402 STP Commands NN47250-1 00 (Versio n 02.51) Syntax clear spantree portvlanpri port-l ist { all | vlan vlan-id } Defaults None. Access Enabled. Usage WSS Software does not change a port’ s priority for VLANs other than the one(s) you specify . Examples The follo wing command resets the STP priority for port 20 in VLAN avocado : WSS# clear spant[...]

STP Commands 403 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show spantree statistics on page 407 set spantree Enables or disables STP on one VLAN or all VLANs configured on a WSS. Syntax set spantree { enable | disabl e } [{ all | vlan vlan-id | port port-list vlan-id }] Defaults Disabled. Access Enabled. Examples Th[...]

404 STP Commands NN47250-1 00 (Versio n 02.51) Usage If you plan to use the backbone fast con vergence feat ure, you must enable it on all the bridges in the spanning tree. Examples The follo wing command enable s backbone fast con ver gence: WSS# set spantree backbonefast enable success: change accepted. See Also show spantree backbonefast on page[...]

STP Commands 405 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command changes the hello interval for all VLANs to 4 seconds: WSS# set spantree hello 4 all success: change accepted. See Also show spantr ee on page 400 set spantree maxage Changes the maximum age for an STP root bridge hello packet that is [...]

406 STP Commands NN47250-1 00 (Versio n 02.51) Defaults The default port cost depends on the port speed and link type. T able 58 li sts the defaults fo r STP port path c ost. Access Enabled. Usage This command applies only to t he default VLAN (VLAN 1). T o change the cost of a port in another VLAN, use the set spantree portvlancost command. Exampl[...]

STP Commands 407 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults STP port fast con v er gence is disabled by default. Access Enabled. Usage Use port fast con ver gence on ports that are direc tly connected to servers, hosts, or other MA C stations. Examples The follo wing command enables port fast con v ergence on ports 9[...]

408 STP Commands NN47250-1 00 (Versio n 02.51) Syntax set spantree portvlancost port-list cost cost { all | vlan vlan-id } Defaults The default port cost depends on th e port speed and link type. (See T able 58 on page 396 .) Access Enabled. Examples The follo wing command changes the cost on ports 3 and 4 to 20 in VLAN mauve : WSS# set spantr ee p[...]

STP Commands 409 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command sets the priority of ports 3 and 4 to 48 on VLAN mauve : WSS# set spantr ee portvlanpri 3-4 priority 48 vlan mauve success: change accepted. See Also • clear spantree portpri on page 390 • clear spantree portvlanpri on page 391 •[...]

410 STP Commands NN47250-1 00 (Versio n 02.51) Defaults Disabled. Access Enabled. Usage The uplink fast con verge nce feature is applicable to bridge s that are acting as acce ss switches to the network co re (distrib ution layer) but ar e not in the core t hemselv es. Do not en able the feature on WSSs that are in the network core. Examples The fo[...]

STP Commands 41 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Bridge Max Age 20 sec Hello T ime 2 sec Forward Delay 15 sec[...]

412 STP Commands NN47250-1 00 (Versio n 02.51) Port V lan STP -State Cost Prio Po rtfast ---------------------------- ------------------------------------------- ------- 1 1 Forwarding 19 128 Dis abled 2 1 STP Off 19 128 Disabled 3 1 Disabled 19 128 Disabled 4 1 Disabled 19 128 Disabled 5 1 Disabled 19 128 Disabled 6 1 Disabled 19 128 Disabled 7 1 [...]

STP Commands 413 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show spantree blockedports on page 404 show spantree backbonefast Indicates whether the STP backbone fast conv ergence fe ature is enabled or disabled. Syntax show spantr ee backbonefast Defaults None. STP-State or Port-State STP state of the port: • Block[...]

414 STP Commands NN47250-1 00 (Versio n 02.51) Access All. Examples The follo wing e xample sho ws the comm an d output on a WSS with backb one fast con ver gence enabled: WSS# show spantree ba ckbone fast Backbonefast is enabled See Also set spantree backbonefast on page 393 show spantree blockedports Lists information about WSS ports that ST P ha[...]

STP Commands 415 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show spantr ee on page 400 show spantree portfast Displays STP uplink fast convergenc e information for all network ports or for one or more network ports. Syntax show spantr ee portfast [ port -list ] Defaults None. Access All. Examples The follo wing comma[...]

416 STP Commands NN47250-1 00 (Versio n 02.51) See Also set spantree portfast on page 396 show spantree portvlancost Displays the cost of a port on a path to the ST P root bridge, for each of the port’s VLANs. Syntax show spantr ee portvlancost port-list Defaults None. Access All. Examples The follo wing command sho ws the STP port cost of port 1[...]

STP Commands 417 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show spantree statistics Displays STP statistics f or on e or more WSS network ports. Syntax show spantr ee statistics [ port-list [ vlan vlan-id ]] Defaults None. Access All. Usage The command displays statistic s separately for e ach port. Examples The follo wing c[...]

418 STP Commands NN47250-1 00 (Versio n 02.51) scp failure count 0 root inc trans count (port/VLA N) 1 (1) inhibit loopguard F ALSE loop inc trans count 0 (0) St atus of Port T imers forward delay timer INACTIVE forward delay timer value 15 message age timer ACTIVE message age timer value 0 topology change timer INACTIVE topology change timer value[...]

STP Commands 419 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference next state 0 src MAC count 21807 total src MAC count 21825 curr_src_mac 00-0b-0e-00-04-30 next_src_mac 00-0b-0e-02-76-f6 Table 61 describes the fields in this display. T able 4: Output for sho w spantr ee statistics Field Descript ion Port Port number . VLAN VLAN ID.[...]

420 STP Commands NN47250-1 00 (Versio n 02.51) designated cost T otal path cost to reach the root bridge. designated_bridge Bridge to which this switch forwards t raf fic aw ay from the root bridge. designated_port STP port through which this switch forwar ds traff ic away from the root bridge. top_change_ack V alue of the topology ch ange ackno wl[...]

STP Commands 421 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference hold timer Status of th e hold timer . Th is timer ensure s that conf igured BPDUs are not transmitted too frequ ently through any bridge port. hold timer value Current value of the hold timer , in seconds. delay root port timer Status of the dela y root port timer ,[...]

422 STP Commands NN47250-1 00 (Versio n 02.51) See Also clear spantree statistics on page 392 show spantree uplinkfast Displays uplink fast convergence inf o rmation for one VLAN or all VLANs. Syntax show spantr ee uplinkfast [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command shows uplink fast con vergence information for a[...]

STP Commands 423 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set spantr ee uplinkfast on page 399[...]

424 STP Commands NN47250-1 00 (Versio n 02.51)[...]

425 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference IGMP Snooping Commands Use Internet Group Management Protoc ol (IGMP) snooping commands to conf igure and manage multicast traffic reduction on a WSS. This chapter presents IGMP snooping commands alphabetically. Use the fo llowing t able to locate commands in this chapter based o[...]

426 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command clears IGMP stat istics for all VLANs: WSS# clear igmp statistics IGMP statistics cleared for all vlans See Also show igmp s tatistics on page 43 1 set igmp Disables or reenables IGMP snoopi ng on one VLAN or all VLANs on a WSS. Syntax set igmp { enable | disa[...]

IGMP Snooping Comm ands 427 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The following co mmand changes the last member query interval on VLAN or ange to 5 tenths of a second: WSS# set igmp lmqi 5 vlan orange success: change accepted. See Also • set igmp oqi on page 418 • set igmp qi on page 420 • set igmp mro ut[...]

428 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Syntax set igmp mrsol { enable | disable } [ vla n vlan-id ] Defaults Multicast router solic itation is disabled on all VLANs by default. Access Enabled. Examples The follo wing command enables mul ticast router solicitation on VLAN or ange : WSS# set igmp mrsol enable vlan orange success: c[...]

IGMP Snooping Comm ands 429 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set igmp oqi seconds [ vlan vlan-id ] Defaults The default other -querier -present in terval is 255 seconds (4.25 minutes). Access Enabled. Usage A WSS cannot become the querier unless the pseudo-querier feature is enabled on the switch. When the fe[...]

430 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Usage Proxy reporting reduces multicast ov erhead by sendi ng only one membership report for a group to the multicast routers and discardi ng other membership reports for the same group. If you disable proxy reporting, the WSS sends all membership reports to the routers, including multiple r[...]

IGMP Snooping Comm ands 431 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set igmp qri tenth-seconds [ vlan vlan-id ] Defaults The default query response interv al is 100 tenths of a second (10 seconds). Access Enabled. Usage The query response interval is applicable only when the WSS is querier for the subnet. For the sw[...]

432 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing example en ables the pseudo-querier on the orange VLAN: WSS# set igmp querier enable vlan orange success: change accepted. See Also show igmp querier o n page 427 set igmp receiver Adds or removes a network port in the li st of ports on which a WSS forwards traffic to[...]

IGMP Snooping Comm ands 433 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The default rob ustness v alue for all VLANs is 2. Access Enabled. Examples The follo wing e xample changes th e robustne ss v alue on VLAN orang e to 4: WSS# set igmp r v 4 vlan orang e success: change accepted. See Also • set igmp oqi on page [...]

434 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Port Querier-IP Querier-MAC TTL ---- ----- -- -------- - ------- -- ------- -- --- 1 193.122.135.1 78 00: 0b:cc:d2:e9:b 4 23 IGMP vlan mem ber ports: 10, 12 , 11, 14, 16, 15, 13, 18, 17, 1, 20, 21, 2, 22, 19, 4, 6, 5, 3, 8, 7, 9 IGMP static ports: none IGMP statistics for vlan orange: IGMP m[...]

IGMP Snooping Comm ands 435 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Multicast router information Lis t of multicast router s and activ e multicast groups. The fields containing this information ar e described separately . The show igmp mrouter command sho ws the same in formation. Port Number of the physical port through w[...]

436 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) See Also • show igmp mrouter on page 426 • show igmp querier on page 427 • show igmp r eceiver -ta ble on page 429 • show igmp statistics on page 431 show igmp mrouter Displays the multicast routers in a WSS’ s subnet, on one VLAN or al l VLANs. Routers are list ed separately for e[...]

IGMP Snooping Comm ands 437 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set igmp mro uter on page 417 • show igmp mrouter on page 426 show igmp querier Displays information about th e active multicas t querier, on one VLAN or all VLANs. Qu eriers are listed sep arately for each VLAN. Each VLAN can have only one [...]

438 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command displays querier information for VLAN or ange : WSS# show igmp querier vlan orange Querier for vlan orange[...]

IGMP Snooping Comm ands 439 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Port Querier -IP Querier-MAC TTL ---- ----- -- -------- - ------- -- ------- -- --------- ------ - 1 193.122.135.178 00:0b:cc:d2:e9:b4 23 The following command shows the information WSS Softwa re displays when t he querier is the WSS itse lf: WSS# show igm[...]

440 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Syntax show igmp recei ver -table [ vlan vlan-id ] [ group gr oup-ip-addr / mask-length ] Defaults None. Access All. Examples The follo wing command displa ys all multicast recei v ers in VLAN or ange : WSS# show igmp r eceiv er -table vlan orange VLAN: orange Session Port Receiver -IP Recei[...]

IGMP Snooping Comm ands 441 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set igmp r eceiver on page 422 show igmp statistics Displays IGMP statistics. Syntax show igmp statistics [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command displays IGMP statistics for VLAN orange : WSS# show igmp statist[...]

442 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) DVMRP 4 4 0 PIM V1 0 0 0 PIM V2 0 0 0 T opology notifi cation s: 0 Packets with unknown IG MP ty pe: 0 Packets with bad length: 0 Packets with bad checksum: 0 Packets dropped: 4 Table 67 describes the fields in this display. T able 5: Output f or show igmp statistics Field Description IGMP s[...]

IGMP Snooping Comm ands 443 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also clear igmp statistics on page 415 IGMP message type T ype of IGMP message, continued: • Mrouter-T erm—Multicast router termination messages. A multicast router sends this type of message when multicast fo rwarding is disabled on the router int[...]

444 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51)[...]

445 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Session Mana g ement Commands Use session management commands to di splay and clear administ rativ e and network user sessions. This cha pter presents session management co mmands alphabetic ally. Use the fol lowing table to lo cate commands in this chapter based on their use. cl[...]

446 Session Management Commands NN47250-1 00 (Versio n 02.51) To clear Te lnet client session 0, type the f ollowing command: WSS# clear sessions telnet client 0 See Also show sessions on page 437 clear sessions network Clears all network sessions for a specified username or set of usernames, MAC address or set of MAC addresses, virtual LAN (VLAN) [...]

Session Manage ment Commands 447 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference To clear the sessio n of user Natasha , type the following command: 23x0# clear sessions network user Natas ha To clear the sessions of us ers whos e name begins with the c haracters Jo , type the following command: 23x0# clear sessions network user J[...]

448 Session Management Commands NN47250-1 00 (Versio n 02.51) To view information about console users’ sessions, type the following command: WSS> show sessions console Tty Username T ime (s) ------- ------- --------- ---- ------ -- console 8573 1 console session To view information abo ut Telnet us ers sessions, type the following command : WS[...]

Session Manage ment Commands 449 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also clear sessions on page 435 show sessions network Displays summary or verbose information about all netwo rk sessions, or network sessions fo r a specified username or set of usernames, MAC address or set of MAC a ddresses, VLAN or set of VLAN[...]

450 Session Management Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access All. History Usage WSS Software displays informat ion about network sessions in th ree types of displays. See the follo wing tables for field descriptions. Authorization attribu te values ca n be changed during authorizati on. If the values are changed, show session[...]

Session Manage ment Commands 451 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS > show sessions network User Ses s IP or MAC VL AN Port/ Name ID Address Na me Radi o ---------------------------- -- ---- ----------------- - -------------- ----- EXAMPLENatasha 4* 10.10.40.17 vlan-eng 3/1 host/laptop1 1.exmpl.com 6* 10.10.40[...]

452 Session Management Commands NN47250-1 00 (Versio n 02.51) The following command displays in formation about network session 88: WSS# show sessions netw ork session-id 88 Local Id: 88 Global Id: SESS-88-00040f-876 766-623fd6 S tate: ACTIVE SSID: Rack-39-PM Port/Radio: 10/1 MAC Address: 00:0f:66:f4:71:6d User Name: last-resort-Rack-39-PM IP Addre[...]

Session Manage ment Commands 453 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference IP or MA C Address IP address of the session user , or the user’ s MA C address if the user has not yet receiv ed an IP address. VLAN Name Name of the VLAN a ssociated with the session. Port/Radio Number of the port and r adio through which the user[...]

454 Session Management Commands NN47250-1 00 (Versio n 02.51) no w on Sho ws the follo wing information about the AP and radio the session is currently on: • IP address and port number o f the WSS managing the AP • Serial number and radio number of the AP • Amount of time the session has been on this AP from Shows information ab out the APs f[...]

Session Manage ment Commands 455 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference T able 5: show sessions network session-id Output Field Description Local Id Identifier for the session on this part icular switch. (This is the session ID you specify when entering the show sessions network session-i d command.) Global Id Unique sess[...]

456 Session Management Commands NN47250-1 00 (Versio n 02.51) T ag System-wide suppor ted VLAN tag type. Session Start Indica tes when the session started. Last Auth T ime Indicate s when the most recent authenticati on of the session occurred. Last Acti vity Indicates when t he last acti vity (transmission) occurred on the session. Session T imeou[...]

Session Manage ment Commands 457 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also clear sessions ne twork on page 436[...]

458 Session Management Commands NN47250-1 00 (Versio n 02.51)[...]

459 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Security A CL Commands Use security ACL commands to configure and monitor security access control lists (ACLs). Securi ty ACLs filter packets to restrict or permit network usage by cert ain users or traffic types, and can assign to packe ts a class of service (CoS) to define the [...]

460 Security ACL Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. Usage This command deletes secur ity A CLs only in the edit b uffer . Y ou must use the c ommit securi ty acl command with this command to de lete the A CL or A CE from the running configuration and non v olatile storage. The clear security ac l command deletes a[...]

Security ACL Commands 461 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear security acl map Deletes the mapping between a se curity ACL an d a virtual LAN (VLAN), one or more physical ports, or a virtual port. Or deletes all ACL maps to VLAN s, ports, and vir tual ports on a WSS. Syntax clear security acl map { acl-nam e | al[...]

462 Security ACL Commands NN47250-1 00 (Versio n 02.51) To clear all physic al ports, virtual ports, and VLANs on a WSS of the ACLs mapped for incoming and outgoing traffic, type the followi ng command: WSS# clear security acl map all success: change accepted. See Also • clear security acl on page 449 • set security acl map on page 459 • show[...]

Security ACL Commands 463 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear security acl on page 449 • rollback security acl on page 453 • set security acl on page 454 • show security acl on page 461 • show security acl inf o on page 463 hit-sample-rate This command has been renamed in WSS Software Version[...]

464 Security ACL Commands NN47250-1 00 (Versio n 02.51) set security acl In the edit bu ffer, creates a sec urity access control list (ACL ), adds one access control en try (ACE) to a security ACL, and/or reorders ACEs in the ACL. The AC Es in an ACL filter IP pack ets by source IP address, a Laye r 4 protocol, or IP, ICMP, TCP, or UDP packet infor[...]

Security ACL Commands 465 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference By UDP packets set security acl ip acl-name { permit [ cos cos ] | deny } udp { sour ce-ip-ad dr mask | any [ operator port [ port2 ]]} { destination-ip-addr mask | any [ oper ator port [ port2 ]]} [[ precedence pr ece dence ][ tos tos ] | [ dscp codepoint ][...]

466 Security ACL Commands NN47250-1 00 (Versio n 02.51) pr otocol IP protocol by wh ich to filter pack ets: •i p •t c p •u d p •i c m p • A protocol num ber between 0 and 255. (For a complete list of IP protocol names and numbers, see www .iana.org/assignments/protocol-numbers .) sour ce-ip-addr mask | any IP address and wildcard mask of [...]

Security ACL Commands 467 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults By default, permitted packets are clas sified ba sed on DSCP value, wh ich is con v erted into an internal CoS v alue in the switc h’ s CoS map. The packe t is then marked with a DSCP v alue base d on the internal CoS value. If the A CE contains t[...]

468 Security ACL Commands NN47250-1 00 (Versio n 02.51) History Usage The WSS does not apply security A CLs until you acti v ate them with the commit security acl command and map them to a VLAN, port, or virtual port, or to a user . If the WSS is reset or restar ted, any A CLs in the edi t buf fer are los t. You cannot perform ACL functions that in[...]

Security ACL Commands 469 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set security acl map Assigns a committed security ACL to a VLAN, physical port or ports, vi rtual port, or AP on the WSS. Syntax set security acl map acl-name { vlan vlan-id | port port-list [ tag tag-l ist ] | ap ap-num } { in | out } Defaults None. Access [...]

470 Security ACL Commands NN47250-1 00 (Versio n 02.51) • commit security acl on page 452 • set mac-user attr on pa ge 197 • set mac-usergr oup attr on page 203 • set security acl on page 454 • set user attr on page 207 • set usergr oup on page 208 • show security acl map on page 464 set security acl hit-sample-rate Specifies the time[...]

Security ACL Commands 471 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS# show security acl hits ACL hit counters Index Counter ACL-name ----- ---- -- --------- ----- -- -- ------- 1 0 acl_2 2 0 acl_175 3 916 acl_153 See Also • show security acl hits on page 462 • show security acl inf o on page 463 show security acl Disp[...]

472 Security ACL Commands NN47250-1 00 (Versio n 02.51) show security acl editbuffer Displays a summ ary of the securit y ACLs that ha ve not yet be en committe d to the configuration. Syntax show security acl [ inf o all ] editbuffer Defaults None. Access Enabled. Examples T o vie w a summary of the sec urity A CLs in the edit buf fer , type the f[...]

Security ACL Commands 473 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax show security acl hits Defaults None. Access Enabled. Usage For WSS Softw are to count hits for a security A CL, you must specify hits in the set security acl commands that def ine A CE rules for the A CL. Examples T o display the security A CL hits o[...]

474 Security ACL Commands NN47250-1 00 (Versio n 02.51) set security acl ip acl_123 (hits #5 462) -------- --------- -------- --------- -------- ------- -------- 1. permit IP source IP 192.168.1.11 0. 0.0.255 destination IP any enable-hits 2. deny IP source IP 192.168.2.11 0.0.0.0 destination IP any set security acl ip acl_134 (hits #3 0) -------- [...]

Security ACL Commands 475 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear security acl map on page 451 • set security acl map on page 459 • show security acl on page 461 show security acl resource-usage Displays statis tics about the resources used by secur ity ACL filte ring on the WS S. Syntax show securit[...]

476 Security ACL Commands NN47250-1 00 (Versio n 02.51) L4 global : T rue No rules : False Non-IP rules : False Root in first : T rue S tatic default action : False No per-user (MAC) mapping : T rue Out mapping : False In mapping : T rue No VLAN or POR T mapp ing : False No VPOR T mapping : T r ue Table 73 explains the fields in the show security a[...]

Security ACL Commands 477 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Port number Control value for handl ing fragmented IP pa ckets. Note: The current WSS Software version filters only the first packet of a fragmented IP packet a nd passes the remaining fragments. Number of action types Number of actions that ca n be performe[...]

478 Security ACL Commands NN47250-1 00 (Versio n 02.51) In mapping Application of security A CLs to incoming traf fic on the WSS: • T rue—Security ACLs are ma pped to incoming traffic. • False—No security ACLs ar e mapped to incoming traf fic. No VLAN or POR T mapping Application of se curity A CLs to WSS VLANs or ports on the WSS: • T ru[...]

479 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Cr yptograph y Commands A digital certificate is a form of el ectronic identifica tion for computers. The WSS requires digit al certificates to authen- ticate its communica tions to WLAN Management Software a nd Web View, to Web-base d AAA clients, and to Extensible Authenticatio[...]

480 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) crypto ca-certificate Installs a certificat e authority’s own PKCS #7 certi ficate into t he WSS cert ificate and ke y storage area. Syntax crypto ca-certif icate { admin | eap | web } PEM-formatted-certificate Defaults None. Access Enabled. History Usage The Priv ac y-Enhanced Mail protoc [...]

Cryptography Command s 481 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference mzerMClaweVQQTT ooewiwpoer0Q WNFNkj9004 4mbdrl1277SWQ8G7DiwYUtrq oQplKJvxz ..... Lm8wmVYxP56M;CUAm90 8C2foYgOY40= -----END CER TIFICA TE---- - See Also show crypto ca-certificate on page 479 crypto certificate Installs one of the WSS’s P KCS #7 certifica[...]

482 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) -----BEGIN CE R TIF ICA TE--- -- MIIBdTCP3wIBADA2MQswCQYDVQQGEwJVUzELMA kGA1UECBMCQOExGjA YBgNVB AMU EXR1Y2hwdWJzQHR ycHouY29tMIGfMAOGCSqGSIb3DQ EBAQAA4GNADCBiQKBgQC4 ..... 2L8Q9tk+G2As84QYLm8wm VY>xP56M;CUAm908C2foY gOY40= -----END CER TIFICA TE---- - See Also • crypto generate r equest[...]

Cryptography Command s 483 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SSH requires an SSH authentication key, but you can a llow WSS Software to gene rate it automatically. The first time an SSH clie nt attempts to ac cess the SSH server on a WSS, the switch automati cally generates a 1024-byte SSH key. If you want to us e a [...]

484 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage T o use this command, you must already ha ve generated a public-pri va te encryption ke y pair with the crypto generate key command. Enter crypto generate r equest admin , crypto generate request eap , or cr ypto generate request web and press Ente[...]

Cryptography Command s 485 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference -----END CER TIFICA TE REQ U E ST ----- See Also • crypto certif icate on page 471 • crypto generate key on page 472 crypto generate self-signed Generates a self-si gned certificate for ei ther an administra ti ve certificate f or use with WLAN Manageme[...]

486 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage T o use this command, you must already hav e generated a public-priv ate encryption ke y pair with the crypto ge nerate k ey command. Examples T o generate a self- signed administrat i ve certif icate, type the follo wing command: WSS# crypto gener[...]

Cryptography Command s 487 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Usage The password allo ws the public-pri v ate ke y pair and certif icate to be installed tog ether from the same PKCS #12 object file. WSS Softwa re erases the one-time passw ord after processing th e crypto pkcs12 c[...]

488 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) Defaults The password you enter with the crypto otp command must be the sam e as the one protecting the PKCS #12 file. Access Enabled. History Usage T o use this command, you must have already created a one-time password with the crypto otp command. You must also have the PKCS #12 object file[...]

Cryptography Command s 489 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show crypto ca-certificate Displays information about th e certificate author ity’s PEM-encoded PKCS #7 certificate. Syntax show crypto ca-certif icate { admin | eap | web } Defaults None. Access Enabled. History Examples T o display information about the[...]

490 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) • show crypto certif icate on page 480 show crypto certificate Displays information about one of the crypt ographic certificates installed on the WSS. Syntax show crypto certif icate { admin | eap | web } Defaults None. Access Enabled. History Usage Y ou must hav e generated a self- signed [...]

Cryptography Command s 491 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • crypto generate se lf-signed on page 475 • show crypto ca-certif icate on page 479 show crypto key domain Displays the checksum (also called a f ingerprin t ) of the public key used to authen ticate management traffic between WSSs. Syntax sho[...]

492 Cryptography Co mmands NN47250-1 00 (Versio n 02.51)[...]

493 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference RADIUS and Ser ver Gr oups Commands Use RADIUS commands to set up communi cation between a WSS and groups of up to four RADIUS servers for remote authentication, authoriz ation, and accounting (A AA) of administrators and networ k users. This chapter presents RADIUS commands alph[...]

494 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) Defaults Global RADIUS parameters have the follo wing default v alues: • deadtime —0 (zero) minutes (The WSS does not designat e unresponsi v e RADIUS serv ers as unav ailable.) • key —No key • ret r an sm i t —3 (the total number of attempts, including the first at te[...]

RADIUS and Server Groups Commands 495 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o clear the s ystem IP addres s as the perm anent source address for RADIUS client requests, type the following command: WSS# clear radius cl ient system-ip success: change accepted. See Also • set ra dius clien t system-ip on page 4[...]

496 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) clear radius server Removes the named RADIUS serv er from the WSS configuration. Syntax clear radius server ser ver-name Defaults None. Access Enabled. History Introduced in WSS Software 1.0. Examples The follo wing command removes the RADIUS serv er rs4 2 from a list of remote AA[...]

RADIUS and Server Groups Commands 497 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set server group on page 492 set radius Configures global defaults for RADIUS se rvers that do not explicitly set these va lues themselve s. By defaul t, the WSS automatically sets all th ese values exce pt the password (key). Syntax set[...]

498 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) History Usage Y ou can specify only one pa rameter per command line. Examples The follo wing commands sets the dead time to 5 minutes, the RADIUS key to goody , the number of retransmissions to 1, and the timeout to 21 se conds on all RADIUS server s connected to the WSS: 23x0# se[...]

RADIUS and Server Groups Commands 499 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radius proxy client Adds a RADIUS proxy entry for a third-party AP. The proxy entr y specifies the IP address of the AP and the UDP ports on which the WSS listens for RADIUS traffic from the AP. Syntax set radius pr oxy client addr ess ip-add[...]

500 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Usage AAA for third-party AP users has additional conf igurati on requirements. See the “Configuring AAA for Users of Third-P arty APs” section in the “C onf iguring AAA for Network Users” chapter of th[...]

RADIUS and Server Groups Commands 501 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Default val ues are listed be low: • auth-port —UDP port 1812 • acct-port —UDP port 1813 • timeout —5 seconds • ret r an sm i t —3 (the total number of attempts, including the first at tempt) • deadtime —0 (zero) minu[...]

502 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) Examples T o set a RADIUS server named RS4 2 with IP address 198.162.1.1 to use the def ault accounting and authorization ports with a timeout interv al of 30 seconds, two tran smit attempts, 5 minutes of dead time, a ke y string of ke ys4u , and the default authorization password[...]

RADIUS and Server Groups Commands 503 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear server gr oup on page 486 • set serv er group load-balance on page 493 • show aaa on page 210 set server group load-balance Enables or disables load balancing among the RADIUS servers in a server group. Syntax set server gr[...]

504 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51)[...]

505 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference 802.1X Mana g ement Commands Use 802. IEEE X manage ment commands to modify the default se ttings for IEEE 802.1X sessions on a WSS. For best results, change the setti ngs only if you are aware of a problem with the WSS’s 802.1X performance. This chapter presents 802.1X command[...]

506 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) clear dot1x bonded-period Resets the Bonded Auth period to its default value. Syntax clear dot1x max-req Defaults The default bonded authentica tio n period is 0 seconds. Access Enabled. History Introduced in WSS Software V ersion 2.1. Usage Examples T o reset the Bonded period to its de[...]

802.1X Mana gement Command s 507 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear dot1x port-control Resets all wired authentication ports on the WSS to default 802.1X authentication. Syntax clear dot1x port-control Defaults By default, all wired auth entication ports are set to auto and they process authentication req uests [...]

508 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) Access Enabled. History Introduced in WSS Software 1.0. Examples T ype the followi ng command to reset the maxi mu m number of reauthorizat ion attempts to the default: WSS# clear dot1x r eauth-max success: change accepted. See Also • set dot1x r eauth-max on page 504 • show dot1x on[...]

802.1X Mana gement Command s 509 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set dot1x timeout auth-server on page 505 • show dot1x on page 507 clear dot1x timeout supplicant Resets to the default setting the number of seconds th at must elapse before the WSS times out an authentica- tion session with a su pplic[...]

510 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) set dot1x authcontro l Provides a global override mechanism for 802.1X authen tication config urat ion on wired authentication ports. Syntax set dot1x authcon trol { enable | disabl e } Defaults By defa ult, authentica tion control for i ndi vidual wired authentication i s enabled. Acces[...]

802.1X Manag ement Com mands 51 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Nortel recommends that you try 60 seconds, and change the period to a longer value only if clients are unable to authen- ticate within 60 seconds. The bonded authentication period ap plies only to 802.1X authenti cation rules that contain the bonded [...]

512 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) History Introduced in WSS Software 1.0. Usage T o support SSIDs that ha ve both 802.1X and static WEP clients, WSS Softwa re sends a maximum of two ID requests, e v en if this parameter is set to a higher v alue. Setting the para meter to a higher value does af fect all other types of EA[...]

802.1X Mana gement Command s 513 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set dot1x quiet-period Sets the number of seconds a WSS remains quiet and does not respond to a supplicant after a failed authentica tion. Syntax set dot1x quiet-period seconds Defaults The default is 60 seconds. Access Enabled. History Introduced in [...]

514 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) set dot1x reauth-max Sets the number of reauth entication attem pts that the WSS makes before the su pplicant (c lient) b ecomes unauthorized. Syntax set dot1x reauth-max number-of-attempts Defaults The defau lt number of reauthenticat ion attempts is 2. Access Enabled. History Introduce[...]

802.1X Mana gement Command s 515 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear dot1x r eauth-period on page 498 • show dot1x on page 507 set dot1x timeout auth-server Sets the number of seconds that must elapse before the WSS times out a reque st to a RADIUS authentication server. Syntax set dot1x timeout au[...]

516 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) See Also • clear dot1x timeout auth-server on page 498 • show dot1x on page 507 set dot1x tx-period Sets the number of seconds that must elapse before the WSS retransmits an EAPoL packet. Syntax set dot1x tx-peri od seconds Defaults The default is 5 seconds. Access Enabled. History I[...]

802.1X Mana gement Command s 517 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Reauthentication is not required for WEP k ey rotation to take place. Broadcast and multicast keys are alw ays rotated at th e same time, so all member s of a gi ven radio, VLAN, or encryption type recei ve the ne w ke ys at the same time. Examp[...]

518 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) Access Enabled. Examples T ype the follo wing command to display the 802.1X clients: WSS # show dot1x clie nts MAC Address State Vlan Ident ity ------------- ------- ------ ---------- 00:20:a6:48:01:1f Connecting (unknown) 00:05:3c:07:6d:7c Authenticated vlan-it EXAMPLEjose 00:05:5d:7e:[...]

802.1X Mana gement Command s 519 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference port 10, authcontrol: auto, max-sessions: 1 port 1 1, auth control: auto, max-sessions: 1 port 12, authcontrol: auto, max-sessions: 1 port 13, authcontrol: auto, max-sessions: 1 port 14, authcontrol: auto, max-sessions: 1 port 15, authcontrol: auto, m[...]

520 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) Reauths While Aut henticating Numbe r of times that the WSS stat e wildcard transitions from A UTHENTICA TING to ABOR TIN G, as a result of a reauthenticat ion request (reAuthentic ate = TR UE). Starts While Authentica ting Number of times th at the WSS state wild card transiti ons from [...]

521 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference RF Detection Commands WSS Software automatically performs RF detection scans on enabled and di sabled radios to detect rogue access points. A rogue access point is a BSSID (MAC address associat ed with an SSID) that does not belong to a Nortel devi ce and is not a membe r of the [...]

522 RF Detection Commands NN47250-1 00 (Versio n 02.51) clear rfdetect attack-list Removes a MAC address from the attac k list. Syntax clear rfdetect attack-list mac-addr Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command clears MA C addre ss 11:22:33:44:55:66 from the attack list: WSS# c[...]

RF Detection Commands 523 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear rfdetect ignore Removes a device from the ignore list fo r RF scans. WSS Software does not ge nerate log messages or traps for the devices in the ignore list . Syntax clear rfdetect ignore mac-addr Defaults None. Access Enabled. History Introduced in W[...]

524 RF Detection Commands NN47250-1 00 (Versio n 02.51) clear rfdetect vendor-list Removes an entry from th e permitted vendor list. Syntax clear rfdetect v endor -list { client | ap } mac-addr | all Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command removes client OU I aa:bb:cc:00:00:0 0[...]

RF Detection Commands 525 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command adds MA C address aa:bb:cc:44:55:6 6 to the at tack list: WSS# set rfdetect atta ck-list 1 1:22:33:44:55:66 success: MAC 1 1:22:33:44:55:66 is now in attacklist. See Also • clear rfdetect attack-list on page 512 • show rfd[...]

526 RF Detection Commands NN47250-1 00 (Versio n 02.51) Defaults WSS Software reports all non-Nortel B SSIDs detected during an RF scan. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage Use this command to identify third-part y AP s and other de vices you are already a ware of and do not want WSS Software to report fo llo wing[...]

RF Detection Commands 527 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show log buffer on p age 579 set rfdetect signature Enables AP signatures. An AP signature is a set of bits in a management frame sent by an AP that identifies that AP to WSS Software. If someone attempts to spoof management packet s from a Nortel A[...]

528 RF Detection Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage The permitted SSID list applies only to the WSS on which the list is configured. WSSs do not share permitted SSID lists. If you add a device that WSS Software has classified as a rogue to the permitted SSID list, but not to[...]

RF Detection Commands 529 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear rfdetect vendor-list on page 514 • show rfdetect vendor -list on page 531 show rfdetect attack-list Displays information about the MA C addresses in the attack list. Syntax show rfdetect attack-list Defaults None. Access Enabled. History[...]

530 RF Detection Commands NN47250-1 00 (Versio n 02.51) • set rfdetect black-list on pag e 515 show rfdetect clients Displays the wi reless cl ients detected by a WSS. Syntax show rfdetect clients [ mac mac-addr ] Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The following co mmand sho ws information abo[...]

RF Detection Commands 531 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference AP V endo r Company that manufactures or sells the AP with which the rogue client is associ ated. Port/Radio/Channel Port number , radio number, and channel number of the radio that detected the rogue. F or a AP, th e connection numbe r is labeled ap . (This[...]

532 RF Detection Commands NN47250-1 00 (Versio n 02.51) show rfdetect countermeasures Displays the current status of countermeas ur es against rogues in the Mobility Domain. Syntax show rfdetect countermeasur es Defaults None. Access Enabled. History Usage This command is v alid only on the se ed switch of the Mobility Doma in. Examples The follo w[...]

RF Detection Commands 533 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set radio-profile countermeasur es on page 287 show rfdetect counters Displays statistics for rogue and Intrusion Detection System (IDS) activity detected by th e APs managed by a WSS. Syntax show rfdetect counters Defaults None. Access Enabled. His[...]

534 RF Detection Commands NN47250-1 00 (Versio n 02.51) 802.1 1 probe request fl ood 0 0 802.1 1 authentication flood 0 0 802.1 1 null data flood 0 0 802.1 1 mgmt type 6 flood 0 0 802.1 1 mgmt type 7 flood 0 0 802.1 1 mgmt type d flood 0 0 802.1 1 mgmt type e fl ood 0 0 802.1 1 mgmt type f flood 0 0 802.1 1 association flood 0 0 802.1 1 reassociati[...]

RF Detection Commands 535 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS # show rfdetect data T otal number of entries: 197 Flags: i = infrastructure, a = ad-hoc c = CCMP , t = TKIP , 1 = 104-bit WEP , 4 = 40-bit WEP , w = WEP(non-WP A) BSSID V endor T ype P ort/Radio/Ch Flag s RSSI Age SSID ----------------- ------- ----- --[...]

536 RF Detection Commands NN47250-1 00 (Versio n 02.51) See Also • show rfdetect mobili ty-do main on pag e 526 • show rfdetect vi sible on page 531 show rfdetect ignore Displays the BSSIDs of third-party devices that WSS Softwa re ignores during RF sc ans. WSS Software does not generate log messag es or traps for the devices in the ignore list[...]

RF Detection Commands 537 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage This command is v alid only on the seed switch of the Mobility Doma in. T o disp lay rogue information for an indi vidual switch, use the sho w rfdetect data command on that switch. Examples The follo wing command displays summary information f[...]

538 RF Detection Commands NN47250-1 00 (Versio n 02.51) Device-type: interfering Adhoc: no Crypto-t ypes: clear RSSI: -76 SSID : nr tl -webaaa Two types of information are s hown. The lines that are not indented show the BSSID, vendor, and information about the SSID. The indented lines that follow thi s information indicate the list eners (AP radio[...]

RF Detection Commands 539 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SSID SSID us ed by the detecte d device. T able 6: show rfdetect mobilit y-domain ssid or bssid Output Field Description BSSID MA C address of the SSID used by the detected de vice. V endor Company that manufactures or sells the rogue de vice. SSID SSID us e[...]

540 RF Detection Commands NN47250-1 00 (Versio n 02.51) See Also • show rfdetect data on page 524 • show rfdetect vi sible on page 531 show rfdetect ssid-list Displays the en tries in the perm itted SSID li st. Syntax show rfdetect ssid-list Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing [...]

RF Detection Commands 541 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference mycorp corporate guest See Also • clear rfdetect ssid-list on page 513 • set rfdetect ssid-list on page 517 show rfdetect vendor-list Displays the entries in the permitted vendor list. Syntax show rfdetect vendor -list Defaults None. Access Enabled. Hist[...]

542 RF Detection Commands NN47250-1 00 (Versio n 02.51) Syntax show rfdetect visible mac-addr Syntax show rfdetect visible ap ap-num [ radio { 1 | 2 }] Syntax show rfdetect visible ap ap-num [ radio { 1 | 2 }] Defaults None. Access Enabled. History Usage If a Nortel radio is supporting more than one SS ID, each of the corres ponding BSSIDs is liste[...]

RF Detection Commands 543 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Table 83 describes the fields in this display. See Also • show rfdetect data on page 524 • show rfdetect mobili ty-do main on pag e 526 rfping Provides information about the RF link between the WSS and the client based on sending test packets to the clie[...]

544 RF Detection Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Introduced in WSS Software V ersion 5.0. N ame of the c ommand chan ged from test rflink to rfping in WSS Software V ersion 6.0. Usage Use this command to send te st packets to a specified client. The output of the command indicates the number of test pac[...]

545 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference File Mana g ement Commands Use file management commands to mana ge system files and to disp lay softwa re and boot information. This chapter presents file management comma nds alphabetically. Use the foll owing table to locate comm ands in this chapter ba sed on their use. backup[...]

546 File Management Co mmands NN47250-1 00 (Versio n 02.51) Syntax backup system [ tftp :/ ip-addr / ] filename [ all | critical ] Defaults The defau lt is all . Access Enabled. Usage Y ou c an create an archive located on a TFTP server or in the switch’ s non volatile storage. If you specify a TFT P server as part of the file name, the archi v e[...]

File Managemen t Commands 547 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear boot backup-configuration Clears the filename specified as the ba ckup configuration file. In the event that WSS Software cannot read the configu- ration file at boot time, a backup configuration file is not used. Syntax clear boot back up-conf igu[...]

548 File Management Co mmands NN47250-1 00 (Versio n 02.51) • Copies a file from a TFT P server to non volatile storage. • Copies a file from non volatile storage or temporary storage to a TFTP serv er . • Copies a file from one area in non v olatile storage to another . • Copies a file to a ne w f ilename in non volatile storage. Syntax co[...]

File Managemen t Commands 549 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command copies a f ile called floorwss from non v olatile storage to a TFTP server: WSS# copy floorwss tftp://10.1.1.1/floorw ss success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] The following command c opies a file call e[...]

550 File Management Co mmands NN47250-1 00 (Versio n 02.51) Syntax delete url Defaults None. Access Enabled. Usage Y ou might want to copy the file to a TFTP server as a backup befo re deleting the f ile. Examples The follo wing commands copy file testconf ig to a TFTP serv er and delete the f ile from non v olatil e storage: WSS# copy testconfig t[...]

File Managemen t Commands 551 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Examples The follo wing command displays th e files in the root directory: WSS # dir ======== ======== ========= ======== ====== ======== ========= ======== ======== ====== = file: Filename Size Created file:configuration 48 KB Jul 12 2005, 15:02[...]

552 File Management Co mmands NN47250-1 00 (Versio n 02.51) The following command lim its the output to the contents of the /tmp/cor e subdirectory: WSS # dir core: ======== ======== ========= ======== ====== ======== ========= ======== ======== ====== = file: Filename Size Created core:command_audit.cur 37 bytes Aug 28 2005, 21:1 1:41 T otal: 37 b[...]

File Managemen t Commands 553 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax install soda agent ag ent-f ile agent-dir ectory dir ectory Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Use this com mand to inst all a .zip file c ontaining SOD A agent f iles into a directory on th e WSS[...]

554 File Management Co mmands NN47250-1 00 (Versio n 02.51) Defaults The defau lt fil e location is non v olatile st orage. If you do not specify a filename, WSS Softwa re uses the same configuration filena me that was used for the previous configuration load. For example, if th e WSS used configur ation for the most recent config uration load, WSS[...]

File Managemen t Commands 555 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command calculates the ch ecksum for image file WSS040003.020 in boot partition 0: pubs# md5 boot0:WSS04 0003.020 MD5 (boot0:WSS040003.0 20) = b9cf7f527f74608e50c70e8fb 896392a See Also • copy on page 537 • dir on page 540 mkd[...]

556 File Management Co mmands NN47250-1 00 (Versio n 02.51) temporary file s: Filename Size Creat ed T otal: 0 by tes used, 93537 Kbytes free See Also • dir on page 540 • rmdir on page 548 reset system Restarts a WSS and reboots the software. Syntax reset system [ force ] Defaults None. Access Enabled. Usage If you do not use the forc e option,[...]

File Managemen t Commands 557 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference restore Unzips a system archive creat ed by the backup command and copies the files from the archive onto the switch. Syntax res t o re system [ tftp:/ ip-addr / ] filename [ all | critical ] [ fo rc e ] Defaults The defau lt is critical . Access Enabled[...]

558 File Management Co mmands NN47250-1 00 (Versio n 02.51) If the configuration running on the swit ch is different from the one in the archive or you renamed the configu- ration file, and you wa nt to retain changes that we re made after the archive wa s created, see the “Managing System Files” chapter of the Nortel WLAN 2300 System Software [...]

File Managemen t Commands 559 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax sa ve conf ig [ filename ] Defaults By default, WSS Software sa ves the running conf iguration as the conf iguration filename used during the last reboot. Access Enabled. Usage If you do not specify a f ilename, WSS So ftware repl aces the configu[...]

560 File Management Co mmands NN47250-1 00 (Versio n 02.51) Examples The follo wing comma nd specif ies a f ile call ed back up.cfg as the backup conf iguration fi le on the WS S: WSS# set boot b ackup-conf igurat ion backup.cfg success: backup boot config filename set. See Also • clear boot backup-c onfiguration on page 537 • show boot on page[...]

File Managemen t Commands 561 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS Software V ersion 1.1. Usage T o determine the boot partition th at was used to load the currently run ning software image, use the dir command. Examples The follo wing command sets th e boot partition for the ne xt so ftware re[...]

562 File Management Co mmands NN47250-1 00 (Versio n 02.51) See Also • clear boot config on page 537 • reset sy stem on page 546 • set boot conf iguration-file on page 550 • show version on page 554 T able 2: Output f or show boot Field Description Conf igured boot version Software version th e switch wi ll run next time the software is reb[...]

File Managemen t Commands 563 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show config Displays the configuration running on the WSS. Syntax show conf ig [ area ar ea ] [ all ] Defaults None. area ar ea Configuration area. Y ou can sp ecify one of the follo wing: •a a a •a c l s •a p •a r p •e a p o l • httpd •i p[...]

564 File Management Co mmands NN47250-1 00 (Versio n 02.51) Access Enabled. History Usage If you do not use one of the optiona l parameters, configuration comma nds that set nondef ault v alues are displayed for all con figuration areas. If you specify an area, commands are displayed for that area only . If you use the all option, the display also [...]

File Managemen t Commands 565 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Build Information : (build#67) TOP 2005-09-21 04:41:00 Model: WSS Hardware Mainboard: version 24 ; re vision 3 ; FPGA version 24 PoE board: version 1 ; FPGA v ersion 6 Serial number 0321300013 Flash: 5.0.0.14 - md0a K ernel: 3.0.0#20: Fri Sep 22 17:43:51[...]

566 File Management Co mmands NN47250-1 00 (Versio n 02.51) See Also show boot on page 551 uninstall soda agent Removes the contents of a dire ctory containing SODA agent files. Syntax uninstall soda agent agent-directory dir ectory Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Use this command to remo v e a [...]

File Managemen t Commands 567 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • install soda agent on page 542 • set service-pr of ile soda mode on page 329[...]

568 File Management Co mmands NN47250-1 00 (Versio n 02.51)[...]

569 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference T race Commands Use trace commands to perform diagnosti c routines. While WSS Software allows you to run many types of traces, this chapter describes commands for t hose traces you are most likely to use. For a complete listing of th e types of traces WSS Software allows, typ e t[...]

570 Trace Commands NN47250-1 00 (Versio n 02.51) clear trace Deletes running trace commands and ends trace processes. Syntax clear trace { trac e-ar ea | all } Defaults None. Access Enabled. Examples T o clear all trace proces ses, type the foll o wing command: WSS# clear trace all success: clear trace all To clear the sessio n manager trace, type [...]

Trace Commands 571 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS Software V ersion 3.0. Examples T o sa ve trace dat a into the f ile trace1 in the subdirectory traces , type the follo wing command: WSS# sa ve trace traces/trace1 set trace authentication Traces authentica tion information. Syntax set tr[...]

572 Trace Commands NN47250-1 00 (Versio n 02.51) Syntax set trace auth orization [ mac-ad dr mac-addr ess ] [ port port-num ] [ user username ] [ le vel le vel ] Defaults The defau lt trace le vel is 5. Access Enabled. Examples The follo wing command starts a trace for in formation for authorization for MA C address 00:01:02:03:04:05: WSS# set trac[...]

Trace Commands 573 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The defau lt trace le vel is 5. Access Enabled. Examples The follo wing command starts a trace for the 802.1X sessions for MA C addr ess 00:01:02:03:04:05: WSS# set trace dot1x mac-addr 00:01:02:03:04 :05: success: change accepted. See Also • clear trace[...]

574 Trace Commands NN47250-1 00 (Versio n 02.51) show trace Displays information about traces that are currently configured on the WSS, or all possible trace options. Syntax show trace [ all ] Defaults None. Access Enabled. Examples T o vie w the traces currently r unning, type the follo wing command: WSS # show trace milliseconds spent printing tr[...]

575 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Snoop Commands Use snoop commands to monitor wireless traffic, by using a AP as a sniffing device. The AP copies the sniffed 802.11 packets and sends the copies to an obser ver, which is typically a protocol anal yzer such as Ethere al or Tethere al. (For more information, incl u[...]

576 Snoop Commands NN47250-1 00 (Versio n 02.51) clear snoop map Removes a snoop filter from an AP radio. Examples clear snoop map f ilter-name ap ap-num radio { 1 | 2 } Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command remove s snoop filter snoop2 from radio 2 on AP 3: WSS# clear snoop [...]

Snoop Commands 577 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set snoop Configures a snoop filter. Syntax set snoop filter -name [ condition-li st ] [ observer ip-addr ] [ snap-leng th num ] Defaults No snoop filters are conf igured by default. Access Enabled. f ilter-name Name for the filter . The name can be up to 15 alphan[...]

578 Snoop Commands NN47250-1 00 (Versio n 02.51) History Usage T raf fic that matches a snoop f ilter is copied after it is decrypted. The decrypted (clear) version is se nt to the observe r . For best results: • Do not specify an observer that is associated wi th the AP where the snoop filter is running. This configu ration causes an endl ess cy[...]

Snoop Commands 579 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Snoop filter s are unmapped by default. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage Y ou can map the same fi lter to more than one radio. Y ou can map up to eight filters to the same radio. If more than one filt er has the same o[...]

580 Snoop Commands NN47250-1 00 (Versio n 02.51) Defaults Snoop filters are disabled by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage The filter mode is not retained if you cha nge the filter conf iguration or d isable and reenable the rad io, or when the AP or the WSS is restart ed. Y ou must reenable the f ilter[...]

Snoop Commands 581 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show snoop info Shows the configured snoop filters. Syntax show snoop f ilter-name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command shows the snoop f ilters conf igured in the examples abo ve: WSS# show[...]

582 Snoop Commands NN47250-1 00 (Versio n 02.51) ap: 3 Radio: 2 See Also • clear snoop map on page 566 • set snoop map on page 568 • show snoop on page 570 show snoop stats Displays statis tics fo r enabled snoop filters. Examples show snoop stats [ f ilter -name [ ap-num [ radio { 1 | 2 }]]] Defaults None. Access Enabled. History Introduced [...]

Snoop Commands 583 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Table 88 describes the fields in this display. T able 1: show snoop stats Output Field Description Filter Name of the sno op fi lter . ap AP containing the radio to which the filter is mapped. Radio Radio to which the f ilter is mapped. Rx Match Number of packets r[...]

584 Snoop Commands NN47250-1 00 (Versio n 02.51)[...]

585 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference System Log Commands Use the system log commands to record information for monitoring and tr oubleshooting. WSS Softwa re system logs are based on RFC 3164, which def ines the log protocol. This chapter presents syst em log command s alphabetica lly. Us e the following table to lo[...]

586 System Log Commands NN47250-1 00 (Versio n 02.51) • set log on page 576 set log Enables or disables logging of WSS and AP events to the WSS log buffer or other logging destinati on and sets the level of the events logged. For logging to a syslog se rver only, you can also set the facility logged. Syntax set log { buf f e r | console | current[...]

System Log Commands 587 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults • Events at the error lev el and higher are logged to the WSS console. • Events at the error lev el and higher are logged to the WSS system b uffer . • T race logging is enabled, and debug-le v el output is stored in the WSS tr ace bu ff er . Ac[...]

588 System Log Commands NN47250-1 00 (Versio n 02.51) Usage Using the command with only enable or disable turns logging on or off for the tar get at all le vels. For e xample, entering set log buffer enable with no other keyw ords turns on logging to the system buf fer of all f acilities at all l e vels. Ent ering set log bu ffe r disabl e with no [...]

System Log Commands 589 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command enables mark messages: WSS# set log mark enable success: change accepted. See Also show log config on page 581 set log trace mbytes This comman d is deprec ated in WSS Software Version 4.0. show log buffer Displays system inform[...]

590 System Log Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage The debug lev el produces a lot of messages, many of which can appear to be some what cryptic. Debug messages are used primarily by No rtel for troubleshooting and are no t intended for administrator use. Examples T ype the follo wing command to see t[...]

System Log Commands 591 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear log on page 575 • show log conf ig on page 581 show log config Displays log configuration information. Syntax show log conf ig Defaults None. Access Enabled. Examples T o display ho w logging is co nfi gured, type the fo llo wing command: [...]

592 System Log Commands NN47250-1 00 (Versio n 02.51) Syntax show log trace [{ + | - | / } number -of-messages ] [ facili ty facility-name ] [ matching string ] [ sev erity severity-le vel ] Defaults None. Access Enabled. trace Displays the log messages in the trac e buf fer . + | - | / number -of-messag es Displays the number of messa ges specif i[...]

System Log Commands 593 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Examples T ype the follo wing command to see the facilitie s for which you can vie w ev ent messag es archi ved in the buf fer: WSS# show log trace facility ? <facility name> Select one of: KERNEL, AAA, SYSLOGD, ACL, APM, ARP , ASO, BOOT , CLI, C[...]

594 System Log Commands NN47250-1 00 (Versio n 02.51)[...]

595 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Boot Pr ompt Commands Boot prompt commands enable you to perform basic tasks, including booting a sy stem image file, from the boot prompt (boot>). A CLI session enters the boot prom pt if WSS Software does not boot successfully or you intentionally interrupt the boot process.[...]

596 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) autoboot Displays or changes the state of the autoboot option. The autoboot option controls whether a WSS automatically boots a system image after initial izing the hardware , following a system reset or power cycle. Syntax autoboot [ ON | on | OFF | off ] Defaults The autoboot option is enabl[...]

Boot Prompt Command s 597 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference boot Loads and executes a sy stem image file . Syntax boot [ BT= type ] [ DEV= device ] [ FN= fil e n a me ] [ HA= ip-a ddr ] [ FL= num ] [ OPT= option ] [ OPT+= option ] Defaults The boot settings in the currently ac tive boot prof ile are used by default. [...]

598 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) Usage If you use an optional parameter , the parameter setting overrides the settin g of the same parameter in the currently acti ve boot prof ile. Ho we ver , the boot profil e itself is not changed. T o display the currently acti v e boot prof ile, use the sho w command. T o change the curre[...]

Boot Prompt Command s 599 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Boot prompt. Usage After you type the change command , the system interac ti vely di splays the c urrent setting of each parameter and prompts you for the ne w setti ng. When prompted, type the ne w setting, press Enter to accept the curre nt setting,[...]

600 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) create Creates a new boot profile. (For in formation about boot profiles, see show o n page 596 .) Syntax create Defaults The new boot prof ile has the same settings as the currently acti ve boot prof ile by default. Access Boot prompt. Usage A WSS can ha ve up to four boot prof iles. The boot[...]

Boot Prompt Command s 601 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o remo ve the current ly acti ve bo ot prof ile, type the follo wing command: boot> delete BOOT Inde x: 1 BOOT TYPE: c DEVICE: boot1: FILENAME: default FLAGS: 00000000 OP TIONS: run=nos;boot=0 See Also • change on page 588 • create on page [...]

602 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) diag Accesses the diagnostic mode. Syntax diag Defaults The diagnostic mode is disabled by def ault. Access Boot prompt. Usage Access to the diagnostic mode requi res a password, which is not user conf igurable. Use this mode only if advised to do so by Nortel. dir Displays the boot code and s[...]

Boot Prompt Command s 603 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference fver Displays the version of a system image file installed in a specific loc ation on a WSS. Syntax fver { c: | d: | e: | f: | boot0: | boot1: } [ filename ] Defaults None. Access Boot prompt. Usage T o display the image filenames, use the dir com mand. This[...]

604 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) Examples The follo wing command displays detailed information for the fver command: boot> help fver fver Display the vers ion of the specified de vice:filename. USAGE: fver [c:file|d:file|e:file|f :file|boot0:file| boot1:file|bo ot2:file|boo t3:file] Comm and to display the vers ion of the [...]

Boot Prompt Command s 605 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also help on page 593 next Activates and displays the boot profile in the next boot profile slot. (For informati on about boot profiles, see show on page 596 .) Syntax next Defaults None. Access Boot prompt. Usage A WSS contains 4 boot profile slots, num[...]

606 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) boot> re s et Nortel WSS Bootstrap 1.17 Release T esting Low Memory 1 ............ T esting Low Memory 2 ............ CISTPL_VE RS_1: 4.1 <SanDisk> <SDP> <5/3 0.6> Reset Cause (0x02) is COLD Nortel WSS Bootstrap/Bootloader V ersion 1.6.5 Release Bootstrap 0 version: 1.17 A[...]

Boot Prompt Command s 607 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o display the currently acti ve boot profil e, type the follo wing command at the boot prompt: boot> show BOOT Index: 0 BOOT TYPE: c DEVICE: boot1: FILENAME: default FLAGS: 00000000 OP TIONS: run=nos;boot=0 The following is an example of a boot[...]

608 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) See Also • change on page 588 • create on page 590 • delete on page 590 • dhcp on page 591 DEVICE Location of the system image f ile: • c: —Nonvolatile storage area containing boot partition 0 • d: —Nonvolatile storage area containing boot partition 1 • e: —Primary partitio[...]

Boot Prompt Command s 609 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • next on page 595 test Displays or changes the state of the poweron test flag. The pow eron test flag controls whet her a WSS performs a set of self tests prior to the boot process. Syntax test [ ON | on | OF F | off ] Defaults The po weron test flag is d[...]

610 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) Bootloader 1 version: 1.6.3 WSS Board Revision: 3. WSS Controller Revision: 24. POE Board Revision: 1 POE Controller Revision : 6 See Also • dir on page 592 • fver on page 593[...]

Nortel WLAN Security Switch 2300 Series Command Line Refere nce 611 Command Inde x Numerics 84100 CommandName clear ap radio 237 A access levels, command line 17 administrative access mode 9 advisory notices, explanations of 7 all access 17 asterisk s (*) in MAC addresses 12 in user globs 12 asterisks. See double ast erisks (**); single asterisks ([...]

612 Command Index NN47250-100 (3 20658-G Version 02.51) clear port type 27 clear port-group 25 clear prompt 55 clear radio-profile 242 clear radius 483 clear radius client system-ip 484 clear radius proxy client 485 clear radius proxy port 485 clear radius server 486 clear rfdetect attack-list 512 clear rfdetect black-list 512 clear rfdetect ignore[...]

Command Index 613 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence D delete 539, 590 delimiter characters, for user globs 12 dhcp 591 diag 592 dir 540, 592 disable 19 documentation, p roduct 6 dotted decimal notation, in IP addresses 12 double asterisks (**) in user globs 12 in VLAN globs 14 wildcard 16 E enable 19 enabled access 17[...]

614 Command Index NN47250-100 (3 20658-G Version 02.51) P password invalid for last-resort users 206 ping 107 port lists conventions for 14 product documentation 6 Q quickstart 57 quit 20 R reset 595 reset ap 245 reset port 32 reset system 546 restore 547 rmdir 548 S safety notices, explanations of 7 save config 548 set {ap | dap} radio m ode 270 s[...]

Command Index 615 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence set igmp 416 set igmp lmqi 416 set igmp mrouter 417 set igmp mrsol 417 set igmp mrsol mrsi 418 set igmp oqi 418 set igmp proxy-report 419 set igmp qi 420 set igmp qri 420 set igmp querier 421 set igmp receiver 422 set igmp rv 422 set interface 109 set interface dhcp-[...]

616 Command Index NN47250-100 (3 20658-G Version 02.51) set radio-profile max-t x-lifetime 290 set radio-profile mode 291 set radio-profile preamble-length 294 set radio-profile psk-phrase 294 set radio-profile psk-raw 294 set radio-profile rts-thresho ld 297 set radio-profile service-p rofile 298 set radio-profile shared-key-auth 304 set radio-pro[...]

Command Index 617 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence set spantree maxage 395 set spantree portcost 395 set spantree portfast 396 set spantree portpri 397 set spantree portvlancost 397 set spantree portvlanpri 398 set spantree priority 399 set spantree uplinkfast 399 set summertime 140 set system contact 62 set system c[...]

618 Command Index NN47250-100 (3 20658-G Version 02.51) show rfdetect counters 523 show rfdetect data 524 show rfdetect ignore 526 show rfdetect mobility-domain 526 show rfdetect ssid-list 530 show rfdetect vendor-list 531 show rfdetect visible 531 show roaming station 84 show roaming vlan 85 show security l2-restrict 87 show service-profile 380 sh[...]

Command Index 619 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence in MAC addresses 12 in user globs 12 in VLAN globs 14[...]

620 Command Index NN47250-100 (3 20658-G Version 02.51)[...]

[...]

Nortel WLAN—Security Switch 2300 Series Command Line Reference Nortel WLAN—Security Switch 2300 Series Release 6.0.7 Document Number: NN47250-100 Document Stat us: Standard Document V ers ion: 02.51 Release Date: Jun e 2008 Copyright © Nortel Networks Limited 2007-2008 Alll Rights Reserved The information in this document is subject to change [...]