Nortel 2300 Series manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622

Ir a la página of

Buen manual de instrucciones

Las leyes obligan al vendedor a entregarle al comprador, junto con el producto, el manual de instrucciones Nortel 2300 Series. La falta del manual o facilitar información incorrecta al consumidor constituyen una base de reclamación por no estar de acuerdo el producto con el contrato. Según la ley, está permitido adjuntar un manual de otra forma que no sea en papel, lo cual últimamente es bastante común y los fabricantes nos facilitan un manual gráfico, su versión electrónica Nortel 2300 Series o vídeos de instrucciones para usuarios. La condición es que tenga una forma legible y entendible.

¿Qué es un manual de instrucciones?

El nombre proviene de la palabra latina “instructio”, es decir, ordenar. Por lo tanto, en un manual Nortel 2300 Series se puede encontrar la descripción de las etapas de actuación. El propósito de un manual es enseñar, facilitar el encendido o el uso de un dispositivo o la realización de acciones concretas. Un manual de instrucciones también es una fuente de información acerca de un objeto o un servicio, es una pista.

Desafortunadamente pocos usuarios destinan su tiempo a leer manuales Nortel 2300 Series, sin embargo, un buen manual nos permite, no solo conocer una cantidad de funcionalidades adicionales del dispositivo comprado, sino también evitar la mayoría de fallos.

Entonces, ¿qué debe contener el manual de instrucciones perfecto?

Sobre todo, un manual de instrucciones Nortel 2300 Series debe contener:
- información acerca de las especificaciones técnicas del dispositivo Nortel 2300 Series
- nombre de fabricante y año de fabricación del dispositivo Nortel 2300 Series
- condiciones de uso, configuración y mantenimiento del dispositivo Nortel 2300 Series
- marcas de seguridad y certificados que confirmen su concordancia con determinadas normativas

¿Por qué no leemos los manuales de instrucciones?

Normalmente es por la falta de tiempo y seguridad acerca de las funcionalidades determinadas de los dispositivos comprados. Desafortunadamente la conexión y el encendido de Nortel 2300 Series no es suficiente. El manual de instrucciones siempre contiene una serie de indicaciones acerca de determinadas funcionalidades, normas de seguridad, consejos de mantenimiento (incluso qué productos usar), fallos eventuales de Nortel 2300 Series y maneras de solucionar los problemas que puedan ocurrir durante su uso. Al final, en un manual se pueden encontrar los detalles de servicio técnico Nortel en caso de que las soluciones propuestas no hayan funcionado. Actualmente gozan de éxito manuales de instrucciones en forma de animaciones interesantes o vídeo manuales que llegan al usuario mucho mejor que en forma de un folleto. Este tipo de manual ayuda a que el usuario vea el vídeo entero sin saltarse las especificaciones y las descripciones técnicas complicadas de Nortel 2300 Series, como se suele hacer teniendo una versión en papel.

¿Por qué vale la pena leer los manuales de instrucciones?

Sobre todo es en ellos donde encontraremos las respuestas acerca de la construcción, las posibilidades del dispositivo Nortel 2300 Series, el uso de determinados accesorios y una serie de informaciones que permiten aprovechar completamente sus funciones y comodidades.

Tras una compra exitosa de un equipo o un dispositivo, vale la pena dedicar un momento para familiarizarse con cada parte del manual Nortel 2300 Series. Actualmente se preparan y traducen con dedicación, para que no solo sean comprensibles para los usuarios, sino que también cumplan su función básica de información y ayuda.

Índice de manuales de instrucciones

  • Página 1

    Part No. NN4725 0-100 June 2008 4655 Great America Parkway Santa Clara, CA 95054 Nor tel WLAN Security Switc h 2300 Series Command Line Ref erence[...]

  • Página 2

    2 NN47250-1 00 (Versio n 02.51) Copyright © 2007-2008 Nor tel Ne tworks. All rights reser ved. The information in this document is subj ect to change without notice. The statements, config urations, technical data, and recommendations in this docume nt are believ ed to be accura te and reliable, but are presen ted without e xpress or implied warra[...]

  • Página 3

    3 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SUCH POR T IONS OF THE SOFTW ARE ARE PR O VIDED “ AS IS” AND WITHOUT ANY EXPRESS OR IM PLIED W ARRANTIES, INCLUDING, WITHO UT LIMIT A TION, THE IM PLIED W ARRANTIES OF MERCHANT ABILITY AND FITNESS FOR A P AR TICULAR PURPOS E. In addition, the program and information contained h[...]

  • Página 4

    4 NN47250-1 00 (Versio n 02.51) de veloper and/or supplier is an intended be nef iciary of this Section. Some jurisd ictions do not allo w th ese limitations or exclusions and, in such e v ent, the y may not apply . 4.General a) If Customer is the United States Gov ernment, the follo wi ng p aragraph shall apply: All No rtel Software a v ailable un[...]

  • Página 5

    5 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Exclusive Remed y Your sole remedy under the limited warranty descr ibed above is, at Nort el’s sole option and expense, the repair or replacement of the non-conforming Product or refund of the purchase price o f the non-conforming Products. Nortel’s obligation under this limit[...]

  • Página 6

    6 NN47250-1 00 (Versio n 02.51) END CUSTOMER MAY ALSO HAVE OTHER RIGHTS, WHICH VA RY FROM STATE/JURISDICTION TO STATE/JURISDICTION. TO THE MAXIMUM EXTENT PERMITTED BY APPL ICABLE LAW, IN NO EVENT SHALL NORTEL OR ITS SUPPLIERS BE LIABLE FOR THE COS T OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, LOSS OF PROFITS, OR FOR ANY SPECIAL, CONSEQUENTIAL, [...]

  • Página 7

    7 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference (d) Nortel may provide up dates, corrections, e nhancements, modifications or bug fixes for the Licensed Materials (“Updates”) to Licens ee. Any such Update sh all be deemed part of t he Li cens ed Ma terial s an d sub ject to the lice nse and al l other terms and conditions he[...]

  • Página 8

    8 NN47250-1 00 (Versio n 02.51) that is not covered by the above provisions shall be d eemed “technical data-commercial item s” pursuant to DFAR section 227.7015(a). Any use, modification, reproduction, release, perfor mance, display or disclosure of such technical data shall be governed by the terms of DFAR section 227.7015(b). 8. Limitation o[...]

  • Página 9

    9 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference THIS SOFTWARE IS PROV IDED BY THE AUTH OR ``AS IS'' AND AN Y EXPR ESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANT ABILITY AND FITNESS FO R A PARTICULA R PURPOSE ARE DISCLAIMED. IN NO EVENT SH ALL THE AUTHOR BE LIAB LE FOR ANY D[...]

  • Página 10

    10 NN47250-1 00 (Versio n 02.51)[...]

  • Página 11

    11 Nortel WLAN— Manageme nt Softwar e 2300 S eries Refe rence Guide How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Introducing the Nortel WLAN 2300 Sy stem . . . . . . . . . . . . . . . . . . . . . . . 5 Nortel WLAN 2300 Syst em . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Página 12

    12 NN47250-1 02 (Versio n 02.51) IP Services Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 AAA Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 Mobility Domain Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 Network Domain Comm[...]

  • Página 13

    13 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Ho w to get help This section explains how to get help for Nortel pr oducts and services. Getting help from the Nortel web site The best way to get technical suppor t for Nortel products is from the Nortel Technical Support Web site: http://www .nortel.com/support This site provid[...]

  • Página 14

    14 How to get help NN47250-1 00 (Versio n 02.51)[...]

  • Página 15

    15 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Intr oducing the Nor tel WLAN 2300 System This command reference expl ains WLAN Security Switch 2300 Series (W SS Software) command line interface (CLI) commands that you enter on a WLAN—Security Switch to configure and manage the Nortel WLAN 2300 System wireless LAN (WLAN). Rea[...]

  • Página 16

    16 Introdu cing the Nortel WLAN 2300 Syste m NN47250-1 00 (Versio n 02.51) Documentation Consult the following documents to plan, install, configure, and manage a Nortel WLAN 2300 System. Planning, Conf iguration, and Deployment • Nortel WLAN Manag ement Softwar e 2300 Series User Guide . Instructions for planning, configuring, deplo ying, and ma[...]

  • Página 17

    Introdu cing the Nortel WLAN 2300 Syste m 17 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Safety and Advisory Notices The following kinds of safety and advisory notic es appear in thi s manual. Caution! This situation o r condition can lead to data loss or damage to the product or other proper ty . Note. This inf or mation is o[...]

  • Página 18

    18 Introdu cing the Nortel WLAN 2300 Syste m NN47250-1 00 (Versio n 02.51) T e xt and Syntax Con ventions Nortel manuals use the followi ng text and syntax conventions: Convention Use Monospace text Sets of f command syntax or sample commands and system responses. Bold text Highlights commands that you enter or items you select. Italic te xt Design[...]

  • Página 19

    19 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Using the Command-Line Interface WLAN Security Switch 2300 Series (W SS Software) operates a No rtel WLAN 2300 System wireless LAN (WLAN) consisting of WLAN Management Software, WLAN—Security Sw itch (WSS), and Ac cess Points (APs). WSS Software has a command-line interface (CLI[...]

  • Página 20

    20 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) Command Pr ompts By default, the WSS Software CLI provides th e following prompt for re st ricted user s. The mm por tion shows the WSS model number (for example, 2360 ) and the nnnnnn portion shows the last 6 digits of the switch’s media access control (MAC) address. WSS- mmmm - n[...]

  • Página 21

    Using the Co mmand- Line Inte rface 21 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax Notation The WSS Software CLI uses standard syntax n otation: • Bold monospace font identifies the comma nd and ke ywords you mu st type. For e xample: set enablepass • Italic monospace font indica tes a placeholder for a value. For e[...]

  • Página 22

    22 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) MA C Address Notation WSS Software displays MAC a ddresses in hexadecimal numb ers with a col on (:) delimiter betwee n bytes—for example, 00:01:02:1a:00:01. You can enter MAC addres ses with either hyphen (-) or colon (:) delimiters, but colons are preferred. For shortcuts: • Y [...]

  • Página 23

    Using the Co mmand- Line Inte rface 23 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference number of characters up to , but not includi ng, a delimiter charac ter in the wildcard. Val id user wildcard delimiter chara cters are the at (@) sign and the per iod (.). For example, the following wildca rds identify the following users: MA C[...]

  • Página 24

    24 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) To match all VLANs, use the double-asterisk (**) wildcard ch aracters with no delimiters. To match any number of char- acters up to, but not including, a delimit er character in the wildcard, use the single-asterisk (*) wildcard. Valid VLAN wildcard delimite r characters are the at ([...]

  • Página 25

    Using the Co mmand- Line Inte rface 25 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Command-Line Editing WSS Softwar e editing functions are si milar to th ose of many other ne twork operating systems. Keyboard Shortcuts The following table lists the keyboard shor tcuts for entering a nd editing CLI commands: History Buffer The[...]

  • Página 26

    26 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51) Tabs The WSS Softwa re CLI uses the Tab key for command completion. You can typ e th e first few characters of a command and press the Tab key to display the command(s) that begin with those cha racters. For e xample: WSS# show i <T ab> ifm Show interfaces maintain ed by the in[...]

  • Página 27

    Using the Co mmand- Line Inte rface 27 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference To see a subset of the online help, type the command for which you want more in formation. For exampl e, to display all the commands tha t begin with t he letter i , type the following command: WSS# show i? ifm Show interfaces maintain ed by the[...]

  • Página 28

    28 Using the Command-Line Interface NN47250-1 00 (Versio n 02.51)[...]

  • Página 29

    29 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Commands Use access commands to control access to the WLAN Security Switch 2300 Series (WSS Software) (CLI). This chapter presents access co mmands alphabetically . Use the following ta ble to locate commands in this ch apter based on their use. disable Changes the CLI sess[...]

  • Página 30

    30 Access Commands NN47250-1 00 (Versio n 02.51) See Also • set enablepass on page 20 • set conf irm on page 60 quit Exit from the CLI session. Syntax quit Defaults None. Access All. Examples T o end the administrator’ s sessi on, type the follo wing command: WSS> quit set enablepass Sets the password that prov ides enabled access (f or co[...]

  • Página 31

    Access Commands 31 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • disable on page 19 • enable on page 19[...]

  • Página 32

    32 Access Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 33

    33 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference P or t Commands Use port commands to configure and manage individual ports and load -sharing port groups. This chapter presents port commands alp habetically. Use the following table to locate commands in this chapter based on their use. Port T ype set port type ap on page 41 set [...]

  • Página 34

    34 Port Comman ds NN47250-1 00 (Versio n 02.51) clear ap Removes a AP. Syntax clear ap ap-num Defaults None. Access Enabled. Examples The follo wing command clears AP 1: WSS# clear ap 1 This will clear specified AP devices. W ould you like to continue? (y/n) [n] y See Also • set ap on page 33 • set port type ap o n page 41 clear port counters C[...]

  • Página 35

    Port Commands 35 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • monitor port coun ters on page 28 • show port counters on page 46 clear port-group Removes a port group. Syntax clear port-group name name Defaults None. Access Enabled. Examples The follo wing command clears port group server1 : WSS# clear port-group [...]

  • Página 36

    36 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also • set port media-type on page 36 • show port media-type on page 48 clear port mirror Removes a port mirroring con figuration. Syntax clear port mirr or Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Examples The follo wing command clears the port mirroring[...]

  • Página 37

    Port Commands 37 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear port type Removes all configuration se tti ngs from a port and resets the port as a network port. Syntax clear port type port-list Defaults The cleared port becomes a network por t but is not placed in any VLANs. Access Enabled. Usage Use this command to change[...]

  • Página 38

    38 Port Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command clears port 5: WSS# clear port type 5 This may disrupt currently authenticat ed users. Are you sure? (y/n) [n] y success: change accepted. See Also • set port type ap o n page 41 • set port type wir ed-auth on page 44 monitor port counters Displays and continuall y [...]

  • Página 39

    Port Commands 39 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference For error reporting, the cyclic redundancy check (CRC) errors include misa lignment errors. Jumbo packets with valid CRCs are not counted. A short packet can be reported as a short packet, a CRC e rror, or an overrun. In some cir cum- stances, the transmitte d octets[...]

  • Página 40

    40 Port Comman ds NN47250-1 00 (Versio n 02.51) Table 3 describes the port statistics displayed by each statisti cs option. The Port and St atus fields are displayed for each option. T able 3: Output for monitor port counters Statistics Option Field Description Displayed f or All Options Port Port the statistics are displayed for . Status Port stat[...]

  • Página 41

    Port Commands 41 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference transmit-errors Tx Cr c Number of frames transmitted by the port that had the correct length b ut contained an in v alid FCS va l u e . Tx Short Number of frames tran smitted by the port that were fewer than 64 bytes long. Tx Fragment T otal number of frame s transmi[...]

  • Página 42

    42 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also show port counters on page 46 reset port Resets a port by toggling its link state a nd Power over Ethernet (PoE) state. Syntax res e t po r t port-lis t Defaults None. Access Enabled. Usage The res e t command disables the port’ s link and PoE (if applicable) for at least 1 second, then ree[...]

  • Página 43

    Port Commands 43 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set port on page 35 set ap Configures a AP for an AP that is indirectly con nected to the WSS through an intermediate Layer 2 or Layer 3 network. Syntax set ap ap-num serial-id seri al-ID model { 2330 | 23 30A | 2330B | 2332-A1 | 2332-A2 | 2332-A3 | 2332-A4 [...]

  • Página 44

    44 Port Comman ds NN47250-1 00 (Versio n 02.51) Defaults The def ault v ales are the same as the d efaults for the set p ort type ap command. Access Enabled. History Examples The follo wing command configures apAP 1 for AP model AP-2330A with serial-ID 0322199999: WSS# set ap 1 serial-id 0322199999 model 233 0A success: change accepted. ap-num Numb[...]

  • Página 45

    Port Commands 45 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command removes AP 1: WSS# clear ap 1 This will clear specified AP devices. W ould you like to continue? (y/n) [n] y See Also • clear ap on page 24 • clear port type on page 27 • set port type ap o n page 41 • set system countrycode on page 63 s[...]

  • Página 46

    46 Port Comman ds NN47250-1 00 (Versio n 02.51) Syntax set port-gr oup name gr oup-name po rt-list mode { on | off } Defaults Once configured, a group is enabled by default. Access Enabled. Usage Do not use dashes or hyphens in a port group name. If you do, WSS Software will not display or sav e the port group. You can configure up to 16 ports in a[...]

  • Página 47

    Port Commands 47 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set port media-type port-list rj45 Defaults The GBIC (f iber) interface is enabled, and the copper interface is disabled, by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage This command applies only to the 2380. If you set the [...]

  • Página 48

    48 Port Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command sets port 2 to monitor po rt 1’ s traff ic: WSS# set port 1 observ er 2 See Also • clear port mirror on page 26 • show port mirror on page 49 set port name Assigns a name to a port. After naming a port, you can use the port name or number in other CLI commands. Sy[...]

  • Página 49

    Port Commands 49 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set port negotia tion Disables or reenable s autonegotiation on gigabit Ethe rnet or 10/100 Ethernet ports. Syntax set port negotiation port-list { enable | disa ble } Defaults Autonegotiatio n is enabled on all Ethernet ports by default. Access Enabled. Usage The gi[...]

  • Página 50

    50 Port Comman ds NN47250-1 00 (Versio n 02.51) Defaults PoE is disabled on network and wired auth entication ports. The state o n AP ports depends on whether you enabled or disabl ed PoE when setting the port type. See set port type ap on page 41 . Access Enabled. Usage This command does not apply to an y gigabit Et hernet ports or to ports 7 and [...]

  • Página 51

    Port Commands 51 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference packets sent to a WSS port in such a conf igur ation can cause forw arding on the link to stop. Do not set the port speed of a gigabit port to auto . Although the CLI allo ws this setting, it is in valid. If you set the port speed of a gig abit port to auto , the lin[...]

  • Página 52

    52 Port Comman ds NN47250-1 00 (Versio n 02.51) Syntax set port type ap port-list model { 2330 | 23 30A | 2330 B | 2332-A1 | 2332-A2 | 2332-A3 | 2332-A4 | 2332-A5 | 2332-A6 | 2332-E1 | 23 32-E2 | 2332-E3 | 2332-E4 | 2332-E 5 |2332-E6 | 2332-E7 | 2332-E8 | 233 2-E9 | 233 2-J1 } poe { enable | disa ble } [ radiotyp e { 11a | 11b | 11g }] Note. Bef or[...]

  • Página 53

    Port Commands 53 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults All WSS ports are network ports by default. Model AP-2330, AP-2330A, AP-2330B, and Series 2332 APs have two radios. On two-radio models, one radio is always 802.11a. The other radio is 802.11b/ g, but can be configured for 802.11b or 802.11g exclusively. If [...]

  • Página 54

    54 Port Comman ds NN47250-1 00 (Versio n 02.51) To manage an AP on a switch model that do es not have 10/100 Ethernet ports, use the set ap command to configure a AP connec tion on the switch. Examples The follo wing commands set port 2 for AP model 2330, enable PoE on the p ort, and specify external antenna model 2445 3 for the 802.1 1b/g radio: W[...]

  • Página 55

    Port Commands 55 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set port type wired-auth port-list [ tag tag-list ] [ max-sessions num ] [ auth-fal l-thru { last-r esort | none | web-portal }] Defaults The default tag-list is null (no tag v alues). The default number of sessions is 1. The default f allthru a uthentication [...]

  • Página 56

    56 Port Comman ds NN47250-1 00 (Versio n 02.51) For 802.1X clients, wired auth entication works only if the cl ients are directly attached to the wired authentica- tion port, or are attached through a hub that does not bloc k forwarding of packets from the client to the PAE group address (01:80:c2:00:00:03). Wire d auth entication works in accord a[...]

  • Página 57

    Port Commands 57 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Y ou can specify one statistic type with the command. Examples The follo wing command shows octe t statistics for port 3: WSS> show port counters octets port 3 Port S tatus Rx Octets Tx Octets ======== ======== ========= ======== ====== ======== ========= ==[...]

  • Página 58

    58 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also • clear port-group on page 25 • set port-gr oup on page 35 show port media-type Displays the enabled interface types on a 2380 switch’s gigabit Ethernet ports. Syntax show port media-ty pe [ port-list ] Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. Usage Th[...]

  • Página 59

    Port Commands 59 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show port mirror Displays the port mirroring configuration. Syntax show port mirr or Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Examples The follo wing command displays the port mirroring configuration on the switch: WSS# show por[...]

  • Página 60

    60 Port Comman ds NN47250-1 00 (Versio n 02.51) 9 9 up AP enabl ed 1.44 10 10 up - disabl ed off 1 1 1 1 down - disa bled off 12 12 down - di sabled off 13 13 down - di sabled off 14 14 down - di sabled off 15 15 down - di sabled off 16 16 down - di sabled off 17 17 down - di sabled off 18 18 down - di sabled off 19 19 down - disabled off 20 20 dow[...]

  • Página 61

    Port Commands 61 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show port status Displays configuration and st atus information for ports. Syntax show port status [ port-list ] Defaults None. Access All. Examples The follo wing command displays information for all ports on a 22-port WSS: WSS# show port status Port Name Admin Oper[...]

  • Página 62

    62 Port Comman ds NN47250-1 00 (Versio n 02.51) See Also • clear port type on page 27 • set port on page 35 • set port name on page 3 8 • set port negotiation on page 39 • set port speed on page 40 • set port type ap o n page 41 • set port type wir ed-auth on page 44 Admin Administra tiv e status of the port: • up—The port is enab[...]

  • Página 63

    63 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference System Services Commands Use system ser vices commands to configure and monitor system information for a WLAN—Security Swit ch (WSS). This chapter pr esents system services comma nds alphabetically. Use the following table to located commands in this chapter based on their use. [...]

  • Página 64

    64 System Services Commands NN47250-1 00 (Versio n 02.51) clear banner motd Deletes the message-of-the -day (MOTD) banner that is disp layed before the login prompt for each CLI session on the WSS. Syntax clear banner motd Defaults None. Access Enabled. Examples T o clear a banner , type th e follo wing command : WSS# clear banner motd success: cha[...]

  • Página 65

    System Services Commands 65 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear prompt Resets the system prompt to its previous ly configured value. If the pr ompt was not configured prev iously, this command resets the prompt to its default. Syntax clear prompt Defaults None. Access Enabled. Examples T o reset the prompt, type [...]

  • Página 66

    66 System Services Commands NN47250-1 00 (Versio n 02.51) Examples T o clear the location of the W SS, type the following command: WSS# clear system location success: change accepted. See Also • set system contact on page 62 • set system countrycode on page 63 • set system idle-timeout on page 64 • set system ip-address on page 65 • set s[...]

  • Página 67

    System Services Commands 67 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference traceroute P rint the r oute packets take to network host See Also “Using CLI Help” on pag e 16 history Displays the command history buffer for the current CLI session. Syntax history Defaults None. Access All. Examples T o sho w the history of you r s[...]

  • Página 68

    68 System Services Commands NN47250-1 00 (Versio n 02.51) Syntax set auto-config { enable | disabl e } Defaults The auto-conf ig option is automatically enable d on an unconfigured 2350 when the factory reset switch is pressed during power on. Ho we ver , auto -config is disabled by default on other models. Access Enabled. History Introduced in WSS[...]

  • Página 69

    System Services Commands 69 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference 1 Conf igure a VLAN: 2360# set vlan 1 port 7 success: change accepted. 2 Enable the DHCP client on VLAN 1: WSS# set interface 1 ip dhcp-client enable success: change accepted. 3 Enable the auto-conf ig option: WSS# set auto-config enable success: change ac[...]

  • Página 70

    70 System Services Commands NN47250-1 00 (Versio n 02.51) • Number sign (#) • Question mark (?) • Single quotation mark (') Examples T o create a banner that says Update meeting at 3 p.m. , type the following command: WSS# set banner motd ^Updat e meeting at 3 p.m.^ success: change accepted. See Also • clear banner motd on page 54 • [...]

  • Página 71

    System Services Commands 71 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set length number-of-lines Defaults WSS Software displays 24 lines by def ault. Access All. Usage Use this command if the output of a CLI comm and is greater than the number of lines allowed by default for a terminal type. Examples T o set the numbe[...]

  • Página 72

    72 System Services Commands NN47250-1 00 (Versio n 02.51) See Also show licenses on page 67 set prompt Changes the CLI prompt for the WSS to a string you specify. Syntax set promp t string Defaults The factory default for the WSS name is WSS- mm - nnn nnn , where mm is the model number an d nnnnnn is the last 6 digits of the 12-digit system MA C ad[...]

  • Página 73

    System Services Commands 73 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The following command sets the system cont act information to tamara@e xample.com : 23x0# set system contact tamara@example.com success: change accepted. See Also • clear system on page 55 • set system location on page 65 • set system name o[...]

  • Página 74

    74 System Services Commands NN47250-1 00 (Versio n 02.51) See Also show config on page 553 set system idle-timeout Specifies the maximum number of seconds a CLI management sessio n with the switc h can remain idle before WSS Software terminat es the session. Syntax set system idle-timeout seconds Defaults 3600 seconds (one hour). Access Enabled. Hi[...]

  • Página 75

    System Services Commands 75 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set system ip-address Sets the s ystem IP addres s so that i t ca n be used by various services in the WSS. Syntax set system ip-address ip-addr Defaults None. Access Enabled. Examples The follo wing command sets the IP address of the WSS to 192.168.253.1:[...]

  • Página 76

    76 System Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear system on page 55 • set system contact on page 62 • set system name on page 66 • show system on page 68 set system name Changes the name of the WSS fr om th e default system na me and also provides content for the CLI prompt, if you do not specify a prompt. Syntax se[...]

  • Página 77

    System Services Commands 77 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show banner motd Shows the banner that was configured with the set banner motd command. Syntax show banner motd Defaults None. Access Enabled. Examples T o display the banner with the message of the day , type the follo wing command: WSS# show ba nner motd[...]

  • Página 78

    78 System Services Commands NN47250-1 00 (Versio n 02.51) See Also show system on page 68 show system Displays system information. Syntax show system Defaults None. Access Enabled. History Examples T o sho w system informatio n, type the following command: WSS# show system ======== ======== ========= ======== ====== ======== ========= ======== ====[...]

  • Página 79

    System Services Commands 79 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference T able 1: show system output Field Description Product Name WSS model number . System Name System name (factory defa ult, or optionally c onfigu red with set system name ). System Countrycode Country-specific 802.11 code required for AP operation (conf igu[...]

  • Página 80

    80 System Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear system on page 55 • set system contact on page 62 • set system countrycode on page 63 • set system idle-timeout on page 64 • set system ip-address on page 65 • set system location on page 65 • set system name on page 66 show tech-support Provides an in-depth sn[...]

  • Página 81

    System Services Commands 81 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Enter this command before calling the Nort el Enterprise T echni cal Support (NETS). See “How to get help” on page 3 for more inf ormation. See Also • show boot on page 551 • show conf ig on page 553 • show licenses on page 67 • show syst[...]

  • Página 82

    82 System Services Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 83

    83 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference VLAN Commands Use virtual LAN (VLAN) commands to configure and manage para meters for individual por t VLANs on network ports, and to display information a bout clients roaming within a mobility domain. This chap ter presents VLAN commands alphabetically. Use the following table t[...]

  • Página 84

    84 VLAN Commands NN47250-1 00 (Versio n 02.51) clear fdb Deletes an entry from the fo rwarding database (FDB). Syntax clear fdb { perm | static | dynamic | port port-lis t } [ vlan vlan-id ] [ tag tag-value ] Defaults None. Access Enabled. Usage Y ou can delete forwarding databa se entries based on entry type, port, or VLAN. A VLAN name or number i[...]

  • Página 85

    VLAN Commands 85 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear security l2-restrict Removes one or more MAC addresses fro m the list of destination MAC addresses to which clients in a VLAN are allowed to send traf fic at Layer 2. Syntax clear security l2-r estrict vlan vlan-id [ permit-mac mac-addr [ mac-addr ] | all ] Def[...]

  • Página 86

    86 VLAN Commands NN47250-1 00 (Versio n 02.51) Defaults If you do not specify a VLAN or all , counters for all VLANs are cleared. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage T o clear MA C addresses from the list of addresses to which clients are allo wed to send data, use the clear security l2 -restrict command instead. [...]

  • Página 87

    VLAN Commands 87 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command removes port 1 from VLAN gr een : WSS# clear vlan green port 1 This may disrupt user connectivi ty . Do you wish to continue? (y/n) [n] y success: change accepted. The following command removes port 4, which uses tag value 69, from VLA[...]

  • Página 88

    88 VLAN Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command adds a permanent entry for MA C addres s 00:11:22:aa :bb:cc on ports 3 and 5 in VLAN blue : WSS# set fdb perm 00:11:22:aa:b b:cc port 3,5 vlan blue success: change accepted. The following command adds a st atic entry for MAC add ress 00: 2b:3c:4d:5e:6f on port 1 in the d[...]

  • Página 89

    VLAN Commands 89 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set security l2-restrict vlan vlan-i d [ mode { enable | disable }] [ permit-mac mac-addr [ mac-addr ]] Defaults Layer 2 restriction is disab led by default. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Y ou can specify multiple a ddr[...]

  • Página 90

    90 VLAN Commands NN47250-1 00 (Versio n 02.51) Nortel recommends that you do not use the name default . This name is already used for VLAN 1. Nortel also recommends that you do not rename the default VLAN. You cannot use numbers in the VLAN name. Nortel re commends that you do not use the same name with different capitalizations for VLANs. For exam[...]

  • Página 91

    VLAN Commands 91 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command adds port 16 to VLAN beige and assigns tag value 86 to the port: WSS# set vlan be ige port 16 tag 86 success: change accepted. See Also • clear vlan on page 76 • set vlan name on page 79 • show vlan conf ig on page 89 set vlan tunnel-affin[...]

  • Página 92

    92 VLAN Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access All. Usage T o display the entire forwarding database, enter the show fdb command without options. T o display only a portion of the data base, use optional parame ters to specify the types of entries you want to display . Examples The follo wing command displays all entries in th[...]

  • Página 93

    VLAN Commands 93 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear fdb on page 74 • set fdb on page 77 show fdb agingtime Displays the aging timeout period for forwarding database entries. Syntax show fdb agingtime [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command displays the aging tim[...]

  • Página 94

    94 VLAN Commands NN47250-1 00 (Versio n 02.51) See Also set fdb agingtime on page 78 show fdb count Lists the number of entries in the forwarding database. Syntax show fdb count { perm | static | dyn amic } [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command lists the number of dyna mic entries that the forwarding d atabase [...]

  • Página 95

    VLAN Commands 95 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage The output displays roaming stations within the previous 1 second. Examples T o display all stations roaming to the WSS, type the follo wing command: WSS # show r oaming station User Name Station Address VLAN State ---------------------- -- --------------- ----[...]

  • Página 96

    96 VLAN Commands NN47250-1 00 (Versio n 02.51) Syntax show r oam ing vlan Defaults None. Access Enabled. Examples The follo wing com mand sho ws the current roa ming VLANs: WSS# show r oaming vlan[...]

  • Página 97

    VLAN Commands 97 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference VLAN WSS Affinity -------- -- ------ ---- ------ -- --- ------ -- vlan-cs 192.168.14.2 5 vlan-eng 192.168.14.4 5 vlan-fin 192.168.14.2 5 vlan-it 192.168.14.4 5 vlan-it 192.168.14.2 5 vlan-pm 192.168.14.2 5 vlan-sm 192.168.14.2 5 vlan-tp 192.168.14.4 5 vlan-tp 192.168[...]

  • Página 98

    98 VLAN Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command sho ws Layer 2 forw arding restriction information for all VLANs: WSS# show security l2-r estrict VLAN Name En Drops Permit MAC Hits ---- ----- -- --------- -- ------ -- -- ------- -------- ---- --- --- -------- ------- 1 default Y 0 00:0b:0e:02:53:3e 5947 00:30:b6:3e:5c[...]

  • Página 99

    VLAN Commands 99 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o display all tunnels from a WSS to other swit ches in the Mobility Doma in, type the follo wing command. WSS # show tunnel VLAN Local Address Remote Address State Port L VID R VID --------------- --------------- ------ --------- ------- ----- ----- ----- [...]

  • Página 100

    100 VLAN Commands NN47250-1 00 (Versio n 02.51) WSS# show vlan conf ig b urgundy Admin VLAN T unl Port VLAN Name S tatus S tate Affin Port T ag S tate ---- ----- -- --------- ------ -- -- - ----- ---- -------- ---- --- -- ---------- -------- 2 bur gundy Up Up 5 2 none Up 3 none Up 4 none Up 6 none Up 1 1 none Up t:10.10.40.4 none Up Table 16 descri[...]

  • Página 101

    VLAN Commands 101 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear vlan on page 76 • set vlan name on page 79 • set vlan port on page 80 • set vlan tunnel-aff inity on page 81[...]

  • Página 102

    102 VLAN Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 103

    103 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Quality of Ser vice Commands Use Quality of Service (QoS) commands to configure packet prioritization in WSS Software. Pack et prioritization ensures that WSSs and APs give pr eferential treatment to high- priority traffic such as voice and v ideo. (To override the prioritiz atio[...]

  • Página 104

    104 Quality of Service Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command resets all QoS mappings: WSS# clear qos success: change accepted. The following command resets the mapping used to classify packets with DSCP value 44: WSS# clear qos dscp-to-qos-map 44 success: change accepted. set qos cos-to-dscp-map Changes the value to[...]

  • Página 105

    Quality of Service Commands 105 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set qos dscp-to-cos-map Changes the internal QoS value to whic h WSS Software maps a pa cket’s DSCP value when classifying inbound packets. Syntax set qos dscp-to-cos-map dscp-r ange cos level Defaults The defau lts are listed by the show qos command[...]

  • Página 106

    106 Quality of Service Commands NN47250-1 00 (Versio n 02.51) Ingress QoS Classification Map (dscp-to-cos) Ingress DS CP Co S Level ======== ======== ========= ======== ====== ======== ========= ======== ======== ====== = 00-09 0 0 0 0 0 0 0 0 1 1 10-19 1 1 1 1 1 1 2 2 2 2 20-29 2 2 2 2 3 3 3 3 3 3 30-39 3 3 4 4 4 4 4 4 4 4 40-49 5 5 5 5 5 5 5 5 6 [...]

  • Página 107

    107 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference IP Ser vices Commands Use IP services commands to configur e and manage IP interface s, management servic es, the Domain Na me Service (DNS), Network Time Protocol (NTP), and aliases, and to ping a host or trace a rou te. This chapter pr esents IP service s commands alphabeti cal[...]

  • Página 108

    108 IP Services Commands NN47250-1 00 (Versio n 02.51) Time and Date set timedate on page 142 set timezone on page 143 set summertime on page 140 show timedate on page 161 show timezone on page 161 show summertime on page 160 clear timezone on page 106 clear summertime on page 105 NTP set ntp on page 121 set ntp server on page 122 set ntp update-in[...]

  • Página 109

    IP Services Commands 109 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear interface Removes an IP interface. Syntax clear interface vlan-id ip Defaults None. Access Enabled. Usage If the interface you w ant to remov e is conf igured as the system IP address, remo ving the address can interfere with system ta sks that use the [...]

  • Página 110

    110 IP Services Commands NN47250-1 00 (Versio n 02.51) clear ip alias Removes an alias, which is a string that repres ents an IP a ddress. Syntax clear ip alias name Defaults None. Access Enabled. Examples The following command removes the alia s server1 : WSS# clear ip alias serv er1 success: change accepted. See Also • set ip alias on page 113 [...]

  • Página 111

    IP Services Commands 111 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear ip dns server Removes a DNS server from a WSS configuratio n. Syntax clear ip dns serv er ip-addr Defaults None. Access Enabled. Examples The follo wing command remove s DNS server 10.10.10 .69 from a WSS’ s conf iguration: WSS# clear ip dns serv er 1[...]

  • Página 112

    112 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • set ip route on page 116 • show ip r oute on page 153 clear ip telnet Resets the Teln et server’s TCP port n umber to its defa ult value. A WSS listens for Teln et management tr affic on the Telnet server port. Syntax clear ip telnet Defaults The default T elnet port number is [...]

  • Página 113

    IP Services Commands 11 3 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ntp on page 121 • set ntp serv er on page 122 • set ntp update-in terval on page 122 • show ntp on page 156 clear ntp update-interval Resets the NTP update interval to the default value. Syntax clear ntp update-int erval Defaults The default NT[...]

  • Página 114

    114 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • set snmp community on page 123 • show snmp c ommunit y on p age 158 clear snmp notify profile Clears an SNMP not ification profile. Syntax clear snmp notify prof ile pr of i le-name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo[...]

  • Página 115

    IP Services Commands 11 5 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set snmp notify target on page 131 • show snmp notify target on page 159 clear snmp usm Clears an SNMPv3 user. Syntax clear snmp usm usm-user name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The fol[...]

  • Página 116

    116 IP Services Commands NN47250-1 00 (Versio n 02.51) • show timedate on page 161 • show timezone on page 161 clear system ip-address Clears the sy stem IP address. Syntax clear system ip-address Defaults None. Access Enabled. Usage Clearing the system IP addr ess can interfere with system tasks that use the system IP address, including the fo[...]

  • Página 117

    IP Services Commands 11 7 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear summertime on page 105 • set summertime on page 140 • set timedate on page 142 • set timezone on page 143 • show summertime on page 160 • show timedate on page 161 • show timezone on page 161 ping Tests IP connectivity between [...]

  • Página 118

    118 IP Services Commands NN47250-1 00 (Versio n 02.51) • interval —100 (one tenth of a second) • size —56. Access Enabled. Usage T o stop a ping command that is in progress, press Ctrl+C. A WSS cannot ping itself. WSS Sof t ware does not supp ort this. Examples The follo wing command pings a de vi ce that has IP address 10.1.1.1: WSS# ping [...]

  • Página 119

    IP Services Commands 11 9 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set arp agingtim e on page 109 • show arp on page 144 set arp agingtime Changes the aging timeout for dynamic ARP entries. Syntax set arp agingtime seconds Defaults The default aging tim eout is 1200 seconds. Access Enabled. Usage Aging applie[...]

  • Página 120

    120 IP Services Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. Usage Y ou can assign one IP in terfac e to each VLAN. If an interface is already configured on the VLAN you specif y, this command replaces the interface. If you replace an interface that is in use as the syst em IP address, replacing the inte rface can interfere[...]

  • Página 121

    IP Services Commands 121 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS Software also has a con figurable DHCP server. (See set interface dhcp-ser ver on page 111 .) You can configure a DHCP client and DHCP server on the same VLAN, but only the client or the serv er can be enabled. The DHCP client and DHCP server cannot both [...]

  • Página 122

    122 IP Services Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Usage By default, all addresses e xcept the host address of the VLAN, th e network broadcast address, and the subnet broadcast addr ess are included in the range. If you specify th e range, the start address must be lo wer than the stop address, an d all addre sses must [...]

  • Página 123

    IP Services Commands 123 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults IP interfac es are enabled by defaul t. Access Enabled. Examples The follo wing command disables the IP interf ace on VLAN ma uve : WSS# set interface ma uv e status down success: set interface mauve to down See Also • clear interface on page 99 ?[...]

  • Página 124

    124 IP Services Commands NN47250-1 00 (Versio n 02.51) Access Enabled. Examples The follo wing command enables DNS on a WSS: WSS# set ip dn s enable St a r t D N S C l i e n t See Also • clear ip dns domain on page 100 • clear ip dns server on page 101 • set ip dns domain on page 114 • set ip dns serv er on page 115 • show ip dns on page [...]

  • Página 125

    IP Services Commands 125 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ip dns server Specifies a DNS server to use for resolv ing hostnames you enter in CLI commands. Syntax set ip dns serv er ip-addr { primary | secondary } Defaults None. Access Enabled. Usage Y ou can configure a WSS to use one primary DNS serv er and up t[...]

  • Página 126

    126 IP Services Commands NN47250-1 00 (Versio n 02.51) set ip https server Enables the HT TPS server on a WSS. The HTTPS server is required for We b View access to the s witch. Syntax set ip https serv er { enable | disab le } Defaults The HTTPS server is disabled by default. Access Enabled. Examples The follo wing command enables the HTTPS server [...]

  • Página 127

    IP Services Commands 127 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. Usage WSS Software can use a st atic route only if a direct route in the route ta ble resolves the static route. WSS Softwa re adds routes with next-hop types Lo cal and Direct when you add an IP interface to a VLAN, if the VLAN[...]

  • Página 128

    128 IP Services Commands NN47250-1 00 (Versio n 02.51) • clear ip route on page 101 • show interface on page 149 • show ip r oute on page 153 set ip snmp server Enables or disables the SNMP service on the WSS. Syntax set ip snmp server { enable | disable } Defaults The SNMP service is disabled by default. Access Enabled. Examples The follo wi[...]

  • Página 129

    IP Services Commands 129 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command changes the SSH port number on a WSS to 6000: WSS# set ip ssh port 6000 success: change accepted. See Also • set ip ssh serv er on page 119 • set ip ssh serv er on page 119 • set ip ssh serv er on page 119 set ip ssh serv[...]

  • Página 130

    130 IP Services Commands NN47250-1 00 (Versio n 02.51) set ip telnet Changes the TCP port number on which a WSS listen s for Telnet management tra ffic. Syntax set ip telnet port -num Defaults The default T elnet port number is 23. Access Enabled. Examples The follo wing command changes the T elnet port number on a WSS to 5000: WSS# set ip teln et [...]

  • Página 131

    IP Services Commands 131 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage The maximum number of T elnet sessions s upported on a WSS is eight. If SSH is also enabled, the switch can have up to eight T elnet or SSH sessions, in an y combination, and one console session. Examples The following command enables the T elnet server[...]

  • Página 132

    132 IP Services Commands NN47250-1 00 (Versio n 02.51) set ntp server Configures a WSS t o use an NTP server. Syntax set ntp ser ver ip-addr Defaults None. Access Enabled. Usage Y ou can configure up to three NTP serv ers. WSS Software queries all the servers and selects the best respons e based on the method de scribed in RFC 1305, Network T i me [...]

  • Página 133

    IP Services Commands 133 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ntp serv er on page 102 • clear ntp update-interv al on page 103 • set ntp on page 121 • set ntp serv er on page 122 • show ntp on page 156 set snmp community Configures a community string for SNMPv1 or SNMPv2c. Syntax set snmp comm[...]

  • Página 134

    134 IP Services Commands NN47250-1 00 (Versio n 02.51) History Usage SNMP community strings are passed as cl ear te xt in SNMPv1 and SNMPv2c . Nortel recommends that you use strings that cannot easily be guessed by unauthor ized users. F or example, do not use the well- kno wn strings public and private . If you are using SNMPv3, you can confi gure[...]

  • Página 135

    IP Services Commands 135 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set snmp notify profile Configures an SNMP notification profile. A notifica tion pr of ile is a named li st of all the notification types that can be generated by a switch, and for each notification type, the action to take (drop or send) when an event occurs[...]

  • Página 136

    136 IP Services Commands NN47250-1 00 (Versio n 02.51) notification-type Name of the notif ication type: • APBootT raps— Generated when an AP boots. • ApNonOperS tatusT raps —Generated to indicate an AP radio is nonoperational. • ApOperRadioS tatusT raps —Generated when the status of an AP radio changes. • AP T imeoutT raps— Generat[...]

  • Página 137

    IP Services Commands 137 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference notification-type (cont.) • CounterMeasur eS topT raps— Generated when WSS Software stops counterm easures against a rogue access point. • DAPConnectW arningT raps —Generated whe n a Distributed AP whose fingerprint has not been configured in WSS Soft[...]

  • Página 138

    138 IP Services Commands NN47250-1 00 (Versio n 02.51) Defaults A default notif ication profile (named default ) is already conf igured in WSS Software. All notif ications in the def ault profile are dropped by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command changes the action in the defaul[...]

  • Página 139

    IP Services Commands 139 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following commands cr eate notification profile snmppr of_rfdetect , and change the action to send for all R F detection notific ation types: WSS# set snmp notif y prof i le snmppr of_r fdetect send RFDetectAdhocUserT raps success: change accepted. WSS# s[...]

  • Página 140

    140 IP Services Commands NN47250-1 00 (Versio n 02.51) • show snmp notify pr ofile on page 158[...]

  • Página 141

    IP Services Commands 141 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set snmp notify target Configures a not ification target f or notifications from SNMP. A notification ta rget is a remote de vice to which W SS Software sends SNMP notif ications. You can configure the WSS Software SNMP engine to send confirmed not ifications[...]

  • Página 142

    142 IP Services Commands NN47250-1 00 (Versio n 02.51) SNMPv3 with T raps To configure a notification ta rget for traps f rom SNMPv3, use the following command: Syntax set snmp notify target tar get-num ip -addr [: udp-port-num ber ] usm trap user username [ prof ile pr ofile-name ] [ security { unsecured | authenticated | encrypted }] ret r ie s n[...]

  • Página 143

    IP Services Commands 143 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SNMPv2c with Inf orms To configure a notification ta rget for informs from SNMPv2c , use the following command: Syntax set snmp notify target tar get-num ip -addr [: udp-port-num ber ] v2c community-s tring inf orm [ prof ile pr ofile-name ] [ ret r i es num [...]

  • Página 144

    144 IP Services Commands NN47250-1 00 (Versio n 02.51) SNMPv1 with T raps To configure a notification ta rget for traps f rom SNMPv1, use the following command: Syntax set snmp notify target tar get-num ip -addr [: udp-port-num ber ] v1 community- string [ prof ile pr ofile-name ] Defaults The default UDP port number on the tar get is 162. The def [...]

  • Página 145

    IP Services Commands 145 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ip snmp server on page 118 • set snmp community on page 123 • set snmp notify pr of ile on page 125 • set snmp protocol on page 135 • set snmp security on page 13 6 • set snmp usm on page 136 • show snmp notify target on page 159 set snmp [...]

  • Página 146

    146 IP Services Commands NN47250-1 00 (Versio n 02.51) set snmp security Sets the minimum level of se curity WSS So ftware requires for SN MP message exc hanges. Syntax set snmp security { unsecured | authe nticated | encrypted | auth-req-unsec-notify } Defaults By default, WSS Software allo ws nonsecure ( unsecured ) SNMP message exchanges. Access[...]

  • Página 147

    IP Services Commands 147 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set snmp usm usm-username snmp-engine-id { ip ip-addr | local | hex hex-string } access { read-only | r ead-notify | notify- only | read-write | notify- read-write } auth-type { none | md5 | sha } { auth-pass-phrase string | auth-key he x-string } encr[...]

  • Página 148

    148 IP Services Commands NN47250-1 00 (Versio n 02.51) access { re ad-only | r ead-notify | notify-only | rea d- w ri t e | notify-read-write } Specif ies the access level of the user: • rea d - o n l y —An SNMP management application using th e string can get (read) object values on the switch but cannot set (write) them. • rea d - n o t if [...]

  • Página 149

    IP Services Commands 149 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults No SNMPv3 users are conf igured by defa ult. Wh en you configure an SNMPv3 user , the default access is re ad - on l y , and the def ault authentica tio n and encryption types are both none . Access Enabled. History Introduced in WSS Software V ersio[...]

  • Página 150

    150 IP Services Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command creates USM user snmpmgr1 , associat ed with the local SNMP engine ID. This user can se nd traps to notif ication re cei vers. WSS# set snmp us m snmpmgr1 snmp-engine- id local success: change accepted. The following command creates USM user securesnmpmgr1 , whic[...]

  • Página 151

    IP Services Commands 151 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults If you do not specify a start and end time, th e system implements the time change starting at 2:00 a.m. on the first Sunday in April and ending at 2:00 a.m. on the last Sunday in October , according to the North American standard. Access Enabled. Us[...]

  • Página 152

    152 IP Services Commands NN47250-1 00 (Versio n 02.51) Access Enabled. Usage Y ou must use an address that is co nfigured on one o f the WSS’ s VLANs. To display th e system IP address, use the show system command. Examples The following commands conf i gure an IP interface on VLAN taupe and conf igure the interf ace to be t he system IP address:[...]

  • Página 153

    IP Services Commands 153 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • clear timezone on page 106 • set summertime on page 140 • set timezone on page 143 • show summertime on page 160 • show timedate on page 161 • show timezone on page 161 set timezone Sets the number of hou rs, and optionally the number of minutes[...]

  • Página 154

    154 IP Services Commands NN47250-1 00 (Versio n 02.51) show arp Displays the ARP table. Syntax show arp [ ip-addr ] Defaults If you do not specify an IP address, the whole ARP table is displayed. Access All. Examples The follo wing command displays ARP entries: WSS # show arp ARP aging time: 1200 secon ds Host HW Address VLAN T ype State ----------[...]

  • Página 155

    IP Services Commands 155 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set arp on page 108 • set arp agingtim e on page 109 show dhcp-client Displays DHCP client in formation for all VLANs. Syntax show dhcp-client Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. T ype Entry type: • DYN[...]

  • Página 156

    156 IP Services Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command displa ys DHCP client information: WSS# show dhcp-client Interface: corpvlan(4) Configuration Status: Enabled DHCP S tate: IF_UP Lease Allocation: 65535 seconds Lease Remaining: 65532 seconds IP Address: 10.3.1.1 10 Subnet Mask: 255.255.255.0 Default Gateway: 10.[...]

  • Página 157

    IP Services Commands 157 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set interface dhcp-client on page 1 10 show dhcp-server Displays WSS Software DHCP server information. Syntax show dhcp-serv er [ interface vlan-id ] [ verbose ] Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. Examples The[...]

  • Página 158

    158 IP Services Commands NN47250-1 00 (Versio n 02.51) T able 3.Output f or show dhcp-ser ver Field Description VLAN VLAN number . Name VLAN name. Address IP address leased by the server . MA C Address MA C address of the de vice that holds the lease for the address. Lease Remaining Number of seconds rema ining before the address lease expires. T a[...]

  • Página 159

    IP Services Commands 159 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set interface dhcp-server on page 1 1 1 show interface Displays the IP interface s configured on the WSS. Syntax show interface [ vlan-id ] Defaults If you do not specify a VLAN ID, interf aces for all VLANs are displayed. Access All. History Usage T[...]

  • Página 160

    160 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear interface on page 99 • set interface on page 109 • set interface status on page 112 show ip alias Displays the IP aliase s configured on the WSS. Syntax show ip alias [ name ] Defaults If you do not specify an alias na me, all aliases are displayed. Access Enabled. Exampl[...]

  • Página 161

    IP Services Commands 161 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Table 22 describes the fields in this display. See Also • clear ip alias on page 100 • set ip alias on page 113 show ip dns Displays the DNS servers the WSS is configured to use. Syntax show ip dns Defaults None. Access All. Examples The follo wing comman[...]

  • Página 162

    162 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear ip dns domain on page 100 • clear ip dns server on page 101 • set ip dns on pa ge 113 • set ip dns domain on page 114 • set ip dns serv er on page 115 show ip https Displays information about the HTTPS management port. Syntax show ip https Defaults None. Access All. E[...]

  • Página 163

    IP Services Commands 163 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ip telnet on page 1 02 • set ip https server on page 116 • set ip telnet on page 120 • set ip telnet server on page 120 • show ip telnet on page 155 show ip route Displays the IP route table. Syntax show ip ro ute [ destination ] De[...]

  • Página 164

    164 IP Services Commands NN47250-1 00 (Versio n 02.51) Usage When you add an IP interf ace to a VLAN that is up, WSS Software adds direct and local routes for the interface to the route table. If the VLAN is do wn, WSS So ftware does not add the routes. If you add an interf ace to a VLAN b ut the routes for that interf ace do not appear in the rout[...]

  • Página 165

    IP Services Commands 165 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ip route on page 101 • set interface on page 109 • set ip route on page 116 • show interface on page 149 • show vlan conf ig on page 89 show ip telnet Displays information about the Telnet management port. Syntax show ip telnet Defa[...]

  • Página 166

    166 IP Services Commands NN47250-1 00 (Versio n 02.51) See Also • clear ip telnet on page 1 02 • set ip https server on page 116 • set ip telnet on page 120 • set ip telnet server on page 120 • show ip https on page 152 show ntp Displays NTP client infor mation. Syntax show ntp Defaults None. Access All. Examples T o display NTP informati[...]

  • Página 167

    IP Services Commands 167 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear ntp serv er on page 102 • clear summertime on page 105 • clear timezone on page 106 • set ntp on page 121 T able 11: Output f or show ntp Field Description NTP client State of the NTP cl ient. The state ca n be one of the following: ?[...]

  • Página 168

    168 IP Services Commands NN47250-1 00 (Versio n 02.51) • set ntp serv er on page 122 • set summertime on page 140 • set timezone on page 143 • show timezone on page 161 show snmp community Displays the configured SNMP community str ings. Syntax show snmp community Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.[...]

  • Página 169

    IP Services Commands 169 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show snmp notify target Displays SNMP notification targets. Syntax show snmp notify target Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. See Also • clear snmp notify target on page 104 • set snmp notify target on page 131[...]

  • Página 170

    170 IP Services Commands NN47250-1 00 (Versio n 02.51) show snmp usm Displays information about SNMPv3 users. Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. See Also • clear snmp usm on page 105 • show snmp usm on page 160 show summertime Shows a WSS’s offset from its real-time clock. Syntax show summertime De[...]

  • Página 171

    IP Services Commands 171 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show timedate Shows the date and time of day curre ntly set on a WSS’s real-time clock. Syntax show timedat e Defaults None. Access All. Examples T o display the time an d date set on a WSS’ s real-time clock, type the follo wing command: 23x0# show timed[...]

  • Página 172

    172 IP Services Commands NN47250-1 00 (Versio n 02.51) telnet Opens a Teln et client sess ion with a remote device. Syntax telnet { ip-addr | hostname } [ port port-num ] Defaults WSS Software a ttempts to estab lish T eln et connections with TCP port 23 by default. Access Enabled. Usage T o end a T elnet session from the remo te de vice, press Ctr[...]

  • Página 173

    IP Services Commands 173 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference When the administrator presses Ctrl+t to end the Telnet connection, the management session returns to the local WSS prompt: WSS-r emote> Session 0 pty tt y2.d terminated tt name tty 2.d WSS# See Also • clear sessions on page 435 • show sessions on page[...]

  • Página 174

    174 IP Services Commands NN47250-1 00 (Versio n 02.51) WSS # traceroute ser ver1 traceroute to server1.example.com (192. 168.22.7), 30 hops max, 38 by te packets 1 engineering-1.example.com ( 192.168.192.206) 2 ms 1 ms 1 ms 2 engineering-2.example.com ( 192.168.196.204) 2 ms 3 ms 2 ms 3 gateway_a.example.com ( 192.168.1.201) 6 ms 3 ms 3 ms 4 server[...]

  • Página 175

    175 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference AAA Commands Use authentication, authoriz ation, and accounting (AAA) commands to prov ide a secure network connection and a record of user activity. Location policy comma nds override any virtual LAN (VLAN) or security ACL assignment by AAA or the loca l WSS database to help you[...]

  • Página 176

    176 AAA Commands NN47250-1 00 (Versio n 02.51) clear accounting Removes accounting services for spec ified wireless users with administ rative access or network access. Syntax clear accounting { admin | dot1x | system } { user-wildcar d } clear mac-usergr oup attr on page 174 clear mac-user group on page 173 clear mac-usergr oup on page 174 W eb au[...]

  • Página 177

    AAA Commands 177 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Examples The follo wing command remove s accounting se rvices for authorized n etwork user Nin: WSS# clear accounting dot1x Nin success: change accepted. See Also • set accounting {admin | console} on page 178 • set accounti[...]

  • Página 178

    178 AAA Commands NN47250-1 00 (Versio n 02.51) Access Enabled. Examples The follo wing command clears auth entication for administrator Jose: WSS# clear authentication admin Jose success: change accepted. See Also • clear authentication console on page 168 • clear authentication dot1x on page 169 • clear authentication mac on page 170 • cle[...]

  • Página 179

    AAA Commands 179 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference success: change accepted. See Also • clear authentication admin on page 1 67 • clear authentication dot1x on page 169 • clear authentication mac on page 170 • clear authentication web on page 171 • set authentication console on pa ge 183 • show aaa on pag[...]

  • Página 180

    180 AAA Commands NN47250-1 00 (Versio n 02.51) clear authentication mac Removes a MAC authentication rule. Syntax clear authentication mac { ssid ssid-name | wired } mac-addr -wildcar d Defaults None. Access Enabled. Examples The follo wing command rem ov es a MA C authenti cation rule for access to SSID thatcorp by MA C addresses beginn ing with a[...]

  • Página 181

    AAA Commands 181 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set authentication proxy on page 190 • show aaa on page 210 clear authentication web Removes a Web-based AAA rule. Syntax clear authentication web { ssid ssid-name | wir ed } user -wildcar d Defaults None. Access Enabled. Examples The follo wing comman[...]

  • Página 182

    182 AAA Commands NN47250-1 00 (Versio n 02.51) Usage T o determine the index numbers of location polic y rules, use t he sho w location p olicy command. Remo ving all the A CEs from the loc ation policy disab les this function on the WSS. Examples The follo wing command remove s location pol icy rule 4 from a WSS’ s location policy: WSS# clear lo[...]

  • Página 183

    AAA Commands 183 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax clear mac-user mac-addr attr attribute-name Defaults None. Access Enabled. Examples The follo wing comma nd remov es an access control list (A CL ) from the prof ile of a user at MA C address 01:02:03:04:05:06: WSS# clear mac-user 01:02:03:0 4:05:06 attr filte[...]

  • Página 184

    184 AAA Commands NN47250-1 00 (Versio n 02.51) clear mac-usergroup Removes a user group from the loca l database on the WSS, for a group of users who are authenticated by a MAC address. (To delete a MAC user group in RADIUS, se e the documentation for your RADIUS server.) Syntax clear mac-usergr oup gr oup-name Defaults None. Access Enabled. Usage [...]

  • Página 185

    AAA Commands 185 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS# clear mac-usergr oup eastc oasters attr vlan-name success: change accepted. See Also • clear mac-usergr oup on page 174 • set mac-usergr oup attr on page 203 • show aaa on page 210 clear mobility-profile Removes a Mobility Profile entirely. Syntax clear mo[...]

  • Página 186

    186 AAA Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing comma nd deletes th e user prof ile for user Nin: WSS# clear user Nin success: change accepted. See Also • set user on page 206 • show aaa on page 210 clear user attr Removes an authorization attribute from the use r profile in the local dat abase on the WSS, for a user with[...]

  • Página 187

    AAA Commands 187 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear user group Removes a user with a password from membersh ip in a user group in the local database on the WSS. (To remove a user from a user grou p in RADIUS , see the documentation for your RADIUS server.) Syntax clear user username gr oup Defaults None. Access [...]

  • Página 188

    188 AAA Commands NN47250-1 00 (Versio n 02.51) • set usergr oup on page 208 • show aaa on page 210 clear usergroup attr Removes an authorization attribute from a us er group in the local database on the WSS. (To remove an authorization attribute in RADI US, see the documentation for your RADIUS server.) Syntax clear usergr oup gr oup-name attr [...]

  • Página 189

    AAA Commands 189 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Accounting is disabled for all users by default. Access Enabled. Usage For netw ork users with start-st op accounting whose records are se nt to a RADIUS serv er , WSS Software sends interim updates to the RADIUS server when the user roams. Examples The foll[...]

  • Página 190

    190 AAA Commands NN47250-1 00 (Versio n 02.51) Syntax set accounting { dot1x | mac | we b | last-resort } { ssid ssid-name | wired } { user- wildcar d | mac-addr -wildcar d } { start-stop | stop-only } method1 [ metho d2 ] [ method3 ] [ met hod4 ] Defaults Accounting is disabled for all users by default. Access Enabled. dot1x Users with network acc[...]

  • Página 191

    AAA Commands 191 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage For netw ork users with start- stop accounting whose records ar e sent to a RADIUS server , WSS Software sends interim updates to the RADIUS server when the user roams. Examples The follo wing command issues stop-only records to the RADIUS serv er group sg2 for[...]

  • Página 192

    192 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear accounting on page 1 66 • show accounting statistics o n page 212 set authentication admin Configures authentic ation and defines where it is perfo rmed for specifie d users wi t h adminis trative acce ss through Telnet or Web View. Syntax set authenticatio n admin user - wildcar d[...]

  • Página 193

    AAA Commands 193 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults By default, authentication is deacti v ated for all ad min users. The def ault authentica tion method in an admin au thentication rul e is local . WSS Software checks the loca l WSS database for auth entication. Access Enabled. . Usage Y ou can configure dif[...]

  • Página 194

    194 AAA Commands NN47250-1 00 (Versio n 02.51) Syntax set authenticatio n console user - wildcar d method1 [ metho d2 ] [ method3 ] [ met hod4 ] Defaults By defa ult, authentica tion is deact iv at ed for all console users, and the default authentication method in a cons ole authentication rule is none . WSS Software requires no username or passwor[...]

  • Página 195

    AAA Commands 195 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. . Usage Y ou can configure dif ferent authen tication methods for dif ferent groups of users. (For details, see “User W ildcards, MA C Address W ildca rds, and VLAN W ildcards” on page 12 .) If you specify multiple authentication methods in the se[...]

  • Página 196

    196 AAA Commands NN47250-1 00 (Versio n 02.51) user-wildcar d A single user or a set of users with 802.1X network access. Specify a username, use the double-asterisk wildcard character (**) to specify all usernames, or use the single-asterisk wi ldca rd character (*) to specify a set of usernames up to or follo wing the f irst delimi ter character?[...]

  • Página 197

    AAA Commands 197 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference pr otocol Protocol used for authentication. Specify one of the follo wing: • eap-md5 —Extensible Authenticatio n Protocol (EAP) with message-digest algorithm 5. For wire d authentication clients : • Uses challenge-response to compare hashes •P r o v i d e s n[...]

  • Página 198

    198 AAA Commands NN47250-1 00 (Versio n 02.51) Defaults By default, auth entication is unconf igured for all clients with network access through AP ports or wired authentication por ts on the WSS. Connection, authorization, and accounting are also disable d for these users . Bonded authenticati on is disabled by default. Access Enabled. Usage Y ou [...]

  • Página 199

    AAA Commands 199 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set service-pr of ile auth-fallthru on page 308 • show aaa on page 210 set authentication last-resort Deprecated in WSS Software Version 5.0. T he last-r esort user is not required or supported in WSS Software Version 5.0. Instead, a user who accesses the netwo[...]

  • Página 200

    200 AAA Commands NN47250-1 00 (Versio n 02.51) Usage Y ou can configure dif ferent au th entication methods for dif fer ent groups of MA C addresses by “wildcarding. ” (For details, see “User W ildcards, MA C Address W i ldcards, and VLAN W ildcards” on page 12 .) If you specify multiple auth entication methods in the set authentication mac[...]

  • Página 201

    AAA Commands 201 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Usage AAA for third-party AP users has additi onal configuration re quirements. See the “Config uring AAA for Users of Third-Party APs” section in the “Configur ing AAA for Network Users” [...]

  • Página 202

    202 AAA Commands NN47250-1 00 (Versio n 02.51) Defaults By default, auth entication is unconf igured for all clients with network access through AP ports or wired authentication por ts on the WSS. Connection, authorization, and accounting are also disable d for these users . Access Enabled. Usage Y ou can configure dif ferent auth entication method[...]

  • Página 203

    AAA Commands 203 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set authentication admin on page 182 • set authentication console on pa ge 183 • set authentication dot1x on page 185 • show aaa on page 210 set location policy Creates and enables a location policy on a WSS. A location policy enables you to locally set or [...]

  • Página 204

    204 AAA Commands NN47250-1 00 (Versio n 02.51) Defaults By default, u sers are permitted VLAN access and assign ed security A CLs according to the VLAN-Name and Filter-Id attributes applied to the users during norma l authentic ation and au thorization. Access Enabled. Usage Only a single location policy is a llo wed per WSS. The location polic y c[...]

  • Página 205

    AAA Commands 205 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference •U s e inacl inacl-name to filter traf f ic that ente rs the switch from users via an AP access port or wired authentication port, or from the network via a network port. •U s e outacl outacl-name to filter traff ic sent from the s witch to users via an AP access[...]

  • Página 206

    206 AAA Commands NN47250-1 00 (Versio n 02.51) Syntax set mac-user mac-addr [ group gr oup-name ] Defaults None. Access Enabled. Usage WSS Software does not require MA C users to belong to user groups. Users authenticated by MAC address can be authenticate d only for network access thr ough the WSS. WSS Software does not support passwords for MAC u[...]

  • Página 207

    AAA Commands 207 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set mac-user attr Assigns an authorization attribute in th e local database on the WSS to a user w ho is authenticated by a MAC address. (To assign authorization at tributes through RADIUS, see the do cumentation for your RADIUS server.) Syntax set mac-user mac-addr [...]

  • Página 208

    208 AAA Commands NN47250-1 00 (Versio n 02.51) T able 1: A uthentication Attributes f or Local Users Attribute Description Valid Value(s) encryption-type T ype of encryption required for access by the client. Clients who attempt to use an unauthorized encryption method are rejected. Note: Encryption-T ype is a Nortel vendor -specif ic attribute (VS[...]

  • Página 209

    AAA Commands 209 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference fi lt er-i d (network access mode only) Security access control li st (A CL), to permit or den y traf fic recei ved (input) or sent (output) by the WSS. (For more information about security A CLs, see “Security A CL Commands” on page 449 .) Name of a n exist ing [...]

  • Página 210

    210 AAA Commands NN47250-1 00 (Versio n 02.51) service-type T ype of access the user is requesting. One of the following numbers: • 2 —Framed; for network user access • 6 —Administrative; for administrative access to the WSS, with authorization to access the enabled (configuration) mode. The user must enter the enable command and the correc[...]

  • Página 211

    AAA Commands 21 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference time-of-day (network access mode only) Day(s) and time(s) during which the user is permitted to log into the networ k. After authoriz ation, the user’ s session can last until either the T ime-Of-Day range or the Session- T imeout duration (if set) expires, whiche[...]

  • Página 212

    212 AAA Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command assigns i nput access cont rol list (A CL) acl-03 to f ilter the packets from a user at MA C address 01:02:03:04:05:06: WSS# set mac-us er 01:02:03:0 4:05:06 attr f i lter -i d acl-03.in success: change accepted. url (network access mode only) URL to which the user is re[...]

  • Página 213

    AAA Commands 213 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command restri cts a user at MAC address 06:05:04:03:02:0 1 to networ k access between 7 p.m. on Mondays and Wednesdays and 7 a.m. on Tuesdays and Thursdays: WSS# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-1159,tu0000 - 0700,we1900-1159,th0 [...]

  • Página 214

    214 AAA Commands NN47250-1 00 (Versio n 02.51) • show aaa on page 210 set mobility-profile Creates a Mobility Pr ofile and specifies th e AP and/ or wired authentication ports on the WSS through which any user assigned to the pr ofile is allowed ac cess. Syntax set mobility-p rof ile name name { port { none | all | p ort-list }} | { ap { none | a[...]

  • Página 215

    AAA Commands 215 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing commands crea te the Mobility Prof ile ma gnolia , which restrict s user access to port 12; enable the Mobility Prof ile feature on the WSS; and as sign the magnolia Mobility Prof ile to user Jos e . WSS# set mobili ty-pr of ile name magnolia [...]

  • Página 216

    216 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear mobility-prof ile on page 175 • set mobility-pr ofi le on page 204 • show mobility-prof ile on page 215 set user Configures a user profile in the local data base on the WSS for a user with a password. (To configure a user profile in RADIUS, s ee the documentation for your RADIUS [...]

  • Página 217

    AAA Commands 217 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command cha nges Nin’s password from goody to 29J an04: WSS# set user Nin passw ord 29Jan 04 See Also • clear user on page 175 • show aaa on page 210 set user attr Configures an authorization attribute in the loca l database on the WSS for a user [...]

  • Página 218

    218 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear user attr on page 176 • show aaa on page 210 set user group Adds a user to a user group. The user must have a passw ord and a profile that exists in the local database on the WSS. (To configure a user in RADIUS, see the documentation for your RADIUS server.) Syntax set user usernam[...]

  • Página 219

    AAA Commands 219 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set userg roup gr oup-na me attr attribute-name value Defaults None. Access Enabled. Usage T o change the value of an attrib ute, enter set usergroup attr with the ne w value . T o delete an attrib ute, use clear u sergr oup attr . To add a user to a group, us[...]

  • Página 220

    220 AAA Commands NN47250-1 00 (Versio n 02.51) History Usage This command disables or reenables support fo r W eb-based AAA. Ho we ver , W eb-based AAA has additional configuration re quirements. For information, see the “Configuring AAA fo r Netw ork Users” chapter in the Nortel WLAN Security Switch 2300 Series C onfigur ation Guide . Examples[...]

  • Página 221

    AAA Commands 221 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference sg3: rs-5 W eb Portal: enabled set authentication admin Jose sg3 set authentication con sole * none set authentication mac ssid mycorp * local set authentication dot1x ssid mycorp Geetha eap-tls set authentication do t1x ssid mycorp * peap-mschapv2 sg1 sg 2 sg3 set a[...]

  • Página 222

    222 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • set accounting {admin | console} on page 178 • set authentication admin on page 182 • set authentication console on pa ge 183 • set authentication dot1x on page 185 • set authentication mac on page 189 • set authentication web on page 191 show accounting statistics Displays the A[...]

  • Página 223

    AAA Commands 223 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax show accounting statistics Defaults None. Access Enabled. History Examples T o display the local ly stored accountin g records, type th e foll owi ng command: WSS# show accounting statistics Dec 14 00:39:48 Acct-Status-T ype=ST OP Acct-Authentic=0 Acct-Multi-S[...]

  • Página 224

    224 AAA Commands NN47250-1 00 (Versio n 02.51) See Also • clear accounting on page 1 66 • set accounting {admin | console} on page 178 • show aaa on page 210 T able 3: show accounting statistics Output Field Description Date and time Date and time of the accounting recor d. Acct-Status-T ype T ype of accounting record: •S T A R T •S T O P[...]

  • Página 225

    AAA Commands 225 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show location policy Displays the li st of locati on policy rules that make up the location policy on a WSS. Syntax show location policy Defaults None. Access Enabled. Examples The follo wing comma nd displays the list o f location polic y rules in the location polic[...]

  • Página 226

    226 AAA Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 227

    227 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Mobility Domain Commands Use Mobility Domain commands to confi gure and manage Mobility Domain groups. A Mobility Domain is a syste m of WSSs and APs working together to sup port a ro aming user (client ). One WSS a cts as a seed switch, which maintains and distributes a list of [...]

  • Página 228

    228 Mobility Domain Commands NN47250-1 00 (Versio n 02.51) clear mobility-domain Clears all Mobility Doma in configurat ion and information from a WSS, regardle ss of whether the WSS is a seed or a member of a Mobility Domain. Syntax clear mobility-domain Defaults None. Access Enabled. Usage This command has no ef fect if the WSS is no t configured[...]

  • Página 229

    Mobility Domain Commands 229 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set domain security { none | req u i red } Defaults The defau lt is none . ( WSS - WSS security is disabled. ) Access Enabled. History Introduced in WSS Software 5.0. Usage The setting must be the same ( none or requir ed ) on all switches, the see[...]

  • Página 230

    230 Mobility Domain Commands NN47250-1 00 (Versio n 02.51) success: change accepted. WSS# set mobility-domain member 192.168.1.10 success: change accepted. See Also • clear mobility-domain member on page 218 • show mobility-domain conf ig on page 222 set mobility-domain mode member seed-ip On a nonseed WSS, sets the IP address of the seed WSS. [...]

  • Página 231

    Mobility Domain Commands 231 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set mobility-domain mode member secondary-s eed-ip secondary-seed-ip-addr Defaults None. Access Enabled. History Introduced in WSS Software V ersion 6.0. Examples Follo wing is the e xample of m obility-domain secon dary-seed-ip. WSS# set mobility-[...]

  • Página 232

    232 Mobility Domain Commands NN47250-1 00 (Versio n 02.51) set mobility-domain mode secondary-seed domain- name seed-ip Creates a Mobility Domain by setting th e current WSS as the secondary seed device and naming th e Mobility Domain. Syntax set mobility-dom ain mode se condary-seed domain-name domain-name seed-ip seed- ip Defaults None. Access En[...]

  • Página 233

    Mobility Domain Commands 233 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax show mobility-domain Defaults None. Access Enabled. History Upgraded in WSS Software V ersion 6.0. Examples T o display Mobility Domain status, type the follo wing command: WSS# show mobilit y-domain Mobility Domain name: Santa Clara Member S tate [...]

  • Página 234

    234 Mobility Domain Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 235

    235 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Netw ork Domain Commands Use Network Domain commands to confi gure and manage Network Domain groups. A Network Domain is a group of geographically dispersed Mo bility Domains that shar e information among themselves over a WAN link. This shared information allows a user configure[...]

  • Página 236

    236 Network Do main Comman ds NN47250-1 00 (Versio n 02.51) See Also • set network-domain mode member seed-ip on page 227 • set network-domain peer on page 228 • set network-domain mode se ed domain-name on page 229 clear network-domain mode Removes the Network Domain seed o r member confi gurat ion from the WSS. Syntax clear network-domain m[...]

  • Página 237

    Network Domain Commands 237 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Usage This command has no ef fect if the WSS is no t configured as a Network Domain seed. Examples The follo wing command clears the Network Doma in peer configuration for peer 192.168.[...]

  • Página 238

    238 Network Do main Comman ds NN47250-1 00 (Versio n 02.51) Syntax set network-domain mo de member seed-i p ip-addr [ aff in ity num ] Defaults The defau lt af finity for a Network Domain seed is 5. Access Enabled. History Introduced in WSS Software 4.1. Usage Y ou can specify multiple Netw ork Domain seeds on the WSS. When the WSS needs to connect[...]

  • Página 239

    Network Domain Commands 239 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS Software 4.1. Usage This command must be entered on a WSS c onfigur ed as a Network Domain seed. Examples The follo wing command sets the WSS with IP ad dress 192.168.9.254 as a peer of this Netw ork Domain seed: WSS# set network-[...]

  • Página 240

    240 Network Do main Comman ds NN47250-1 00 (Versio n 02.51) Syntax show netw ork-domain Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Examples T o display Networ k Domain status, type the follo wing command. The output of th e command dif fers based on whether the WSS is a member of a Network Domain or a Netw ork Domain see[...]

  • Página 241

    Network Domain Commands 241 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear network-domain on page 225 • set network-domain mode member seed-ip on page 227 • set network-domain mode se ed domain-name on page 229 • set network-domain peer on page 228 State State of the WSS in the Network Domain: •U P •D[...]

  • Página 242

    242 Network Do main Comman ds NN47250-1 00 (Versio n 02.51)[...]

  • Página 243

    243 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference AP Commands Use AP commands to configure and ma nage APs. Be sure to do t he fo llowing before using the commands: • Define the country-specifi c IEEE 802.11 regulations on the WSS. (See set system countrycode on page 63 .) • Install the AP and connect it to a port on the WSS[...]

  • Página 244

    244 AP Commands NN47250-1 00 (Versio n 02.51) AP-WSS security set ap fingerprint on page 257 set ap security on page 274 Static IP Address Assignment fo r A P s set ap boot-config uration ip on page 251 set ap boot-config uration switch on page 255 set ap boot-config uration vlan on page 256 clear ap boot-conf iguration on page 241 show ap boot-con[...]

  • Página 245

    AP Commands 245 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-pr ofile ci pher -wep104 on page 314 set serv ice-prof il e ci pher -wep40 on page 315 set servic e-prof ile psk-phrase on page 322 set service-pr ofile psk-raw on page 323 set servic e-prof ile tk ip-mc-time on page 333 set servic e-prof ile wep a ctive-m[...]

  • Página 246

    246 AP Commands NN47250-1 00 (Versio n 02.51) set radio-prof ile rate-enf or cement on page 295 T ransmissi on re tries set s ervic e-pr of ile long-r etry-count on page 319 set servic e-prof ile shor t-retry-count on pag e 325 RF Au to-T uning set radio-prof ile au to-tune channel-conf ig on page 279 set radio-prof ile auto-tune channel-holddo wn [...]

  • Página 247

    AP Commands 247 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear ap image Clears an AirDefense sens or software im age file from an AP’s configuration . Syntax clear ap ap - number image Defaults None. Access Enabled. show ap conf ig on page 344 show ap status on pa ge 358 show ap counters on page 348 show ap global on page[...]

  • Página 248

    248 AP Commands NN47250-1 00 (Versio n 02.51) History Usage Use this command to conf igure an AP that had been con verted to an AirDefense sensor to re vert b ack to an AP . to loa d the softw are. Whe n you do this, the next time the AP is booted, it becomes a Nortel Mobili ty Point. Examples The following command causes the AirDefense sensor soft[...]

  • Página 249

    AP Commands 249 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ap local-switching vlan-pr of ile on page 260 • set vlan-prof ile clear ap radio Disables an AP radio and resets it to its factory default sett ings. Syntax clear { ap port-list | ap ap-num } radio { 1 | 2 | all } Defaults The clear ap radio command resets t[...]

  • Página 250

    250 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled History Usage When you clear a radio, WSS Software performs the following action s: • Clears the transmit po wer , channel, and external antenna setting from the radio. • Removes the radio from its radio profile and places the radio in the default radio profile. This command does not [...]

  • Página 251

    AP Commands 251 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear ap boot-configuration Removes the static IP address conf iguration for a AP. Syntax clear ap boot-configuration ap-num Defaults None. Access Enabled. History Introduced in WSS Software 4.1. O ption dap removed in 6.0. Usage When the static IP conf iguration is c[...]

  • Página 252

    252 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command clears radio 1 on AP 7 from the load balancing group to which it had been assigned: WSS# clear ap 7 radio 1 load-balancing group success : change accepted. See Also • set load-balancing strictness on page 277 • set ap radio load-balancing on pa ge 268 • set ap local[...]

  • Página 253

    AP Commands 253 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage If you specify a parameter , the settin g for the parameter is reset to its default value. The settings of the other parameters are u nchanged and the radio prof il e remains in the conf iguration. If you do not specify a parameter, the entire radio prof[...]

  • Página 254

    254 AP Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage If the service prof ile is mapped to a radio prof ile, you must remov e it from the radio prof ile first. (After disabling all radios that use the radio prof ile, use the clear radio-pr of ile name service- prof ile name command.) Examples The follo wing comm[...]

  • Página 255

    AP Commands 255 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference reset ap Restarts a n AP. Syntax res e t { ap port-list | ap ap-num } Defaults None. Access Enabled. Usage When you enter this command, the AP drops all sessions and reboots. Examples The follo wing command resets the AP on port 7: WSS# res e t a p 7 This will reset s[...]

  • Página 256

    256 AP Commands NN47250-1 00 (Versio n 02.51) Usage T able 35 lists the conf igurable pr ofile parameters and their defaults. The only parameter that requires configuration is the prof ile mode. The profile is disabl ed by default. T o use the profile to configu re APs, you must en able the prof ile using the set ap auto mode enable command. The pr[...]

  • Página 257

    AP Commands 257 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ap radio auto-tune max-power on page 265 • set ap radio mode on page 270 • set ap radio radio-pr of ile on page 271 • set ap upgrade-f irmwar e on page 275 set ap auto mode Enables a WSS’s profile for automatic AP configuration. Syntax set ap auto mode[...]

  • Página 258

    258 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set ap auto persistent [ ap-num | all ] Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Opt ion dap removed in 6 .0. Usage T o display the AP numbers assigned to Auto-APs, use the show ap status auto command. Examples The follo wing command con verts the conf ig uration of [...]

  • Página 259

    AP Commands 259 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage If you set the radiotype to 11a and the AP configuration prof ile is used to configure a two-radio AP model, radio 1 is configured as an 802.11b/g radio and radio 2 is configured as the 80 2.11a radi o. Because this is the re verse o f the standard conf [...]

  • Página 260

    260 AP Commands NN47250-1 00 (Versio n 02.51) Usage High bias is preferred ov er lo w bias . Bias applies only to WSSs that are indirect ly attached to t he AP through an intermediate Layer 2 or Laye r 3 network. An AP al ways attempts to boot on AP port 1 first, and if a WSS is directly attached on AP port 1, the AP al ways boots from it. If AP po[...]

  • Página 261

    AP Commands 261 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Changing the LED blink mode does no t alter operation of the AP. Onl y the behavi or of the LEDs is affected. Examples The follo wing command enables LED blink mode on the AP connected to ports 3 and 4: WSS# set ap 3-4 blink enable success: change accepted. set [...]

  • Página 262

    262 AP Commands NN47250-1 00 (Versio n 02.51) • show ap boot-conf iguration on page 370 set ap boot-configuration mesh mode Enables WLAN mesh services on the AP. Syntax set ap ap-number boot-configuration mesh mode {enable | disable} Defaults Disabled. Access Enabled. History Introduced in WSS V ersion 6.0. Usage Use this command to e nable WLAN [...]

  • Página 263

    AP Commands 263 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Use this command to conf igure the preshared k ey that a Mesh AP uses to authenticate to a Mesh Portal AP . Y ou must connect the AP to an WSS switch and enter this command to configure the AP for mesh servic es prior to de ploying the Mesh AP in its final untet[...]

  • Página 264

    264 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command conf igures AP7 to use a ra w PSK to authenticat e with a Mesh Portal AP: WSS# set ap 7 boot-configuration mesh psk-raw c25d3fe4483e867d1df96eaacdf8b 02451fa0836162e75 8100f5f6b87965e5 9d success: change accepted. See Also • set ap boot-conf iguration mesh ssid on page [...]

  • Página 265

    AP Commands 265 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set ap boot-conf iguration mesh mode on page 252 • set service-pr of ile mesh on page 320 • show ap mesh-links on page 357 set ap boot-configuration switch Specifies the WSS a AP contacts and attem pts to use as its boot device. Syntax set ap ap- num boot-conf[...]

  • Página 266

    266 AP Commands NN47250-1 00 (Versio n 02.51) See Also • clear ap boot-configuration on page 241 • set ap boot-conf iguration ip on page 25 1 • set ap boot-conf igura tion vlan on page 256 • show ap boot-conf iguration on page 370 set ap boot-configuration vlan Specifies 802.1Q VLAN taggi ng information for a AP. Syntax set ap ap-num boot-c[...]

  • Página 267

    AP Commands 267 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ap fingerprint Verifies an AP’s fingerprint on a WSS. If AP-WSS security is required by a WSS, an AP can es tablish a management session with the switch only if yo u have verified the AP’s identity by verifying its fingerpr int on the switch. Syntax set ap num[...]

  • Página 268

    268 AP Commands NN47250-1 00 (Versio n 02.51) Defaults Forced image do wnload is disabled by default. Access Enabled. History Introduced in WSS Software 5.0. O ptional dap removed 6.0. Usage A change to the forced image d ownl oad option ta k es place the next time the AP is restarted. Even when forced image do wnload is disabled (the defaul t), th[...]

  • Página 269

    AP Commands 269 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage Y ou can assign any subset or all of the APs connected to a WSS to a group on that switch. All access points in a group must be connected to the same WSS. If you use the name none , spelled in an y combination of capi tal or lo wercase letters, the speci[...]

  • Página 270

    270 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command causes AP 1 to load the adcon vert.bin f ile, then reboot as an AirDefense sensor: WSS# set ap 1 image adconvert.bin This will change the file a AP will boot. W ould you like to continue? (y/ n) [n] y set ap local-switching mode Enables local switch ing for a specified AP[...]

  • Página 271

    AP Commands 271 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set ap ap-number local-swit ching vlan-p rof ile pr of ile-name Defaults If local switching is enabled on an AP , b ut no VL AN prof ile is configured, then a defa ult VLAN profile is used. The default VLAN prof ile includes a single VLAN named default that is [...]

  • Página 272

    272 AP Commands NN47250-1 00 (Versio n 02.51) History Examples The follo wing command changes the name of the AP on port 1 to techpubs : WSS# set ap 1 name techpubs success: change accepted. See Also show ap config on page 34 4 set ap radio antenn a-location Specifies the location (indoors or outdoors) of an external antenna. Use this command to en[...]

  • Página 273

    AP Commands 273 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set ap radio antennatype on page 263 set ap radio antenn atype Sets the model number for the antenna to be used. Syntax set { ap port-list | ap ap-num } radio { 1 | 2 } antennatype {1 antennatype {internal | 24203 | 24403 | 24453 | 24553 | 24883 | mixed | 241[...]

  • Página 274

    274 AP Commands NN47250-1 00 (Versio n 02.51) ap port-list List of ports connected to the APs on which to set the channel. ap ap-num Number of a AP on which to set the channel. radio 1 Radio 1 of the AP. radio 2 Radio 2 of the AP. (This option does not apply to single-radio models.) antennatype { internal | 24203 | 24403 | 24453 | 24553 | mixed | 2[...]

  • Página 275

    AP Commands 275 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults All radios use the internal an tenna by default, if the AP model has an internal antenna . Access Enabled. History Usage This command applies only to th e 802.1 1b/g radio on model 2330. Examples The follo wing command configures the 802. 11b/g radio on AP 1 [...]

  • Página 276

    276 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set { ap port-list | auto }} radio { 1 | 2 } auto-tun e max-power power -level Defaults The default ma ximum po wer setting that RF Auto-T uning can set on a radio is the highest setting allo wed for the country of op eratio n or highest setting supported on the hardw are, whichev er is lo wer . [...]

  • Página 277

    AP Commands 277 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ap radio channel Sets an AP radio’s channel. Syntax set { ap port-list | ap ap-num } radio { 1 | 2 } channel channel-numbe r Defaults The default channel depends on the radio ty pe: • The default channel number for 802.11b/g is 6. • The default channel numbe[...]

  • Página 278

    278 AP Commands NN47250-1 00 (Versio n 02.51) set ap radio min-tx-datarate To specify the m inimum rate at whic h a radio is allowe d to transmit t raffic to cl ients, see Deprecated in WSS Software V ersion 5.0. on page 266 . set ap radio link-calibration Configures an AP radio to emit link calibration packets, which ca n aid in positioning a Mesh[...]

  • Página 279

    AP Commands 279 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set ap ap-num radio { 1 | 2 } load-bala ncing { enable | disable } Defaults RF load balancing is enabled by default for all AP radios. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage By default, RF lo ad balancing is enabled on all AP rad[...]

  • Página 280

    280 AP Commands NN47250-1 00 (Versio n 02.51) Defaults By default, AP radios are not pa rt of an RF load balancing group. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Assigning radios to specif ic load balanc ing groups is optional. When you do this, WSS Software considers them to ha ve e xactly o verla pping cov erage are[...]

  • Página 281

    AP Commands 281 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. History Usage T o enable or disable one or more radios to which a prof ile is assigned, use the set ap radio radio- prof ile command. T o enable or disable all radios that use a specif ic radio prof ile, use the set radio-prof ile command. Examples The[...]

  • Página 282

    282 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Usage When you create a ne w prof ile, the radio parameters in the prof ile are set to their factory defa ult val ue s . To enable or disable all radios th at use a specific radio pro file, use set radio -prof ile . Examples The follo wing command enables radio 1 on por ts 5 thro[...]

  • Página 283

    AP Commands 283 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. Usage Y ou also can configure a radio’ s cha nnel on the same command line. Use the channel option. This command is not valid if dynamic pow er tuning (RF Auto-Tuning) is en abled. Examples The follo wing command configures the tran smit po wer on th[...]

  • Página 284

    284 AP Commands NN47250-1 00 (Versio n 02.51) set ap security Sets security requirements for management sessions be tween a WSS and its APs. This feature applies to APs only, not to directly connected APs configured on AP access ports. Syntax set ap security { req ui re | option al | none } Defaults The defau lt setting is optional . Access Enabled[...]

  • Página 285

    AP Commands 285 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set ap sticky-bit This command is deprec ated in WSS Software Version 4.0. WSS assignment is alwa ys sticky. If an AP fails over to another WSS connection, the AP stays on that connection until the c onnection goes down or the WSS or AP is restarted. set ap upgrade-fi[...]

  • Página 286

    286 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set band-prefer ence {none | 11bg | 11a} Defaults By default, clients are not steered to sp ecif ic AP rad ios for RF load balancing. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Use this command to steer cl ients that supp ort both the 802. 11a and 802.11b/g bands, to a[...]

  • Página 287

    AP Commands 287 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS V ersion 6.0. Usage By default, RF lo ad balancing is enabled on all AP radios. Us e this command to disable or re-enable RF load balancing globally for all AP radios managed by the WSS switch. If RF load balancing has been enab led or disabl[...]

  • Página 288

    288 AP Commands NN47250-1 00 (Versio n 02.51) across the AP radios in the load-balancing group. When low strictness is speci fied (t he def ault), WSS Software makes hea vily loaded AP radios less visible in order to steer clients to less-busy AP radios, b ut ensures that ev en if all the AP radios in the group are he avily load ed, clients are no [...]

  • Página 289

    AP Commands 289 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Y ou can enter this command on any WSS in the Mobility Doma in. The command tak es ef fect only on that switch. Examples The follo wing command disables activ e scan in radio profile ra dpr of3 : WSS# set radio-prof ile radpr of3 active-scan disable success: cha[...]

  • Página 290

    290 AP Commands NN47250-1 00 (Versio n 02.51) Even when RF Auto-Tuning for channels is enabled, WSS Software does not chan ge the channel on radios that have active client sessi ons, unless you use the no-client option. RF Auto-Tuning of channels on 802.11a radi os uses only the bottom eight channels in the band (36, 40, 44, 48, 52, 56, 60, and 64)[...]

  • Página 291

    AP Commands 291 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set radio-prof ile auto-tune channel-interval on page 281 • set radio-prof ile auto-tune ch annel-lockdown on page 2 82 • show radio-pr of ile on page 376 set radio-profile auto-tune channel-interval Sets the interval at which RF A uto-Tuni ng decides whether [...]

  • Página 292

    292 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile auto-tune channel-lockdown Locks down the current channel settings on all radios in a radio profile. The channel se tti ngs that are in effect when the command is entered ar e changed into statica lly configured channel assi gnments on the radios. RF Auto-Tuning of channels is then dis[...]

  • Página 293

    AP Commands 293 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set radio-pr of ile nam e auto-tune power -conf ig { enable | disable } Defaults Dynamic power assignment is disabled by def ault. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage When RF Auto-T uning for po wer is disabled, WSS Software d[...]

  • Página 294

    294 AP Commands NN47250-1 00 (Versio n 02.51) History Introduced in WSS Software V ersion 3.0. Examples The follo wing command sets the power in terv al for radios in radio prof ile rp2 to 240 seconds: WSS# set radio-prof ile rp2 auto-tune po wer -interval 240 success: change accepted. See Also • set ap radio auto-tune max-power on page 265 • s[...]

  • Página 295

    AP Commands 295 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile auto-tune power-ramp-interval Changes the interval at which power is in creased or dec reased, in 1 dBm incremen ts, on radios in a radio profile until the optimum power level calculated by RF Auto-Tuning is reached. Syntax set radio-pr of ile nam e [...]

  • Página 296

    296 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command changes the beacon interval for radio prof ile rp1 to 200 ms: WSS# set radio-prof ile rp1 beacon-interv al 200 success: change accepted. See Also • set radio-prof ile mode on page 291 • show radio-pr of ile on page 376 set radio-profile beaconed-ssid See set service-p[...]

  • Página 297

    AP Commands 297 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile countermeasures Enables or disables countermeasur es on the AP r adios managed by a radio profile. Countermeasures are packets sent by a radio to prevent clients from being able to use rogue access points. AP radios can also issue c ountermeasures ag[...]

  • Página 298

    298 AP Commands NN47250-1 00 (Versio n 02.51) The following command disables c ountermeasures in radio prof ile rad prof3 : WSS# clear radio-prof ile ra dpr of3 countermeasur es success: change accepted. The following command causes ra dios managed by radio profile r adpr of3 to issue countermeasures against devices in the WSS’s attack list: WSS#[...]

  • Página 299

    AP Commands 299 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set radio-prof ile mode on page 291 • show radio-pr of ile on page 376 set radio-profile frag-threshold Changes the fragmentation th reshold for the AP radios in a radio pr ofile. The fragmen tati on threshold is the threshold at which th e long-retry-c[...]

  • Página 300

    300 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile long-retry Deprecated in WSS Software Version 4.1. In 4.1, this parameter is associated with service profiles instea d of radio profiles. See set service-prof ile long-r etry-count on page 319 . set radio-profile max-rx-lifetime Changes the maximum receive threshold for the AP radios i[...]

  • Página 301

    AP Commands 301 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The default maximum transmit threshold for AP radios is 2000 ms (2 seconds). Access Enabled. Usage Y ou must disable all radios that are using a radio profile before you can change parameters in the prof ile. Use the set radio-pr of ile mode command . Example[...]

  • Página 302

    302 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled. countermeasu res Not conf igured Does not issu e countermeasures against any d evice. dtim-interval 1 Sends the deli v ery traf f ic indication map (DTIM) after ev ery beacon. frag-threshold 2346 Uses the sh ort-retry-count for frames shorter than 2346 bytes and uses the long-retry-count[...]

  • Página 303

    AP Commands 303 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage Use the command without an y optional parameters to create new prof ile. If th e radio prof ile does not already ex ist, WSS Soft ware cr eates a ne w radio prof ile. Use the enable or disabl e option to enable or disable all the radios using a profile. [...]

  • Página 304

    304 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile preamble-length Changes the preamble length for wh ich an 802.11b/g AP radio advertises sup port. This command does not apply to 802.11a. Syntax set radio-pr of ile na me pr eamble-l ength { long | short } Defaults The defau lt is short . Access Enabled. Usage Changing the preamble len[...]

  • Página 305

    AP Commands 305 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile qos-mode Sets the prioritizat ion mode for forwarding queu es on AP radios manage d by the radio profile. Syntax set radio-pr of ile na me qos-mode { svp | wmm } Defaults The defau lt QoS mode is wmm . Access Enabled. History Introduced in WSS Softwa[...]

  • Página 306

    306 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set radio-pr of ile nam e rate-enf or cement {enable | disable} Defaults Data rate e nforcement is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Each type of radio (802.11a, 802.11b, and 802.11g) pro viding service to an SSID has a set of radio rates [...]

  • Página 307

    AP Commands 307 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set radio-pr of ile na me rf id-mode { enable | disabl e } Defaults The defau lt is disable . Access Enabled. History Introduced in WSS Software V ersion 5.0. Examples The follo wing command enables ra dios managed by radio profile rp1 to act as asset location [...]

  • Página 308

    308 AP Commands NN47250-1 00 (Versio n 02.51) set radio-profile service-profile Maps a service profile to a radio profile. All radios that use the radio p rof ile also use the pa rameter settings, including SSID and encryption sett ings, in the service profile. Syntax set radio-pr of ile na me serv ice-prof ile name Defaults A radio prof ile does n[...]

  • Página 309

    AP Commands 309 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference cipher-ccmp disable Does not use Counter with Cipher Block Chaining Message Authentication Code Protocol (CCMP) to encrypt traff ic sent to WP A clients. cipher-tkip e nable When the WP A IE is e nabled, uses T emporal K ey Integ rity Protocol (TKIP) to encrypt traf f[...]

  • Página 310

    310 AP Commands NN47250-1 00 (Versio n 02.51) no-br oadcast disab le Does not reduce wireless broadcast traff ic by sending unicasts to clients for ARP requests and DHCP Of fers and Acks instead of forwarding them as multicasts. proxy-ar p disable Does not reply on behalf of wireless cli ents to ARP request s for client IP addr esses. Instead, the [...]

  • Página 311

    AP Commands 31 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference tkip-mc-time 60000 Uses Michael countermeasures for 60,000 ms (60 seconds) follo wing detection of a second MIC failure within 60 seconds. transmit-rates 802.11a: • mandatory: 6.0 ,12.0, 24.0 • beacon-rate: 6.0 • multicast-rate: auto • disabled: none 802.11b:[...]

  • Página 312

    312 AP Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage Y ou must configure the service prof ile before you can map it to a radio profile. Y ou can map the same service prof ile to more than one radio prof ile. You must disable all radios that use a radio profile before you can change par[...]

  • Página 313

    AP Commands 313 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command maps service-profile wpa_clients to radio prof ile rp2 : WSS# set radio-profile r p2 service-prof ile wpa_clients success: change accepted. See Also • set service-pr of ile attr on page 306 • set service-pr of ile auth-dot1x on page[...]

  • Página 314

    314 AP Commands NN47250-1 00 (Versio n 02.51) • set service-pr of ile wep key-index on page 342 • set service-pr of ile wpa-ie on page 342 • show radio-pr of ile on page 376 • show service-pr of ile on page 380 set radio-profile shared-key-auth See set service-prof ile shar ed-key-auth on page 324 . set radio-profile short-retry Deprecated [...]

  • Página 315

    AP Commands 315 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radio-profile wmm-powersave Enables Unsche duled Automati c Powe rsave Delivery (U-APSD) on AP ra dios managed by the radio profile. U-APSD enables WMM clients that use powersave mode to mo re effi ciently request buffered unica st packets from AP radios. When U-A[...]

  • Página 316

    316 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile attr Configures authorization attributes that are applied by default to us ers accessing the SSI D managed by the service profile. These SSID de fault attributes are applied in addition to any supplied by the RADIUS server or from the lo cal database. Syntax set service-pr of ile nam[...]

  • Página 317

    AP Commands 317 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The following command assigns users accessing the SSID managed by service profile sp2 to the Mobility Profile tulip. WSS# set service-prof sp2 attr mobility-profile tulip success: change accepted. The following command limits the days and ti mes when users acc essing [...]

  • Página 318

    318 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set service-pr of ile auth-psk on page 309 • set service-pr of ile psk-phrase on page 322 • set service-pr of ile wpa-ie on page 342 • show service-pr of ile on page 380 set service-profile auth-fallthru Specifies the authentication type for users who do not ma tch an 802.1X or MAC au[...]

  • Página 319

    AP Commands 319 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference The web-portal authentication type al so requires additional c onfiguration items. (See the “Configuring AAA for Network Users” chapter of the Nortel WLAN Security Switch 2300 Series Configuration Guide .) Examples The follo wing command sets the f allthru authen [...]

  • Página 320

    320 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile beacon Disables or reenab les beaconing of the SSID mana ged by the service profile. An AP radio responds to an 802.1 1 pr obe any request with only the beaconed SS ID(s). For a nonbeaconed SSID, radios respond only to directed 802.11 pr obe requests that match the nonbeaconed SSID?[...]

  • Página 321

    AP Commands 321 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage WLAN mesh services can be used in a wi reless br idge configuration, implementing APs as bridge endpoints in a transparent Layer 2 bri dge. A typical applicati on of wireless bridging is to provide network connectiv ity between two buil dings using a wireless li[...]

  • Página 322

    322 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile cac-session Specifies the maximum number of active sessions a radio can have when se ssion-based CAC is enabled. When an AP radio has reached the maximu m allowed number of acti ve sessions, the radio refuses connections from additional clients. Syntax set service-pr of ile name cac-[...]

  • Página 323

    AP Commands 323 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command conf igures service prof ile sp2 to use CCMP encryption: WSS# set service-pr of ile sp2 cipher -ccmp enable success: change accepted. See Also • set service-prof ile ci pher -tkip on page 313 • set service-pr of ile cipher -wep104 o[...]

  • Página 324

    324 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile cipher-wep104 Enables dynamic Wired Equivalent Privacy (WEP) with 104-bit keys, in a service profile. Syntax set service-pr of ile name cipher -wep104 { enable | di sable } Defaults 104-bit WEP encryption is disabled by def ault. Access Enabled. History Introduced in WSS Software V e[...]

  • Página 325

    AP Commands 325 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-profile cipher-wep40 Enables dynamic Wired Equivalent Privacy (WEP) with 40-bit keys, in a service profile. Syntax set service-pr of ile name cipher -wep40 { enable | disable } Defaults 40-bit WEP encryption is disabled by default. Access Enabled. History [...]

  • Página 326

    326 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name cos level Defaults The defau lt static CoS le vel is 0. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage This command applie s only when static CoS is enabled. If st atic CoS is disabled, prio ritization is based on the QoS mode configured in the r[...]

  • Página 327

    AP Commands 327 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set service-pr of ile no-broadcast on page 320 • set service-pr of ile proxy-ar p on page 321 • show service-pr of ile on page 380 set service-profile idle-client-probing Disables or reenable s periodic keepalives from AP radi os to clients on a servi[...]

  • Página 328

    328 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name keep-initial-vlan { enable | disable } Defaults This option is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 5.0. Usage Even when this option is enabled, the WSS to which a user roams (the r oamed-to switch) can reassign the VLAN in an[...]

  • Página 329

    AP Commands 329 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Use this command to exempt a service prof il e from RF load bala ncing. Ex empting a service prof ile from RF load balancing means that e ven if an AP rad io is attempting to steer clients aw ay , it does not reduce or conceal the av ailabil ity of the SSID name[...]

  • Página 330

    330 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile mesh Creates a service profile for use with WLAN mesh se rvices. Syntax set service-pr of ile name mesh mode {enabl e | disable} Defaults None. Access Enabled. History Introduced in WSS Software version 6.0. Usage Use this command to configure mesh services for a servic e profile. On[...]

  • Página 331

    AP Commands 331 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set service-pr of ile name no-br oadcast { enable | disabl e } Defaults The no-broadcast mode is disabled by defa ult. (Broadca st traf fi c not disabled.) Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage T o further reduce ARP traf fic on[...]

  • Página 332

    332 AP Commands NN47250-1 00 (Versio n 02.51) Usage T o further reduce broadcast traf f ic on a service prof ile, use the set service-prof ile no-br oadcast command to disable DHCP a nd ARP request broadcasts. Examples The follo wing command enables proxy ARP on service profile sp1 : WSS# set service-prof ile sp1 proxy-arp enable success: change ac[...]

  • Página 333

    AP Commands 333 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-profile psk-raw Configures a raw hexadecima l preshared key (PSK) to use for authenti cating WPA clien ts, in a service profile. Radios use the PSK as a pairwise ma ster key (PMK) to derive unique pairwise session keys for individual WPA clients. Syntax se[...]

  • Página 334

    334 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name rsn-ie { enable | disable } Defaults The RSN IE is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage When the RSN IE is enabled, the def ault authentication method is 802.1X. There is no default cipher suite. Y ou must enable th[...]

  • Página 335

    AP Commands 335 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Shared-ke y authentica tion is disabled by defau lt. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage Shared-ke y authentication is supported only for encrypted SSIDs. In addition, if you enable shared-key authenticati on, RSN, WP A, TKI[...]

  • Página 336

    336 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile soda agent-directory Specifies the directory on the WSS where the SODA agent files for a servic e profile are l ocated. Syntax set service-pr of ile name soda agent-directory dir ectory Defaults By default, the WSS expects SOD A agent f ile s to be located in a directory with the sam[...]

  • Página 337

    AP Commands 337 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled History Introduced in WSS Software V ersion 4.1. Usage When the SOD A age nt is enabled in a service prof ile, by defa ult the SOD A age nt checks are do wnloaded to a client and run before the c lient is allowed on the network. Y ou can use this comman[...]

  • Página 338

    338 AP Commands NN47250-1 00 (Versio n 02.51) This functionality occurs only when the enforce checks option is enabled for th e service profile . The enforce checks option is enabled by default. The page is assumed to reside in the root directory on th e WSS. You can optionally specif y a different directory where the page resides. Examples The fol[...]

  • Página 339

    AP Commands 339 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command specif ies logout.html as the page to load when a cl ient closes the S OD A virtual desktop: WSS# set service-pr of ile sp1 soda logout-page logout.html success: change accepted. The following command specifies logout.html , in the soda[...]

  • Página 340

    340 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile soda remediation-acl Specifies an ACL to be applied to a client if it fails the ch ecks performed by the SODA agent. Syntax set service-pr of ile name soda rem ediation-acl acl-name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage If the SOD A age[...]

  • Página 341

    AP Commands 341 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Use this command to sp ecify a custom page th at is loaded by the c lient when it passes the checks performed by the SOD A agent. After this page is loaded, the client is placed in its assigned VLA[...]

  • Página 342

    342 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command applies the name guest to the SSID managed by service prof ile clear_wlan : WSS# set service-pr of ile clear_wlan ssid-name guest success: change accepted. The following comma nd applies the name corporate users to the SSID managed b y service profile mycorp_srvcprf : WSS[...]

  • Página 343

    AP Commands 343 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference any ACLs that mark CoS. This option pr ovides a simple way to configure an SSID for priority traffic such as VoIP traffic. When static CoS is enable d, the st andard WSS Soft ware prio ritization mechanism is not used . Instead, the AP sets CoS as follows: • For tra[...]

  • Página 344

    344 AP Commands NN47250-1 00 (Versio n 02.51) History Introduced in WSS Software V ersion 3.0. Usage Countermeasures apply only to TK IP and WEP clients. This in cludes WP A WEP clien ts and non- WP A WEP clients. CCMP cl ients are not affected. The TKIP cipher su ite must be enabled. The WP A IE also must be enabled. Examples The follo wing comman[...]

  • Página 345

    AP Commands 345 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults This command has the follo win g default s: • mandatory : ● 11a— 6.0,12.0,24.0 ● 11b— 1.0,2.0 ● 11g— 1.0,2.0,5.5,11.0 • disabled —None. All rates applicable to the radio type are suppo rted by default. • beacon- rate : ● 11a— 6.0 ● 1[...]

  • Página 346

    346 AP Commands NN47250-1 00 (Versio n 02.51) See Also show service-profile on page 380 set service-profile user-idle-timeout Changes the number of seconds WSS Soft ware will leave a session up for a client that is not sendin g data and is not responding to keepalives (idle- client probe s). If the timer expire s, th e client’s session is changed[...]

  • Página 347

    AP Commands 347 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set service-pr of ile name web-portal-acl aclname Defaults By default, a service prof ile’ s web-portal-acl option is unset. Ho wev er , when you change the service profile’ s auth-fallthru option to web-portal , WSS Software sets the web- portal-acl option[...]

  • Página 348

    348 AP Commands NN47250-1 00 (Versio n 02.51) History Usage Nortel recommends that you create a subdirectory for the custom page and place all the page’ s f iles in that subdirectory . Do not place the custom page in the root directory of th e switch’ s user f ile area. If the custom login page includes gif or jpg images, their p ath names are [...]

  • Página 349

    AP Commands 349 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set service-profile web-portal-logout Changes the web po rtal logout mode. Syntax set service-pr of ile name web-portal-logout mode {enable | disable} Access Enabled. History Introduced in WSS Software V ersion 6.0. Examples The follo wing command allo ws the web port[...]

  • Página 350

    350 AP Commands NN47250-1 00 (Versio n 02.51) Syntax set service-pr of ile name web-portal-session-timeout seconds Defaults The default W eb Portal W eb-base d AAA session timeout is 5 seconds. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage When a client that has connect ed through W eb Portal W eb-based AAA enters standby o[...]

  • Página 351

    AP Commands 351 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Before using this command, you must configur e values for the WEP k eys you plan to use. Use the set service-prof ile wep key-index command. Examples The follo wing command conf igures service prof ile sp2 to use WEP key 2 for encrypting multicast traf fi c: WSS[...]

  • Página 352

    352 AP Commands NN47250-1 00 (Versio n 02.51) set service-profile wep key-index Sets the value of o ne of four static Wired-Equiva lent Privacy (WEP) keys for static WEP encryption. Syntax set service-pr of ile name wep key - i nd ex num ke y value Defaults By default, no static WEP ke ys are defined. Access Enabled. History Introduced in WSS Softw[...]

  • Página 353

    AP Commands 353 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The WP A IE is disabled by default. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage When the WP A IE is enabled, the default authenti catio n method is 802.1X. There is no default cipher suite. Y ou must enable the cipher su ites you w [...]

  • Página 354

    354 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set ap local-switching mode on page 26 0 • set vlan-prof ile show ap config Displays global and radio-spec ific settings for an AP. Syntax show ap conf ig [ port-list [ radio { 1 | 2 }]] Defaults None. T able 6: Output for sho w ap arp Field Description Host IP address, hos tnam e, or ali[...]

  • Página 355

    AP Commands 355 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Enabled. History Usage WSS Software lists informati on separately for each AP. Examples The follo wing example sho ws conf iguration information for an AP on WSS port 2: WSS # show ap conf ig 2 Port 2: AP model: 2330, POE: enable, bias: high, name: AP02 boot-do[...]

  • Página 356

    356 AP Commands NN47250-1 00 (Versio n 02.51) T able 7: Output f or show ap conf ig Field Description Port WSS port number . Note: This f ield is applicable only if the AP is directly connected to the WS S and the WSS’ s port is configured as an AP access port. AP Connection ID for the AP. Note: This f ield is applic able only if the AP is conf i[...]

  • Página 357

    AP Commands 357 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set ap on page 33 • set port type ap o n page 41 • set ap bias on page 249 • set ap f ingerprint on page 257 • set ap gr oup on page 258 • set ap name on page 261 • set ap upgrade-f irmwar e on page 275 • set ap radio mode on page 270 • se[...]

  • Página 358

    358 AP Commands NN47250-1 00 (Versio n 02.51) • show ap unconf igured on page 374 • show radio-pr of ile on page 376 show ap counters Displays AP and radio statistics counters. Syntax show ap counters [ port-list [ radio { 1 | 2 }]] Defaults None. Access Enabled. History Usage T o display statistics counters and other inform ation for indi vidu[...]

  • Página 359

    AP Commands 359 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference TKIP Pkt Replays 0 TKIP Decrypt Err 0 CCMP Pkt Decrypt Err 0 CCMP Pkt Replays 0 CCMP Pkt T ransfer Ct 0 RadioResets 0 Radio Recv Phy Er r Ct 0 T ransmit Retries 60501 Radio Adjusted Tx Pwr 15 Noise Floor -93 802.3 Packet Tx Ct 0 80 2.3 Packet Rx Ct 0 No Receive Descri[...]

  • Página 360

    360 AP Commands NN47250-1 00 (Versio n 02.51) TKIP Pkt Replays N umber of TKIP packets th at were resent to the AP by a client. A lo w value (under ab out one hundred) does not necessarily indicate a problem. Ho wev er , if th is counter is inc reasing steadily or has a very high value (in the hundreds or more), a Denial of Service (DoS) attack mig[...]

  • Página 361

    AP Commands 361 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference User Sessions Number of clients curre ntly associ ated with the radio. Generally , this counter is equal to the nu mber of sessions listed for the radio in show sessions output. Ho we v er , the counter can dif fer from the counter in show sessions output if a client [...]

  • Página 362

    362 AP Commands NN47250-1 00 (Versio n 02.51) See Also show sessions network on page 439 show ap dual-home To display connection information fo r APs configured on a WSS, use the show ap global command on one of the switches where the AP is configured. The counters abo ve are global for all data rates. The counters belo w are for indi vidual data r[...]

  • Página 363

    AP Commands 363 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap fdb Displays the entries in a spec ified AP’s forwarding database. Syntax show ap fdb ap-number Defaults None. Access All. History Introduced in WSS V ersion 6.0. Examples The follo wing command displays FDB entries fo r AP 7: WSS# show ap fdb 7 AP 7: # = Sy[...]

  • Página 364

    364 AP Commands NN47250-1 00 (Versio n 02.51) show ap qos-stats Displays statis tics fo r AP forwarding queues. Syntax show ap qos-stats [ ap-num ] [ clear ] Syntax show ap qos-stats [ port-list ] [ clear ] Defaults None. Access Enabled. History Usage Repeating this comma nd with the clear option at regular interv als allo ws you to monitor transmi[...]

  • Página 365

    AP Commands 365 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap etherstats Displays Ethernet statistics for an AP’s Ether net ports. Syntax show ap etherstats [ port-list | ap-num ] Defaults None. Access Enabled. History Introduced in WSS Software V ersion 3.0. O ption dap removed in v ersion 6.0. Examples The follo wing[...]

  • Página 366

    366 AP Commands NN47250-1 00 (Versio n 02.51) RxShortFrames: 0 TxUnderruns: 0 RxCrcErrors: 0 TxCarrierLoss: 0 RxOverruns: 0 TxDeferred: 150 RxDiscards: 0 AP: 1 ether: 2 ================================= RxUnicast: 64379 T xGoodFrames: 60621 RxMulticast: 21798 TxSingleColl: 32 RxBroadcast: 1 1 TxLateColl: 0 RxGoodFrames: 86188 TxMaxCol l: 0 RxAlignE[...]

  • Página 367

    AP Commands 367 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap group Deprecated in WSS Software Version 6.0. To display info rmation about RF load balanc ing, see show load-balancing group show ap mesh-links Displays information about th e links an AP has to Mesh APs and Mesh Portal APs. Syntax show ap mesh-links ap-numbe[...]

  • Página 368

    368 AP Commands NN47250-1 00 (Versio n 02.51) TX: 307 44279 RX: 315 215046 Table 45 on page 358 describes the fields in the show ap mesh-links output. T able 12: Output for sho w ap mesh-links See Also • set ap boot-conf iguration mesh ssid on page 2 54 • set service-pr of ile mesh on page 320 show ap status Displays AP and radio status informa[...]

  • Página 369

    AP Commands 369 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Examples The follo wing command displays the status of a AP: WSS# show ap status 1 ap: 1, IP-addr: 10.2.3 0.5 (vlan 'vlan-corp '), AP model:2330, manufacturer: Nortel, name: AP01 fingerprint: b4:f9:2a :52:37:58:f4:d0: 1[...]

  • Página 370

    370 AP Commands NN47250-1 00 (Versio n 02.51) Radio 1 type: 802.1 1g, state: config ure succeed [Enabled] (802.1 1b protect) operational channel: 1 operational power: 14 base mac: 00:0b:0e:00:d2:c0 bssid1: 00:0b:0e:00:d2:c0, ssid: publi c bssid2: 00:0b:0e:00:d2:c2, ssid: emplo yee-n et bssid3: 00:0b:0e:00:d2:c4, ssid: mycorp-tkip Radio 2 type: 802.[...]

  • Página 371

    AP Commands 371 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference ap100 oa- 10.8.255.1 1 AP-122 00:0b:0e:da:da: 82 E 1/17 E36/1 1 0d 0h 0m17s Table 46 and Table 46 describe the fields in these displays. T able 13: Output f o r show ap status Field Description AP Connection ID for the AP. Note: This f ield is applic able only if the [...]

  • Página 372

    372 AP Commands NN47250-1 00 (Versio n 02.51) State State of the AP: • init—The AP has been recognized by the WSS but has not yet begu n booting. • booting—The AP has ask ed the WSS for a boot image. • image do wnloading—The AP is receiving a boot image from the WSS. • image downloaded—The AP has received a boot image from the WSS a[...]

  • Página 373

    AP Commands 373 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Radio 1 type Radio 2 type 802.11 type and conf igurat ion state of the radio. •T h e configur e succeed state indicates that the AP has received configuratio n parameters for the radio and the radio is ready to accept client connectio ns. • 802.1 1b pr otect indic[...]

  • Página 374

    374 AP Commands NN47250-1 00 (Versio n 02.51) Radio 1 type Radio 2 type (cont.) • Radar Detected indicates that DFS has detected radar on the channel. Wh en this occurs, the AP stops transmitting on the ch annel for 30 minutes. If RF Auto-T uning is enabled for channel assignment, the radio selects another channel and performs the initial channel[...]

  • Página 375

    AP Commands 375 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap vlan Displays information about the VLANs that are either locally switched by the specified AP or tunneled from the AP to an WSS switch. bssid, ssid S SIDs configu red on the radio and th eir BSSIDs. RFID Reports Statu s of Ae roScout asset tag support. • Ac[...]

  • Página 376

    376 AP Commands NN47250-1 00 (Versio n 02.51) Syntax show ap vlan ap-number Defaults None. Access All. History Introduced in WSS V ersion 6.0. Examples The follo wing command displays informa tion about the VLANs switched by AP 7: WSS# show ap vlan 7 AP 7: VLAN Name Mode Port T ag -------- -- -- - --------- -- ---- -------- -- --- 1 default local 1[...]

  • Página 377

    AP Commands 377 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show auto-tun e attributes Displays the current values of the RF attributes RF Auto-Tuning uses to decide whether to change ch annel or power settings. Syntax show auto-tune attributes [ ap ap -num [ radio { 1 | 2 | all }]] Syntax show auto-tune attributes [ ap ap-num[...]

  • Página 378

    378 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set ap radio auto-tune max-power on page 265 • set radio-prof ile auto-tune channel-conf ig on page 279 • set radio-prof ile auto-tune channel-holddown on page 280 • set radio-prof ile auto-tune channel-interval on page 281 • set radio-prof ile auto-tune po wer -back off-timer on pa[...]

  • Página 379

    AP Commands 379 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage For simplici ty , this command displays a single entry for each Nortel radio, e v en if the radio is supporting multiple BSSIDs. Howe v er , BSSIDs for third-party 802.11 radios are listed separately , e ven if a radio is supporting more than one BSSID. Informat[...]

  • Página 380

    380 AP Commands NN47250-1 00 (Versio n 02.51) show ap boot-configuration Displays information about the static IP address conf iguration (if any) on a AP. Syntax show ap boot-conf iguration ap-num Defaults None. Access Enabled. History V ersion 4.1 Command introduced in WSS Software. V ersion 6.0 Option dap removed. Fi eld Mesh added Fi eld Mesh SS[...]

  • Página 381

    AP Commands 381 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap connection Displays the system IP addre ss of the WSS that booted a AP. Syntax show ap connection [ ap-num | serial-id serial-ID ] Defaults None. Access Enabled. Usage The serial-id parameter displays the activ e connection for the specif ied AP e ven if that [...]

  • Página 382

    382 AP Commands NN47250-1 00 (Versio n 02.51) If a AP is configured on this WSS (or another WSS in the same Mobility Domain) but does not hav e an acti v e connection, the command does not disp lay in formation for the AP. T o sho w connection information for APs, use the show ap global com mand on one of t he switches where the APs are co nfigured[...]

  • Página 383

    AP Commands 383 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show ap global Displays connection information for APs configured on a WSS. Syntax show ap gl obal [ ap-num | serial-id serial-ID ] Defaults None. Access Enabled. Usage Connections are sho wn only for the APs that are configur ed on the WSS from which you enter the co[...]

  • Página 384

    384 AP Commands NN47250-1 00 (Versio n 02.51) See Also • set ap on page 33 • set ap bias on page 249 • show ap conf ig on page 344 • show ap connection on page 371 • show ap unconf igured on page 374 show ap unconfigured Displays APs that are physically c onnected to the network but that are not configured on any WSSs. Syntax show ap unco[...]

  • Página 385

    AP Commands 385 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • show ap connection on page 371 • show ap global on page 373 show load-balancing group Displays an RF load balanc ing group’s member radios and current load for each radio. Syntax show load-balancing group { gr oup-name | all | [ ap ap-number radio { 1[...]

  • Página 386

    386 AP Commands NN47250-1 00 (Versio n 02.51) Examples The follo wing command displays information about the AP radios that are in the same group as radio 1 on AP 3: WSS# show load-balancing group ap 3 radio 1 Radios in the same load-bal ancing grou p as: ap3/radio1 -------- --------- -------- --------- -------- ------- - IP address AP Radio Overla[...]

  • Página 387

    AP Commands 387 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Usage WSS Software contains a def ault radio profile. Nortel recomme nds that you do not change this prof ile but instead keep the prof ile for r eference. Examples The follo wing command shows radi o prof ile information for the[...]

  • Página 388

    388 AP Commands NN47250-1 00 (Versio n 02.51) T able 23: Output f or show radio-pr of ile Field Description Beacon Interv al Rate (in mil liseconds) at which each AP radio in the profile adverti ses the beaconed SSID. DTIM Interval N umber of times a fter ev ery beacon that each AP radio i n the radio prof ile sends a deliv ery traf f ic indication[...]

  • Página 389

    AP Commands 389 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set radio-prof ile activ e-scan on page 278 • set radio-prof ile auto-tune channel-conf ig on page 279 • set radio-prof ile auto-tune channel-holddown on page 280 • set radio-prof ile auto-tune channel-interval on page 281 • set radio-prof ile aut[...]

  • Página 390

    390 AP Commands NN47250-1 00 (Versio n 02.51) • set radio-prof ile mode on page 291 • set radio-prof ile preamb le-length on page 294 • set radio-prof ile qos-mode on page 295 • set radio-prof ile rfid-mode on page 296 • set radio-prof ile rts -threshold on page 297 • set radio-prof ile serv ice-prof ile on page 298 • set radio-prof i[...]

  • Página 391

    AP Commands 391 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command displays inf ormation for service p rofile sp1 : WSS # show service -prof ile sp1 ssid-name: corp2 ssid-type: crypto Beacon: yes Proxy ARP: no DHCP restrict: no No broadcast: no Short retry limi t: 5 Long ret ry limit: 5 Auth fallthru: [...]

  • Página 392

    392 AP Commands NN47250-1 00 (Versio n 02.51) Enforce SODA checks: yes SODA remediation ACL: Custom succ ess web-page: Custom failure web-page: Custom logout web-page: Custom agent-directory: Static COS: no COS: 0 CAC mode: none CAC sessions: 14 User idle tim eout: 180 Idle client probing: yes Keep initial vlan: no W eb P ortal Session Timeout: 5 W[...]

  • Página 393

    AP Commands 393 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference No broadcast Indicate s whether broadcast restric tion is enabled. When this feature is e nabled, WSS Soft ware sends ARP requests and DHCP Of fers and Acks as unicasts to their tar get clie nts instead of forwarding them as broadcasts. Short retry limit Numbe r of ti[...]

  • Página 394

    394 AP Commands NN47250-1 00 (Versio n 02.51) Custom agent-directory The name of the dire ctory for SOD A agent f iles on t he WSS, if different from the default. By default, SODA agent f iles are stored in a directory with the sa me name as the servic e profile . Static COS Indicates whether stat ic CoS assignment is enable d. When this feature is[...]

  • Página 395

    AP Commands 395 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WEP Ke y 3 v alue State of static WEP key number 3: • none—The key is not con figured. • preset—The key is configured. WEP Ke y 4 v alue State of static WEP key number 4: • none—The key is not con figured. • preset—The key is configured. WEP Unicast In[...]

  • Página 396

    396 AP Commands NN47250-1 00 (Versio n 02.51) • set service-pr of ile attr on page 306 • set service-pr of ile auth-dot1x on page 307 • set service-pr of ile auth-fallthru on page 308 • set service-pr of ile auth-psk on page 309 • set service-pr of ile beacon on page 310 • set service-pr of ile cac-mode on page 311 • set service-pr of[...]

  • Página 397

    AP Commands 397 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • set service-pr of ile psk-raw on page 323 • set service-pr of ile rsn-ie on page 323 • set service-pr of ile shared-k ey-auth on page 324 • set service-prof ile shor t-r etry-count on page 325 • set service-pr of ile soda mode on page 329 • set service-p[...]

  • Página 398

    398 AP Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 399

    399 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference STP Commands Use Spanning Tree Protocol ( STP) co mmands to configure and manage sp anning trees o n the virtual LANs (VLANs) configured on a WSS, to ma intain a loop-free network. This ch apter presents STP commands alpha- betically. Use the follo wing table to locate com m ands[...]

  • Página 400

    400 STP Commands NN47250-1 00 (Versio n 02.51) clear spantree portcost Resets to the default value the cost of a network port or ports on paths to th e STP root bridge in all VLANs on a WSS. Syntax clear spantree portcost port-list Defaults None. Access Enabled. Usage This command resets the co st in all VLANs. T o reset the cost for only specif ic[...]

  • Página 401

    STP Commands 401 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear spantree portvlanpri on page 391 • set spantr ee portpri on page 397 • set spantr ee portvlanpri on page 39 8 • show spantree on page 400 clear spantree portvlancost Resets to the default value the cost of a network port or ports on paths to [...]

  • Página 402

    402 STP Commands NN47250-1 00 (Versio n 02.51) Syntax clear spantree portvlanpri port-l ist { all | vlan vlan-id } Defaults None. Access Enabled. Usage WSS Software does not change a port’ s priority for VLANs other than the one(s) you specify . Examples The follo wing command resets the STP priority for port 20 in VLAN avocado : WSS# clear spant[...]

  • Página 403

    STP Commands 403 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show spantree statistics on page 407 set spantree Enables or disables STP on one VLAN or all VLANs configured on a WSS. Syntax set spantree { enable | disabl e } [{ all | vlan vlan-id | port port-list vlan-id }] Defaults Disabled. Access Enabled. Examples Th[...]

  • Página 404

    404 STP Commands NN47250-1 00 (Versio n 02.51) Usage If you plan to use the backbone fast con vergence feat ure, you must enable it on all the bridges in the spanning tree. Examples The follo wing command enable s backbone fast con ver gence: WSS# set spantree backbonefast enable success: change accepted. See Also show spantree backbonefast on page[...]

  • Página 405

    STP Commands 405 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command changes the hello interval for all VLANs to 4 seconds: WSS# set spantree hello 4 all success: change accepted. See Also show spantr ee on page 400 set spantree maxage Changes the maximum age for an STP root bridge hello packet that is [...]

  • Página 406

    406 STP Commands NN47250-1 00 (Versio n 02.51) Defaults The default port cost depends on the port speed and link type. T able 58 li sts the defaults fo r STP port path c ost. Access Enabled. Usage This command applies only to t he default VLAN (VLAN 1). T o change the cost of a port in another VLAN, use the set spantree portvlancost command. Exampl[...]

  • Página 407

    STP Commands 407 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults STP port fast con v er gence is disabled by default. Access Enabled. Usage Use port fast con ver gence on ports that are direc tly connected to servers, hosts, or other MA C stations. Examples The follo wing command enables port fast con v ergence on ports 9[...]

  • Página 408

    408 STP Commands NN47250-1 00 (Versio n 02.51) Syntax set spantree portvlancost port-list cost cost { all | vlan vlan-id } Defaults The default port cost depends on th e port speed and link type. (See T able 58 on page 396 .) Access Enabled. Examples The follo wing command changes the cost on ports 3 and 4 to 20 in VLAN mauve : WSS# set spantr ee p[...]

  • Página 409

    STP Commands 409 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command sets the priority of ports 3 and 4 to 48 on VLAN mauve : WSS# set spantr ee portvlanpri 3-4 priority 48 vlan mauve success: change accepted. See Also • clear spantree portpri on page 390 • clear spantree portvlanpri on page 391 •[...]

  • Página 410

    410 STP Commands NN47250-1 00 (Versio n 02.51) Defaults Disabled. Access Enabled. Usage The uplink fast con verge nce feature is applicable to bridge s that are acting as acce ss switches to the network co re (distrib ution layer) but ar e not in the core t hemselv es. Do not en able the feature on WSSs that are in the network core. Examples The fo[...]

  • Página 411

    STP Commands 41 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Bridge Max Age 20 sec Hello T ime 2 sec Forward Delay 15 sec[...]

  • Página 412

    412 STP Commands NN47250-1 00 (Versio n 02.51) Port V lan STP -State Cost Prio Po rtfast ---------------------------- ------------------------------------------- ------- 1 1 Forwarding 19 128 Dis abled 2 1 STP Off 19 128 Disabled 3 1 Disabled 19 128 Disabled 4 1 Disabled 19 128 Disabled 5 1 Disabled 19 128 Disabled 6 1 Disabled 19 128 Disabled 7 1 [...]

  • Página 413

    STP Commands 413 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show spantree blockedports on page 404 show spantree backbonefast Indicates whether the STP backbone fast conv ergence fe ature is enabled or disabled. Syntax show spantr ee backbonefast Defaults None. STP-State or Port-State STP state of the port: • Block[...]

  • Página 414

    414 STP Commands NN47250-1 00 (Versio n 02.51) Access All. Examples The follo wing e xample sho ws the comm an d output on a WSS with backb one fast con ver gence enabled: WSS# show spantree ba ckbone fast Backbonefast is enabled See Also set spantree backbonefast on page 393 show spantree blockedports Lists information about WSS ports that ST P ha[...]

  • Página 415

    STP Commands 415 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show spantr ee on page 400 show spantree portfast Displays STP uplink fast convergenc e information for all network ports or for one or more network ports. Syntax show spantr ee portfast [ port -list ] Defaults None. Access All. Examples The follo wing comma[...]

  • Página 416

    416 STP Commands NN47250-1 00 (Versio n 02.51) See Also set spantree portfast on page 396 show spantree portvlancost Displays the cost of a port on a path to the ST P root bridge, for each of the port’s VLANs. Syntax show spantr ee portvlancost port-list Defaults None. Access All. Examples The follo wing command sho ws the STP port cost of port 1[...]

  • Página 417

    STP Commands 417 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show spantree statistics Displays STP statistics f or on e or more WSS network ports. Syntax show spantr ee statistics [ port-list [ vlan vlan-id ]] Defaults None. Access All. Usage The command displays statistic s separately for e ach port. Examples The follo wing c[...]

  • Página 418

    418 STP Commands NN47250-1 00 (Versio n 02.51) scp failure count 0 root inc trans count (port/VLA N) 1 (1) inhibit loopguard F ALSE loop inc trans count 0 (0) St atus of Port T imers forward delay timer INACTIVE forward delay timer value 15 message age timer ACTIVE message age timer value 0 topology change timer INACTIVE topology change timer value[...]

  • Página 419

    STP Commands 419 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference next state 0 src MAC count 21807 total src MAC count 21825 curr_src_mac 00-0b-0e-00-04-30 next_src_mac 00-0b-0e-02-76-f6 Table 61 describes the fields in this display. T able 4: Output for sho w spantr ee statistics Field Descript ion Port Port number . VLAN VLAN ID.[...]

  • Página 420

    420 STP Commands NN47250-1 00 (Versio n 02.51) designated cost T otal path cost to reach the root bridge. designated_bridge Bridge to which this switch forwards t raf fic aw ay from the root bridge. designated_port STP port through which this switch forwar ds traff ic away from the root bridge. top_change_ack V alue of the topology ch ange ackno wl[...]

  • Página 421

    STP Commands 421 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference hold timer Status of th e hold timer . Th is timer ensure s that conf igured BPDUs are not transmitted too frequ ently through any bridge port. hold timer value Current value of the hold timer , in seconds. delay root port timer Status of the dela y root port timer ,[...]

  • Página 422

    422 STP Commands NN47250-1 00 (Versio n 02.51) See Also clear spantree statistics on page 392 show spantree uplinkfast Displays uplink fast convergence inf o rmation for one VLAN or all VLANs. Syntax show spantr ee uplinkfast [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command shows uplink fast con vergence information for a[...]

  • Página 423

    STP Commands 423 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set spantr ee uplinkfast on page 399[...]

  • Página 424

    424 STP Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 425

    425 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference IGMP Snooping Commands Use Internet Group Management Protoc ol (IGMP) snooping commands to conf igure and manage multicast traffic reduction on a WSS. This chapter presents IGMP snooping commands alphabetically. Use the fo llowing t able to locate commands in this chapter based o[...]

  • Página 426

    426 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command clears IGMP stat istics for all VLANs: WSS# clear igmp statistics IGMP statistics cleared for all vlans See Also show igmp s tatistics on page 43 1 set igmp Disables or reenables IGMP snoopi ng on one VLAN or all VLANs on a WSS. Syntax set igmp { enable | disa[...]

  • Página 427

    IGMP Snooping Comm ands 427 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The following co mmand changes the last member query interval on VLAN or ange to 5 tenths of a second: WSS# set igmp lmqi 5 vlan orange success: change accepted. See Also • set igmp oqi on page 418 • set igmp qi on page 420 • set igmp mro ut[...]

  • Página 428

    428 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Syntax set igmp mrsol { enable | disable } [ vla n vlan-id ] Defaults Multicast router solic itation is disabled on all VLANs by default. Access Enabled. Examples The follo wing command enables mul ticast router solicitation on VLAN or ange : WSS# set igmp mrsol enable vlan orange success: c[...]

  • Página 429

    IGMP Snooping Comm ands 429 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set igmp oqi seconds [ vlan vlan-id ] Defaults The default other -querier -present in terval is 255 seconds (4.25 minutes). Access Enabled. Usage A WSS cannot become the querier unless the pseudo-querier feature is enabled on the switch. When the fe[...]

  • Página 430

    430 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Usage Proxy reporting reduces multicast ov erhead by sendi ng only one membership report for a group to the multicast routers and discardi ng other membership reports for the same group. If you disable proxy reporting, the WSS sends all membership reports to the routers, including multiple r[...]

  • Página 431

    IGMP Snooping Comm ands 431 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax set igmp qri tenth-seconds [ vlan vlan-id ] Defaults The default query response interv al is 100 tenths of a second (10 seconds). Access Enabled. Usage The query response interval is applicable only when the WSS is querier for the subnet. For the sw[...]

  • Página 432

    432 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing example en ables the pseudo-querier on the orange VLAN: WSS# set igmp querier enable vlan orange success: change accepted. See Also show igmp querier o n page 427 set igmp receiver Adds or removes a network port in the li st of ports on which a WSS forwards traffic to[...]

  • Página 433

    IGMP Snooping Comm ands 433 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The default rob ustness v alue for all VLANs is 2. Access Enabled. Examples The follo wing e xample changes th e robustne ss v alue on VLAN orang e to 4: WSS# set igmp r v 4 vlan orang e success: change accepted. See Also • set igmp oqi on page [...]

  • Página 434

    434 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Port Querier-IP Querier-MAC TTL ---- ----- -- -------- - ------- -- ------- -- --- 1 193.122.135.1 78 00: 0b:cc:d2:e9:b 4 23 IGMP vlan mem ber ports: 10, 12 , 11, 14, 16, 15, 13, 18, 17, 1, 20, 21, 2, 22, 19, 4, 6, 5, 3, 8, 7, 9 IGMP static ports: none IGMP statistics for vlan orange: IGMP m[...]

  • Página 435

    IGMP Snooping Comm ands 435 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Multicast router information Lis t of multicast router s and activ e multicast groups. The fields containing this information ar e described separately . The show igmp mrouter command sho ws the same in formation. Port Number of the physical port through w[...]

  • Página 436

    436 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) See Also • show igmp mrouter on page 426 • show igmp querier on page 427 • show igmp r eceiver -ta ble on page 429 • show igmp statistics on page 431 show igmp mrouter Displays the multicast routers in a WSS’ s subnet, on one VLAN or al l VLANs. Routers are list ed separately for e[...]

  • Página 437

    IGMP Snooping Comm ands 437 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set igmp mro uter on page 417 • show igmp mrouter on page 426 show igmp querier Displays information about th e active multicas t querier, on one VLAN or all VLANs. Qu eriers are listed sep arately for each VLAN. Each VLAN can have only one [...]

  • Página 438

    438 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Examples The follo wing command displays querier information for VLAN or ange : WSS# show igmp querier vlan orange Querier for vlan orange[...]

  • Página 439

    IGMP Snooping Comm ands 439 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Port Querier -IP Querier-MAC TTL ---- ----- -- -------- - ------- -- ------- -- --------- ------ - 1 193.122.135.178 00:0b:cc:d2:e9:b4 23 The following command shows the information WSS Softwa re displays when t he querier is the WSS itse lf: WSS# show igm[...]

  • Página 440

    440 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) Syntax show igmp recei ver -table [ vlan vlan-id ] [ group gr oup-ip-addr / mask-length ] Defaults None. Access All. Examples The follo wing command displa ys all multicast recei v ers in VLAN or ange : WSS# show igmp r eceiv er -table vlan orange VLAN: orange Session Port Receiver -IP Recei[...]

  • Página 441

    IGMP Snooping Comm ands 441 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set igmp r eceiver on page 422 show igmp statistics Displays IGMP statistics. Syntax show igmp statistics [ vlan vlan-id ] Defaults None. Access All. Examples The follo wing command displays IGMP statistics for VLAN orange : WSS# show igmp statist[...]

  • Página 442

    442 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51) DVMRP 4 4 0 PIM V1 0 0 0 PIM V2 0 0 0 T opology notifi cation s: 0 Packets with unknown IG MP ty pe: 0 Packets with bad length: 0 Packets with bad checksum: 0 Packets dropped: 4 Table 67 describes the fields in this display. T able 5: Output f or show igmp statistics Field Description IGMP s[...]

  • Página 443

    IGMP Snooping Comm ands 443 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also clear igmp statistics on page 415 IGMP message type T ype of IGMP message, continued: • Mrouter-T erm—Multicast router termination messages. A multicast router sends this type of message when multicast fo rwarding is disabled on the router int[...]

  • Página 444

    444 IGMP Snooping Comman ds NN47250-1 00 (Versio n 02.51)[...]

  • Página 445

    445 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Session Mana g ement Commands Use session management commands to di splay and clear administ rativ e and network user sessions. This cha pter presents session management co mmands alphabetic ally. Use the fol lowing table to lo cate commands in this chapter based on their use. cl[...]

  • Página 446

    446 Session Management Commands NN47250-1 00 (Versio n 02.51) To clear Te lnet client session 0, type the f ollowing command: WSS# clear sessions telnet client 0 See Also show sessions on page 437 clear sessions network Clears all network sessions for a specified username or set of usernames, MAC address or set of MAC addresses, virtual LAN (VLAN) [...]

  • Página 447

    Session Manage ment Commands 447 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference To clear the sessio n of user Natasha , type the following command: 23x0# clear sessions network user Natas ha To clear the sessions of us ers whos e name begins with the c haracters Jo , type the following command: 23x0# clear sessions network user J[...]

  • Página 448

    448 Session Management Commands NN47250-1 00 (Versio n 02.51) To view information about console users’ sessions, type the following command: WSS> show sessions console Tty Username T ime (s) ------- ------- --------- ---- ------ -- console 8573 1 console session To view information abo ut Telnet us ers sessions, type the following command : WS[...]

  • Página 449

    Session Manage ment Commands 449 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also clear sessions on page 435 show sessions network Displays summary or verbose information about all netwo rk sessions, or network sessions fo r a specified username or set of usernames, MAC address or set of MAC a ddresses, VLAN or set of VLAN[...]

  • Página 450

    450 Session Management Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access All. History Usage WSS Software displays informat ion about network sessions in th ree types of displays. See the follo wing tables for field descriptions. Authorization attribu te values ca n be changed during authorizati on. If the values are changed, show session[...]

  • Página 451

    Session Manage ment Commands 451 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS > show sessions network User Ses s IP or MAC VL AN Port/ Name ID Address Na me Radi o ---------------------------- -- ---- ----------------- - -------------- ----- EXAMPLENatasha 4* 10.10.40.17 vlan-eng 3/1 host/laptop1 1.exmpl.com 6* 10.10.40[...]

  • Página 452

    452 Session Management Commands NN47250-1 00 (Versio n 02.51) The following command displays in formation about network session 88: WSS# show sessions netw ork session-id 88 Local Id: 88 Global Id: SESS-88-00040f-876 766-623fd6 S tate: ACTIVE SSID: Rack-39-PM Port/Radio: 10/1 MAC Address: 00:0f:66:f4:71:6d User Name: last-resort-Rack-39-PM IP Addre[...]

  • Página 453

    Session Manage ment Commands 453 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference IP or MA C Address IP address of the session user , or the user’ s MA C address if the user has not yet receiv ed an IP address. VLAN Name Name of the VLAN a ssociated with the session. Port/Radio Number of the port and r adio through which the user[...]

  • Página 454

    454 Session Management Commands NN47250-1 00 (Versio n 02.51) no w on Sho ws the follo wing information about the AP and radio the session is currently on: • IP address and port number o f the WSS managing the AP • Serial number and radio number of the AP • Amount of time the session has been on this AP from Shows information ab out the APs f[...]

  • Página 455

    Session Manage ment Commands 455 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference T able 5: show sessions network session-id Output Field Description Local Id Identifier for the session on this part icular switch. (This is the session ID you specify when entering the show sessions network session-i d command.) Global Id Unique sess[...]

  • Página 456

    456 Session Management Commands NN47250-1 00 (Versio n 02.51) T ag System-wide suppor ted VLAN tag type. Session Start Indica tes when the session started. Last Auth T ime Indicate s when the most recent authenticati on of the session occurred. Last Acti vity Indicates when t he last acti vity (transmission) occurred on the session. Session T imeou[...]

  • Página 457

    Session Manage ment Commands 457 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also clear sessions ne twork on page 436[...]

  • Página 458

    458 Session Management Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 459

    459 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Security A CL Commands Use security ACL commands to configure and monitor security access control lists (ACLs). Securi ty ACLs filter packets to restrict or permit network usage by cert ain users or traffic types, and can assign to packe ts a class of service (CoS) to define the [...]

  • Página 460

    460 Security ACL Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. Usage This command deletes secur ity A CLs only in the edit b uffer . Y ou must use the c ommit securi ty acl command with this command to de lete the A CL or A CE from the running configuration and non v olatile storage. The clear security ac l command deletes a[...]

  • Página 461

    Security ACL Commands 461 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear security acl map Deletes the mapping between a se curity ACL an d a virtual LAN (VLAN), one or more physical ports, or a virtual port. Or deletes all ACL maps to VLAN s, ports, and vir tual ports on a WSS. Syntax clear security acl map { acl-nam e | al[...]

  • Página 462

    462 Security ACL Commands NN47250-1 00 (Versio n 02.51) To clear all physic al ports, virtual ports, and VLANs on a WSS of the ACLs mapped for incoming and outgoing traffic, type the followi ng command: WSS# clear security acl map all success: change accepted. See Also • clear security acl on page 449 • set security acl map on page 459 • show[...]

  • Página 463

    Security ACL Commands 463 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear security acl on page 449 • rollback security acl on page 453 • set security acl on page 454 • show security acl on page 461 • show security acl inf o on page 463 hit-sample-rate This command has been renamed in WSS Software Version[...]

  • Página 464

    464 Security ACL Commands NN47250-1 00 (Versio n 02.51) set security acl In the edit bu ffer, creates a sec urity access control list (ACL ), adds one access control en try (ACE) to a security ACL, and/or reorders ACEs in the ACL. The AC Es in an ACL filter IP pack ets by source IP address, a Laye r 4 protocol, or IP, ICMP, TCP, or UDP packet infor[...]

  • Página 465

    Security ACL Commands 465 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference By UDP packets set security acl ip acl-name { permit [ cos cos ] | deny } udp { sour ce-ip-ad dr mask | any [ operator port [ port2 ]]} { destination-ip-addr mask | any [ oper ator port [ port2 ]]} [[ precedence pr ece dence ][ tos tos ] | [ dscp codepoint ][...]

  • Página 466

    466 Security ACL Commands NN47250-1 00 (Versio n 02.51) pr otocol IP protocol by wh ich to filter pack ets: •i p •t c p •u d p •i c m p • A protocol num ber between 0 and 255. (For a complete list of IP protocol names and numbers, see www .iana.org/assignments/protocol-numbers .) sour ce-ip-addr mask | any IP address and wildcard mask of [...]

  • Página 467

    Security ACL Commands 467 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults By default, permitted packets are clas sified ba sed on DSCP value, wh ich is con v erted into an internal CoS v alue in the switc h’ s CoS map. The packe t is then marked with a DSCP v alue base d on the internal CoS value. If the A CE contains t[...]

  • Página 468

    468 Security ACL Commands NN47250-1 00 (Versio n 02.51) History Usage The WSS does not apply security A CLs until you acti v ate them with the commit security acl command and map them to a VLAN, port, or virtual port, or to a user . If the WSS is reset or restar ted, any A CLs in the edi t buf fer are los t. You cannot perform ACL functions that in[...]

  • Página 469

    Security ACL Commands 469 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set security acl map Assigns a committed security ACL to a VLAN, physical port or ports, vi rtual port, or AP on the WSS. Syntax set security acl map acl-name { vlan vlan-id | port port-list [ tag tag-l ist ] | ap ap-num } { in | out } Defaults None. Access [...]

  • Página 470

    470 Security ACL Commands NN47250-1 00 (Versio n 02.51) • commit security acl on page 452 • set mac-user attr on pa ge 197 • set mac-usergr oup attr on page 203 • set security acl on page 454 • set user attr on page 207 • set usergr oup on page 208 • show security acl map on page 464 set security acl hit-sample-rate Specifies the time[...]

  • Página 471

    Security ACL Commands 471 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS# show security acl hits ACL hit counters Index Counter ACL-name ----- ---- -- --------- ----- -- -- ------- 1 0 acl_2 2 0 acl_175 3 916 acl_153 See Also • show security acl hits on page 462 • show security acl inf o on page 463 show security acl Disp[...]

  • Página 472

    472 Security ACL Commands NN47250-1 00 (Versio n 02.51) show security acl editbuffer Displays a summ ary of the securit y ACLs that ha ve not yet be en committe d to the configuration. Syntax show security acl [ inf o all ] editbuffer Defaults None. Access Enabled. Examples T o vie w a summary of the sec urity A CLs in the edit buf fer , type the f[...]

  • Página 473

    Security ACL Commands 473 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax show security acl hits Defaults None. Access Enabled. Usage For WSS Softw are to count hits for a security A CL, you must specify hits in the set security acl commands that def ine A CE rules for the A CL. Examples T o display the security A CL hits o[...]

  • Página 474

    474 Security ACL Commands NN47250-1 00 (Versio n 02.51) set security acl ip acl_123 (hits #5 462) -------- --------- -------- --------- -------- ------- -------- 1. permit IP source IP 192.168.1.11 0. 0.0.255 destination IP any enable-hits 2. deny IP source IP 192.168.2.11 0.0.0.0 destination IP any set security acl ip acl_134 (hits #3 0) -------- [...]

  • Página 475

    Security ACL Commands 475 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear security acl map on page 451 • set security acl map on page 459 • show security acl on page 461 show security acl resource-usage Displays statis tics about the resources used by secur ity ACL filte ring on the WS S. Syntax show securit[...]

  • Página 476

    476 Security ACL Commands NN47250-1 00 (Versio n 02.51) L4 global : T rue No rules : False Non-IP rules : False Root in first : T rue S tatic default action : False No per-user (MAC) mapping : T rue Out mapping : False In mapping : T rue No VLAN or POR T mapp ing : False No VPOR T mapping : T r ue Table 73 explains the fields in the show security a[...]

  • Página 477

    Security ACL Commands 477 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Port number Control value for handl ing fragmented IP pa ckets. Note: The current WSS Software version filters only the first packet of a fragmented IP packet a nd passes the remaining fragments. Number of action types Number of actions that ca n be performe[...]

  • Página 478

    478 Security ACL Commands NN47250-1 00 (Versio n 02.51) In mapping Application of security A CLs to incoming traf fic on the WSS: • T rue—Security ACLs are ma pped to incoming traffic. • False—No security ACLs ar e mapped to incoming traf fic. No VLAN or POR T mapping Application of se curity A CLs to WSS VLANs or ports on the WSS: • T ru[...]

  • Página 479

    479 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Cr yptograph y Commands A digital certificate is a form of el ectronic identifica tion for computers. The WSS requires digit al certificates to authen- ticate its communica tions to WLAN Management Software a nd Web View, to Web-base d AAA clients, and to Extensible Authenticatio[...]

  • Página 480

    480 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) crypto ca-certificate Installs a certificat e authority’s own PKCS #7 certi ficate into t he WSS cert ificate and ke y storage area. Syntax crypto ca-certif icate { admin | eap | web } PEM-formatted-certificate Defaults None. Access Enabled. History Usage The Priv ac y-Enhanced Mail protoc [...]

  • Página 481

    Cryptography Command s 481 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference mzerMClaweVQQTT ooewiwpoer0Q WNFNkj9004 4mbdrl1277SWQ8G7DiwYUtrq oQplKJvxz ..... Lm8wmVYxP56M;CUAm90 8C2foYgOY40= -----END CER TIFICA TE---- - See Also show crypto ca-certificate on page 479 crypto certificate Installs one of the WSS’s P KCS #7 certifica[...]

  • Página 482

    482 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) -----BEGIN CE R TIF ICA TE--- -- MIIBdTCP3wIBADA2MQswCQYDVQQGEwJVUzELMA kGA1UECBMCQOExGjA YBgNVB AMU EXR1Y2hwdWJzQHR ycHouY29tMIGfMAOGCSqGSIb3DQ EBAQAA4GNADCBiQKBgQC4 ..... 2L8Q9tk+G2As84QYLm8wm VY>xP56M;CUAm908C2foY gOY40= -----END CER TIFICA TE---- - See Also • crypto generate r equest[...]

  • Página 483

    Cryptography Command s 483 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SSH requires an SSH authentication key, but you can a llow WSS Software to gene rate it automatically. The first time an SSH clie nt attempts to ac cess the SSH server on a WSS, the switch automati cally generates a 1024-byte SSH key. If you want to us e a [...]

  • Página 484

    484 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage T o use this command, you must already ha ve generated a public-pri va te encryption ke y pair with the crypto generate key command. Enter crypto generate r equest admin , crypto generate request eap , or cr ypto generate request web and press Ente[...]

  • Página 485

    Cryptography Command s 485 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference -----END CER TIFICA TE REQ U E ST ----- See Also • crypto certif icate on page 471 • crypto generate key on page 472 crypto generate self-signed Generates a self-si gned certificate for ei ther an administra ti ve certificate f or use with WLAN Manageme[...]

  • Página 486

    486 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage T o use this command, you must already hav e generated a public-priv ate encryption ke y pair with the crypto ge nerate k ey command. Examples T o generate a self- signed administrat i ve certif icate, type the follo wing command: WSS# crypto gener[...]

  • Página 487

    Cryptography Command s 487 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults None. Access Enabled. History Usage The password allo ws the public-pri v ate ke y pair and certif icate to be installed tog ether from the same PKCS #12 object file. WSS Softwa re erases the one-time passw ord after processing th e crypto pkcs12 c[...]

  • Página 488

    488 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) Defaults The password you enter with the crypto otp command must be the sam e as the one protecting the PKCS #12 file. Access Enabled. History Usage T o use this command, you must have already created a one-time password with the crypto otp command. You must also have the PKCS #12 object file[...]

  • Página 489

    Cryptography Command s 489 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show crypto ca-certificate Displays information about th e certificate author ity’s PEM-encoded PKCS #7 certificate. Syntax show crypto ca-certif icate { admin | eap | web } Defaults None. Access Enabled. History Examples T o display information about the[...]

  • Página 490

    490 Cryptography Co mmands NN47250-1 00 (Versio n 02.51) • show crypto certif icate on page 480 show crypto certificate Displays information about one of the crypt ographic certificates installed on the WSS. Syntax show crypto certif icate { admin | eap | web } Defaults None. Access Enabled. History Usage Y ou must hav e generated a self- signed [...]

  • Página 491

    Cryptography Command s 491 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • crypto generate se lf-signed on page 475 • show crypto ca-certif icate on page 479 show crypto key domain Displays the checksum (also called a f ingerprin t ) of the public key used to authen ticate management traffic between WSSs. Syntax sho[...]

  • Página 492

    492 Cryptography Co mmands NN47250-1 00 (Versio n 02.51)[...]

  • Página 493

    493 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference RADIUS and Ser ver Gr oups Commands Use RADIUS commands to set up communi cation between a WSS and groups of up to four RADIUS servers for remote authentication, authoriz ation, and accounting (A AA) of administrators and networ k users. This chapter presents RADIUS commands alph[...]

  • Página 494

    494 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) Defaults Global RADIUS parameters have the follo wing default v alues: • deadtime —0 (zero) minutes (The WSS does not designat e unresponsi v e RADIUS serv ers as unav ailable.) • key —No key • ret r an sm i t —3 (the total number of attempts, including the first at te[...]

  • Página 495

    RADIUS and Server Groups Commands 495 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o clear the s ystem IP addres s as the perm anent source address for RADIUS client requests, type the following command: WSS# clear radius cl ient system-ip success: change accepted. See Also • set ra dius clien t system-ip on page 4[...]

  • Página 496

    496 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) clear radius server Removes the named RADIUS serv er from the WSS configuration. Syntax clear radius server ser ver-name Defaults None. Access Enabled. History Introduced in WSS Software 1.0. Examples The follo wing command removes the RADIUS serv er rs4 2 from a list of remote AA[...]

  • Página 497

    RADIUS and Server Groups Commands 497 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set server group on page 492 set radius Configures global defaults for RADIUS se rvers that do not explicitly set these va lues themselve s. By defaul t, the WSS automatically sets all th ese values exce pt the password (key). Syntax set[...]

  • Página 498

    498 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) History Usage Y ou can specify only one pa rameter per command line. Examples The follo wing commands sets the dead time to 5 minutes, the RADIUS key to goody , the number of retransmissions to 1, and the timeout to 21 se conds on all RADIUS server s connected to the WSS: 23x0# se[...]

  • Página 499

    RADIUS and Server Groups Commands 499 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set radius proxy client Adds a RADIUS proxy entry for a third-party AP. The proxy entr y specifies the IP address of the AP and the UDP ports on which the WSS listens for RADIUS traffic from the AP. Syntax set radius pr oxy client addr ess ip-add[...]

  • Página 500

    500 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Usage AAA for third-party AP users has additional conf igurati on requirements. See the “Configuring AAA for Users of Third-P arty APs” section in the “C onf iguring AAA for Network Users” chapter of th[...]

  • Página 501

    RADIUS and Server Groups Commands 501 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Default val ues are listed be low: • auth-port —UDP port 1812 • acct-port —UDP port 1813 • timeout —5 seconds • ret r an sm i t —3 (the total number of attempts, including the first at tempt) • deadtime —0 (zero) minu[...]

  • Página 502

    502 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51) Examples T o set a RADIUS server named RS4 2 with IP address 198.162.1.1 to use the def ault accounting and authorization ports with a timeout interv al of 30 seconds, two tran smit attempts, 5 minutes of dead time, a ke y string of ke ys4u , and the default authorization password[...]

  • Página 503

    RADIUS and Server Groups Commands 503 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear server gr oup on page 486 • set serv er group load-balance on page 493 • show aaa on page 210 set server group load-balance Enables or disables load balancing among the RADIUS servers in a server group. Syntax set server gr[...]

  • Página 504

    504 RADIUS and Server Groups Comman ds NN47250-1 00 (Versio n 02.51)[...]

  • Página 505

    505 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference 802.1X Mana g ement Commands Use 802. IEEE X manage ment commands to modify the default se ttings for IEEE 802.1X sessions on a WSS. For best results, change the setti ngs only if you are aware of a problem with the WSS’s 802.1X performance. This chapter presents 802.1X command[...]

  • Página 506

    506 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) clear dot1x bonded-period Resets the Bonded Auth period to its default value. Syntax clear dot1x max-req Defaults The default bonded authentica tio n period is 0 seconds. Access Enabled. History Introduced in WSS Software V ersion 2.1. Usage Examples T o reset the Bonded period to its de[...]

  • Página 507

    802.1X Mana gement Command s 507 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear dot1x port-control Resets all wired authentication ports on the WSS to default 802.1X authentication. Syntax clear dot1x port-control Defaults By default, all wired auth entication ports are set to auto and they process authentication req uests [...]

  • Página 508

    508 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) Access Enabled. History Introduced in WSS Software 1.0. Examples T ype the followi ng command to reset the maxi mu m number of reauthorizat ion attempts to the default: WSS# clear dot1x r eauth-max success: change accepted. See Also • set dot1x r eauth-max on page 504 • show dot1x on[...]

  • Página 509

    802.1X Mana gement Command s 509 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • set dot1x timeout auth-server on page 505 • show dot1x on page 507 clear dot1x timeout supplicant Resets to the default setting the number of seconds th at must elapse before the WSS times out an authentica- tion session with a su pplic[...]

  • Página 510

    510 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) set dot1x authcontro l Provides a global override mechanism for 802.1X authen tication config urat ion on wired authentication ports. Syntax set dot1x authcon trol { enable | disabl e } Defaults By defa ult, authentica tion control for i ndi vidual wired authentication i s enabled. Acces[...]

  • Página 511

    802.1X Manag ement Com mands 51 1 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Nortel recommends that you try 60 seconds, and change the period to a longer value only if clients are unable to authen- ticate within 60 seconds. The bonded authentication period ap plies only to 802.1X authenti cation rules that contain the bonded [...]

  • Página 512

    512 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) History Introduced in WSS Software 1.0. Usage T o support SSIDs that ha ve both 802.1X and static WEP clients, WSS Softwa re sends a maximum of two ID requests, e v en if this parameter is set to a higher v alue. Setting the para meter to a higher value does af fect all other types of EA[...]

  • Página 513

    802.1X Mana gement Command s 513 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set dot1x quiet-period Sets the number of seconds a WSS remains quiet and does not respond to a supplicant after a failed authentica tion. Syntax set dot1x quiet-period seconds Defaults The default is 60 seconds. Access Enabled. History Introduced in [...]

  • Página 514

    514 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) set dot1x reauth-max Sets the number of reauth entication attem pts that the WSS makes before the su pplicant (c lient) b ecomes unauthorized. Syntax set dot1x reauth-max number-of-attempts Defaults The defau lt number of reauthenticat ion attempts is 2. Access Enabled. History Introduce[...]

  • Página 515

    802.1X Mana gement Command s 515 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear dot1x r eauth-period on page 498 • show dot1x on page 507 set dot1x timeout auth-server Sets the number of seconds that must elapse before the WSS times out a reque st to a RADIUS authentication server. Syntax set dot1x timeout au[...]

  • Página 516

    516 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) See Also • clear dot1x timeout auth-server on page 498 • show dot1x on page 507 set dot1x tx-period Sets the number of seconds that must elapse before the WSS retransmits an EAPoL packet. Syntax set dot1x tx-peri od seconds Defaults The default is 5 seconds. Access Enabled. History I[...]

  • Página 517

    802.1X Mana gement Command s 517 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Usage Reauthentication is not required for WEP k ey rotation to take place. Broadcast and multicast keys are alw ays rotated at th e same time, so all member s of a gi ven radio, VLAN, or encryption type recei ve the ne w ke ys at the same time. Examp[...]

  • Página 518

    518 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) Access Enabled. Examples T ype the follo wing command to display the 802.1X clients: WSS # show dot1x clie nts MAC Address State Vlan Ident ity ------------- ------- ------ ---------- 00:20:a6:48:01:1f Connecting (unknown) 00:05:3c:07:6d:7c Authenticated vlan-it EXAMPLEjose 00:05:5d:7e:[...]

  • Página 519

    802.1X Mana gement Command s 519 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference port 10, authcontrol: auto, max-sessions: 1 port 1 1, auth control: auto, max-sessions: 1 port 12, authcontrol: auto, max-sessions: 1 port 13, authcontrol: auto, max-sessions: 1 port 14, authcontrol: auto, max-sessions: 1 port 15, authcontrol: auto, m[...]

  • Página 520

    520 802.1X Management Comm ands NN47250-1 00 (Versio n 02.51) Reauths While Aut henticating Numbe r of times that the WSS stat e wildcard transitions from A UTHENTICA TING to ABOR TIN G, as a result of a reauthenticat ion request (reAuthentic ate = TR UE). Starts While Authentica ting Number of times th at the WSS state wild card transiti ons from [...]

  • Página 521

    521 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference RF Detection Commands WSS Software automatically performs RF detection scans on enabled and di sabled radios to detect rogue access points. A rogue access point is a BSSID (MAC address associat ed with an SSID) that does not belong to a Nortel devi ce and is not a membe r of the [...]

  • Página 522

    522 RF Detection Commands NN47250-1 00 (Versio n 02.51) clear rfdetect attack-list Removes a MAC address from the attac k list. Syntax clear rfdetect attack-list mac-addr Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command clears MA C addre ss 11:22:33:44:55:66 from the attack list: WSS# c[...]

  • Página 523

    RF Detection Commands 523 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear rfdetect ignore Removes a device from the ignore list fo r RF scans. WSS Software does not ge nerate log messages or traps for the devices in the ignore list . Syntax clear rfdetect ignore mac-addr Defaults None. Access Enabled. History Introduced in W[...]

  • Página 524

    524 RF Detection Commands NN47250-1 00 (Versio n 02.51) clear rfdetect vendor-list Removes an entry from th e permitted vendor list. Syntax clear rfdetect v endor -list { client | ap } mac-addr | all Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command removes client OU I aa:bb:cc:00:00:0 0[...]

  • Página 525

    RF Detection Commands 525 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command adds MA C address aa:bb:cc:44:55:6 6 to the at tack list: WSS# set rfdetect atta ck-list 1 1:22:33:44:55:66 success: MAC 1 1:22:33:44:55:66 is now in attacklist. See Also • clear rfdetect attack-list on page 512 • show rfd[...]

  • Página 526

    526 RF Detection Commands NN47250-1 00 (Versio n 02.51) Defaults WSS Software reports all non-Nortel B SSIDs detected during an RF scan. Access Enabled. History Introduced in WSS Software V ersion 3.0. Usage Use this command to identify third-part y AP s and other de vices you are already a ware of and do not want WSS Software to report fo llo wing[...]

  • Página 527

    RF Detection Commands 527 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also show log buffer on p age 579 set rfdetect signature Enables AP signatures. An AP signature is a set of bits in a management frame sent by an AP that identifies that AP to WSS Software. If someone attempts to spoof management packet s from a Nortel A[...]

  • Página 528

    528 RF Detection Commands NN47250-1 00 (Versio n 02.51) Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage The permitted SSID list applies only to the WSS on which the list is configured. WSSs do not share permitted SSID lists. If you add a device that WSS Software has classified as a rogue to the permitted SSID list, but not to[...]

  • Página 529

    RF Detection Commands 529 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear rfdetect vendor-list on page 514 • show rfdetect vendor -list on page 531 show rfdetect attack-list Displays information about the MA C addresses in the attack list. Syntax show rfdetect attack-list Defaults None. Access Enabled. History[...]

  • Página 530

    530 RF Detection Commands NN47250-1 00 (Versio n 02.51) • set rfdetect black-list on pag e 515 show rfdetect clients Displays the wi reless cl ients detected by a WSS. Syntax show rfdetect clients [ mac mac-addr ] Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The following co mmand sho ws information abo[...]

  • Página 531

    RF Detection Commands 531 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference AP V endo r Company that manufactures or sells the AP with which the rogue client is associ ated. Port/Radio/Channel Port number , radio number, and channel number of the radio that detected the rogue. F or a AP, th e connection numbe r is labeled ap . (This[...]

  • Página 532

    532 RF Detection Commands NN47250-1 00 (Versio n 02.51) show rfdetect countermeasures Displays the current status of countermeas ur es against rogues in the Mobility Domain. Syntax show rfdetect countermeasur es Defaults None. Access Enabled. History Usage This command is v alid only on the se ed switch of the Mobility Doma in. Examples The follo w[...]

  • Página 533

    RF Detection Commands 533 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also set radio-profile countermeasur es on page 287 show rfdetect counters Displays statistics for rogue and Intrusion Detection System (IDS) activity detected by th e APs managed by a WSS. Syntax show rfdetect counters Defaults None. Access Enabled. His[...]

  • Página 534

    534 RF Detection Commands NN47250-1 00 (Versio n 02.51) 802.1 1 probe request fl ood 0 0 802.1 1 authentication flood 0 0 802.1 1 null data flood 0 0 802.1 1 mgmt type 6 flood 0 0 802.1 1 mgmt type 7 flood 0 0 802.1 1 mgmt type d flood 0 0 802.1 1 mgmt type e fl ood 0 0 802.1 1 mgmt type f flood 0 0 802.1 1 association flood 0 0 802.1 1 reassociati[...]

  • Página 535

    RF Detection Commands 535 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference WSS # show rfdetect data T otal number of entries: 197 Flags: i = infrastructure, a = ad-hoc c = CCMP , t = TKIP , 1 = 104-bit WEP , 4 = 40-bit WEP , w = WEP(non-WP A) BSSID V endor T ype P ort/Radio/Ch Flag s RSSI Age SSID ----------------- ------- ----- --[...]

  • Página 536

    536 RF Detection Commands NN47250-1 00 (Versio n 02.51) See Also • show rfdetect mobili ty-do main on pag e 526 • show rfdetect vi sible on page 531 show rfdetect ignore Displays the BSSIDs of third-party devices that WSS Softwa re ignores during RF sc ans. WSS Software does not generate log messag es or traps for the devices in the ignore list[...]

  • Página 537

    RF Detection Commands 537 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Usage This command is v alid only on the seed switch of the Mobility Doma in. T o disp lay rogue information for an indi vidual switch, use the sho w rfdetect data command on that switch. Examples The follo wing command displays summary information f[...]

  • Página 538

    538 RF Detection Commands NN47250-1 00 (Versio n 02.51) Device-type: interfering Adhoc: no Crypto-t ypes: clear RSSI: -76 SSID : nr tl -webaaa Two types of information are s hown. The lines that are not indented show the BSSID, vendor, and information about the SSID. The indented lines that follow thi s information indicate the list eners (AP radio[...]

  • Página 539

    RF Detection Commands 539 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference SSID SSID us ed by the detecte d device. T able 6: show rfdetect mobilit y-domain ssid or bssid Output Field Description BSSID MA C address of the SSID used by the detected de vice. V endor Company that manufactures or sells the rogue de vice. SSID SSID us e[...]

  • Página 540

    540 RF Detection Commands NN47250-1 00 (Versio n 02.51) See Also • show rfdetect data on page 524 • show rfdetect vi sible on page 531 show rfdetect ssid-list Displays the en tries in the perm itted SSID li st. Syntax show rfdetect ssid-list Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing [...]

  • Página 541

    RF Detection Commands 541 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference mycorp corporate guest See Also • clear rfdetect ssid-list on page 513 • set rfdetect ssid-list on page 517 show rfdetect vendor-list Displays the entries in the permitted vendor list. Syntax show rfdetect vendor -list Defaults None. Access Enabled. Hist[...]

  • Página 542

    542 RF Detection Commands NN47250-1 00 (Versio n 02.51) Syntax show rfdetect visible mac-addr Syntax show rfdetect visible ap ap-num [ radio { 1 | 2 }] Syntax show rfdetect visible ap ap-num [ radio { 1 | 2 }] Defaults None. Access Enabled. History Usage If a Nortel radio is supporting more than one SS ID, each of the corres ponding BSSIDs is liste[...]

  • Página 543

    RF Detection Commands 543 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Table 83 describes the fields in this display. See Also • show rfdetect data on page 524 • show rfdetect mobili ty-do main on pag e 526 rfping Provides information about the RF link between the WSS and the client based on sending test packets to the clie[...]

  • Página 544

    544 RF Detection Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Introduced in WSS Software V ersion 5.0. N ame of the c ommand chan ged from test rflink to rfping in WSS Software V ersion 6.0. Usage Use this command to send te st packets to a specified client. The output of the command indicates the number of test pac[...]

  • Página 545

    545 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference File Mana g ement Commands Use file management commands to mana ge system files and to disp lay softwa re and boot information. This chapter presents file management comma nds alphabetically. Use the foll owing table to locate comm ands in this chapter ba sed on their use. backup[...]

  • Página 546

    546 File Management Co mmands NN47250-1 00 (Versio n 02.51) Syntax backup system [ tftp :/ ip-addr / ] filename [ all | critical ] Defaults The defau lt is all . Access Enabled. Usage Y ou c an create an archive located on a TFTP server or in the switch’ s non volatile storage. If you specify a TFT P server as part of the file name, the archi v e[...]

  • Página 547

    File Managemen t Commands 547 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference clear boot backup-configuration Clears the filename specified as the ba ckup configuration file. In the event that WSS Software cannot read the configu- ration file at boot time, a backup configuration file is not used. Syntax clear boot back up-conf igu[...]

  • Página 548

    548 File Management Co mmands NN47250-1 00 (Versio n 02.51) • Copies a file from a TFT P server to non volatile storage. • Copies a file from non volatile storage or temporary storage to a TFTP serv er . • Copies a file from one area in non v olatile storage to another . • Copies a file to a ne w f ilename in non volatile storage. Syntax co[...]

  • Página 549

    File Managemen t Commands 549 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command copies a f ile called floorwss from non v olatile storage to a TFTP server: WSS# copy floorwss tftp://10.1.1.1/floorw ss success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] The following command c opies a file call e[...]

  • Página 550

    550 File Management Co mmands NN47250-1 00 (Versio n 02.51) Syntax delete url Defaults None. Access Enabled. Usage Y ou might want to copy the file to a TFTP server as a backup befo re deleting the f ile. Examples The follo wing commands copy file testconf ig to a TFTP serv er and delete the f ile from non v olatil e storage: WSS# copy testconfig t[...]

  • Página 551

    File Managemen t Commands 551 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Examples The follo wing command displays th e files in the root directory: WSS # dir ======== ======== ========= ======== ====== ======== ========= ======== ======== ====== = file: Filename Size Created file:configuration 48 KB Jul 12 2005, 15:02[...]

  • Página 552

    552 File Management Co mmands NN47250-1 00 (Versio n 02.51) The following command lim its the output to the contents of the /tmp/cor e subdirectory: WSS # dir core: ======== ======== ========= ======== ====== ======== ========= ======== ======== ====== = file: Filename Size Created core:command_audit.cur 37 bytes Aug 28 2005, 21:1 1:41 T otal: 37 b[...]

  • Página 553

    File Managemen t Commands 553 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax install soda agent ag ent-f ile agent-dir ectory dir ectory Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Use this com mand to inst all a .zip file c ontaining SOD A agent f iles into a directory on th e WSS[...]

  • Página 554

    554 File Management Co mmands NN47250-1 00 (Versio n 02.51) Defaults The defau lt fil e location is non v olatile st orage. If you do not specify a filename, WSS Softwa re uses the same configuration filena me that was used for the previous configuration load. For example, if th e WSS used configur ation for the most recent config uration load, WSS[...]

  • Página 555

    File Managemen t Commands 555 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command calculates the ch ecksum for image file WSS040003.020 in boot partition 0: pubs# md5 boot0:WSS04 0003.020 MD5 (boot0:WSS040003.0 20) = b9cf7f527f74608e50c70e8fb 896392a See Also • copy on page 537 • dir on page 540 mkd[...]

  • Página 556

    556 File Management Co mmands NN47250-1 00 (Versio n 02.51) temporary file s: Filename Size Creat ed T otal: 0 by tes used, 93537 Kbytes free See Also • dir on page 540 • rmdir on page 548 reset system Restarts a WSS and reboots the software. Syntax reset system [ force ] Defaults None. Access Enabled. Usage If you do not use the forc e option,[...]

  • Página 557

    File Managemen t Commands 557 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference restore Unzips a system archive creat ed by the backup command and copies the files from the archive onto the switch. Syntax res t o re system [ tftp:/ ip-addr / ] filename [ all | critical ] [ fo rc e ] Defaults The defau lt is critical . Access Enabled[...]

  • Página 558

    558 File Management Co mmands NN47250-1 00 (Versio n 02.51) If the configuration running on the swit ch is different from the one in the archive or you renamed the configu- ration file, and you wa nt to retain changes that we re made after the archive wa s created, see the “Managing System Files” chapter of the Nortel WLAN 2300 System Software [...]

  • Página 559

    File Managemen t Commands 559 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Syntax sa ve conf ig [ filename ] Defaults By default, WSS Software sa ves the running conf iguration as the conf iguration filename used during the last reboot. Access Enabled. Usage If you do not specify a f ilename, WSS So ftware repl aces the configu[...]

  • Página 560

    560 File Management Co mmands NN47250-1 00 (Versio n 02.51) Examples The follo wing comma nd specif ies a f ile call ed back up.cfg as the backup conf iguration fi le on the WS S: WSS# set boot b ackup-conf igurat ion backup.cfg success: backup boot config filename set. See Also • clear boot backup-c onfiguration on page 537 • show boot on page[...]

  • Página 561

    File Managemen t Commands 561 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS Software V ersion 1.1. Usage T o determine the boot partition th at was used to load the currently run ning software image, use the dir command. Examples The follo wing command sets th e boot partition for the ne xt so ftware re[...]

  • Página 562

    562 File Management Co mmands NN47250-1 00 (Versio n 02.51) See Also • clear boot config on page 537 • reset sy stem on page 546 • set boot conf iguration-file on page 550 • show version on page 554 T able 2: Output f or show boot Field Description Conf igured boot version Software version th e switch wi ll run next time the software is reb[...]

  • Página 563

    File Managemen t Commands 563 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show config Displays the configuration running on the WSS. Syntax show conf ig [ area ar ea ] [ all ] Defaults None. area ar ea Configuration area. Y ou can sp ecify one of the follo wing: •a a a •a c l s •a p •a r p •e a p o l • httpd •i p[...]

  • Página 564

    564 File Management Co mmands NN47250-1 00 (Versio n 02.51) Access Enabled. History Usage If you do not use one of the optiona l parameters, configuration comma nds that set nondef ault v alues are displayed for all con figuration areas. If you specify an area, commands are displayed for that area only . If you use the all option, the display also [...]

  • Página 565

    File Managemen t Commands 565 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Build Information : (build#67) TOP 2005-09-21 04:41:00 Model: WSS Hardware Mainboard: version 24 ; re vision 3 ; FPGA version 24 PoE board: version 1 ; FPGA v ersion 6 Serial number 0321300013 Flash: 5.0.0.14 - md0a K ernel: 3.0.0#20: Fri Sep 22 17:43:51[...]

  • Página 566

    566 File Management Co mmands NN47250-1 00 (Versio n 02.51) See Also show boot on page 551 uninstall soda agent Removes the contents of a dire ctory containing SODA agent files. Syntax uninstall soda agent agent-directory dir ectory Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Use this command to remo v e a [...]

  • Página 567

    File Managemen t Commands 567 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • install soda agent on page 542 • set service-pr of ile soda mode on page 329[...]

  • Página 568

    568 File Management Co mmands NN47250-1 00 (Versio n 02.51)[...]

  • Página 569

    569 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference T race Commands Use trace commands to perform diagnosti c routines. While WSS Software allows you to run many types of traces, this chapter describes commands for t hose traces you are most likely to use. For a complete listing of th e types of traces WSS Software allows, typ e t[...]

  • Página 570

    570 Trace Commands NN47250-1 00 (Versio n 02.51) clear trace Deletes running trace commands and ends trace processes. Syntax clear trace { trac e-ar ea | all } Defaults None. Access Enabled. Examples T o clear all trace proces ses, type the foll o wing command: WSS# clear trace all success: clear trace all To clear the sessio n manager trace, type [...]

  • Página 571

    Trace Commands 571 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Introduced in WSS Software V ersion 3.0. Examples T o sa ve trace dat a into the f ile trace1 in the subdirectory traces , type the follo wing command: WSS# sa ve trace traces/trace1 set trace authentication Traces authentica tion information. Syntax set tr[...]

  • Página 572

    572 Trace Commands NN47250-1 00 (Versio n 02.51) Syntax set trace auth orization [ mac-ad dr mac-addr ess ] [ port port-num ] [ user username ] [ le vel le vel ] Defaults The defau lt trace le vel is 5. Access Enabled. Examples The follo wing command starts a trace for in formation for authorization for MA C address 00:01:02:03:04:05: WSS# set trac[...]

  • Página 573

    Trace Commands 573 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults The defau lt trace le vel is 5. Access Enabled. Examples The follo wing command starts a trace for the 802.1X sessions for MA C addr ess 00:01:02:03:04:05: WSS# set trace dot1x mac-addr 00:01:02:03:04 :05: success: change accepted. See Also • clear trace[...]

  • Página 574

    574 Trace Commands NN47250-1 00 (Versio n 02.51) show trace Displays information about traces that are currently configured on the WSS, or all possible trace options. Syntax show trace [ all ] Defaults None. Access Enabled. Examples T o vie w the traces currently r unning, type the follo wing command: WSS # show trace milliseconds spent printing tr[...]

  • Página 575

    575 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Snoop Commands Use snoop commands to monitor wireless traffic, by using a AP as a sniffing device. The AP copies the sniffed 802.11 packets and sends the copies to an obser ver, which is typically a protocol anal yzer such as Ethere al or Tethere al. (For more information, incl u[...]

  • Página 576

    576 Snoop Commands NN47250-1 00 (Versio n 02.51) clear snoop map Removes a snoop filter from an AP radio. Examples clear snoop map f ilter-name ap ap-num radio { 1 | 2 } Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command remove s snoop filter snoop2 from radio 2 on AP 3: WSS# clear snoop [...]

  • Página 577

    Snoop Commands 577 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference set snoop Configures a snoop filter. Syntax set snoop filter -name [ condition-li st ] [ observer ip-addr ] [ snap-leng th num ] Defaults No snoop filters are conf igured by default. Access Enabled. f ilter-name Name for the filter . The name can be up to 15 alphan[...]

  • Página 578

    578 Snoop Commands NN47250-1 00 (Versio n 02.51) History Usage T raf fic that matches a snoop f ilter is copied after it is decrypted. The decrypted (clear) version is se nt to the observe r . For best results: • Do not specify an observer that is associated wi th the AP where the snoop filter is running. This configu ration causes an endl ess cy[...]

  • Página 579

    Snoop Commands 579 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults Snoop filter s are unmapped by default. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage Y ou can map the same fi lter to more than one radio. Y ou can map up to eight filters to the same radio. If more than one filt er has the same o[...]

  • Página 580

    580 Snoop Commands NN47250-1 00 (Versio n 02.51) Defaults Snoop filters are disabled by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage The filter mode is not retained if you cha nge the filter conf iguration or d isable and reenable the rad io, or when the AP or the WSS is restart ed. Y ou must reenable the f ilter[...]

  • Página 581

    Snoop Commands 581 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference show snoop info Shows the configured snoop filters. Syntax show snoop f ilter-name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follo wing command shows the snoop f ilters conf igured in the examples abo ve: WSS# show[...]

  • Página 582

    582 Snoop Commands NN47250-1 00 (Versio n 02.51) ap: 3 Radio: 2 See Also • clear snoop map on page 566 • set snoop map on page 568 • show snoop on page 570 show snoop stats Displays statis tics fo r enabled snoop filters. Examples show snoop stats [ f ilter -name [ ap-num [ radio { 1 | 2 }]]] Defaults None. Access Enabled. History Introduced [...]

  • Página 583

    Snoop Commands 583 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Table 88 describes the fields in this display. T able 1: show snoop stats Output Field Description Filter Name of the sno op fi lter . ap AP containing the radio to which the filter is mapped. Radio Radio to which the f ilter is mapped. Rx Match Number of packets r[...]

  • Página 584

    584 Snoop Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 585

    585 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference System Log Commands Use the system log commands to record information for monitoring and tr oubleshooting. WSS Softwa re system logs are based on RFC 3164, which def ines the log protocol. This chapter presents syst em log command s alphabetica lly. Us e the following table to lo[...]

  • Página 586

    586 System Log Commands NN47250-1 00 (Versio n 02.51) • set log on page 576 set log Enables or disables logging of WSS and AP events to the WSS log buffer or other logging destinati on and sets the level of the events logged. For logging to a syslog se rver only, you can also set the facility logged. Syntax set log { buf f e r | console | current[...]

  • Página 587

    System Log Commands 587 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Defaults • Events at the error lev el and higher are logged to the WSS console. • Events at the error lev el and higher are logged to the WSS system b uffer . • T race logging is enabled, and debug-le v el output is stored in the WSS tr ace bu ff er . Ac[...]

  • Página 588

    588 System Log Commands NN47250-1 00 (Versio n 02.51) Usage Using the command with only enable or disable turns logging on or off for the tar get at all le vels. For e xample, entering set log buffer enable with no other keyw ords turns on logging to the system buf fer of all f acilities at all l e vels. Ent ering set log bu ffe r disabl e with no [...]

  • Página 589

    System Log Commands 589 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples The follo wing command enables mark messages: WSS# set log mark enable success: change accepted. See Also show log config on page 581 set log trace mbytes This comman d is deprec ated in WSS Software Version 4.0. show log buffer Displays system inform[...]

  • Página 590

    590 System Log Commands NN47250-1 00 (Versio n 02.51) Defaults None. Access Enabled. History Usage The debug lev el produces a lot of messages, many of which can appear to be some what cryptic. Debug messages are used primarily by No rtel for troubleshooting and are no t intended for administrator use. Examples T ype the follo wing command to see t[...]

  • Página 591

    System Log Commands 591 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also • clear log on page 575 • show log conf ig on page 581 show log config Displays log configuration information. Syntax show log conf ig Defaults None. Access Enabled. Examples T o display ho w logging is co nfi gured, type the fo llo wing command: [...]

  • Página 592

    592 System Log Commands NN47250-1 00 (Versio n 02.51) Syntax show log trace [{ + | - | / } number -of-messages ] [ facili ty facility-name ] [ matching string ] [ sev erity severity-le vel ] Defaults None. Access Enabled. trace Displays the log messages in the trac e buf fer . + | - | / number -of-messag es Displays the number of messa ges specif i[...]

  • Página 593

    System Log Commands 593 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference History Examples T ype the follo wing command to see the facilitie s for which you can vie w ev ent messag es archi ved in the buf fer: WSS# show log trace facility ? <facility name> Select one of: KERNEL, AAA, SYSLOGD, ACL, APM, ARP , ASO, BOOT , CLI, C[...]

  • Página 594

    594 System Log Commands NN47250-1 00 (Versio n 02.51)[...]

  • Página 595

    595 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Boot Pr ompt Commands Boot prompt commands enable you to perform basic tasks, including booting a sy stem image file, from the boot prompt (boot>). A CLI session enters the boot prom pt if WSS Software does not boot successfully or you intentionally interrupt the boot process.[...]

  • Página 596

    596 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) autoboot Displays or changes the state of the autoboot option. The autoboot option controls whether a WSS automatically boots a system image after initial izing the hardware , following a system reset or power cycle. Syntax autoboot [ ON | on | OFF | off ] Defaults The autoboot option is enabl[...]

  • Página 597

    Boot Prompt Command s 597 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference boot Loads and executes a sy stem image file . Syntax boot [ BT= type ] [ DEV= device ] [ FN= fil e n a me ] [ HA= ip-a ddr ] [ FL= num ] [ OPT= option ] [ OPT+= option ] Defaults The boot settings in the currently ac tive boot prof ile are used by default. [...]

  • Página 598

    598 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) Usage If you use an optional parameter , the parameter setting overrides the settin g of the same parameter in the currently acti ve boot prof ile. Ho we ver , the boot profil e itself is not changed. T o display the currently acti v e boot prof ile, use the sho w command. T o change the curre[...]

  • Página 599

    Boot Prompt Command s 599 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Access Boot prompt. Usage After you type the change command , the system interac ti vely di splays the c urrent setting of each parameter and prompts you for the ne w setti ng. When prompted, type the ne w setting, press Enter to accept the curre nt setting,[...]

  • Página 600

    600 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) create Creates a new boot profile. (For in formation about boot profiles, see show o n page 596 .) Syntax create Defaults The new boot prof ile has the same settings as the currently acti ve boot prof ile by default. Access Boot prompt. Usage A WSS can ha ve up to four boot prof iles. The boot[...]

  • Página 601

    Boot Prompt Command s 601 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o remo ve the current ly acti ve bo ot prof ile, type the follo wing command: boot> delete BOOT Inde x: 1 BOOT TYPE: c DEVICE: boot1: FILENAME: default FLAGS: 00000000 OP TIONS: run=nos;boot=0 See Also • change on page 588 • create on page [...]

  • Página 602

    602 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) diag Accesses the diagnostic mode. Syntax diag Defaults The diagnostic mode is disabled by def ault. Access Boot prompt. Usage Access to the diagnostic mode requi res a password, which is not user conf igurable. Use this mode only if advised to do so by Nortel. dir Displays the boot code and s[...]

  • Página 603

    Boot Prompt Command s 603 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference fver Displays the version of a system image file installed in a specific loc ation on a WSS. Syntax fver { c: | d: | e: | f: | boot0: | boot1: } [ filename ] Defaults None. Access Boot prompt. Usage T o display the image filenames, use the dir com mand. This[...]

  • Página 604

    604 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) Examples The follo wing command displays detailed information for the fver command: boot> help fver fver Display the vers ion of the specified de vice:filename. USAGE: fver [c:file|d:file|e:file|f :file|boot0:file| boot1:file|bo ot2:file|boo t3:file] Comm and to display the vers ion of the [...]

  • Página 605

    Boot Prompt Command s 605 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference See Also help on page 593 next Activates and displays the boot profile in the next boot profile slot. (For informati on about boot profiles, see show on page 596 .) Syntax next Defaults None. Access Boot prompt. Usage A WSS contains 4 boot profile slots, num[...]

  • Página 606

    606 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) boot> re s et Nortel WSS Bootstrap 1.17 Release T esting Low Memory 1 ............ T esting Low Memory 2 ............ CISTPL_VE RS_1: 4.1 <SanDisk> <SDP> <5/3 0.6> Reset Cause (0x02) is COLD Nortel WSS Bootstrap/Bootloader V ersion 1.6.5 Release Bootstrap 0 version: 1.17 A[...]

  • Página 607

    Boot Prompt Command s 607 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference Examples T o display the currently acti ve boot profil e, type the follo wing command at the boot prompt: boot> show BOOT Index: 0 BOOT TYPE: c DEVICE: boot1: FILENAME: default FLAGS: 00000000 OP TIONS: run=nos;boot=0 The following is an example of a boot[...]

  • Página 608

    608 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) See Also • change on page 588 • create on page 590 • delete on page 590 • dhcp on page 591 DEVICE Location of the system image f ile: • c: —Nonvolatile storage area containing boot partition 0 • d: —Nonvolatile storage area containing boot partition 1 • e: —Primary partitio[...]

  • Página 609

    Boot Prompt Command s 609 Nortel WLAN—Security Swit ch 2300 Series Command Line Reference • next on page 595 test Displays or changes the state of the poweron test flag. The pow eron test flag controls whet her a WSS performs a set of self tests prior to the boot process. Syntax test [ ON | on | OF F | off ] Defaults The po weron test flag is d[...]

  • Página 610

    610 Boot Prompt Comma nds NN47250-1 00 (Versio n 02.51) Bootloader 1 version: 1.6.3 WSS Board Revision: 3. WSS Controller Revision: 24. POE Board Revision: 1 POE Controller Revision : 6 See Also • dir on page 592 • fver on page 593[...]

  • Página 611

    Nortel WLAN Security Switch 2300 Series Command Line Refere nce 611 Command Inde x Numerics 84100 CommandName clear ap radio 237 A access levels, command line 17 administrative access mode 9 advisory notices, explanations of 7 all access 17 asterisk s (*) in MAC addresses 12 in user globs 12 asterisks. See double ast erisks (**); single asterisks ([...]

  • Página 612

    612 Command Index NN47250-100 (3 20658-G Version 02.51) clear port type 27 clear port-group 25 clear prompt 55 clear radio-profile 242 clear radius 483 clear radius client system-ip 484 clear radius proxy client 485 clear radius proxy port 485 clear radius server 486 clear rfdetect attack-list 512 clear rfdetect black-list 512 clear rfdetect ignore[...]

  • Página 613

    Command Index 613 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence D delete 539, 590 delimiter characters, for user globs 12 dhcp 591 diag 592 dir 540, 592 disable 19 documentation, p roduct 6 dotted decimal notation, in IP addresses 12 double asterisks (**) in user globs 12 in VLAN globs 14 wildcard 16 E enable 19 enabled access 17[...]

  • Página 614

    614 Command Index NN47250-100 (3 20658-G Version 02.51) P password invalid for last-resort users 206 ping 107 port lists conventions for 14 product documentation 6 Q quickstart 57 quit 20 R reset 595 reset ap 245 reset port 32 reset system 546 restore 547 rmdir 548 S safety notices, explanations of 7 save config 548 set {ap | dap} radio m ode 270 s[...]

  • Página 615

    Command Index 615 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence set igmp 416 set igmp lmqi 416 set igmp mrouter 417 set igmp mrsol 417 set igmp mrsol mrsi 418 set igmp oqi 418 set igmp proxy-report 419 set igmp qi 420 set igmp qri 420 set igmp querier 421 set igmp receiver 422 set igmp rv 422 set interface 109 set interface dhcp-[...]

  • Página 616

    616 Command Index NN47250-100 (3 20658-G Version 02.51) set radio-profile max-t x-lifetime 290 set radio-profile mode 291 set radio-profile preamble-length 294 set radio-profile psk-phrase 294 set radio-profile psk-raw 294 set radio-profile rts-thresho ld 297 set radio-profile service-p rofile 298 set radio-profile shared-key-auth 304 set radio-pro[...]

  • Página 617

    Command Index 617 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence set spantree maxage 395 set spantree portcost 395 set spantree portfast 396 set spantree portpri 397 set spantree portvlancost 397 set spantree portvlanpri 398 set spantree priority 399 set spantree uplinkfast 399 set summertime 140 set system contact 62 set system c[...]

  • Página 618

    618 Command Index NN47250-100 (3 20658-G Version 02.51) show rfdetect counters 523 show rfdetect data 524 show rfdetect ignore 526 show rfdetect mobility-domain 526 show rfdetect ssid-list 530 show rfdetect vendor-list 531 show rfdetect visible 531 show roaming station 84 show roaming vlan 85 show security l2-restrict 87 show service-profile 380 sh[...]

  • Página 619

    Command Index 619 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence in MAC addresses 12 in user globs 12 in VLAN globs 14[...]

  • Página 620

    620 Command Index NN47250-100 (3 20658-G Version 02.51)[...]

  • Página 621

    [...]

  • Página 622

    Nortel WLAN—Security Switch 2300 Series Command Line Reference Nortel WLAN—Security Switch 2300 Series Release 6.0.7 Document Number: NN47250-100 Document Stat us: Standard Document V ers ion: 02.51 Release Date: Jun e 2008 Copyright © Nortel Networks Limited 2007-2008 Alll Rights Reserved The information in this document is subject to change [...]