Nortel Networks 2300 Series инструкция обслуживания

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622

Идти на страницу of

Хорошее руководство по эксплуатации

Законодательство обязывает продавца передать покупателю, вместе с товаром, руководство по эксплуатации Nortel Networks 2300 Series. Отсутствие инструкции либо неправильная информация, переданная потребителю, составляют основание для рекламации в связи с несоответствием устройства с договором. В законодательстве допускается предоставлении руководства в другой, чем бумажная форме, что, в последнее время, часто используется, предоставляя графическую или электронную форму инструкции Nortel Networks 2300 Series или обучающее видео для пользователей. Условием остается четкая и понятная форма.

Что такое руководство?

Слово происходит от латинского "instructio", тоесть привести в порядок. Следовательно в инструкции Nortel Networks 2300 Series можно найти описание этапов поведения. Цель инструкции заключается в облегчении запуска, использования оборудования либо выполнения определенной деятельности. Инструкция является набором информации о предмете/услуге, подсказкой.

К сожалению немного пользователей находит время для чтения инструкций Nortel Networks 2300 Series, и хорошая инструкция позволяет не только узнать ряд дополнительных функций приобретенного устройства, но и позволяет избежать возникновения большинства поломок.

Из чего должно состоять идеальное руководство по эксплуатации?

Прежде всего в инструкции Nortel Networks 2300 Series должна находится:
- информация относительно технических данных устройства Nortel Networks 2300 Series
- название производителя и год производства оборудования Nortel Networks 2300 Series
- правила обслуживания, настройки и ухода за оборудованием Nortel Networks 2300 Series
- знаки безопасности и сертификаты, подтверждающие соответствие стандартам

Почему мы не читаем инструкций?

Как правило из-за нехватки времени и уверенности в отдельных функциональностях приобретенных устройств. К сожалению само подсоединение и запуск Nortel Networks 2300 Series это слишком мало. Инструкция заключает ряд отдельных указаний, касающихся функциональности, принципов безопасности, способов ухода (даже то, какие средства стоит использовать), возможных поломок Nortel Networks 2300 Series и способов решения проблем, возникающих во время использования. И наконец то, в инструкции можно найти адресные данные сайта Nortel Networks, в случае отсутствия эффективности предлагаемых решений. Сейчас очень большой популярностью пользуются инструкции в форме интересных анимаций или видео материалов, которое лучше, чем брошюра воспринимаются пользователем. Такой вид инструкции позволяет пользователю просмотреть весь фильм, не пропуская спецификацию и сложные технические описания Nortel Networks 2300 Series, как это часто бывает в случае бумажной версии.

Почему стоит читать инструкции?

Прежде всего здесь мы найдем ответы касательно конструкции, возможностей устройства Nortel Networks 2300 Series, использования отдельных аксессуаров и ряд информации, позволяющей вполне использовать все функции и упрощения.

После удачной покупки оборудования/устройства стоит посвятить несколько минут для ознакомления с каждой частью инструкции Nortel Networks 2300 Series. Сейчас их старательно готовят или переводят, чтобы они были не только понятными для пользователя, но и чтобы выполняли свою основную информационно-поддерживающую функцию.

Содержание руководства

  • Страница 1

    Part No. NN47250-100 June 2008 4655 Great America Parkway Santa Clara, CA 95054 Nor tel WLAN Security Switc h 2300 Series Command Line Ref erence[...]

  • Страница 2

    2 NN47250-100 (Version 02 .51) Copyright © 2007-2008 Nortel Ne tworks. All rights reser ved. The information in this document is subj ect to change without notice. The statements, config urations, technical data, and recommendations in this docume nt are believ ed to be accura te and reliable, but are presen ted without e xpress or implied warrant[...]

  • Страница 3

    3 Nortel WLAN—Security Switch 2300 Series Command Line Reference SUCH POR TION S OF THE SOFTW ARE ARE PRO VIDED “ AS IS” AND WITHOUT ANY EXPRESS OR IM PLIED W ARRANTIES, INCLUDING, WITHO UT LIMIT A TION, THE IMPLIED W ARRANTIES OF MERCHANT ABILITY AND FITNESS FOR A P AR TICULAR PURPOSE. In addition, the program and information contained herei[...]

  • Страница 4

    4 NN47250-100 (Version 02 .51) de veloper and/or supplier is an intended be nef iciary of this Section. Some jurisd ictions do not allo w th ese limitations or exclusions and, in such e vent, they may n ot apply . 4.General a) If Customer is the United States Go v ernment, the follo wi ng paragrap h shall apply: All No rtel Software a v ailable und[...]

  • Страница 5

    5 Nortel WLAN—Security Switch 2300 Series Command Line Reference Exclusive Remed y Your sole remedy under the limited warranty described above is, at Nort el’s sole option and expense, the repair or replacement of the non-conforming Product or refund of the purchase price o f the non-conforming Products. Nortel’s obligation under this limited[...]

  • Страница 6

    6 NN47250-100 (Version 02 .51) END CUSTOMER MAY ALSO HAVE OTHER RIGHTS, WHICH VA RY FROM STATE/JURISDICTION TO STATE/JURISDICTION. TO THE MAXIMUM EXTENT PERMITTED BY APPL ICABLE LAW, IN NO EVENT SHALL NORTEL OR ITS SUPPLIERS BE LIABLE FOR THE COST OF PROCUREMENT OF SUBSTITUTE G OODS OR SERVICES, LOSS OF PROFITS, OR FOR ANY SPECIAL, CONSEQUENTIAL, I[...]

  • Страница 7

    7 Nortel WLAN—Security Switch 2300 Series Command Line Reference (d) Nortel may provide update s, corrections, e nhancements, modifications or bug fixes for the Licensed Materials (“Updates”) to Licensee . Any such Update sh all be deemed part of t he Lic ensed Mate rials and sub ject to t he lice nse and all other terms and c onditions hereu[...]

  • Страница 8

    8 NN47250-100 (Version 02 .51) that is not covered by the above provisions shall be deemed “technical dat a-commercial item s” pursuant to DFAR section 227.7015(a). Any use, modification, reproduction, release, performance, display or disclosure of such technical data sh all be governed by the terms of DFAR section 227.7015(b). 8. Limitation of[...]

  • Страница 9

    9 Nortel WLAN—Security Switch 2300 Series Command Line Reference THIS SOFTWARE IS PROV IDED BY THE AUTH OR ``AS IS'' A ND ANY EXPR ESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANT ABILITY AND F I T NESS FOR A PART ICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL T HE AUTHOR BE LIAB LE FOR ANY [...]

  • Страница 10

    10 NN47250-100 (Version 02 .51)[...]

  • Страница 11

    11 Nortel WLAN— Management So ftware 230 0 Series Refe rence Guide How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Introducing the Nortel WLAN 2300 System . . . . . . . . . . . . . . . . . . . . . . . 5 Nortel WLAN 2300 Syst em . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Страница 12

    12 NN47250-102 (Version 02 .51) IP Services Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 AAA Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 Mobility Domain Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 Network Domain Comma[...]

  • Страница 13

    13 Nortel WLAN—Security Switch 2300 Series Command Line Reference Ho w to get help This section explains how to get help for Nortel products and services. Getting help from the Nortel web site The best way to get technical suppor t for Nortel products is from the Nortel Technical Support Web site: http://www .nortel.com/support This site provides[...]

  • Страница 14

    14 How to get help NN47250-100 (Version 02 .51)[...]

  • Страница 15

    15 Nortel WLAN—Security Switch 2300 Series Command Line Reference Intr oducing the Nor tel WLAN 2300 System This command reference expl ains WLAN Security Switch 2300 Series (W SS Software) command line interface (CLI) commands that you enter on a WLAN—Security Switch to configure and manage the Nortel WLAN 2300 System wireless LAN (WLAN). Read[...]

  • Страница 16

    16 Introduci ng the Nortel WLAN 2300 System NN47250-100 (Version 02 .51) Documentation Consult the following documents to plan, install, configure, and manage a Nortel WLAN 2300 System. Planning, Conf iguration, and Deployment • Nortel WLAN Management Softwar e 2300 Series User Guide . Instructions for planning, configuring, deploying, and managi[...]

  • Страница 17

    Introduci ng the Nortel WLAN 2300 System 17 Nortel WLAN—Security Switch 2300 Series Command Line Reference Safety and Advisory Notices The following kinds of safety and advisory notic es appear in this ma nual. Caution! This situation or con dition can lead to data lo ss or damage to the product or other proper ty . Note. This inf orm ation is of[...]

  • Страница 18

    18 Introduci ng the Nortel WLAN 2300 System NN47250-100 (Version 02 .51) T e xt and Syntax Con ventions Nortel manuals use the followi ng text and syntax conventions: Convention Use Monospace text Sets off command syntax or sample commands and system responses. Bold text Highlights commands that you enter or items you select. Italic te xt Designate[...]

  • Страница 19

    19 Nortel WLAN—Security Switch 2300 Series Command Line Reference Using the Command-Line Interface WLAN Security Switch 2300 Series (W SS Software) operates a No rtel WLAN 2300 System wireless LAN (WLAN) consisting of WLAN Management Software, WLAN—Security Sw itch (WSS), and Ac cess Points (APs). WSS Software has a command-line interface (CLI)[...]

  • Страница 20

    20 Using the Command-Line Interface NN47250-100 (Version 02 .51) Command Pr ompts By default, the WSS Software CLI provides th e following prompt for re st ricted users. The mm por tion shows the WSS model number (for example, 2360 ) and the nnnnnn portion shows the last 6 digits of the switch’s media ac cess control (MAC) address. WSS- mmmm - nn[...]

  • Страница 21

    Using the Co mmand-Li ne Interface 21 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax Notation The WSS Software CLI uses standard syntax n otation: • Bold monospace font identifies the comma nd and keyw ords you must type. F or e xample: set enablepass • Italic monospace font indica tes a placeholder for a value. For exa[...]

  • Страница 22

    22 Using the Command-Line Interface NN47250-100 (Version 02 .51) MA C Address Notation WSS Software displays MAC a ddresses in hexadecimal numb ers with a col on (:) delimiter betwee n bytes—for example, 00:01:02:1a:00:01. You can enter MAC addres ses with either hyphen (-) or colon (:) delimiters, but colons are preferred. For shortcuts: • Y o[...]

  • Страница 23

    Using the Co mmand-Li ne Interface 23 Nortel WLAN—Security Switch 2300 Series Command Line Reference number of characters up to, but not includi ng, a delimiter characte r in the wildcard. Valid use r wildcard delimiter chara cters are the at (@) sign and the period (.). For example, the following wildca rds identify the following users: MA C Add[...]

  • Страница 24

    24 Using the Command-Line Interface NN47250-100 (Version 02 .51) To match all VLANs, use the double-asterisk (**) wildcard ch aracters with no delimiters. To match any number of char- acters up to, but not including, a delimit er character in the wildcard, use the sin gle-asterisk (*) wildcard. Valid VLAN wildcard delimite r characters are the at ([...]

  • Страница 25

    Using the Co mmand-Li ne Interface 25 Nortel WLAN—Security Switch 2300 Series Command Line Reference Command-Line Editing WSS Software edi ting functions are si milar to those of many other ne twork operating systems. Keyboard Shortcuts The following table lists the keyboard shor tcuts for entering a nd editing CLI commands: History Buffer The hi[...]

  • Страница 26

    26 Using the Command-Line Interface NN47250-100 (Version 02 .51) Tabs The WSS Softwa re CLI uses the Tab key for command completion. You can type th e first few characters of a command and press the Tab key to display the command(s) that begin with those charac ters. For e xample: WSS# show i <T ab> ifm Show interfaces maintain ed by the inte[...]

  • Страница 27

    Using the Co mmand-Li ne Interface 27 Nortel WLAN—Security Switch 2300 Series Command Line Reference To see a subset of the online help, type the command for which you want more in formation. For exampl e, to display all the commands tha t begin with the letter i , type the following command: WSS# show i? ifm Show interfaces maintain ed by the in[...]

  • Страница 28

    28 Using the Command-Line Interface NN47250-100 (Version 02 .51)[...]

  • Страница 29

    29 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Commands Use access commands to control access to the WLAN Security Switch 2300 Series (WSS Software) (CLI). This chapter presents access comma nds alphabetically . Use the following table to locate com mands in this chapter based on their use. disable Changes the CLI sessio[...]

  • Страница 30

    30 Access Commands NN47250-100 (Version 02 .51) See Also • set enablepass on page 20 • set conf irm on page 60 quit Exit from the CLI session. Syntax quit Defaults None. Access All. Examples T o end the administrator’ s sessi on, type the followin g command: WSS> quit set enablepass Sets the password that provides enabled access (f or conf[...]

  • Страница 31

    Access Commands 31 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • disable on page 19 • enable on page 19[...]

  • Страница 32

    32 Access Commands NN47250-100 (Version 02 .51)[...]

  • Страница 33

    33 Nortel WLAN—Security Switch 2300 Series Command Line Reference P or t Commands Use port commands to configure and manage individual ports and load -sharing port groups. This chapter presents port commands alph abetically. Use the following table to locate c ommands in this chapter based on their use. Port T ype set port type ap on page 41 set [...]

  • Страница 34

    34 Port Commands NN47250-100 (Version 02 .51) clear ap Removes a AP. Syntax clear ap ap-num Defaults None. Access Enabled. Examples The follow ing command clears AP 1: WSS# clear ap 1 This will clear specified AP devices. W ou ld yo u like to continue? (y/n) [n] y See Also • set ap on page 33 • set port type ap on page 41 clear port counters Cl[...]

  • Страница 35

    Port Commands 35 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • monitor port counter s on page 28 • show port counters on page 46 clear port-group Removes a port group. Syntax clear port-group name name Defaults None. Access Enabled. Examples The follow ing command clears port group server1 : WSS# clear port-group n[...]

  • Страница 36

    36 Port Commands NN47250-100 (Version 02 .51) See Also • set port media-type on page 36 • show port media-type on page 48 clear port mirror Removes a port mirroring configuration. Syntax clear port mirr or Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Examples The follow ing command clears the port mirroring co[...]

  • Страница 37

    Port Commands 37 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear port type Removes all configuration se ttings from a port and resets the port as a network port. Syntax clear port type port-list Defaults The cleared port becomes a network por t but is not placed in any VLANs. Access Enabled. Usage Use this command to change a[...]

  • Страница 38

    38 Port Commands NN47250-100 (Version 02 .51) Examples The follow ing command clears port 5: WSS# clear port type 5 This may disrupt currently authenticat ed users. Are you sure? (y/n) [n] y success: change accepted. See Also • set port type ap on page 41 • set port type wir ed-auth on page 44 monitor port counters Displays and continuall y upd[...]

  • Страница 39

    Port Commands 39 Nortel WLAN—Security Switch 2300 Series Command Line Reference For error reporting, the cyclic redundancy check (CRC) errors include misa lignment errors. Jumbo packets with valid CRCs are not counted. A short packet can be reported as a short packet, a CRC e rror, or an overrun. In some circum- stances, the transmitted octe ts c[...]

  • Страница 40

    40 Port Commands NN47250-100 (Version 02 .51) Table 3 describes the port statistics displayed by each statisti cs option. The Port and St atus fields are displayed for each option. T able 3: Output for monitor port counters Statistics Option Field Description Displayed f or All Options Port Port the statistics are displayed for . Status Port status[...]

  • Страница 41

    Port Commands 41 Nortel WLAN—Security Switch 2300 Series Command Line Reference transmit-errors Tx Cr c Number of frames transmitted by the port that had the correct length but contained an in v alid FCS va lu e . Tx Short Number of frames tran smitted by the port that were fewer than 64 bytes long. Tx Fragment T otal num ber of frames transmitte[...]

  • Страница 42

    42 Port Commands NN47250-100 (Version 02 .51) See Also show port counters on page 46 reset port Resets a port by toggling its link state a nd Power over Ethernet (PoE) state. Syntax res e t p or t po rt-list Defaults None. Access Enabled. Usage The res e t command disables the port’ s link and PoE (if applicable) for at least 1 second, then reena[...]

  • Страница 43

    Port Commands 43 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set port on page 35 set ap Configures a AP for an AP that is indirectly con nected to the WSS through an intermediate Layer 2 or Layer 3 network. Syntax set ap ap-num serial-id serial-ID model { 2330 | 23 30A | 2330B | 2332-A1 | 2332-A2 | 2332-A3 | 233 2-A4 |[...]

  • Страница 44

    44 Port Commands NN47250-100 (Version 02 .51) Defaults The defau lt v ales are the same as the d efaults for th e set p ort type ap command. Access Enabled. History Examples The follow ing command configures apAP 1 for AP model AP-2330A with serial-ID 0322199999: WSS# set ap 1 serial-id 0322199999 model 2330A success: change accepted. ap-num Number[...]

  • Страница 45

    Port Commands 45 Nortel WLAN—Security Switch 2300 Series Command Line Reference The following command removes AP 1: WSS# clear ap 1 This will clear specified AP devices. W ou ld yo u like to continue? (y/n) [n] y See Also • clear ap on page 24 • clear port type on page 27 • set port type ap on page 41 • set system countrycode on page 63 s[...]

  • Страница 46

    46 Port Commands NN47250-100 (Version 02 .51) Syntax set port-gr oup name gr oup-name po rt-list mode { on | off } Defaults Once configured, a group is enabled by default. Access Enabled. Usage Do not use dashes or hyphens in a port group name. If you do, WSS Software will not display or sav e the port group. You can configure up to 16 ports in a p[...]

  • Страница 47

    Port Commands 47 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set port media-type port-list rj45 Defaults The GBIC (f iber) interface is enabled, and the copper interface is disabled, by default. Access Enabled. History Introduced in WSS Software V ersion 4.0. Usage This command applies only to the 2380. If you set the po[...]

  • Страница 48

    48 Port Commands NN47250-100 (Version 02 .51) Examples The follo wing command sets port 2 to monitor po rt 1’ s traffi c: WSS# set port 1 observ er 2 See Also • clear port mirror on page 26 • show port mirror on page 49 set port name Assigns a name to a port. After naming a port, you can use the port name or number in other CLI commands. Synt[...]

  • Страница 49

    Port Commands 49 Nortel WLAN—Security Switch 2300 Series Command Line Reference set port negotia tion Disables or reenable s autonegotiation on gigabit Ethe rnet or 10/100 Ethernet ports. Syntax set port negotiation port-list { enable | disa ble } Defaults Autonegotiatio n is enabled on all Ethernet ports by def ault. Access Enabled. Usage The gi[...]

  • Страница 50

    50 Port Commands NN47250-100 (Version 02 .51) Defaults PoE is disabled on network and wired auth entication ports. The state o n AP ports depends on whether yo u enabled or disabl ed Po E when setting the port type. See set port type ap on page 41 . Access Enabled. Usage This command does not apply to an y gigabit Et hernet ports or to ports 7 and [...]

  • Страница 51

    Port Commands 51 Nortel WLAN—Security Switch 2300 Series Command Line Reference packets sent to a WSS port in such a conf igur ation can cause forw arding on the link to stop. Do not set the port speed of a gigabit port to auto . Although the CLI allo ws this setting, it is in valid. If you set the port speed of a gigabit po rt to auto , the link[...]

  • Страница 52

    52 Port Commands NN47250-100 (Version 02 .51) Syntax set port type ap port-list model { 2330 | 23 30A | 2330B | 2332-A1 | 2332-A 2 | 2332-A3 | 2332-A4 | 2332-A5 | 2332-A6 | 2332-E1 | 2332-E2 | 233 2-E3 | 2332-E4 | 2332-E5 |23 32-E6 | 2332-E7 | 2332-E8 | 233 2-E9 | 2332-J1 } poe { enable | disabl e } [ radiotyp e { 11a | 11b | 11g }] Note. Bef ore c[...]

  • Страница 53

    Port Commands 53 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults All WSS ports are network ports by default. Model AP-2330, AP-2330A, AP-2330B, and Series 2332 APs have two radios. On two-radio models, one radio is always 802.11a. The other radio is 802.11b/ g, but can be configured for 802.11b or 802.11g exclusively. If t[...]

  • Страница 54

    54 Port Commands NN47250-100 (Version 02 .51) To manage an AP on a switch model that d o es not have 10/100 Ethernet ports, use the set ap command to configure a AP connection on the switch. Examples The follo wing commands set port 2 for AP model 2330, enable PoE on the port, and specify external antenna model 2445 3 for the 802.11b/g radio: WSS# [...]

  • Страница 55

    Port Commands 55 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set port type wired-auth port-list [ tag tag-list ] [ max-sessions num ] [ auth-fall -thru { last-r esort | none | web-portal }] Defaults The default tag-list is null (no tag v alues). The default number of sessions is 1. The default f allthru authe ntication t[...]

  • Страница 56

    56 Port Commands NN47250-100 (Version 02 .51) For 802.1X clients, wired auth entication works only if the cl ients are directly attached to the wired authentica- tion port, or are attached through a hub that does not bloc k forwarding of packets from the client to the PAE group address (01:80:c2:00:00:03). Wire d authent ication works in accordanc [...]

  • Страница 57

    Port Commands 57 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Y ou can specify one statistic type with the command. Examples The follow ing command shows octet st atistics for port 3: WSS> show port counters octets port 3 Port S tatus Rx Octets Tx Octets ========== =========== ======== ========== ========== =========== [...]

  • Страница 58

    58 Port Commands NN47250-100 (Version 02 .51) See Also • clear port-group on page 25 • set port-gr oup on page 35 show port media-type Displays the enabled interface types on a 2380 switch’s gigabit Ethernet ports. Syntax show port media-type [ port-list ] Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. Usage This [...]

  • Страница 59

    Port Commands 59 Nortel WLAN—Security Switch 2300 Series Command Line Reference show port mirror Displays the port mirroring configuration. Syntax show port mirr or Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.1. Examples The follow ing command displays the port mirroring configuration on the switch: WSS# show port[...]

  • Страница 60

    60 Port Commands NN47250-100 (Version 02 .51) 9 9 up AP enabled 1.44 10 10 up - disabled off 1 1 1 1 down - disabled off 12 12 down - disa bled off 13 13 down - disa bled off 14 14 down - disa bled off 15 15 down - disa bled off 16 16 down - disa bled off 17 17 down - disa bled off 18 18 down - disa bled off 19 19 down - disabled off 20 20 down - d[...]

  • Страница 61

    Port Commands 61 Nortel WLAN—Security Switch 2300 Series Command Line Reference show port status Displays configuration and st atus information for ports. Syntax show port status [ port-list ] Defaults None. Access All. Examples The follow ing command displays information for all ports on a 22-port WSS: WSS# show port status Port Name Admin Oper [...]

  • Страница 62

    62 Port Commands NN47250-100 (Version 02 .51) See Also • clear port type on page 27 • set port on page 35 • set port name on page 3 8 • set port negotiation on page 39 • set port speed on page 40 • set port type ap on page 41 • set port type wir ed-auth on page 44 Admin Administrative status of the port: • up—The port is enabled. [...]

  • Страница 63

    63 Nortel WLAN—Security Switch 2300 Series Command Line Reference System Services Commands Use system servic es commands to configure and moni tor system in formation for a W LAN—Security Switch (WSS). This chapter presen ts system services comma nds alphabetically. Use the following table to located commands in this chapter based on their use.[...]

  • Страница 64

    64 System Services Commands NN47250-100 (Version 02 .51) clear banner motd Deletes the message-of-the-da y (MOTD) banner that is disp layed before the login prompt for each CLI session on the WSS. Syntax clear banner motd Defaults None. Access Enabled. Examples T o clear a banner , type the follo wing command : WSS# clear banner motd success: chang[...]

  • Страница 65

    System Services Commands 65 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear prompt Resets the system prompt to its previous ly configured value. If the pr ompt was not configured previously, this command resets the prompt to its default. Syntax clear prompt Defaults None. Access Enabled. Examples T o reset the prompt, type th[...]

  • Страница 66

    66 System Services Commands NN47250-100 (Version 02 .51) Examples T o clear the location of the W SS, type the following command: WSS# clear system location success: change accepted. See Also • set system contact on page 62 • set system countrycode on page 63 • set system idle-timeout on page 64 • set system ip-address on page 65 • set sy[...]

  • Страница 67

    System Services Commands 67 Nortel WLAN—Security Switch 2300 Series Command Line Reference traceroute Prin t the r oute packets take to network host See Also “Using CLI Help” on page 16 history Displays the command history buffer for the current CLI session. Syntax history Defaults None. Access All. Examples T o sho w the history of you r ses[...]

  • Страница 68

    68 System Services Commands NN47250-100 (Version 02 .51) Syntax set auto-config { enable | disable } Defaults The auto-config option is automatically enable d on an unconf igured 2350 when the factory reset switch is pressed during power on. Ho we ver , auto -config is disabled by default on other models. Access Enabled. History Introduced in WSS S[...]

  • Страница 69

    System Services Commands 69 Nortel WLAN—Security Switch 2300 Series Command Line Reference 1 Configure a VLAN: 2360# set vlan 1 port 7 success: change accepted. 2 Enable the DHCP client on VLAN 1: WSS# set interface 1 ip dhcp-client enable success: change accepted. 3 Enable the auto-config option: WSS# set auto-config enable success: change accep[...]

  • Страница 70

    70 System Services Commands NN47250-100 (Version 02 .51) • Number sign (#) • Question mark (?) • Single quotation mark (') Examples T o create a banner that says Update meeting at 3 p.m. , type the following command: WSS# set banner motd ^Updat e meeting at 3 p.m.^ success: change accepted. See Also • clear banner motd on page 54 • s[...]

  • Страница 71

    System Services Commands 71 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set length number-of-lines Defaults WSS Software displays 24 lines by default. Access All. Usage Use this command if the output of a CLI comma nd is greater than the number of lines allowed by default for a terminal type. Examples T o set the number [...]

  • Страница 72

    72 System Services Commands NN47250-100 (Version 02 .51) See Also show licenses on page 67 set prompt Changes the CLI prompt for the WSS to a str ing you specify. Syntax set promp t string Defaults The factory default for the WSS name is WSS- mm - nnn nnn , where mm is the model number and nnnnnn is the last 6 digits of the 12-digit s ystem MA C ad[...]

  • Страница 73

    System Services Commands 73 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The following command sets the system contact information to tamara@e xample.com : 23x0# set system contact tamara@example.com success: change accepted. See Also • clear system on page 55 • set system location on page 65 • set system name on [...]

  • Страница 74

    74 System Services Commands NN47250-100 (Version 02 .51) See Also show config on page 553 set system idle-timeout Specifies the maximum number of seconds a CLI management sessio n with the switch c an remain idle b efore WSS Software terminat es the session. Syntax set system idle-timeout seconds Defaults 3600 seconds (one hour). Access Enabled. Hi[...]

  • Страница 75

    System Services Commands 75 Nortel WLAN—Security Switch 2300 Series Command Line Reference set system ip-address Sets the sy stem IP address so t hat it ca n be used by various services in the WSS. Syntax set system ip-address ip-addr Defaults None. Access Enabled. Examples The follow ing command sets the IP address of the WSS to 192.168.253.1: W[...]

  • Страница 76

    76 System Services Commands NN47250-100 (Version 02 .51) See Also • clear system on page 55 • set system contact on page 62 • set system name on page 66 • show system on page 68 set system name Changes the name of the WSS from th e default system na me and also provides content for the CLI prompt, if you do not specify a prompt. Syntax set [...]

  • Страница 77

    System Services Commands 77 Nortel WLAN—Security Switch 2300 Series Command Line Reference show banner motd Shows the banner that was configured with the set banner motd command. Syntax show banner motd Defaults None. Access Enabled. Examples T o display the banner with the message of the day , type the follo wing command: WSS# show banner motd h[...]

  • Страница 78

    78 System Services Commands NN47250-100 (Version 02 .51) See Also show system on page 68 show system Displays system information. Syntax show system Defaults None. Access Enabled. History Examples T o sho w system information, type the follo wing command: WSS# show system ========== =========== ======== ========== ========== =========== ========== [...]

  • Страница 79

    System Services Commands 79 Nortel WLAN—Security Switch 2300 Series Command Line Reference T able 1: show system output Field Description Product Name WSS model number . System Name System name (factory defa ult, or optionally c onfigured with set system name ). System Countrycode Country-specific 802.11 code required for AP operation (conf igure[...]

  • Страница 80

    80 System Services Commands NN47250-100 (Version 02 .51) See Also • clear system on page 55 • set system contact on page 62 • set system countrycode on page 63 • set system idle-timeout on page 64 • set system ip-address on page 65 • set system location on page 65 • set system name on page 66 show tech-support Provides an in-depth sna[...]

  • Страница 81

    System Services Commands 81 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Enter this command before calling the Nort el Enterprise T echni cal Support (NETS). See “Ho w to get help” on page 3 for more info rmation. See Also • show boot o n page 55 1 • show conf ig on page 553 • show licenses on page 67 • show sy[...]

  • Страница 82

    82 System Services Commands NN47250-100 (Version 02 .51)[...]

  • Страница 83

    83 Nortel WLAN—Security Switch 2300 Series Command Line Reference VLAN Commands Use virtual LAN (VLAN) commands to configure and manage para meters for individual por t VLANs on network ports, and to display information a bout clients roaming within a mobility domain. This chap ter presents VLAN commands alphabetically. Use the following table to[...]

  • Страница 84

    84 VLAN Commands NN47250-100 (Version 02 .51) clear fdb Deletes an entry from the fo rwarding database (FDB). Syntax clear fdb { perm | static | dynamic | port port-list } [ vlan vlan-id ] [ tag tag-value ] Defaults None. Access Enabled. Usage Y ou can delete forwarding databa se entries based on entry type, port, or VLAN. A VLAN name or number is [...]

  • Страница 85

    VLAN Commands 85 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear security l2-restrict Removes one or more MAC addresses fro m the list of destination MAC addresses to which clients in a VLAN are allowed to send traffic at Lay er 2. Syntax clear security l2-restri ct vlan vlan-id [ permit-mac mac-addr [ mac-addr ] | all ] Defa[...]

  • Страница 86

    86 VLAN Commands NN47250-100 (Version 02 .51) Defaults If you do not specify a VLAN or all , counters for all VLANs are cleared. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage T o clear MA C addresses from the list of addresses to which clients are allowed to send d ata, use the clear security l2-restrict command instead. Ex[...]

  • Страница 87

    VLAN Commands 87 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The following command remo ves port 1 from VLAN gr een : WSS# clear vlan green port 1 This may disrupt user connectivity . Do you wish to continue? (y/n) [n] y success: change accepted. The following command removes port 4, which uses tag value 69, from VLAN [...]

  • Страница 88

    88 VLAN Commands NN47250-100 (Version 02 .51) Examples The follo wing command adds a permanent entry f or MA C addres s 00:11:22:aa :bb:cc on ports 3 and 5 in VLAN blue : WSS# set fdb perm 00:11:22:aa:b b:cc port 3,5 vlan blue success: change accepted. The following command adds a st atic entry for MAC add ress 00: 2b:3c:4d:5e:6f on port 1 in the d[...]

  • Страница 89

    VLAN Commands 89 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set security l2-restrict vlan vlan-id [ mode { enable | disable }] [ permit-mac mac-addr [ mac-addr ]] Defaults Layer 2 restriction is disabled by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.1. Usage Y ou can specify multiple a ddres[...]

  • Страница 90

    90 VLAN Commands NN47250-100 (Version 02 .51) Nortel recommends that you do not use the name default . This name is already used for VLAN 1. Nortel also recommends that you do not ren ame the default VLAN. You cannot use numbers in the VLAN name. Nortel re commends that you do not use the same name with different capitalizations for VLANs. For exam[...]

  • Страница 91

    VLAN Commands 91 Nortel WLAN—Security Switch 2300 Series Command Line Reference The following command adds port 16 to VLAN beige and assigns tag value 86 to the port: WSS# set vlan bei ge port 16 tag 86 success: change accepted. See Also • clear vlan on page 76 • set vlan name on page 79 • show vlan config on page 89 set vlan tunnel-affinit[...]

  • Страница 92

    92 VLAN Commands NN47250-100 (Version 02 .51) Defaults None. Access All. Usage T o display the entire forwarding database, enter the show fdb command without options. T o display only a portion of the data base, use optional parame ters to specify the types of entries you want to display . Examples The follow ing command displays all entries in the[...]

  • Страница 93

    VLAN Commands 93 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear fdb on page 74 • set fdb on page 77 show fdb agingtime Displays the aging timeout period for forwarding database en tries. Syntax show fdb agingtime [ vlan vlan-id ] Defaults None. Access All. Examples The follow ing command displays the aging tim[...]

  • Страница 94

    94 VLAN Commands NN47250-100 (Version 02 .51) See Also set fdb agingtime on page 78 show fdb count Lists the number of entries in the forwarding database. Syntax show fdb count { perm | static | dynamic } [ vlan vlan-id ] Defaults None. Access All. Examples The follow ing command lists the number of dyna mic entries that the forwarding d atabase co[...]

  • Страница 95

    VLAN Commands 95 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage The output displays roaming stations within the previous 1 second. Examples T o display all stations roaming to the WSS, type the follo wing command: WSS # show r oaming station User Name Station Address VLAN State ---------------------- ---------- ------- -----[...]

  • Страница 96

    96 VLAN Commands NN47250-100 (Version 02 .51) Syntax show r oamin g vlan Defaults None. Access Enabled. Examples The follo wing comma nd show s the current roami ng VLANs: WSS# show r oaming vlan[...]

  • Страница 97

    VLAN Commands 97 Nortel WLAN—Security Switch 2300 Series Command Line Reference VLAN WSS Affinity ---------- ------ ------ --------- -- ------ vlan-cs 192.168.14.2 5 vlan-eng 192.168.14.4 5 vlan-fin 192.168.14.2 5 vlan-it 192. 168.14.4 5 vlan-it 192. 168.14.2 5 vlan-pm 192.168.14.2 5 vlan-sm 192.168.14.2 5 vlan-tp 192.168. 14.4 5 vlan-tp 192.168.[...]

  • Страница 98

    98 VLAN Commands NN47250-100 (Version 02 .51) Examples The follo wing command sho ws Layer 2 forw arding restriction information for all VLANs: WSS# show security l2-r estrict VLAN Name En Drops Permit MAC Hits ---- ------- --------- -- - --------- --- ---------- ------ --- --- ---------- ----- 1 default Y 0 00:0b:0e:02:53:3e 5947 00:30:b6:3e:5c:a8[...]

  • Страница 99

    VLAN Commands 99 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples T o display all tunnels from a WSS to other swit ches in the Mobility Domain, type the follo wing command. WSS # show tunnel VLAN Local Address Rem ote Address State Port L VID R VID --------------- --------------- --------------- ------- ----- ----- ----- vl[...]

  • Страница 100

    100 VLAN Commands NN47250-100 (Version 02 .51) WSS# show vlan conf ig b urgundy Admin VLAN T unl Port VLAN Name S tatus S tate Af fin Port T ag S tate ---- ------- --------- --- --- ----- ---- - ---------- ------ --- -- ------------ ------ 2 bur gundy Up Up 5 2 none Up 3 none Up 4 none Up 6 none Up 1 1 none Up t:10.10.40.4 none Up Table 16 describe[...]

  • Страница 101

    VLAN Commands 101 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear vlan on page 76 • set vlan name on page 79 • set vlan port on page 80 • set vlan tunnel-aff inity on page 81[...]

  • Страница 102

    102 VLAN Commands NN47250-100 (Version 02 .51)[...]

  • Страница 103

    103 Nortel WLAN—Security Switch 2300 Series Command Line Reference Quality of Ser vice Commands Use Quality of Service (QoS) commands to configure packet prioritization in WSS Software. Pack et prioritization ensures that WSSs and APs give pr eferential treatment to high- priority traffic such as voice and video. (To override the prioritiz ation [...]

  • Страница 104

    104 Quality of Service Commands NN47250-100 (Version 02 .51) Examples The follow ing command resets all QoS mappings: WSS# clear qos success: change accepted. The following command resets the mapping used to classify packets with DSCP value 44: WSS# clear qos dscp-to-qos-map 44 success: change accepted. set qos cos-to-dscp-map Changes the value to [...]

  • Страница 105

    Quality of Service Commands 105 Nortel WLAN—Security Switch 2300 Series Command Line Reference set qos dscp-to-cos-map Changes the internal QoS value to whic h WSS Software maps a pa cket’s DSCP value when classifying inbound packets. Syntax set qos dscp-to-cos-map dscp-rang e cos level Defaults The defaults are listed by the show qos command. [...]

  • Страница 106

    106 Quality of Service Commands NN47250-100 (Version 02 .51) Ingress QoS Classification Map (dscp-to-cos) Ingress DSCP Co S Level ========== =========== ======== ========== ========== =========== ========== ========= 00-09 0 0 0 0 0 0 0 0 1 1 10-19 1 1 1 1 1 1 2 2 2 2 20-29 2 2 2 2 3 3 3 3 3 3 30-39 3 3 4 4 4 4 4 4 4 4 40-49 5 5 5 5 5 5 5 5 6 6 50-[...]

  • Страница 107

    107 Nortel WLAN—Security Switch 2300 Series Command Line Reference IP Ser vices Commands Use IP services commands to configur e and manage IP interface s, management servic es, the Domain Name Service (DNS), Network Time Protocol (NTP), and aliases, and to ping a host or trace a route. This chapter present s IP services commands alphabeti cally. [...]

  • Страница 108

    108 IP Services Commands NN47250-100 (Version 02 .51) Time and Date set timedate on page 142 set timezone on page 143 set summertime on page 140 show timedate on page 161 show timezone on page 161 show summertime on page 160 clear timezone on page 106 clear summertime on page 105 NTP set ntp on page 121 set ntp server on page 122 set ntp update-int[...]

  • Страница 109

    IP Services Commands 109 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear interface Removes an IP interface. Syntax clear interface vlan-id ip Defaults None. Access Enabled. Usage If the interface you want to remov e is configured as the system IP address, remo ving the address can interfere with system ta sks that use the sys[...]

  • Страница 110

    110 IP Services Commands NN47250-100 (Version 02 .51) clear ip alias Removes an alias, which is a string that repres ents an IP address. Syntax clear ip alias name Defaults None. Access Enabled. Examples The following command removes the alia s server1 : WSS# clear ip alias server1 success: change accepted. See Also • set ip alias on page 113 •[...]

  • Страница 111

    IP Services Commands 111 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear ip dns server Removes a DNS server from a WSS configuratio n. Syntax clear ip dns serv er ip-addr Defaults None. Access Enabled. Examples The follow ing command removes DNS serv er 10.10.10 .69 from a WSS’ s conf iguration: WSS# clear ip dns serv er 10[...]

  • Страница 112

    112 IP Services Commands NN47250-100 (Version 02 .51) See Also • set ip route on page 116 • show ip r oute on page 153 clear ip telnet Resets the Telnet server’s TCP port n umber to its default value. A W SS listens for Telnet management tr affic on the Telnet server port. Syntax clear ip telnet Defaults The default T elnet port number is 23.[...]

  • Страница 113

    IP Services Commands 11 3 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set ntp on page 121 • set ntp serv er on page 122 • set ntp update-interval on page 122 • show ntp on page 156 clear ntp update-interval Resets the NTP update interval to the default value. Syntax clear ntp update-inter val Defaults The default NTP [...]

  • Страница 114

    114 IP Services Commands NN47250-100 (Version 02 .51) See Also • set snmp community on page 123 • show snmp co mmunity on page 15 8 clear snmp notify profile Clears an SNMP not ification profile. Syntax clear snmp notify prof ile pr of ile- name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follow [...]

  • Страница 115

    IP Services Commands 11 5 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set snmp notify target on page 131 • show snmp notify target on page 159 clear snmp usm Clears an SNMPv3 user. Syntax clear snmp usm usm-user name Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The foll[...]

  • Страница 116

    116 IP Services Commands NN47250-100 (Version 02 .51) • show timedate on page 161 • show timezone on page 161 clear system ip-address Clears the syst em IP address. Syntax clear system ip-address Defaults None. Access Enabled. Usage Clearing the system IP address ca n interfere with system tasks that use the system IP address, including the fol[...]

  • Страница 117

    IP Services Commands 11 7 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear summertime on page 105 • set summertime on page 140 • set timedate on page 142 • set timezone on page 143 • show summertime on page 160 • show timedate on page 161 • show timezone on page 161 ping Tests IP connectivity between a[...]

  • Страница 118

    118 IP Services Commands NN47250-100 (Version 02 .51) • interval —100 (one tenth of a second) • size —56. Access Enabled. Usage T o stop a ping command that is in progress, press Ctrl+C. A WSS cannot ping itself. WSS Soft ware d oes not support this. Examples The follo wing command pings a de vi ce that has IP address 10.1.1.1: WSS# ping 10[...]

  • Страница 119

    IP Services Commands 11 9 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set arp agingtim e on page 109 • show arp on page 144 set arp agingtime Changes the aging timeout for dynamic ARP entries. Syntax set arp agingtime seconds Defaults The default aging tim eout is 1200 seconds. Access Enabled. Usage Aging applies[...]

  • Страница 120

    120 IP Services Commands NN47250-100 (Version 02 .51) Defaults None. Access Enabled. Usage Y ou can assign one IP in terface to each VLAN . If an interface is already configured on the VLAN you specif y, this command replaces the interface. If you replace an interface that is in use as the system IP address, replacing the interface can inte rfere w[...]

  • Страница 121

    IP Services Commands 121 Nortel WLAN—Security Switch 2300 Series Command Line Reference WSS Software also has a configura ble DHCP server. (See set interface dhcp-serv er on page 111 .) You can configure a DHCP client and DHCP server on the same VLAN, but only the client or the serv er can be enabled. The DHCP client and DHCP server cannot both b[...]

  • Страница 122

    122 IP Services Commands NN47250-100 (Version 02 .51) Access Enabled. History Usage By default, a ll addresses e xcept the host address of the VLAN, th e network broadcast address, and the subnet broadcast addr ess are included in the range. If you specify th e range, the start address must be lo wer than the stop address, and all addre sses must b[...]

  • Страница 123

    IP Services Commands 123 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults IP interfac es are enabled by defaul t. Access Enabled. Examples The follo wing command disables the IP interface on VLAN ma uve : WSS# set interface ma uv e status do wn success: set interface mauve to down See Also • clear interface on page 99 •[...]

  • Страница 124

    124 IP Services Commands NN47250-100 (Version 02 .51) Access Enabled. Examples The follow ing command enables DNS on a WSS: WSS# set ip dn s enable St a r t D N S Cl i e n t See Also • clear ip dns domain on page 100 • clear ip dns server on page 101 • set ip dns domain on page 114 • set ip dns serv er on page 115 • show ip dns on page 15[...]

  • Страница 125

    IP Services Commands 125 Nortel WLAN—Security Switch 2300 Series Command Line Reference set ip dns server Specifies a DNS server to use for resolv ing hostnames you enter in CLI commands. Syntax set ip dns serv er ip-addr { primary | secondary } Defaults None. Access Enabled. Usage Y ou can configure a WSS to use one primary DNS server and up to [...]

  • Страница 126

    126 IP Services Commands NN47250-100 (Version 02 .51) set ip https server Enables the HT TPS server on a WS S. The HTTPS s erver is required for We b View access t o the switch. Syntax set ip https serv er { enable | disab le } Defaults The HTTPS server is disabled by default. Access Enabled. Examples The follow ing command enables the HTTPS server[...]

  • Страница 127

    IP Services Commands 127 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. Usage WSS Software can use a st atic route only if a direct route in the route table resolves the static route. WSS Softwa re adds routes with next-hop types Lo cal and Direct when you add an IP interface to a VLAN, if the VLAN i[...]

  • Страница 128

    128 IP Services Commands NN47250-100 (Version 02 .51) • clear ip route on page 101 • show interface on page 149 • show ip r oute on page 153 set ip snmp server Enables or disables the SNMP service on the WSS. Syntax set ip snmp server { enable | disable } Defaults The SNMP service is disabled by default. Access Enabled. Examples The follow in[...]

  • Страница 129

    IP Services Commands 129 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command changes the SSH port number on a WSS to 6000: WSS# set ip ssh port 6000 success: change accepted. See Also • set ip ssh serv er on page 119 • set ip ssh serv er on page 119 • set ip ssh serv er on page 119 set ip ssh serve[...]

  • Страница 130

    130 IP Services Commands NN47250-100 (Version 02 .51) set ip telnet Changes the TCP port number on which a WSS listens for Te lnet management traffic . Syntax set ip telnet port-n um Defaults The default T elnet port number is 23. Access Enabled. Examples The follow ing command changes the T elnet port number on a WSS to 5000: WSS# set ip telnet 50[...]

  • Страница 131

    IP Services Commands 131 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage The maximum number of T elnet sessions s upported on a WSS is eight. If SSH is also enabled, the switch can have up to eight T elnet or SSH sessions, in an y combination, and one console session. Examples The following command enables the T elnet server [...]

  • Страница 132

    132 IP Services Commands NN47250-100 (Version 02 .51) set ntp server Configures a WSS t o use an NTP server. Syntax set ntp serv er ip-addr Defaults None. Access Enabled. Usage Y ou can configure up to three NTP servers. WSS Software queries all the servers and selects the best respons e based on the method de scribed in RFC 1305, Network T ime Pro[...]

  • Страница 133

    IP Services Commands 133 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear ntp serv er on page 102 • clear ntp update-interv al on page 103 • set ntp on page 121 • set ntp serv er on page 122 • show ntp on page 156 set snmp community Configures a community string for SNMPv1 or SNMPv2c. Syntax set snmp commu[...]

  • Страница 134

    134 IP Services Commands NN47250-100 (Version 02 .51) History Usage SNMP community strings are passed as cle ar te xt in SNMPv1 and SNMPv2c . Nortel recommends that you use strings that cannot easily be guessed by unauthorized users. For example, do not use the well- known string s public and private . If you are using SNMPv3, you can confi gure SN[...]

  • Страница 135

    IP Services Commands 135 Nortel WLAN—Security Switch 2300 Series Command Line Reference set snmp notify profile Configures an SNMP notification profile. A notifica tion pr of ile is a named li st of all the notification types that can be generated by a switch, and for each notification type, the action to take (drop or send ) when an event occurs[...]

  • Страница 136

    136 IP Services Commands NN47250-100 (Version 02 .51) notification-type Name of the notif ication type: • APBootT raps— Generated when an AP boots. • ApNonOperS tatus T raps —Generated to indicate an AP radio is nonoperational. • ApOperRadioS tatusT raps —Generated when the status of an AP radio changes. • AP T imeoutT raps— Generat[...]

  • Страница 137

    IP Services Commands 137 Nortel WLAN—Security Switch 2300 Series Command Line Reference notification-type (cont.) • CounterMeasur eS topT raps— Generated when WSS Software stops counterm easures against a rogue access point. • DAPConnectW arningT raps —Generated when a Distributed AP whose fingerprint has not been configured in WSS Softwa[...]

  • Страница 138

    138 IP Services Commands NN47250-100 (Version 02 .51) Defaults A default notif ication profile (named default ) is already configured in WSS Software. All notifi cations in the defaul t profile are dropped by def ault. Access Enabled. History Introduced in WSS Software V ersion 4.0. Examples The follow ing command changes the action in the default [...]

  • Страница 139

    IP Services Commands 139 Nortel WLAN—Security Switch 2300 Series Command Line Reference The following commands cr eate notification profile snmppr of_rfdetect , and change the action to send for all RF detection notific ation types: WSS# set snmp notify prof ile snmpprof_r fdetect send RFDetectAdhocUserT raps success: change accepted. WSS# set sn[...]

  • Страница 140

    140 IP Services Commands NN47250-100 (Version 02 .51) • show snmp notify pr ofile on page 158[...]

  • Страница 141

    IP Services Commands 141 Nortel WLAN—Security Switch 2300 Series Command Line Reference set snmp notify target Configures a notifi cation target f or notifications from SNMP. A notification targe t is a remote de vice to which W SS Software sends SNMP notif ications. You can configure the WSS Software SNMP engine to send confirmed not ifications [...]

  • Страница 142

    142 IP Services Commands NN47250-100 (Version 02 .51) SNMPv3 with T raps To configure a notification ta rget for traps from SNMPv3, use the following command: Syntax set snmp notify target tar get-num ip-a ddr [: udp-port-nu mber ] usm trap user username [ prof i le pr ofile-name ] [ security { unsecured | authenticated | encrypted }] ret ri es num[...]

  • Страница 143

    IP Services Commands 143 Nortel WLAN—Security Switch 2300 Series Command Line Reference SNMPv2c with Inf orms To configure a notification ta rget for informs from SNMPv2c , use the following command: Syntax set snmp notify target tar get-num ip-a ddr [: udp-port-nu mber ] v2c community-str ing inf orm [ prof i le pr ofile-name ] [ ret r ie s num [...]

  • Страница 144

    144 IP Services Commands NN47250-100 (Version 02 .51) SNMPv1 with T raps To configure a notification ta rget for traps from SNMPv1, use the following command: Syntax set snmp notify target tar get-num ip-a ddr [: udp-port-nu mber ] v1 community-str ing [ prof i le pr ofile-name ] Defaults The default UDP port number on the tar get is 162. The defa [...]

  • Страница 145

    IP Services Commands 145 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set ip snmp server on page 118 • set snmp community on page 123 • set snmp notify pr of ile on page 125 • set snmp protocol on page 135 • set snmp security on page 13 6 • set snmp usm on pag e 136 • show snmp notify target on page 159 set snmp [...]

  • Страница 146

    146 IP Services Commands NN47250-100 (Version 02 .51) set snmp security Sets the minimum level of securi ty WSS So ftware requires for SN MP message exch anges. Syntax set snmp security { unsecured | authe nticated | encrypted | auth-req-unsec-notify } Defaults By default, WSS Software allo ws nonsecure ( unsecured ) SNMP message exchanges. Access [...]

  • Страница 147

    IP Services Commands 147 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set snmp usm usm-username snmp-engine-id { ip ip-addr | local | hex hex-string } access { read-only | read-notify | notify-only | read-write | notify-read-write } auth-type { none | md5 | sha } { auth-pass-phrase string | auth-key he x-string } encrypt-[...]

  • Страница 148

    148 IP Services Commands NN47250-100 (Version 02 .51) access { read-o nly | r ead-notify | notify-only | rea d- wr it e | notify-read-write } Specifies the access level of the user: • rea d -o n ly —An SNMP management application using the string can get (read) obje ct values on the switch but cannot set (write) them. • rea d -n o ti f y —A[...]

  • Страница 149

    IP Services Commands 149 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults No SNMPv3 users are conf igured by default. Wh en you configure an SNMPv3 user , the default access is re ad -o nl y , and the def ault authentica tio n and encryption types are both none . Access Enabled. History Introduced in WSS Software V ersion 4[...]

  • Страница 150

    150 IP Services Commands NN47250-100 (Version 02 .51) Examples The follo wing command creates USM user snmpmgr1 , associat ed with the local SNMP engine ID. This user can se nd tra ps to notif ication re cei vers. WSS# set snmp usm sn mpmgr1 snmp-engine- id local success: change accepted. The following command creates USM user securesnmpmgr1 , whic[...]

  • Страница 151

    IP Services Commands 151 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults If you do not specify a start and end time, th e system implements the time change starting at 2:00 a.m. on the first Sunday in April and ending at 2:00 a.m. on the last Sunday in October , according to the North American standard. Access Enabled. Usa[...]

  • Страница 152

    152 IP Services Commands NN47250-100 (Version 02 .51) Access Enabled. Usage Y ou must use an address that is co nfigured on one o f the WSS’ s VLANs. To display th e system IP address, use the show system command. Examples The following commands conf i gure an IP interface on VLAN taupe and conf igure the interfa ce to be th e system IP address: [...]

  • Страница 153

    IP Services Commands 153 Nortel WLAN—Security Switch 2300 Series Command Line Reference • clear timezone on page 106 • set summertime on page 140 • set timezone on page 143 • show summertime on page 160 • show timedate on page 161 • show timezone on page 161 set timezone Sets the number of hours, and optionally the number of minutes, [...]

  • Страница 154

    154 IP Services Commands NN47250-100 (Version 02 .51) show arp Displays the ARP table. Syntax show arp [ ip-addr ] Defaults If you do not specify an IP address, the whole ARP table is displayed. Access All. Examples The follow ing command displays ARP entries: WSS # show arp ARP aging time: 1200 seconds Host HW Addres s VLAN T ype State -----------[...]

  • Страница 155

    IP Services Commands 155 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set arp on page 108 • set arp agingtim e on page 109 show dhcp-client Displays DHCP client in formation for all VLANs. Syntax show dhcp-client Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. T ype Entry type: • DYNA[...]

  • Страница 156

    156 IP Services Commands NN47250-100 (Version 02 .51) Examples The follow ing command displa ys DHCP client information: WSS# show dhcp-client Interface: corpvlan(4) Configuration Status: Enabled DHCP S tate: IF_UP Lease Allocation: 65535 seconds Lease Remaining: 65532 seconds IP Address: 10.3.1.1 10 Subnet Mask: 255.255.255.0 Default Gateway: 10.3[...]

  • Страница 157

    IP Services Commands 157 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set interface dhcp-client on page 1 10 show dhcp-server Displays WSS Software DHCP server information. Syntax show dhcp-serv er [ interface vlan-id ] [ verbose ] Defaults None. Access All. History Introduced in WSS Software V ersion 4.0. Examples The [...]

  • Страница 158

    158 IP Services Commands NN47250-100 (Version 02 .51) T able 3.Output f or show dhcp-ser ver Field Description VLAN VLAN number . Name VLAN name. Address IP address leased by the server . MA C Address MA C address of the device that holds the lease for the address. Lease Remaining Number of seconds remainin g before the address lease expires. T abl[...]

  • Страница 159

    IP Services Commands 159 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set interface dhcp-server on page 1 1 1 show interface Displays the IP interface s configured on the WSS. Syntax show interface [ vlan-id ] Defaults If you do not specify a VLAN ID, interf aces for all VLANs are displayed. Access All. History Usage Th[...]

  • Страница 160

    160 IP Services Commands NN47250-100 (Version 02 .51) See Also • clear interface on page 99 • set interface on page 109 • set interface status on page 112 show ip alias Displays the IP aliase s configured on the WSS. Syntax show ip alias [ name ] Defaults If you do not specify an alias na me, all aliases are displayed. Access Enabled. Example[...]

  • Страница 161

    IP Services Commands 161 Nortel WLAN—Security Switch 2300 Series Command Line Reference Table 22 describes the fields in this display. See Also • clear ip alias on page 100 • set ip alias on page 113 show ip dns Displays the DNS servers the WSS is configured to use. Syntax show ip dns Defaults None. Access All. Examples The following command [...]

  • Страница 162

    162 IP Services Commands NN47250-100 (Version 02 .51) See Also • clear ip dns domain on page 100 • clear ip dns server on page 101 • set ip dns on pa ge 113 • set ip dns domain on page 114 • set ip dns serv er on page 115 show ip https Displays information about the HTTPS management port. Syntax show ip https Defaults None. Access All. Ex[...]

  • Страница 163

    IP Services Commands 163 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear ip telnet on page 1 02 • set ip https server on page 116 • set ip telnet on page 120 • set ip telnet server on page 120 • show ip telnet on page 1 55 show ip route Displays the IP route table. Syntax show ip route [ destination ] Def[...]

  • Страница 164

    164 IP Services Commands NN47250-100 (Version 02 .51) Usage When you add an IP interface to a VLAN that is up, WSS Software adds direct and local routes for the interface to the route table. If the VLAN is do wn, WSS So ftware does not add the routes. If you add an interf ace to a VLAN b ut the routes for that interface do not appear in the route t[...]

  • Страница 165

    IP Services Commands 165 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear ip route on page 101 • set interface on page 109 • set ip route on page 116 • show interface on page 149 • show vlan config on page 89 show ip telnet Displays information about the Telnet management port. Syntax show ip telnet Defaul[...]

  • Страница 166

    166 IP Services Commands NN47250-100 (Version 02 .51) See Also • clear ip telnet on page 1 02 • set ip https server on page 116 • set ip telnet on page 120 • set ip telnet server on page 120 • show ip https on page 152 show ntp Displays NTP client infor mation. Syntax show ntp Defaults None. Access All. Examples T o display NTP informatio[...]

  • Страница 167

    IP Services Commands 167 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear ntp serv er on page 102 • clear summertime on page 105 • clear timezone on page 106 • set ntp on page 121 T able 11: Output for sho w ntp Field Description NTP client State of the NTP clie nt. The state can be one of the following: •[...]

  • Страница 168

    168 IP Services Commands NN47250-100 (Version 02 .51) • set ntp serv er on page 122 • set summertime on page 140 • set timezone on page 143 • show timezone on page 161 show snmp community Displays the configured SNMP community strings. Syntax show snmp community Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0.[...]

  • Страница 169

    IP Services Commands 169 Nortel WLAN—Security Switch 2300 Series Command Line Reference show snmp notify target Displays SNMP notification targets. Syntax show snmp notify target Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. See Also • clear snmp notify target on page 104 • set snmp notify target on page 131 [...]

  • Страница 170

    170 IP Services Commands NN47250-100 (Version 02 .51) show snmp usm Displays information about SNMPv3 users. Defaults None. Access Enabled. History Introduced in WSS Software V ersion 4.0. See Also • clear snmp usm on page 105 • show snmp usm on page 160 show summertime Shows a WSS’s offset from its real-time clock. Syntax show summertime Def[...]

  • Страница 171

    IP Services Commands 171 Nortel WLAN—Security Switch 2300 Series Command Line Reference show timedate Shows the date and time of day curre ntly set on a WSS’s real-time clock. Syntax show timedate Defaults None. Access All. Examples T o display the time and date set on a WSS’ s real-time clock, type the follo wing command: 23x0# show timedate[...]

  • Страница 172

    172 IP Services Commands NN47250-100 (Version 02 .51) telnet Opens a Telnet client sess ion with a remote device. Syntax telnet { ip-addr | hostname } [ port port-num ] Defaults WSS Software att empts to estab lish T eln et connections with TCP port 23 by default. Access Enabled. Usage T o end a T elnet session from the remo te de vice, press Ctrl+[...]

  • Страница 173

    IP Services Commands 173 Nortel WLAN—Security Switch 2300 Series Command Line Reference When the administrator presses Ctrl+t to end the Telnet connection, the management session returns to the local WSS prompt: WSS-remote> Session 0 pty tty2. d terminated tt name tty2.d WSS# See Also • clear sessions on page 435 • show sessions on page 43[...]

  • Страница 174

    174 IP Services Commands NN47250-100 (Version 02 .51) WSS # traceroute serv er1 traceroute to server1.example.com (192. 168.22.7), 30 hops max, 38 byte packets 1 engineering-1.example.com ( 192.168.192.206) 2 ms 1 ms 1 ms 2 engineering-2.example.com ( 192.168.196.204) 2 ms 3 ms 2 ms 3 gateway_a.example.com ( 192.168.1.201) 6 ms 3 ms 3 ms 4 server1.[...]

  • Страница 175

    175 Nortel WLAN—Security Switch 2300 Series Command Line Reference AAA Commands Use authentication, authoriz ation, and accounting (AAA) commands to provide a secure network connection and a record of user activity. Location policy comma nds override any virtual LAN (VLAN) or security ACL assignment by AAA or the loca l WSS databas e to help you [...]

  • Страница 176

    176 AAA Commands NN47250-100 (Version 02 .51) clear accounting Removes accounting services for spec ified wireless users with administ rative access or network access. Syntax clear accounting { admin | dot1x | system } { user-wildcar d } clear mac-usergroup attr on page 174 clear mac-user group on page 173 clear mac-usergroup on page 174 W eb autho[...]

  • Страница 177

    AAA Commands 177 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. History Examples The follow ing command removes acco unting se rvices for authorized n etwork user Nin: WSS# clear accounting dot1x Nin success: change accepted. See Also • set accounting {admin | console} on page 178 • set accountin[...]

  • Страница 178

    178 AAA Commands NN47250-100 (Version 02 .51) Access Enabled. Examples The following command clears auth enticati on for administrator Jose: WSS# clear authentication admin Jose success: change accepted. See Also • clear authentication console on page 168 • clear authentication dot1x on page 1 69 • clear authentication mac on page 170 • cle[...]

  • Страница 179

    AAA Commands 179 Nortel WLAN—Security Switch 2300 Series Command Line Reference success: change accepted. See Also • clear authentication admin on page 167 • clear authentication dot1x on page 1 69 • clear authentication mac on page 170 • clear authentication web on page 171 • set authentication console on page 183 • show aaa on page [...]

  • Страница 180

    180 AAA Commands NN47250-100 (Version 02 .51) clear authentication mac Removes a MAC authentication rule. Syntax clear authentication mac { ssid ssid-name | wired } mac-addr -wildcar d Defaults None. Access Enabled. Examples The follo wing command rem ove s a MA C authentica tion rule for access to SSID thatcorp by MA C addresses beginn ing with aa[...]

  • Страница 181

    AAA Commands 181 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set authentication proxy on page 190 • show aaa on page 210 clear authentication web Removes a Web-based AAA rule. Syntax clear authentication web { ssid ssid-name | wir ed } user -wildcar d Defaults None. Access Enabled. Examples The follow ing command[...]

  • Страница 182

    182 AAA Commands NN47250-100 (Version 02 .51) Usage T o determine the index numbers of location policy r ules, use t he sho w location p olicy command. Removing al l the A CEs from the locati on policy disab les this function on the WSS. Examples The follow ing command removes location pol icy rule 4 from a WSS’ s location policy: WSS# clear loca[...]

  • Страница 183

    AAA Commands 183 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax clear mac-user mac-addr attr attribute-name Defaults None. Access Enabled. Examples The follo wing command remo v es an access control list (A CL) from the prof ile of a user at MA C address 01:02:03:04:05:06: WSS# clear mac-user 01:02:03:0 4:05:06 attr filter [...]

  • Страница 184

    184 AAA Commands NN47250-100 (Version 02 .51) clear mac-usergroup Removes a user group from the loca l database on the WSS, for a group of users who are authenticated by a MAC address. (To delete a MAC user group in RADIUS, se e the documentation for your RADIUS server.) Syntax clear mac-usergroup gr oup-name Defaults None. Access Enabled. Usage T [...]

  • Страница 185

    AAA Commands 185 Nortel WLAN—Security Switch 2300 Series Command Line Reference WSS# clear mac-usergr oup eastc oasters attr vlan-name success: change accepted. See Also • clear mac-usergr oup on page 174 • set mac-usergr oup attr on page 203 • show aaa on page 210 clear mobility-profile Removes a Mobility Profile entirely. Syntax clear mob[...]

  • Страница 186

    186 AAA Commands NN47250-100 (Version 02 .51) Examples The follo wing command dele tes th e user prof ile for user Nin: WSS# clear user Nin success: change accepted. See Also • set user on page 206 • show aaa on page 210 clear user attr Removes an authorization attribute from the use r profile in the local databa se on the WSS, for a user with [...]

  • Страница 187

    AAA Commands 187 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear user group Removes a user with a password from membersh ip in a user group in the local database on the WSS. (To remove a user from a user group in RADIUS , see the documentation for your RADIUS server.) Syntax clear user username gr oup Defaults None. Access En[...]

  • Страница 188

    188 AAA Commands NN47250-100 (Version 02 .51) • set usergr oup on page 208 • show aaa on page 210 clear usergroup attr Removes an authorization attribute from a us er group in the local database on the WSS. (To remove an authorization attribute in RADI US, see the documentation for your RADIUS server.) Syntax clear usergr oup gr oup-name attr a[...]

  • Страница 189

    AAA Commands 189 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults Accounting is disabled for all users by default. Access Enabled. Usage For netw ork users with start-st op accounting whose records are se nt to a RADIUS serv er , WSS Software sends interim updates to the RADIUS server when the user roams. Examples The follo[...]

  • Страница 190

    190 AAA Commands NN47250-100 (Version 02 .51) Syntax set accounting { dot1x | mac | web | last-resort } { ssid ssid-n ame | wired } { user - wildcar d | mac-addr -wildcar d } { start-stop | stop-only } method1 [ metho d2 ] [ method3 ] [ method4 ] Defaults Accounting is disabled for all users by default. Access Enabled. dot1x Users with network acce[...]

  • Страница 191

    AAA Commands 191 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage For netw ork users with start- stop accounting whose records ar e sent to a RADIUS server , WSS Software sends interim updates to the RADIUS server when the user roams. Examples The follow ing command issues stop-only records to the RADIUS serv er group sg2 for [...]

  • Страница 192

    192 AAA Commands NN47250-100 (Version 02 .51) See Also • clear accounting on page 166 • show accounting statistics on page 212 set authentication admin Configures authenticat ion and defines where it is perfo rmed for specifie d users wi th a dministrative ac cess through Telnet or Web View. Syntax set authentication admin user- wildcar d metho[...]

  • Страница 193

    AAA Commands 193 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults By default, aut hentication is dea cti v ated for all admin users. The def ault authentica tion method in an admin authe ntication rule is local . WSS Software checks the loca l WSS database for authenticati on. Access Enabled.. Usage Y ou can configure diffe[...]

  • Страница 194

    194 AAA Commands NN47250-100 (Version 02 .51) Syntax set authentication console user- wildcar d method1 [ metho d2 ] [ method3 ] [ method4 ] Defaults By default, authentica tion is deacti vated for all console users, and the default authentication method in a cons ole authentication rule is none . WSS Software requires no username or password, by d[...]

  • Страница 195

    AAA Commands 195 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Enabled.. Usage Y ou can configure different auth en tication methods for dif ferent groups o f users. (For details, see “User W ildcards, MA C Address W ildca rds, and VLAN W ildcards” on page 12 .) If you specify multiple authentication methods in the set[...]

  • Страница 196

    196 AAA Commands NN47250-100 (Version 02 .51) user-wildcar d A single user or a set of users with 802.1X netw ork access. Specify a username, use the double-asterisk wildcard character (**) to specify all usernames, or use the single-asterisk wi ldcard ch aracter (*) to specify a set of usernames up to or follo wing the f irst delimite r character?[...]

  • Страница 197

    AAA Commands 197 Nortel WLAN—Security Switch 2300 Series Command Line Reference pr otocol Protocol used for authentication. Specify one of the follo wing: • eap-md5 —Extensible Authentication Pr otocol (EAP) with message-digest algorithm 5. For wired authenti cation clients : • Uses challenge-response to compare hashes •P r o v i d e s no[...]

  • Страница 198

    198 AAA Commands NN47250-100 (Version 02 .51) Defaults By default, auth entication is unconfigur ed for all clients with network access through AP ports or wired authentication ports on the WSS. Connection, authorization, and accounting are also disabled for these users. Bonded authenticati on is disabled by default. Access Enabled. Usage Y ou can [...]

  • Страница 199

    AAA Commands 199 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set service-pr of ile auth-fallthru on page 308 • show aaa on page 210 set authentication last-resort Deprecated in WSS Software Version 5.0. The last-r esort user is not required or supported in WSS Software Version 5.0. Instead, a user who accesses the network[...]

  • Страница 200

    200 AAA Commands NN47250-100 (Version 02 .51) Usage Y ou can configure different au thentication methods for dif fer ent groups of MA C addresses by “wildcarding. ” (For details, see “User W ildcards, MA C Address W i ldcards, and VLAN W ildcards” on page 12 .) If you specify multiple auth entication methods in the set authentication mac co[...]

  • Страница 201

    AAA Commands 201 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Usage AAA for third-party AP users has additi onal configuration re quirements. See the “Configuring AAA for Users of Third-P arty APs” section in the “Configuring AAA for Netw ork Users” c[...]

  • Страница 202

    202 AAA Commands NN47250-100 (Version 02 .51) Defaults By default, auth entication is unconfigur ed for all clients with network access through AP ports or wired authentication ports on the WSS. Connection, authorization, and accounting are also disabled for these users. Access Enabled. Usage Y ou can configure different auth entication methods for[...]

  • Страница 203

    AAA Commands 203 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set authentication admin on page 182 • set authentication console on page 183 • set authentication dot1x on page 185 • show aaa on page 210 set location policy Creates and enables a location policy on a WSS. A location policy enables you to locally set or ch[...]

  • Страница 204

    204 AAA Commands NN47250-100 (Version 02 .51) Defaults By default, users are per mitted VLAN access and assign ed security A CLs according to the VLAN-Name and Filter-Id attributes applied to the users during norma l authentic ation and authori zation. Access Enabled. Usage Only a single location policy is a llo wed per WSS. The location polic y ca[...]

  • Страница 205

    AAA Commands 205 Nortel WLAN—Security Switch 2300 Series Command Line Reference •U s e inacl inacl-name to fil ter traf f ic that enters the switc h from users via an AP access port or wired authentication port, or from the network via a network port. •U s e outacl outacl-name to filter traff ic sent from the s witch to users via an AP access[...]

  • Страница 206

    206 AAA Commands NN47250-100 (Version 02 .51) Syntax set mac-user mac-addr [ group gr oup-name ] Defaults None. Access Enabled. Usage WSS Software does not require MA C users to belong to user groups. Users authenticated by MAC address can be authenticate d only for network access thr ough the WSS. WSS Software does not support passwords for MAC us[...]

  • Страница 207

    AAA Commands 207 Nortel WLAN—Security Switch 2300 Series Command Line Reference set mac-user attr Assigns an authorization attribute in th e local database on the WSS to a user w ho is authenticated by a MAC address. (To assign authorization at tributes through RADIUS, see the do cumentation for your RADIUS server.) Syntax set mac-user mac-addr a[...]

  • Страница 208

    208 AAA Commands NN47250-100 (Version 02 .51) T able 1: A uthentication Attributes f or Local Users Attribute Description Valid Value(s) encryption-type T ype of encryption required for access by the client. Clients who attempt to use an unauthorized encryption method are rejected. Note: Encryption-T ype is a Nortel vendor -specifi c attribute (VSA[...]

  • Страница 209

    AAA Commands 209 Nortel WLAN—Security Switch 2300 Series Command Line Reference fi lt e r-i d (network access mode only) Security access control li st (A CL), to permit or deny traff ic recei ved (input) or sent (output) by the WSS. (For more information about security A CLs, see “Security A CL Commands” on page 449 .) Name of an existing sec[...]

  • Страница 210

    210 AAA Commands NN47250-100 (Version 02 .51) service-type T ype of access the user is requesting. One of the following numbers: • 2 —Framed; for network user access • 6 —Administrative; for administrative access to the WSS, with authorization to access the enabled (configuration) mode. The user must enter the enable command an d the correc[...]

  • Страница 211

    AAA Commands 21 1 Nortel WLAN—Security Switch 2300 Series Command Line Reference time-of-day (network access mode only) Day(s) and time(s) during which the user is permitted to log into the networ k. After authorizati on, the user’ s session can last until either the T ime-Of-Day range or the Session- T imeout duration (if set) expires, whiche [...]

  • Страница 212

    212 AAA Commands NN47250-100 (Version 02 .51) Examples The following command assigns i nput access cont rol list (A CL) acl-03 to filt er the packets from a user at MA C address 01:02:03:04:05:06: WSS# set mac-us er 01:02:03:04: 05:06 attr f il ter -id acl -03.in success: change accepted. url (network access mode only) URL to which the user is redi[...]

  • Страница 213

    AAA Commands 213 Nortel WLAN—Security Switch 2300 Series Command Line Reference The following command restri cts a user at MAC address 06:05:04:03:02:01 to networ k access between 7 p.m. on Mondays and Wednesdays and 7 a.m. on Tuesdays and Thursdays: WSS# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-1159,tu0000 - 0700,we1900-1159,th0000[...]

  • Страница 214

    214 AAA Commands NN47250-100 (Version 02 .51) • show aaa on page 210 set mobility-profile Creates a Mobility Pr ofile and specifies the AP and/ or wired authentication ports on the WSS through which any user assigned to the pr ofile is allowed ac cess. Syntax set mobility-p rof ile name name { port { none | all | port- list }} | { ap { none | all[...]

  • Страница 215

    AAA Commands 215 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing commands crea te the Mobility Prof ile ma gnolia , which restricts user ac cess to port 12; enable the Mobility Prof ile feature on the WSS; and as sign the magnolia Mobility Prof ile to user Jos e . WSS# set mobility- pro f ile name magnolia p[...]

  • Страница 216

    216 AAA Commands NN47250-100 (Version 02 .51) See Also • clear mobility-prof ile on page 175 • set mobility-pro file on page 204 • show mobility-prof ile on page 215 set user Configures a user profile in the local data base on the WSS for a user with a password. (To configure a user profile in RADIUS, s ee the documentation for your RADIUS se[...]

  • Страница 217

    AAA Commands 217 Nortel WLAN—Security Switch 2300 Series Command Line Reference The following command cha nges Nin’s password from goody to 29J an04: WSS# set user Nin passw ord 29Jan0 4 See Also • clear user on page 175 • show aaa on page 210 set user attr Configures an authorization attribute in the lo ca l database on the WSS for a user [...]

  • Страница 218

    218 AAA Commands NN47250-100 (Version 02 .51) See Also • clear user attr on page 176 • show aaa on page 210 set user group Adds a user to a user group. The user must have a passw ord and a profile that exists in the local database on the WSS. (To configure a user in RADIUS, see the documentation for your RADIUS server.) Syntax set user username[...]

  • Страница 219

    AAA Commands 219 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set usergr oup gr oup-na me attr attribute-name value Defaults None. Access Enabled. Usage T o change the value of an attribute, enter set usergr oup attr with the new v alue. T o delete an attrib ute, use clear us ergr oup attr . To add a user to a group, user[...]

  • Страница 220

    220 AAA Commands NN47250-100 (Version 02 .51) History Usage This command disables or reenables support fo r W eb-based AAA. Ho we ver , W eb-based AAA has additional configuration requirements. F or information, see the “Configuring AAA fo r Netw ork Users” chapter in the Nortel WLAN Security Switch 2300 Series C onfigur ation Guide . Examples [...]

  • Страница 221

    AAA Commands 221 Nortel WLAN—Security Switch 2300 Series Command Line Reference sg3: rs-5 W eb Portal: enabled set authentication admin Jose sg3 set authentication console * none set authentication mac ssid mycorp * local set authentication dot1x ssid mycorp Geetha eap-tls set authentication dot1x ssid mycorp * peap-mschapv2 sg1 sg2 sg 3 set auth[...]

  • Страница 222

    222 AAA Commands NN47250-100 (Version 02 .51) See Also • set accounting {admin | console} on page 178 • set authentication admin on page 182 • set authentication console on page 183 • set authentication dot1x on page 185 • set authentication mac on page 189 • set authentication web on page 191 show accounting statistics Displays the AAA[...]

  • Страница 223

    AAA Commands 223 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax show accounting statistics Defaults None. Access Enabled. History Examples T o display the locally st ored accountin g records, type th e foll owi ng command: WSS# show accounting statistics Dec 14 00:39:48 Acct-Status-T ype=ST OP Acct-Authentic=0 Acct-Multi-Se[...]

  • Страница 224

    224 AAA Commands NN47250-100 (Version 02 .51) See Also • clear accounting on page 166 • set accounting {admin | console} on page 178 • show aaa on page 210 T able 3: show accounting statistics Output Field Description Date and time Date and time of the acco unting record. Acct-Status-T ype T ype of accounting record: •S T A R T •S T O P ?[...]

  • Страница 225

    AAA Commands 225 Nortel WLAN—Security Switch 2300 Series Command Line Reference show location policy Displays the list of locati on policy rules that make up the location policy on a WSS. Syntax show location policy Defaults None. Access Enabled. Examples The follo wing comma nd displays the list o f location polic y rules in the lo cation polic [...]

  • Страница 226

    226 AAA Commands NN47250-100 (Version 02 .51)[...]

  • Страница 227

    227 Nortel WLAN—Security Switch 2300 Series Command Line Reference Mobility Domain Commands Use Mobility Domain commands to confi gure and manage Mobility Domain groups. A Mobility Domain is a system of WSSs and APs working together to sup port a ro aming user (client) . One WSS act s as a seed switch, which maintains and distributes a list of IP[...]

  • Страница 228

    228 Mobility Domain Commands NN47250-100 (Version 02 .51) clear mobility-domain Clears all Mobility Domain con figurat ion and information from a WSS, regardle ss of whether the WSS is a seed or a member of a Mobility Domain. Syntax clear mobility-domain Defaults None. Access Enabled. Usage This command has no ef fect if the WSS is not conf igured [...]

  • Страница 229

    Mobility Domain Commands 229 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set domain security { none | req ui re d } Defaults The defau lt is none . ( WSS - WSS security is disabled.) Access Enabled. History Introduced in WSS Software 5.0. Usage The setting must be the same ( none or requir ed ) on all switches, the seed [...]

  • Страница 230

    230 Mobility Domain Commands NN47250-100 (Version 02 .51) success: change accepted. WSS# set mobility-domain member 192.168.1.10 success: change accepted. See Also • clear mobility-domain member on page 218 • show mobility-domain conf ig on page 222 set mobility-domain mode member seed-ip On a nonseed WSS, sets the IP address of the seed WSS. T[...]

  • Страница 231

    Mobility Domain Commands 231 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set mobility-domain mode member secondary-seed-ip secondary-seed-ip-addr Defaults None. Access Enabled. History Introduced in WSS Software V ersion 6.0. Examples Follo wing is the e xample of m obility-domain secondary-seed-ip. WSS# set mobility- do[...]

  • Страница 232

    232 Mobility Domain Commands NN47250-100 (Version 02 .51) set mobility-domain mode secondary-seed domain- name seed-ip Creates a Mobility Domain by setting th e current WSS as the secondary seed device and naming th e Mobility Domain. Syntax set mobility-domain mode se condary-seed domain-name domain-name seed-ip seed- ip Defaults None. Access Enab[...]

  • Страница 233

    Mobility Domain Commands 233 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax show mobility-domain Defaults None. Access Enabled. History Upgraded in WSS Software V ersion 6.0. Examples T o display Mobility Domain status, type the follo wing co mmand: WSS# show mobility-d omain Mobility Domain name: Santa Clara Member State T[...]

  • Страница 234

    234 Mobility Domain Commands NN47250-100 (Version 02 .51)[...]

  • Страница 235

    235 Nortel WLAN—Security Switch 2300 Series Command Line Reference Netw ork Domain Commands Use Network Domain commands to confi gure and manage Network Domain groups. A Network Domain is a group of geographically dispersed Mo bility Domains that share information among themselves over a WAN link. This shared information allows a user configured [...]

  • Страница 236

    236 Network Do main Commands NN47250-100 (Version 02 .51) See Also • set network-domain mode member seed-ip on page 227 • set network-domain peer on page 228 • set network-domain mode se ed domain-name on page 229 clear network-domain mode Removes the Network Domain seed or member configurat ion from the WSS. Syntax clear network-domain mode [...]

  • Страница 237

    Network Domain Commands 237 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Usage This command has no ef fect if the WSS is no t configured as a Network Domain seed. Examples The following command clears the Network Doma in peer conf iguration for peer 192.168.9[...]

  • Страница 238

    238 Network Do main Commands NN47250-100 (Version 02 .51) Syntax set network-domain mo de member seed-ip ip-ad dr [ aff init y num ] Defaults The default af finity for a Network Domain see d is 5. Access Enabled. History Introduced in WSS Software 4.1. Usage Y ou can specify multiple Netw ork Domain seeds on the WSS. When the WSS needs to connect t[...]

  • Страница 239

    Network Domain Commands 239 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Introduced in WSS Software 4.1. Usage This command must be entered on a WSS c onfigured as a Netw ork Domain seed. Examples The follow ing command sets the WSS with IP ad dress 192.168.9.254 as a peer of this Netw ork Domain seed: WSS# set network-d[...]

  • Страница 240

    240 Network Do main Commands NN47250-100 (Version 02 .51) Syntax show network- domain Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Examples T o display Network Domain status, type the follo wing command. The output of th e command differs based on whether the WSS is a member of a Network Domain or a Netw ork Domain seed. O[...]

  • Страница 241

    Network Domain Commands 241 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear network-domain on page 225 • set network-domain mode member seed-ip on page 227 • set network-domain mode se ed domain-name on page 229 • set network-domain peer on page 228 State State of the WSS in the Network Domain: •U P •D [...]

  • Страница 242

    242 Network Do main Commands NN47250-100 (Version 02 .51)[...]

  • Страница 243

    243 Nortel WLAN—Security Switch 2300 Series Command Line Reference AP Commands Use AP commands to configure and ma nage APs. Be s ure to do t he fo llowing before using the commands: • Define the country-specific IEEE 802.11 re gulations on the WSS. (See set system countrycode on page 63 .) • Install the AP and connect it to a port on the WSS[...]

  • Страница 244

    244 AP Commands NN47250-100 (Version 02 .51) AP-WSS security set ap fingerprint on page 257 set ap security on page 274 Static IP Address Assignment for A P s set ap boot-config uration ip on page 251 set ap boot-configuration switch on page 255 set ap boot-configuration vlan on page 256 clear ap boot-conf iguration on page 241 show ap boot-conf ig[...]

  • Страница 245

    AP Commands 245 Nortel WLAN—Security Switch 2300 Series Command Line Reference set service-prof ile ci pher-wep104 on page 314 set servic e-prof ile ci pher -wep40 on page 315 set service-pr of ile psk-phrase on page 322 set service-prof ile psk-raw on page 323 set service-pr of ile tk ip-mc-time on page 333 set service-pr of ile wep a ctive-mult[...]

  • Страница 246

    246 AP Commands NN47250-100 (Version 02 .51) set radio-prof ile rate-enf or cement on page 295 T ransmission retri es set s ervice-p r of ile long-r etry-count on page 319 set service-pr of ile shor t-retry-count on pag e 325 RF A uto-T uning s et radio-prof ile au to-tune channel-conf ig on page 279 set radio-prof ile auto-tune channel-holddown on[...]

  • Страница 247

    AP Commands 247 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear ap image Clears an AirDefense sens or software image file from an AP’s configuration . Syntax clear ap ap - number image Defaults None. Access Enabled. show ap config on page 344 show ap status on pa ge 358 show ap counters on page 348 show ap global on page 37[...]

  • Страница 248

    248 AP Commands NN47250-100 (Version 02 .51) History Usage Use this command to configur e an AP that had been con verted to an AirDefense sensor to re vert b ack to an AP . to load the softw are. Whe n you do this, the next time the AP is booted, it becomes a Nortel Mobility Poi nt. Examples The following command causes the AirDefense sensor softwa[...]

  • Страница 249

    AP Commands 249 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set ap local-switching vlan-pr of ile on page 260 • set vlan-prof ile clear ap radio Disables an AP radio and resets it to its factory default settings. Syntax clear { ap port-list | ap ap-num } radio { 1 | 2 | all } Defaults The clear ap radio command resets the[...]

  • Страница 250

    250 AP Commands NN47250-100 (Version 02 .51) Access Enabled History Usage When you clear a radio, WSS Software performs the following actions: • Clears the transmit power , channel, and external antenna setting from the radio. • Removes the radio from its radio profile and places the radio in the default radio profile. This command does not a f[...]

  • Страница 251

    AP Commands 251 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear ap boot-configuration Removes the st atic IP address configuratio n for a AP. Syntax clear ap boot-configuration ap-num Defaults None. Access Enabled. History Introduced in WSS Software 4.1. Option dap remov ed in 6.0. Usage When the static IP conf iguration is c[...]

  • Страница 252

    252 AP Commands NN47250-100 (Version 02 .51) Examples The follow ing command clears radio 1 on AP 7 from the load balancing group to which it had been assigned: WSS# clear ap 7 radio 1 load-balancing group success : change accepted. See Also • set load-balancing strictness on page 277 • set ap radio load-balancing on page 268 • set ap local-s[...]

  • Страница 253

    AP Commands 253 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Usage If you specify a parameter , the settin g for the parameter is reset to its default v alue. The settings of the other parameters are unchanged and the radio prof il e remains in the conf iguration. If you do not specify a parameter, the entire radio prof [...]

  • Страница 254

    254 AP Commands NN47250-100 (Version 02 .51) Defaults None. Access Enabled. History Usage If the service profile is mapped to a radio profile, you must remov e it from the radio prof ile first. (After disabling all radios that use the radio prof ile, use the clear radio-prof ile name service- prof ile name command.) Examples The follow ing commands[...]

  • Страница 255

    AP Commands 255 Nortel WLAN—Security Switch 2300 Series Command Line Reference reset ap Restarts an AP. Syntax res e t { ap port-list | ap ap-num } Defaults None. Access Enabled. Usage When you enter this command, the AP drops all sessions and reboots. Examples The follow ing command resets the AP on port 7: WSS# res et a p 7 This will reset spec[...]

  • Страница 256

    256 AP Commands NN47250-100 (Version 02 .51) Usage T able 35 lists the configurable pr of ile parameters and their defaults. The only parameter that requires configuration is the prof ile mode. The profile is disabl ed by default. T o use the profile to configure APs, you must en able the profile u sing the set ap auto mode enable command. The prof[...]

  • Страница 257

    AP Commands 257 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set ap radio auto-tune max-power on page 265 • set ap radio mode on page 270 • set ap radio radio-pr of ile on page 271 • set ap upgrade-f irmware on page 275 set ap auto mode Enables a WSS’s profile for automatic AP configuration. Syntax set ap auto mode {[...]

  • Страница 258

    258 AP Commands NN47250-100 (Version 02 .51) Syntax set ap auto persistent [ ap-num | all ] Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Option dap remov ed in 6.0. Usage T o display the AP numbers assigned to Auto-APs, use the show ap status auto command. Examples The following command con verts the config uration of Auto[...]

  • Страница 259

    AP Commands 259 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Usage If you set the radiotype to 11a and the AP configuration profile is used to conf igure a two-radio AP model, radio 1 is configured as an 802.11b/g radio and radio 2 is configured as the 80 2.11a radi o. Because this is the re verse o f the standard conf i[...]

  • Страница 260

    260 AP Commands NN47250-100 (Version 02 .51) Usage High bias is preferred ov er lo w bias . Bias applies only to WSSs that ar e indirectly attache d to the AP through an intermediate Layer 2 or Laye r 3 network. An AP al ways attempts to boot on AP port 1 first, and if a WSS is directly attached on AP port 1, the AP alw ays boots from it. If AP por[...]

  • Страница 261

    AP Commands 261 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Changing the LED blink mode does no t alter operation of the AP. Onl y the behavi or of the LEDs is affected. Examples The follow ing command enables LED blink mode on the AP connected to ports 3 and 4: WSS# set ap 3-4 blink enable success: change accepted. set a[...]

  • Страница 262

    262 AP Commands NN47250-100 (Version 02 .51) • show ap boot-conf iguration on page 370 set ap boot-configuration mesh mode Enables WLAN mesh services on the AP. Syntax set ap ap-number boot-configuration mesh mode {enable | disable} Defaults Disabled. Access Enabled. History Introduced in WSS V ersion 6.0. Usage Use this command to e nable WLAN m[...]

  • Страница 263

    AP Commands 263 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Use this command to conf igure the preshared ke y that a Mesh AP uses to a uthenticate to a Mesh Portal AP . Y ou must connect the AP to an WSS switch and enter this command to configure the AP for mesh servic es prior to deploying the Mesh AP in its final unteth[...]

  • Страница 264

    264 AP Commands NN47250-100 (Version 02 .51) Examples The follo wing command conf igures AP7 to use a ra w PSK to authenticate with a Mesh Por tal AP: WSS# set ap 7 boot-configuration mesh psk-raw c25d3fe4483e867d1df96eaacdf8b 024 51fa0836162e758100f5 f6b87965e59d success: change accepted. See Also • set ap boot-conf iguration mesh ssid on page 2[...]

  • Страница 265

    AP Commands 265 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set ap boot-conf iguration m esh mode on page 252 • set service-pr of ile mesh on page 320 • show ap mesh-links on page 357 set ap boot-configuration switch Specifies the WSS a AP contacts and attempts to use as its boot device. Syntax set ap ap-nu m boot-conf [...]

  • Страница 266

    266 AP Commands NN47250-100 (Version 02 .51) See Also • clear ap boot-configuration on page 241 • set ap boot-conf iguration ip on page 251 • set ap boot-conf igura tion vlan on page 256 • show ap boot-conf iguration on page 370 set ap boot-configuration vlan Specifies 802.1Q VLAN taggi ng information for a AP. Syntax set ap ap-num boot-con[...]

  • Страница 267

    AP Commands 267 Nortel WLAN—Security Switch 2300 Series Command Line Reference set ap fingerprint Verifies an AP’s fingerprint on a WSS. If AP-WSS security is required by a WSS, an AP can es tablish a management session with the switch only if you have verified the AP’s identity by verifying its fingerprint on the switch. Syntax set ap num fi[...]

  • Страница 268

    268 AP Commands NN47250-100 (Version 02 .51) Defaults Forced image do wnload is disabled by default. Access Enabled. History Introduced in WSS Software 5.0. Optional dap removed 6.0 . Usage A change to the forced image d ownload option ta k es place the next time the AP is restarted. Even when forced image do wnload is disabled ( the defaul t), th [...]

  • Страница 269

    AP Commands 269 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Usage Y ou can assign any subset or all of the APs connected to a WSS to a group on that switch. All access points in a group must be connected to the same WSS. If you use the name none , spelled in an y combination of capital or lo wercase letters, the specif [...]

  • Страница 270

    270 AP Commands NN47250-100 (Version 02 .51) Examples The follow ing command causes AP 1 to load the adcon vert.bin f ile, then reboot as an AirDefense sensor: WSS# set ap 1 image adconvert.bin This will change the file a AP will boot. W ould you like to continue? (y/n) [n] y set ap local-switching mode Enables local switching for a spec ified AP. [...]

  • Страница 271

    AP Commands 271 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set ap ap-number local-swit ching vlan-profile pr ofile-name Defaults If local switching is enabled on an AP , but no VL AN prof ile is configured, then a defa ult VLAN profile is used. The default VLAN prof ile includes a single VLAN named default that is not t[...]

  • Страница 272

    272 AP Commands NN47250-100 (Version 02 .51) History Examples The follo wing command changes the name of the AP on port 1 to techpubs : WSS# set ap 1 name tech pubs success: change accepted. See Also show ap config on page 344 set ap radio antenna-location Specifies the location (indoors or outdoors) of an external antenna. Use this command to ensu[...]

  • Страница 273

    AP Commands 273 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set ap radio antennatype on page 263 set ap radio antenn atype Sets the model number for the antenna to be used. Syntax set { ap port-list | ap ap-num } radio { 1 | 2 } antennatype {1 a ntennatype {internal | 24203 | 24403 | 24453 | 24553 | 24883 | mixed | 241[...]

  • Страница 274

    274 AP Commands NN47250-100 (Version 02 .51) ap port-list List of ports connected to the APs on which to set the channel. ap ap-num Number of a AP on which to set the channel. radio 1 Radio 1 of the AP. radio 2 Radio 2 of the AP. (This option does not apply to single-radio models.) antennatype { internal | 24203 | 24403 | 24453 | 24553 | mixed | 24[...]

  • Страница 275

    AP Commands 275 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults All radios use the internal anten na by default, if the AP model has an internal antenna. Access Enabled. History Usage This command applies only to th e 802.1 1b/g radio on model 2330. Examples The follow ing command configures the 802. 11b/g radio on AP 1 to[...]

  • Страница 276

    276 AP Commands NN47250-100 (Version 02 .51) Syntax set { ap port-list | auto }} radio { 1 | 2 } auto-tune max-po wer power -level Defaults The default ma ximum po wer setting that RF Auto-T uning can set on a radio is the highest setting allowed for the country of op eratio n or highest setting supported on the hardw are, whichev er is lo wer . Ac[...]

  • Страница 277

    AP Commands 277 Nortel WLAN—Security Switch 2300 Series Command Line Reference set ap radio channel Sets an AP radio’s channel. Syntax set { ap port-list | ap ap-num } radio { 1 | 2 } channel channel-number Defaults The default channel depends on the radio ty pe: • The default channel number for 802.11b/g is 6. • The default channel number [...]

  • Страница 278

    278 AP Commands NN47250-100 (Version 02 .51) set ap radio min-tx-datarate To specify the mini mum rate at which a radi o is allowed to transm it traffic to cl ients, see Deprecated in WSS Software V ersion 5.0. on page 266 . set ap radio link-calibration Configures an AP radio to emit link calibration packets, which ca n aid in positioning a Mesh A[...]

  • Страница 279

    AP Commands 279 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set ap ap-num radio { 1 | 2 } load-balancing { enable | disable } Defaults RF load balancing is enabled by default for all AP radios. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage By default, RF lo ad balancing is enabled on all AP radio[...]

  • Страница 280

    280 AP Commands NN47250-100 (Version 02 .51) Defaults By default, AP radios are not pa rt of an RF load balancing group. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Assigning radios to specif ic load balanc ing groups is optional. When you do this, WSS Software considers them to ha ve e xactly ov erla pping cov erage area[...]

  • Страница 281

    AP Commands 281 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Enabled. History Usage T o enable or disable one or more radios to which a prof ile is assigned, use the set ap radio radio- prof ile command. T o enable or disable all radios that use a specif ic radio prof ile, use the set radio-prof ile command. Examples The [...]

  • Страница 282

    282 AP Commands NN47250-100 (Version 02 .51) Access Enabled. History Usage When you create a ne w prof ile, the radio parameters in the prof ile are set to their factory default val u e s . To enable or disable all radios th at use a specific radio pro file, use set radio-pr of ile . Examples The follow ing command enables radio 1 on por ts 5 throu[...]

  • Страница 283

    AP Commands 283 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Enabled. Usage Y ou also can configure a radio’ s cha nnel on the same command line. Use the channel option. This command is not valid if dynamic pow er tuning (RF Auto-Tuning) is en abled. Examples The following command conf igures the tran smit po wer on the[...]

  • Страница 284

    284 AP Commands NN47250-100 (Version 02 .51) set ap security Sets security requirements for management sessions be tween a WSS and its APs. This feature applies to APs only, not to directly connected APs configured on AP access ports. Syntax set ap security { requ i re | optional | none } Defaults The default sett ing is optional . Access Enabled. [...]

  • Страница 285

    AP Commands 285 Nortel WLAN—Security Switch 2300 Series Command Line Reference set ap sticky-bit This command is deprec ated in WSS Software Version 4.0. WSS assignment is alwa ys sticky. If an AP fails over to another WSS connection, the AP stays on that connection until the c onnection goes down or the WSS or AP is restarted. set ap upgrade-fir[...]

  • Страница 286

    286 AP Commands NN47250-100 (Version 02 .51) Syntax set band-prefer ence {none | 11bg | 11a} Defaults By default, clients are not steered to sp ecif ic AP radios for RF load balancing. Access Enabled. History Introduced in WSS Software V ersion 6.0. Usage Use this command to steer cl ients that support both the 802. 11a and 802.11b/g bands, to a sp[...]

  • Страница 287

    AP Commands 287 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Introduced in WSS V ersion 6.0. Usage By default, RF lo ad balancing is enabled on all AP radios. Us e this command to disable or re-enable RF load balancing globally for all AP radios managed by the WSS switch. If RF load balancing has been enab led or disable[...]

  • Страница 288

    288 AP Commands NN47250-100 (Version 02 .51) across the AP radios in the load-balancing group. When low st rictness is specif ied (t he def ault), WSS Software makes hea vily lo aded AP radios le ss visible in order to steer clients to less-busy AP radios, b ut ensures that ev en if all the AP radios in the group are he avily loaded, clients are no[...]

  • Страница 289

    AP Commands 289 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Y ou can enter this command on any WSS in the Mobility Doma in. The command tak es ef fect only on that switch. Examples The follow ing command disables activ e scan in radio profile ra dpr of3 : WSS# set radio-prof ile radprof3 acti ve-scan disable success: chan[...]

  • Страница 290

    290 AP Commands NN47250-100 (Version 02 .51) Even when RF Auto-Tuning for channels is enabled, WSS Software does not chan ge the channel on radios that have active client sessi ons, unless you use the no-client option. RF Auto-Tuning of channels on 802.11a radi os uses only the bottom eight channels in the band (36, 40, 44, 48, 52, 56, 60, and 64).[...]

  • Страница 291

    AP Commands 291 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set radio-prof ile aut o-tune channel-interval on pag e 281 • set radio-prof ile aut o-tune ch annel-lockdown on page 282 • show radio-pr ofile on page 376 set radio-profile auto-tune channel-interval Sets the interval at which RF A uto-Tuni ng decides whether [...]

  • Страница 292

    292 AP Commands NN47250-100 (Version 02 .51) set radio-profile auto-tune channel-lockdown Locks down the current channel settings on all radios in a radio profile. The channel se tti ngs that are in effect when the command is entered ar e changed into statica lly configured channel assi gnments on the radios. RF Auto-Tuning of channels is then disa[...]

  • Страница 293

    AP Commands 293 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set radio-pr of ile name auto-tune power -conf ig { enable | disable } Defaults Dynamic power assignment is disabled by def ault. Access Enabled. History Introduced in WSS Software V e rsion 3.0. Usage When RF Auto-T uning for power is disabled, WSS Software doe[...]

  • Страница 294

    294 AP Commands NN47250-100 (Version 02 .51) History Introduced in WSS Software V e rsion 3.0. Examples The follow ing command sets the power in terv al for radios in radio prof ile rp2 to 240 seconds: WSS# set radio-prof ile rp2 auto-tune po wer -interval 240 success: change accepted. See Also • set ap radio auto-tune max-power on page 265 • s[...]

  • Страница 295

    AP Commands 295 Nortel WLAN—Security Switch 2300 Series Command Line Reference set radio-profile auto-tune power-ramp-interval Changes the interval at which power is in creased or dec reased, in 1 dBm incremen ts, on radios in a radio profile until the optimum power level calculated by RF Auto-Tuning is reached. Syntax set radio-pr of ile name au[...]

  • Страница 296

    296 AP Commands NN47250-100 (Version 02 .51) Examples The follow ing command changes the beacon interval for radio prof ile rp1 to 200 ms: WSS# set radio-prof ile rp1 beacon-interval 200 success: change accepted. See Also • set radio-prof ile mode on page 291 • show radio-pr ofile on page 376 set radio-profile beaconed-ssid See set service-prof[...]

  • Страница 297

    AP Commands 297 Nortel WLAN—Security Switch 2300 Series Command Line Reference set radio-profile countermeasures Enables or disables countermeasur es on the AP radios managed by a radio profile. Countermeasu res are packets sent by a radio to prevent clients from being able to use rogue access points. AP radios can also issue c ountermeasures aga[...]

  • Страница 298

    298 AP Commands NN47250-100 (Version 02 .51) The following command disables c ountermeasures in radio profile radp rof3 : WSS# clear radio-prof ile ra dpr of3 countermeasur es success: change accepted. The following command causes ra dios managed by radio profile r adpr of3 to issue countermeasures against devices in the WSS’s attack list: WSS# s[...]

  • Страница 299

    AP Commands 299 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set radio-prof ile mode on page 291 • show radio-pr ofile on page 376 set radio-profile frag-threshold Changes the fragmentation th reshold for the AP radios in a radio pr ofile. The fragmentat i on threshold is the threshold at which the long-retry-coun[...]

  • Страница 300

    300 AP Commands NN47250-100 (Version 02 .51) set radio-profile long-retry Deprecated in WSS Software Ver sion 4.1. In 4.1, this parameter is associated with service profiles instead of radio profiles. See set service-prof ile long-r etry-count on page 319 . set radio-profile max-rx-lifetime Changes the maximum receive threshold for the AP radios in[...]

  • Страница 301

    AP Commands 301 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults The default maximum transmit threshold for AP radios is 20 00 ms (2 seconds). Access Enabled. Usage Y ou must disable all radios that are using a radio profile before you can change parameters in the prof ile. Use the set radio-pr of ile mode command . Example[...]

  • Страница 302

    302 AP Commands NN47250-100 (Version 02 .51) Access Enabled. countermeasur es Not configur ed Does not issu e countermeasures against any d evice. dtim-interval 1 Sends the deli v ery traf fic indication map (DTIM) after ev ery beacon. frag-threshold 2346 Uses the sh ort-retry-count for frames shorter than 2346 bytes and uses the long-retry-count f[...]

  • Страница 303

    AP Commands 303 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Usage Use the command without any optional par ameters to create new prof ile. If th e radio prof ile does not already ex ist, WSS Soft ware crea tes a ne w radio prof ile. Use the enable or disable option to enable or disable all the radios using a profile. T [...]

  • Страница 304

    304 AP Commands NN47250-100 (Version 02 .51) set radio-profile preamble-length Changes the preamble length for wh ich an 802.11b/g AP radio advertises sup port. This command does not apply to 802.11a. Syntax set radio-pr of ile nam e pr eamble-l ength { long | short } Defaults The defau lt is short . Access Enabled. Usage Changing the preamble leng[...]

  • Страница 305

    AP Commands 305 Nortel WLAN—Security Switch 2300 Series Command Line Reference set radio-profile qos-mode Sets the prioritization mod e for forwarding queu es on AP radios manage d by the radio profile. Syntax set radio-pr of ile nam e qos-mode { svp | wmm } Defaults The defau lt QoS mode is wmm . Access Enabled. History Introduced in WSS Softwar[...]

  • Страница 306

    306 AP Commands NN47250-100 (Version 02 .51) Syntax set radio-pr of ile nam e rate-enf or cement {enable | disable} Defaults Data rate en forcement is disabled by default. Access Enabled. History Introduced in WSS Software V e rsion 6.0. Usage Each type of radio (802.11a, 802.11b, and 802.11g) pro viding service to an SSID has a set of radio rates [...]

  • Страница 307

    AP Commands 307 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set radio-pr of ile nam e rf id-mode { enable | disable } Defaults The defau lt is disable . Access Enabled. History Introduced in WSS Software V e rsion 5.0. Examples The follow ing command enables ra dios managed by radio profile rp1 to act as asset location r[...]

  • Страница 308

    308 AP Commands NN47250-100 (Version 02 .51) set radio-profile service-profile Maps a service profile to a radio pro file. All radios that use the radio p rof ile also use the pa rameter settings, including SSID and encryption sett ings, in the service profile. Syntax set radio-pr of ile nam e service-pr of ile name Defaults A radio profile does no[...]

  • Страница 309

    AP Commands 309 Nortel WLAN—Security Switch 2300 Series Command Line Reference cipher-ccmp disable Does not use Counter with Cipher Block Chaining Message Authentication Code Protocol (CCMP) to encrypt traff ic sent to WP A clients. cipher-tkip enabl e When the WP A IE is enabl ed, uses T emporal K ey Integrity Protocol (TKIP) to encrypt traf fic[...]

  • Страница 310

    310 AP Commands NN47250-100 (Version 02 .51) no-br oadcast disabl e Does not reduce wireless broadcast traff ic by sending unicasts to clients for ARP requests and DHCP Offers and Acks instead of forwarding them as multicasts. proxy-ar p disable Does not reply on behalf of wireless client s to ARP requests for client IP addr esses. Instead, the rad[...]

  • Страница 311

    AP Commands 31 1 Nortel WLAN—Security Switch 2300 Series Command Line Reference tkip-mc-time 60000 Uses Michael countermeasures for 60,000 ms (60 seconds) follow ing detection of a second MIC failure within 60 seconds. transmit-rates 802.11a: • mandatory: 6.0 ,12.0,24 .0 • beacon-rate: 6.0 • multicast-rate: auto • disabled: none 802.11b: [...]

  • Страница 312

    312 AP Commands NN47250-100 (Version 02 .51) Access Enabled. History Introduced in WSS Software V e rsion 3.0. Usage Y ou must configure the service profile before you can map it to a radio profile. Y ou can map the same service prof ile to more than one radio prof ile. You must disable all radios that use a radio profile before you can change para[...]

  • Страница 313

    AP Commands 313 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command maps service-profile wpa_clients to radio prof ile rp2 : WSS# set radio-profile r p2 service-prof ile wpa_clients success: change accepted. See Also • set service-pr of ile attr on page 306 • set service-pr of ile auth-dot1x on page [...]

  • Страница 314

    314 AP Commands NN47250-100 (Version 02 .51) • set service-pr ofile wep k ey-index on page 342 • set service-pr ofile wpa-ie on page 342 • show radio-pr ofile on page 376 • show service-pr of ile on page 380 set radio-profile shared-key-auth See set service-prof ile shar ed-key-auth on page 324 . set radio-profile short-retry Deprecated in [...]

  • Страница 315

    AP Commands 315 Nortel WLAN—Security Switch 2300 Series Command Line Reference set radio-profile wmm-powersave Enables Unsche duled Automatic Powe rsave Delivery (U-APSD) on AP ra dios managed by the radio profile. U-APSD enables WMM clients that use powersave mode to more eff i ciently request buffered unica st packets from AP radios. When U-APS[...]

  • Страница 316

    316 AP Commands NN47250-100 (Version 02 .51) set service-profile attr Configures authorization attributes that are applied by default to us ers accessing the SSI D managed by the service profile. These SSID de fault attributes are applied in addition to any supplied by the RADIUS server or from the lo cal database. Syntax set service-pr of ile name[...]

  • Страница 317

    AP Commands 317 Nortel WLAN—Security Switch 2300 Series Command Line Reference The following command assigns users accessing the SSID managed by service profile sp2 to the Mobility Profile tulip. WSS# set service-prof sp2 attr mobility-profile tulip success: change accepted. The following command limits the days and time s when users acc essing t[...]

  • Страница 318

    318 AP Commands NN47250-100 (Version 02 .51) See Also • set service-pr of ile auth-psk on page 309 • set service-pr ofile psk-phrase on page 322 • set service-pr ofile wpa-ie on page 342 • show service-pr of ile on page 380 set service-profile auth-fallthru Specifies the authentication type for users who do not ma tch an 802.1X or MAC authe[...]

  • Страница 319

    AP Commands 319 Nortel WLAN—Security Switch 2300 Series Command Line Reference The web-portal authentication type al so requires additional c onfiguration items. (See the “Configuring AAA for Network Users” chapter of the Nortel WLAN Security Switch 2300 Series Configuration Guide .) Examples The follo wing command sets the fa llthru authen t[...]

  • Страница 320

    320 AP Commands NN47250-100 (Version 02 .51) set service-profile beacon Disables or reenab les beaconing of the SSID mana ged by the service profile. An AP radio responds to an 802.1 1 pr obe any request with only the beaconed SS ID(s). For a nonbeaconed SSID, radios respond only to directed 802.11 pr obe requests that match the nonbeaconed SSID’[...]

  • Страница 321

    AP Commands 321 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage WLAN mesh services can be used in a wi reless br idge configuration, implementing APs as bridge endpoints in a transparent Layer 2 bri dge. A typical applicati on of wireless bridging is to provide network connectiv ity between two buil dings using a wireless lin[...]

  • Страница 322

    322 AP Commands NN47250-100 (Version 02 .51) set service-profile cac-session Specifies the maximum number of active sessions a radio can have when se ssion-based CAC is enabled. When an AP radio has reached the maximu m allowed number of acti ve sessions, the radio refuses connections from additional clients. Syntax set service-pr of ile name cac-s[...]

  • Страница 323

    AP Commands 323 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command conf igures service prof ile sp2 to use CCMP encryption: WSS# set service-pr ofile sp2 cipher -ccmp enable success: change accepted. See Also • set service-prof ile ci pher -tkip on page 313 • set service-pr of ile cipher -wep104 on [...]

  • Страница 324

    324 AP Commands NN47250-100 (Version 02 .51) set service-profile cipher-wep104 Enables dynamic Wired Equivalent Privacy (WEP) with 104-bit keys, in a service profile. Syntax set service-pr of ile name cipher -wep104 { enable | disabl e } Defaults 104-bit WEP encryption is disabled by defau lt. Access Enabled. History Introduced in WSS Software V e [...]

  • Страница 325

    AP Commands 325 Nortel WLAN—Security Switch 2300 Series Command Line Reference set service-profile cipher-wep40 Enables dynamic Wired Equivalent Privacy (WEP) with 40-bit keys, in a service profile. Syntax set service-pr of ile name cipher - wep40 { enable | disable } Defaults 40-bit WEP encryption is disabled by default. Access Enabled. History [...]

  • Страница 326

    326 AP Commands NN47250-100 (Version 02 .51) Syntax set service-pr of ile name cos level Defaults The default stat ic CoS lev el is 0. Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage This command applie s only when static CoS is enabled. If st atic CoS is disabled, prioriti zation is based on the QoS mode configured in the r[...]

  • Страница 327

    AP Commands 327 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set service-pr of ile no-broadcast on page 320 • set service-pr ofile pr oxy-ar p on page 321 • show service-pr of ile on page 380 set service-profile idle-client-probing Disables or reenables peri odic keepalives from AP radios to clients on a service[...]

  • Страница 328

    328 AP Commands NN47250-100 (Version 02 .51) Syntax set service-pr of ile name keep-initial-vlan { enable | disa ble } Defaults This option is disabled by default. Access Enabled. History Introduced in WSS Software V e rsion 5.0. Usage Even when this option is enabled, the WSS to which a user roams (the r oamed-to switch) can reassign the VLAN in a[...]

  • Страница 329

    AP Commands 329 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Use this command to exempt a service prof ile from RF load bala ncing. Ex empting a service prof ile from RF load balancing mea ns that e ven if an AP radio is atte mpting to steer clients away , it does not reduce or conceal the av ailabil ity of the SSID named [...]

  • Страница 330

    330 AP Commands NN47250-100 (Version 02 .51) set service-profile mesh Creates a service profile for use with WLAN mesh servic es. Syntax set service-pr of ile name mesh mode {enable | disable} Defaults None. Access Enabled. History Introduced in WSS Software version 6.0. Usage Use this command to configure mesh services for a service profile. Once [...]

  • Страница 331

    AP Commands 331 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set service-pr of ile name no-bro adcast { enable | disable } Defaults The no-broadcast mode is disabled by defa ult. (Broadcast traf fic not disabl ed.) Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage T o further reduce ARP traf fic on a[...]

  • Страница 332

    332 AP Commands NN47250-100 (Version 02 .51) Usage T o further reduce broadcast traf f ic on a service prof ile, use the set service-prof ile no-broadcast command to disable DHCP a nd ARP request broadcasts. Examples The follow ing command enables proxy ARP on service profile sp1 : WSS# set service-prof ile sp1 proxy-arp enable success: change acce[...]

  • Страница 333

    AP Commands 333 Nortel WLAN—Security Switch 2300 Series Command Line Reference set service-profile psk-raw Configures a raw hexadecima l preshared key (PSK) to use for authenti cating WPA clients, in a servi ce profile. Radios use the PSK as a pairwise ma ster key (PMK) to derive unique pairwise session keys for individual WPA clients. Syntax set[...]

  • Страница 334

    334 AP Commands NN47250-100 (Version 02 .51) Syntax set service-pr of ile name rsn-ie { enable | disable } Defaults The RSN IE is disabled by default. Access Enabled. History Introduced in WSS Software V e rsion 3.0. Usage When the RSN IE is enabled, the defau lt authentication method is 802.1X. There is no default cipher suite. Y ou must enable th[...]

  • Страница 335

    AP Commands 335 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults Shared-ke y authentica tion is disabled by default. Access Enabled. History Introduced in WSS Software V e rsion 3.0. Usage Shared-ke y authentication is supported only for encrypted SSI Ds. In addition, if you enable shared-key authentication, RSN, WP A, TKIP[...]

  • Страница 336

    336 AP Commands NN47250-100 (Version 02 .51) set service-profile soda agent-directory Specifies the directory on the WSS whe re the SODA agent files for a service profil e are locate d. Syntax set service-pr of ile name soda agent-directory dir ectory Defaults By default, the WSS expects SOD A agent file s to be located in a directory with the same[...]

  • Страница 337

    AP Commands 337 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Enabled History Introduced in WSS Software V e rsion 4.1. Usage When the SOD A agen t is enabled in a service prof ile, by default the SOD A agent che cks are downloaded to a client and run bef ore the c lient is allowed on the network. Y ou can use this command[...]

  • Страница 338

    338 AP Commands NN47250-100 (Version 02 .51) This functionality occurs only when the enforce checks option is enabled for th e service profile . The enforce checks option is enabled by default. The page is assumed to reside in the root directory on th e WSS. You can optionally specif y a different directory where the page resides. Examples The foll[...]

  • Страница 339

    AP Commands 339 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follo wing command specif ies logout.html as the page to load when a clie nt closes the SODA virtual desktop: WSS# set service-pr ofile sp1 soda logout-page logout.html success: change accepted. The following command specifies logout.html , in the soda-fil[...]

  • Страница 340

    340 AP Commands NN47250-100 (Version 02 .51) set service-profile soda remediation-acl Specifies an ACL to be applied to a client if it fails the ch ecks performed by the SODA agent. Syntax set service-pr of ile name soda rem ediation-acl acl-name Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage If the SOD A age[...]

  • Страница 341

    AP Commands 341 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage Use this command to sp ecify a custom page th at is loaded by the clie nt when it passes the checks performed by the SOD A agent. After this page is loaded, the client is placed in its assigned VLA[...]

  • Страница 342

    342 AP Commands NN47250-100 (Version 02 .51) Examples The following command applies the name guest to the SSID managed by service prof ile clear_wlan : WSS# set service-pr of ile clear_wlan ssid-name guest success: change accepted. The following comma nd applies the name corporate users to the SSID managed by ser vice profile mycorp_srvcprf : WSS# [...]

  • Страница 343

    AP Commands 343 Nortel WLAN—Security Switch 2300 Series Command Line Reference any ACLs that mark CoS. This option pr ovides a simple way to configure an SSID for priority traffic such as VoIP traffic. When static CoS is enabled, the standard WSS Software prio ritization mechanism is not used . Instead, the AP sets CoS as follows: • For traf fi[...]

  • Страница 344

    344 AP Commands NN47250-100 (Version 02 .51) History Introduced in WSS Software V e rsion 3.0. Usage Countermeasures apply only to TK IP and WEP clients. This in cludes WP A WEP clien ts and non- WP A WEP clients. CCMP cli ents are not affected. The TKIP cipher suite must be enabled. The WPA IE also must be enabled. Examples The follow ing command [...]

  • Страница 345

    AP Commands 345 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults This command has the follo wing defaults: • mandatory : ● 11a— 6.0,12.0,24.0 ● 11b— 1.0,2.0 ● 11g— 1.0,2.0,5.5,11.0 • disabled —None. All rates applicable to the radio type are supported by default. • beacon- rate : ● 11a— 6.0 ● 11b?[...]

  • Страница 346

    346 AP Commands NN47250-100 (Version 02 .51) See Also show service-profile on page 380 set service-profile user-idle-timeout Changes the number of seconds WSS Soft ware will leave a session up for a client that is not sendin g data and is not responding to keepalives (idle- client probe s). If the timer expires, th e client’s session is changed t[...]

  • Страница 347

    AP Commands 347 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set service-pr of ile name web-portal-acl aclname Defaults By default, a service prof ile’ s we b-portal-acl option is unset. Howe ver , when you change the service profile’ s auth-fallthru option to web-portal , WSS Software sets the web- portal-acl option [...]

  • Страница 348

    348 AP Commands NN47250-100 (Version 02 .51) History Usage Nortel recommends that you create a subdirectory for the custom page and place all the page’ s f iles in that subdirectory . Do not place the custom page in the root directory of th e switch’ s user file area. If the custom login page includes gif or jpg images, their p ath names are in[...]

  • Страница 349

    AP Commands 349 Nortel WLAN—Security Switch 2300 Series Command Line Reference set service-profile web-portal-logout Changes the web po rtal logout mode. Syntax set service-pr of ile name web-portal-logout mode {enable | disable} Access Enabled. History Introduced in WSS Software V ersion 6.0. Examples The following command allo ws the web portal[...]

  • Страница 350

    350 AP Commands NN47250-100 (Version 02 .51) Syntax set service-pr of ile name web-portal-session-timeout seconds Defaults The default W eb Portal W eb-base d AAA session timeout is 5 seconds. Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage When a client that has connect ed through W eb Portal W eb-based AAA enters standby o[...]

  • Страница 351

    AP Commands 351 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Before using this command, you must configure v a lues for the WEP ke ys you plan to use. Use the set service-prof ile wep key-index command. Examples The follow ing command conf igures service prof ile sp2 to use WEP key 2 for encrypting m ulticast t raf fi c: W[...]

  • Страница 352

    352 AP Commands NN47250-100 (Version 02 .51) set service-profile wep key-index Sets the value of on e of four static Wired-Equiva lent Privacy (WEP) keys for static WEP encryption. Syntax set service-pr of ile name wep key -i nd ex num key value Defaults By default, no static WEP ke ys are defined. Access Enabled. History Introduced in WSS Software[...]

  • Страница 353

    AP Commands 353 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults The WP A IE is disabled by default. Access Enabled. History Introduced in WSS Software V e rsion 3.0. Usage When the WP A IE is enabled, the default authenti catio n method is 802.1X. There is no default cipher suite. Y ou must enable the cipher su ites you wa[...]

  • Страница 354

    354 AP Commands NN47250-100 (Version 02 .51) See Also • set ap local-switching mode on page 26 0 • set vlan-prof ile show ap config Displays global and radio-spec ific settings for an AP. Syntax show ap conf ig [ port-list [ radio { 1 | 2 }]] Defaults None. T able 6: Output for sho w ap arp Field Description Host IP address, hos t name, or alia[...]

  • Страница 355

    AP Commands 355 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Enabled. History Usage WSS Software lists informati on separately for each AP. Examples The follow ing example sho ws conf iguration information for an AP on WSS port 2: WSS # show ap conf ig 2 Port 2: AP model: 2330, POE: enable, bias: high, name: AP02 boot-dow[...]

  • Страница 356

    356 AP Commands NN47250-100 (Version 02 .51) T able 7: Output f or show ap conf ig Field Description Port WSS port number . Note: This f ield is applicable only if the AP is directly connected to the WSS a nd the WSS’ s port is configured as an AP acc ess port. AP Connection ID for the AP. Note: This f ield is applicabl e only if the AP is conf i[...]

  • Страница 357

    AP Commands 357 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set ap on page 33 • set port type ap on page 41 • set ap bias on page 249 • set ap f ingerprint on page 257 • set ap gr oup on page 258 • set ap name on page 261 • set ap upgrade-f irmware on page 275 • set ap radio mode on page 270 • set a[...]

  • Страница 358

    358 AP Commands NN47250-100 (Version 02 .51) • show ap unconf igured on page 374 • show radio-pr ofile on page 376 show ap counters Displays AP and radio statistics counters. Syntax show ap counters [ port-list [ radio { 1 | 2 }]] Defaults None. Access Enabled. History Usage T o display statistics counters and other inform ation for indi vidual[...]

  • Страница 359

    AP Commands 359 Nortel WLAN—Security Switch 2300 Series Command Line Reference TKIP Pkt Replays 0 TKIP Decrypt Err 0 CCMP Pkt Decrypt Err 0 CCMP Pkt Replays 0 CCMP Pkt T r ansfer Ct 0 RadioResets 0 Radio Recv Phy Er r Ct 0 T ransmit Retries 60501 Radio Adjusted Tx Pwr 15 Noise Floor -93 802.3 Packet Tx Ct 0 802.3 Packet Rx Ct 0 No Receive Descrip[...]

  • Страница 360

    360 AP Commands NN47250-100 (Version 02 .51) TKIP Pkt Replays N umber of TKIP packets th at were resent to the AP by a client. A low v alue (under ab out one hundred) does not necessarily indicate a problem. Howe v er , if th is counter is increa sing steadily or has a very high value (in the hundreds or more), a Denial of Service (DoS) attack migh[...]

  • Страница 361

    AP Commands 361 Nortel WLAN—Security Switch 2300 Series Command Line Reference User Sessions Number of clients curre ntly associ ated with the radio. Generally , this counter is equal to the numbe r of sessions listed for the radio in show sessions output. Ho we ver , the counter can dif fer from the counter in show sessions output if a client is[...]

  • Страница 362

    362 AP Commands NN47250-100 (Version 02 .51) See Also show sessions network on page 439 show ap dual-home To display connection information fo r APs configured on a WSS, use the show ap global command on one of the switches where the AP is configured. The counters abo ve are global for all data rates. The counters belo w are for indi vidual data ra[...]

  • Страница 363

    AP Commands 363 Nortel WLAN—Security Switch 2300 Series Command Line Reference show ap fdb Displays the entries in a spec ified AP’s forwarding database. Syntax show ap fdb ap-number Defaults None. Access All. History Introduced in WSS V ersion 6.0. Examples The follo wing command displays FDB entries for AP 7: WSS# show ap fdb 7 AP 7: # = Syst[...]

  • Страница 364

    364 AP Commands NN47250-100 (Version 02 .51) show ap qos-stats Displays statis tics fo r AP forwarding queues. Syntax show ap qos-stats [ ap-num ] [ clear ] Syntax show ap qos-stats [ port-list ] [ clear ] Defaults None. Access Enabled. History Usage Repeating this command with the clear option at regular interv als allo ws you to monitor transmiss[...]

  • Страница 365

    AP Commands 365 Nortel WLAN—Security Switch 2300 Series Command Line Reference show ap etherstats Displays Ethernet statistics for an AP’s Ethernet ports. Syntax show ap etherstats [ port-list | ap-num ] Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 3.0. Option dap remov ed in version 6.0. Examples The follow ing c[...]

  • Страница 366

    366 AP Commands NN47250-100 (Version 02 .51) RxShortFrames: 0 TxUnderruns: 0 RxCrcErrors: 0 TxCarrierLoss: 0 RxOverruns: 0 TxDeferred: 150 RxDiscards: 0 AP: 1 ether: 2 ================================= RxUnicast: 64379 TxGo odFrames: 60621 RxMulticast: 21798 TxSingleColl: 32 RxBroadcast: 1 1 TxLateColl: 0 RxGoodFrames: 86188 TxMaxColl: 0 RxAlignErr[...]

  • Страница 367

    AP Commands 367 Nortel WLAN—Security Switch 2300 Series Command Line Reference show ap group Deprecated in WSS Software Version 6.0. To display info rmation about RF load balanc ing, see show load-balancing group show ap mesh-links Displays information about th e links an AP has to Mesh APs and Mesh Portal APs. Syntax show ap mesh-links ap-number[...]

  • Страница 368

    368 AP Commands NN47250-100 (Version 02 .51) TX: 307 44279 RX: 315 215046 Table 45 on page 358 describes the fields in the show ap mesh-links output. T able 12: Output for sho w ap mesh-links See Also • set ap boot-conf iguration mesh ssid on page 2 54 • set service-pr of ile mesh on page 320 show ap status Displays AP and radio status informat[...]

  • Страница 369

    AP Commands 369 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. History Examples The follow ing command displays the status of a AP: WSS# show ap status 1 ap: 1, IP-addr: 10.2.30.5 (vlan 'vlan-corp '), AP model:2330, manufacturer: Nortel, name: AP01 fingerprint: b4:f9:2a:52 :37:58:f4:d0:10:7[...]

  • Страница 370

    370 AP Commands NN47250-100 (Version 02 .51) Radio 1 type: 802.1 1g, state: config ure succeed [Enabled] (802.1 1b protect) operational channel: 1 operational power: 14 base mac: 00:0b:0e:00:d2:c0 bssid1: 00:0b:0e:00:d2:c0, ssid: public bssid2: 00:0b:0e:00:d2:c2, ssid: employee-n et bssid3: 00:0b:0e:00:d2:c4, ssid: mycorp-tkip Radio 2 type: 802.1 1[...]

  • Страница 371

    AP Commands 371 Nortel WLAN—Security Switch 2300 Series Command Line Reference ap100 oa- 10.8.255.1 1 AP-122 00:0b:0e:da:da: 82 E 1/17 E36/1 1 0d 0h 0m17s Table 46 and Table 46 describe the fields in these displays. T able 13: Output fo r show ap status Field Description AP Connection ID for the AP. Note: This f ield is applicabl e only if the AP[...]

  • Страница 372

    372 AP Commands NN47250-100 (Version 02 .51) State State of the AP : • init—The AP has been recognized by the WSS but has not yet begun b ooting. • booting—The AP has asked the WSS for a boot image. • image do wnloading—The AP is receiving a bo ot image from the WSS. • image downloaded—The AP has received a boot image from the WSS a[...]

  • Страница 373

    AP Commands 373 Nortel WLAN—Security Switch 2300 Series Command Line Reference Radio 1 type Radio 2 type 802.11 type and configurat ion state o f the radio. •T h e configure succeed state indicates that the AP has received configuration p arameters for the radio and the radio is ready to accept client connections . • 802.1 1b pr otect indicat[...]

  • Страница 374

    374 AP Commands NN47250-100 (Version 02 .51) Radio 1 type Radio 2 type (cont.) • Radar Detected indicates that DFS has detected radar on the channel. Wh en this occurs, the AP stops transmitting on the ch annel for 30 minutes. If RF Auto-T uning is enabled for channel assignment, the radio selects another channel and performs the initial channel [...]

  • Страница 375

    AP Commands 375 Nortel WLAN—Security Switch 2300 Series Command Line Reference show ap vlan Displays information about the VLANs that are either locally switched by the specified AP or tunneled from the AP to an WSS switch. bssid, ssid SSIDs configured on the radio and th eir BSSIDs. RFID Reports Status of Ae roScout asset tag support. • Active[...]

  • Страница 376

    376 AP Commands NN47250-100 (Version 02 .51) Syntax show ap vlan ap-number Defaults None. Access All. History Introduced in WSS V ersion 6.0. Examples The follow ing command displays informa tion about the VLANs switched by AP 7: WSS# show ap vlan 7 AP 7: VLAN Name Mode Port T ag ---------- -- - ----------- ---- ------------- 1 default local 1 none[...]

  • Страница 377

    AP Commands 377 Nortel WLAN—Security Switch 2300 Series Command Line Reference show auto-tun e attributes Displays the current values of the RF attributes RF Auto-Tuning uses to decide whether to change ch annel or power settings. Syntax show auto-tune attributes [ ap ap -num [ radio { 1 | 2 | all }]] Syntax show auto-tune attributes [ ap ap-num [...]

  • Страница 378

    378 AP Commands NN47250-100 (Version 02 .51) See Also • set ap radio auto-tune max-power on page 265 • set radio-prof ile aut o-tune channel-conf ig on page 279 • set radio-prof ile aut o-tune channel-holddown on page 280 • set radio-prof ile aut o-tune channel-interval on pag e 281 • set radio-prof ile aut o-tune po wer -backoff-timer on[...]

  • Страница 379

    AP Commands 379 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage For simplici ty , this command displays a single entry for each Nortel radio, e v en if the radio is supporting multiple BSSIDs. Howe ve r , BSSIDs for third-party 802.11 radios are listed separately , e ven if a radio is supporting more than one BSSID. Informati[...]

  • Страница 380

    380 AP Commands NN47250-100 (Version 02 .51) show ap boot-configuration Displays information about the static IP address conf iguration (if any) on a AP. Syntax show ap boot-conf iguration ap-num Defaults None. Access Enabled. History V ersion 4.1 Command introduced in WSS Software. V ersion 6.0 Option dap remov ed. Field Mesh added Field Mesh SSID[...]

  • Страница 381

    AP Commands 381 Nortel WLAN—Security Switch 2300 Series Command Line Reference show ap connection Displays the system IP addre ss of the WSS that booted a AP. Syntax show ap connection [ ap-num | serial-id serial-ID ] Defaults None. Access Enabled. Usage The serial-id parameter displays the activ e connection for the specif ied AP ev en if that A[...]

  • Страница 382

    382 AP Commands NN47250-100 (Version 02 .51) If a AP is configured on this WSS (or another WSS in the same Mobility Domain) but does not hav e an acti ve connection, the command does not disp lay information fo r the AP. T o sho w connection information for APs, use the show ap global comma nd on one of t he switches where the APs are co nfigured. [...]

  • Страница 383

    AP Commands 383 Nortel WLAN—Security Switch 2300 Series Command Line Reference show ap global Displays connection information for APs configured on a WSS. Syntax show ap glob al [ ap-num | serial-id serial-ID ] Defaults None. Access Enabled. Usage Connections are sho wn only for the APs that are configur ed on the WSS from which you enter the com[...]

  • Страница 384

    384 AP Commands NN47250-100 (Version 02 .51) See Also • set ap on page 33 • set ap bias on page 249 • show ap conf ig on page 344 • show ap connection on page 371 • show ap unconf igured on page 374 show ap unconfigured Displays APs that are physically c onnected to the network but that are not conf igured on any WSSs. Syntax show ap unco[...]

  • Страница 385

    AP Commands 385 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • show ap connection on page 371 • show ap global on page 373 show load-balancing group Displays an RF load balanc ing group’s member radios and current load for each radio. Syntax show load-balancing group { gr oup-name | all | [ ap ap-number radio { 1 [...]

  • Страница 386

    386 AP Commands NN47250-100 (Version 02 .51) Examples The follow ing command displays information about the AP radios that are in the same group as radio 1 on AP 3: WSS# show load-balancing group ap 3 radio 1 Radios in the sam e load-balancing group as: ap 3/radio1 ---------- ----------- ----------- ---------- -------- IP address AP Radio Overlap -[...]

  • Страница 387

    AP Commands 387 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. History Usage WSS Software contains a defa ult radio profile. Nortel recomme nds that you do not change this profile b ut instead keep the prof ile for reference. Examples The following command sho ws radi o prof ile information for the d[...]

  • Страница 388

    388 AP Commands NN47250-100 (Version 02 .51) T able 23: Output f or show radio-pr of ile Field Description Beacon Interv al Rate (in milli seconds) at which each AP radio in the prof ile advertis es the beaconed SSID. DTIM Interval N umber of times after every beacon that each AP radio in the radio profile sends a deli v ery traf f ic indication ma[...]

  • Страница 389

    AP Commands 389 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set radio-prof ile activ e-scan on page 278 • set radio-prof ile aut o-tune channel-conf ig on page 279 • set radio-prof ile aut o-tune channel-holddown on page 280 • set radio-prof ile aut o-tune channel-interval on pag e 281 • set radio-prof ile [...]

  • Страница 390

    390 AP Commands NN47250-100 (Version 02 .51) • set radio-prof ile mode on page 291 • set radio-prof ile pr eamb le-length on page 294 • set radio-prof ile qos-mo de on page 295 • set radio-prof ile rf id-mode on page 296 • set radio-prof ile rts -thr eshold on page 297 • set radio-prof ile ser v ice-prof ile on page 298 • set radio-pr[...]

  • Страница 391

    AP Commands 391 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follo wing command displays inf ormation for service prof ile sp1 : WSS # show service- prof ile sp1 ssid-name: corp2 ssid-type: crypto Beacon: yes Proxy ARP: no DHCP restrict: no No broadcast : no Short retry limit: 5 Long retry limit: 5 Auth fallthru: no[...]

  • Страница 392

    392 AP Commands NN47250-100 (Version 02 .51) Enforce SODA checks: yes SODA remediation ACL: Custom success web-page: Custom failure web-page: Custom logout web-page: Custom agent-directory: Static COS: no COS: 0 CAC mode: none CAC sessions: 14 User idle time out: 180 Idl e client probing: yes Keep initial vl an: no W eb Portal Session Timeout: 5 We[...]

  • Страница 393

    AP Commands 393 Nortel WLAN—Security Switch 2300 Series Command Line Reference No broadcast Indicate s whether broadcast restriction is ena bled. When this feature is en abled, WSS Soft ware sends ARP requests and DHCP Of fers and Acks as uni casts to their tar get clients inste ad of forwarding them as broadcasts. Short retry limit Numbe r of ti[...]

  • Страница 394

    394 AP Commands NN47250-100 (Version 02 .51) Custom agent-directory The name of the dire ctory for SOD A agent files on the WSS, if different from the default. By defaul t, SOD A agent files are stored in a directory with the sa me name as the service prof ile. Static COS Indicates whether static CoS assignment is enabled. When this feature is en a[...]

  • Страница 395

    AP Commands 395 Nortel WLAN—Security Switch 2300 Series Command Line Reference WEP Ke y 3 value State of static WEP key number 3: • none—The key is not configu red. • preset—The key is configured. WEP Ke y 4 value State of static WEP key number 4: • none—The key is not configu red. • preset—The key is configured. WEP Unicast Inde [...]

  • Страница 396

    396 AP Commands NN47250-100 (Version 02 .51) • set service-pr of ile attr on page 306 • set service-pr of ile auth-dot1x on page 307 • set service-pr of ile auth-fallthru on page 308 • set service-pr of ile auth-psk on page 309 • set service-pr ofile beacon on page 310 • set service-pr ofile cac-mode on page 311 • set service-pr ofile[...]

  • Страница 397

    AP Commands 397 Nortel WLAN—Security Switch 2300 Series Command Line Reference • set service-pr of ile psk-raw on page 323 • set service-pr of ile rsn-ie on page 323 • set service-pr of ile shared-k ey-auth on page 324 • set service-prof ile shor t-r etry-count on page 325 • set service-pr ofile soda mode on page 329 • set service-pr [...]

  • Страница 398

    398 AP Commands NN47250-100 (Version 02 .51)[...]

  • Страница 399

    399 Nortel WLAN—Security Switch 2300 Series Command Line Reference STP Commands Use Spanning Tree Protocol (STP) co mmands to configure and manage sp anning trees on the virtual LANs (VLANs) configured on a WSS, to ma intain a loop-free network. This ch apter presents STP commands alpha- betically. Use the follo wing table to locate comm ands in [...]

  • Страница 400

    400 STP Commands NN47250-100 (Version 02 .51) clear spantree portcost Resets to the default value the cost of a network port or ports on paths to the STP root bridge in all VLANs on a WSS. Syntax clear spantree portcost port-list Defaults None. Access Enabled. Usage This command resets the co st in all VLANs. T o reset the cost for only specif ic V[...]

  • Страница 401

    STP Commands 401 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear spantree portvlanpri on page 391 • set spantr ee portpri on page 397 • set spantr ee portvlanpri on page 398 • show spantree on page 400 clear spantree portvlancost Resets to the default value the cost of a network port or ports on paths to th[...]

  • Страница 402

    402 STP Commands NN47250-100 (Version 02 .51) Syntax clear spantree portvlanpri port-l ist { all | vlan vlan-id } Defaults None. Access Enabled. Usage WSS Software does not change a port’ s priority for VLANs other than the one(s) you specify . Examples The follow ing command resets the STP priority for port 20 in VLAN avocado : WSS# clear spantr[...]

  • Страница 403

    STP Commands 403 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also show spantree statistics on page 407 set spantree Enables or disables STP on one VLAN or all VLANs configured on a WSS. Syntax set spantree { enable | disable } [{ all | vlan vlan-id | port port-list vlan-id }] Defaults Disabled. Access Enabled. Examples The [...]

  • Страница 404

    404 STP Commands NN47250-100 (Version 02 .51) Usage If you plan to use the backbone fast con vergence feat ure, you must enable it on all the bridges in the spanning tree. Examples The follow ing command enable s backbone fast con ver gence: WSS# set spantree backbonefast enable success: change accepted. See Also show spantree backbonefast on page [...]

  • Страница 405

    STP Commands 405 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command changes the hello interval for all VLANs to 4 seconds: WSS# set spantree hello 4 all success: change accepted. See Also show spantree on page 400 set spantree maxage Changes the maximum age for an STP root bridge hello packet that is ac[...]

  • Страница 406

    406 STP Commands NN47250-100 (Version 02 .51) Defaults The default port cost depends on the port speed and link type. T able 58 list s the defaults for STP port path c ost. Access Enabled. Usage This command ap plies only to the default VLAN (VLAN 1). T o change the cost of a port in another VLAN, use the set spantree portvlancost command. Examples[...]

  • Страница 407

    STP Commands 407 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults STP port fast con v er gence is disabled by default. Access Enabled. Usage Use port fast con ver gence on ports that are direc tly connected to servers, hosts, or other MA C stations. Examples The follow ing command enables port fast con v ergence on ports 9,[...]

  • Страница 408

    408 STP Commands NN47250-100 (Version 02 .51) Syntax set spantree portvlancos t port-list cost cost { all | vlan vlan-id } Defaults The default port cost depends on th e port speed and link type. (See T able 58 on page 396 .) Access Enabled. Examples The follow ing command changes the cost on ports 3 and 4 to 20 in VLAN mauve : WSS# set spantree po[...]

  • Страница 409

    STP Commands 409 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command sets the priority of ports 3 and 4 to 48 on VLAN mauve : WSS# set spantree portvlanpri 3-4 priority 48 vlan mauve success: change accepted. See Also • clear spantree portpri on page 390 • clear spantree portvlanpri on page 391 • s[...]

  • Страница 410

    410 STP Commands NN47250-100 (Version 02 .51) Defaults Disabled. Access Enabled. Usage The uplink fast con verge nce feature is applicable to bridges th at are acting as access swi tches to the network co re (distrib ution layer) b ut are not in the core t hemselv es. Do not enab le the feature on WSSs that are in the network core. Examples The fol[...]

  • Страница 411

    STP Commands 41 1 Nortel WLAN—Security Switch 2300 Series Command Line Reference Bridge Max Age 20 sec Hello T ime 2 sec Forward Delay 15 sec[...]

  • Страница 412

    412 STP Commands NN47250-100 (Version 02 .51) Port V lan STP-S tate Cost Prio Portfast ------------------------------------- ---------------------------------- ------- 1 1 Forwarding 19 128 Dis abled 2 1 STP Off 19 128 Disabled 3 1 Disabled 19 128 Disabled 4 1 Disabled 19 128 Disabled 5 1 Disabled 19 128 Disabled 6 1 Disabled 19 128 Disabled 7 1 Di[...]

  • Страница 413

    STP Commands 413 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also show spantree blockedports on page 404 show spantree backbonefast Indicates whether the STP backbone fast conv ergence fe ature is enabled or disabled. Syntax show spantr ee backbonefast Defaults None. STP-State or Port-State STP state of the port: • Blocki[...]

  • Страница 414

    414 STP Commands NN47250-100 (Version 02 .51) Access All. Examples The follo wing ex ample sho ws the comman d output on a WSS with backb one fast con ver gence enabled: WSS# show spantree bac kbonefa st Backbonefast is enabled See Also set spantree backbonefast on page 393 show spantree blockedports Lists information about WSS ports that ST P has [...]

  • Страница 415

    STP Commands 415 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also show spantree on page 400 show spantree portfast Displays STP uplink fast convergenc e information for all network ports or for one or more network ports. Syntax show spantr ee portfast [ port-li st ] Defaults None. Access All. Examples The following command [...]

  • Страница 416

    416 STP Commands NN47250-100 (Version 02 .51) See Also set spantree portfast on page 396 show spantree portvlancost Displays the cost of a port on a path to the ST P root bridge, for each of the port’s VLANs. Syntax show spantr ee portvlancost port-list Defaults None. Access All. Examples The follo wing command sho ws the STP port cost of port 1:[...]

  • Страница 417

    STP Commands 417 Nortel WLAN—Security Switch 2300 Series Command Line Reference show spantree statistics Displays STP statistics f or on e or more WSS netwo rk ports. Syntax show spantree statistics [ port -list [ vlan vlan-id ]] Defaults None. Access All. Usage The command di splays statistic s separately for e ach port. Examples The follo wing [...]

  • Страница 418

    418 STP Commands NN47250-100 (Version 02 .51) scp failure count 0 root inc trans count (port/VLAN) 1 (1) inhibit loopguard F ALSE loop inc trans count 0 (0) S tatus of Port T imers forward delay timer INACTIVE forward delay timer value 15 message age timer ACTIVE message age timer value 0 topology change timer INACTIVE topology change timer value 0[...]

  • Страница 419

    STP Commands 419 Nortel WLAN—Security Switch 2300 Series Command Line Reference next state 0 src MAC count 21807 total src MAC count 21825 curr_src_mac 00-0b-0e-00-04-30 next_src_mac 00-0b-0e-02-76-f6 Table 61 describes the fields in this display. T able 4: Output for sho w spantree statistics Field Description Port Port number . VLAN VLAN ID. Sp[...]

  • Страница 420

    420 STP Commands NN47250-100 (Version 02 .51) designated cost T otal path cost to reach the root bridge. designated_bridge Bridge to which this switch forwards t raf fic aw ay from the root bridge. designated_port STP port through which this switch forwar ds traf fic away from the root bridge. top_change_ack V alue of the topology ch ange ackno wle[...]

  • Страница 421

    STP Commands 421 Nortel WLAN—Security Switch 2300 Series Command Line Reference hold timer Status of the hold timer . Th is timer ensures that conf igured BPDUs are not transmitted too frequently through any bridge port. hold timer value Current value of the hold timer , in seconds. delay root port timer Status of th e dela y root port timer , wh[...]

  • Страница 422

    422 STP Commands NN47250-100 (Version 02 .51) See Also clear spantree statistics on page 392 show spantree uplinkfast Displays uplink fast convergence info rmation for one VLAN or all VLANs. Syntax show spantr ee uplinkfast [ vla n vlan-id ] Defaults None. Access All. Examples The following command sho ws uplink fast con vergence information for al[...]

  • Страница 423

    STP Commands 423 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set spantr ee uplinkfast on page 399[...]

  • Страница 424

    424 STP Commands NN47250-100 (Version 02 .51)[...]

  • Страница 425

    425 Nortel WLAN—Security Switch 2300 Series Command Line Reference IGMP Snooping Commands Use Internet Group Management Protoc ol (IGMP) snooping commands to conf igure and manage multicast traffic reduction on a WSS. This chapter presents IGMP snooping commands alphabetically. Use the fo llowing t able to locate commands in this chapter based on[...]

  • Страница 426

    426 IGMP Snooping Commands NN47250-100 (Version 02 .51) Examples The follo wing command clears IGMP statistic s for all VLANs: WSS# clear igmp statistics IGMP statistics cleared for all vlans See Also show igmp s tatistics on page 431 set igmp Disables or reenables IGMP snoopi ng on one VLAN or all VLANs on a WSS. Syntax set igmp { enable | disable[...]

  • Страница 427

    IGMP Snooping Command s 427 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The following co mmand changes the last member query interval on VLAN or ange to 5 tenths of a second: WSS# set igmp lmqi 5 vlan orange success: change accepted. See Also • set igmp oqi on page 418 • set igmp qi on page 420 • set igmp mro ute[...]

  • Страница 428

    428 IGMP Snooping Commands NN47250-100 (Version 02 .51) Syntax set igmp mrsol { enable | disable } [ vlan vlan-id ] Defaults Multicast router solicita tion is disabled on all VLANs by default. Access Enabled. Examples The follow ing command enables mul ticast router solicitation on VLAN or ange : WSS# set igmp mrsol enable vlan orange success: chan[...]

  • Страница 429

    IGMP Snooping Command s 429 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set igmp oqi seconds [ vlan vlan-id ] Defaults The default other -querier-present in terv al is 255 seconds (4.25 minutes). Access Enabled. Usage A WSS cannot become the querier unless the pseudo-querier feature is enabled on the switch. When the fea[...]

  • Страница 430

    430 IGMP Snooping Commands NN47250-100 (Version 02 .51) Usage Proxy reporting reduces multicast ov erhead by sendi ng only one membership report for a group to the multicast routers and discardi ng other membership reports for the same group. If you disable proxy reporting, the WSS sends all membership reports to the routers, including multiple rep[...]

  • Страница 431

    IGMP Snooping Command s 431 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax set igmp qri tenth-seconds [ vlan vlan-id ] Defaults The default query response interv al is 100 tenths of a second (10 seconds). Access Enabled. Usage The query response interval is applicable only when the WSS is querier for the subnet. For the swi[...]

  • Страница 432

    432 IGMP Snooping Commands NN47250-100 (Version 02 .51) Examples The follow ing example en ables the pseudo-querier on the orange VLAN: WSS# set igmp querier enable vlan orange success: change accepted. See Also show igmp querier on pa ge 427 set igmp receiver Adds or removes a network port in the li st of ports on which a WSS forwards traffic to m[...]

  • Страница 433

    IGMP Snooping Command s 433 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults The default rob ustness v alue for all VLANs is 2. Access Enabled. Examples The follo wing ex ample changes th e robustne ss value on VLAN orang e to 4: WSS# set igmp r v 4 vlan orange success: change accepted. See Also • set igmp oqi on page 418[...]

  • Страница 434

    434 IGMP Snooping Commands NN47250-100 (Version 02 .51) Port Querier-IP Querier-MAC TTL ---- ------- -------- ---- ---------- --- ----- 1 193.122.135.178 00: 0b:cc:d2:e9:b4 23 IGMP vlan mem ber po rts: 10, 12, 11, 14, 16, 15, 13, 18, 17, 1, 20, 21, 2, 22, 19, 4, 6, 5, 3, 8, 7, 9 IGMP static ports: none IGMP statistics for vlan orange: IGMP message [...]

  • Страница 435

    IGMP Snooping Command s 435 Nortel WLAN—Security Switch 2300 Series Command Line Reference Multicast router information Lis t of multicast router s and acti ve multicast groups. The f ields containing this information ar e described separately . The show igmp mrouter command show s the same in formation. Port Number of the physical port through w[...]

  • Страница 436

    436 IGMP Snooping Commands NN47250-100 (Version 02 .51) See Also • show igmp mrouter on page 426 • show igmp querier on page 427 • show igmp recei ver -table on page 429 • show igmp statistics on page 431 show igmp mrouter Displays the multicast routers in a WSS’ s subnet, on one VLAN or al l VLANs. Routers are list ed separately for each[...]

  • Страница 437

    IGMP Snooping Command s 437 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set igmp mro uter on page 417 • show igmp mrouter on page 426 show igmp querier Displays information about th e active multicas t querier, on one VLAN or all VLANs. Qu eriers are listed separately f or each VLAN. Each VLAN can have only one q[...]

  • Страница 438

    438 IGMP Snooping Commands NN47250-100 (Version 02 .51) Examples The follow ing command displays querier information for VLAN or ange : WSS# show igmp querier vlan orange Querier for vlan orange[...]

  • Страница 439

    IGMP Snooping Command s 439 Nortel WLAN—Security Switch 2300 Series Command Line Reference Port Querier -IP Querier-MAC TTL ---- ------- -------- ---- ---------- --- -------- --------- - 1 193.122.135.178 00:0b:cc:d2:e9:b4 23 The following command shows the information WSS Softwa re displays when the querier is the WSS itself: WSS# show igmp quer[...]

  • Страница 440

    440 IGMP Snooping Commands NN47250-100 (Version 02 .51) Syntax show igmp recei ver -table [ vlan vlan-id ] [ group gr oup-ip -addr / mask-length ] Defaults None. Access All. Examples The follo wing command displays al l multicast recei v ers in VLAN or ange : WSS# show igmp r eceiv er -table vlan orange VLAN: orange Session Port Receiver -IP Receiv[...]

  • Страница 441

    IGMP Snooping Command s 441 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set igmp r eceiver on page 422 show igmp statistics Displays IGMP statistics. Syntax show igmp statistics [ vlan vlan-id ] Defaults None. Access All. Examples The follow ing command displays IGMP statistics for VLAN orange : WSS# show igmp statisti[...]

  • Страница 442

    442 IGMP Snooping Commands NN47250-100 (Version 02 .51) DVMRP 4 4 0 PIM V1 0 0 0 PIM V2 0 0 0 T opology notification s: 0 Packets with unknown IGMP ty pe: 0 Packets with bad l ength: 0 Packets with bad checksum: 0 Packets dropped: 4 Table 67 describes the fields in this display. T able 5: Output f or show igmp statistics Field Description IGMP stat[...]

  • Страница 443

    IGMP Snooping Command s 443 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also clear igmp statistics on page 415 IGMP message type T ype of IGMP message, continued: • Mrouter-T erm—Multicast router termination messages. A multicast router sends this type of message when multicast fo rwarding is disabled on the router inte[...]

  • Страница 444

    444 IGMP Snooping Commands NN47250-100 (Version 02 .51)[...]

  • Страница 445

    445 Nortel WLAN—Security Switch 2300 Series Command Line Reference Session Mana g ement Commands Use session management commands to di splay and clear administ rative and network user se ssions. This cha pter presents session management co mmands alphabeticall y. Use the following table to loca te commands in this chapter based on their use. clea[...]

  • Страница 446

    446 Session Management Commands NN47250-100 (Version 02 .51) To clear Telne t client session 0, type the f ollowing command: WSS# clear sessions telnet client 0 See Also show sessions on page 437 clear sessions network Clears all network sessions for a specified username or set of usernames, MAC address or set of MAC addresses, virtual LAN (VLAN) o[...]

  • Страница 447

    Session Manage ment Commands 447 Nortel WLAN—Security Switch 2300 Series Command Line Reference To clear the session of user Natasha , type the following command: 23x0# clear sessions network user Natasha To clear the sessions of users whos e name begins with the character s Jo , type the following command: 23x0# clear sessions network user Jo* T[...]

  • Страница 448

    448 Session Management Commands NN47250-100 (Version 02 .51) To view information about console users’ sessions, type the following command: WSS> show sessions console Tty Username T ime (s) ------- ------- -- ----------- ---- ---- console 8573 1 console session To view information about Te lnet us ers sessions, type the following command: WSS&[...]

  • Страница 449

    Session Manage ment Commands 449 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also clear sessions on page 435 show sessions network Displays summary or verbose information about all network session s, or network sessions for a specif ied username or set of usernames, MAC address or set of MAC a ddresses, VLAN or set of VLANs[...]

  • Страница 450

    450 Session Management Commands NN47250-100 (Version 02 .51) Defaults None. Access All. History Usage WSS Software displays informat ion about network sessions in th ree types of displays. See the follow ing tables for field descriptions. Authorization attribu te values ca n be changed during authorizati on. If the values are changed, show sessions[...]

  • Страница 451

    Session Manage ment Commands 451 Nortel WLAN—Security Switch 2300 Series Command Line Reference WSS > show sessions network User Sess IP or MAC VLAN Port / Name ID Address Name Ra dio ------------------------------ -- -- ----------------- - -------------- ----- EXAMPLENatasha 4* 10.10.40.17 vlan-eng 3/1 host/laptop1 1.exmpl.com 6* 10.10.40.16[...]

  • Страница 452

    452 Session Management Commands NN47250-100 (Version 02 .51) The following command displays in formation about network session 88: WSS# show sessions netw ork session-id 88 Local Id: 88 Global Id: SESS-88-00040f-876766-623fd6 State: ACTIVE SSID: Rack-39-PM Port/Radio: 10/1 MAC Address: 00:0f:66:f4:71:6d User Name: last-resort-Rack-39-PM IP Address:[...]

  • Страница 453

    Session Manage ment Commands 453 Nortel WLAN—Security Switch 2300 Series Command Line Reference IP or MA C Address IP address of the session user , or the user’ s MAC addr ess if the user has not yet receiv ed an IP address. VLAN Name Name of the VLAN a ssociated with the session. Port/Radio Number of the port and radio through which the user i[...]

  • Страница 454

    454 Session Management Commands NN47250-100 (Version 02 .51) now on Shows the follo wing information about the AP and radio the session is currently on: • IP address and port number of th e WSS managing the AP • Serial number and radio number of the AP • Amount of time the session has been on this AP from Shows information about the APs from [...]

  • Страница 455

    Session Manage ment Commands 455 Nortel WLAN—Security Switch 2300 Series Command Line Reference T able 5: show sessions network session-id Output Field Description Local Id Identifier for the session on this part icular switch. (This is the session ID you specify when entering the show sessions network session-i d command.) Global Id Unique sessi[...]

  • Страница 456

    456 Session Management Commands NN47250-100 (Version 02 .51) T ag System-wide suppor ted VLAN tag type. Session Start Indicat es when the session started. Last Auth T ime Indicates when the most re cent authenticati on of the session occurred. Last Acti vity Indicates when the last acti vity (transmission) occurred on the session. Session T imeout [...]

  • Страница 457

    Session Manage ment Commands 457 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also clear sessions networ k on page 436[...]

  • Страница 458

    458 Session Management Commands NN47250-100 (Version 02 .51)[...]

  • Страница 459

    459 Nortel WLAN—Security Switch 2300 Series Command Line Reference Security A CL Commands Use security ACL commands to configure and monitor securi ty access control lists (ACLs). Securi ty ACLs filter packets to restrict or permit network usage by cert ain users or traffic types, and can assign to packe ts a class of service (CoS) to define the [...]

  • Страница 460

    460 Security ACL Commands NN47250-100 (Version 02 .51) Defaults None. Access Enabled. Usage This command deletes secur ity A CLs only in the edit buf fer . Y ou must use the co mmit security acl command with this command to de lete the A CL or A CE from the running configuration and non v olatile storage. The clear security ac l command deletes a s[...]

  • Страница 461

    Security ACL Comm ands 461 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear security acl map Deletes the mapping between a se curity ACL an d a virtual LAN (VLAN), one or more physical ports, or a virtual port. Or deletes all ACL maps to VLANs, ports, and virtual ports on a WSS. Syntax clear security acl map { acl-name | all }[...]

  • Страница 462

    462 Security ACL Commands NN47250-100 (Version 02 .51) To clear all physic al ports, virtual ports, and VLANs on a WSS of the ACLs mapped for incoming and outgoing traffic, type the followi ng command: WSS# clear security acl map all success: change accepted. See Also • clear security acl on page 449 • set security acl map on page 459 • show [...]

  • Страница 463

    Security ACL Comm ands 463 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear security acl on page 449 • rollback security acl on page 453 • set security acl on page 454 • show security acl on page 461 • show security acl info on page 463 hit-sample-rate This command has been renamed in WSS Software Version [...]

  • Страница 464

    464 Security ACL Commands NN47250-100 (Version 02 .51) set security acl In the edit bu ffer, creates a sec urity access cont rol list (ACL ), adds one access co ntrol en try (ACE) to a security ACL, and/or reorders ACEs in the ACL. The AC Es in an ACL filter IP pack ets by source IP address, a Laye r 4 protocol, or IP, ICMP, TCP, or UDP packet info[...]

  • Страница 465

    Security ACL Comm ands 465 Nortel WLAN—Security Switch 2300 Series Command Line Reference By UDP packets set security acl ip acl-name { permit [ cos cos ] | deny } udp { sour ce-ip-addr mask | any [ operator port [ port2 ]]} { destination-ip-addr mask | any [ oper ator port [ port2 ]]} [[ precedence pr ece dence ][ tos tos ] | [ dscp codepoint ]][...]

  • Страница 466

    466 Security ACL Commands NN47250-100 (Version 02 .51) pr otocol IP protocol by which to f ilter packets: •i p •t c p •u d p •i c m p • A protocol num ber b etwee n 0 and 255. (For a complete list of IP protocol names and numbers, see www .iana.org/assignments/protocol-numbers .) sour ce-ip-addr mask | any IP address and wildcard mask of [...]

  • Страница 467

    Security ACL Comm ands 467 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults By default, permitted pa ckets are classified ba sed on DSCP v alue, which is con v erted into an internal CoS v alue in the switc h’ s CoS map. The pac ket is then mark ed with a DSCP v alue based on the internal CoS value. If the A CE contains t[...]

  • Страница 468

    468 Security ACL Commands NN47250-100 (Version 02 .51) History Usage The WSS does not apply security A CLs until you acti vate them with the commit security acl command and map them to a VLAN, port, or virtual port, or to a user . If the WSS is reset or restarted , any A CLs in the edi t buf fer are lost. You cannot perform ACL functions that inclu[...]

  • Страница 469

    Security ACL Comm ands 469 Nortel WLAN—Security Switch 2300 Series Command Line Reference set security acl map Assigns a committed security ACL to a VLAN, physical port or ports, vi rtual port, or AP on the WSS. Syntax set security acl map acl-name { vlan vlan-id | port port-list [ tag tag-list ] | ap ap-num } { in | out } Defaults None. Access E[...]

  • Страница 470

    470 Security ACL Commands NN47250-100 (Version 02 .51) • commit security acl on page 452 • set mac-user attr on page 197 • set mac-usergr oup attr on page 203 • set security acl on page 454 • set user attr on page 207 • set usergr oup on page 208 • show security acl map on page 464 set security acl hit-sample-rate Specifies the time i[...]

  • Страница 471

    Security ACL Comm ands 471 Nortel WLAN—Security Switch 2300 Series Command Line Reference WSS# show security acl hits ACL hit counters Index Counter ACL-name ----- ------ ----------- --- -------- --- 1 0 acl_2 2 0 acl_175 3 916 acl_153 See Also • show security acl hits on page 462 • show security acl info on page 463 show security acl Display[...]

  • Страница 472

    472 Security ACL Commands NN47250-100 (Version 02 .51) show security acl editbuffer Displays a summ ary of the security ACLs t hat ha ve not yet been com mitte d to the configuration. Syntax show security acl [ inf o all ] editbuffer Defaults None. Access Enabled. Examples T o vie w a summary of the securit y A CLs in the edit b uf fer , type the f[...]

  • Страница 473

    Security ACL Comm ands 473 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax show security acl hits Defaults None. Access Enabled. Usage For WSS Softw are to count hits for a security A CL, you must specify hits in the set security acl commands that def ine A CE rules for the ACL . Examples T o display the security A CL hits o[...]

  • Страница 474

    474 Security ACL Commands NN47250-100 (Version 02 .51) set security acl ip acl_123 (hits #5 462) ---------- ----------- ----------- ---------- --------- ------ 1. permit IP source IP 192.168.1.11 0. 0.0.255 destination IP any enable-hits 2. deny IP source IP 192.168.2.11 0.0.0.0 destination IP any set security acl ip acl_134 (hits #3 0) ---------- [...]

  • Страница 475

    Security ACL Comm ands 475 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear security acl map on page 451 • set security acl map on page 459 • show security acl on page 461 show security acl resource-usage Displays statisti cs about the resources used by secur ity ACL fi ltering on the W SS. Syntax show securit[...]

  • Страница 476

    476 Security ACL Commands NN47250-100 (Version 02 .51) L4 global : T rue No rules : False Non-IP rules : False Root in first : T rue St atic default action : False No per-user (MAC) mapping : True Out mapping : False In mapping : T rue No VLAN or POR T mapping : False No VPOR T mapping : T rue Table 73 explains the fields in the show security acl r[...]

  • Страница 477

    Security ACL Comm ands 477 Nortel WLAN—Security Switch 2300 Series Command Line Reference Port number Control value for handl ing fr agmented IP pack ets. Note: The current WSS Software version filters only the first packet of a fragmented IP packet and passes the remaining fragments. Number of action types Number of actions that ca n be performe[...]

  • Страница 478

    478 Security ACL Commands NN47250-100 (Version 02 .51) In mapping Application of security A CLs to incoming traff ic on the WSS: • T rue—Security A CLs are ma pped to incoming traffic. • False—No security ACLs ar e ma pped to incoming traf fic. No VLAN or POR T mapping Application of securi ty A CLs to WSS VLANs or ports on the WSS: • T r[...]

  • Страница 479

    479 Nortel WLAN—Security Switch 2300 Series Command Line Reference Cr yptograph y Commands A digital certificate is a form of elec tronic identificati on for computers. The WSS requires digit al certificates to authen- ticate its communica tions to WLAN Management Software a nd Web View, to Web-base d AAA clients, and to Extensible Authentication[...]

  • Страница 480

    480 Cryptography Comma nds NN47250-100 (Version 02 .51) crypto ca-certificate Installs a certificate aut hority’s own PKCS #7 certific ate into the WSS certificate and key storage area. Syntax crypto ca-certif icate { admin | eap | web } PEM-formatted-certificate Defaults None. Access Enabled. History Usage The Priv ac y-Enhanced Mail protoc ol ([...]

  • Страница 481

    Cryptography Command s 481 Nortel WLAN—Security Switch 2300 Series Command Line Reference mzerMClaweVQQTT ooewiwpoer0QWNFNkj9004 4mbdrl1277SWQ8G7DiwYUtrqoQplKJvxz ..... Lm8wmVYxP56M;CUAm90 8C2foYgOY40= -----END CER TIFICA TE---- - See Also show crypto ca-certificate on page 479 crypto certificate Installs one of the WSS’s P KCS #7 certificates[...]

  • Страница 482

    482 Cryptography Comma nds NN47250-100 (Version 02 .51) -----BEGIN CE R TIFICA TE----- MIIBdTCP3wIBADA2MQswCQYDVQQGEwJVUzELMA kGA1UECBMCQOExGjA Y BgNVB AMU EXR1Y2hwdWJzQHRycHouY29tMIGfMAOGCSqGSIb3DQEBAQAA4GNADCBiQKBgQC4 ..... 2L8Q9tk+G2As84QYLm8wmVY>xP56 M;CUAm908C2foYgOY40= -----END CER TIFICA TE---- - See Also • crypto generate r equest on p[...]

  • Страница 483

    Cryptography Command s 483 Nortel WLAN—Security Switch 2300 Series Command Line Reference SSH requires an SSH authentication key, but you can a llow WSS Software to gene rate it automatically. The first time an SSH clie nt attempts to access the SSH server on a WSS, the switch au tomatically genera tes a 1024-byte SSH key. If you want to us e a 2[...]

  • Страница 484

    484 Cryptography Comma nds NN47250-100 (Version 02 .51) Defaults None. Access Enabled. History Usage T o use this command, you must already hav e generated a public-pri vate encryption k ey pair with the crypto generate key command. Enter crypto generate r equest admin , crypto generate request eap , or crypto ge nerate request web and press Enter.[...]

  • Страница 485

    Cryptography Command s 485 Nortel WLAN—Security Switch 2300 Series Command Line Reference -----END CER TIFICA TE REQU E ST ----- See Also • crypto certifica te on page 471 • crypto generate key on page 472 crypto generate self-signed Generates a self-si gned certificate for eithe r an administra tive certificate f or use with WLAN Management [...]

  • Страница 486

    486 Cryptography Comma nds NN47250-100 (Version 02 .51) Defaults None. Access Enabled. History Usage T o use this command, you must already hav e generated a public-priv ate encryption key pair with the crypto gene rate key command. Examples T o generate a self- signed administrat iv e certif icate, type the follo wing command: WSS# crypto generate[...]

  • Страница 487

    Cryptography Command s 487 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults None. Access Enabled. History Usage The password allo ws the public -pri va te key pai r and certifi cate to be installed tog ether from the same PKCS #12 object file. WSS Softwa re erases the one-time passw ord after processing th e crypto pkcs12 c[...]

  • Страница 488

    488 Cryptography Comma nds NN47250-100 (Version 02 .51) Defaults The password you enter with the crypto otp command must be the same as the one protecting the PKCS #12 file. Access Enabled. History Usage T o use this command, you must have already created a one-time password with the crypto otp command. You must also have the PKCS #12 object file a[...]

  • Страница 489

    Cryptography Command s 489 Nortel WLAN—Security Switch 2300 Series Command Line Reference show crypto ca-certificate Displays information about th e certificate author ity’s PEM-encoded PKCS #7 certificate. Syntax show crypto ca-certif icate { admin | eap | web } Defaults None. Access Enabled. History Examples T o display information about the [...]

  • Страница 490

    490 Cryptography Comma nds NN47250-100 (Version 02 .51) • show crypto certif icate on page 480 show crypto certificate Displays information about one of the cr ypt ographic certificates installed on the WSS. Syntax show crypto certif icate { admin | eap | web } Defaults None. Access Enabled. History Usage Y ou must hav e generated a self- signed [...]

  • Страница 491

    Cryptography Command s 491 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • crypto generate se lf-signed on page 475 • show crypto ca-certif icate on page 479 show crypto key domain Displays the checksum (also ca lled a fingerprint ) of the public key used to authen ticate manag ement traffic between WSSs. Syntax show[...]

  • Страница 492

    492 Cryptography Comma nds NN47250-100 (Version 02 .51)[...]

  • Страница 493

    493 Nortel WLAN—Security Switch 2300 Series Command Line Reference RADIUS and Ser ver Gr oups Commands Use RADIUS commands to set up communi cation between a WSS and groups of up to four RADIUS servers for remote authentication, authoriz ation, and accounting (A AA) of administrators and networ k users. This chapter presents RADIUS commands alpha[...]

  • Страница 494

    494 RADIUS and Server Groups Comman ds NN47250-100 (Version 02 .51) Defaults Global RADIUS parameters have the follo wing default v alues: • deadtime —0 (zero) minutes (The WSS does not designat e unresponsi v e RADIUS servers as una v ailable.) • key —No key • ret ra ns mi t —3 (the total number of attempts, including the first attempt[...]

  • Страница 495

    RADIUS and Server Groups Commands 495 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples T o clear the s ystem IP address as t he permanent source address for RADIUS client requests, type the following command: WSS# clear radius cl ient system-ip success: change accepted. See Also • set radi us clien t system-ip on page 488[...]

  • Страница 496

    496 RADIUS and Server Groups Comman ds NN47250-100 (Version 02 .51) clear radius server Removes the named RADIUS serv er from the WSS configuration. Syntax clear radius server ser ver-name Defaults None. Access Enabled. History Introduced in WSS Software 1.0. Examples The following command remo ves the RADIUS serv er rs4 2 from a list of remote AAA[...]

  • Страница 497

    RADIUS and Server Groups Commands 497 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set server group on page 492 set radius Configures global defaults for RADIUS se rvers that do not explicitly set these va lues themselve s. By default, t he WSS automatically se ts all these va lues except the passw ord (key). Syntax set[...]

  • Страница 498

    498 RADIUS and Server Groups Comman ds NN47250-100 (Version 02 .51) History Usage Y ou can specify only one pa rameter per command line. Examples The follo wing commands sets the dead time to 5 minutes, the RADIUS ke y to goody , the number of retransmissions to 1, and the timeout to 21 se conds on all RADIUS server s connected to the WSS: 23x0# se[...]

  • Страница 499

    RADIUS and Server Groups Commands 499 Nortel WLAN—Security Switch 2300 Series Command Line Reference set radius proxy client Adds a RADIUS proxy entry for a third-party AP. The proxy entr y specifies the IP address of the AP and the UDP ports on which the WSS listens for RADIUS traffic from the AP. Syntax set radius pr oxy client addr ess ip-addr[...]

  • Страница 500

    500 RADIUS and Server Groups Comman ds NN47250-100 (Version 02 .51) Defaults None. Access Enabled. History Introduced in WSS Software 4.0. Usage AAA for third-party AP users has additional conf igurati on requirements. See the “Configuring AAA for Users of Third-P arty APs” section in the “C onf iguring AAA for Network Users” chapter of the[...]

  • Страница 501

    RADIUS and Server Groups Commands 501 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults Default v a lues are listed belo w: • auth-port —UDP port 1812 • acct-port —UDP port 1813 • timeout —5 seconds • ret ra ns mi t —3 (the total number of attempts, including the first attempt) • deadtime —0 (zero) minute[...]

  • Страница 502

    502 RADIUS and Server Groups Comman ds NN47250-100 (Version 02 .51) Examples T o set a RADIUS server named RS42 with IP address 198.162.1.1 to use the default accounting and authorization ports with a timeout interv al of 30 seconds, two tran smit attempts, 5 minutes of dead time, a ke y string of ke ys4u , and the default authorization password of[...]

  • Страница 503

    RADIUS and Server Groups Commands 503 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear server gr oup on page 486 • set serv er group load-balance on page 493 • show aaa on page 210 set server group load-balance Enables or disables load balancing among the RADIUS servers in a server group. Syntax set server gro[...]

  • Страница 504

    504 RADIUS and Server Groups Comman ds NN47250-100 (Version 02 .51)[...]

  • Страница 505

    505 Nortel WLAN—Security Switch 2300 Series Command Line Reference 802.1X Mana gement Commands Use 802. IEEE X manage ment commands to modify the default se ttings for IEEE 802.1X sessions on a WSS. For best results, change the setti ngs only if you are aware of a problem with the WSS’s 802.1X performance. This chapter presents 802.1X commands [...]

  • Страница 506

    506 802.1X Management Command s NN47250-100 (Version 02 .51) clear dot1x bonded-period Resets the Bonded Auth period to its d efault value. Syntax clear dot1x max-req Defaults The default bonded authentica tio n period is 0 seconds. Access Enabled. History Introduced in WSS Software V e rsion 2.1. Usage Examples T o reset the Bonded period to its d[...]

  • Страница 507

    802.1X Manage ment Commands 507 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear dot1x port-control Resets all wired authentication ports on the WSS to default 802.1X authentication. Syntax clear dot1x port-control Defaults By default, all wired auth entication ports are set to auto and they process authentication requests as [...]

  • Страница 508

    508 802.1X Management Command s NN47250-100 (Version 02 .51) Access Enabled. History Introduced in WSS Software 1.0. Examples T ype the follo wing command to reset the maximu m number of reauthorizat ion att empts to the default: WSS# clear dot1x reauth-max success: change accepted. See Also • set dot1x r eauth-max on page 504 • show dot1x on p[...]

  • Страница 509

    802.1X Manage ment Commands 509 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • set dot1x timeout auth-server on page 505 • show dot1x on page 507 clear dot1x timeout supplicant Resets to the default setting the number of seconds th at must elapse before the WSS times out an authentica- tion session with a supplic an[...]

  • Страница 510

    510 802.1X Management Command s NN47250-100 (Version 02 .51) set dot1x authcontro l Provides a global override mech anism for 802.1X authen tication configurat ion on wired authentication ports. Syntax set dot1x authcontrol { enable | di sable } Defaults By default, authenticati on control for i ndi vidual wired auth entication is enabled. Access E[...]

  • Страница 511

    802.1X Manag ement Comman ds 51 1 Nortel WLAN—Security Switch 2300 Series Command Line Reference Nortel recommends that you try 60 seconds, and change the period to a longer value only if clients are unable to authen- ticate within 60 seconds. The bonded authentication period ap plies only to 802.1X authenti cation rules that contain the bonded o[...]

  • Страница 512

    512 802.1X Management Command s NN47250-100 (Version 02 .51) History Introduced in WSS Software 1.0. Usage T o support SSIDs that ha ve both 802.1X and static WEP clients, WSS Softwa re sends a maximum of two ID requests, e ven if thi s parameter is set to a higher v alue. Setting the para meter to a higher value does affect all other types of EAP [...]

  • Страница 513

    802.1X Manage ment Commands 513 Nortel WLAN—Security Switch 2300 Series Command Line Reference set dot1x quiet-period Sets the number of seconds a WSS remains quiet and does not respond to a supplicant after a failed authentication. Syntax set dot1x quiet-period seconds Defaults The default is 60 seconds. Access Enabled. History Introduced in WSS[...]

  • Страница 514

    514 802.1X Management Command s NN47250-100 (Version 02 .51) set dot1x reauth-max Sets the number of reauthent ication attem pts that the WSS makes before the su pplicant (c lient) b ecomes unauthorized. Syntax set dot1x reauth-max number-of-attempts Defaults The defau lt number of reauthenticat ion attempts is 2. Access Enabled. History Introduced[...]

  • Страница 515

    802.1X Manage ment Commands 515 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear dot1x r eauth-period on page 498 • show dot1x on page 507 set dot1x timeout auth-server Sets the number of seconds that must elapse before the WSS times out a reque st to a RADIUS authentication server. Syntax set dot1x timeout au t[...]

  • Страница 516

    516 802.1X Management Command s NN47250-100 (Version 02 .51) See Also • clear dot1x timeout auth-server on page 498 • show dot1x on page 507 set dot1x tx-period Sets the number of seconds that must elapse before the WSS retransmits an EAPoL packet. Syntax set dot1x tx-peri od seconds Defaults The default is 5 seconds. Access Enabled. History In[...]

  • Страница 517

    802.1X Manage ment Commands 517 Nortel WLAN—Security Switch 2300 Series Command Line Reference Usage Reauthentication is not required for WEP k ey rotation to take place. Broadcast and multicast keys are alw ays rotated at the sam e time, so all member s of a gi ven radio, VLAN, or encryption type recei ve the ne w ke ys at the same time. Example[...]

  • Страница 518

    518 802.1X Management Command s NN47250-100 (Version 02 .51) Access Enabled. Examples T ype the follo wing command to display the 802.1X clients: WSS # show dot1x client s MAC Address State Vlan Identity ------------- ------- ------ ---------- 00:20:a6:48:01:1f Connecting (unknown) 00:05:3c:07:6d:7c Authenticated vlan-it EXAMPLEjose 00:05:5d:7e:94[...]

  • Страница 519

    802.1X Manage ment Commands 519 Nortel WLAN—Security Switch 2300 Series Command Line Reference port 10, authcontrol: auto, max-sessions: 1 port 1 1, auth control: auto, max-sessions: 1 port 12, authcontrol: auto, max-sessions: 1 port 13, authcontrol: auto, max-sessions: 1 port 14, authcontrol: auto, max-sessions: 1 port 15, authcontrol: auto, max[...]

  • Страница 520

    520 802.1X Management Command s NN47250-100 (Version 02 .51) Reauths While Authen ticating Number of time s that the WSS state wildc ard transitions from A U THENTICA TING to ABOR TING, as a result of a reauthentication re quest (reAuthenticat e = TR UE). Starts While Authentica ting N umber of times th at the WSS state wildcard transitions from A [...]

  • Страница 521

    521 Nortel WLAN—Security Switch 2300 Series Command Line Reference RF Detection Commands WSS Software automatically performs RF detection scans on enabled and di sabled radios to detect rogue access points. A rogue access point is a BSSID (MAC address associat ed with an SSID) that does not belong to a Nortel device and is not a member of the ign[...]

  • Страница 522

    522 RF Detection Commands NN47250-100 (Version 02 .51) clear rfdetect attack-list Removes a MAC address from the attack list. Syntax clear rfdetect attack-list mac-addr Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Examples The follow ing command clears MAC ad dre ss 11:22:33:44:55:66 from the attack list: WSS# cl[...]

  • Страница 523

    RF Detection Commands 523 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear rfdetect ignore Removes a device from the ignore list fo r RF scans. WSS Software does not ge nerate log messages or traps for the devices in the ignore list . Syntax clear rfdetect ignore mac-addr Defaults None. Access Enabled. History Introduced in WS[...]

  • Страница 524

    524 RF Detection Commands NN47250-100 (Version 02 .51) clear rfdetect vendor-list Removes an entry from th e permitted vendor list. Syntax clear rfdetect vendor -list { client | ap } mac-addr | all Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Examples The follow ing command removes client OU I aa:bb:cc:00:00:0 0 [...]

  • Страница 525

    RF Detection Commands 525 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command adds MAC addr ess aa:bb:cc:44:55:6 6 to the at tack list: WSS# set rfdetect atta ck-list 1 1:22:33:44:55:66 success: MAC 1 1:22:33:44:55:66 is now in attacklis t. See Also • clear rfdetect attack-list on page 5 12 • show rf[...]

  • Страница 526

    526 RF Detection Commands NN47250-100 (Version 02 .51) Defaults WSS Software reports all non-Nortel B SSIDs detected during an RF scan. Access Enabled. History Introduced in WSS Software V e rsion 3.0. Usage Use this command to identify third-party AP s and other de vices you are already aware o f and do not want WSS So ftware to report fo llowing [...]

  • Страница 527

    RF Detection Commands 527 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also show log buffer on page 579 set rfdetect signature Enables AP signatures. An AP signature is a set of bits in a management frame sent by an AP that identifies that AP to WSS Software. If someone attempts to spoof management packet s from a Nortel AP,[...]

  • Страница 528

    528 RF Detection Commands NN47250-100 (Version 02 .51) Access Enabled. History Introduced in WSS Software V e rsion 4.0. Usage The permitted SSID list applies only to the WSS on which the list is configured. WSSs do not share permitted SSID lists. If you add a device that WSS Software has classified as a rogue to the permitted SSID list, but not to[...]

  • Страница 529

    RF Detection Commands 529 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear rfdetect vendor-list on page 514 • show rfdetect vendor -list on page 531 show rfdetect attack-list Displays information about the MA C addresses in the attack list. Syntax show rfdetect attack-list Defaults None. Access Enabled. History [...]

  • Страница 530

    530 RF Detection Commands NN47250-100 (Version 02 .51) • set rfdetect black-list on page 515 show rfdetect clients Displays the wirel ess cl ients detected by a WSS. Syntax show rfdetect clients [ mac mac-addr ] Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Examples The following co mmand show s information abou[...]

  • Страница 531

    RF Detection Commands 531 Nortel WLAN—Security Switch 2300 Series Command Line Reference AP V e ndor Company that manufactures or sells the AP with which the rogue client is associat ed. Port/Radio/Channel Port number , radio number, and channel number of the radio that detected the rogue. F or a AP, th e connection numbe r is labeled ap . (This [...]

  • Страница 532

    532 RF Detection Commands NN47250-100 (Version 02 .51) show rfdetect countermeasures Displays the current status of countermeas ur es against rogues in the Mobility Domain. Syntax show rfdetect countermeasures Defaults None. Access Enabled. History Usage This command is v alid only on the seed swi tch of the Mobility Doma in. Examples The follow in[...]

  • Страница 533

    RF Detection Commands 533 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also set radio-profile countermeasur es on page 287 show rfdetect counters Displays statistics for rogue and Intrusion Detection System (IDS) activity detected by th e APs managed by a WSS. Syntax show rfdetect counters Defaults None. Access Enabled. Hist[...]

  • Страница 534

    534 RF Detection Commands NN47250-100 (Version 02 .51) 802.1 1 probe request fl ood 0 0 802.1 1 authentication flood 0 0 802.1 1 null data fl ood 0 0 802.1 1 mgmt type 6 flood 0 0 802.1 1 mgmt type 7 flood 0 0 802.1 1 mgmt type d flood 0 0 802.1 1 mgmt type e fl ood 0 0 802.1 1 mgmt type f flood 0 0 802.1 1 association flood 0 0 802.1 1 reassociati[...]

  • Страница 535

    RF Detection Commands 535 Nortel WLAN—Security Switch 2300 Series Command Line Reference WSS # show rfdetect data T otal number of entries: 197 Flags: i = infrastructure, a = ad-hoc c = CCMP , t = TKIP , 1 = 104-bit WEP , 4 = 40-bit WEP , w = WEP(non-WP A) BSSID V endor T ype P ort/Radio/Ch Flags RSSI Age SSID ----------------- ------- ----- ----[...]

  • Страница 536

    536 RF Detection Commands NN47250-100 (Version 02 .51) See Also • show rfdetect m obility- domain on page 526 • show rfdetect vi sible on page 531 show rfdetect ignore Displays the BSSIDs of third-party devices that WSS Softwa re ignores during RF sc ans. WSS Software does not generate log messag es or traps for the devices in the ignore list. [...]

  • Страница 537

    RF Detection Commands 537 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Usage This command is va lid only on the seed switch of the Mobility Doma in. T o display rogue information for an indi vidual switch, use the sho w rfdetect data command on that switch. Examples The follow ing command displays summary information for[...]

  • Страница 538

    538 RF Detection Commands NN47250-100 (Version 02 .51) Device-type: interfering Adhoc: no Crypto-t ypes: clear RSSI: -76 SSID: nr tl -webaaa Two types of information are s hown. The lines that are not indented show the BSSID, vendor, and information about the SSID. The indented lines that follow this inf ormation indicate the list eners (AP radios)[...]

  • Страница 539

    RF Detection Commands 539 Nortel WLAN—Security Switch 2300 Series Command Line Reference SSID SSID us ed by the dete cted device. T able 6: show rfdetect mobilit y-domain ssid or bssid Output Field Description BSSID MA C address of the SSID used by the detected de vice. V endor Company that manufactures or sells the rogue de vice. SSID SSID us ed[...]

  • Страница 540

    540 RF Detection Commands NN47250-100 (Version 02 .51) See Also • show rfdetect data on page 524 • show rfdetect vi sible on page 531 show rfdetect ssid-list Displays the entrie s in the perm itted SSID li st. Syntax show rfdetect ssid-list Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Examples The follow ing [...]

  • Страница 541

    RF Detection Commands 541 Nortel WLAN—Security Switch 2300 Series Command Line Reference mycorp corporate guest See Also • clear rfdetect ssid-list on page 513 • set rfdetect ssid-list on page 517 show rfdetect vendor-list Displays the entries in the permitted vendor list. Syntax show rfdetect vendor -list Defaults None. Access Enabled. Histo[...]

  • Страница 542

    542 RF Detection Commands NN47250-100 (Version 02 .51) Syntax show rfdetect visible mac-addr Syntax show rfdetect visible ap ap-num [ radio { 1 | 2 }] Syntax show rfdetect visible ap ap-num [ radio { 1 | 2 }] Defaults None. Access Enabled. History Usage If a Nortel radio is supporting more than one SS ID, each of the corres ponding BSSIDs is listed[...]

  • Страница 543

    RF Detection Commands 543 Nortel WLAN—Security Switch 2300 Series Command Line Reference Table 83 describes the fields in this display. See Also • show rfdetect data on page 524 • show rfdetect m obility- domain on page 526 rfping Provides information about the RF link between the WSS and the client based on sending test packets to the client[...]

  • Страница 544

    544 RF Detection Commands NN47250-100 (Version 02 .51) Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 5.0. Name of the command chan ged from test rflink to rfping in WSS Software V ersion 6.0. Usage Use this command to send test packets to a specified client. The output of the command indicates the number of test packet[...]

  • Страница 545

    545 Nortel WLAN—Security Switch 2300 Series Command Line Reference File Mana gement Commands Use file management commands to mana ge system files and to disp lay softwa re and boot information. This chapter presents file management comma nds alphabetically. Use the foll owing table to locate commands i n this chapter based o n their use. backup C[...]

  • Страница 546

    546 File Management Comma nds NN47250-100 (Version 02 .51) Syntax backup system [ tftp:/ ip-add r / ] fi lename [ all | critical ] Defaults The defau lt is all . Access Enabled. Usage Y ou can create an archive located on a TFTP server or in the switch’ s nonv olatile storage. If you specify a TFTP server as part of the filena me, the archi v e i[...]

  • Страница 547

    File Managemen t Commands 547 Nortel WLAN—Security Switch 2300 Series Command Line Reference clear boot backup-configuration Clears the filename specified as the ba ckup configuration file. In the event that WSS Software cannot read the configu- ration file at boot time, a backup configuration file is not used. Syntax clear boot back up-conf igur[...]

  • Страница 548

    548 File Management Comma nds NN47250-100 (Version 02 .51) • Copies a file from a TFT P server to non volatile storage. • Copies a file from non volatile storage or temporary storage to a TFTP serv er . • Copies a file from one area in non v olatile storage to another . • Copies a file to a ne w f ilename in non volatile storage. Syntax cop[...]

  • Страница 549

    File Managemen t Commands 549 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follo wing command copies a f ile called floorwss from non volatile s torage to a TFTP server: WSS# copy floorwss tftp://10.1.1.1/floorw ss success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] The following command c opies a file calle d[...]

  • Страница 550

    550 File Management Comma nds NN47250-100 (Version 02 .51) Syntax delete url Defaults None. Access Enabled. Usage Y ou might want to copy the file to a TFTP server as a backup befo re deleting the file. Examples The follow ing commands copy file te stconf ig to a TFTP serv er and delete the f ile from non v olatile st orage: WSS# copy testconfig tf[...]

  • Страница 551

    File Managemen t Commands 551 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Examples The follow ing command displays th e files in the root directory: WSS # dir ========== =========== ======== ========== ========== =========== ========== ========= file: Filename Size Created file:configuration 48 KB Jul 12 2005, 15:02:32 [...]

  • Страница 552

    552 File Management Comma nds NN47250-100 (Version 02 .51) The following command limits the output to the contents of the /tmp/cor e subdirectory: WSS # dir core: ========== =========== ======== ========== ========== =========== ========== ========= file: Filename Size Created core:command_audit.cur 37 bytes Aug 28 2005, 21:1 1:41 T otal: 37 bytes [...]

  • Страница 553

    File Managemen t Commands 553 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax install soda agent agen t-f ile agent-dir ectory dir ectory Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage Use this comman d to instal l a .zip f ile c ontaining SOD A agent f iles into a dire ctory on the WS[...]

  • Страница 554

    554 File Management Comma nds NN47250-100 (Version 02 .51) Defaults The defau lt file loc ation is non v olatile st orage. If you do not specify a filename, WSS Softwa re uses the same configuration filena me that was used for the previous configuration load. For example, if the WSS used configu ration for the most recent config uration load, WSS S[...]

  • Страница 555

    File Managemen t Commands 555 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command calculates the ch ecksum for image file WSS040003.020 in boot partition 0: pubs# md5 boot0:WSS040003.020 MD5 (boot0:WSS040003.0 20) = b9cf7f527f74 608e50c70e8fb896392a See Also • copy on page 537 • dir on page 540 mkdir[...]

  • Страница 556

    556 File Management Comma nds NN47250-100 (Version 02 .51) temporary files: Filename Si ze Creat ed T otal: 0 bytes used, 93537 Kbytes free See Also • dir on page 540 • rmdir on page 548 reset system Restarts a WSS and reboots the software. Syntax reset system [ force ] Defaults None. Access Enabled. Usage If you do not use the forc e option, t[...]

  • Страница 557

    File Managemen t Commands 557 Nortel WLAN—Security Switch 2300 Series Command Line Reference restore Unzips a system a rchive created by the backup command and copies the files from the archive onto the switch. Syntax res to re system [ tftp:/ ip-addr / ] filename [ all | critical ] [ forc e ] Defaults The defau lt is critical . Access Enabled. U[...]

  • Страница 558

    558 File Management Comma nds NN47250-100 (Version 02 .51) If the configuration running on the swit ch is different from the one in the archive or you renamed the configu- ration file, and you wa nt to retain changes that we re made after the archive wa s created, see the “Managing System Files” cha pter of the Nortel WLAN 2300 System Software [...]

  • Страница 559

    File Managemen t Commands 559 Nortel WLAN—Security Switch 2300 Series Command Line Reference Syntax sav e config [ filename ] Defaults By default, WSS Software sav es the running conf iguration as the conf iguration filename used during the last reboot. Access Enabled. Usage If you do not specify a f ilename, WSS Softwar e repl aces the con figur[...]

  • Страница 560

    560 File Management Comma nds NN47250-100 (Version 02 .51) Examples The follo wing command sp ecif ies a f ile call ed backup.cfg as the backup conf iguration fi le on the WSS: WSS# set boot back up-conf igurati on backup.cfg success: backup boot config filename set. See Also • clear boot backup-co nf iguration on page 537 • show boot o n page [...]

  • Страница 561

    File Managemen t Commands 561 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Introduced in WSS Software V e rsion 1.1. Usage T o determine the boot partition th at was used to load the currently run ning software image, use the dir command. Examples The following command sets th e boot p artition for the next so ftware rel[...]

  • Страница 562

    562 File Management Comma nds NN47250-100 (Version 02 .51) See Also • clear boot config on page 537 • reset sy stem on page 546 • set boot configuration-f ile on page 550 • show version on page 554 T able 2: Output f or show boot Field Description Configured boot v ersion Software version th e switch wi ll run next time the software is rebo[...]

  • Страница 563

    File Managemen t Commands 563 Nortel WLAN—Security Switch 2300 Series Command Line Reference show config Displays the configuration running on the WSS. Syntax show conf ig [ ar ea ar ea ] [ all ] Defaults None. area ar ea Configuration area. Y ou can sp ecify one of the follo wing: •a a a •a c l s •a p •a r p •e a p o l • httpd •i p[...]

  • Страница 564

    564 File Management Comma nds NN47250-100 (Version 02 .51) Access Enabled. History Usage If you do not use one of the optiona l parameters, configuration comma nds that set nondef ault v alues are displayed for all conf iguration areas. If you specify an area, commands are displayed for that area only . If you use the all option, the display also i[...]

  • Страница 565

    File Managemen t Commands 565 Nortel WLAN—Security Switch 2300 Series Command Line Reference Build Information : (build#67) TOP 2005-09-21 04:41:00 Model: WSS Hardware Mainboard: version 24 ; re vision 3 ; FPGA version 24 PoE board: version 1 ; FPGA v ersion 6 Serial number 0321300013 Flash: 5.0.0.14 - md0a Kernel: 3.0.0#20: Fri Sep 22 17:43:51 P[...]

  • Страница 566

    566 File Management Comma nds NN47250-100 (Version 02 .51) See Also show boot on page 551 uninstall soda agent Removes the contents of a dire ctory containing SODA agent files. Syntax uninstall soda agent agent-directory dir ectory Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.1. Usage Use this command to remo ve a S[...]

  • Страница 567

    File Managemen t Commands 567 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • install soda agent on page 542 • set service-pr ofile soda mode on page 329[...]

  • Страница 568

    568 File Management Comma nds NN47250-100 (Version 02 .51)[...]

  • Страница 569

    569 Nortel WLAN—Security Switch 2300 Series Command Line Reference T race Commands Use trace commands to perform diagnosti c routines. While WSS Software allows you to run many types of traces, this chapter describes commands for t hose traces you are most likely to use. For a complete listing of th e types of traces WSS Software allows, type the[...]

  • Страница 570

    570 Trace Commands NN47250-100 (Version 02 .51) clear trace Deletes running trace commands and ends trace processes. Syntax clear trace { trace-ar ea | all } Defaults None. Access Enabled. Examples T o clear all trace proces ses, type the following command: WSS# clear trace all success: clear trace all To clear the session ma nager trace, type the [...]

  • Страница 571

    Trace Commands 571 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Introduced in WSS Software V e rsion 3.0. Examples T o sav e trace dat a into the file trace1 in the subdirectory tr aces , type the follo wing command: WSS# sa ve trace traces/trace1 set trace authentication Traces authentica tion information. Syntax set tr[...]

  • Страница 572

    572 Trace Commands NN47250-100 (Version 02 .51) Syntax set trace auth orization [ mac-addr mac-addr ess ] [ port port-num ] [ user username ] [ lev el le vel ] Defaults The defau lt trace le vel is 5. Access Enabled. Examples The follo wing command starts a trace for in formation f or authorization for MA C address 00:01:02:03:04:05: WSS# set trace[...]

  • Страница 573

    Trace Commands 573 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults The defau lt trace le vel is 5. Access Enabled. Examples The follow ing command starts a trace for the 802.1X sessions for MA C address 00:01:02:03:04:05: WSS# set trace dot1x mac-addr 00 :01:02:03:04:05: success: change accepted. See Also • clear trace o[...]

  • Страница 574

    574 Trace Commands NN47250-100 (Version 02 .51) show trace Displays information about traces that are currently configured on the WSS, or all possible trace options. Syntax show trace [ all ] Defaults None. Access Enabled. Examples T o vie w the traces currently r unning, type the follo wing command: WSS # show trace milliseconds spent printing tra[...]

  • Страница 575

    575 Nortel WLAN—Security Switch 2300 Series Command Line Reference Snoop Commands Use snoop commands to monitor wireless traffic, by using a AP as a sniffing device. The AP copies the sniffed 802.11 packets and sends the copies to an obser ver, which is typically a protocol anal yzer such as Ethereal or Tethere al. (For more information, incl udi[...]

  • Страница 576

    576 Snoop Commands NN47250-100 (Version 02 .51) clear snoop map Removes a snoop filter from an AP radio. Examples clear snoop map filter -name ap ap-num radio { 1 | 2 } Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Examples The follow ing command removes snoop f ilter snoop2 from radio 2 on AP 3: WSS# clear snoop [...]

  • Страница 577

    Snoop Commands 577 Nortel WLAN—Security Switch 2300 Series Command Line Reference set snoop Configures a snoop filter. Syntax set snoop filter -name [ condition-li st ] [ observer ip-addr ] [ snap-length num ] Defaults No snoop filters are conf igured by default. Access Enabled. filter -name Name for the f ilter . The name can be up to 15 alphanu[...]

  • Страница 578

    578 Snoop Commands NN47250-100 (Version 02 .51) History Usage T raf fic that matches a snoop filter is copied after it is decrypted. The decrypted (clear) version is sent to the observer . For best results: • Do not specify an observer that is associated wi th the AP where the snoop filter is running. This configuration causes an endl ess cycle o[...]

  • Страница 579

    Snoop Commands 579 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults Snoop filters are unmapped by def ault. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Usage Y ou can map the same fi lter to more than one radio. Y ou can map up to eight filters to the same radio. If more than one filt er has the same o[...]

  • Страница 580

    580 Snoop Commands NN47250-100 (Version 02 .51) Defaults Snoop filters are disabled by def ault. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Usage The filter mode is not retained if you cha nge the filter conf iguration or disable and reenable the radio, or when the AP or the WSS is restart ed. Y ou must reenable the filt er t[...]

  • Страница 581

    Snoop Commands 581 Nortel WLAN—Security Switch 2300 Series Command Line Reference show snoop info Shows the configured snoop filters. Syntax show snoop f ilter-name Defaults None. Access Enabled. History Introduced in WSS Software V e rsion 4.0. Examples The follow ing command shows the snoop f ilters conf igured in the examples abo ve: WSS# show[...]

  • Страница 582

    582 Snoop Commands NN47250-100 (Version 02 .51) ap: 3 Radio: 2 See Also • clear snoop map on page 566 • set snoop map on page 568 • show snoop on page 570 show snoop stats Displays statis tics fo r enabled snoop filters. Examples show snoop stats [ f ilter-name [ ap-n um [ radio { 1 | 2 }]]] Defaults None. Access Enabled. History Introduced i[...]

  • Страница 583

    Snoop Commands 583 Nortel WLAN—Security Switch 2300 Series Command Line Reference Table 88 describes the fields in this display. T able 1: show snoop stats Output Field Description Filter Name of the sno op fi lter . ap AP containing the radio to which the filter is mapped. Radio Radio to which the f ilter is mapped. Rx Match Number of packets re[...]

  • Страница 584

    584 Snoop Commands NN47250-100 (Version 02 .51)[...]

  • Страница 585

    585 Nortel WLAN—Security Switch 2300 Series Command Line Reference System Log Commands Use the system log commands to record information for monitoring and tr oubleshooting. WSS Softwa re system logs are based on RFC 3164, which def ines the log protocol. This chapter presents system log command s alphabetically. Us e the foll owing table to loca[...]

  • Страница 586

    586 System Log Commands NN47250-100 (Version 02 .51) • set log on page 576 set log Enables or disables logging of WSS and AP events to the WSS log buffer or other logging destinati on and sets the level of the events logged. For logging to a syslog se rver only, you can also set the facility logged. Syntax set log { buf f er | console | current |[...]

  • Страница 587

    System Log Commands 587 Nortel WLAN—Security Switch 2300 Series Command Line Reference Defaults • Events at the error lev el and higher are logged to the WSS console. • Events at the error lev el and higher are logged to the WSS system b uffer . • Trace logging is enabled, and deb ug-le vel output is st ored in the WSS trac e buf fer . Acce[...]

  • Страница 588

    588 System Log Commands NN47250-100 (Version 02 .51) Usage Using the command with only enable or disable turns logging on or off for the target at all le vels. For e xample, entering set log buffer enable with no other keyw ords turns on logging to the system buf fer of all fac ilities at all l ev els. Enteri ng set log buffe r disable with no othe[...]

  • Страница 589

    System Log Commands 589 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples The follow ing command enables mark messages: WSS# set log mark enable success: change accepted. See Also show log config on page 581 set log trace mbytes This comman d is deprecate d in WSS Software Version 4.0. show log buffer Displays system informa[...]

  • Страница 590

    590 System Log Commands NN47250-100 (Version 02 .51) Defaults None. Access Enabled. History Usage The debug le v el produces a lot of messages, many of which can appear to be some what cryptic. Debug messages are used primarily by No rtel for troubleshooting and are no t intended for administrator use. Examples T ype the follo wing command to see t[...]

  • Страница 591

    System Log Commands 591 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also • clear log on page 575 • show log conf ig on page 581 show log config Displays log configuration information. Syntax show log conf ig Defaults None. Access Enabled. Examples T o display ho w logging is conf i gured, type the fo llowing command: WS[...]

  • Страница 592

    592 System Log Commands NN47250-100 (Version 02 .51) Syntax show log trace [{ + | - | / } number -of-messages ] [ facili ty facility-name ] [ matching string ] [ sev erity severity-le vel ] Defaults None. Access Enabled. trace Displays the log messages in the trac e buf fer . + | - | / number -of-messag es Displays the number of messa ges specif ie[...]

  • Страница 593

    System Log Commands 593 Nortel WLAN—Security Switch 2300 Series Command Line Reference History Examples T ype the follo wing command to see the facilities for whic h you can view ev ent messages archi ved in the buf fer: WSS# show log trace facility ? <facility name> Select one of: KERNEL, AAA, SYSLOGD, ACL, APM, ARP , ASO , BOOT , CLI, CLU[...]

  • Страница 594

    594 System Log Commands NN47250-100 (Version 02 .51)[...]

  • Страница 595

    595 Nortel WLAN—Security Switch 2300 Series Command Line Reference Boot Pr ompt Commands Boot prompt commands enable you to perform basic task s, including booting a sy stem image file, from the boot prompt (boot>). A CLI session enters the boot prom pt if WSS Software does not boot successfully or you intentionally interrupt the boot process.[...]

  • Страница 596

    596 Boot Prompt Commands NN47250-100 (Version 02 .51) autoboot Displays or changes the state of the autoboot option. The autoboot option controls whether a WSS automatically boots a system image after initial izing the hardware , following a system reset or power cycle. Syntax autoboot [ ON | on | OFF | off ] Defaults The autoboot option is enabled[...]

  • Страница 597

    Boot Prompt Commands 597 Nortel WLAN—Security Switch 2300 Series Command Line Reference boot Loads and executes a sy stem image file. Syntax boot [ BT= type ] [ DEV= device ] [ FN= fil en a me ] [ HA= ip-addr ] [ FL= num ] [ OPT= option ] [ OPT+= option ] Defaults The boot settings in the currently ac tive boot prof ile are used by default. Acces[...]

  • Страница 598

    598 Boot Prompt Commands NN47250-100 (Version 02 .51) Usage If you use an optional parameter , the parameter setting overrides the settin g of the same parameter in the currently acti ve boot prof ile. Ho we ver , the boot prof il e itself is not changed. T o display the currently activ e boot profile, use the sho w command. T o change the currentl[...]

  • Страница 599

    Boot Prompt Commands 599 Nortel WLAN—Security Switch 2300 Series Command Line Reference Access Boot prompt. Usage After you type the change command , the system interac tiv ely di splays the c urrent setting of each parameter and prompts you for the ne w setti ng. When prompted, type the ne w setting, press Enter to accept the curren t setting, o[...]

  • Страница 600

    600 Boot Prompt Commands NN47250-100 (Version 02 .51) create Creates a new boot profile. (For in formation about boot profiles, see show on page 596 .) Syntax create Defaults The new boot prof ile has the same settings as the currently acti ve boot prof ile by default. Access Boot prompt. Usage A WSS can ha ve up to four boot prof iles. The boot pr[...]

  • Страница 601

    Boot Prompt Commands 601 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples T o remo ve t he currently acti ve bo ot prof ile, type the follo wing command: boot> delete BOOT Index: 1 BOOT TYPE: c DEVICE: boot1: FILENAME: default FLAGS: 00000000 OP TIONS: run=nos;boot=0 See Also • change on page 588 • create on page 590[...]

  • Страница 602

    602 Boot Prompt Commands NN47250-100 (Version 02 .51) diag Accesses the diagnostic mode. Syntax diag Defaults The diagnostic mode is disabled by def ault. Access Boot prompt. Usage Access to the diagnostic mode requi res a password, which is not user conf igurable. Use this mode only if advised to do so by Nortel. dir Displays the boot code and sys[...]

  • Страница 603

    Boot Prompt Commands 603 Nortel WLAN—Security Switch 2300 Series Command Line Reference fver Displays the version of a system image file installed in a specific loc ation on a WSS. Syntax fver { c: | d: | e: | f: | boot0: | boot1: } [ filename ] Defaults None. Access Boot prompt. Usage T o display the image filenames, use the dir com mand. This c[...]

  • Страница 604

    604 Boot Prompt Commands NN47250-100 (Version 02 .51) Examples The follow ing command displays detailed information for the fver command: boot> help fver fver Display the vers ion of the specified de vice:filename. USAGE: fver [c:file|d:file|e:file|f :file| boot0:file|boot1: file|boot2:file|boo t3:file] Command to display the vers ion of the com[...]

  • Страница 605

    Boot Prompt Commands 605 Nortel WLAN—Security Switch 2300 Series Command Line Reference See Also help on page 593 next Activates and displays the boot profile in the next boot profile slot. (For informati on about boot profiles, see show on page 596 .) Syntax next Defaults None. Access Boot prompt. Usage A WSS contains 4 boot profile slots, numbe[...]

  • Страница 606

    606 Boot Prompt Commands NN47250-100 (Version 02 .51) boot> re se t Nortel WSS Bootstrap 1.17 Release T esting Low Memory 1 ............ T esting Low Memory 2 ............ CISTPL_VERS_ 1: 4.1 <SanDisk> <SDP> <5/3 0.6> Reset Cause (0x02) is COLD Nortel WSS Bootstrap/Bootloader V ersion 1.6.5 Release Bootstrap 0 version: 1.17 Act[...]

  • Страница 607

    Boot Prompt Commands 607 Nortel WLAN—Security Switch 2300 Series Command Line Reference Examples T o display the currently activ e boot prof il e, type the follo wing command at the boot prompt: boot> show BOOT Index: 0 BOOT TYPE: c DEVICE: boot1: FILENAME: default FLAGS: 00000000 OP TIONS: run=nos;boot=0 The following is an example of a boot [...]

  • Страница 608

    608 Boot Prompt Commands NN47250-100 (Version 02 .51) See Also • change on page 588 • create on page 590 • delete on page 590 • dhcp on page 591 DEVICE Location of the system image f ile: • c: —Nonvolatile storage area containing boot partition 0 • d: —Nonvolatile storage area containing boot partition 1 • e: —Primary partition [...]

  • Страница 609

    Boot Prompt Commands 609 Nortel WLAN—Security Switch 2300 Series Command Line Reference • next on page 595 test Displays or changes the state of the poweron test flag. The pow eron test flag controls whet her a WSS performs a set of self tests prior to the boot process. Syntax test [ ON | on | OF F | off ] Defaults The poweron test flag is disa[...]

  • Страница 610

    610 Boot Prompt Commands NN47250-100 (Version 02 .51) Bootloader 1 version: 1.6.3 WSS Board Revision: 3. WSS Controller Revision: 24. POE Board Revision: 1 POE Controller Revision : 6 See Also • dir on page 592 • fver on page 593[...]

  • Страница 611

    Nortel WLAN Se curity Switch 230 0 Series Comma nd Line Refere nce 611 Command Inde x Numerics 84100 CommandName clear ap radio 237 A access levels, command line 17 administrative access mode 9 advisory notices, explanations of 7 all access 17 asterisk s (*) in MAC addresses 12 in user globs 12 asterisks. See double ast erisks (**); single asterisk[...]

  • Страница 612

    612 Command Index NN47250-100 (3 20658-G Version 0 2.51) clear port type 27 clear port-group 25 clear prompt 55 clear radio-profile 242 clear radius 483 clear radius client system-ip 484 clear radius proxy client 485 clear radius proxy port 485 clear radius server 486 clear rfdetect attack-list 512 clear rfdetect black-list 512 clear rfdetect ignor[...]

  • Страница 613

    Command Index 613 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence D delete 539, 590 delimiter characters, for user globs 12 dhcp 591 diag 592 dir 540, 592 disable 19 documentation, prod uct 6 dotted decimal notation, in IP addresses 12 double asterisks (**) in user globs 12 in VLAN globs 14 wildcard 16 E enable 19 enabled access 17[...]

  • Страница 614

    614 Command Index NN47250-100 (3 20658-G Version 0 2.51) P password invalid for last-resort users 206 ping 107 port lists conventions for 14 product documentation 6 Q quickstart 57 quit 20 R reset 595 reset ap 245 reset port 32 reset system 546 restore 547 rmdir 548 S safety notices, explanations of 7 save config 548 set {ap | dap} radio m ode 270 [...]

  • Страница 615

    Command Index 615 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence set igmp 416 set igmp lmqi 416 set igmp mrouter 417 set igmp mrsol 417 set igmp mrsol mrsi 418 set igmp oqi 418 set igmp proxy-report 419 set igmp qi 420 set igmp qri 420 set igmp querier 421 set igmp receiver 422 set igmp rv 422 set interface 109 set interface dhcp-[...]

  • Страница 616

    616 Command Index NN47250-100 (3 20658-G Version 0 2.51) set radio-profile max-t x-lifetime 290 set radio-profile mode 291 set radio-profile preamble-length 294 set radio-profile psk-phrase 294 set radio-profile psk-raw 294 set radio-profile rts-thresho ld 297 set radio-profile service-prof ile 298 set radio-profile shared-key-auth 304 set radio-pr[...]

  • Страница 617

    Command Index 617 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence set spantree maxage 395 set spantree portcost 395 set spantree portfast 396 set spantree portpri 397 set spantree portvlancost 397 set spantree portvlanpri 398 set spantree priority 399 set spantree uplinkfast 399 set summertime 140 set system contact 62 set system c[...]

  • Страница 618

    618 Command Index NN47250-100 (3 20658-G Version 0 2.51) show rfdetect counters 523 show rfdetect data 524 show rfdetect ignore 526 show rfdetect mobility-domain 526 show rfdetect ssid-list 530 show rfdetect vendor-list 531 show rfdetect visible 531 show roaming station 84 show roaming vlan 85 show security l2-restrict 87 show service-profile 380 s[...]

  • Страница 619

    Command Index 619 Nor tel WLAN Security Switch 2300 Series Command Line Ref erence in MAC addresses 12 in user globs 12 in VLAN globs 14[...]

  • Страница 620

    620 Command Index NN47250-100 (3 20658-G Version 0 2.51)[...]

  • Страница 621

    [...]

  • Страница 622

    Nortel WLAN—Security Switch 2300 Series Command Line Reference Nortel WLAN—Security Switch 2300 Series Release 6.0.7 Document Number: NN47250-100 Document Stat us: Standar d Document V ersion: 02.51 Release Date: Jun e 2008 Copyright © Nortel Networks Limited 2007-2008 Alll Rights Reserved The information in this document is subject to change [...]