W-IAP224/225 - Access Point DELL - Free user manual and instructions

Product Type	Wireless Access Point
Brand	Dell
Model	W-IAP224/225
Wi-Fi Standards	IEEE 802.11a/b/g/n/ac
Frequency Bands	2.4 GHz and 5 GHz
Maximum Data Rate	1.3 Gbps (5 GHz) + 600 Mbps (2.4 GHz)
Interfaces	2 x Gigabit Ethernet (PoE on port 0)
Power Supply	PoE (802.3af/at) or optional 12V DC adapter
Dimensions (L x W x H)	200 x 200 x 43 mm
Weight	725 g
Key Functions	Fast Roaming, Band Steering, AirGroup, Mesh support
Security Features	WPA2, WPA3, 802.1X, ACLs, Rogue AP detection
Management	Web interface, CLI, Aruba Instant cluster management
Environment	Indoor, 0°C to 50°C, 5% to 95% humidity
Mounting	Ceiling or wall mount (kit included)
LED Indicators	Power, Ethernet, Radio status
Maintenance & Cleaning	Wipe with dry cloth; do not use liquids
Spare Parts and Repairability	Not user-serviceable; contact Dell for replacements

Frequently Asked Questions - W-IAP224/225 DELL

How do I reset the Dell W-IAP224/225 access point to factory defaults?

Press and hold the Reset button on the back of the device using a paperclip for about 10 seconds until the LED flashes amber. The unit will reboot with factory settings.

Can the W-IAP224/225 be powered by PoE?

Yes, it supports PoE (802.3af/at). Connect a PoE switch or injector to the Ethernet port 0.

How do I connect to the access point for initial configuration?

Connect your computer to the same network as the AP, then access the web interface via the default IP address 172.16.0.1 (or use the Aruba Instant app). Default credentials are 'admin' / 'admin'.

What is the maximum number of clients supported?

The Dell W-IAP224/225 supports up to 256 clients per radio, depending on traffic.

Does the access point support mesh networking?

Yes, it supports wireless mesh when used in Aruba Instant mode. You can extend coverage without wired backhaul.

How can I improve the range of my W-IAP224/225?

Ensure the antenna placement is central and elevated. Avoid obstructions. You can also adjust transmit power and enable band steering to prefer 5 GHz.

What security protocols does the W-IAP224/225 support?

It supports WPA2, WPA3, 802.1X with RADIUS, MAC filtering, and rogue access point detection.

Can I mount the access point on a wall or ceiling?

Yes, the package includes a mounting kit for both ceiling (T-rail) and wall mounting. Follow the template in the manual.

How do I update the firmware on the Dell W-IAP224/225?

Download the latest firmware from Dell's support site, then upload it via the web interface under Administration > Firmware Upgrade. Do not power off during update.

What should I do if the LED is not lit?

Check the power source: ensure PoE is active or the DC adapter is connected. If still off, try a factory reset. If no change, contact Dell support.

USER MANUAL W-IAP224/225 DELL

Dell Networking W-Series Instant 6.4.0.2-4.1

Command-Line Interface

Copyright

© 2014 Aruba Networks, Inc. Aruba Networks trademarks include , Aruba Networks ^® , Aruba Wireless Networks ^® , the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System ^® . Dell ^™ , the DELL ^™ logo, and PowerConnect ^™ are trademarks of Dell Inc.

All rights reserved. Specifications in this manual are subject to change without notice.

Originated in the USA. All other trademarks are the property of their respective owners.

Open Source Code

Certain Aruba products include Open Source software code developed by third parties, including software code subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011 Info Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open Source used can be found at this site:

http://www.arubanetworks.com/open_source

Legal Notice

The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to termin other vendors' VPN client devices constitutes complete acceptance of liability by that individual or corporation this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken a with respect to infringement of copyright on behalf of those vendors.

This document describes the Dell Networking W-Series Instant command syntax and provides the following information for each command:

• Command Syntax—The complete syntax of the command.
  • Description—A brief description of the command.
• Syntax—A description of the command parameters, the applicable ranges and default values, if any.
• Usage Guidelines—Information to help you use the command, including prerequisites, prohibitions, and related commands.
  • Example—An example of how to use the command.
• Command History—The version of Instant in which the command was first introduced.
• Command Information—This table describes command modes and platforms for which this command is applicable.

The commands are listed in alphabetical order.

Intended Audience

This guide is intended for customers who configure and use Dell Networking W-Series Instant Access Point (W-IAP).

Related Documents

In addition to this document, the Dell W-IAP product documentation includes the following:

• Dell Networking W-Series Instant Access Point Installation Guides
• Dell Networking W-Series Instant 6.4.0.2-4.1 Quick Start Guide
• Dell Networking W-Series Instant 6.4.0.2-4.1 User Guide
• Dell Networking W-Series Instant 6.4.0.2-4.1 MIB Reference Guide
• Dell Networking W-Series Instant 6.4.0.2-4.1 Syslog Messages Reference Guide
• Dell Networking W-Series Instant 6.4.0.2-4.1 Release Notes

Conventions

The following conventions are used throughout this document to emphasize important concepts:

Table 1 Typographical Conventions

Type Style Description
Italics	This style is used for emphasizing important terms and to mark the titles of books.
Boldface	This style is used for command names and parameter options when mentioned in the text.
Commands	This fixed-width font depicts command syntax and examples of commands and command output.
	In the command syntax, text within angle brackets represents items that you should replace with information appropriate to your specific situation.For example, pingIn this example, you would type “ping” at the system prompt exactly as shown, followed by the IP address of the system to which ICMP echo packets are to be sent. Do not type the angle brackets.
[square brackets]	In the command syntax, items enclosed in brackets are optional. Do not type the brackets.
{Item_A|Item_B}	In the command examples, single items within curled braces and separated by a vertical bar represent the available choices. Enter only one choice. Do not type the braces or bars.
{ap-name}]{{ipaddr}	Two items within curled braces indicate that both parameters must be entered together. If two or more sets of curled braces are separated by a vertical bar, like in the example to the left, enter only one choice. Do not type the braces or bars.

The following informational icons are used throughout this guide:

Indicates helpful suggestions, pertinent information, and important things to remember.

Indicates a risk of damage to your hardware or loss of data.

Indicates a risk of personal injury or death.

Contacting Dell

Table 2 Support Information

Support
Main Website dell.com
Contact Information dell.com/contactdell
Support Website dell.com/support
Documentation Website	dell.com/support/manuals

What is New in Instant 6.4.0.2-4.1

This section lists the new and modified commands in the Instant 6.4.0.2-4.1 release.

New Commands

The following commands are added in the Instant 6.4.0.2-4.1 release:

Table 3 New Commands in 6.4.0.2-4.1

Command Description
console Allows you to enable or disable access to the W-IAP console.
dpi Enables deep packet inspection (DPI) support and allows you to configure DPI for wired or wireless network users.
inbound-firewall Allows you to configure inbound firewall rules.
mgmt-accounting	Enables accounting privileges on TACACS+ servers for management users in Instant.
rft Allows you to run tests for RF troubleshooting.NOTE: In this release, this command is not available in W-IAP224/225, and W-IAP274/275 platforms.
show console-settings	Displays if the console access is enabled or disabled on a W-IAP.
show dhcp subnets	Displays subnet details and gateway IP address for the distributed L2 and L3 networks.
show dpi	Displays the DPI configuration details.
show dpi-stats	Displays DPI statistics for application, application category, web category and web reputation parameters.
show ap dot11k-beacon-report	Displays the beacon report details for the 802.11k clients of a W-IAP.
show ap dot11k-nbrs	Displays neighbors for the 802.11k clients of a W-IAP.
show inbound-firewall-rules	Displays the inbound firewall rule details.
show rft trans-id	Displays transaction IDs for the RF test profiles.
show rft profile	Displays the profile parameters for the RF tests.
show xml-api-server	Displays the XML API server configuration details
wlan tacacs-server	Configures a TACACS+ server to authenticate management users in Instant.
xml-api-server	Integrates an XML API Interface with a W-IAP.
zonename	Configures zone settings on a W-IAP.

Modified Commands

The following commands are modified in the Instant 6.4.0.2-4.1 release:

Table 4 Modified Commands in 6.4.0.2-4.1

Command Description
airgroup This command	now allows you to enable DLNA and mDNS (Bonjour services) support on a W-IAP for the AirGroup enabled clients.
airgroupservice	This command now allows you to configure services such as Chromecast, DLNA media, and DLNA print services.
ip dhcp	This command now allows you to enable or disable split tunnel for Centralized, L2 clients .
I2tpv3 session	This command now allows you enable default I2 specific sublayer for the L2TPV3 sessions.
show airgroup	This command now includes the DLNA and MDNS options to filter the output based on the DLNA and Bonjour services (mDNS) configuration status.
show airgroupservice	The output of this command now displays the disallowed roles and VLANs for the mDNS and DLNA services.
show access-rule	The output of this command displays the access rules created for DPI.
show access-rule-all
show auth-survivability	The debug-log option is added to the command syntax. On running the show auth-survivability debug-log command, the logs for troubleshooting the authentication survivability are displayed.
show dhcps config	The output of this command now displays split-tunnel status for centralized,L2 and and DNS caching status for local or local,I2 profiles.
show vpn	This command now displays the IAP-VPN retry counter details when the tunnels keyword is used.
wlan access-rule	This command now allows you to configure access rules for deep packet inspection. The rule command allows you to create access rules to allow or deny access to certain application, application categories, website categories, and URLs based on security ratio In the current release, you can also configure inbound firewall rules based on source subnet.
wlan ssid-profile	This command now allows you to configure AP zone, WMM DSCP traffic mapping, backup authentication server with termination enabled, and enable fast roaming features such as 802.11k and 802.11v. The command also allows you to disable bridging and routing tr between the clients connected to the same SSID.
arm	The maximum threshold value of Client Match has been increased to 255. The previous maximum threshold limit was 20.

Instant supports the use of Command Line Interface (CLI) for scripting purposes. You can access the Instant through a Secure Shell (SSH).

To enable the SSH access to the Instant CLI:

1. From the Instant UI, navigate to System > Show advanced options.
2. Select Enabled from the Terminal access drop-down list.
3. Click OK.

Connecting to a CLI Session

On connecting to a CLI session, the system displays its host name followed by the login prompt. Use the administrator credentials to start a CLI session. For example:

(Instant AP)

User: admin

Password: ****

If the login is successful, the privileged command mode is enabled and a command prompt is displayed. For example:

(Instant AP)#

The privileged mode provides access to show, clear, ping, traceroute, and commit commands. The configuration commands are available in the configuration (config) mode. To move from privileged mode to the configuration enter the following command at the command prompt:

(Instant AP)# configure terminal

The configure terminal command allows you to enter the basic configuration mode and the command prompt displayed as follows:

(Instant AP) (config)#

The Instant CLI allows CLI scripting in several other sub-command modes to allow the users to configure ind interfaces, SSIDs, access rules, and security settings.

You can use the question mark (?) to view the commands available in a privileged mode, configuration mode mode.

Although automatic completion is supported for some commands such as configure terminal, the complete exit and end commands must be entered at command prompt for successful execution.

Applying Configuration Changes

Each command processed by the Virtual Controller is applied on all the slave W-IAPs in a cluster. When you configuration changes on a master W-IAP in the CLI, all associated W-IAPs in the cluster inherit these changes subsequently update their configurations. The changes configured in a CLI session are saved in the CLI contains

The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session: therefore, it recommended that you configure fewer changes at a time and apply the changes at regular intervals.

To apply and save the configuration changes at regular intervals, use the following command in the privileged

(Instant AP)# commit apply

To apply the configuration changes to the cluster, without saving the configuration, use the following command privileged mode:

(Instant AP)# commit apply no-save

To view the changes that are yet to be applied, use the following command in the privileged mode:

(Instant AP)# show uncommitted-config

To revert to the earlier configuration, use the following command in the privileged mode.

(Instant AP)# commit revert

Example:

(Instant AP) (config)# rf dot1la-radio-profile
(Instant AP) (RF dot1la Radio Profile)# beacon-interval 200
(Instant AP) (RF dot1la Radio Profile)# no legacy-mode
(Instant AP) (RF dot1la Radio Profile)# dot1lh
(Instant AP) (RF dot1la Radio Profile)# interference-immunity 3
(Instant AP) (RF dot1la Radio Profile)# csa-count 2
(Instant AP) (RF dot1la Radio Profile)# spectrum-monitor
(Instant AP) (RF dot1la Radio Profile)# end 

(Instant AP)# show uncommitted-config
rf dot1la-radio-profile
no legacy-mode
beacon-interval 200
no dot1lh
interference-immunity 3
csa-count 1
no spectrum-monitor 

Instant Access Point# commit apply

Configuration Sub-modes

Some commands in configuration mode allow you to enter into a sub-mode to configure the commands specific that mode. When you are in a configuration sub-mode, the command prompt changes to indicate the current mode.

You can exit a sub-command mode and return to the basic configuration mode or the privileged Exec (enable at any time by executing the exit or end command.

Deleting Configuration Settings

Use the no command to delete or negate previously-entered configurations or parameters.

• To view a list of no commands, type no at the prompt in the relevant mode or sub-mode followed by the question mark. For example:
  (Instant AP) (config) # no?

- To delete a configuration, use the no form of a configuration command. For example, the following command removes a configured user role:

(Instant AP) (config) # no user

- To negate a specific configured parameter, use the no parameter within the command. For example, the following command deletes the PPPoE user configuration settings:

(Instant AP) (config) # pppoe-uplink-profile (Instant AP) (pppoe_uplink_profile) # no pppoe-username

Using Sequence Sensitive Commands

The Instant CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, it is recommended that you remove the existing configuration before adding or modifying the configuration details for sequence-sensitive commands. You can either delete an existing profile or remove a specific configuration by the no... commands.

The following table lists the sequence-sensitive commands and the corresponding no command to remove the configuration.

Table 5Sequence-Sensitive Commands

Sequence-Sensitive Command Corresponding no command
opendnsno opendns
rule{permit |deny | src-nat | dst-nat{|}[]	no rule{permit | deny | src-nat | dst-nat}
mgmt-auth-server	no mgmt-auth-server
set-role{{equals| not-equals| starts-with| ends-with| contains}| value-of}	no set-role{{equals| not-equals| starts-with| ends-with| contains}| value-of}no set-role
set-vlan{{equals| not-equals| starts-with| ends-with| contains}|value-of}	no set-vlan{{equals| not-equals| starts-with| ends-with| contains}| value-of}no set-vlan
auth-serverno auth-server

Saving Configuration Changes

The running-config holds the current W-IAP configuration, including all pending changes which are yet to be save. To view the running-config of a W-IAP, use the following command:

(Instant AP) # show running-config

When you make configuration changes through the CLI, the changes affect the current running configuration of save your configuration changes, use the following command in the privileged Exec mode:

(Instant AP)# write memory

Commands that Reset the W-IAP

If you use the CLI to modify a currently provisioned radio profile, the changes take place immediately. A reboot W-IAP is not required to apply the configuration changes. Certain commands, however, automatically force W-IAP to reboot. Verify the current network loads and conditions before executing the commands that enforce a reboot to reboot. The W-IAP, as they may cause a momentary disruption in service as the unit resets.

The reload command resets a W-IAP.

Command Line Editing

The system records your most recently entered commands. You can review the history of your actions, or rei recent command easily, without having to retype it.

To view items in the command history, use a few key to move back through the list and throw key to move forward. To reissue a specific command, press Enter when the command appears in the command history.

You can also use the command line editing feature to make changes to the command prior to entering it. The command line editing feature allows you to make corrections or changes to a command without retyping. The following table lists the editing controls. To use key shortcuts, press and hold the Ctrl button while you press a letter key.

Table 6 Line Editing Keys

Key Effect Description
Ctrl A Home Move the cursor to the beginning of the line.
Ctrl B or the left arrow	Back	Move the cursor one character left.
Ctrl D	Delete Right	Delete the character to the right of the cursor.
Ctrl E End Move the cursor to the end of the line.
Ctrl F or the right arrow	Forward	Move the cursor one character right.
Ctrl K	Delete Right	Delete all characters to the right of the cursor.
Ctrl N or the down arrow	Next	Display the next command in the command history.
Ctrl P or up arrow	Previous	Display the previous command in the command history.
Ctrl T	Transpose	Swap the character to the left of the cursor with the character to the right of the cursor.
Ctrl U	Clear	Clear the line.
Ctrl W	Delete Word	Delete the characters from the cursor up to and including the first space encountered.
Ctrl X Delete Left Delete all characters to the left of the cursor.

Specifying Addresses and Identifiers in Commands

This section describes addresses and other identifiers that you can reference in CLI commands.

Table 7 Addresses and Identifiers

Address/Identifier Description
IP address For any command that requires entry of an IP address to specify a network entity, use IPv4 network address format in the conventional dotted decimal notation (for example, 192.0.2.1).
Netmask address For subnet addresses, specify a subnet mask in dotted decimal notation (for example, 255.255.255.0).
Media Access Control (MAC) address	For any command that requires entry of a device's hardware address, use the hexadecimal format (for example, 00:05:4e:50:14:aa).
Service Set Identifier (SSID)	A unique character string (sometimes referred to as a network name), consisting of no more than 32 characters. The SSID is case-sensitive (for example, WLAN-01).
Basic Service Set Identifier (BSSID)	This entry is the unique hard-wireless MAC address of the AP. A unique BSSID applies to each frequency– 802.11a and 802.11g–used from the AP. Use the same format as for a MAC address.
Extended Service Set Identifier (ESSID)	Typically the unique logical name of a wireless network. If the ESSID includes spaces, enclose the name in quotation marks.

aaa test-server

aaa test-server

Description

This command tests a configured authentication server.

Syntax

Parameter Description
	Allows you to specify the authentication server for which the authentication test is run.
	Allows you to specify the user name for which the authentication test is run.

Usage Guidelines

Use this command to view the CPU load for application and system processes. This command allows you to a configured RADIUS authentication server or the internal database. You can use this command to check for of service" RADIUS server.

Example

The following example shows the output of the aaa test-server command:

Authentication is successful

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

a-channel

a-channel

Description

This command configures 5 GHz radio channels for a specific W-IAP.

Syntax

Parameter Description Range
	Configures the specified 5 GHz channel.	The valid channels for a band are determined by the AP regulatory domain.
	Configures the specified transmission power values.	0-127 dBm

Usage Guidelines

Use this command to configure radio channels for the 5 GHz band for a specific W-IAP.

Example

The following example configures the 5 GHz radio channel:

(Instant AP)# a-channel 44 18

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

a-external-antenna

a-external-antenna

Description

This command configures external antenna connectors for a W-IAP.

Syntax

Parameter Description Range
	Configures the antenna gain. You can configure a gain value in dBi for the following types of antenna:Dipole/OmniPanel -14PanelSector - 14	Diploe/Omni - 6Panel -14Sector - 14

Usage Guidelines

If your W-IAP has external antenna connectors, you need to configure the transmit power of the system. The configuration must ensure that the system's Equivalent Isotropically Radiated Power (EIRP) is in compliance with the limit specified by the regulatory authority of the country in which the W-IAP is deployed. You can also calculate additional attenuation between the device and antenna before configuring the antenna gain. To know AP device supports external antenna connectors, see the Guide that is shipped along with the AP device.

EIRP and Antenna Gain

The following formula can be used to calculate the EIRP limit related RF power based on selected antennas (antenna gain) and feeder (Coaxial Cable loss):

EIRP = Tx RF Power (dBm)+GA (dB) - FL (dB)

The following table describes this formula:

Table 8:Formula Variable Definitions

Formula Element Description
EIRP Limit specific for each	country of deployment
Tx RF Power	RF power measured at RF connector of the unit
GA	Antenna gain
FL	Feeder loss

For information on antenna gain recommended by the manufacturer, see dell.com/support.

Example

The following example configures external antenna connectors for the W-IAP with the 5 GHz radio band.

(Instant AP)# a-external-antenna 14

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

aeroscout-rtls

aeroscout-rtls [include-unassoc-sta] no...

Description

This command configures the Aeroscout Real-Time Asset Location Server (RTLS) settings for Instant and send Radio-frequency identification (RFID) tag information to an Aeroscout RTLS server.

Syntax

Command/Parameter Description Default
	IP address of the Aeroscout RTLS server to which the location reports are sent.
	Port number of the Aeroscout RTLS server to which the location reports are sent..
include-unassoc-stas	Includes the client stations not associated to any W-IA-Disabled when mobile unit reports are sent to the Aeroscout RTLS server.
no	Removes the Aeroscout RTLS configuration. -

Usage Guidelines

This command allows you to integrate Aeroscout RTLS server with Instant by specifying the IP address and I number of the Aeroscout RTLS server. When enabled, the RFID tag information for the stations associated with W-IAP are sent to the AeroScout RTLS. You can also send the RFID tag information for the stations that are associated with any W-IAP.

Example

The following example configures the Aeroscout RTLS server:

(Instant AP)(config)# aeroscout-rtls 192.0.2.2 3030 include-unassoc-sta (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	Command was introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

airgroup

airgroup
cppm enforce-registration
cppm-query-interval <interval>
cppm-server <server-name>
disable
enable [dlna-only| mdns-only]
enable-guest-multicast
multi-swarm
no... 

Description

This command configures the AirGroup settings on a W-IAP.

Syntax

Parameter Description Range Default
cppm enforce-registration	Enforces the discovery of the CPPM registered devices. When enabled, only devices registered with CPPM will be discovered by Bonjour® or DLNA devices, based on the CPPM policy configured.	- Enabled
cppm-query-interval	Configures a time interval at which Instant sends a query to ClearPass Policy Manager for mapping the access privileges of each device to the available services.	1-24 10 hours
cppm-server	Configures the ClearPass Policy Manager server information for AirGroup policy.	-	-
disable	Disables the AirGroup feature. - -
enable [dlna-only| mdns-only]	Enables the mDNS or DLNA or both.When dlna-only command is executed with enable, the DLNA support is enabled for AirGroup enabled devices.When mdns-only command is executed with enable, the Bonjour support is enabled for AirGroup enabled devices.	-	-
enable-guest-multicast	Allows the users to use the Bonjour or DLNA services enabled in a guest VLAN. When enabled, the Bonjour or DLNA devices will be visible only in the guest VLAN and AirGroup will not discover or enforce policies in guest VLAN.	-	-
multi-swarm	Enables inter cluster mobility. When enabled, the W-IAP shares the mDNS database information with the other clusters. The AirGroup records in the Virtual Controller can be shared with all the Virtual Controllers specified for L3 Mobility.	- Disabled
no...	Removes the specified configuration parameter.	-	-

Usage Guidelines

Use this command to configure the AirGroup, the availability of the AirGroup services, and ClearPass Policy Manager (CPPM) servers.

Example

The following example configures an AirGroup profile:

(Instant AP) (config)# airgroup
(Instant AP) (airgroup)# enable
(Instant AP) (airgroup)# cppm enforce-registration
(Instant AP) (airgroup)# cppm-server Test
(Instant AP) (airgroup)# cppm-query-interval 10
(Instant AP) (airgroup)# enable-guest-multicast
(Instant AP) (airgroup)# multi-swarm
(Instant AP) (airgroup)# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and AirGroup configuration sub-mode.

airgroupservice

airgroupservice <airgroupservice>
description <description>
disable
disallow-role <role>
disallow-vlan <VLAN-ID>
enable
id <AirGroupservice-ID>
no... 

Description

This command configures the availability of AirGroup services for the W-IAP clients.

Syntax

Parameter Description Default
	Specifies the AirGroup service to configure.The following pre-configured services are available for W-IAP clients:AirPlayTM- Apple® AirPlay allows wireless streaming of music, video, and slideshows from your iOS device to Apple TV® and other devices that support the AirPlay feature.AirPrintTM- Apple® AirPrint allows you to print from an iPad®, iPhone®, or iPod® Touch directly to any AirPrint compatible printers.iTunes- iTunes service is used by iTunes Wi-Fi sync and iTunes home-sharing applications across all Apple® devices.RemoteMgmt- Use this service for remote login, remote management, and FTP utilities on Apple® devices.Sharing- Applications such as disk sharing and file sharing, use the service ID that are part of this service on one or more Apple® devices.Chat- The iChat® (Instant Messenger) application on Apple® devices uses this service.ChromeCast-ChromeCast service allows you to use a ChromeCast device to play audio or video content on a high definition television by streaming content through Wi-Fi from the Internet or local network.DLNA Media-Applications such as Windows Media Player use this service to browse and play media content on a remote device.DLNA Print-This service is used by printers that support DLNA.You can allow all services or add custom services. Up to 10 services can be configured on a W-IAP.	-
description	Adds a description to the AirGroup service profile. -
disable	Disables AirGroup services for the profile. -
disallow-role	Restricts the user roles specified for role from accessing the AirGroup service.	Disabled
disallow-vlan	Restricts the AirGroup servers connected on the specified VLANs from being discovered.	Disabled
enable	Enables the AirGroup service for the profile. -
id	Allows you to specify the AirGroup service ID corresponding to the service that you are trying to configure.NOTE: The service IDs cannot be added for the pre-configured services.	-
no...	Removes the AirGroup service configuration. -

Usage Guidelines

Use this command to enforce AirGroup service policies and define the availability of a services for an AirGroup profile. When configuring AirGroup service for an AirGroup profile, you can also restrict specific user roles and VLANs from availing the AirGroup services.

Example

The following example configures AirGroup services:

(Instant AP)(config)# airgroupservice AirPlay
(Instant AP)(airgroup-service)# description AirPlay Service
(Instant AP)(airgroup-service)# disallow-role guest
(Instant AP)(airgroup-service)# disallow-vlan 200
(Instant AP)(airgroup-service)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and AirGroup services configuration sub-mode.

airwave-rtls

airwave-rtls [include-unassoc-sta] no...

Description

This command integrates W-AirWave Real-Time Asset Location Server (RTLS) settings for Instant and sends t Radio-frequency identification (RFID) tag information to a W-AirWave RTLS server with the RTLS feed to accu locate the wireless clients.

Syntax

Command/Parameter Description Default
	Configures the IP address of the W-AirWave RTLS server.	-
	Configures the port for the W-AirWave RTLS server.	-
	Configures key for service authorization. -
	Configures the frequency at which packets are sent to 5 the RTLS server in seconds.
include-unassoc-sta	When enabled, this option sends mobile unit reports to Disabled the W-AirWave RTLS server for the client stations that are not associated to any W-IAP (unassociated stations).	Disabled
no..	Removes the specified configuration parameter. -

Usage Guidelines

Use this command to send the RFID tag information to W-AirWave RTLS. Specify the IP address and port n of the W-AirWave server, to which the location reports must be sent. You can also send reports of the unas clients to the RTLS server for tracking purposes.

Example

The following command enables W-AirWave RTLS:

(Instant AP) (config) # airwave-rtls ams-ip 192.0.2.3 3030 pass@1234 5 include-unassoc-sta

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

ale-report-interval

ale-report-interval no...

Description

This command configures the interval at which a W-IAP sends data to the Analytics and Location Engine (AL server.

Syntax

Command/Parameter Description Range Default
ale-report-interval	Configures an interval at which the Virtual6-60 seconds Controller can report the W-IAP and client details to the ALE server.		30
no...	Removes the specified configuration parameter.	-	-

Usage Guidelines

Use this command to specify an interval for W-IAP and ALE server communication.

Example

The following example configures the ALE server details:

(Instant AP) (config)# ale-report-interval 60

Command History

Version	Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

ale-server

ale-server no...

Description

This command configures Analytics and Location Engine (ALE) server details for W-IAP integration with ALE.

Syntax

Command/Parameter Description
ale-server	Allows you to specify the Fully Qualified Domain Name (FQDN) or IP address of the ALE server.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to enable a W-IAP for ALE support.

Example

The following example configures the ALE server details:

(Instant AP) (config)# ale-server AleServer1

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode.

alg

alg
sccp-disable
sip-disable
vocera-disable
no... 

Description

This command allows you to modify the configuration settings for Application Layer Gateway (ALG) protocols enabled on a W-IAP. An application-level gateway consists of a security component that augments a firewall used in a network.

Syntax

Command/Parameter Description Default
sccp-disable	Disables the Skinny Call Control Protocol (SCCP). Enabled
sip-disable	Disables the Session Initiation Protocol (SIP) for VOIP and other text and multimedia sessions.	Enabled
vocera-disable	Disables the VOCERA protocol. Enabled
no...	Removes the specified configuration parameter. -

Usage Guidelines

Use this command to functions such as SIP, Vocera, and Cisco Skinny protocols for ALG.

Example

The following example configures the ALG protocols:

(Instant AP) (config)# alg
(Instant AP) (ALG)# sccp-disable
(Instant AP) (ALG)# no sip-disable
(Instant AP) (ALG)# no vocera-disable
(Instant AP) (ALG)# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and ALG configuration sub-mode.

allow-new-aps

allow-new-aps no...

Description

This command allows the new access points to join the W-IAP cluster.

Syntax

Command/Parameter Description
allow-new-aps	Allows new access points in the domain.
no	Removes the specified configuration parameter.

Usage Guidelines

Use this command to allow the new access points to join the W-IAP cluster.

Example

The following command allows the new W-IAPs to join the cluster.

(Instant AP) (config)# allow-new-aps

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

allowed-ap

allowed-ap no...

Description

This command allows an AP to join the W-IAP cluster.

Syntax

Command/Parameter Description
allowed-ap	Specifies the MAC address of the W-IAP that is allowed to join the cluster.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to allow a W-IAP to join the cluster.

Example

The following command configures an allowed W-IAP:

(Instant AP) (config)# allowed-ap 01:23:45:67:89:AB

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

ams-backup-ip

ams-backup-ip no...

Description

This command adds the IP address or domain name of the backup W-AirWave Management server.

Syntax

Parameter Description
	Configures the IP address or domain name of the secondary W-AirWa Management Server.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to add the IP address or domain name of the backup W-AirWave Management Server. The backup server provides connectivity when the W-AirWave primary server is down. If the W-IAP cannot send the primary server, the Virtual Controller switches to the backup server automatically.

Example

The following command configures a W-AirWave backup server.

(Instant AP) (config)# ams-backup-ip 192.0.2.1

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

ams-identity

ams-identity

Description

This command uniquely identifies the group of W-IAPs managed or monitored by the W-AirWave Management console. The name can be a location, vendor, department, or any other identifier.

Syntax

Parameter Description
ams-identity	Configures a name that uniquely identifies the W-IAP on the W-AirWave Management server. The name defined for this command will be displayed under the Groups tab in the W-AirWave user interface.

Usage Guidelines

Use this command to assign an identity for the W-IAPs monitored or managed by the W-AirWave Management Server.

Example

The following command configures a W-AirWave identifier:

(Instant AP)(config)# ams-identity dell

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

ams-ip

ams-ip no...

Description

This command configures the IP address or domain name of the W-AirWave Management console for a W-IA

Syntax

Parameter Description
	Configures the IP address or domain name of anW-AirWave Management server for a W-IAP.

Usage Guidelines

Use this command to configure the IP address or domain name of the AMS console for a W-IAP.

Example

The following command configures the W-AirWave Server.

(Instant AP) (config)# ams-ip 192.0.1.2

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

ams-key

ams-key no...

Description

This command assigns a shared key for service authorization.

Syntax

Parameter Description
	Authorizes the first Virtual Controller to communicate with the W-AirWave server.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to assign a shared key for service authorization. This shared key is used for configuring the AP in the W-IAP network.

Example

The following command configures the shared key for the W-AirWave server.

(Instant AP) (config)# ams-key key@789

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

apply

apply {cplogo-install| cplogo-uninstall| debug-command| delta-config}

Description

This command is used to save or apply the configuration settings on the W-IAP.

Syntax

Parameter Description
cplogo-install	Installs the Captive Portal logo on the W-IAP.
cplogo-uninstall	Uninstalls the Captive Portal logo on the W-IAP.
debug-command	Applies the configuration settings from the debug command.
delta-config	Applies the configuration settings from the delta-config command.

Usage Guidelines

Use this command to apply the current configuration settings on the W-IAP.

Example

The following example installs the captive portal logo on a W-IAP.

(Instant AP)(config)# apply cplogo-inistall http://cp.logo.com

The following example uninstalls the captive portal logo on a W-IAP.

(Instant AP) (config)# apply cplogo-inistall http://cp.logo.com

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

arm

arm

80mhz-support
a-channels <a-channel>
air-time-fairness-mode {<default-access>| <fair-access>| <preferred-access>}
band-steering-mode {balance-bands|prefer-5ghz| force-5ghz| disable}
client-aware
client-match [calc-interval <seconds>| calc-threshold <threshold> | debug <level>| holdtime
<number> | max-adoption <count>| max-request <count> |nb-matching <percentage> | slb-mode
<mode>
g-channels
max-tx-power
min-tx-power
scanning
wide-bands {<none>| <all>| <2.4>| <5>}
no... 

Description

This command assigns an Adaptive Radio Management (ARM) profile for a W-IAP and configures ARM feature such as band steering, spectrum load balancing, airtime fairness mode, and access control features.

Syntax

Command/Parameter Description	Range Default
80mhz-support	Enables the use of 80 MHz channels on APs with 5GHz radios, which support a very high throughput.NOTE: Only the APs that support 802.11ac can be configured with 80 MHz channels.	-	-
a-channels	Configures 5 GHz channels.	--
air-time-fairness-mode{||}	Allows equal access to all clients on the wireless medium, regardless of client type, capability, or operating system and prevents the clients from monopolizing resources. You can configure any of the following modes:default-access - To provide access based on client requests. When this mode is configured, the per user and per SSID bandwidth limits are not enforced.fair-access - To allocate Airtime evenly across all the clients.preferred-access - To set a preference where 11n clients are assigned more airtime than 11a/11g. The 11a/11g clients get more airtime than 11b. The ratio is 16:4:1.	default-access,fair-access, preferred-access	default-access
band-steering-mode {| |}	Assigns the dual-band capable clients to the 5 GHz band on dual-band. It reduces co-channel interference and increases available bandwidth for dual-band clients, because there are more channels on theGHz band than on the 2.4 GHz band. You disable can configure any of the following band-steering modes:prefer-5ghz - To allow the W-IAP to steer the client to 5 GHz band (if the client is 5 GHz capable). However, the W-IAP allows the client connection on the 2.4 GHz band if the client persistently attempts for 2.4 GHz association.force-5ghz - To enforce 5 GHz band steering mode on the W-IAPs, so that the 5 GHz capable clients are allowed to use only the 5GHz channels.balance-bands - To allow the W-IAPs to balance the clients across the two 2.4 GHz and 5 GHz radio and to utilize the available bandwidth.disable - To allow the clients to select the bands.	balance-bands, prefer-5ghz, force-5ghz,	balance-bands
client-aware	Enables the client aware feature. When enabled, the W-IAP will not change channels for the Access Points when clients are active, except for high priority events such as radar or excessive noise. The client aware feature must be enabled in most deployments for a stable WLAN.	- Enabled
client-match	Enables enable the client match feature on APs. When the client match feature is enabled on a W-IAP, the W-IAP measures the RF health of its associated clients. If spectrum load balancing is triggered and a client's Received Signal Strength Indication (RSSI) is or less than 20 dB , clients are moved from one AP to another for better performance and client experience. In the current release, the client match feature is supported only within a W-IAP cluster.
calc-interval>	Configures an interval at which client match is calculated.	10-600 30	seconds
calc-threshold	Configures a threshold that takes acceptance client count difference among all the channels of Client match into account. When the client load on an AP reaches or exceeds the threshold in comparison, client match is enabled on that AP.	1-255 2
debug	Displays information required for debugging client match issues.	0-40-none, 1-error, 2-information,3-debug,4-dump	0
holdtime	Configures a hold time for client match. 1-1800 900
max-adoption	Configure a maximum number for adopting clients.	0-100 5
max-request	Configures the maximum number of requests for client match.	0-100 5
nb-matching	Configures a percentage value to be considered in the same virtual RF neighborhood of Client match.	20-100%	75%
slb-mode	Configures a balancing strategy for client match.	1-31-Channel-based2-Radio-based3-Channel and Radio based	1
g-channels	Configures 2.4 GHz channels.	-	-
min-tx-power	Sets the minimum transmission power. This indicates the minimum Effective Isotropic Radiated Power (EIRP). If the minimum transmission EIRP setting configured on an AP is not supported by the AP model, this value is reduced to the highest supported power setting.	0-127 dBm	18
max-tx-power	Sets the highest transmit power levels for the AP. If the maximum transmission EIRP configured on an AP is not supported by the AP model, the value is reduced to the highest supported power setting.NOTE: Higher power level settings may be constrained by local regulatory requirements and AP capabilities.	0-127 dBmthe	127
scanning	Allows the W-IAPs to scan other channels for RF Management and Wireless Intrusion Protection System enforcement.	-	Disabled
wide-bands {|<2.4>|<5>}	Allows administrators to configure 40 MHz channels in the 2.4 GHz and 5.0 GHz bands. 40 MHz channels are two 20 MHz adjacent channels that are bonded together. The 40 MHz channels double thefrequency bandwidth available for data transmission. For high performance, enter 5GHz. If the AP density is low, enter 2.4GHz.	none, all, 2.4, and 5	5
no...	Removes the current value for that parameter and return it to its default setting	-	-

Usage Guidelines

Use this command to configure ARM features on a W-IAP. ARM ensures low-latency roaming, consistently high performance, and maximum client compatibility in a multi-channel environment. By ensuring the fair distribution available Wi-Fi bandwidth to mobile devices, ARM ensures that data, voice, and video applications have sufficient network resources at all times. ARM allows mixed 802.11ac, a, b, g, and n client types to inter-operate at the performance levels.

Example

The following example configures an ARM profile:

(Instant AP) (config)# arm
(Instant AP) (ARM)# 80mhz-support
(Instant AP) (ARM)# a-channels 44
(Instant AP) (ARM)# min-tx-power 18
(Instant AP) (ARM)# max-tx-power 127
(Instant AP) (ARM)# band-steering-mode prefer-5ghz
(Instant AP) (ARM)# air-time-fairness-mode fair-access
(Instant AP) (ARM)# scanning
(Instant AP) (ARM)# client-aware
(Instant AP) (ARM)# client-match
(Instant AP) (ARM)# wide-bands 5
(Instant AP) (ARM)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0 This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration and ARM configuration sub-mode.

attack

attack
drop-bad-arp-enable
fix-dhcp-enable
no...
poison-check-enable 

Description

This command enables firewall settings to protect the network against wired attacks, such as ARP attacks or malformed DHCP packets, and notify the administrator when these attacks are detected.

Syntax

Command/Parameter Description
drop-bad-arp-enable	Enables the W-IAP to block the bad ARP request.
fix-dhcp-enable	Enables the W-IAP to fix the malformed DHCP packets.
poison-check-enable	Enables the W-IAP to trigger an alert notifying the user about the ARP poisoning that may have been caused by the rogue APs.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to block ARP attacks and to fix malformed DHCP packets.

Example

The following example configures firewall settings to protect the network from Wired attacks:

(Instant AP) (config)# attack
(Instant AP) (ATTACK)# drop-bad-arp-enable
(Instant AP) (ATTACK)# fix-dhcp-enable
(Instant AP) (ATTACK)# poison-check-enable
(Instant AP) (ATTACK)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration and Attack configuration sub-mode

auth-failure-blacklist-time

auth-failure-blacklist-time

Description

This command allows the W-IAPs to dynamically blacklist the clients when they exceed the authentication failure threshold.

Syntax

Parameter Description Default
auth-failure-blacklist-time	Configures the duration in seconds for which the clients3600 that exceed the maximum authentication failure threshold are blacklisted.

Usage Guidelines

Use this command to dynamically blacklist the clients that exceed the authentication failure threshold configure a network profile.

Example

The following example blacklists the clients dynamically:

(Instant AP)(config)# auth-failure-blacklist-time 60

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

auth-survivability cache-time-out

auth-survivability cache-time-out

Description

This command configures an interval after which the authenticated credentials of the clients stored in the cache expire. When the cache expires, the clients are required to authenticate again.

Syntax

Parameter Description Range Default
auth-survivabilitycache-time-out	Indicates the duration after which the authenticated credentials in the cache expire.	1-99 hours	24 hours

Usage Guidelines

Use this command when the authentication survivability is enabled on a network profile, to set a duration after the authentication credentials stored in the cache expires. To enable the authentication survivability feature, us auth-survivability in WLAN SSID profile sub-mode.

Example

(Instant AP) (config)# auth-survivability cache-time-out 60

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

blacklist-client

blacklist-client no...

Description

This command allows you to manually blacklist the clients by using MAC addresses of the clients.

Syntax

Parameter Description
blacklist-client	Adds the MAC address of the client to the blacklist.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to blacklist the MAC addresses of clients.

Example

The following command blacklists a W-IAP client:

(Instant AP)(config)# blacklist-client 01:23:45:67:89:AB

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

blacklist-time

blacklist-time

Description

This command sets the duration in seconds for which the clients can be blacklisted due to an ACL rule trigg

Syntax

Parameter Description Default
blacklist-time	Sets the duration in seconds for blacklisting clients due to an ACL rule trigger.	3600

Usage Guidelines

Use this command to configure the duration in seconds for which the clients can be blacklisted when the bla rule is triggered.

Examples

The following command configures the duration for blacklisting clients:

(Instant AP) (config) # blacklist-time 30

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

calea

calea
encapsulation-type <gre>
ip <IP-address>
ip mtu <size>
gre-type <type>
no... 

Description

This command creates a Communications Assistance for Law Enforcement Act (CALEA) profile to enable W-IA for Lawful Intercept (LI) compliance and CALEA integration.

Syntax

Command/Parameter Description Range Default
calea	Enables calea configuration sub-mode for CALEA profile configuration.	-	-
encapsulation-type	Specifies the encapsulation type for Generic GRE Routing Encapsulation (GRE) packets.	GRE GRE
ip	Configures the IP address of the CALEA server on a W-IAP.	-	-
ip mtu	Configures the Maximum Transmission Unit size to use.	68–1500 1500
gre-type	Specifies GRE type. - 25944
no...	Removes the configuration	--

Usage Guidelines

Use this command to configure a W-IAP to support Lawful Intercept (LI). LI allows the Law Enforcement Agency (LEA) to conduct an authorized electronic surveillance. Depending on the country of operation, the service process (SPs) are required to support LI in their respective networks.

In the United States, SPs are required to ensure LI compliance based on CALEA specifications. LI compliance is specified by the CALEA.

For more information on configuring W-IAPs for CALEA integration, networking W-Series Instant User Guide

Example

The following example configures a CALEA profile:

(Instant AP) (config)# calea
(Instant AP) (calea)# ip 192.0.8.29
(Instant AP) (calea)# ip mtu 1500
(Instant AP) (calea)# encapsulation-type gre
(Instant AP) (calea)# gre-type 25944
(Instant AP) (calea)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and access rule configuration sub-mode.

cellular-uplink-profile

cellular-uplink-profile <profile>
4g-usb-type <4G-usb-type>
modem-isp <modem_isp>
modem-country <modem-country>
usb-auth-type <usb_authentication_type>
usb-dev <usb-dev>
usb-dial <usb-dial>
usb-init <usb-init>
usb-modeswitch <usb-modeswitch>
usb-passwd <usb-passwd>
usb-tty <usb-tty>
usb-type <usb-type>
usb-user <usb-user>
modem-isp <modem_isp>
modem-country <modem-country>
no... 

Description

This command provisions the cellular (3G/4G) uplink profiles on a W-IAP.

Syntax

Parameter Description Range Default
cellular-uplink-profile	Configures a 3G or 4G cellular profile for a W-IAP.	-	-
4g-usb-type <4G-usb-type>	Configures the driver type for the 4G modem.	ether-lte, pantech-lte, none	-
modem-isp	Specifies the name of the ISP to connect.	-	-
modem-country	Specifies the country for the deployment.	-	-
usb-auth-type	Specifies the authentication type for USB.	PAP, CHAP	PAP
usb-dev	Specifies the device ID of the USB modem.	-	-
usb-dial	Specifies the parameter to dial the cell tower.	-	-
usb-init	Specifies the parameter name to initialize the modem.	-	-
usb-passwd	Specifies the password for the account associated with the subscriber of the selected ISP.	-	-
usb-modeswitch	Specifies the parameter used to switch modem from storage mode to modem mode.	-	-
Parameter Description Range Default
usb-type	Configures the driver type for the 3G modem.	acm, airprime, hso, option, pantech-3g, sierra-evdo, sierra-gsm,none	-
usb-tty	Specifies the modem tty port.	-
usb-user	Specifies the username of subscriber of the selected ISP.	-	-
no...	Removes the specified configuration parameter.	-	-

Usage Guidelines

Use this command to configure a cellular uplink profile on a W-IAP and modem parameters 3G /4G uplink provisioning. Instant supports the use of 3G/4G USB modems to provide Internet backhaul to an Instant network. The 3G/4G USB modems can be used to extend client connectivity to places where an Ethernet uplink cannot be configured. This enables the W-IAPs to automatically choose the available network in a specific region.

The 3G and 4G LTE USB modems can be provisioned on W-IAP3WN/3WNP and W-IAP155/155P.

Types of Modems

The following 3G modems are supported:

• USBConnect 881 (Sierra 881U)
• Quicksilver (Globetrotter ICON 322)
- UM100C (UTstarcom)
- Icon 452
• Aircard 250U (Sierra)
USB 598 (Sierra)
• U300 (Franklin wireless)
• U301 (Franklin wireless)
• USB U760 for Virgin (Novatel)
• USB U720 (Novatel/Qualcomm)
- UM175 (Pantech)
UM150 (Pantech)
UMW190(Pantech)
• SXC-1080 (Qualcomm)
• Globetrotter ICON 225
UMG181
• NTT DoCoMo L-05A (LG FOMA L05A)
• NTT DoCoMo L-02A

• ZTE WCDMA Technologies MSM (MF668?)
- Fivespot (ZTE)
• c-motech CNU-600
• ZTE AC2736
• SEC-8089 (EpiValley)
- Nokia CS-10
• NTT DoCoMo L-08C (LG)
• NTT DoCoMo L-02C (LG)
• Novatel MC545
• Huawei E220 for Movistar in Spain
• Huawei E180 for Movistar in Spain
ZTE-MF820
- Huawei E173s-1
- Sierra 320
- Longcheer WM72
• U600 (3G mode)
• Sierra USB-306 (HK CLS/1010 (HK))
• Sierra 306/308 (Telstra (Aus))
• Sierra 503 PCIe (Telstra (Aus))
• Sierra 312 (Telstra (Aus))
• Aircard USB 308 (AT&T's Shockwave)
• Compass 597(Sierra) (Sprint)
• U597 (Sierra) (Verizon)
• Tstick C597(Sierra) (Telecom(NZ))
• Ovation U727 (Novatel) (Sprint)
• USB U727 (Novatel) (Verizon)
• USB U760 (Novatel) (Sprint)
• USB U760 (Novatel) (Verizon)
• Novatel MiFi 2200 (Verizon Mifi 2200)
• Huawei E272, E170, E220 (ATT)
• Huawei E169, E180,E220,E272 (Vodafone/SmarTone (HK))
• Huawei E160 (O2(UK))
• Huawei E160 (SFR (France))
• Huawei E220 (NZ and JP)
• Huawei E176G (Telstra (Aus))
• Huawei E1553, E176 (3/HUTCH (Aus))
• Huawei K4505 (Vodafone/SmarTone (HK))
• Huawei K4505 (Vodafone (UK))
• ZTE MF656 (Netcom (norway))
• ZTE MF636 (HK CSL/1010)
• ZTE MF633/MF636 (Telstra (Aus))
• ZTE MF637 (Orange in Israel)

• Huawei E180, E1692,E1762 (Optus (Aus))
• Huawei E1731 (Airtel-3G (India))
• Huawei E3765 (Vodafone (Aus))
• Huawei E3765 (T-Mobile (Germany)
• Huawei E1552 (SingTel)
• Huawei E1750 (T-Mobile (Germany))
• UGM 1831 (TMobile)
• Huawei D33HW (EMOBILE(Japan))
• Huawei GD01 (EMOBILE(Japan))
• Huawei EC150 (Reliance NetConnect+ (India))
• KDDI DATA07(Huawei) (KDDI (Japan))
• Huawei E353 (China Unicom)
• Huawei EC167 (China Telecom)
• Huawei E367 (Vodafone (UK))
• Huawei E352s-5 (T-Mobile (Germany))
• Huawei K4505 (Vodafone/SmarTone (HK))
• Huawei K4505 (Vodafone (UK))
• ZTE MF656 (Netcom (norway))
• ZTE MF636 (HK CSL/1010)
• ZTE MF633/MF636 (Telstra (Aus))
• ZTE MF637 (Orange in Israel)
• Huawei E180, E1692,E1762 (Optus (Aus))
• Huawei E1731 (Airtel-3G (India))
• Huawei E3765 (Vodafone (Aus))
• Huawei E3765 (T-Mobile (Germany)
• Huawei E1552 (SingTel)
• Huawei E1750 (T-Mobile (Germany))
• UGM 1831 (TMobile)
• Huawei D33HW (EMOBILE(Japan))
• Huawei GD01 (EMOBILE(Japan))
• Huawei EC150 (Reliance NetConnect+ (India))
• KDDI DATA07(Huawei) (KDDI (Japan))
• Huawei E353 (China Unicom)
• Huawei EC167 (China Telecom)
• Huawei E367 (Vodafone (UK))
• Huawei E352s-5 (T-Mobile (Germany))
- Huawei D41HW
• ZTE AC2726

The following table lists the supported 4G modems.

- Netgear U340

• Netgear Aircard 341u

• Fraklin Wireless u770

• Huawei 3276s-150
MC551L
- Pantech UML295
• Pantech UML290

When UML290 runs in auto detect mode, the modem can switch from 4G network to 3G network or vice-vers based on the signal strength. To configure the UML290 for the 3G network only, manually set the USB type pantech-3g. To configure the UML290 for the 4G network only, manually set the 4G USB type to pantech-Ite.

Example

The following example configures a cellular uplink profile:

(Instant AP) (config) # cellular-uplink-profile
(Instant AP) (cellular-uplink-profile)# 4g-usb-type pantech-lte
(Instant AP) (cellular-uplink-profile)# modem-country India
(Instant AP) (cellular-uplink-profile)# modem-isp example
(Instant AP) (cellular-uplink-profile)# usb-auth-type PAP
(Instant AP) (cellular-uplink-profile)# usb-user user1
(Instant AP) (cellular-uplink-profile)# usb-passwd user123
(Instant AP) (cellular-uplink-profile)# modem-country India
(Instant AP) (cellular-uplink-profile)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and cellular uplink profile configuration sub-mode

clear

clear
    ap <ip-address>
    arp <ip-address>
    client <mac>
    datapath {session-all| statistics} 

Description

This command clears various user-configured values from the running configuration on a W-IAP.

Syntax

Parameter Description
ap	Clears all W-IAP related information.
arp	Clears all ARP table information for a W-IAP.
client	Clears all information pertaining to a W-IAP client.
datapath {session-all| statistics}	Clears all configuration information and statistics for datapath modules and use sessions.

Usage Guidelines

Use the clear command to clear the current information stored in the running configuration of a W-IAP.

Example

The following command clears all information related to a W-IAP:

(Instant AP)# clear ap 192.0.2.3 

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

clear airgroup state statistics

clear airgroup state statistics

Description

This command removes the AirGroup statistics.

Usage Guidelines

Use this command to remove AirGroup details from the W-IAP database.

Example

The following command clears AirGroup statistics:

(Instant AP)(config)# clear airgroup state statistics

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

clear-cert

clear-cert {ca| server}

Description

This command clears client and server certificates from the W-IAP database.

Syntax

Parameter Description
ca	Clears all certificates uploaded for the client system.
server	Clears all Server certificates.

Usage Guidelines

Use this command to clear the certificates from the W-IAP database.

Example

The following command shows an example for clearing server certificates:

(Instant AP)# clear-cert server

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

clock set

clock set

Description

This command sets the date and time on the W-IAP system clock.

Syntax

Parameter Description Range
	Sets the year. Requires all 4 digits. Numeric
	Sets the month. 1-12
	Sets the day. 1-31
	Sets the time. Specify hours, minutes, and seconds separated by spaces.	Numeric

Usage Guidelines

You can configure the year, month, day, and time. Specify the time using a 24-hour clock with hours, minute seconds separated by spaces.

Example

The following example sets the clock to 21 May 2013, 1:03:52 AM:

(Instant AP)# clock set 2013 5 21 1 3 52

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

clock summer-time

clock summer-time recurring no...

Description

This command configures daylight saving for the time zones that support daylight saving time.

Syntax

Parameter Description	Range
clock summer-time<timezone>	Configures Daylight Saving time. Timezones	that support daylight saving configuration
recurring	Indicates the recurrences.	-
	Indicates the week from which the daylight saving configuration is effective.	-
	Indicates the day from which the daylight saving configuration applies.	-
	Indicates the month from which the daylight saving configuration applies.	-
	Indicates the hour from which the daylight saving configuration applies.	1-24
	Indicates the week in which the daylight saving configuration ends.	-
	Indicates the day on which daylight saving configuration ends.	-
	Indicates the month in which daylight saving configuration ends.	-
	Indicates the hour at which daylight saving configuration ends.	1-24
no...	Removes the configuration	-

Usage Guidelines

Use this command to configure daylight saving for the timezones that support daylight saving. When enabled, daylight saving time ensures that the W-IAPs reflect the seasonal time changes in the region they serve.

Example

The following example configures daylight saving for a timezone:

(Instant AP)(config)# clock summer-time PST recurring 7 10 March 9PM 38 10 October 9PM (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

clock timezone

clock timezone no...

Description

This command sets the timezone on a W-IAP.

Syntax

Parameter Description Range
clock timezone	Configures the required timezone.	All supported timezones
	Specifies the hours offset from the Universal Time Clock (UTC).	-
	Specifies the hours offset from the Universal Time Clock (UTC).	-
no...	Removes the timezone configuration.	-

Usage Guidelines

Use this command to set the timezone on a W-IAP.

Example

The following example configures the PST timezone:

(Instant AP) (config)# clock timezone PST -8 0 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

commit

commit {apply [no-save] | revert}

Description

This command allows you to commit configuration changes performed during a user session. You can also re changes that are already committed.

Syntax

Parameter Description
apply	Applies and saves the W-IAP configuration changes.
no-save	Applies the configuration changes to the cluster, but does not save the configuration. To save the configuration, run the write memory or commit apply command.
revert	Reverts the changes committed to the current configuration of a W-IAP.

Usage Guidelines

Each command processed by the Virtual Controller is applied on all the slave W-IAPs in a cluster. The change configured in a CLI session are saved in the CLI context. The CLI does not support the configuration data set the 4K buffer size in a CLI session: therefore, Dell recommends that you configure fewer changes at a time to apply the changes at regular intervals.

To apply and save the configuration changes, use the commit apply command. To apply the configuration changes without saving the configuration, use the commit apply no-save command.

Example

The following command allows you to commit the configuration changes:

(Instant AP) # commit apply

The following command reverts the already committed changes.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

configure terminal

configure terminal

Description

This command allows you to enter configuration commands.

Syntax

No parameters.

Usage Guidelines

Upon entering this command, the enable mode prompt changes to:

(Instant AP) (config)#

To return to EXEC mode, enter Ctrl-Z, end or exit.

Example

The following command allows you to enter configuration commands:

(Instant AP) # configure terminal

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

console

console

enable

disable

Description

This command enables console access to a W-IAP through the serial port.

Syntax

Command/Parameter Description
console	Allows you to enter the console configuration mode.
enable	Enables console access to the W-IAP.
disable	Disables console access to the W-IAP.

Usage Guidelines

Use this command to enable or disable access to the W-IAP console and thus allow users to configure W-IA settings or debug system errors. By default, the console access to the W-IAP is enabled.

Example

The following example disables console access to the W-IAP:

(Instant AP) (config)# console

(Instant AP) (console)# disable

(Instant AP) (console)# end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Console configuration sub mode

content-filtering

content-filtering no...

Description

This command enables content filtering feature. When content filtering is enabled on an SSID, all DNS requests non-corporate domains on this wireless network are sent to OpenDNS.

Syntax

Command/Parameter Description
content-filtering	Enables content filtering.
no	Removes the configuration.

Usage Guidelines

Use this command to enable content filter. With content filter feature enabled, you can:

• Prevent known malware hosts from accessing your wireless network.
• Improve employee productivity by limiting access to certain websites.
• Reduce bandwidth consumption significantly.

You can enable content filtering on an SSID. When enabled, all DNS requests to non-corporate domains on 1 SSID are sent to the open DNS server.

Example

The following example enables content filtering:

(Instant AP)# content-filtering
(Instant AP)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

convert-aos-ap

convert-aos-ap

Description

This command allows you to provision a W-IAP as a Campus AP or Remote AP in a controller-based network, a standalone AP.

Syntax

Parameter Description Range
	Provisions the W-IAP as remote AP or campus AP in a controller-based network.	W-IAP, CAP.
	Allows you to specify the IP address of the controller to which the Remote AP or Campus AP will be connected.

Usage Guidelines

Before converting a W-IAP, ensure that both the W-IAP and controller are configured to operate in the same regulatory domain. A W-IAP can be converted to a Campus AP and Remote AP only if the controller is runn ArubaOS 6.1.4 or later.

Example

The following command allows you to convert a W-IAP to a remote AP:

(Instant AP)# convert-aos-ap W-IAP 192.0.2.5

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

copy

copy {config tftp |core-file tftp | flash tftp | tftp {cpserver cert format {p12|pem} | portal logo | system {lxca [format {der|pem}]||lxcert [format {p12|pem}] | config|flash}}

Description

This command copies files to and from the W-IAP.

Syntax

Parameter Description
config Copies a configuration	file to the TFTP server.
core-file Copies a core file to	the TFTP server.
flash Copies a file from flash	to the TFTP server or to flash from a TFTP server.
tftp	Copies files and certificates to the W-IAP database from a TFTP server.
	Copies files to the specified TFTP server IP address.
<file-name> Indicates the name of the file to be copied.
cpservercert	Copies internal captive portal server certificate.
portallogo	Copies customized logo for the internal captive portal server.
system	Copies the file to the system partition.
1xca Copies the CA certificate used for 802.1X authentication from the TFTP server.
derpem	Indicates the system partition file extensions.
1xcert	Copies the server certificate used for 802.1X authentication from the TFTP server.
	Indicates the password for certificate authentication.
p12pem	Indicates the certificate file extensions.

Usage Guidelines

Use this command to save backup copies of the configuration file to a TFTP server, or to load a certificate to customized logo from a TFTP server to the W-IAP database.

Example

The following example copies a configuration file to the TFTP server:

(Instant AP)# copy config tftp 10.0.0.1 filename.cfg

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

deny-inter-user-bridging

deny-inter-user-bridging no...

Description

This command disables bridging traffic between two clients of a W-IAP on the same VLAN. Bridging traffic be the clients will be sent to the upstream device to make the forwarding decision.

Syntax

Parameter Description
deny-inter-user-bridging	Prevents the inter-user bridging.
no...	Removes the configuration.

Usage Guidelines

Use this command if you have security and traffic management policies defined for upstream devices.

Example

The following command disables inter-user bridging:

(Instant AP)(config)# deny-inter-user-bridging
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

deny-local-routing

deny-local-routing no...

Description

This command disables routing traffic between two clients of a W-IAP on different VLANs. Routing traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

Parameter Description
deny-local-routing	Disables local routing of traffic.
no...	Removes the configuration.

Usage Guidelines

Use this command to prevent the local routing of traffic if you have security and traffic management policies for upstream devices.

Example

The following command disables local routing:

(Instant AP) (config)# deny-local-routing (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

device-id

device-id

Description

This command assigns an ID for the AP device.

Syntax

Parameter Description
device-id	Configures an ID for the W-IAP device.

Usage Guidelines

Use this command to configure a device identification.

Example

The following example configures a device ID:

(Instant AP)(config)# device-ID Device1 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

disable-prov-ssid

disable-prov-ssid no...

Description

This command disables the default provisioning SSID enabled in the W-IAP factory default settings.

Usage Guidelines

The default provisioning SSID is used during the initial configuration of the W-IAP if the automatic provisioning W-IAP fails and if W-AirWave is not reachable.

Example

The following example disables the default provisioning SSID:

(Instant AP)# disable-prov-ssid

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

disconnect-user

disconnect-user {|all|mac | network }

Description

This command disconnects the clients from a W-IAP.

Syntax

Parameter Description
	Allows you to disconnect a client by specifying the IP address of the client.
all	Disconnects all users associated with a W-IAP.
mac	Allows you to disconnect a client by specifying the MAC address of the client
network	Allows you to disconnect the clients connected to a specific network.

Example

The following example disconnects all clients associated with a W-IAP:

(Instant AP)# disconnect-user

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

download-cert

download-cert {ca|cp|server}

Description

This command allows you to download the client, authentication server, and captive portal server certificates from an FTP or TFTP server, or by using an HTTP URL.

Syntax

Parameter Description
ca	Downloads client certificates.
cp	Downloads captive portal server certificates.
server	Downloads Server certificates.
	Allows you to specify the FTP, TFTP, or HTTP URL.

Usage Guidelines

Use this command to download certificates.

Example

The following command shows an example for downloading CA client certificates:

(Instant AP)# download-cert ca ftp://192.0.2.7

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

dpi

dpi

no...

Description

This command enables visualization of traffic from wired and wireless clients associated with a W-IAP.

Syntax

Parameter Description
dpi	Enables AppRF visualization.
no...	Removes the configuration.

Usage Guidelines

Use this command to enable AppRF visibility for wired and wireless clients associated with a W-IAP. AppRF supports an application and web-filtering service that allows creating firewall policies based on types of application. AppRF includes the following capabilities:

• Access control, QoS, and bandwidth contract rules based on application and application categories.
• Content filters based on web categories and reputation scores (security ratings).

For more information access rule configuration and web-filtering options Networking W-Series Instant 6.4.0.2-4.1 User Guided the wlan access-rule command page.

The application and application category based access rule configuration and visualization are not supported o IAP104/105, W-IAP134/135, and W-IAP3WN/3WNP platforms. Only the web category charts are displayed for these W-IAP models.

Example

The following command configures DPI support:

(Instant AP)(config)# dpi
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

dynamic-cpu-mgmt

dynamic-cpu-mgmt {auto| disable| enable}

Description

This command enables or disables the dynamic CPU management feature, to manage resources across different functions performed by a W-IAP.

Syntax

Parameter Description
auto	Configures the W-IAP to automatically enable or disable CPU management feature during run-time. When configured, the W-IAP determines the need for enabling or disabling CPU management, based on the real-time load calculations taking into account all different functions that the CPU needs to perform.The auto option is the default and recommended setting.
disable	Disables CPU management on all APs, typically for small networks. This setting protects the user experience.
enable	Enables the CPU management feature. When configured, the client and network management functions are protected. This setting helps in large networks with a high client density.

Usage Guidelines

Use this command to enable or disable resource management across different functions performed by a W-IAI

Example

The following example enables the automatic enabling or disabling of CPU management:

(Instant AP) (config)# dynamic-cpu-mgmt auto
(Instant AP) (config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4.0.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

dynamic-radius-proxy

dynamic-radius-proxy no...

Description

This command enables the use of IP Address of the Virtual Controller for communication with external RADIUS servers.

Syntax

Command/Parameter Description
dynamic-radius-proxy	Enables dynamic RADIUS proxy feature to allow the Virtual Controller network to use the IP address of the Virtual Controller when communicating with the external RADIUS servers.
no...	Removes the configuration.

Usage Guidelines

Ensure that you set the Virtual Controller IP address as a NAS client in the RADIUS server when Dynamic I proxy is enabled.

Example

The following example enables the dynamic RADIUS proxy feature:

(Instant AP) (config)# dynamic-radius-proxy (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

enet-vlan

enet-vlan no...

Description

This command configures a VLAN for Ethernet connections.

Syntax

Parameter Description Range
enet-vlan	Configures VLAN for Ethernet ports and wired profiles	0-4093
no...	Removes the configuration –

Usage Guidelines

Use this command to configure VLAN for the Ethernet connections.

Example

The following example configures VLAN for the Ethernet ports:

(Instant AP)(config)# enet-vlan 200 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

enet0-bridging

enet0-bridging

Description

This command allows you to use all ports on the APs as downlink ports.

Usage Guidelines

Use this command for W-IAP models that have only one Ethernet port enabled. When Eth0 bridging is config ensure that the uplink for each W-IAP is mesh link, Wi-Fi, or 3G/4G.

Example

The following command enables Eth0 bridging:

(Instant AP)# enet0-bridging

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

enet0-port-profile

enet0-port-profile

Description

This command assigns a wired profile to the Ethernet 0 port on a W-IAP.

Syntax

Parameter Description
enet0-port-profile	Assigns a wired profile to the Ethernet 0 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 0 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 0 port:

(Instant AP) (config)# enet0-port-profile <name>
(Instant AP) (config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

enet1-port-profile

enet1-port-profile

Description

This command assigns a wired profile to the Ethernet 1 port on a W-IAP.

Syntax

Parameter Description
enet1-port-profile	Assigns a wired profile to the Ethernet 1 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 1 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 1 port:

(Instant AP)(config)# enet1-port-profile <name>
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

enet2-port-profile

enet2-port-profile

Description

This command assigns a wired profile to the Ethernet 2 port on a W-IAP.

Syntax

Parameter Description
enet2-port-profile	Assigns a wired profile to the Ethernet 2 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 2 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 2 port:

(Instant AP)(config)# enet2-port-profile <name>
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

enet3-port-profile

enet3-port-profile

Description

This command assigns a wired profile to the Ethernet 3 port on a W-IAP.

Syntax

Parameter Description
enet3-port-profile	Assigns a wired profile to the Ethernet 3 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 3 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 3 port:

(Instant AP)(config)# enet3-port-profile <name>
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

enet4-port-profile

enet4-port-profile

Description

This command assigns a wired profile to the Ethernet 4 port on a W-IAP.

Syntax

Parameter Description
enet4-port-profile	Assigns a wired profile to the Ethernet 4 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 4 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 4 port:

(Instant AP)(config)# enet4-port-profile <name>
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

extended-ssid

extended-ssid no...

Description

This command enables the configuration of additional WLAN SSIDs. Extended SSID is enabled by default in the factory default settings of Instant APs. Disabling the extended ssid option in the factory default mode will not be effect.

Syntax

Command/Parameter Description
extended-ssid	Enables the users to configure additional SSIDs.
no...	Removes the configuration.

Usage Guidelines

Use this command to create additional SSIDs. By default, you can create up to six WLAN SSIDs. With the Extended SSID option enabled, you can create up to 16 WLANs. The following W-IAPs support 16 WLANs:

W-IAP3WNP
W-IAP134
W-IAP135

The number of SSIDs that become active on each W-IAP depends on the W-IAP platform.

Example

The following example enables the configuration of extended SSIDs:

(Instant AP)(config)# extended-ssid (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

factory-ssid-enable

factory-ssid-enable

Description

This command resets the W-IAP to use the factory configuration.

Syntax

Parameter Description
factory-ssid-enable	Enables factory SSID configuration.

Usage Guidelines

Use this command to reset a W-IAP to use the factory default SSID.

Example

The following example enables factory default configuration:

(Instant AP) (config)# factory-ssid-enable (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

firewall-external-enforcement

firewall-external-enforcement pan
    disable
    enable
    ip <address>
    port <port>
    user <name> <password>
    no... 

Description

This command configures external firewall details such as Palo Alto Networks (PAN) firewall to enable integrati with the W-IAP.

Syntax

Parameter Description Range Default
firewall-external-enforcement pan	PAN firewall configuration sub-mode.	-	-
disable	Disables PAN firewall.	--
enable	Enables PAN firewall.	--
ip	Configures PAN firewall IP address on the W-IAP	-	-
port	Configures a port for the PAN firewall	1–65535	443
user	Configures administrator user credentials of PAN firewall on a W-IAP.	-a	-
no...	Removes the specified configuration parameter.	-	-

Usage Guidelines

Use this command to enable external firewall integration with W-IAP. In Instant 6.3.1.1-4.0 release, W-IAPs can be integrated with external firewall such as PAN firewall. The PAN firewall is based on user ID, which provides the methods for connecting to sources of identity information and associating them with firewall policy rules. The functionality provided by the PAN firewall based on user ID requires the collection of information from the net W-IAP maintains the network (such as mapping IP address) and user information for those clients in the network provides the required information for the user ID feature on PAN firewall.

To enable W-IAP integration with PAN firewall, a global profile configured on W-IAP with PAN firewall informa such as IP address, port, user name, password, firewall enabled or disabled status.

Example

The following example configures PAN firewall information on a W-IAP:

(Instant AP)(config)# firewall-external-enforcement pan
(Instant AP)(firewall-external-enforcement pan)# enable
(Instant AP)(firewall-external-enforcement pan)# ip 192.0.2.11
(Instant AP)(firewall-external-enforcement pan)# port 443 

(Instant AP)(firewall-external-enforcement pan)# user admin1 admin1 (Instant AP)(firewall-external-enforcement pan)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and firewall-external-enforcement sub-mode.

g-channel

g-channel

Description

This command configures 2.4 GHz radio channels for a specific W-IAP.

Syntax

Parameter Description Range
	Configures the specified 2.4 GHz channel. The valid channels for a band are determined by the AP regulatory domain.
	Configures the specified transmission power values.	0-127 dBm

Usage Guidelines

Use this command to configure radio channels for the 2.4 GHz band for a specific W-IAP.

Example

The following example configures the 2.4 GHz radio channel:

(Instant AP)# g-channel 11 18

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

g-external-antenna

g-external-antenna

Description

This command configures external antenna connectors for a W-IAP.

Syntax

Parameter Description Range Default
	Configures the antenna gain. You can configure gain value in dBi for the following types of antenna: Dipole/Omni Panel -12 Sector - 12	Diploe/Omni - 6 Panel -12 Sector - 12	-

Usage Guidelines

If your W-IAP has external antenna connectors, you need to configure the transmit power of the system. The configuration must ensure that the system's Equivalent Isotropically Radiated Power (EIRP) is in compliance with the limit specified by the regulatory authority of the country in which the W-IAP is deployed. You can also calculate additional attenuation between the device and antenna before configuring the antenna gain. To know AP device supports external antenna connectors, see the Guide that is shipped along with the AP device.

EIRP and Antenna Gain

The following formula can be used to calculate the EIRP limit related RF power based on selected antennas (antenna gain) and feeder (Coaxial Cable loss):

EIRP = Tx RF Power (dBm)+GA (dB) - FL (dB)

The following table describes this formula:

Table 9:Formula Variable Definitions

Formula Element Description
EIRP	Limit specific for each country of deployment
Tx RF Power	RF power measured at RF connector of the unit
GA	Antenna gain
FL	Feeder loss

For information on antenna gain recommended by the manufacturer, see dell.com/support.

Example

The following example configures external antenna connectors for the W-IAP with the 2.4 GHz radio band.

(Instant AP)# g-external-antenna 12

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

gre per-ap-tunnel

gre per-ap-tunnel no...

Description

This command configures a generic routing encapsulation (GRE) tunnel from each W-IAP to the VPN/GRE En rather than the tunnels created just from the Virtual Controller.

Syntax

Parameter Description
gre per-ap-tunnel	Creates a GRE tunnel from the W-IAP to the VPN/GRE endpoint.
no...	Removes the configuration.

Usage Guidelines

Use this command to allow the traffic to be sent to the corporate network through a Layer-2 GRE tunnel from IAP itself. When a GRE tunnel per W-IAP is created, the traffic need not be forwarded through the Virtual C

Example

The following example creates a GRE tunnel for the W-IAP:

(Instant AP)(config)# gre per-ap-tunnel (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

gre primary

gre primary no...

Description

This command configures a host for the primary VPN/GRE endpoint.

Syntax

Parameter Description
gre primary	Specifies the fully qualified domain name (FQDN) of the primary host.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure the primary VPN/GRE host.

Example

The following example configures a GRE primary host:

(Instant AP)(config)# gre primary <name>
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

gre type

gre type

Description

This command configures a GRE protocol number as GRE type.

Syntax

Parameter Description	Range Default
gre type	Configures the protocol number or IP address for GRE type	16-bit protocol number	0

Usage Guidelines

Use this command to specify GRE type. The 16-bit protocol number uniquely identifies a Layer-2 tunnel. The IAPs or controllers at both endpoints of the tunnel must be configured with the same protocol number.

Example

The following example configures the GRE type:

(Instant AP)(config)# gre type 0
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

help

help

Description

This command displays help for the CLI.

Usage Guidelines

This command displays keyboard editing commands that allow you to make corrections or changes to the cor without retyping.

You can also enter the question mark (?) to get various types of command help:

• When typed at the beginning of a line, the question mark lists all commands available in the current mode.
• When typed at the end of a command or abbreviation, the question mark lists possible commands that match.
• When typed in place of a parameter, the question mark lists available options.

Example

The following example shows the output of the help command.

HELP:
Special keys:
BS .... delete previous character
Ctrl-A .... go to beginning of line
Ctrl-E .... go to end of line
Ctrl-F .... go forward one character
Ctrl-B .... go backward one character
Ctrl-D .... delete current character
Ctrl-U, X .. delete to beginning of line
Ctrl-K .... delete to end of line
Ctrl-W .... delete previous word
Ctrl-T .... transpose previous character
Ctrl-P .... go to previous line in history buffer
Ctrl-N .... go to next line in history buffer
Ctrl-Z .... return to root command prompt
Tab .... command-line completion
exit .... go to next lower command prompt
? .... list choices
Help may be requested at any point in a command by entering a question mark '?' If nothing matches, the help list will be empty and you must back up until entering a '?' shows the available options.
Two styles of help are provided:
1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each possible argument.
2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show w?'). 

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

hostname

hostname

Description

This command changes the hostname of the Virtual Controller.

Syntax

Parameter Description
	Configures a hostname for the Virtual Controller.

Usage Guidelines

The hostname is used as the default prompt. You can use any alphanumeric character, punctuation, or symbol characters. When spaces, plus symbols (+), question marks (?), or asterisks (*) are used, enclose the text in

Example

The following example configures host name for a W-IAP.

(Instant AP)# hostname IAP1

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

hotspot anqp-3gpp-profile

hotspot anqp-3gpp-profile 3gpp-plmn1...3gpp-plmn6 enable no...

Description

This command configures a 3rd Generation Partnership Project (3GPP) Cellular Network for hotspots that have roaming relationships with cellular operators.

Syntax

Parameter Description
hotspot anqp-3gpp-profile	Creates a 3GPP profile.
3gpp-plmn1...3gpp-plmn6	Configures the Public Land Mobile Networks (PLMN) value of th network. The PLMN value can be specified for first, second, third fourth, fifth, and sixth highest priority network.The PLMN ID consists of a 12-bit Mobile Country Code (MCC) the 12-bit Mobile Network Code (MNC).
enable	Activates the configuration profile.
no...	Removes the configuration

Usage Guidelines

Use this command to configure a 3GPP Cellular Network hotspot profile that defines the ANQP information el (IE) for 3G Cellular Network for hotspots. The IE defined in this profile will be sent in a Generic Advertiseme Service (GAS) query response from a W-IAP in a cellular network hotspot. The 3GPP Mobile Country Code ( and the 12-bit Mobile Network Code data in the IE can help the client select a 3GPP network when associat hotspot profile and enabled on a WLAN SSID profile.

Example

The following command configures a 3GPP profile:

(Instant AP)(config)# hotspot anqp-3gpp-profile cellcorp1 (Instant AP)(3gpp "cellcorp1")# 3gpp-plmn1 310026 (Instant AP)(3gpp "cellcorp1")# 3gpp_plmn2 208000 (Instant AP)(3gpp "cellcorp1")# 3gpp_plmn3 208001 (Instant AP)(3gpp "cellcorp1")# enable (Instant AP)(3gpp "cellcorp1")# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the 3GPP hotspot profile configuration sub-mode

hotspot anqp-domain-name-profile

hotspot anqp-domain-name-profile domain-name enable no...

Description

This command defines the domain name to be sent in an Access Network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description
hotspot anqp-domain-name-profile	Creates a domain profile.
domain-name	Configures a domain name of the hotspot operator.
enable	Enables the configuration profile.
no...	Removes the existing configuration

Usage Guidelines

Use this command to configure a domain name in the ANQP Domain Name profile. If a client uses the GenAdvertisement Service (GAS) to post an ANQP query to a W-IAP, the W-IAP will return an ANQP Information Element with the domain name when this profile is associated with a hotspot profile and enabled on a WLAN profile.

Example

The following command defines a domain name for the ANQP domain name profile:

(Instant AP)(config)# hotspot anqp-domain-name-profile domain1
(Instant AP)(domain-name "domain1")# domain-name example.com
(Instant AP)(domain-name "domain1")# enable
(Instant AP)(domain-name "domain1")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the ANQP domain profile configuration sub-mode

hotspot anqp-ip-addr-avail-profile

hotspot anqp-ip-addr-avail-profile <profile-name>
enable
ipv4-addr-avail
ipv6-addr-avail
no... 

Description

This command defines the available IP address types to be sent in an Access network Query Protocol (ANQI information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description
hotspot anqp-ip-addr-avail-profile	Creates an ANQP IP Address availability profile.
enable	Enables the IP address availability profile.
ipv4-addr-avail	Indicates the availability of an IPv4 network.
ipv6-addr-avail	Indicates the availability of an IPv6 network.
no...	Removes the existing configuration.

Usage Guidelines

Use this command to configure the IP Address availability information and IP address types which could be allocated to the clients after they associate to the hotspot W-IAP.

Example

The following command configures an AP using this profile to advertise a public IPv4 network.

(Instant AP) (config)# hotspot anqp-ip-addr-avail-profile default
(Instant AP) (IP-addr-avail "default")# ipv4-addr-avail
(Instant AP) (IP-addr-avail "default")# ipv6-addr-avail
(Instant AP) (IP-addr-avail "default")# enable
(Instant AP) (IP-addr-avail "default")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the ANQP IP address availability profile configuration sub-mode

hotspot anqp-nai-realm-profile

hotspot anqp-nai-realm-profile <profile-name>
enable
nai-home-realm
nai-realm-auth-id-1 <auth-ID>
nai-realm-auth-id-2 <auth-ID>
nai-realm-auth-value-1 <auth-value>
nai-realm-auth-value-2 <auth-value>
nai-realm-eap-method <eap-method>
nai-realm-encoding <encoding>
nai-realm-name <name>
no... 

Description

This command defines a Network Access Identifier (NAI) realm information that can be sent as an Access ne Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description Range
hotspot anqp-nai-realm-profile	Configures a NAI realm hotspot profile. -
enable	Enables the NAI realm profile.	-
nai-home-realm	Sets the realm in this profile as the NAI Home Realm. -
nai-realm-auth-id-1nai-realm-auth-id-2	Configures the NAI realm authentication ID.Use the nai-realm-auth-id-1 command to send the one of the following authentication methods for the primary NAI realm ID.Use the nai-realm-auth-id-2 command to send the one of the following authentication methods for the secondary NAI realm ID.	-
	Configures any of the following types of authentication ID:credential- Uses credential authentication.eap-inner-auth-Uses EAP inner authentication type.exp-inner-eap- Uses the expanded inner EAP authentication method-expanded-eap-Uses the expanded EAP authentication method.non-eap-inner-auth-Uses non-EAP inner authentication type.reserved-Uses the reserved authentication method.	credentialeap-inner-authexp-inner-authexpanded-eapnon-eap-inner-authreserved
nai-realm-auth-value-1nai-realm-auth-value-2	Configures a value for NAI realm authentication. Use the nai-realm-auth-value-1 command to select an authentication value for the authentication method specified by nai-realm-auth-id-1. Use thenai-realm-auth-value-2 command to select the authentication value for the authentication method specified bynai-realm-auth-id-2.
Parameter Description Range
	Configures any of following types of authentication values for the specified:For credential, specify the following values:simusimnfc-securehw-tokensoftokencertificatenume-passwordnonereservedvendor-specificFor eap-inner-auth, specify the following values:reservedpappchapmschapmschapv2For exp-inner-eap, specify exp-inner-eap as the authentication value.For expanded-eap, specify expanded-eap as the authentication valueFor non-eap-inner-authspecify any of the following values:reservedpappachapschapmschapmschapv2	sim, usim. nfc-secure, hw-token, softoken, certificate, uname-password, none, reserved, vendor-specific reserved, pap chap, mschap, mschapv2, exp-inner-eap, expanded-eap, reserved
nai-realm-eap-method	Configures an EAP method for NAI realm.
	Configures any of the following EAP methods:crypto-card– Crypto card authenticationeap-aka–EAP for UMTS Authentication and Key Agreementeap-sim–EAP for GSM Subscriber Identity Moduleseap-tls–EAP-Transport Layer Securityeap-ttls–EAP-Tunneled Transport Layer Securitygeneric-token-card–EAP Generic Token Card (EAP-GTC)identity– EAP Identity typenotification–The hotspot realm uses EAP Notification messages for authentication.one-time-password–Authentication with a single-use passwordpeap–Protected Extensible Authentication Protocolpeapmschapv2– Protected Extensible Authentication Protocol with Microsoft Challenge Handshake Authentication Protocol version 2	crypto-card, eap-aka, eap-sim, eap-tls, eap-ttls, generic-token-card, identity notification, one-time-password, peap, peapmschapv2
nai-realm-encoding	Configures a UTF-8 or rfc4282 formatted character string for NAI realm encoding.	rfc4282, utf8
Parameter Description Range
nai-realm-name	Configures a name for the NAI realm. The realm name is often the domain name of the service provider.	often
no...	Removes any existing configuration.	-

Usage Guidelines

Use this command to configure an NAI Realm profile that identifies and describes a NAI realm accessible to IAP, and the method used for NAI realm authentication. The settings configured in this profile determine the I realm elements that are included as part of a GAS Response frame.

Example

The following example creates an NAI realm profile:

(Instant AP) (config)# hotspot anqp-nai-realm-profile home
(Instant AP) (nai-realm "home")# nai-realm-name home-hotspot.com
(Instant AP) (nai-realm "home")# nai-realm-encoding utf8
(Instant AP) (nai-realm "home")# nai-realm-eap-method eap-sim
(Instant AP) (nai-realm "home")# nai-realm-auth-id-1 non-eap-inner-auth
(Instant AP) (nai-realm "home")# nai-realm-auth-value-1 mschapv2
(Instant AP) (nai-realm "home")# nai-home-realm
(Instant AP) (nai-realm "home")# enable
(Instant AP) (nai-realm "home")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the NAI realm profile configuration sub mode

hotspot anqp-nwk-auth-profile

hotspot anqp-nwk-auth-profile <profile-name>
    enable
    nwk-auth-type <auth-type>
    url <url>
    no... 

Description

This command configures an ANQP network authentication profile to define authentication type being used by hotspot network.

Syntax

Parameter Description Range
hotspot anqp-nwk-auth-profile	Configures an ANQP network authentication profile.	-
enable	Enables the network authentication profile. -
nwk-auth-type	Defines the network Authentication type being used by the hotspot network.	-
	Allows you to specify any of the following values:accept-term-and-cond-When configured, the network requires the user to accept terms and conditions.NOTE: This option requires you to specify a redirection URL string as an IP address, FQDN or URL.online-enrollment-When configured, the network supports the online enrollment.http-redirect-When configured, additional information on the network is provided through HTTP/HTTPS redirection.dns-redirect-When configured, additional information on the network is provided through DNS redirection.NOTE: This option requires you to specify a redirection URL string as an IP address, FQDN or URL.	accept-term-and-cond, online-enrollment, http-redirect, dns-redirect
url	Configures URL, IP address, or FQDN used by the hotspot network for the accept-term-and-cond or dns-redirect network authentication types.	-
no...	Removes any existing configuration.	-

Usage Guidelines

When the asra option is enabled in the hotspot profile associated with a WLAN SSID, the settings configured for the network authentication profile are sent in the GAS response to the client.

Example

The following command configures a network authentication profile for DNS redirection.

(Instant AP)(config)# hotspot anqp-nwk-auth-profile default

(Instant AP)(network-auth "default")# nwk-auth-type dns-redirection (Instant AP)(network-auth "default")# url http://www.example.com (Instant AP)(network-auth "default")# enable (Instant AP)(network-auth "default")# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the ANQP network authentication profile configuration sub-mode

hotspot anqp-roam-cons-profile

hotspot anqp-roam-cons-profile <profile-name>
enable
roam-cons-oi <roam-cons-oi>
roam-cons-oi-len <roam-cons-oi-len>
no...

Description

This command configures the Roaming Consortium Organization Identifier (OI) information to be sent in an Acl network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response

Syntax

Parameter Description Range
hotspot anqp-roam-cons-profile	Creates roaming consortium profile.	-
enable	Enables the roaming consortium profile. -
roam-cons-oi	Sends the specified roaming consortium OI a GAS query response. The OI must be a hexadecimal number 3-5 octets in length.	in Hexadecimal number 3-5 octets in length
roam-cons-oi-len	Indicates the length of the OI. The value of the roam-cons-oi-len parameter must equal upon the number of octets of the roam-cons-oi field.0: 0 Octets in the OI (Null)3: OI length is 24-bit (3 Octets)5: OI length is 36-bit (5 Octets)	the
no...	Removes any existing configuration.	-

Usage Guidelines

Use this command to configure the roaming consortium OIs assigned to service providers when they register the IEEE registration authority. The Roaming Consortium Information Elements (IEs) contain information about network and service provider, whose security credentials can be used to authenticate with the W-IAP transmit this IE.

Example

The following command defines the roaming consortium OI and OI length in the ANQP roaming consortium p

(Instant AP)(config)# hotspot anqp-roam-cons-profile profile1
(Instant AP)(roaming-consortium "profile1")# roam-cons-oi 506F9A
(Instant AP)(roaming-consortium "profile1")# roam-cons-oi-len 3
(Instant AP)(roaming-consortium "profile1")# enable
(Instant AP)(roaming-consortium "profile1")# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the ANQP roaming consortium profile configuration sub-mode

hotspot anqp-venue-name-profile

hotspot anqp-venue-name-profile <profile-name>
enable
venue-group <group>
venue-lang-code <language>
venue-name <name>
venue-type <type>
no... 

Description

This command defines venue information be sent in an Access network Query Protocol (ANQP) information el in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description Range		Default
hotspot anqp-venue-name-profile	Creates a ANQP venue name profile.	-	-
enable	Enables the ANQP venue name profile.	-	-
venue-group	Configures one of the following venue groups to be advertised in the IEs from APs associated with this hotspot profile.assemblybusinesseducationalfactory-and-industrialinstitutionalmercantileoutdoorresidentialstorageutility-and-miscvehicularNOTE: This parameter only defines the venue group advertised in the IEs from hotspot APs. To define the venue group to be included in ANQP responses, use anqp-venue-name-profilecommand.	assembly, business, educational, factory-and-industrial, institutional, mercantile, outdoor, residential, storage, unspecified, utility-and-misc, vehicular	unspecified
venue-lang-code	Configures an ISO 639 language code that identifies the language used in the Venue Name field.	-	-
Parameter Description Range Default
venue-name	Configures the venue name to be advertised in the ANQP IEs. If the venue name includes spaces, the name must be enclosed in quotation marks, e.g. “Midtown Shopping Center”.	-	-
venue-type	Specifies the venue type to be advertised in the IEs.	The complete list of supported venue types is described in hotspot anqp-venue-name-profile on page 102.	unspecified
no...	Removes any existing configuration.	-	-

Usage Guidelines

Use this command to configure the venue group and venue type in an ANQP Venue Name profile. If a clien Generic Advertisement Service (GAS) to post an ANQP query to an Access Point, the W-IAP will return ANQ Information Elements with the values configured in this profile.

Venue Types

The following list describes the different venue types for each venue group:

Venue Group Associated Venue	Type Value
assembly	arenastadiumpassenger-terminalamphitheateramusement-parkplace-of-worshipconvention-centerlibrarymuseumrestauranttheaterbarcoffee-shopzoo-or-aquariumemergency-cord-centerunspecified
business	doctorbankfire-stationpolice-stationpost-officeprofessional-officeresearch-and-dev-facilityattorney-officeunspecified
educational	school-primaryschool-secondaryuniv-or-collegeunspecified
factory-and-industrial	factoryunspecified
institutional	hospitallong-term-carealc-drug-rehabgroup-homeprison-or-jailunspecified
mercantile	retail-storegrocery-marketauto-service-stationshopping-mallgas-stationunspecified
outdoor	muni-mesh-networkcity-parkrest-areatraffic-controlbus-stopkisokunspecified
residential	private-residencehoteldormitoryboarding-houseunspecified
storage	unspecified
utility-and-misc	unspecified
vehicular	unspecifiedautomobile-or-truckairplanebusferryshiptrainmotor-bike

Example

The following command defines an ANQP Venue Name profile for a shopping mall:

(Instant AP) (config)# hotspot anqp-venue-name-profile Mall1
(Instant AP) (venue-name "Mall1")# venue-name ShoppingCenter1
(Instant AP) (venue-name "Mall1")# venue-group mercantile
(Instant AP) (venue-name "Mall1")# venue-type shopping-mall
(Instant AP) (venue-name "Mall1")# venue-lang-code EN
(Instant AP) (venue-name "Mall1")# enable 

(Instant AP) (venue-name "Mall1") # end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the ANQP venue name profile configuration sub-mode

hotspot h2qp-conn-cap-profile

hotspot h2qp-conn-cap-profile <profile-name>
enable
esp-port
icmp
tcp-ftp
tcp-http
tcp-pptp-vpn
tcp-ssh
tcp-tls-vpn
tcp-voip
udp-ike2
udp-ipsec-vpn
udp-voip
no... 

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) profile that advertises hotspot protocol and pc capabilities.

Syntax

Parameter Description
hotspot h2qp-conn-cap-profile	Creates a connection capability profile.
enable	Enables the connection capability H2QP profile.
esp-port	Enables the Encapsulating Security Payload (ESP) port used by IPSec VPNs. (port 0)
icmp	Indicates that the ICMP port is enabled and available. (port 0)
tcp-ftp	Enables the FTP port. (port 20)
tcp-http	Enables the HTTP port. (port 80)
tcp-pptp-vpn	Enables the PPTP port used by IPSec VPNs. (port 1723)
tcp-ssh	Enables the SSH port. (port 22)
tcp-tls-vpn	Enables the TCP TLS port used by VPNs. (port 80)
tcp-voip	Enables the TCP VoIP port. (port 5060)
udp-ike2	Enables the IKEv2 port.
udp-ipsec-vpn	Enables the IPsec VPN port. (ports 500, 4500 and 0)
udp-voip	Enables the UDP VoIP port. (port 5060)
no...	Removes any existing configuration.

Usage Guidelines

Use this command to configure the values to be sent in an ANQP IE to provide information about the IP pro and associated port numbers that are available and open for communication.

Example

The following example allows the H2QP connection capability profile to advertise the availability of ICMP and ports.

(Instant AP)(config) # hotspot h2qp-conn-cap-profile Wan1
(Instant AP)(connection-capabilities "Wan1")# icmp
(Instant AP)(connection-capabilities "Wan1")# tcp-http
(Instant AP)(connection-capabilities "Wan1")# enable
(Instant AP)(connection-capabilities "Wan1")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the H2QP connection capability profile configuration sub-mode

hotspot h2qp-oper-name-profile

hotspot h2qp-oper-name-profile <profile>
    enable
    op-fr-name <name>
    op-lang-code <language>
    no... 

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) operator-friendly name profile.

Syntax

Parameter Description Range Default
hotspot h2qp-oper-name-profile	Creates an operator-friendly name profile. -	-
enable	Enables the operator-friendly name profile.	-	-
op-fr-name	Configures an operator-friendly name to be sent by devices using this profile. If the name includes quotation marks (“), include a backslash character before each quotation mark. (e.g. \"example\")	1-64 alphanumeric (\)characters	-
op-lang-code	Configures an ISO 639 language code that identifies the language used in the op-fr-name command.	-	-
no...	Removes any existing configuration.	-	-

Usage Guidelines

Use this command to configure an operator-friendly name that can identify the operator and also provides info about the location.

Example

The following example configures an operator friendly profile:

(Instant AP)(config)# hotspot h2qp-oper-name-profile Profile1
(Instant AP)(operator-friendly-name "Profile1")# op-fr-name hotspot1
(Instant AP)(operator-friendly-name "Profile1")# op-lang-code EN
(Instant AP)(operator-friendly-name "Profile1")# enable
(Instant AP)(operator-friendly-name "Profile1")# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the H2QP operator friendly name profile configuration sub-mode

hotspot h2qp-oper-class-profile

hotspot h2qp-oper-class-profile <profile>
enable
op-class <class>
no... 

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) profile that defines the Operating Class to be the H2QP IE.

Syntax

Parameter Description Range Default
hotspot h2qp-oper-class-profile	Creates operating class profile.	-	-
enable	Enables the operating class profile.	-	-
op-class	Configures the operating class for the devices' BSS.	1-255	1
no...	Removes any existing configuration.	-	-

Usage Guidelines

Use this command to configure values for the H2QP Operating Class profile that lists the channels on which hotspot is capable of operating.

Example

The following example configures and enables a profile with the default operating class value.

(Instant AP) (config) # hotspot h2qp-oper-class-profile Profile1
(Instant AP) (operator-class"Profile1")# op-class 1
(Instant AP) (operator-class"Profile1")# enable
(Instant AP) (operator-class"Profile1")# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and the H2QP operating class profile configuration sub-mode

hotspot h2qp-wan-metrics-profile

hotspot h2qp-wan-metrics-profile <profile-name>
    at-capacity
    downlink-load <load>
    downlink-speed <speed>
    enable
    load-duration <duration>
    symm-link
    uplink-load <load>
    uplink-speed <speed>
    wan-metrics-link-status <status>
    no... 

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) profile that specifies the hotspot WAN status link metrics.

Syntax

Parameter Description	Range Default
hotspot h2qp-wan-metrics-profile	Creates a H2QP WAN metric profile --
at-capacity	Indicates if the WAN Link has reached its maximum capacity. If this parameter is enabled, no additional mobile devices will be permitted to associate to the hotspot W-IAP.	-	-
downlink-load	Configures the percentage of the WAN downlink that is currently utilized. If no value is set, this parameter will show a default value of 0 to indicate that the downlink speed is unknown or unspecified.	1-100 0	(unspecified)
downlink-speed	Indicates the current WAN backhaul downlink speed in Kbps. If no value is set, this parameter will show a default value of 0 to indicate that the downlink speed is unknown or unspecified.	0 -2,147,483,64 Kbps	0 (unspecified)
enable	Enables the H2QP WAN metrics profile.	-	-
load-duration	Configures a duration at which the downlink load is measured, in tenths of a second.	0 and 65535	-
symm-link	Indicates that the WAN Link has same speed in both the uplink and downlink directions.	-	-
no	Removes any existing configuration.	-	-
uplink-load	The percentage of the WAN uplink that is currently utilized. If no value is set, this parameter will show a default value of 0 to indicate that the downlink speed is unknown or unspecified.	1-100 0	(unspecified)
uplink-speed	Use the uplinkparameter to indicate the 0 - current WAN backhaul uplink speed in Kbps. If n2,147,483,64 value is set, this parameter will show a default value of 0 to indicate that the uplink speed is unknown or unspecified.	7 kbps	0 (unspecified)
wan-metrics-link-status	Define the status of the WAN Link by configuring- one of the following values.		-
	Configures any of the following states:• link-up- Indicates if WAN link is up.• link-down- Indicates if WAN link is down• link-under-test-Indicates if WAN link is currently in a test state.	link-down, link-under- test, link-up	unspecified

Usage Guidelines

Use this command to configure the values be sent in an H2QP IE to provide information about access network characteristics such as link status and the capacity and speed of the WAN link to the Internet.

Examples

The following example configures a WAN metric profile:

(Instant AP)(config)# hotspot h2qp-wan-metrics-profile Wan1
(Instant AP)(WAN-metrics "Wan1")# at-capacity
(Instant AP)(WAN-metrics "Wan1")# downlink-load 5
(Instant AP)(WAN-metrics "Wan1")# downlink-speed 147
(Instant AP)(WAN-metrics "Wan1")# load-duration 60
(Instant AP)(WAN-metrics "Wan1")# symm-link
(Instant AP)(WAN-metrics "Wan1")# uplink-load 10
(Instant AP)(WAN-metrics "Wan1")# uplink-speed 147
(Instant AP)(WAN-metrics "Wan1")# wan-metrics-link-status link_up
(Instant AP)(WAN-metrics "Wan1")# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and the H2QP WAN metrics profile configuration sub-mode

hotspot hs-profile

hotspot hs-profile <profile-name>
access-network-type <type>
addtl-roam-cons-ois <addtl-roam-cons-ois>
advertisement-profile {anqp-3gpp|anqp-domain-name|anqp-ip-addr-avail|anqp-nai-realm| anqp-nwk-auth|anqp-roam-cons|anqp-venue-name|h2qp-conn-cap|h2qp-oper-class|h2qp-oper-name|h2qp-wan-metrics} <profile-name>
advertisement-protocol <protocol>
asra
comeback-mode
enable
gas-comeback-delay <delay>
group-frame-block
hessid <id>
internet
no
p2p-cross-connect
p2p-dev-mgmt
pame-bi
query-response-length-limit <len>
roam-cons-len-1 0|3|5
roam-cons-len-2 0|3|5
roam-cons-len-3 0|3|5
roam-cons-oi-1 <roam-cons-oi-1>
roam-cons-oi-2 <roam-cons-oi-1>
roam-cons-oi-3 <roam-cons-oi-1>
venue-group <venue-group>
venue-type <venue-type> 

Description

This command configures a hotspot profile for an 802.11u public access service provider.

Syntax

Parameter Description Range	Default
access-network-type	Configures any of the following access network (802.11u network type) type:private– This network is accessible for authorized users only. For example, home networks or enterprise networks that require user authentication. The corresponding integer value for this network type is 0.private-with-guest– This network is accessible to guest users based on guest authentication methods. For example, enterprise networks that allow guest users with captive portal authentication. The corresponding integer value for this network type ischargeable-public– This network provides access to the	private, private-with-guest,chargeable-public, free-public, personal-device, emergency-services, test, wildcard	chargeable-public

Parameter Description Range Default
	Internet based on payment. For example, a subscription-based Internet access in a coffee shop or a hotel offering chargeable in-room Internet access service. The corresponding integer value for this network type is 2. free-public -This network is accessible to all without any charges applied. For example, a hotspot in airport or other public places that provide Internet access with no additional cost. The corresponding integer value for this network type is 3. personal-device - This network is accessible for personal devices. For example, a laptop or camera configured with a printer for the purpose of printing. The corresponding integer value for this network type is 4. emergency-services -This network is limited to accessing emergency services only. The corresponding integer value for this network type is 5. test - This network is used for test purposes only. The corresponding integer value for this network type is 14. wildcard -This network indicates a wildcard network. The corresponding integer value for this network type is 15.
addtl-roam-cons-ois	Configures the number of additional roaming consortium Organization Identifiers (OIs) advertised by the AP. This feature supports up to three additional OIs, which are defined using the roam-cons-oi-1, roam-cons-oi-2 and roam-cons-oi-3 parameters.	-
advertisement-profile {anqp-3gpp| anqp-domain-name| anqp-ip-addr-avail| anqp-nai-realm| anqp-nwk-auth| anqp-roam-cons| anqp-venue-name| h2qp-conn-cap| h2qp-oper-class| h2qp-oper-name|	Associates an advertisement profile with the hotspot profile. You can associate any of the following advertisement profiles: anqp-3gpp anqp-domain-name anqp-ip-addr-avail anqp-nai-realm anqp-nwk-auth anqp-roam-cons anqp-venue-name	-

Parameter Description Range	Default
h2qp-wan-metrics}	h2qp-conn-caph2qp-oper-classh2qp-oper-nameh2qp-wan-metrics
	Allows you to associate a specific advertisement profile to the hotspot profile.	-	-
advertisement-protocol	Configures the anqp: Access Network Query Protocol (ANQP) advertisement protocol.	anqp -
asra	Indicates if any additional steps are required for network access.	-	-
comeback-mode	By default, ANQP information is obtained from a GAS Request and Response. If you enable the comeback-mode option, advertisement information is obtained using a GAS Request and Response. as well as a Comeback-Request and Comeback-Response. This option is disabled by default.	-	-
enable	Enables the hotspot profile.	-	-
gas-comeback-delay	Configures a GAS comeback delay interval after which the client can attempt to retrieve the query response using a Comeback Request Action frame.	100–2000 milliseconds	500
group-frame-block	Configures the Downstream Group Addressed Forwarding (DGAF) Disabled Mode. This feature ensures that the W-IAP does not forward downstream group-addressed frames. It is disabled by default, allowing the W-IAP to forward downstream group-addressed frames.	-	-
hessid	Configures a homogenous ESS identifier (HESSSID)	MAC address in colon-separated hexadecimal format	-
internet	Allows the W-IAP to send an Information Element (IE) indicating that the network allows the Internet access. By default, a hotspot profile does not advertise network internet access.	-	-
no	Removes any existing configuration.	-	-
p2p-cross-connect	Advertises support for P2P Cross Connections.	- Disabled
p2p-dev-mgmt	Advertises support for P2P device management.	- Disabled
pame-bi	Enables the Pre-Association Message Exchange BSSID Independent (PAME-BI) bit, which is used by an AP to indicate whether the AP indicates that the Advertisement Server can return a query response that is independent of the BSSID used for the GAS Frame exchange.	-	-
query-response-length-limit	Configures the maximum length of the Generic Advertisement Service (GAS query response. GAS enables advertisement services that allow the clients to query multiple 802.11 networks at once, while also allowing the client to learn more about a network's 802.11 infrastructure before associating.If a client transmits a GAS Query using a GAS Initial Request frame, the responding W-IAP will provide the query response (or information on how to receive the query response) in a GAS Initial Response frame.	1-127 127
roam-cons-len-1	Configures the length of the OI.The value of the roam-cons-len-1parameter is based upon the number of octets of the roam-consoi-1 field.	0: Zero Octets in the OI (Null),3: OI length is 24-bit (3 Octets),5: OI length is 36-bit (5 Octets)	-
roam-cons-len-2	Length of the OI. The value of the roam-cons-len-2parameter is based upon the number of octets the roam-cons-oi-2 field.	0: Zero Octets in the OI (Null),of3: OI length is 24-bit (3 Octets),5: OI length is 36-bit (5 Octets)	-
roam-cons-len-3	Length of the OI. The value of the roam-cons-len-3parameter is based upon the number of octets the roam-cons-oi-3 field.	0: Zero Octets in the OI (Null),of3: OI length is 24-bit (3 Octets),5: OI length is 36-bit (5 Octets)	-
roam-cons-oi-1	Configures the roaming consortiumOI to assign to one of the service provider's top three roaming partners. This additional OI will only be sent to a client if the addtl-roam-cons-parameter is set to 1 or higher.NOTE: The service provider's own roaming consortium OI is configured using the hotspot anqp-roam-cons-profile command.	-	-
roam-cons-oi-2
roam-cons-oi-3
venue-group	Configures one of the following venue groups to be advertised in the IEs from APs associated with this hotspot profile.assemblybusinesseducationalfactory-and-industrialinstitutionalmercantileoutdoorresidentialstorageunspecifiedutility-and-miscvehicularNOTE: This parameter only defines the venue group advertised in the IEs from hotspot APs. To define the venue group to be included in ANQP responses, use anqp-venue-name-profilecommand.	assembly,business,educational,factory-and-industrial,institutional,mercantile,outdoor,residential,storage,unspecified,utility-and-misc,vehicular	business
venue-type	Specifies the venue type to be advertised in the IEs from APs associated with this hotspot profile.The complete list of supported venue types is described in Venue Types on page 119NOTE: This parameter only defines the venue type advertised in the IEs from hotspot APs. To define the venue type to be included in ANQP responses, use the hotspot anqp-venue-name-profilecommand.	-	-

Usage Guidelines

Use this command to configure a hotspot profile. Hotspot 2.0 is a Wi-Fi Alliance specification based on the 802.11u protocol, which allows wireless clients to discover hotspots using management frames (such as beacon, association request and association response), connect to networks, and roam between networks without additional authentication.

The Hotspot 2.0 provides the following services:

• Network discovery and selection—Allows the clients to discover suitable and available networks by advertising the access network type, roaming consortium, and venue information through the management frames. For network discovery and selection, Generic Advertisement Service (GAS) and Access Network Query Protocol (ANQP) are used.
• QOS Mapping—Provides a mapping between the network-layer QoS packet marking and over-the-air QoS frame marking based on user priority.

When a hotspot is configured in a network:

• The clients search for available hotspots using the beacon management frame.
• When a hotspot is found, the client sends queries to obtain information about the type of network authentication and IP address, and IP address availability using the Generic Advertisement Service (GAS) action frames.
• Based on the response of the advertisement Server (response to the GAS Action Frames), the relevant hotspot is selected and the client attempts to associate with it.
• Based on the authentication mode used for mobility clients, the client authenticates to access the network.

Generic Advertisement Service (GAS) Queries

An Organization Identifier (OI) is a unique identifier assigned to a service provider when it registers with the I registration authority. A W-IAP can include its service provider OI in beacons and probe responses to clients. Client recognizes the OI, it will attempt to associate to the W-IAP using the security credentials corresponding service provider.

If the client does not recognize the OI, that client can send a Generic Advertisement Service (GAS) query to the to request more information more about the network before associating.

ANQP Information Elements

ANQP Information Elements (IEs) are additional data that can be sent from the AP to the client to identify the network and service provider. If a client requests this information via a GAS query, the hotspot AP then send ANQP Capability list in the GAS Initial Response frame indicating support for the following IEs:

• Venue Name - Defined using the hotspot anqp-venue-name-profile command.
• Domain Name: Defined using the hotspot anqp-domain-name-profile command.
  • Network Authentication Type: Define using the hotspot anqp-nwk-auth-profile command.
  • Roaming Consortium List: Defined using the hotspot anqp-roam-cons-profile command.
• NAI Realm: Defined using the hotspot anqp-nai-realm-profile command.
  • Cellular Network Data: Defined using the hotspot anqp-3gpp-nwk-profile command.
• Connection Capability: Defined using the hotspot h2qp-conn-capability-profile command.
• Operator Class: Defined using the hotspot h2qp-op-cl-profile command.
• Operator Friendly Name: Defined using the hotspot h2qp-operator-friendly-name-profile command.
• WAN Metrics: Defined using the hotspot h2qp-wan-metrics-profile command.

Roaming Consortium Ols

Organization Identifiers (OIs) are assigned to service providers when they register with the IEEE registration authority. You can specify the OI for the hotspot's service provider in the ANQP Roaming Consortium profile in the hotspot anqp-roam-cons-profile command. This Hotspot profile also allows you to define and send up to three additional roaming consortium OIs for the service provider's top three roaming partners. To send this additional to clients, you must specify the number of roaming consortium elements a client can query using the addtl-roam-cons-ois <1-3> parameter, then define those elements using the following parameters:

• roam-cons-oi-1 and roam-cons-len 1
• roam-cons-oi-2 and roam-cons-len 2

• roam-cons-oi-3 and roam-cons-len 3

The configurable values for each additional OI include the Organization Identifier itself, the OI length, and the group and venue type associated with those OIs.

Venue Types

The following list describes the different venue types for each venue group:

Table 10 Venue Types

Venue Group Associated Venue	Type Value
unspecifiedThe associated numeric value is 0.	-
assemblyThe associated numeric value is 1.	· unspecified-The associated numeric value is 0.· arena-The associated numeric value is 1.· stadium-The associated numeric value is 2.· passenger-terminal-The associated numeric value is 3.· amphitheater-The associated numeric value is 4.· amusement-park-The associated numeric value is 5.· place-of-worship-The associated numeric value is 6.· convention-center-The associated numeric value is 7.· library-The associated numeric value is 8.· museum-The associated numeric value is 9.· restaurant-The associated numeric value is 10.· theater-The associated numeric value is 11.· bar -The associated numeric value is 12.· coffee-shop -The associated numeric value is 13.· zoo-or-aquarium -The associated numeric value is 14.· emergency-cord-center-The associated numeric value is 15.
businessThe associated numeric value is 2.	· unspecified-The associated numeric value is 0.· doctor-The associated numeric value is 1· bank-The associated numeric value is 2· fire-station-The associated numeric value is 3· police-station-The associated numeric value is 4· post-office-The associated numeric value is 6· professional-office-The associated numeric value is 7· research-and-dev-facility-The associated numeric value is 8· attorney-office-The associated numeric value is 9
educationalThe associated numeric value is 3.	· unspecified-The associated numeric value is 0.· school-primary-The associated numeric value is 1.· school-secondary-The associated numeric value is 2.· univ-or-college-The associated numeric value is 3.
factory-and-industrialThe associated numeric value is 4.	· unspecified-The associated numeric value is 0.· factory-The associated numeric value is 1.
institutionalThe associated numeric value is 5.	· unspecified-The associated numeric value is 0.· hospital-The associated numeric value is 1.· long-term-care-The associated numeric value is 2.· alc-drug-rehab-The associated numeric value is 3.· group-home-The associated numeric value is 4.· prison-or-jail-The associated numeric value is 5.
mercantile	· unspecified-The associated numeric value is 0.
The associated numeric value is 6.	retail-store-The associated numeric value is 1.grocery-market-The associated numeric value is 2.auto-service-station-The associated numeric value is 3.shopping-mall-The associated numeric value is 4.gas-station-The associated numeric value is 5
residentialThe associated numeric value is 7.	unspecified-The associated numeric value is 0.private-residence-The associated numeric value is 1.hotel-The associated numeric value is 3dormitory-The associated numeric value is 4boarding-house-The associated numeric value is 5.
storageThe associated numeric value is 8.	unspecified-The associated numeric value is 0.
utility-miscThe associated numeric value is 9.	unspecified-The associated numeric value is 0.
vehicularThe associated numeric value is 10	unspecified-The associated numeric value is 0.automobile-or-truck-The associated numeric value is 1.airplane-The associated numeric value is 2.bus-The associated numeric value is 3.ferry-The associated numeric value is 4.ship -The associated numeric value is 5.train -The associated numeric value is 6.motor-bike-The associated numeric value is 7.
outdoorThe associated numeric value is 11.	unspecified-The associated numeric value is 0muni-mesh-network-The associated numeric value is 1.city-park-The associated numeric value is 2.rest-area-The associated numeric value is 3.traffic-control-The associated numeric value is 4bus-stop-The associated numeric value is 5kiosk -The associated numeric value is 6

Example

The following commands configure a hotspot profile:

(Instant AP) (config)# hotspot hs-profile hsl
(Instant AP) (Hotspot2.0 "hs1")# enable
(Instant AP) (Hotspot2.0 "hs1")# comeback-mode
(Instant AP) (Hotspot2.0 "hs1")# gas-comeback-delay 10
(Instant AP) (Hotspot2.0 "hs1")# no asra
(Instant AP) (Hotspot2.0 "hs1")# no internet
(Instant AP) (Hotspot2.0 "hs1")# query-response-length-limit 127
(Instant AP) (Hotspot2.0 "hs1")# access-network-type chargeable-public
(Instant AP) (Hotspot2.0 "hs1")# roam-cons-len-1 3
(Instant AP) (Hotspot2.0 "hs1")# roam-cons-oi-1 123456
(Instant AP) (Hotspot2.0 "hs1")# roam-cons-len-2 3
(Instant AP) (Hotspot2.0 "hs1")# roam-cons-oi-2 223355
(Instant AP) (Hotspot2.0 "hs1")# addtl-roam-cons-ois 0
(Instant AP) (Hotspot2.0 "hs1")# venue-group business
(Instant AP) (Hotspot2.0 "hs1")# venue-type research-and-dev-facility
(Instant AP) (Hotspot2.0 "hs1")# pame-bi
(Instant AP) (Hotspot2.0 "hs1")# group-frame-block
(Instant AP) (Hotspot2.0 "hs1")# p2p-dev-mgmt
(Instant AP) (Hotspot2.0 "hs1")# p2p-cross-connect
(Instant AP) (Hotspot2.0 "hs1")# end 

(Instant AP)# commit apply

The following commands associate anqp-3gpp advertisement profile with a hotspot profile:

(Instant AP) (config)# hotspot hs-profile hs1
(Instant AP) (Hotspot2.0"hs1")# advertisement-protocol anpp
(Instant AP) (Hotspot2.0"hs1")# advertisement-profile anqp-3gpp 3gpp1
(Instant AP) (Hotspot2.0"hs1")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and the hotspot profile configuration sub-mode

iap-master

iap-master no...

Description

This command provisions a W-IAP as a master W-IAP.

Syntax

Command/Parameter Description
iap-master	Provisions the W-IAP as a master W-IAP.
no...	Removes the configuration.

Usage Guidelines

Use this command to manually provision a W-IAP as a master W-IAP.

Example

The following example provisions a master IAP:

(Instant AP)#iap-master

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

ids

ids

client-detection-level <type>
client-protection-level <type>
detect-adhoc-network
detect-ap-flood
detect-ap-impersonation
detect-ap-spoofing
detect-bad-wep
detect-beacon-wrong-channel
detect-block-ack-attack
detect-chopchop-attack
detect-client-flood
detect-cts-rate-anomaly
detect-disconnect-sta
detect-eap-rate-anomaly
detect-fatajack
detect-hotspotter-attack
detect-ht-40mhz-intolerance
detect-ht-greenfield
detect-invalid-addresscombination
detect-invalid-mac-oui
detect-malformed-assoc-req
detect-malformed-frame-auth
detect-malformed-htie
detect-malformed-large-duration
detect-omerta-attack
detect-overflow-eapol-key
detect-overflow-ie
detect-power-save-dos-attack
detect-rate-anomalies
detect-rts-rate-anomaly
detect-tkip-replay-attack
detect-unencrypted-valid
detect-valid-clientmisassociation
detect-valid-ssid-misuse
detect-windows-bridge
detect-wireless-bridge
infrastructure-detection-level <type>
infrastructure-protection-level <type>
protect-adhoc-network
protect-ap-impersonation
protect-ssid
protect-valid-sta
protect-windows-bridge
rogue-containment
signature-airjack
signature-asleap
signature-deassociation-broadcast
signature-deauth-broadcast
wired-containment
wireless-containment <type>
no... 

Description

This command configures an IDS policy for a W-IAP.

Syntax

Parameter Description Range	Default
ids	Creates an IDS policy --
client-detection-level	Sets the client detection level. off, low, medium, high	off
client-protection-level	Sets the client protection level.	off, low, medium, high	off
detect-adhoc-network	Enables detection of adhoc networks.	--
detect-ap-flood	Enables detection of flooding with fake W-IAP beacons to confuse the legitimate users and to increase the amount of processing needed on client operating systems.	-	-
detect-ap-impersonation	Enables detection of AP impersonation. In AP impersonation attacks, the attacker sets up an AP that assumes the BSSID and ESSID of a valid AP. AP impersonation attacks can be done for man-in-the-middle attacks, a rogue AP attempting to bypass detection, or a honeypot attack.	-	-
detect-ap-spoofing	Enables AP Spoofing detection.	--
detect-bad-wep	Enables detection of WEP initialization vectors that are known to be weak and/or repeating. A primary means of cracking WEP keys is to capture 802.11 frames over an extended period of time and search for implementations that are still used by many legacy devices.	-	-
detect-beacon-wrong-channel	Enables detection of beacons advertising the incorrect channel.	-	-
detect-block-ack-attack	Enables detection of attempts to reset traffic receive windows using the forged Block ACK Add messages.	-	-
detect-chopchop-attack	Enables detection of ChopChop attack.	--
detect-client-flood	Enables detection of client flood attack.	--
detect-cts-rate-anomaly	Enables detection of CTS rate anomaly.	--
detect-disconnect-sta	Enables a station disconnection attack. In a station disconnection, attacker spoofs the MAC address of either an active client or an active AP. The attacker then sends deauthenticate frames to the target device, causing it to lose its active association.	-	-
detect-eap-rate-anomaly	Enables Extensible Authentication Protocol (EAP) handshake analysis to detect an abnormal number of authentication procedures on a channel and generate an alarm when this condition is detected.	-	-
detect-fatajack	Enables detection of fatjack attacks. - -
detect-hotspotter-attack	Enables detection of hotspot attacks. - -
detect-ht-40mhz-intolerance	Enables detection of 802.11n 40 MHz intolerance setting, which controls whether stations and APs advertising 40 MHz intolerance will be reported.	-	-
detect-ht-greenfield	Enables detection of high throughput devices advertising greenfield preamble capability.	-	-
detect-invalid-addresscombination	Enables detection of invalid address combinations.	-	-
detect-invalid-mac-oui	Enables checking of the first three bytes of a MAC address, known as the organizationally unique identifier (OUI), assigned by the IEEE to known manufacturers. Often clients using a spoofed MAC address do not use a valid OUI and instead use a randomly generated MAC address. Enabling MAC OUI checking causes an alarm to be triggered if an unrecognized MAC address is in use.	-	-
detect-malformed-assoc-req	Enables detection of malformed association requests.	-	-
detect-malformed-frame-auth	Enables detection of malformed authentication frames	-	-
detect-malformed-htie	Enables detection of malformed HT information elements.	-	-
detect-malformed-large-duration	Enables detection of unusually large durations in frames.	-	-
detect-omerta-attack	Enables detection of Omerta attack. - -
detect-overflow-eapol-key	Enables detection of overflow EAPOL key requests.	-	-
detect-overflow-ie	Enables detection of overflow Information Elements (IE).	-	-
detect-power-save-dos-attack	Enables detection of Power Save DoS attack.	-	-
detect-rate-anomalies	Enables detection of rate anomalies. -	-
detect-rts-rate-anomaly	Enables detection of RTS rate anomaly.	--
detect-tkip-replay-attack	Enables detection of TKIP replay attack.	--
detect-unencrypted-valid	Enables detection of unencrypted valid clients.	-	-
detect-valid-clientmisassociation	Enables detection of misassociation between a valid client and an unsafe AP. This setting can detect the following misassociation types:MisassociationToRogueAPMisassociationToExternalAPIMisassociationToHoneypotAPMisassociationToAdhocAPMisassociationToHostedAP	----	----
detect-valid-ssid-misuse	Enables detection of interfering or Neighbor APs using valid or protected SSIDs.	-	-
detect-windows-bridge	Enables detection of Windows station bridging.	-	-
detect-wireless-bridge	Enables detection of wireless bridging.	--
infrastructure-detection-level	Sets the infrastructure detection level.	off, low, medium, high	off
infrastructure-protection-level	Sets the infrastructure protection level.	off, low, medium, high	off
protect-adhoc-network	Enables protection from adhoc networks. When adhoc networks are detected, they are disabled using a denial of service attack	-	-
protect-ap-impersonation	Enables protection from AP impersonation attacks. When AP impersonation is detected, both the legitimate and impersonating AP are disabled using a denial of service attack.	-	-
protect-ssid	Enables use of SSID by valid W-IAPs only.	-	-
protect-valid-sta	Enables protection of valid stations. When enabled valid stations are not allowed to connect to an invalid AP.	-	-
protect-windows-bridge	Enables protection of a windows stationbridging	--
rogue-containment	Controls Rogue APs. When rogue APs are detected, they are not automatically disabled.This option automatically shuts down rogue APs. When this option is enabled, clients attempting to associate to an AP classified as a rogue are disconnected through a denial of service attack.	-	-
signature-airjack	Enables signature matching for the AirJack frame type.	-	-
signature-asleap	Enables signature matching for the ASLEAP frame type.	-	-
signature-deassociation-broadcast	Configures signature matching for the deassociation broadcast frame type.	-	-
signature-deauth-broadcast	Configures signature matching for the deauth broadcast frame type.	-	-
wired-containment	Controls Wired attacks. - -
wireless-containment	Enable wireless containment including Tarpit Shielding.Tarpit shielding works by steering a client to a tarpit so that the client associates with it instead of the AP that is being contained.deauth-only- Enables Containment using deauthentication only .none- Disables wireless containment.tarpit-all-sta-Enables wireless containment by tarpit of all stations.tarpit-non-valid-sta- Enables wireless containment by tarpit of non-valid clients	deauth-only, none, tarpit-all-sta, tarpit-non-valid-sta	deauth-only
no...	Removes any existing configuration. - -

Usage Guidelines

Use this command to configure Intrusion Detection System (IDS) detection and protection policies. The IDS fe monitors the network for the presence of unauthorized W-IAPs and clients and enables you to detect rogue A interfering APs, and other devices that can potentially disrupt network operations. It also logs information about unauthorized W-IAPs and clients, and generates reports based on the logged information.

Wireless Intrusion Protection (WIP) offers a wide selection of intrusion detection and protection features to pro the network against wireless threats. Like most other security-related features of the Dell network, the WIP ca configured on the W-IAP.

You can configure the following policies:

- Infrastructure Detection Policies—Specifies the policy for detecting wireless attacks on access points

• Client Detection Policies— Specifies the policy for detecting wireless attacks on clients
• Infrastructure Protection Policies— Specifies the policy for protecting access points from wireless attacks.
• Client Protection Policies—Specifies the policy for protecting clients from wireless attacks.
• Containment Methods—Prevents unauthorized stations from connecting to your Instant network.

Each of these options contains several default levels that enable different sets of policies. An administrator can customize enable or disable these options accordingly. The following levels of detection can be configured:

• Off
  Low
  Medium
  • High

Example

The following example configures detection and protection policies:

(Instant AP) (config)# ids
(Instant AP) (IDS)# infrastructure-detection-level low
(Instant AP) (IDS)# client-detection-level low
(Instant AP) (IDS)# infrastructure-protection-level low
(Instant AP) (IDS)# client-protection-level low
(Instant AP) (IDS)# wireless-containment deauth-only
(Instant AP) (IDS)# wired-containment
(Instant AP) (IDS)# detect-ap-spoofing
(Instant AP) (IDS)# detect-windows-bridge
(Instant AP) (IDS)# signature-deauth-broadcast
(Instant AP) (IDS)# signature-deassociation-broadcast
(Instant AP) (IDS)# detect-adhoc-using-valid-ssid
(Instant AP) (IDS)# detect-malformed-large-duration
(Instant AP) (IDS)# detect-ap-impersonation
(Instant AP) (IDS)# detect-adhoc-network
(Instant AP) (IDS)# detect-valid-ssid-misuse
(Instant AP) (IDS)# detect-wireless-bridge
(Instant AP) (IDS)# detect-ht-40mhz-intolerance
(Instant AP) (IDS)# detect-ht-greenfield
(Instant AP) (IDS)# detect-ap-flood
(Instant AP) (IDS)# detect-client-flood
(Instant AP) (IDS)# detect-bad-wep
(Instant AP) (IDS)# detect-cts-rate-anomaly
(Instant AP) (IDS)# detect-rts-rate-anomaly
(Instant AP) (IDS)# detect-invalid-addresscombination
(Instant AP) (IDS)# detect-malformed-htie
(Instant AP) (IDS)# detect-malformed-assoc-req
(Instant AP) (IDS)# detect-malformed-frame-auth
(Instant AP) (IDS)# detect-overflow-ie
(Instant AP) (IDS)# detect-overflow-eapol-key
(Instant AP) (IDS)# detect-beacon-wrong-channel
(Instant AP) (IDS)# detect-invalid-mac-oui
(Instant AP) (IDS)# detect-valid-clientmisassociation
(Instant AP) (IDS)# detect-disconnect-sta
(Instant AP) (IDS)# detect-omerta-attack
(Instant AP) (IDS)# detect-fatajack
(Instant AP) (IDS)# detect-block-ack-attack
(Instant AP) (IDS)# detect-hotspotter-attack
(Instant AP) (IDS)# detect-unencrypted-valid
(Instant AP) (IDS)# detect-power-save-dos-attack
(Instant AP) (IDS)# detect-eap-rate-anomaly
(Instant AP) (IDS)# detect-rate-anomalies
(Instant AP) (IDS)# detect-chopchop-attack 

(Instant AP) (IDS) # detect-tkip-replay-attack
(Instant AP) (IDS) # signature-airjack
(Instant AP) (IDS) # signature-asleap
(Instant AP) (IDS) # protect-ssid
(Instant AP) (IDS) # rogue-containment
(Instant AP) (IDS) # protect-adhoc-network
(Instant AP) (IDS) # protect-ap-impersonation
(Instant AP) (IDS) # protect-valid-sta
(Instant AP) (IDS) # protect-windows-bridge
(Instant AP) (IDS) # end
(Instant AP) # commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and IDS configuration sub-mode.

ignore-image-check

ignore-image-check

Description

This command ignores the automatic image check feature. The automatic image check feature automatically checks for a new version of Instant on the image server, once after the AP boots up and every week therea

Usage Guidelines

Use this command to disable the automatic image check feature:

Example

The following example disables the image check feature:

(Instant AP)# ignore-image-check

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

inactivity-ap-timeout

inactivity-ap-timeout no...

Description

This command configures the timeout interval for inactive user sessions.

Syntax

Parameter Description Range Default
inactivity-ap-timeout	Configures the inactivity timeout interval in seconds. 1-1000 1000
no...	Removes any existing configuration. --

Usage Guidelines

Use this command to configure an inactivity timeout interval for a W-IAP.

Example

The following example configures the inactivity timeout interval:

(Instant AP)(config)# inactivity-ap-timeout 180 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

inbound-firewall

inbound-firewall

rule {permit|deny|src-nat|dst-nat ip } [] no...

Description

This command configures inbound firewall rules based on the source subnet.

Syntax

Command/Parameter Description	Range Default
inbound-firewall	Opens the inbound firewall configuration mode.	-	-
rule	Creates an access rule.You can create up to 128 access rules.However, it is recommended to delete any existing configuration and apply changes at regular intervals.	-	-
	Allows you to specify the source subnet IP address	-	-
	Specifies the subnet mask of the source IP address.	-	-
	Allows you to specify the destination IP address.	-	-
	Specifies the subnet mask for the destination IP address.	-	-
	match-Indicates if the rule specific to the destination IP address and subnet mask matches the value specified for protocol.invert-Indicates if the rule allows or denies traffic with an exception to the specified destination IP address and subnet mask.	match invert	-
	Configures any of the following:Protocol number between 0-255any: any protocoltcp: Transmission Control Protocoludp: User Datagram Protocol	1-255	-
	Specifies the starting port number from which the rule applies.	1-65534	-
	Specifies the ending port number until which the rule applies	1-65534	-
dst-nat	Allows the W-IAP to perform destinationNAT on packets.	--
src-nat	Allows the W-IAP to perform source NAT-on packets. When configured, the source IP changes to the outgoing interface IP address (implied NAT pool) or from the pool configured (manual NAT pool).	-	-
ip	Specifies the destination NAT IP address for the specified packets when dst-nat action is configured.	-	-
	Specifies the destination NAT port for the-specified packets when dst-nat action is configured.	-	-
deny	Creates a rule to reject the specified packets	-	-
	Allows you to specify any of the following-options:Log –Creates a log entry when this rule is triggered.Blacklist – Blacklists the client when this rule is triggered.Classify-media – Performs a packet inspection on all non-NAT traffic and marks the critical traffic.Disable-scanning – Disables ARM scanning when this rule is triggered.DSCP tag – Specifies a DSCP value to prioritize traffic when this rule is triggered.802.1p priority – Sets an 802.1p priority.	-	-
no...	Removes the configuration – –

Usage Guidelines

Use this command to configure inbound firewall rules for the inbound traffic coming through the uplink ports of IAP. The rules defined for the inbound traffic are applied if the destination is not a user connected to the W-IAP. If the destination already has a user role assigned, the user role overrides the actions or options specified in inbound firewall configuration. However, if a deny rule is defined for the inbound traffic, it is applied irrespective of the destination and user role. Unlike the ACL rules in a WLAN SSID or wired profile, the inbound firewall rules are configured based on the source subnet.

For all subnets, a deny rule is created by default as the last rule. If at least one rule is configured, the deny all rule is applied to the upstream traffic by default.

Management access to the AP is allowed irrespective of the inbound firewall rule. For more information on configuring restricted management access, see restricted-mgmt-access.

The inbound firewall is not applied to traffic coming through GRE tunnel.

Example

The following example configures inbound firewall rules:

(Instant AP) (config)# inbound-firewall
(Instant AP) (inbound-firewall)# rule 192.0.2.1 255.255.255.255 any any match 6 631 631 permit
(Instant AP) (inbound-firewall)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and inbound firewall configuration sub-mode

internal-domains

internal-domains domain-name no...

Description

This command configures valid domain names for the enterprise network.

Syntax

Parameter Description Range Default
internal-domains	Enables the internal-domain configuration sub-mode	-	-
domain-name	Defines the valid domain names --
no...	Removes any existing configuration --

Usage Guidelines

Use this command to configure the DNS domain names that are valid on the enterprise network. This list is determining how the client DNS requests should be routed. When Content Filtering is enabled, the DNS request of the clients is verified and the domain names that do not match the names in the list are sent to the open [

Example

The following example configures the internal domains for a network:

(Instant AP)(config)# internal-domains (Instant AP)(domain)# domain-name www.example.com (Instant AP)(domain)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and domains configuration sub-mode

ip-address

ip-address

Description

This command configures an IP address for the W-IAP.

Syntax.

Parameter Description
	Assigns an IP address to the W-IAP.
	Specifies the subnet mask.
	Specifies the gateway IP address.
	Specifies the DNS server IP address.
	Specifies the domain name.

Usage Guidelines

Use this command to assign a static IP address to the W-IAP.

Example

The following example configures an IP address for the W-IAP.

(Instant AP)# ip-address 192.0.2.0 255.255.255.0 192.0.2.3 192.0.2.2 example.com

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

ip dhcp

ip dhcp <dhcp_profile>
    bid <bid>
    client-count <idx>
    default-router <default_router>
    dhcp-relay
    dhcp-server <dhcp_server>
    disable-split-tunnel
    dns-server <dns_server>
    domain-name <domain-name>
    exclude-address <exclude_address>
    host <mac>
    ip-range <start_IP> <end_IP>
    lease-time <lease_time>
    option <option_type> <option_value>
    option82 alu
    reserve {first <count>| last <count>}
    server-type <server_type>
    server-vlan <idx>
    subnet <subnet>
    subnet-mask <Subnet-Mask>
    vlan-ip <VLAN_IP> mask <VLAN mask>
    no... 

Description

This command configures DHCP assignment modes and scopes for Instant network.

Syntax

Parameter Description	Range Default
ip dhcp	Creates a DHCP profile with a unique name.	-	-
bid	Defines the branch ID.NOTE: You can allocate multiple branch IDs (BID) per subnet. The W-IAP generates a subnet name from the DHCP IP configuration, which the controller can use as a subnet identifier. If static subnets are configured in each branch, all of them are assigned the with BID 0, which is mapped directly to the configured static subnet.	-	-
client-count	Defines the number of clients allowed per DHCP branch.NOTE: The client count configured for a branch determines the use of IP addresses from the IP address range defined for a DHCP scope. For example, if 20 IP addresses are available in an IP address range configured for a DHCP scope and a client count of 9 is configured, only a few IP addresses (in this example, 9) from this range will be used andallocated to a branch. The W-IAP does not allow the administrators to assign the remaining IP addresses to another branch, although a lower value is configured for the client count.	-	-
default-router	Defines the IP address of the default router for the Distributed, L2 DHCP scope.	-	-
dhcp-relay	Enables the W-IAPs to intercept the broadcast packets and relay DHCP requests directly to corporate network.The DHCP relay is enabled for the centralized DHCP scopes to reduce network traffic caused by the broadcasting of DHCP requests to the corporate network. With a centralized DHCP scope, the clients in the branch are in the same subnet as clients in the corporate network. Normally the DHCP request goes through the VPN tunnel and is broadcast into the corporate network. This feature allows it to succeed without requiring to broadcast and thus reduces the network traffic.	-	-
dhcp-server	Defines the IP address of the corporate -DHCP server for DHCP request relay.	-	-
disable-split-tunnel	Disables split tunnel functionality for Centralized L2 subnets.Split tunneling allows a VPN user to access a public network and a local LAN or WAN network at the same time through the same physical network connection.When split-tunnel is disabled, all the traffic including the corporate and Internet traffic is tunneled irrespective of the routing profile specifications. If the GRE tunnel is down and when the corporate network is not reachable, the client traffic is dropped.	-	-
dns-server	Defines the DNS server IP address. -	-
domain-name	Defines the domain name.	--
host	Allows you to specify the host MAC address.	-	-
exclude-address	Defines the IP address to exclude for the Local,L3 DHCP scope. The valueentered in the field determines the exclusion range of the subnet. Based on the size of the subnet, the IP addresses that come before or after the IP address value specified in this field are excluded.	-	-
ip-range	Defines a range of IP addresses to use-in the distributed,I2 and distributed,I3 DHCP scopes. You can configure a range of DHCP IP addresses used in the branches and the number of client addresses allowed per branch. You can also specify the IP addresses that must be excluded from those assigned to clients, so that they are assigned statically. You can configure up to four different ranges of IP addressesFor Distributed,L2 mode, ensure that all IP ranges are in the same subnet as the default router. On specifying the IP address ranges, a subnet validation is performed to ensure that the specified ranges of IP address are in the same subnet as the default router and subnet mask. The configured IP range is divided into blocks based on the configured client count.For Distributed,L3 mode, you can configure any discontinuous IP ranges. The configured IP range is divided into multiple IP subnets that are sufficient to accommodate the configured client count.		-
lease-time	Defines a lease time for the client in minutes.	-720
option	Defines the type and a value for the DHCP option to use.You can configure up to eight DHCP options supported by the DHCP server and enter the option value in "" not exceeding 255 characters.	-	-
option82 alu	Enables the DHCP Option 82 for the Centralized,I2 DHCP scope to allow clients to send DHCP packets with the Option 82 string.	-	-
reserve {firstlast}	Reserves the first few and last few IP addresses in the subnet.	-	-
server-type	Defines any of the following DHCP distributed,I2, local
	assignment modes:• Distributed, L2• Distributed, L3• Local• Local, L3• Centralized, L2• Centralized, L3	distributed,I3,local,local,I3,centralized,I2,centralized,I3
server-vlan	Configures a VLAN ID for the DHCP scope. To use this subnet, ensure that the VLAN ID specified here is assigned to an SSID profile.	1-4093 -
subnet	Defines the network IP address	-	-
subnet-mask	Defines the subnet mask for Local,Local,L3, and distributed,I3 DHCP scopes. The subnet mask and the network determine the size of subnet.	-	-
vlan-idmask	Defines the IP address and subnet mask for vlan of the DHCP server.	-	-
no...	Removes any existing configuration.	-	-

Usage Guidelines

Use this command to configure the DHCP address assignment for the branches connected to the corporate n through VPN. You can configure the following types of DHCP profiles.

- Distributed, L2 – In this mode, the Virtual Controller acts as the DHCP server, but the default gateway is in the data center. Based on the number of clients specified for each branch, the range of IP addresses is divided. Based on the IP address range and client count configuration, the DHCP server in the Virtual Controller controls a scope that is a subset of the complete IP Address range for the subnet distributed across all the branches. This DHCP Assignment mode is used with the L2 forwarding mode.

- Distributed, L3 – In this mode, the Virtual Controller acts as the DHCP server and the default gateway. Based on the number of clients specified for each branch, the range of IP addresses is divided. Based on the IP address range and client count configuration, the DHCP server in the Virtual Controller is configured with a unique subnet and a corresponding scope.

- Local – In this mode, the Virtual Controller acts as both the DHCP Server and the default gateway. The configured subnet and the corresponding DHCP scope are independent of subnets configured in other W-IAP clusters. The Virtual Controller assigns an IP address from a local subnet and forwards traffic to both corporate and non-corporate destinations. The network address is translated appropriately and the packet is forwarded through the IPSec tunnel or through the uplink. This DHCP assignment mode is used for the NAT forwarding mode.

- Local, L3— In this mode, the Virtual Controller acts as a DHCP server and the gateway, and assigns an IP address from the local subnet. The W-IAP routes the packets sent by clients on its uplink. This mode does not provide corporate access through the IPsec tunnel. This DHCP assignment mode is used with the L3 forwarding mode.

- Centralized, L2–When a Centralized, L2 DHCP scope is configured, the Virtual Controller bridges the DHCP traffic to the controller over the VPN/GRE tunnel. The IP address is obtained from the DHCP server behind the

controller serving the VLAN/GRE of the client. This DHCP assignment mode also allows you to add the D option 82 to the DHCP traffic forwarded to the controller.

- Centralized, L3–For Centralized, L3 clients, the Virtual Controller acts as a DHCP relay agent that forwards the DHCP traffic to the DHCP server located either in the corporate or local network. The centralized L3 VLAN used as the source IP. The IP address is obtained from the DHCP server.

Example

The following example configures a distributed,12 DHCP scope:

(Instant AP)(config)# ip dhcp corpNetwork1
(Instant AP)(DHCP Profile"corpNetwork1")# ip dhcp server-type distributed,12
(Instant AP)(DHCP Profile"corpNetwork1")# server-vlan 1
(Instant AP)(DHCP Profile"corpNetwork1")# subnet 192.0.1.0
(Instant AP)(DHCP Profile"corpNetwork1")# subnet-mask 255.255.255.0
(Instant AP)(DHCP Profile"corpNetwork1")# default-router 192.0.1.1
(Instant AP)(DHCP Profile"corpNetwork1")# client-count 0
(Instant AP)(DHCP Profile"corpNetwork1")# dns-server 192.0.1.2
(Instant AP)(DHCP Profile"corpNetwork1")# domain-name www.example.com
(Instant AP)(DHCP Profile"corpNetwork1")# lease-time 1200
(Instant AP)(DHCP Profile"corpNetwork1")# ip-range 192.0.1.0 192.0.1.17
(Instant AP)(DHCP Profile"corpNetwork1")# reserve first 2
(Instant AP)(DHCP Profile"corpNetwork1")# option 176
"MCIPADD=10.72.80.34,MCPORT=1719,TFTPSRVR=10.80.0.5,L2Q=1,L2QVLAN=2,L2QAUD=5,L2QSIG=3"
(Instant AP)(DHCP Profile"corpNetwork1")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and IP DHCP profile configuration sub-mode.

ip dhcp pool

ip dhcp pool
dns-server <IP-address>
domain-name <domain-name>
lease-time <minutes>
subnet <IP-address-subnet>
subnet-mask <Subnet_Mask>
no... 

Description

This command configures a DHCP pool on the Virtual Controller.

Syntax

Parameter Description	Range Default
dns-server	Defines the IP address of the DNS server. You can-specify up to eight IP addresses as a comma separated list.	-	-
domain-name	Defines the name of domain to which the client belongs.	-	-
lease-time	Configures the duration of the DHCP lease in minutes.	-	720
subnet	Defines IP address of the subnet.	-	-
subnet-mask	Defines the subnet mask of the IP address,	-	-
no...	Removes any existing configuration	-	-

Usage Guidelines

Use this command to configure a DHCP pool. The DHCP server is a built-in server, used for networks in which clients are assigned IP address by the Virtual Controller. You can customize the DHCP pool subnet and address range to provide simultaneous access to more number of clients. The pool can support up to 2048 addresses. The default size of the IP address pool is 512. When a W-IAP receives a DHCP request from a client, it examines the origin of the request to determine if it a response must be sent. If the IP address of the VLAN matches a configured DHCP pool, the W-IAP answers the request.

Example

The following command configures a DHCP pool:

(Instant AP)(config)# ip dhcp pool
(Instant AP)(DHCP)# domain-name example.com
(Instant AP)(DHCP)# dns-server 192.0.2.1
(Instant AP)(DHCP)# lease-time 20
(Instant AP)(DHCP)# subnet 192.0.2.0
(Instant AP)(DHCP)# subnet-mask 255.255.255.0
(Instant AP)(DHCP)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and IP DHCP configuration sub-mode.

I2tpv3 session

12tpv3 session <12tpv3_session_profile>
cookie len <len_of_cookie> value <cookie_val>
default-12-specific-sublayer
12tpv3 tunnel <12tpv3_tunnel_prof_to_associate>
tunnel-ip <local_ip_addr_tunnel> mask <tunnel_mask> vlan <tunnel_mgmt_vlan>
no... 

Description

This command configures an Layer-2 Tunnel Protocol (L2TP) session profile.

Syntax

Parameter Description Range Default
12tpv3 session	Configures the session profile name.	-	-
cookie lenvalue	Configures the length and alphanumeric value for the cookie.	Length: 4/8If cookie length is 4, the cookie value should have exactly 8 hexadecimal characters.If cookie length is 8, the cookie value should have exactly 16 hexadecimal characters	Not set.
default-12-specific-sublayer	Enables the default I2 specific sublayer in the L2TPV3 session.
12tpv3 tunnel<12tpv3_tunnel_prof_to_associate>	Selects the tunnel profile name where the session will be associated.	-	-
tunnelmaskvlan	Configures the local IP address, network mask, and VLAN ID of the tunnel.	2-4094	-
no...	Removes the configuration.	--

Usage Guidelines

Use this command to configure the session to carry the L2TP data.

Example

The following example configures the L2TPv3 session:

(Instant AP)(config) # 12tpv3 session test_session
(Instant AP)(L2TPv3 Session Profile "test_session")# cookie len 4 value 12345678 

(Instant AP) (L2TPv3 Session Profile "test_session")# 12tpv3 tunnel test_tunnel (Instant AP) (L2TPv3 Session Profile "test_session")# tunnel-ip 1.1.1.1 mask 255.255.255.0 vlan 2 (Instant AP) (L2TPv3 Session Profile "test_session")# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
W-IAP108	Configuration mode and L2TPV3 session profile configuration sub-mode.
W-IAP109
W-IAP135

I2tpv3 tunnel

12tpv3 tunnel <12tpv3_tunnel_profile>
    backup peer-address <peer_IP_address_backup_tunnel>
    checksum
    failover-mode <mode>
    failover-retry-count <retry_count>
    failover-retry-interval <interval_in_sec>
    hello-timeout <interval_in_sec>
    local-port <local_udp_port>
    message-digest-type <digest_algo>
    mtu <tunnel_MTU>
    peer-port <peer_udp_port>
    primary peer-address <peer_IP_address_primary_tunnel>
    secret-key <key>
    no... 

Description

This command configures an L2TP tunnel profile.

Syntax

Parameter Description Range Default
12tpv3 tunnel	Configures the tunnel profile name and allows you to enter the L2TP tunnel sub-configuration mode.	-	-
backup peer-address	Assigns IP address of the remote end backup tunnel.	-	-
checksum	Enables the generation of UDP checksums in packets sent to L2TP peer IP address.	-	-
failover-mode	Assigns the backup/primary tunnel failover mode.	preemptive, non-preemptive	preemptive
failover-retry-count	Assigns the number of failover attempts.	0-5	0
failover-retry-interval	Assigns the interval between each failover attempt.	60-300 seconds	60
hello-timeout	Configures the interval (in seconds) at which hello packets are routed in the tunnel.	5-300	60
local-port	Assigns the local UDP port number of the client.	1-65535 1701
message-digest-type	Configures the message digest to be used to create the MD AVP.	MD5, SHA1, none MD5
mtu	Configures a Maximum Transmission Unit (MTU) value for the tunnel.	1-65535 1460
peer-port	Assigns a UDP server port to the remote end.	1-65535 1701
primary peer-address	Assigns IP address of the remote end tunnel.	-	-
secret-key	Configures a shared key to use for message digest.	-	-

Usage Guidelines

Use this command tunnel data or traffic to L2TP Network Server (LNS).

Example

The following example configures the L2TPv3 tunnel:

(Instant AP)(config)# 12tpv3 tunnel test_tunnel
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# primary peer-address 10.0.0.65
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# backup peer-address 10.0.0.63
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# failover-mode non-preemptive
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# failover-retry-count 5
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# failover-retry-interval 80
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# hello-timeout 150
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# mtu 1570
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# peer-port 3000
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# secret-key test123
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# end
(Instant AP) # commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform	Command Mode
W-IAP108	Configuration mode and L2TPV3 tunnel configuration sub-mode
W-IAP109
W-IAP135

I3-mobility

13-mobility

home-agent-load-balancing
virtual-controller <IP-address>
subnet <IP-address-subnet> <subnet-mask> <vlan> <virtual-controller-IP-address>
no... 

Description

This command configures Layer-3 mobility on a W-IAP.

Syntax

Parameter Description Range Default
13-mobility	Enables Layer-3 mobility configuration sub-mode.	-	-
home-agent-load-balancing	Enables home agent load balancing.When enabled, the Virtual Controller assigns the home AP for roamed clients by using a round robin policy. With this policy, the load for the APs acting as Home Agents for roamed clients is uniformly distributed across the W-IAP cluster.	- Disabled
virtual-controller	Adds the IP address of a Virtual Controller to-the mobility domain.In the typical deployment scenario, all the APs are configured in one subnet and all the clients in another subnet.You can also deploy APs across different subnets, in which case the APs in each subnet will form a cluster with its own Virtual Controller IP address. To allow clients to roam seamlessly among all the APs, the Virtual Controller IP for each of the foreign subnets must be configured for each W-IAP cluster.	-	-
	Configures the IP address for the subnets support in a W-IAP cluster.	-	-
subnet	Specifies the subnet mask.	--
	Assigns the VLAN applicable to the W-IAP cluster.	1-4093	-
	Specifies the IP address of the Virtual Controller in a W-IAP cluster.	-	-
no...	Removes the configuration.	--

Usage Guidelines

Use this command to configure layer-3 mobility domains on a W-IAP.

Example

The following example configures L3-mobility:

(Instant AP) (config)# 13-mobility

(Instant AP) (L3-mobility)# home-agent-load-balancing

(Instant AP)(L3-mobility)# virtual-controller 192.0.2.1

(Instant AP)(L3-mobility)# subnet 192.0.2.2 255.255.255.0 1 192.0.2.1

(Instant AP) (L3-mobility)# end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and L3 mobility configuration sub-mode.

led-off

led-off

no...

Description

This command disables LED display on a W-IAP.

Syntax

Command/Parameter Description
led-off	Disables LED display.
no...	Re-enables LED display.

Usage Guidelines

Use this command to disable the LED display.

Example

The following example disables LED display on a W-IAP:

(Instant AP) (config)# led-off

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

logout

logout

Description

This command logs you out of the current CLI session.

Usage Guidelines

Use this command to log out of the current CLI session and return to the user login prompt.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

mas-integration

mas-integration no...

Description

This command enables Mobility Access Switch integration on a W-IAP.

Syntax

Parameter Description
mas-integration	Enables you to integrate the W-IAP with a Mobility Access Switch.
no...	Removes the configuration.

Usage Guidelines

Use this command to integrate Mobility Access Switch with a W-IAP.

You can integrate a W-IAP with a Mobility Access Switch by connecting it directly to the switch port. The foll Mobility Access Switch integration features can be applied while integrating with a W-IAP:

• Rogue AP containment—When a rogue AP is detected by a W-IAP, it sends the MAC Address of the rogue AP to the Mobility Access Switch. The Mobility Access Switch blacklists the MAC address of the rogue AP an turns off the PoE on the port.
• PoE prioritization—When a W-IAP is connected directly into the Mobility Access Switch port, the Mobility Access Switch port increases the PoE priority of the port. This is done only if the PoE priority is set by the Mobility Access Switch.

The PoE Prioritization and Rogue AP Containment features is available for ArubaOS 7.2 release on Dell Mobil Access Switches.

- GVRP Integration—Configuring GARP VLAN Registration Protocol (GVRP) enables the switch to dynamically register or de-register VLAN information received from a GVRP applicant such as a W-IAP. GVRP also en the switch to propagate the registered VLAN information to the neighboring switches in the network.

The associated static VLANs in the wired and wireless profiles are propagated to the upstream Mobility Access Switch using GVRP messages.

When a W-IAP is integrated with a Mobility Access Switch, the Link Layer Discovery Protocol (LLDP) is enabled. Using this protocol, the W-IAPs instruct the Mobility Access Switch to turn off the ports where rogue APs are connected, perform actions such as increasing the PoE priority, and configure the VLANs on the ports to which W-IAPs are connected.

Example

The following example enables Mobility Access Switch integration for a W-IAP:

(Instant AP) (config)# mas-integration (Instant AP) (config# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

mesh

mesh no...

Description

This command sets up mesh network on a W-IAP.

Syntax

Parameter Description
mesh	Enables mesh network on the W-IAP.
no...	Removes the configuration.

Usage Guidelines

Use this command to set up mesh network on a W-IAP. Mesh network requires at least one valid uplink (wil connection. Any provisioned W-IAP that has a valid uplink (wired or 3G) functions as a mesh portal, and the without an Ethernet link functions as a mesh point. The mesh portal can also act as a Virtual Controller. A I portal (MPP) uses its uplink connection to reach the Virtual Controller, a mesh point, or establishes an all wil path to the mesh portal. Mesh portals and mesh points are also known as mesh nodes, a generic term used describe W-IAPs configured for mesh.

Mesh W-IAPs detect the environment when they boot up, locate and associate with their nearest neighbor, to determine the best path to the mesh portal.

Instant mesh functionality is supported only on dual radio W-IAPs only. On dual-radio W-IAPs, the 5 GHz rad always used for both mesh-backhaul and client traffic, while the 2.4 GHz radio is always used for client traffic

Mesh service is automatically enabled on 802.11a band for dual-radio W-IAP only, and this is not configurable

The mesh network must be provisioned for the first time by plugging into the wired network. After that, mesh on W-IAP ROWs like any other regulatory domain.

Example

The following example enables mesh network on a W-IAP:

(Instant AP)(config)# mesh (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

mgmt-accounting

mgmt-accounting command all no...

Description

This command is used to enable accounting privileges on TACACS+ servers for management users.

Syntax

Parameter Description
mgmt-accounting command all	Configures TACACS+ servers to enable accounting for management users.
no...	Removes the configuration.

Usage Guidelines

Use this command to record the user name of the management users and the respective IP address sending request to account for the usage of the authorized network services.

Example

The following example configures a TACACS+ server for management accounting

(Instant Access Point)(config)# mgmt-accounting command all tacacs1 (Instant Access Point)(config)# end (Instant Access Point)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

mgmt-auth-server

mgmt-auth-server no...

Description

This command configures authentication servers for management user interface of the Virtual Controller.

Syntax

Parameter Description
mgmt-auth-server	Configures a server for management user authentication.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure a management authentication server for administrator users of a Virtual Control

Example

The following example configures an authentication server for the management user interface:

(Instant AP)(config)# mgmt-auth-server server1 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

mgmt-auth-server-load-balancing

mgmt-auth-server-load-balancing no...

Description

This command enables load balancing when two authentication servers are configured for management user authentication.

Syntax

Parameter Description
mgmt-auth-server-load-balancing	Enables load balancing between the primary and the backup authentication servers
no...	Removes the configuration.

Usage Guidelines

Use this command to enable load-balancing when two servers are configured.

Example

The following example enables load-balancing between two authentication servers.

(Instant AP) (config)# mgmt-auth-server-load-balancing
(Instant AP) (config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

mgmt-auth-server-local-backup

mgmt-auth-server-local-backup no...

Description

Configures a secondary internal authentication server that will validate the management interface user credential runtime.

Syntax

Parameter Description
mgmt-auth-server-local-backup	Configures a backup internal server for management user authentication.When enabled, the authentication switches to Internal if there is response from the RADIUS server (RADIUS server timeout).
no...	Removes the configuration.

Usage Guidelines

Use this command to configure a backup authentication server for the Virtual Controller management interface.

Example

The following example configures a backup internal authentication server:

(Instant AP) (config)# mgmt-auth-server-local-backup (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

mgmt-user

mgmt-user [] []

Description

This command configures user credentials for access to the Virtual Controller Management User Interface.

Syntax

Parameter Description
mgmt-user	Configures administrator credentials.
	Creates a User name for the administrator user.
	Creates a password for the administrator user.
	Indicates the type of the user. For example, users with read-only privilege or the guest management user.

Usage Guidelines

Use this command to configure administrator credentials to access and configure the W-IAP.

Example

The following example configures administrator login credentials for the W-IAP management interface:

(Instant AP)(config)# mgmt-user User1 Password123 guest-mgmt (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

name

name

Description

This command configures a unique name for the W-IAP.

Syntax

Parameter Description
name	Configures a name for the W-IAP or the Virtual Controller.

Usage Guidelines

Use this command to configure a name for the W-IAP:

Example

The following example configures a name for the W-IAP:

(Instant AP)# hostname

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

ntp-server

ntp-server no...

Description

This command configures NTP server for a W-IAP.

Syntax

Parameter Description Default
ntp-server	Configures the IP address or the URL (domain name) the NTP server.	pbol.ntp.org
no	Removes the configuration –

Usage Guidelines

The Network Time Protocol (NTP) helps obtain the precise time from a server and regulate the local time in network element. If NTP server is not configured in the Instant network, a W-IAP reboot may lead to variation data.

Example

The following command configures an NTP server for a W-IAP:

(Instant AP) (config)# ntp-server (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

opendns

opendns no...

Description

This command configures OpenDNS credentials for filtering content and to create Internet access policies that or deny user access to websites based on website categories and security ratings.

Syntax

Parameter Description
opendns	Configures user credentials to enable access to OpenDNS to provide enterprise-level content filtering.
	Configures user name to access OpenDNS.
	Configures password to access OpenDNS.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure OpenDNS credentials to allow Instant to filter content at the enterprise-level.

Example

The following example configures OpenDNS credentials:

(Instant AP)(config)# opendns <username (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

organization

organization no...

Description

This command configures an organization string for W-IAPs managed or monitored by the W-AirWave Manage console.

Syntax

Parameter Description	Range
organization	Specifies the name of your organization.	You can use any of the following strings:AMP Role- "Org Admin" (initially disabled)AMP User- "Org Admin"(assigned to the role "Org Admin")Folder- "Org" (under the Top folder in AMP)Configuration Group- "Org"You can also assign additional strings to create a hierarchy of sub folders under the folder named "Org": For example:subfolder1 for a folder under the "Org" foldersubfolder2 for a folder under subfolder1
no...	Removes the configuration settings. -

Usage Guidelines

Use this command to specify an organization string for integrating the W-AirWave Management Server with the IAP. The organization is a set of colon-separated strings created by the W-AirWave administrator to accurately represent the deployment of each W-IAP. This string is defined by the installation personnel on the site.

Example

The following command configures a W-AirWave organization string:

(Instant AP) (config)# organization dell

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

ping

ping

Description

This command sends ICMP echo packets to the specified IP address.

Syntax

Parameter Description
	Displays the IP address of the host.

Usage Guidelines

You can send up to five ICMP echo packets to a specified IP address. The W-IAP times out after two secor

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

pppoe-uplink-profile

pppoe-uplink-profile <profile>
pppoe-username <username>
pppoe-passwd <password>
pppoe-svcname <svcname>
pppoe-chapsecret <password>
pppoe-unnumbered-local-13-dhcp-profile <dhcp-profile>
no... 

Description

Use this command to configure PPPoE uplink profile.

Syntax

Parameter Description
pppoe-uplink-profile	Creates an uplink profile and enables the PPPoE uplink profile configuration mode.
pppoe-username	Configures a user name to allow a user to log into the DSL network.
pppoe-passwd	Configures a password for the user to log into the DSL network.
pppoe-svcname	Specifies the PPPoE service provided by your service provider.
pppoe-chapsecret	Configures a secret key used for Challenge Handshake Authentication Protocol (CHAP) authentication.You can use a maximum of 34 characters for the CHAP secret key.
pppoe-unnumbered-local-13-dhcp-profile	Configures the Local,L3 DHCP gateway IP address as the local IP address of the PPPoE interface. When configured, the local interface acts as an unnumbered PPPoE interface and allows the entire Local,L3 DHCP subnet to be allocated to clients.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure PPPoE uplink connection for a W-IAP.

Example

The following example configures the PPPoE uplink on a W-IAP:

(Instant AP) (config) # pppoe-uplink-profile
(Instant AP) (pppoe-uplink-profile)# pppoe-username User1
(Instant AP) (pppoe-uplink-profile)# pppoe-passwd Password123
(Instant AP) (pppoe-uplink-profile)# pppoe-svcname internet03
(Instant AP) (pppoe-uplink-profile)# pppoe-chapsecret 8e87644deda9364100719e017f88ebce
(Instant AP) (pppoe-uplink-profile)# pppoe-unnumbered-local-13-dhcp-profile dhcpProfile1
(Instant AP) (pppoe-uplink-profile)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2- 4.1	This command is modified.
Dell Networking W-Series Instant 6.2.1.0- 3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and PPPoE uplink profile configuration sub-mode.

proxy

proxy {exception | server }

Description

This command configures HTTP proxy settings.

Syntax

Parameter Description
exception	Sets the IP address or the domain name of the host to be added under the exception list.
server	Sets the HTTP proxy server's IP address or domain name and the port number.

Usage Guidelines

This command configures the HTTP proxy settings in a W-IAP to download the image from the cloud server.

Example

The following example configures an HTTP proxy settings in a W-IAP:

(Instant AP)(config)# proxy exception 192.0.2.2
(Instant AP)(config)# proxy server 192.0.2.1 8080
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

reload

reload

Description

This command performs a reboot of the Virtual Controller.

Syntax

Parameter Description
	Reloads all W-IAPs in a cluster.

Usage Guidelines

Use this command to reboot a W-IAP after making configuration changes or under the guidance of Dell Netw customer support. The reload command powers down the W-IAP, making it unavailable for configuration. After W-IAP reboots, you can access it via a local console connected to the serial port, or through an SSH, Telne session. If you need to troubleshoot the W-IAP during a reboot, use a local console connection.

After you use the reload command, the W-IAP prompts you to confirm this action. If you have not saved you configuration, the W-IAP returns the following message:

Do you want to save the configuration (y/n):

• Enter y to save the configuration.
• Enter n to not save the configuration.
• Press [Enter] to exit the command without saving changes or rebooting the W-IAP.

If your configuration has already been saved, the W-IAP returns the following message:

Do you really want to reset the system(y/n):

• Enter y to reboot the W-IAP.
• Enter n to cancel this action.

The command will timeout if you do not enter y or n.

Example

The following command assumes you have already saved your configuration and you must reboot the W-IAP:

The W-IAP returns the following messages:

Do you really want to reset the system(y/n): y

System will now restart!

...

Restarting system.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

remove-blacklist-client

remove-blacklist-client

Description

This command allows you to delete the clients that are blacklisted.

Syntax

Parameter Description
MAC-address	Adds the MAC address of the blacklisted client.
AP_name	Adds the access point name to which the client is connected to.
no...	Removes the specified configuration parameter.

Usage Guidelines

Use this command to remove the entries for the clients that are dynamically blacklisted.

Example

The following command deletes the blacklisted W-IAP client entries:

(Instant AP) (config)# remove-blacklist-client d7:a:b2:c3:45:67 AP125

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

restrict-corp-access

restrict-corp-access no...

Description

This command configures restricted access to the corporate network.

Syntax

Parameter Description
no...	Removes the configuration.

Usage Guidelines

Use this command to configure restricted corporate to block unauthorized users from accessing the corporate network. When restricted corporate access is enabled, corporate access is blocked from the uplink port of ma W-IAP, including clients connected to a slave W-IAP.

Example

The following example enables restricted access to the corporate network;

(Instant AP)(config) # restrict-corp-access
(Instant AP)(config) # end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

restricted-mgmt-access

restricted-mgmt-access no...

Description

This command configures management subnet on a W-IAP.

Syntax

Parameter Description
subnet	Configures a management subnet address.
mask	Configures the subnet mask for the management subnet address.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure management subnets. This ensures that the W-IAP management is carried out from these subnets. When the management subnets are configured, Telnet, SSH, and UI access is restricted these subnets only.

Example

The following example configures a management subnet;

(Instant AP) (config) # restricted-mgmt-access 192.0.2.13 255.255.255.255 (Instant AP) (config) # end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

rf dot11a-radio-profile

rf dotlla-radio-profile
beacon-interval <interval>
csa-count <count>
dot11h
interference-immunity <immunity-level>
legacy-mode
max-distance <count>
spectrum-band <type>
spectrum-monitor
no... 

Description

This command configures a 5.GHz or 802.11a radio profile for a W-IAP.

Syntax

Parameter Description Range Default
rf dotlla-radio-profile	Enables the 5.0 GHz RF configuration sub-mode	-	-
beacon-interval	Enter the Beacon period for the W-IAP in milliseconds.When enabled, the 802.11 beacon management frames are transmitted by the access point at the specified interval.	60-500 100
csa-count	Configures the number of channel switching announcements that must be sent before switching to a new channel.This allows associated clients to recover gracefully from a channel change.	0-10 2
dot11h	Allows the W-IAP to advertise its 802.11d (country information) and 802.11h (transmit power control) capabilities.	- Disabled
interference-immunity	Configures the immunity level to improve performance in high-interference environments. You can specify any of the following immunity levels:Level 0– no ANI adaptation.Level 1– Noise immunity only. This level enables power-based packet detection by controlling the amount of power increase that makes a radio aware that it has received a packet.Level 2– Noise and spur immunity. This level also controls the detection of OFDM packets, and is the default setting for the Noise Immunity feature.Level 3– Level 2 settings and weak OFDM immunity. This level minimizes false detects on the radio due to interference, but may also reduce radio sensitivity. This level isrecommended for environments with a high-level of interference related to 2.4 GHz appliances such as cordless phones.Level 4- Level 3 settings, and FIR immunity. At this level, the AP adjusts its sensitivity to in-band power, which can improve performance in environments with high and constant levels of noise interference.Level 5- The AP completely disables PHY error reporting, improving performance by eliminating the time the W-IAP would spend on PHY processing.NOTE: Increasing the immunity level makes the AP to lose a small amount of range.	0-5	2
legacy-mode	Enables the W-IAPs to run the radio in non-802.11n mode.	- Disabled
max-distance	Configures the maximum distance between a client and an AP or between a mesh point and a mesh portal in meters. This value is used to derive ACK and CTS timeout times.A value of 0 specifies the default settings for this parameter, where timeouts are only modified for outdoor mesh radios which use a distance of 16km.	600-1000	0
spectrum-band	Allows you to specify the portion of the channel to monitor for 5 GHz configuration.		-
spectrum-monitor	Allows the W-IAPs in access mode to continue-with normal access service to clients, while performing additional function of monitoring RF interference (from both neighboring APs and non Wi-Fi sources such as, microwaves and cordless phones) on the channel they are currently serving clients.		-
no...	Removes the configuration.	--

Usage Guidelines

Use this command to create a 5.0 GHz radio profile on a W-IAP.

Example

The following example configures the 5 GHz radio profile:

(Instant AP) (config)# rf dot11a-radio-profile
(Instant AP) (RF dot11a Radio Profile)# beacon-interval 100
(Instant AP) (RF dot11a Radio Profile)# legacy-mode
(Instant AP) (RF dot11a Radio Profile)# dot11h
(Instant AP) (RF dot11a Radio Profile)# interference-immunity 3
(Instant AP) (RF dot11a Radio Profile)# max-distance 600
(Instant AP) (RF dot11a Radio Profile)# csa-count 2
(Instant AP) (RF dot11a Radio Profile)# spectrum-monitor
(Instant AP) (RF dot11a Radio Profile)# end 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0 This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and RF dot11a Radio Profile configuration sub-mode

rf dot11g-radio-profile

rf dotllg-radio-profile
beacon-interval <interval>
csa-count <count>
dot11h
interference-immunity <immunity-level>
legacy-mode
max-distance <count>
spectrum-monitor
no... 

Description

This command configures a 2.4.GHz or 802.11g radio profile for a W-IAP.

Syntax

Parameter Description Range Default
rf dot11g-radio-profile	Enables the 2.4 GHz RF configuration sub-mode	-	-
beacon-interval	Enter the Beacon period for the W-IAP in milliseconds.When enabled, the 802.11 beacon management frames are transmitted by the access point at the specified interval.	60-500	100
csa-count	Configures the number of channel switching announcements that must be sent before switching to a new channel.This allows associated clients to recover gracefully from a channel change.	0-10	2
dot11h	Allows the W-IAP to advertise its 802.11d (country information) and 802.11h (transmit power control) capabilities.	- Disabled
interference-immunity	Configures the immunity level to improve performance in high-interference environments. You can specify any of the following immunity levels:Level 0– no ANI adaptation.Level 1– Noise immunity only. This level enables power-based packet detection by controlling the amount of power increase that makes a radio aware that it has received a packet.Level 2– Noise and spur immunity. This level also controls the detection of OFDM packets, and is the default setting for the Noise Immunity feature. I Level 3– Level 2 settings and weak OFDM immunity. This level minimizes false detects on the radio due to interference, but may also reduce radio sensitivity. This level is recommended for environments with a high-level ofinterference related to 2.4 GHz appliances such as cordless phones.Level 4- Level 3 settings, and FIR immunity. At this level, the AP adjusts its sensitivity to in-band power, which can improve performance in environments with high and constant levels of noise interference.Level 5- The AP completely disables PHY error reporting, improving performance by eliminating the time the W-IAP would spend on PHY processing.NOTE: Increasing the immunity level makes the AP to lose a small amount of range.	0-5	2
legacy-mode	Enables the W-IAPs to run the radio in non-802.11n mode.	- Disabled
max-distance	Configures the maximum distance between a client and an AP or between a mesh point and a mesh portal in meters. This value is used to derive ACK and CTS timeout times.A value of 0 specifies the default settings for this parameter, where timeouts are only modified for outdoor mesh radios which use a distance of 16km.	600-1000 0
spectrum-monitor	Allows the W-IAPs in access mode to continue with normal access service to clients, while performing additional function of monitoring RF interference (from both neighboring APs and non Wi-Fi sources such as, microwaves and cordless phones) on the channel they are currently serving clients.	- Disabled
no...	Removes the configuration. - -

Usage Guidelines

Use this command to create a 2.4 GHz radio profile on a W-IAP.

Example

The following example configures the 2.4GHz radio profile:

(Instant AP) (config)# rf dot11g-radio-profile
(Instant AP) (RF dot11g Radio Profile)# beacon-interval 200
(Instant AP) (RF dot11g Radio Profile)# no legacy-mode
(Instant AP) (RF dot11g Radio Profile)# dot11h
(Instant AP) (RF dot11g Radio Profile)# interference-immunity 3
(Instant AP) (RF dot11g Radio Profile)# max-distance 600
(Instant AP) (RF dot11g Radio Profile)# csa-count 2
(Instant AP) (RF dot11g Radio Profile)# spectrum-monitor
(Instant AP) (RF dot11g Radio Profile)# end 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0 This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and RF dot11g Radio Profile sub-mode

rf-band

rf-band {2.4|5.0|all}

Description

This command configures the radio frequency band for a W-IAP.

Syntax

Parameter Description	Range Default
rf-band {2.4| 5.0} all)	Configures a radio frequency band for a W-IAP.You can configure any of the following options:2.4 – For 2.4 GHz band or 802.11g configuration5 – For 5 GHz and 802.11a configurationall - For a mixed configuration of 2.4.GHz and 5 GHz. If you do not specify any value, by default both 5 GHz and 2.4 GHz bands are selected.	2.4, 5.0, all all

Usage Guidelines

Use this command to configure RF band for a W-IAP.

Example

The following example configures the 5 GHz RF band for a W-IAP.

(Instant AP) (config)# rf-band 5.0

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

rft

rft test profile

antenna-connectivity ip-addr <IP-addr> dest-mac <MAC-addr> phy {a|g}
ht-link-quality ip-addr <IP-addr> dest-mac <MAC-addr> phy {a|g} mcs <mcs>
link-quality ip-addr <IP-addr> dest-mac <MAC-addr> phy {a|g}
raw ip-addr <IP-addr> dest-mac <MAC-addr> phy {a|g} 

Description

This command is used for RF troubleshooting.

Syntax

Parameter Description
rft test profile	Allows you to run RF troubleshooting commands
antenna-connectivity	Allows you to test the antenna connectivity
ht-link-quality	Allows you to test the HT link quality.
link-quality	Allows you to test the quality of the link.
raw	Performs a raw test.
ip-addr	Indicates the IP address of the W-IAP that performs the test.
dest-mac	Specifies MAC address of the client to be tested.
phy	Indicates the 802.11 type, either a or g.
mcs	Indicates the type of Modulation Coding Scheme (MCS).

Usage Guidelines

This command can run predefined test profiles for antenna connectivity, link quality, or raw testing. Run these commands only under the supervision of a Dell support representative.

In this release, this command is not available on W-IAP224/225, and W-IAP274/275 platforms.

Example

The following example shows the RF test command that can be run for testing the antenna connectivity:

(Instant AP)# rft test profile 192.0.2.1 dest-mac 00:1A:1E:00:00:00 phy a

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms except W-IAP224/225, and W-IAP274/275	Privileged EXEC mode

routing-profile

routing-profile route no...

Description

This command configures a routing profile to define the corporate subnets, which must to be tunneled through

Syntax

Parameter Description
routing-profile	Creates a routing profile for routing traffic into the VPN tunnel.
route	Configures route parameters.
	Configures the destination network that is reachable through the VPN tunnel.
	Specify the subnet mask of network that is reachable through the VPN tunnel.
	Specify the gateway to which traffic must be routed. This IP address must be the controller IP address on which the VPN connection is terminated.
no...	Removes the configuration

Usage Guidelines

Use this command to configure a routing profile for VPN connections.

Example

The following example configures a routing profile:

(Instant AP)(config)# routing-profile (Instant AP)(Routing-profile)# route 192.0.1.0 255.255.255.0 192.0.2.0 (Instant AP)(Routing-profile)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and routing profile configuration sub-mode.

show 1xcert

show lxcert

Description

This command displays the details about the external server certificate, which is used by the W-IAP for client authentication.

Usage Guidelines

Use this command to view information about the server certificates uploaded to a W-IAP.

Example

The following example shows the output of show 1xcert command:

Default Server Certificate:
Version :3
Serial Number :01:DA:52
Issuer :C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SS L CA
Subject :0x05=1LUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=US, O=securelogin.dell.com, OU=GT28470348,
OU=See www.geotrust.com/resources/cps (c)11, OU=Doma in Control Validated - QuickSSL(R)
Premium, CN=securelogin.dell.com
Issued On :2011-05-11 01:22:10
Expires On :2017-08-11 04:40:59
Signed Using :SHA1
RSA Key size :2048 bits 

The output of this command describes details such as the version, serial number, subject, issue date, expiry type of encryption, and RSA key information for the certificates uploaded to the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show about

show about

Description

This command displays information about Instant.

Usage Guidelines

Use this command to view information such as Instant version, build time and W-IAP model.

Example

The show about command displays the Build Time, W-IAP model number, the Instant version, website address of organization, and Copyright information. The following example shows the show about command output:

Name :Aruba Operating System Software
Type :W-AP105
Build Time :2013-04-19 08:30:19 PDT
Version :6.2.1.0-3.3.0.0_38115
Website :http://www.dell.com
Legal :Copyright (c) 2002-2013, Aruba Networks, Inc. 

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show access-rule

show access-rule

Description

This command displays the details of access rules configured for the wired or wireless clients associated with IAP.

Syntax

Parameter Description
	Displays the access rule configuration details based the name specified for this parameter.

Usage Guidelines

Use this command to view information an access rule configured for a network profile.

Example

The following example shows the output displayed for the show access-rule command:

Access Rule Profiles
----
Name
----
ethersphere-instant-wpa2
default_wired_port_profile
wired-instant
ethersphere-instant-cp
ethersphere-instant
ether-wired
ll-android 

On specifying a name of the SSID or the port profile along with the show access-rule command, the list of access rules configured for the specified profile is displayed. The following example shows the output of this command:

Access Rules 

Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Application Action Log TOS 802.1P Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia 

any any match any permit 192.0.2.7 255.255.255.255 match h323-tcp permit
any any match any permit 192.0.2.7 255.255.255.255 match h323-udp permit
any any match dhcp permit
any any match app bebo deny
any any match app babylon deny
any any match app baidu-hi-games deny
any any match app bluejayfilms deny
any any match appcategory gaming deny
any any match webcategory shopping deny
any any match webcategory abused-drugs deny
any any match webcategory dead-sites deny
any any match webreputation high-risk-sites deny 

Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia 

Vlan Id :0

ACL Captive Portal:disable

ACL ECP Profile :default

CALEA : disable

Bandwidth Limit :upstream disable

The output of this command displays information about the access rule parameters configured for a specific wireless profile. It indicates whether a particular type of traffic is allowed to a particular destination, and the service and protocol in use and if options such as logging and prioritizing traffic are enabled when the rule is triggered. If the DPI access rules are configured, it displays the list of rules configured to allow or deny access to certain applications, application categories, web categories, and websites based on their reputation score.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show access-rule-all

show access-rule-all

Description

This command displays the details of the access rules configured for all wired and wireless profiles on the W

Usage Guidelines

Use this command to view information access rules configured for all wired and wireless profiles on the W-IA

Example

The following example shows the partial output of the show access-rule-all command:

Access Rule Name :default_wired_port_profile
In Use :Yes
Access Rules
----
Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Application Action Log TOS 802.1P
Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia 

any any match any permit
masterip 0.0.0.0 match http permit
masterip 0.0.0.0 match 6:4343:4343 permit
any any match dhcp permit 

Vlan Id :0
ACL Captive Portal: disable
ACL ECP Profile :default
CALEA : disable
Bandwidth Limit :downstream disable upstream disable
Access Rule Name :NewRole17 

In Use : No
Access Rules
----
Access Rules 

Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Application Action Log TOS 802.1P Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia 

10.17.88.188 255.255.255.255 match http permit
10.17.88.188 255.255.255.255 match 6:4343:4343 permit
any any match dhcp permit
any any match dns permit
Vlan Id :0
ACL Captive Portal:disable
ACL ECP Profile :default
CALEA :disable
Bandwidth Limit :downstream disable upstream disable
Access Rule Name :NewRole18
In Use :No 

The output of this command includes the following parameters:

Parameter Description
Access Rule Name	Displays the name of the access rule.
In use	Indicates if the access rules are in use.
Access Rules	Displays the access rules parameter for each rule configured for the SSID or Wired profile users.
VLAN Id	Indicates the VLAN ID associated with the SSID or wired profile access rules
ACL Captive Portal	Indicates if the ACL rules are applicable to the captive portal users.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show airgroup

show airgroup {blocked-queries [dlna| mdns] | blocked-service-id [dlna| mdns] | cache { | entries [dlna| mdns]} | cppm {auth server [coa-capable | non-coa-only] | entries | query-interval | server} | cppm-entry | debug statistics| internal-state statistics | servers [dlna| mdns| verbose] | status | swarm-info| users [dlna| mdns| verbose]}

Description

This command displays the AirGroup configuration details for a W-IAP client.

Syntax

Parameter Description
blocked-queries [dlna |mdns]	Displays blocked queries if any.
blocked-service-id [dlna| mdns]	Displays blocked services and service IDs if any.
cachecache entries [dlna| mdns]	Displays AirGroup cache details for a specific W-IAP or for the W-IAP clients in a cluster.
cppm {auth server [coa-capable | non-coa-only] | entries | query-interval | server}	Displays CPPM server details associated with AirGroup configuration.
cppm-entry	Displays CPPM server details for an AirGroup client.
debug statistics	Displays debug statistics for AirGroup enabled W-IAPs.
internal-state statistics	Displays statistical details of queries and responses, and RADIUS client messages.
servers [dlna| mdns| verbose]	Displays AirGroup server details.
status	Indicates the AirGroup feature activation status.
swarm-info	Displays information about the AirGroup cluster.
users [dlna| mdns| verbose]	Displays the list of AirGroup users.

Usage Guidelines

Use the show airgroup commands to view the AirGroup configuration details on a W-IAP.

Example

Example outputs for some of the show airgroup commands are as follows:

show airgroup blocked-queries

The show airgroup blocked-queries command output displays the blocked queries if any:

AirGroup dropped Query IDs
----
Service ID #query-hits
----
Num dropped Query IDs:0 

show airgroup blocked-service-id

The show airgroup blocked-service-id command output displays the blocked AirGroup service IDs if any:

AirGroup Blocked Service IDs

Origin Service ID #response-hits

Num Blocked Service-ID:0

show airgroup cache entries

The following output is displayed for the show airgroup cache entries command:

Cache Entries

Name Type Class TTL Origin Expiry Last Update

_airplay.tcp.local PTR IN 4500 10.16.94.236 3696.00 Tue May 13 19:32:11 2014

raop. tcp.local PTR IN 4500 10.16.94.236 3794.31 Tue May 13 19:32:11 2014

BLR-DPARASAR-T4._airplay._tcp.local SRV/NBSTAT IN 120 10.16.94.236 311.38 Tue May 13 19:32:11 2014

2577037A8680@BLR-DPARASAR-T4._raop._tcp.local SRV/NBSTAT IN 120 10.16.94.236 134.14 Tue May 13 19:32:11 2014

BLR-DPARASAR-T430S.local A IN 120 10.16.94.236 255.07 Tue May 13 19:32:11 2014

BLR-DPARASAR-T430S.local AAAA IN 120 10.16.94.236 393.69 Tue May 13 19:32:11 2014

BLR-DPARASAR-T4. airplay. tcp.local TXT IN 4500 10.16.94.236 3784.51 Tue May 13 19:32:11 2014

2577037A8680@BLR-DPARASAR-T4._raop._tcp.local TXT IN 4500 10.16.94.236 3840.38 Tue May 13 19:32:11 2014

urn:schemas-upnp-org:device:MediaRenderer:1 N/A N/A 1800 10.16.94.236 N/A Tue May 13 19:33:51 2014

The output of this command includes the following information:

Column Description
Name	Indicates the name of AirGroup server.
Type	Indicates the AirGroup model.
Class	Indicates the class of the mDNS record.
TTL	Indicates the duration after which the cache entries expire.
Origin	Indicates the origin IP address of the cache entries.
Expiry	Indicates the expiration details.
Last Update	Indicates when the entries were last updated.

show airgroup cppm auth server non-coa-only

The following output is displayed for the show airgroup cppm auth server non-coa-only command:

All Airgroup Non-CoA-only Servers known to MDNS

Server IP-Address Port timeout rfc3576 rfc3576-only rfc3576-port

test 192.0.2.0 1812 5 Disabled Disabled 5999

test123 192.0.2.1 1812 5 Disabled Disabled 5999

show airgroup cppm auth server coa-capable

The following output is displayed for the show airgroup cppm auth server coa-capable command:

All Airgroup CoA-capable Servers known to MDNS

Server IP-Address Port timeout rfc3576 rfc3576-only rfc3576-port

server1 192.0.1.1 1812 5 Enabled Enabled 5999

show airgroup cppm server

The following output is displayed for the show airgroup cppm server command:

CPPM Servers

Server IP-Address Port timeout rfc3576 rfc3576-only rfc3576-port

test 192.0.2.0 1812 5 Disabled Disabled 5999

test123 192.0.2.1 1812 5 Disabled Disabled 5999

The output of these commands provide the following information:

Column Description
Server	Indicates the name of the CPPM server.
IP address	Indicates the IP address of the CPPM server.
Port	Indicates the authorization port number of the CPPM server.
timeout	Indicates timeout value in seconds for one RADIUS request.
rfc3576	Indicates if the W-IAPs are configured to process RFC 3576-compliant Change Authorization (CoA).
rfc3576-only	Indicates if W-IAPs are configured to be RFC 3576 compliant only.
rfc3576-port	Indicates the port number used for sending AirGroup CoA.

show airgroup cppm entries

The following output is displayed for the show airgroup cppm entries command:

swarm id = fc6520ad018ee6eb13bdc6b985e0fe6361bd37f7d25212a77e

ap id = d8:c7:c8:c4:42:98 ap ip = 192.0.2.0 update no = 0

Device device-owner shared location-id AP-name shared location-id AP-FQLN

shared location-id AP-group shared user-list shared role-list

Num CPPM Entries:0

The output of this command provides the following information:

Column Description
swarm id	Indicates the cluster ID of the W-IAP.
ap id	Displays the MAC address of the W-IAP on which AirGroup is configured.
ap ip	Displays the IP address of the W-IAP on which AirGroup is configured.
update no	Indicates the number of configuration updates if any.
Device	Indicates the device for which AirGroup is configured.
device-owner	Indicates the device owner's identity.
shared location-id AP-name	Indicates the shared location ID associated with the AP name
shared location-id AP-FQLN	Indicates the shared location ID associated with the fully qualified domain name of the A
shared location-id AP-group	Indicates the shared location ID associated with the AP group.
shared user-list	Indicates the list of shared users.
shared role-list	Indicates the list of shared user roles.
Num CPPM Entries	Indicates the number of CPPM entries.

show airgroup debug statistics

The following output is displayed for the show airgroup debug statistics command:

Airgroup slave status :TRUE
Airgroup master status :TRUE
Airgroup multi swarm status :TRUE
status value :0x7f
My ip address :192.168.10.251
My VC address :192.168.10.2
Peer VC address :192.168.10.2
Peer VC address :192.168.20.2
Peer VC address :192.168.30.2
Peer VC address :192.168.40.2
Peer VC address :0.0.0.0
Peer VC address :0.0.0.0
Peer VC address :0.0.0.0
Peer VC address :0.0.0.0
AirGroup Debug Statistics
Key Value
network cache init counter 2(2) 

mdns apdb init counter 7(7)
mdns apdb destroy counter 1(1)
user timed out 1(1)
airgroup restore count 1(1)
mdns mac move counter 4(4)
mdns master to vc hello rx 2060(2060)
mdns slave to slave hello rx 8240(8240)
mdns ap to ap mac sync resp rx 57(57)
mdns master to vc mac req rx 1580(1580)
swarm update counter rx 1(1)
mdns recieved valid swarm packet 11978(11978)
mdns recieved dlna pkt from device 177704(177704)
mdns partial hello tx 2059(2059)
mdns ap update tx 80(80)
mdns master to vc mac sync resp tx 232(232)
mdns ap to ap mac sync resp tx 1348(1348)
dropped init not done tx 6(6)
master to vc hello tx 2059(2059)
master to my swarm hello tx 2354(2354)
mdns ap to swarm hello tx 4118(4118)
mdns slave to slave mac sync req tx 57(57)
mdns total pkt sent to asap tx 112563(112563)
hello ap verification fail count 1(1) 

The output of this command provides the following information:

Column Description
Airgroup slave status	Indicates the AirGroup configuration status on the slave W-IAP.
Airgroup master status	Indicates the AirGroup configuration status on the slave W-IAP.
Airgroup multi swarm status	Indicates the status of the inter cluster mobility.
status value	Indicates the status value.
Key and Value	Displays details of AirGroup counters.

show airgroup internal-state statistics

The following output is displayed for the show airgroup internal-state statistics command:

Time: Fri May 16 09:30:22 2014

RADIUS Client Messages

Type Sent Since Last Read Sent Total Recv Since Last Read Recv Total

Auth Req/Resp 0 0 0 0

RFC3576 N/A N/A 0 0

CPPM Device-Entry Added N/A N/A 0 0

CPPM Device-Entry Deleted N/A N/A 0 0

Internal MDNS Statistics

Functionality Hit Count Since Last Read Hit Count Total Average Time in microsec (since last read) Average Time in microsec (alltime)

Response - Cache Update 0 0 0 0

Response 0 0 0 0

Query - prepare records + Policy 0 0 0 0

Query - Policy 0 0 0 0

Query - resp pkt gen & send 0 0 0 0
Query - Response packet send 0 0 0 0
Query 0 0 0 0
Internal DLNA Statistics 

Functionality Hit Count Since Last Read Hit Count Total Average Time in microsec (since last read) Average Time in microsec (alltime)

Response - Cache Update 0 0 0 0
Response 0 0 0 0
Query - prepare records + Policy 0 0 0 0
Query - Policy 0 0 0 0
Query - resp pkt gen & send 0 0 0 0
Query - Response packet send 0 0 0 0
Query 0 0 0 0 

The output of this command displays information about queries and responses, and RADIUS client messages.

show airgroup servers

The following output is displayed for the show airgroup servers command:

AirGroup Servers

MAC IP Type Host Name Service VLAN Wired/Wireless Role Group Username AP-Name

Num Servers: 0, Max Servers: 80.

The output of this command provides the following information:

Column Description
MAC	Indicates the MAC address of the AirGroup servers.
IP	Indicates the IP address of the AirGroup servers.
Type	Indicates the type of server.
Hostname	Indicates the hostname of the AirGroup servers.
Service	Indicates if AirGroup services such as AirPlay or AirPrint are configured.
VLAN	Displays VLAN details of the AirGroup servers.
Wired/Wireless	Displays if the AirGroup server is connected to a wired or wireless interface.
Role	Displays the user role details.
Group	Displays the server group.
Username	Displays the username details.
AP-name	Displays the name of the AP.
Num servers	Displays the total number of servers.
Max Servers	Displays the maximum number of servers that are supported.

show airgroup status

The following output is displayed for the show airgroup status command:

AirGroup Feature
----
Status
----
Disabled
AirGroup- MDNS Feature
----
Status
----
Disabled
AirGroup- DLNA Feature
----
Status
----
Disabled
AirGroup Multi Swarm
----
Status
----
Disabled
AirGroup Guest Multica
----
Status
----
Disabled
CPPM Parameters
----
Parameter Value
----
CPPM Enforce Registrat
CPPM Server query inte
CPPM Server dead time
AirGroup Service Inform
----
Service Status
----
airplay Disabled
airprint Disabled
itunes Disabled
remotemgmt Disabled
sharing Disabled
chat Disabled
Chromecast Disabled
DLNA Media Disabled
DLNA Print Disabled
allowall Disabled 

The output of this command provides the following information:

Column Description
Airgroup feature status	Indicates if the AirGroup feature such as DLNA or MDNS support is enabled.
AirGroup Multi Swarm status	Indicates if the inter cluster mobility is enabled.
AirGroup Guest Multicast	Indicates if a guest VLAN is used for Bonjour services.
CPPM Parameters	Displays CPPM configuration parameters associated with the AirGroup configuration.
AirGroup Service Information	Displays information about the status of the AirGroup services configuration.

show airgroup swarm-info

The following output is displayed for show airgroup swarm-info command:

AirGroup Swarm info

Swarm id

ef7501af01cd098223100f6d02733552765515ffcd7712c41c

AirGroup Swarm AP info

Ap MAC Ap Name Ap Ip Update no

6c:f3:7f:c3:5c:12 6c:f3:7f:c3:5c:12 10.17.141.140 0x3

d8:c7:c8:cb:d3:b8 d8:c7:c8:cb:d3:b8 10.17.141.138 0x0

d8:c7:c8:cb:d3:9c d8:c7:c8:cb:d3:9c 10.17.141.139 0x0

d8:c7:c8:cb:d4:20 d8:c7:c8:cb:d4:20 10.17.141.137 0x0

AirGroup Swarm AP's Client info

Mac Ip Update no Record Hash APs Mac

9c:20:7b:df:3e:8a 10.17.141.141 0x1 0x12cc1003 6c:f3:7f:c3:5c:12

The output of this command displays the AirGroup cluster information.

show airgroup users

The following output is displayed for the show airgroup users command:

AirGroup Users

MAC IP Host Name VLAN Wired/Wireless Role Username AP-Mac Query/Resp

Num Users:0

The output of this command provides the following information:

Column Description
MAC	Indicates the MAC address of the AirGroup clients.
IP	Indicates the IP address of the AirGroup clients.
Host Name	Indicates the hostname of the AirGroup clients.
VLAN	Displays VLAN details of the AirGroup clients.
Wired/Wireless	Displays if the AirGroup user is connected to a wired or wireless interface.
Role	Indicates the AirGroup user role.
Username	Displays the username of the AirGroup user.
AP-Mac	Displays the MAC address of the W-IAP to which the user is connected.
Query/Resp	Displays information query and response details exchanged between the AirGroup user and the AirGroup server.
Num Users	Indicates the number of AirGroup users.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command was modified.
Dell Networking W-Series Instant 6.3.1.1-4.0	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show airgroupservice

show airgroupservice [disallow {role|vlan}]

Description

This command displays the AirGroup service configuration details for a W-IAP.

Syntax

Parameter Description
show airgroupservice	Displays a summary of the configuration details for AirGroup services.
disallow {role |vlan}	Displays the user roles or VLANs that are restricted from accessing AirGroup services. When the access to AirGroup services is restricted, the clients that assigned with a specific role or VLAN will not be able to use the AirGroup service.

Usage Guidelines

Use the show airgroupservice command to view the AirGroup services configured on a W-IAP.

Examples

The following output is displayed for the show airgroupservice command:

AirGroupService Details
----
Service Description status Disallowed-Role Disallowed-VLAN ID
----
airplay AirPlay Disabled _airp lay._tcp
_raop ._tcp
_appl etv-v2._tcp
airprint AirPrint Disabled _ipp._tcp
_pdl-datastream._tcp
_prin ter._tcp
_scan ner._tcp
_univ ersal._sub._ipp._tcp
_univ ersal._sub._ipps._tcp
_prin ter._sub._http._tcp
_http._tcp
_http -alt._tcp
_ipp-tls._tcp
_fax-ipp._tcp
_riou sbprint._tcp
_cups._sub._ipp._tcp
_cups._sub._fax-ipp._tcp
_ica-networking._tcp
_ptp._tcp
_cano n-bjnp1._tcp
_ipps._tcp
_ica-networking2._tcp
itunes iTunes Disabled _home -sharing._tcp
_appl e-mobdev._tcp
_daap._tcp
_dacp._tcp
remotemgmt Remote management Disabled _ssh._tcp
_sftp -ssh._tcp
_ftp._tcp
_teln et._tcp 

_rfb._tcp
_net-assistant._tcp
AirGroupService Details
----
Service Description status Disallowed-Role Disallowed-VLAN ID
----
sharing Sharing Disabled _odi sk._tcp
_afp overtcp._tcp
_xgr id._tcp
chat Chat Disabled _pre sence._tcp
Chromecast Chromecast Disabled urn: dial-multiscreen-org:service:dial:1
urn: dial-multiscreen-org:device:dial:1
DLNA Media Media Disabled urn: schemas-upnp-org:device:MediaServer:1
urn: schemas-upnp-org:device:MediaServer:2
urn: schemas-upnp-org:device:MediaServer:3
urn: schemas-upnp-org:device:MediaServer:4
urn: schemas-upnp-org:device:MediaRenderer:1
urn: schemas-upnp-org:device:MediaRenderer:2
urn: schemas-upnp-org:device:MediaRenderer:3
urn: schemas-upnp-org:device:MediaPlayer:1
DLNA Print Print Disabled urn: schemas-upnp-org:device:Printer:1
urn: schemas-upnp-org:service:PrintBasic:1
urn: schemas-upnp-org:service:PrintEnhanced:1
allowall Remaining-Services Disabled
Num Services:10
Num Service-ID:49 

The following example shows the partial output displayed for the show airgroupservice disallow role command:

airplay
----
default_wired_port_profile
port
airprint
----
default_wired_port_profile
port 

The following example shows the partial output displayed for the show airgroupservice disallow vlan command:

airplay
100
200
airprint
100
200 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show airgroupservice-ids

show airgroupservice-ids

Description

This command displays the AirGroup service IDs configured on a W-IAP for its AirGroup clients.

Syntax

Parameter Description
service	Indicates the name of the service and displays the service ID details of specified AirGroup service.

Usage Guidelines

Use the show airgroupservice command to view the IDs of the AirGroup services configured on a W-IAP.

Examples

The following output is displayed for the show airgroupservice-ids command for the AirPlay service:

(Instant AP)# show airgroupservice-ids airplay
airplay

----
Service ids

----
_airplay._tcp
_raop._tcp
_appletv-v2._tcp 

The output of this command displays the service IDs associated with the AirGroupservice.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show acl

show acl {domains}

Description

This command displays the Access Control List (ACL) configuration details.

Syntax

Parameter Description
domains	Displays the domains configured with an access control list.

Usage Guidelines

Use this command to view the ACL configuration details.

Example

The following example shows the output of the show acl command:

(Instant AP)# show acl
role-domain
----
role-domain inused
----
d8:c7:c8:c4:42:98# 

The output of this command displays information about the role-domain.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ale

show ale {config|status}

Description

This command displays the ALE configuration details.

Syntax

Parameter Description
config	Displays the ALE configuration details.
status	Displays the status of ALE server.

Usage Guidelines

Use this command to view the ALE configuration status.

Example

The following example shows the output of the show ale config command:

(Instant AP)# show ale config
ALE Config
----
Type Value
----
ale-server AleServer1
ale-report-interval 60 

The output of this command displays the ALE server details and the reporting interval at which the Virtual Co sends data to the ALE server.

The following example shows the output of the show ale status command:

(Instant AP)# show ale status
ALE Status
----
Type Value
----
ale login status False
ale login status code
ale fail times 0
ale request state Idle 

The output of this command displays information about the ALE server status and data request status.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show alert global

show alert global [count]

Description

This command displays the list of client alerts for a W-IAP.

Syntax

Parameter Description
	Filters client alerts based on the specified number.

Usage Guidelines

Use this command to view the client alerts for a W-IAP. The client alerts occur when clients are connected to Instant network. Alerts are generated when a client encounters problems while accessing or connecting to the IAP network.

Example

The show alerts global command displays information about the clients for which alerts (if any) are generated. The following example shows the output for the show alerts global command when no client alerts are generated.

Client Alerts

Timestamp Type MAC Address Description Access Point

The output of this command provides the following information:

Parameter Description
Timestamp	Displays the time at which the client alert was recorded.
MAC Address	Displays the MAC address of the client that caused the alert.
Description	Provides a short description of the alert.
Access Point	Displays the IP address of the W-IAP to which the client is connected.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show alg

show alg

Description

This command displays the Application Layer Gateway (ALG) protocol information configured on a W-IAP.

Usage Guidelines

Use this command to view configuration details for the ALG protocols. An application-level gateway consists of security component that augments a firewall or NAT used in a network.

Example

The following output is displayed for the show alg command:

Current ALG

ALG Status

sccp Enabled

sip Enabled

vocera Enabled

The output of this command displays if the ALG protocols such as Skinny Call Control Protocol (SCCP), Ses: Initiation Protocol (SIP), and VOCERA are enabled.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show allowed-aps

show allowed-aps

Description

This command displays the list of W-IAPs that are allowed to join the W-IAP cluster.

Usage Guidelines

Use this command to view the W-IAP whitelist.

Example

The following example shows the output of the show allowed-aps command:

Allow New APs : enable

AP Whitelist

____

MAC Address

[EMPTY]

d8:c7:c8:cb:d4:20

d8:c7:c8:cb:d3:98

d8:c7:c8:cb:d3:b4

d8:c7:c8:cb:d3:d4

The output of this command provides the following information:

Parameter Description
Allow New APs	Indicates if the new W-IAPs are allowed to join the network.
MAC Address	Displays the MAC address of the W-IAPs that are allowed to join the network

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show all monitor

show all monitor active-laser-beams

Description

This command shows information for Dell Networking W-Series Instant Air Monitors.

Usage Guidelines

Use this command to view the information on Dell Networking W-Series Instant Air Monitors.

Syntax

Parameter Description
active-laser-beams	Show active laser beam generators.The output of this command shows a list of all W-IAPs that are actively performing policy enforcement containment such as rogue containment. This command can tell us which W-IAP is sending out deauthorization frames, although it does not specify which W-IAP is being contained.

Example

The following example shows the output of show all monitor command.

Swarm Active Laser Beam Sources

bssid channel rssi ap name lms ip master ip inactive time reported by

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show amp-audit

show amp-audit

Description

This command displays the set of configurations on the W-AirWave Management Platform.

Usage Guidelines

Use this command to view the AMP related configurations.

Example

The following example shows the output of the show amp-audit command:

rule any any match any any any deny
wlan access-rule ssid1
index 3
rule any any match any any any deny
hotspot anqp-nai-realm-profile "name1"
enable
nai-realm-name ""
nai-realm-eap-method eap-ttls
nai-realm-auth-id-1 non-eap-inner-auth
nai-realm-auth-value-1 mschapv2
nai-realm-auth-id-2 credential
nai-realm-auth-value-2 uname-password
nai-realm-encoding utf8
no nai-home-realm
hotspot anqp-nai-realm-profile "nr1"
enable
nai-realm-name "name1"
nai-realm-eap-method eap-sim
nai-realm-auth-id-1 non-eap-inner-auth
nai-realm-auth-value-1 mschapv2
nai-realm-auth-id-2 credential
nai-realm-auth-value-2 uname-password
nai-realm-encoding utf8
nai-home-realm
hotspot anqp-venue-name-profile "Vn1"
enable
venue-group business
venue-type research-and-dev-facility
venue-lang-code en
venue-name ""
hotspot anqp-venue-name-profile "vn1"
enable
venue-group business
venue-type research-and-dev-facility
venue-lang-code eng
venue-name "vn1"
hotspot anqp-nwk-auth-profile "nal"
enable
nwk-auth-type accept-term-and-cond
url "www.nwkauth.com"
hotspot anqp-roam-cons-profile "rc1"
enable
roam-cons-oi-len 3
roam-cons-oi "888888"
hotspot anqp-3gpp-profile "3g"
enable 

3gpp-plmn1 "40486"
3gpp-plmn2 ""
3gpp-plmn3 ""
3gpp-plmn4 ""
3gpp-plmn5 ""
3gpp-plmn6 ""
hotspot anqp-ip-addr-avail-profile "ip1"
enable
ipv4-addr-avail
no ipv6-addr-avail
hotspot anqp-domain-name-profile "dn1"
enable
domain-name "DomainName"
hotspot h2qp-oper-name-profile "onl"
enable
op-lang-code eng
op-fr-name "FriendlyName"
hotspot hs-profile "hs1"
enable
comeback-mode
no asra
no internet
pame-bi
group-frame-block
p2p-dev-mgmt
no p2p-cross-connect
addtl-roam-cons-ois 0
gas-comeback-delay 10
query-response-length-limit 20
access-network-type chargeable-public
venue-group business
venue-type research-and-dev-facility
roam-cons-len-1 3
roam-cons-oi-1 "123456"
roam-cons-len-2 3
roam-cons-oi-2 "223355"
roam-cons-len-3 0
roam-cons-oi-3 ""
advertisement-profile anqp-nai-realm "nrl"
wlan ssid-profile test
enable
index 0
type employee
essid instant
opmode opensystem
max-authentication-failures 0
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64
dot11k
dot11v
wlan ssid-profile ssid1
enable
index 1
type employee
essid hsProf
opmode wpa2-aes 

max-authentication-failures 0
vlan 200
rf-band all
captive-portal disable
mac-authentication
l2-auth-failthrough
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
radius-accounting
blacklist
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64
hotspot-profile "hs1"
auth-survivability cache-time-out 24
wlan external-captive-portal
server localhost
port 80
url "/" 
auth-text "Authenticated"
auto-whitelist-disable
https
blacklist-time 3600
auth-failure-blacklist-time 3600
ids
wireless-containment none
wired-port-profile wired-instant
switchport-mode access
allowed-vlan all
native-vlan guest
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poe
type guest
captive-portal disable
no dotlx
wired-port-profile default_wired_port_profile
switchport-mode trunk
allowed-vlan all
native-vlan 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type employee
captive-portal disable
no dotlx
enet0-port-profile default_wired_port_profile
uplink
preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180
airgroup
disable
airgroupservice airplay
disable 

description AirPlay
airgroupservice airprint
    disable
    description AirPrint
per-ap-settings d8:c7:c8:c4:42:98
    hostname d8:c7:c8:c4:42:98
    ip-address 10.17.161.254 255.255.255.0 10.17.161.1 10.13.6.110 ""
    swarm-mode cluster
    wifi0-mode access
    wifi1-mode access
    g-channel 0 0
    a-channel 0 0
    uplink-vlan 0
    g-external-antenna 0
    a-external-antenna 0 

The output of this command provides the following information:

Command History

Version Description
Dell Networking W-Series Instant6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap-env

show ap-env

Description

This command displays all provisioned AP parameters such as the type of antenna used by a. The output of command also indicates if the W-IAP is provisioned as a master W-IAP.

Usage Guidelines

Use this command to view the antenna configuration details for a W-IAP.

Example

The following output is displayed for the show ap-env command:

Antenna Type: Internal Iap_master: 1

The output of this command indicates if the W-IAP is configured to use an external or integrated antenna and W-IAP is configured as a master W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show aps

show aps [scanning][sync]

Description

This command displays all active W-IAPs, W-IAP scanning, and synchronization status.

Syntax

Parameter Description
aps	Displays the list of all active W-IAPs in the cluster.
aps scanning	Displays W-IAP scanning details.
aps sync	Displays W-IAP synchronization details.

Usage Guidelines

Use this command to view the list of active W-IAPs, W-IAP scanning and synchronization details.

Example

The following output is displayed for the show aps command:

AP List

Name IP Address Mode Spectrum Clients Type Mesh Role 2.4 Channel

d8:c7:c8:cb:d4:20 10.17.88.188 access disable 1 135 Portal 7

2.4 Power (dB) 2.4 Utilization (%) 2.4 Noise Floor (dBm) 5.0 Channel 5.0 Power (dB)

21 52(ok) -91(good) 44+ 22

5.0 Utilization (%) 5.0 Noise Floor (dBm) Need Antenna Config From Port Config Id

3 (good) -91 (good) No none 1

The output of this command includes the following parameters:

Column Description
Name	Displays the Name of the W-IAPs.
IP address	Displays the IP address of the W-IAPs.
Mode	Displays the operating mode. For example, access, monitor, or spectrum moni modes.
Spectrum	Indicates if spectrum monitoring is enabled or disabled.
Client	Indicates the number of client associated with the W-IAP.
Type	Displays the W-IAP model.
Mesh Role	Indicates if the W-IAP is functioning as Mesh Point or mesh Portal.
2.4 Channel	Indicates the channels used by the W-IAP in the 2.4 GHz band.
2.4 Power(dB)	Indicates the transmission power allocated for 2.4 Ghz band channels.
2.4 Utilization	Indicates the percentage of utilization of 2.4 GHz channels.
2.4 Noise Floor	Indicates the noise floor of the 2.4 GHz channels.
5.0 Channel	Indicates the channels used by the W-IAP in the 5 GHz band.
5.0 Power(dB)	Indicates the transmission power allocated for 5 GHz band channels.
5.0 Utilization	Indicates the percentage of utilization of 5 GHz channels.
5.0 Noise Floor	Indicates the noise floor of the 5 GHz channels.
Need antenna config	Indicates if antenna configuration is required.
From port	Indicates the port details if any.
Config Id	Indicates the configuration ID.

The following output is displayed for the show aps scanning command:

AP Scanning Stats

Name IP Address 2.4 Reqs 2.4 Voice Rejs 2.4 Video Rejs 5.0 Reqs

d8:c7:c8:cb:d4:20 10.17.88.188 5665 0 0 5675

5.0 Voice Rejs 5.0 Video Rejs

0 0

The output of this command includes the following parameters:

Column Description
Name	Displays the Name of the W-IAP.
IP address	Displays the IP address of the W-IAP.
2.4 Reqs5.0 Reqs	Displays the counters that indicate channel scanning requirements.
2.4 Voice Rejs5.0 Voice Rejs	Displays the counters that indicate the number of scanning rejects due to void traffic.
2.4 Video Rejs5.0 Video Rejs	Displays the counters that indicate the number of scanning rejects due to void traffic.

The following output is displayed for the show aps scanning command:

AP Sync List

MAC IP Address Class Current Version

The output of this command includes the following parameters:

Column Description
MAC	Indicates MAC address of the W-IAP with which the current W-IAP is synchronized.
IP address	Displays the IP address of the W-IAP.
Class	Indicates if the W-IAP is serving as master or slave.
Current Version	Displays the Instant version currently running on the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap allowed-channels

show ap allowed-channels

Description

This command displays a list of allowed channels for a W-IAP.

Syntax

Parameter Description
	Specify a country code to display allowed channels for that country.

Usage Guidelines

Specify the country code for your W-IAP during the initial setup. Changing the country code causes the valid lists to be reset to the defaults for that country.

Example

The following example shows the output of the show ap allowed-channels US command:

Allowed Channels for Country Code "US"

PHY Type Allowed Channels

802.11g (indoor) 1 2 3 4 5 6 7 8 9 10 11

802.11a (indoor) 36 40 44 48 149 153 157 161 165

802.11g (outdoor) 1 2 3 4 5 6 7 8 9 10 11

802.11a (outdoor) 149 153 157 161 165

802.11g 40MHz (indoor) 1-5 2-6 3-7 4-8 5-9 6-10 7-11

802.11a 40MHz (indoor) 36-40 44-48 149-153 157-161

802.11g 40MHz (outdoor) 1-5 2-6 3-7 4-8 5-9 6-10 7-11

802.11a 40MHz (outdoor) 149-153 157-161

The output of this command includes the following information:

Parameter Description
PHY Type	Indicates the PHY types for the following bands: types:802.11a802.11g
Allowed Channels	Displays the list of allowed channels for a specific regulatory domain.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap allowed-max-EIRP

show ap allowed-max-EIRP []

Description

This command displays the maximum EIRP settings for the country in which the W-IAP is currently operational, can also view the maximum EIRP settings for a specific country.

Syntax

Parameter Description
[]	Displays the EIRP settings allowed for a specific country.

Usage Guidelines

Use this command to view the maximum EIRP settings for a W-IAP. You can also filter the output to view the settings for a specific country.

Example

The following example shows the output of the show ap allowed-max-EIRP command:

Max EIRP setting for Country Code US Country United States and AP type AP-105
Channel 1 2 3 4 5 6 7 8 9 10 11 12 13 14 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124
128 132 136 140 149 153 157 161 165
b 20 20 20 20 20 20 20 20 20 * * * * * * * * * * * * * * * * * * * * * *
g/a 22 22 22 22 22 22 22 22 22 22 22 * * * 22 22 22 22 24 24 24 24 24 22 22 22 22 22 * * * 22 22
22 23 23 23 23 23
HT 20 20 20 20 20 20 20 20 20 * * * 21 21 21 21 24 24 24 24 24 24 24 24
22 22 22 23 24 24 24
HT 40 19 19 19 20 21 20 23 23 23 23 23 * * * * * * * * * * * * * *
22 22 22 23 20 17 

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap arm

show ap arm {bandwidth-management | history | neighbors |rf-summary | scan-times}

Description

This command displays information about bandwidth management, historical statistics, W-IAP neighbors, RF summary, and scanning details for the W-IAP.

Syntax

Parameter Description
bandwidth management	Displays ARM bandwidth details for a W-IAP.
history	Displays detailed information about the ARM configuration changes over a period of time.
neighbors	Displays details about the ARM neighbors.
rf-summary	Displays a summary of RF configuration information for a W-IAP
scan-times	Displays ARM channel scanning details for a W-IAP.

Usage Guidelines

Use this command to view information about the Adaptive Radio Management (ARM) bandwidth configuration, historical statistics, W-IAP neighbors, RF summary, and scanning details on a W-IAP.

Example

show ap arm bandwidth-management

The following example shows the output of show ap arm bandwidth-management command:

Interface :wifi0
Shaping Table
----
Client Tx Pkt Tx Byte (KB) Tx Alloc (ms) Tx Time (ms) Rx Time (ms) Active Time (ms) ----
----
Tx Rate (mbps)
----
Interface :wifi1
Shaping Table
----
Client Tx Pkt Tx Byte (KB) Tx Alloc (ms) Tx Time (ms) Rx Time (ms) Active Time (ms) ----
----
Tx Rate (mbps)
---- 

The output of this command includes the following information:

Column	Description
Interface	Displays the Wi-F interface configured on the W-IAP.
Shaping table	Displays information on the ARM configuration details for the clients associate with the W-IAP.
Column Description
Client	Displays the list of W-IAP clients connected through the Wi-Fi interface.
Tx Pkt	Displays the transmission packet details associated with the interface.
Tx Byte	Displays the number of bytes in the transmission packets associated with the interface.
Tx Alloc (ms)	Indicates the time allocated for transmission in milliseconds.
Tx Time (ms)	Indicates the transmission time in milliseconds.
Rx Time (ms)	Indicates the reception time in milliseconds.
Active time (ms)	Indicates duration until which the Wi-Fi devices are active.
Tx Rate (Mbps)	Indicates the current speed at which data is transmitted through the Wi-Fi interface.

show ap arm history

For each interface on a W-IAP, the show ap arm history command shows the history of channel and power changes due to ARM. ARM can automatically change channel and power levels based on a number of factors as noise levels and radio interference. The following example shows the output of the show ap arm history command:

Interface :wifi0

ARM History

Time of Change Old Channel New Channel Old Power New Power Reason

2013-05-11	04:24:31	149+	161-	27	27	I
2013-05-11	02:54:34	157+	149+	27	27	I
2013-05-11	02:46:13	153-	157+	27	27	I
2013-05-11	02:27:11	157+	153-	27	27	I
2013-05-11	02:22:18	149+	157+	27	27	I
2013-05-11	01:35:00	161-	149+	27	27	I
2013-05-11	01:28:58	149+	161-	27	27	I
2013-05-10	22:46:33	161-	149+	27	27	I
2013-05-10	22:38:09	153-	161-	27	27	I
2013-05-10	22:02:10	161-	153-	27	27	I
2013-05-10	21:55:21	153-	161-	27	27	I
2013-05-10	16:47:15	157+	153-	27	27	I
2013-05-10	16:28:16	149+	157+	27	27	I
2013-05-10	15:19:59	161-	149+	27	27	I
2013-05-10	15:14:29	149+	161-	27	27	I
2013-05-10	13:10:55	161-	149+	27	27	I
2013-05-10	13:03:47	149+	161-	27	27	I
2013-05-10	12:17:34	157+	149+	27	27	I
2013-05-10	12:10:21	153-	157+	27	27	I
2013-05-10	11:12:04	157+	153-	27	27	I
2013-05-10	11:00:07	149+	157+	27	27	I
2013-05-10	10:54:39	157+	149+	27	27	I
2013-05-10	10:49:33	149+	157+	27	27	I
2013-05-10	10:44:34	157+	149+	27	27	I
2013-05-10	10:39:51	149+	157+	27	27	I
2013-05-10	10:33:07	157+	149+	27	27	I
2013-05-10	10:25:35	149+	157+	27	27	I
2013-05-10	09:18:11	157+	149+	27	27	I

2013-05-10 09:04:24 149+ 157+ 27 27 I

2013-05-10 06:08:59 157+ 149+ 27 27 I

2013-05-10 05:55:10 153-157+2727I

2013-05-10 05:11:21 157+ 153- 27 27 I

Interface :wifi1

ARM History

Time of Change Old Channel New Channel Old Power New Power Reason

2013-05-11 04:16:28 6 1 24 24 I

2013-05-11 03:58:53 11 6 24 24 I

2013-05-11 03:13:44 1 11 24 24 I

2013-05-11 01:23:32 6 1 24 24 I

2013-05-11 01:04:29 11 6 24 24 I

2013-05-11 00:26:16 1 11 24 24 I

2013-05-10 23:13:30 6 1 24 24 I

2013-05-10 23:04:49 11 6 24 24 Q

2013-05-10 22:51:10 6 11 24 24 I

2013-05-10 22:45:01 1 6 24 24 I

2013-05-10 21:52:39 6 1 24 24 I

2013-05-10 21:44:37 1 6 24 24 Q

2013-05-10 21:29:52 6 1 24 24 I

2013-05-10 21:19:16 11 6 24 24 I

2013-05-10 21:12:53 6 11 24 24 I

2013-05-10 20:52:07 1 6 24 24 I

2013-05-10 19:28:09 6 1 24 24 I

2013-05-10 19:02:08 11 6 24 24 I

2013-05-10 18:23:32 1 11 24 24 I

2013-05-10 17:40:55 6 1 24 24 I

2013-05-10 17:28:40 11 6 24 24 I

2013-05-10 17:01:24 1 11 24 24 I

2013-05-10 15:10:19 6 1 24 24 I

2013-05-10 15:03:41 11 6 24 24 I

2013-05-10 14:45:39 6 11 24 24 I

2013-05-10 14:19:32 11 6 24 24 I

2013-05-10 13:37:30 1 11 24 24 I

2013-05-10 11:34:27 6 1 24 24 I

2013-05-10 11:19:52 11 6 24 24 I

2013-05-10 10:30:51 1 11 24 24 I

2013-05-10 09:18:51 6 1 24 24 I

2013-05-10 09:06:31 11 6 24 24 I

I: Interference, R: Radar detection, N: Noise exceeded, Q: Bad Channel Quality E: Error threshold exceeded, INV: Invalid Channel, G: Rogue AP Containment, M: Empty Channel, P+: Increase Power, P-: Decrease Power, 40INT: 40MHz intol detected on 2.4G, NO40INT: 40MHz intol cleared on 2.4G, OFF: Turn off Radio, ON: Turn on Radio

The output of this command includes the following information:

Column Description
Time of change	Indicates the timestamp of the channel changes for each interface.
Old Channel	Displays the channel number used by the W-IAP before the ARM change.
New channel	Displays the channel number used by the W-IAP after the ARM change.
Old Power	Indicates power values configured on the W-IAP before the ARM change.
New Power	Indicates power values configured on the W-IAP after the ARM change.
Reason	Indicates the reason for changes in channels. For more information about the reason, see the description below the command output.

show ap arm neighbors

The show ap arm neighbors command displays the ARM settings on the W-IAP neighbors. The following example shows the output of the show ap arm neighbors command:

ARM Neighbors

bssid essid channel rssi tx-power PL (dB) AP Flags Last Update

6c:f3:7f:45:57:20 7SPOT 1 8 0 0 Passive
6c:f3:7f:56:7e:a0 7SPOT 1 9 0 0 Passive
6c:f3:7f:56:7e:a1 NTT-SPOT 1 12 0 0 Passive
00:24:6c:80:77:c1 NTT-SPOT 1 9 0 0 Passive
6c:f3:7f:45:57:21 NTT-SPOT 1 8 0 0 Passive
6c:f3:7f:44:91:11 NTT-SPOT 1 9 0 0 Passive
00:24:6c:2b:fd:e8 ga-mv-vap3 161 5 9 98 Passive
00:24:6c:80:4d:62 docomo 1 10 0 0 Passive 

(Total updates)

Neighbor Summary: One hop 232 Two hop 0 Current Time: 2013-05-11 04:31:33

The output of this command includes the following information:

Column Description
bssid	Indicates the BSSID of the W-IAP neighbors.
essid	Indicates the ESSID of the W-IAP neighbors.
Channel	Indicates the channels assigned to the W-IAP neighbors
rssi	Indicates the Received signal strength indication (RSSI) values associated with the ARM channels to which W-IAP neighbors are connected.
tx power	Indicates the transmission power.
PL	Indicates power loss.
AP Flags	Indicates the status of W-IAP neighbors.
Last Update	Displays details of last updates if any.
Total updates	Displays a summary if updates.

show ap arm rf-summary

The show ap arm rf-summary command shows the statistics for all channels monitored by a W-IAP. The following example shows the output of the show ap arm rf-summary command:

Channel Summary

channel retry phy-err mac-err noise util (Qual) cov-idx(Total) intf_idx(Total)

36 0 0 0 93 3/2/0/0/94 0/0(0) 97/40//0/0(137)
40 0 0 0 93 9/2/0/0/92 0/0(0) 120/82//0/0(202)
44 0 0 0 93 2/1/0/1/99 0/0(0) 161/88//0/0(249)
48 0 0 0 93 9/2/0/0/93 0/0(0) 157/59//0/0(216)
52 0 0 0 93 0/0/0/0/93 0/0(0) 15/52//0/0(67)
56 0 0 0 93 5/0/0/0/95 0/0(0) 0/18//0/0(18) 

60 0 0 0 93 0/0/0/0/94 0/0(0) 29/14//0/0(43)
64 0 0 0 93 6/0/0/0/94 0/0(0) 43/10//0/0(53)
149 0 0 0 93 3/2/0/0/99 0/0(0) 113/41//0/0(154)
153 0 0 2 93 23/23/0/1/100 0/0(0) 124/68//0/0(192)
157 0 0 0 93 2/1/0/1/94 0/0(0) 97/79//0/0(176)
161 0 0 5 93 3/2/0/0/99 9/0(9) 115/66//0/0(181)
165 0 0 0 94 10/10/0/0/100 0/0(0) 99/38//0/0(137)
1 0 0 12 78 60/50/3/0/79 8/0(8) 448/79//0/0(527)
6 0 0 0 78 12/11/0/0/81 0/0(0) 483/227//0/0(710)
11 0 0 8 78 71/54/3/16/86 0/0(0) 703/126//0/0(829)
Columns:util (Qual): ch-util/rx/tx/ext-ch-util/quality
HT Channel Summary 

channel pair Pairwise intf index

149-153 346
36-40 339
157-161 357
44-48 465
Interface Name :wifi0
Current ARM Assignment :161-/27
Covered channels a/g :1/0
Free channels a/g :7/0
ARM Edge State :disable
Last check channel/pwr :2m:36s/4m:24s
Last change channel/pwr :8m:19s/1d:23h:47m:12s
Next Check channel/pwr :2m:36s/2m:15s
Assignment Mode :Single Band
Interface Name :wifi1
Current ARM Assignment :1/24
Covered channels a/g :0/1
Free channels a/g :0/2
ARM Edge State :disable
Last check channel/pwr :5m:31s/3m:33s
Last change channel/pwr :15m:50s/1d:23h:47m:13s
Next Check channel/pwr :16s/2m:33s
Assignment Mode :Single Band 

The output of this command includes the following information:

Column Description
channel	Displays the list of channels enabled on a W-IAP.
retry	Indicates the number of retry attempts.
Phy-err	Indicates the PHY errors on the current channels of a W-IAP.
Mac-err	Indicates the MAC errors on the current channels of a W-IAP.
noise	Displays the current noise level on each channel.
Util (Qual)	Displays the percentage of the channel being used and the current relative quality of selected channels.
cov-idx(Total)	Displays RF coverage details. The W-IAP uses this metric to measure RF coverage. The coverage index is calculated as x+y, where “x” is the W-IAP's weighted calculation of the Signal-to- Noise Ratio (SNR) on all valid APs on specified 802.11 channel, and “y” is the weighted calculation of the W-IAPsdetected by the neighboring APs on that channel.
intf_idx(Total)	Displays channel interference details. The W-IAP uses this metric to measure co-channel and adjacent channel interference. The Interference Index is calculated as a/b//c/d, where:Metric value “a” is the channel interference the AP sees on its selected channel.Metric value “b” is the interference the AP sees on the adjacent channel.Metric value “c” is the channel interference the AP’s neighbors see on the selected channel.Metric value “d” is the interference the AP’s neighbors see on the adjacent channel.To calculate the total Interference Index for a channel add “a+b+c+d”.
channel_pair	Displays the list of paired channels.
Pairwise_intf_index	Displays the pairwise interference index.
Interface Name	Displays the interface name.
Current ARM Assignment	Displays the current ARM assignment details.
Covered channels	Displays the number of channels being used by the W-IAP's BSSID in the 2.4 GHz and 5 GHz bands.
Free channels	Displays the number of available channels in the 2.4 GHz and 5 GHz bands.
ARM Edge State	Displays the ARM Edge status. If ARM edge status is enabled, the ARM-enabled W-IAPs on the network edge will not function as Air Monitors.
Last check channel/pwr	Indicates the time since the channel and power assignment was verified.
Last change channel/pwr	Indicates the time since the channel and power assignment was updated.
Next Check channel/pwr	Indicates the next interval at which the channel and power assignment will be verified.
Assignment Mode	Indicates if the ARM is assignment is applicable to a single band or dual band.

show ap arm scan-times

The show ap arm scan-times command shows the AM channel scan times for a W-IAP. The following example shows the output of the show ap arm scan-times command:

Channel Scan Time

channel assign-time(ms) scans-attempted scans-rejected dos-scans flags timer-tick

36 2483300 1530 0 0 DVACFT 172120

40 576170 1547 0 0 DVACPT 172139

44 9945940 1454 0 0 DVACFT 172145

48 170500 1550 0 0 DVACPT 172158

52 167420 1522 0 0 DVACT 172046

56 65450 595 0 0 DVCT 171880

60 169840 1544 0 0 DVACT 172052

64 170390 1549 0 0 DVACT 172063

149 68631720 952 0 0 DVACFT 172074
153 32278480 1268 0 0 DVACPT 172088
157 38634770 1207 0 0 DVACFT 172132
161 20620710 1361 0 0 DVACPT 172161
165 170280 1548 0 0 DVACT 172110
1 86424330 903 0 0 DVACFT 172161
2 53570 487 0 0 DC 171936
3 55660 506 0 0 DC 171980
4 88550 805 0 0 DC 172030
5 327140 2974 0 0 DVACP 172124
6 40459820 2562 0 0 DVACT 172110
7 334620 3042 0 0 DVACF 172137
8 89210 811 0 0 DC 171627
9 92620 842 0 0 DC 171684
10 192940 1754 0 0 DAC 172144
11 45787400 1340 0 0 DVACPT 172159
12 132550 1205 0 0 DAC 172051
13 51260 466 0 0 DC 171890
Channel Flags: D: All-Reg-Domain Channel, C: Reg-Domain Channel, A: Activity Present
L: Scan 40MHz Lower, U: Scan 40MHz Upper, Z: Rare Channel
V: Valid, T: Valid 20MHz Channel, F: Valid 40MHz Channel, P: Valid 40MHz Channel Pair
O: DOS Channel, K: DOS 40MHz Upper, H: DOS 40MHz Lower
R: Radar detected in last 30 min, X: DFS required 

WIF Scanning State

Scan mode channel current-scan-channel last-dos-channel timer-milli-tick

Default 161-48-0 172161700

Default 1 11-0 172161700

next-scan-milli-tick (jitter) scans (Tot:Rej:Eff(%):Last intvl(%))

172172520(4420) 17627:0:100:100

172164890(-4108) 17697:0:100:100

The output of this command includes the following information:

Column Description
channel	Displays the list of channels configured on the W-IAP.
assign-time(ms)	Displays the time since W-IAP is assigned a channel.
scans-attempted	Indicates the number times a W-IAP has attempted to scan another channel.
scans-rejected	Displays the number of times a W-IAP was unable to scan a channel, because the scan was halted due to other ARM settings.
dos-scans	Indicates the number of times services to a rogue device on a channel were denied by a W-IAP.
flags	Indicates channel flags. For more information on channel flags, see the flag description below the channel scan time table.
timer-tick	Indicates the time interval since the last scan.
Scan mode	Indicates if the scan mode enabled on the Wi-Fi interface.
channel(under WIFI Scanning State)	Indicates the channels available on the Wi-Fi interface.
current-scan-channel	Indicates the current channel scanned.
last-dos-channel	Indicates the last channel on which Denial of Service (DOS) was detected.
timer-milli-tick	Indicates the time in milliseconds since the Wi-Fi interface channels were scanned.
next-scan-milli-tick(jitter)	Indicates the next interval at which the scanning will begin.
scans (Tot:Rej:Eff(%):Last intvl(%) )	Provides a summary of the Wi-Fi scanning details.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap association

show ap association

Description

This command displays the association table for an AP group or for an individual W-IAP.

Usage Guidelines

Use this command to view information about the clients associated with a W-IAP.

Example

The following example shows the output of show ap association command.

The phy column shows client's operational capabilities for current association
Flags: A: Active, B: Band Steerable, H: Hotspot(802.11u) client, K: 802.11K cli nt, R: 802.11R client, W: WMM client, w: 802.11w client
PHY Details: HT : High throughput; 20: 20MHz; 40: 40MHz
VHT : Very High throughput; 80: 80MHz; 160: 160MHz; 80p80: 80MHz + 80MHz
<n>ss: <n> spatial streams
Association Table
----
Name bssid mac auth assoc aid l-int essid vlan-id tunnel-id phy assoc.time num assoc ---- ----
---- ---- ---- ---- ---- ---- ----
Flags
----
Num Clients:0 

The output of this command includes the following information:

Column Description
Name	Indicates the Name of a W-IAP or the AP group.
bssid	Indicates Basic Service Set Identifier (BSSID) associated with the W-IAP. The Basic Service Set Identifier (BSSID) is usually the MAC address of the W-IAP.
mac	Indicates the MAC address of the W-IAP clients.
auth	Displays the status of client authentication. Indicates y if the W-IAP is configured for 802.11 authorization frame types. Otherwise, it displays an n.
assoc	Displays the status of user association. Indicates y if the W-IAP is configured for 802.11 association frame types. Otherwise, it displays an n.
aid	Indicates 802.11 association ID. A client receives a unique 802.11 association when it associates to a W-IAP.
l-int	Indicates the number of beacons in the 802.11 listen interval. There are ten beacons sent per second, so a ten-beacon listen interval indicates a listening interval time of 1 second.
essid	Indicates the name that uniquely identifies the W-IAP's Extended Service Set Identifier (ESSID).
vlan-id	Indicates the VLAN ID associated with the W-IAP.
tunnel-id	Indicates the identification number of the W-IAP tunnel.
assoc. time	Indicates the amount of time the client has been associated with the W-IAP, in the hours:minutes:seconds format.
num assoc	Indicates the number of clients associated with the W-IAP.
flags	Displays flags for this W-IAP if any. For information on flag abbreviations, see the flag description at beginning of the output.
Num Clients	Indicates the number of clients associated with the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap bss-table

show ap bss-table

Description

This command displays an AP's Basic Service Set (BSS).

Usage Guidelines

The output of the show ap bss-table command shows the Dell AP BSS table for all APs. To filter this inform view BSS table data for an individual AP or a specific port and slot number, include the ap-name, bssid, ess addr or port keywords.

Example

The following example shows the output of show ap bss-table command:

Dell AP BSS Table
bss ess port ip phy type ch/EIRP/max-EIRP cur-cl ap name in-t(s) tot-t
d8:c7:c8:3d:42:12 example1 ?/? 10.17.88.188 a-HT ap 149+/20/22.5 1 d8:c7:c8:cb:d4:20 0
18h:13m:58s
d8:c7:c8:3d:42:13 example-local-nw ?/? 10.17.88.188 a-HT ap 149+/20/22.5 0 d8:c7:c8:cb:d4:20 0
18h:13m:58s
d8:c7:c8:cb:d4:21 _wired_eth1 ?/? 10.17.88.188 b ap 0/0/0 0 d8:c7:c8:cb:d4:20 0 18h:13m:59s
d8:c7:c8:3d:42:02 example1 ?/? 10.17.88.188 g-HT ap 7/21.5/21.5 0 d8:c7:c8:cb:d4:20 0
18h:13m:58s
d8:c7:c8:3d:42:03 example-local-nw ?/? 10.17.88.188 g-HT ap 7/21.5/21.5 0 d8:c7:c8:cb:d4:20 0
18h:13m:58s
Channel followed by "*" indicates channel selected due to unsupported configured channel.
"Spectrum" followed by "^" indicates Local Spectrum Override in effect.
Num APs:5
Num Associations:1 

The output of this command includes the following information:

Column	Description
bss	Displays the AP Basic Service Set Identifier (BSSID). This is usually the MAC address of the AP.
ess	Displays the AP Extended Service Set Identifier (ESSID).
port	Displays port used by the W-IAP.
ip	Displays the IP address of an AP.
phy	Displays an AP radio type. Possible values are:a-802.11aa-HT-802.11a high throughputg- 802.11gg-HT-802.11g high throughput
type	Shows whether the AP is working as an access point (AP) or air monitor (AM).
Column Description
ch/EIRP/max-EIRP	Displays the radio channel used by the AP/current effective Isotropic Radiated Power (EIRP) /maximum EIRP.
cur	Displays the current number of clients on the AP.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap client-match-history

show ap client-match-history [client-mac ]

Description

This command displays a historical record of the client match events and actions for the clients associated with IAP.

Syntax

Parameter Description
client-mac	Allows you to filter the output based on a client MAC address. When the client MAC address is specified and the command is executed, the client match actions pertaining to the specified client is displayed.

Usage Guidelines

Use this command to view the history of clients match actions for the clients associated with a W-IAP.

Example

The following example shows the output of show ap client-match-history command:

Client Match Action Table

Station Old State New State Reason Radio Time

00:db:df:0a:57:4e Normal Normal Client associated 1 18h:32m:5s  
00:db:df:0a:57:4e Normal Normal Client associated 0 15h:20m:1s  
00:db:df:0a:57:4e Normal Normal Client associated 0 9h:48m:57s  
00:db:df:0a:57:4e Normal Target I am the better AP 0 7m:9s  
00:db:df:0a:57:4e Normal Deny I am not the better AP 1 7m:9s  
a0:88:b4:41:64:18 Normal Deny I am not the better AP 0 5m:20s  
a0:88:b4:41:64:18 Normal Deny I am not the better AP 1 5m:20s  
00:db:df:0a:57:4e Target Adopted Client match succeed 0 5m:17s  
00:db:df:0a:57:4e Deny Normal Client match succeed 1 5m:17s  
a0:88:b4:41:64:18 Deny Normal State aged out 0 2m:27s  
a0:88:b4:41:64:18 Deny Normal State aged out 1 2m:23s 

Total 11 Records

00:24:6c:c8:74:4c# show ap client-match-his client-mac 00:db:df:0a:57:4e

Client Match History for 00:db:df:0a:57:4e

Old State New State Reason Radio Time

Normal Normal Client associated 1 18h:32m:5s

Normal Normal Client associated 0 15h:20m:1s

Normal Normal Client associated 0 9h:48m:57s

Normal Target I am the better AP 0 7m:9s

Normal Deny I am not the better AP 1 7m:9s

Target Adopted Client match succeed 0 5m:17s

Deny Normal Client match succeed 1 5m:17s

Total 7 Records

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap client-match-live

show ap client-match-live

Description

This command displays the current client match events and actions for clients associated with a W-IAP.

Usage Guidelines

Use this command to view the current clients match actions for the clients associated with a W-IAP.

Example

The following example shows the output of the show ap client-match-live command.

Client Match Table

Station CM State RSSI Radio Home AP Target AP Time

00:db:df:0a:57:4e Adopted 47 0 -- 5m:17s

Total 1 Client Matches

00:24:6c:c8:74:4c# show ap client-match-his

Client Match Action Table

Station Old State New State Reason Radio Time

00:db:df:0a:57:4e Normal Normal Client associated 1 18h:32m:5s

00:db:df:0a:57:4e Normal Normal Client associated 0 15h:20m:1s

00:db:df:0a:57:4e Normal Normal Client associated 0 9h:48m:57s

00:db:df:0a:57:4e Normal Target I am the better AP 0 7m:9s

00:db:df:0a:57:4e Normal Deny I am not the better AP 1 7m:9s

a0:88:b4:41:64:18 Normal Deny I am not the better AP 0 5m:20s

a0:88:b4:41:64:18 Normal Deny I am not the better AP 1 5m:20s

00:db:df:0a:57:4e Target Adopted Client match succeed 0 5m:17s

00:db:df:0a:57:4e Deny Normal Client match succeed 1 5m:17s

a0:88:b4:41:64:18 Deny Normal State aged out 0 2m:27s

a0:88:b4:41:64:18 Deny Normal State aged out 1 2m:23s

Total 11 Records

Command History

Version Description
Dell Networking W-Series Instant6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap client-probe-report

show ap client-probe-report []

Description

This command displays the client probe report for a W-IAP.

Syntax

Parameter Description
	Allows you to filter the output based the ID number of the radio (for example, 0 or 1).

Usage Guidelines

Use this command to view a probe report for the clients associated with a W-IAP.

Example

The following example shows the output of the show ap client-probe-report command.

AP Client Probe Report for Wifi0
MAC RSSI In Swarm Received
12:c6:00:04:00:00 45 No 36s
12:22:00:00:00:63 44 No 4s
12:3c:00:04:00:00 44 No 1s
02:88:00:00:00:02 44 No 1m:3s
12:ce:00:00:40:00 44 No 27s
12:4c:00:04:00:00 40 No 42s
02:10:00:00:00:06 34 No 40s
00:26:c6:bd:50:96 37 No 45s
08:ed:b9:e1:51:8b 47 No 1h:49m:18s
00:eb:2d:a5:a1:17 51 No 11h:59m:22s
00:19:77:71:41:20 28 No 2m:24s
12:13:00:00:11:10 38 No 59s
24:77:03:11:71:bc 19 No 2s
c4:85:08:dd:f1:58 46 No 55s
08:ed:b9:e1:52:19 56 No 9h:9m:30s
84:85:06:a0:62:86 16 No 5s
00:24:d7:ac:42:78 19 No 1m:38s
b4:b6:76:42:33:fd 32 No 46s
24:77:03:cf:f4:64 19 No 7h:15m:33s
1c:ab:a7:3f:d4:36 12 No 10m:28s
b4:b6:76:42:34:07 13 No 21s
e0:b9:ba:de:04:f1 11 No 12m:49s
b4:b6:76:42:54:28 50 No 44s
24:77:03:7a:85:24 11 No 8h:3lm:ls
c4:85:08:de:45:0e 40 No 49s
c4:85:08:de:35:5a 32 No 58s
c4:85:08:de:45:22 33 No 58s
b4:b6:76:42:55:ea 40 No 59s
b4:b6:76:42:55:b8 49 No 27s
b4:b6:76:42:36:af 51 No 0s
b4:b6:76:42:36:e1 45 No 19s
b4:b6:76:42:36:b4 46 No 29s
3c:a9:f4:ld:b7:94 13 No 14m:0s 

00:21:6a:ba:b7:ce 31 No 2s
04:0c:ce:e1:98:78 50 No 8h:3m:27s
00:1e:65:71:18:de 8 No 53m:14s
60:67:20:4d:e8:a8 13 No 2h:8m:22s
b4:b6:76:42:49:56 41 No 14s
b4:b6:76:42:49:1f 34 No 25s
c4:85:08:d4:79:48 33 No 29s
b4:b6:76:42:49:4c 48 No 31s
b4:b6:76:42:49:6a 42 No 33s
c8:f7:33:a3:69:2f 33 No 34s
c8:f7:33:a0:a9:6f 35 No 41s
b4:b6:76:42:49:47 37 No 41s
00:0b:6b:b1:79:f5 33 No 0s
58:94:6b:36:5a:58 41 No 9h:27m:23s
c8:f7:33:a4:9a:39 33 No 2m:29s
c8:f7:33:a4:5a:dd 46 No 3s
c8:f7:33:a4:5a:2e 42 No 2s
c8:f7:33:a4:5a:c9 40 No 12s
b4:b6:76:42:5a:9f 37 No 18s
7c:d1:c3:8a:6b:be 56 No 51m:33s
00:26:c6:52:6b:14 43 No 5h:23m:36s
58:94:6b:36:cb:e8 45 No 10h:3m:19s
c4:85:08:db:db:e8 40 No 20s
b4:b6:76:42:5b:3f 38 No 28s
b4:b6:76:42:5b:44 46 No 47s
ac:81:12:59:5c:12 54 No 3h:58m:3s
00:1e:e5:e4:ec:d0 35 No 1h:58m:59s
3c:a9:f4:1d:ac:a4 40 No 10h:27m:17s
00:03:7f:40:0c:13 19 No 30s
c0:c8:38:44:fd:1d 34 No 1h:40m:9s
00:19:7e:76:8d:84 13 No 8m:23s
00:19:77:79:ad:e0 52 No 43s
b4:b6:76:42:6d:05 40 No 7s
b4:b6:76:42:6d:0a 36 No 28s
84:85:06:b3:6d:28 16 No 1m:25s
b4:b6:76:41:fe:a6 45 No 7s
00:15:00:5c:de:00 14 No 53s
88:53:2e:2c:ee:6c 24 No 10s
10:40:f3:e4:5f:62 56 No 8h:50m:12s
00:19:7e:75:ff:35 26 No 26m:50s
00:26:c6:bd:4f:10 28 No 51s
Total 74 Stations 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap client-match-refused

show ap client-match-refused []

Description

This command displays the list of clients for which the channel allocation is refused based on the client match configuration parameters.

Syntax

Parameter Description
	Allows you to filter the output based the ID number of the radio (for example, 0 or 1).

Usage Guidelines

Use this command to view the list of clients for which client match actions are refused. When the client match feature is enabled on a W-IAP, the W-IAP measures the RF health of its associated clients. If spectrum load balancing is triggered and a client's Received Signal Strength Indication (RSSI) is or less than 20 dB, clients moved from one AP to another for better performance and client experience.

Example

The following example shows the output of the show ap client-match-refused command.

Client Match Status:: RUNNING BALANCING
Associated:1, Threshold:1
Leaving:0, Coming:0
Last Refused Clients Table

MAC RSSI Refused Count Last Refused Time

02:99:00:00:01:33 27 2 3
7e:17:7b:2c:f5:e2 5 4 6
00:27:10:c5:96:54 22 1 0
18:3d:a2:0a:48:3c 33 2 1
02:21:00:00:00:14 28 2 5
00:27:10:cf:ef:b4 32 2 7
7e:17:7b:27:6b:af 6 2 3
00:db:df:0a:6a:db 21 2 4

00:24:6c:c8:74:4c# show ap client-match-ref 1
Client Match Status:: RUNNING
Associated:0, Threshold:1
Leaving:0, Coming:0
Last Refused Clients Table

MAC RSSI Refused Count Last Refused Time

02:99:00:00:01:33 35 2 3
00:db:df:0a:6a:db 29 3 10
fc:75:16:03:40:d9 41 10 3
18:3d:a2:09:79:ac 27 2 11
00:db:df:05:1f:d6 37 2 6
02:21:00:00:00:14 23 3 3
00:27:10:cf:ef:b4 27 2 5
00:27:10:cf:f2:4c 18 1 6 

Command History

Version Description
Dell Networking W-Series Instant6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap client-match-triggers

show ap client-match-triggers

Description

This command displays the configuration conditions that trigger client match events and actions for the clients associated with a W-IAP.

Usage Guidelines

Use this command to view the clients match trigger records. When the client match feature is enabled on a W-IAP measures the RF health of its associated clients. Based on the following trigger conditions, the clients moved from one AP to another for better performance and client experience.

• Dynamic Load Balancing:
- Sticky Clients
- Band Steering
• Channel Utilization
- Client Capability Match

For more information on client match and client match trigger conditions, Networking W-Series Instant 6.4.0.2-4.1 User Guide

Example

The following example shows the output of the show ap client-match-triggers command:

Client Match Triggers

Station PHY Target_AP Reason STA_CAP rssi chan ccnt cutil g_cont RSSI CHAN CCNT ROOM CUTIL

A CCNT Time

00:15:00:5e:7e:3c 0 9c:1c:12:3a:e9:70 Dynamic Load Balancing - 25 36+ 12 - - 44 44+ 2 - - -
3h:11m:19s
5a:15:00:00:00:16 1 9c:1c:12:3a:e9:10 Sticky Client - 17 6 - - - 34 40- - - - - 2h:11m:40s
00:15:00:5e:77:c8 0 9c:1c:12:3a:e9:10 Dynamic Load Balancing - 36 48- 19 - - 38 40- 0 - - -
2h:11m:34s
a4:4e:31:97:da:74 0 9c:1c:12:3a:e9:10 Dynamic Load Balancing - 31 48- 19 - - 42 40- 0 - - -
2h:11m:34s
00:15:00:5b:72:1c 1 9c:1c:12:3a:e9:60 Sticky Client - 24 5 - - - 35 6 - - - - 1h:29m:37s
5a:12:00:00:00:11 0 9c:1c:12:3a:e6:70 Dynamic Load Balancing - 15 44+ 9 - - 35 40- 9 - - -
1h:9m:41s 

Total 6 Records

The output of this command displays client match trigger records with details such as station MAC, target AP trigger condition and so on.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap client-view

show ap client-view

Description

This command displays information about the clients in the AP neighborhood.

Usage Guidelines

Use this command to view information about the clients associated with the neighboring W-IAPs.

Example

The following example shows the output of show ap client-view command:

Client Match Neighbor Table

MAC Channel RSSI Clients Threshold Channel Util (%) VC Key Flags Received

d8:c7:c8:44:50:c0 6 13 1 -- - 8m:27s
d8:c7:c8:44:50:d0 40 8 2 -- - V 1s
d8:c7:c8:44:51:b0 44 40 10 -- - VR 2m:49s
d8:c7:c8:44:61:a0 1 36 3 -- - VR 58s
d8:c7:c8:44:61:b0 48 24 3 -- - V 1s
d8:c7:c8:44:51:a0 11 50 4 -- - VR 1s
d8:c7:c8:44:62:a0 6 19 2 -- - V 20s
6c:f3:7f:ef:12:c0 1 28 0 1 0 271d9383 VRIC 4s
6c:f3:7f:ef:12:d0 149E 72 0 1 0 271d9383 VRIC 13s
d8:c7:c8:44:62:b0 149 3 3 -- - 9m:8s
6c:f3:7f:ef:03:00 6 24 0 0 0 847face0 B 5m:7s
d8:c7:c8:44:63:90 153 9 2 -- - V 19s
6c:f3:7f:ee:f7:80 3 76 0 1 0 271d9383 VRIC 6s
6c:f3:7f:ee:f7:90 52E 62 0 1 0 271d9383 VRIC 4s
d8:c7:c8:44:4a:30 161 7 2 -- - S 12m:43s
d8:c7:c8:44:4b:80 6 10 3 -- - VR 1m:24s
d8:c7:c8:44:4b:90 48 17 2 -- - VR 2m:34s
6c:f3:7f:ee:dc:20 11 32 2 3 0 847face0 3m:6s
d8:c7:c8:44:4c:80 6 24 1 -- - VR 2m:27s
d8:c7:c8:44:4c:90 36 20 11 -- - VR 2m:34s
6c:f3:7f:e7:5d:40 1 59 1 3 0 847face0 14m:24s
Neighbor Flags: V - Valid; R - In RF Neighborhood; S - Same Channel;
B - Balancing; C - Client Match Enabled; I - In Same Swarm
Total 21 Neighbors
00:24:6c:c8:74:4c# show ap client-match-live
Client Match Table
Station CM State RSSI Radio Home AP Target AP Time
---- ---- ---- ---- ---- ----
00:db:df:0a:57:4e Adopted 47 0 -- - 5m:17s 

Total 1 Client Matches

Command History

Version Description
Dell Networking W-Series Instant6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave

show ap debug airwave

Description

This command displays the list of W-AirWave servers configured on a W-IAP.

Usage Guidelines

Use this command to view the list of W-AirWave servers configured for a W-IAP.

Example

The following example shows the output of show ap airwave command:

Airwave Server List

Domain/IP Address Type Mode Status

test.com Primary - Not connected

test1.com Backup - Not connected

The output of this command includes the following information:

Column Description
Domain/IP Address	Displays the IP address or domain name of the W-AirWave server.
Type	Displays the type of the W-AirWave server. For example, backup or primary server.
Mode	Indicates the mode of W-AirWave operation.NOTE: W-AirWave can be configured to operate in the Manage Read/Write o Monitor-only+ Firmware Upgrades modes.
Status	Indicates the W-AirWave login status.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	The Domain name is added.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave-config-received

show ap debug airwave-config-received

Description

This command indicates if any configuration information is received by the W-IAP from the W-AirWave server.

Usage Guidelines

Use this command to view if any configuration information is received from the W-AirWave server.

Example

The following example shows the output of the show ap debug airwave-config-received command:

show ap debug airwave-config-received No configuration received from AirWave yet

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave-data-sent

show ap debug airwave-data-sent

Description

This command displays information about data exchange between the W-AirWave server and the W-IAP.

Usage Guidelines

Use this command to view information about the data sent to the W-AirWave server.

Example

The following example shows the output of the show ap debug airwave-data-sent command:

cat: /tmp/awc_buf.txt: No such file or directory

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave-events-pending

show ap debug airwave-events-pending

Description

This command displays the pending W-AirWave server events.

Usage Guidelines

Use this command to view the pending W-AirWave server events.

Example

The following example shows the partial output of the show ap debug airwave-events-pending command:

<t11>
<e61>1106</e61>
<e62>654</e62>
<e1005>6c:f3:7f:56:7f:60</e1005>
<e1006>7SPOT</e1006>
<e1001>d8:c7:c8:cb:d4:20</e1001>
<e1056>2</e1056>
<e1017>d8:c7:c8:cb:d4:20</e1017>
<e1018>1</e1018>
<e1058>Varbind deprecated</e1058>
</t11> 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave-signon-key

show ap debug airwave-signon-key

Description

This command displays the W-AirWave sign on key used by the used by the administrator to manually autho first Virtual Controller for an organization.

Usage Guidelines

Use this command to view the W-AirWave sign on key details for debugging purpose.

Example

The following example shows the output of the show ap debug airwave-signon-key command:

awc_ui_key_new : 8adf05e0013cb69393335b32627b02db7b49af0705da9fbda6

awc_ui_key_old : 9418cf5e0137b6b2d99e78c64e8604522948881d78fd7781e2

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave-state

show ap debug airwave-state

Description

This command displays the configuration details and status of W-AirWave events associated with a W-IAP.

Usage Guidelines

Use this command to view the current state of W-AirWave events associated with the W-IAP.

Example

The following example shows the output of the show ap debug airwave-state command:

<t1>
< e1>fc6520ad018ee6eb13bdc6b985e0fe6361bd37f7d25212a77e</e1>
< e2>Instant-C4:42:98</e2>
< e3></e3>
< e5>0.0.0.0</e5>
< e8>6.2.0.0-3.3.0.0_37557</e8>
< e60>Dell</e60>
< e79>c3abebcd0138eb8997a5ee52abf418883ee1356fbf0befba81</e79>
< e63></e63>
< e64></e64>
</t1>
<t4>
< e25>test</e25>
< e26>2</e26>
< e27></e27>
< e28>64</e28>
< e29>1</e29>
< e30>2</e30>
</t4>
<t4>
< e25>test123</e25>
< e26>3</e26>
< e27></e27>
< e28>64</e28>
< e29>1</e29>
< e30>2</e30>
</t4>
<t2>
< e1>d8:c7:c8:c4:42:98</e1>
< e6>BE0000315</e6>
< e2>d8:c7:c8:c4:42:98</e2>
< e7>1.3.6.1.4.1.14823.1.2.34</e7>
< e18></e18>
< e5>10.17.88.59</e5>
< e15>10</e15>
< e16>129183744</e16>
< e17>71094272</e17>
< e13>1</e13>
< e14>257137</e14>
< e65>0</e65>
<t3>
< e1>d8:c7:c8:c4:29:88</e1>
< e23>48-</e23>
< e24>22</e24>
< e10>0</e10>
< e11>1</e11> 

<e47>93</e47>
<e46>3</e46>
</t3>
<t3>
<e1>d8:c7:c8:c4:29:80</e1>
<e23>1</e23>
<e24>22</e24>
<e10>1</e10>
<e11>0</e11>
<e47>80</e47>
<e46>61</e46>
</t3>
</t2> 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug airwave-stats

show ap debug airwave-stats

Description

This command displays the configuration statistics associated with a W-IAP managed or monitored by the W-AirWave server.

Usage Guidelines

Use this command to view configuration details of a W-IAP managed or monitored by the W-AirWave server.

Example

The following example shows the partial output of the show ap debug airwave-stats command:

<t7>
<e1>d8:c7:c8:3d:3a:83</e1>
<e25>test_wep</e25>
<e23>1</e23>
<e22>1</e22>
<e21>1</e21>
<e19>2</e19>
<e20>1</e20>
</t7>
<t7>
<e1>6c:f3:7f:a5:df:32</e1>
<e25>sw-san-rapng-13</e25>
<e23>153</e23>
<e22>1</e22>
<e21>1</e21>
<e19>1</e19>
<e20>1</e20>
</t7>
<t7>
<e1>d8:c7:c8:3d:46:d2</e1>
<e25>test_1x_term</e25>
<e23>48</e23>
<e22>1</e22>
<e21>1</e21>
<e19>1</e19>
<e20>2</e20>
</t7> 

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ap debug am-config

show ap debug am-config

Description

This command displays the information required for debugging a W-IAP.

Syntax

Parameter Description
mac	MAC address in the trace buffer.

Example

The following example shows the partial output of show ap debug am-config command:

Channel Number
1
7
Valid 40MHz A-Channel Pairs 

Channel Number 

36
44
52
60
149
157
AP System Configuration 

Parameter Value
-------- 

AM Scan RF Band all
RF Behavior Configuration 

Parameter Value 

Station Handoff Assist Disable
RSSI Falloff Wait Time 0
Low RSSI Threshold 0
RSSI Check Frequency 0
Event Thresholds Configuration 

Parameter Value 

Detect Frame Rate Anomalies Disable
Bandwidth Rate High Watermark 0
Bandwidth Rate Low Watermark 0
Frame Error Rate High Watermark 0
Frame Error Rate Low Watermark 0
Frame Fragmentation Rate High Watermark 0
Frame Fragmentation Rate Low Watermark 0
Frame Low Speed Rate High Watermark 0
Frame Low Speed Rate Low Watermark 0
Frame Non Unicast Rate High Watermark 0
Frame Non Unicast Rate Low Watermark 0
Frame Receive Error Rate High Watermark 0 

Frame Receive Error Rate Low Watermark 0

Frame Retry Rate High Watermark 0

Frame Retry Rate Low Watermark 0

Interference Configuration

Parameter Value

Detect Interference Disable

Interference Increase Threshold 0

Interference Increase Timeout 0

Interference Wait Time 0

IDS General Configuration

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug auth-trace-buf

show ap debug auth-trace-buf []

Description

This command displays the trace buffer for authentication events associated with the W-IAP.

Syntax

Parameter Description
	Displays the authentication trace information for a specific MAC address.

Usage Guidelines

Use the output of this command to troubleshoot authentication errors. Include the parameter to filter data by the MAC address of the client to view specific details.

Example

The following example shows the output of show ap debug auth-trace-buf command:

Auth Trace Buffer

May 10 13:05:09 station-up * ac:81:12:59:5c:12 d8:c7:c8:3d:42:13 - - wpa2 psk aes
May 10 13:05:09 wpa2-key1 <- ac:81:12:59:5c:12 d8:c7:c8:3d:42:13 - 117
May 10 13:06:30 station-up * 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - - wpa2 psk aes
May 10 13:06:30 wpa2-key1 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:06:30 wpa2-key2 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:06:30 wpa2-key3 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 151
May 10 13:06:30 wpa2-key4 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 95
May 10 13:07:03 station-up * 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - - wpa2 psk aes
May 10 13:07:03 wpa2-key1 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:07:03 wpa2-key2 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:07:03 wpa2-key3 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 151
May 10 13:07:03 wpa2-key4 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 95 

The command output displays the most recent ten trace buffer entries for the W-IAP. Each row in the output table may include some or all of the following information:

• A timestamp that indicates when the entry was created.
  • The type of exchange that was made.
  • The direction the packet was sent.
  • The source MAC address.
  • The destination MAC address.
  • The packet number.
  • The packet length.
  • Additional information such as encryption and WPA type.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug client-match

show ap debug client-match

Description

This command displays the information about the client match configuration status on an AP radio interface.

Syntax

Parameter Description
	Allows you to specify the ID number of the radio (for example, 0 or 1) for which you want to view client match configuration status.

Usage Guidelines

Use this command to view the status of client match configuration for a specific radio interface.

Example

The following example shows the output of show ap debug client-match command:

Client Match Status:: RUNNING

Associated:0, Threshold:MAX

Leaving:0, Coming:0

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug client-stats

show ap debug client-stats <mac)

Description

This command displays detailed statistics about a W-IAP client.

Syntax

Parameter Description
	Displays data based on the client MAC address.

Usage Guidelines

Use this command to view information about a W-IAP client.

Example

The following command output displays statistics for packets received from and transmitted to the specified cli

Station Stats
----
Parameter Value
----
---- General Per-radio Statistics
---- Transmit specific Statistics
Frames Rcvd For TX 22
Tx Frames Dropped 0
Frames Transmitted 22
Success With Retry 1
Tx Mgmt Frames 2
Tx Probe Responses 0
Tx Data Frames 20
Tx CTS Frames 0
Dropped After Retry 0
Dropped No Buffer 0
Missed ACKs 1
Long Preamble 22
Short Preamble 0
Tx EAPOL Frames 13
Tx 6 Mbps 15
Tx 48 Mbps 5
Tx 54 Mbps 2
Tx WMM [VO] 15
UAPSD OverflowDrop 0
---- Receive specific Statistics
Last SNR 31
Last SNR CTL0 28
Last SNR CTL1 25
Last SNR CTL2 22
Last ACK SNR 32
Last ACK SNR CTL0 30
Last ACK SNR CTL1 28
Last ACK SNR CTL2 21
Last ACK SNR EXT0 5
Last ACK SNR EXT1 4
Frames Received 2932
Rx Data Frames 2930
Null Data Frames 2879 

Rx Mgmt Frames 1
PS Poll Frames 0
Rx 6 Mbps 14
Rx 12 Mbps 6
Rx 18 Mbps 5
Rx 24 Mbps 2
Rx 36 Mbps 13
Rx 48 Mbps 1162
Rx 54 Mbps 1730
Rx WMM [BE] 39

The output of this command includes the following information:

Parameter Description
Frames Rcvd For TX	Shows the number of frames received for transmission.
Tx Frames Dropped	Shows the number of transmission frames that were dropped.
Frames Transmitted	Shows the number of frames successfully transmitted.
Success With Retry	Shows the number of frames that were transmitted after being retried.
Tx Mgmt Frames	Shows the number of management frames transmitted.
Tx Probe Responses	Shows the number of transmitted probe responses.
Tx Data Frames	Shows the number of transmitted data frames.
Tx CTS Frames	Shows the number of clear-to-sent (CTS) frames transmitted.
Dropped After Retry	Shows the number of frames dropped after an attempted retry.
Dropped No Buffer	Shows the number of frames dropped because the AP's buffer was full.
Missed ACKs	Shows the number of missed acknowledgements (ACKs)
Long Preamble	Shows the number of frames sent with a long preamble.
Short Preamble	Shows the number of frames sent with a short preamble.
Tx EAPOL Frames	Shows the number of Extensible Authentication Protocol over LAN (EAPOL) frames transmitted.
Tx <n> Mbps	Shows the number of frames transmitted at <n> Mbps, where <n> is a value between 6 and 300.
Tx WMM	Shows the number of Wi-Fi Multimedia (WMM) packets transmitted for the following access categories. If the AP has not transmitted packets in a category type, this data row will not be displayed in the output of the command.Tx WMM [BE]: Best EffortTx WMM [BK]: BackgroundTx WMM [VO]: VoIPTx WMM [VI]: Video
UAPSD OverflowDrop	Shows the number of packets dropped due to Unscheduled Automatic Power Save Delivery (U-APSD) overflow.
Last SNR	Indicates the last recorded signal-to-noise ratio.
Last SNR CTL0	Indicates the signal-to-noise ratio for the last received data packet on the primary (control) channel 0. This parameter is only displayed for APs operating in 40 MHz mode.
Last SNR CTL1	Indicates the signal-to-noise ratio for the last received data packet on the secondary (control) channel 1. This parameter is only displayed for APs operating in 40 Mhz mode.
Last SNR CTL2	Indicates the signal-to-noise ratio for the last received data packet on the secondary (control) channel 2. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR	Indicates the signal-to-noise ratio for the last received ACK packet.
Last ACK SNR CTL0	Indicates the signal-to-noise ratio for the last received ACK packet on the primary (control) channel 0. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR CTL1	Indicates the signal-to-noise ratio for the last received ACK packet on the primary (control) channel 1. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR CTL2	Indicates the signal-to-noise ratio for the last received ACK packet on the primary (control) channel 2. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR EXTO	Indicates the signal-to-noise ratio for the last received ACK packet on the secondary (extension) channel 0. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR EXT1	Indicates the signal-to-noise ratio for the last received ACK packet on the secondary (extension) channel 1. This parameter is only displayed for APs operating in 40 MHz mode.
Frames Received	Shows the number of frames received.
Rx Data Frames	Shows the number of data frames received.
Null Data Frames	Shows the number of null data frames received.
Rx Mgmt Frames	Shows the number of management frames received.
PS Poll Frames	Shows the number of power save poll frames received.
Rx <n> Mbps	Shows the number of frames received at <n> Mbps, where <n> is a value between 6 and 300.
Tx WMM	Shows the number of Wi-Fi Multimedia (WMM) packets transmitted for the following access categories. If the AP has not transmitted packets in a category type, this data row will not be displayed in the output of the command.Tx WMM [BE]: Best EffortTx WMM [BK]: BackgroundTx WMM [VO]: VoIPTx WMM [VI]: Video

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug client-table

show ap debug client-table

Description

This command shows the clients associated with a W-IAP.

Usage Guidelines

Use this command to view a list of W-IAP clients.

Example

The following example shows the output of show ap debug client-table command:

Client Table

MAC ESSID BSSID Assoc State HT State AID PS State

08:ed:b9:e1:51:7d example1 d8:c7:c8:3d:42:12 Associated WSsM 0x1 Awake

UAPSD Tx_Pkts Rx_Pkts PS_Qlen Tx_Retries Tx_Rate Rx_Rate Last_ACK_SNR

(0,0,0,0,N/A,0) 101 12888 0 0 300 300 45

Last_Rx_SNR TX_Chains Tx_Timestamp Rx_Timestamp MFP Status (C,R)

50 3[0x7] Sun May 12 07:41:25 2013 Sun May 12 07:42:13 2013 (0,0)

UAPSD: (VO, VI, BK, BE, Max SP, Q Len)

HT Flags: A - LDPC Coding; W - 40Mhz; S - Short GI HT40; s - Short GI HT20

D - Delayed BA; G - Greenfield; R - Dynamic SM PS

Q - Static SM PS; N - A-MPDU disabled; B - TX STBC

b - RX STBC; M - Max A-MSDU; I - HT40 Intolerant

The output of this command includes the following information:

Parameter	Description
MAC	Indicates the MAC address of the W-IAP.
ESSID	Indicates the Extended Service Set identifier (ESSID) used by the client. An ESSID is a user-defined name for a wireless network.
BSSID	Filters the W-IAP Config table by BSSID. The Basic Service Set Identifier (BSSID) is usually the AP's MAC address.
Assoc_State	Shows whether or not the client is currently authorized and/or associated with the W-IAP.
HT_State	Shows the client's high-throughput (802.11n) transmission type:none: AP is a legacy AP that does not support the 802.11n standard.20Mhz: A high-throughput APs using a single 20 Mhz channel.40Mhz: A high-throughput APs using two 20 Mhz channels.
AID	Indicates the 802.11 association ID. A client receives a unique 802.11 association ID when it associates to a W-IAP.
Parameter Description
UAPSD	Shows the following values for Unscheduled Automatic Power Save Delivery (UAPSD) in comma-separated format: VO, VI, BK, BE, Max SP, Q Len.VO: If 1, UAPSD is enabled for the VoIP access category. If UAPSD is disabled for this access category, this value is 0.VI: If 1, UAPSD is enabled for the Video access category. If UAPSD is disabled for this access category, this value is 0.BK: If 1, UAPSD is enabled for the Background access category. If UAPSD is disabled for this access category, this value is 0.BE: If 1, UAPSD is enabled for the Best Effort access category. If UAPSD is disabled for this access category, this value is 0.Max SP: The maximum service period is the number of frame sent per trigger packet. This value is value can be 0, 2, 4 or 8.Q Len: The number of frames currently queued for the client, from 0 to 16 frames.
Tx_Pkts	Shows the number of packets transmitted by the client.
Rx_Pkts	Shows the number of packets received by the client.
PS_Qlen	Shows power save queue length, in bytes.
Tx_Retries	Shows the number of packets that the client had to resend due to an initial transmission failure.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug crash-info

show ap debug crash-info

Description

This command displays log information for a W-IAP that crashed. The stored crash information is cleared from flash after the W-IAP reboots.

Syntax

No parameters

Usage Guidelines

Use this command to view the W-IAP crash information for debugging purpose.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ap debug dhcp-packets

show ap debug dhcp-packets

Description

This command displays information about the DHCP packets sent or received by a W-IAP.

Usage Guidelines

Use this command to view information about the DHCP packets trace information for a W-IAP.

Example

The following example shows the output of show ap debug dhcp-packets command:

Traced Dhcp Packets

Timestamp Mtype Htype Hops TID Cip Yip Sip Gip Cmac

The output of this command includes the following parameters:

Column Description
Timestamp	Displays the timestamp for DHCP packets.
Mtype	Indicates the message type.
Htype	Indicates the hardware address type
Hops	Shows the number of hops.
TID	Shows the transaction ID.
Cip	Indicates the client IP address.
Yip	Indicates the IP address of the W-IAP.
Sip	Indicates the source IP address from which the DHCP packets originated.
Gip	Indicates the Gateway IP address.
Cmac	Indicates the MAC address of the client.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug dot1x-statistics

show ap debug dotlx-statistics

Description

This command displays the aggregate 802.11X debug statistics for a W-IAP.

Usage Guidelines

Use this command to view information about the 802.11x authentication.

Example

The following output is displayed for the show ap debug dot1x-statistics command:

802.1X Statistics

Mac Name AP Auth-Succs Auth-Fails Auth-Tmout Re-Auths

08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 0 0 0 0

Total: 0 0 0 0

Supp-Naks UKeyRot MKeyRot ----  
0 0 0  
0 0 0  
802.1x Counters  
WPA2  
Message-1.....3  
Message-2.....2  
Message-3.....2  
Message-4.....2 

The output of this command includes the following parameters:

Parameter Description
Mac	Displays the MAC address of the authenticated client.
Name	Displays the name of the client device
AP	Displays the AP device details to which the client is connected.
Auth-Succs	Displays the number of times the client authenticated successfully.
Auth-Fails	Displays the number of times the client failed to authenticate.
Auth-Timeout	Displays if client authentication timeout details.
Reauths	Displays the reauthentication attempts if any.
Supp-Naks	Displays the number of supplementary NAKs.
UkeyRot	Displays the unicast key rotation details.
MkeyRot	Displays the multicast key rotation details.
802.1X counters	Displays the 802.1X authentication counters.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug driver-config

show ap debug driver-config

Description

This command displays W-IAP driver configuration.

Usage Guidelines

Use this command to review configuration changes made since the W-IAP driver was last reset.

Example

The show ap debug driver-config command displays the BSSID, SSID, and radio configuration details associated with the W-IAP driver. The following output is displayed for the show ap debug driver-config command:

Downloaded Config for WIFI 0
----
Item Value
----
BSSID d8:c7:c8:3d:42:12
LMS IP
Master IP 0.0.0.0
Mode AP Mode
Group Key Received Yes
QBSS Probe Response Allow Access
Native VLAN ID 1
LED operating mode (11n APs only) normal
SAP MTU 1500 bytes
Heartbeat DSCP 0
High throughput enable (radio) Enabled
Channel 44+
Transmit EIRP 24 dBm
Non-Wi-Fi Interference Immunity 2
Enable CSA Disabled
CSA Count 4
Advertise 802.11d and 802.11h Capabilities Disabled
TPC Power 0 dBm
Spectrum Load Balancing Disabled
Spectrum Load Balancing Mode channel
Spectrum Load Balancing Update Interval (sec) 30 seconds
Spectrum Load Balancing Threshold (%) 2 percent
Infrastructure assisted client association management Disabled
Beacon Period 100 msec
Beacon Regulate Disabled
Advertized regulatory max EIRP 0
ARM/WIDS Override Dynamic
Reduce Cell Size (Rx Sensitivity) 0 dB
Management Frame Throttle interval 0 sec
Management Frame Throttle Limit 0
Maximum Distance 600 meters
RX Sensitivity Threshold 0 dB
RX Sensitivity Tuning Based Channel Reuse disable
Active Scan Enabled
ARM Over the Air Updates Disabled
VoIP Aware Scan Enabled
Power Save Aware Scan Disabled
Video Aware Scan Enabled
Load aware Scan Threshold 1048576 Bps
40 MHz intolerance Disabled
Honor 40 MHz intolerance Enabled 

CSD override Enabled

Advertise 802.11K Capability Disabled

Measurement Mode for Beacon Reports passive

Channel for Beacon Requests in 'A' band 0

Channel for Beacon Requests in 'BG' band 0

Channel for AP Channel Reports in 'A' band 0

Channel for AP Channel Reports in 'BG' band 0

Time duration between consecutive Beacon Requests 0 sec

Time duration between consecutive Link Measurement Requests 0 sec

Time duration between consecutive Transmit Stream Measurement Requests 0 sec

Enable Handover Trigger feature Disabled

Advertise Enabled Capabilities IE Disabled

Advertise Country IE Disabled

Advertise Power Constraint IE Disabled

Advertise TPC Report IE Disabled

Advertise QBSS Load IE Disabled

Advertise BSS AAC IE Disabled

Advertise Quiet IE Disabled

Advertise Fast-BSS Transition (802.11r) Capability Disabled

Fast-BSS Transition Mobility Domain ID 0

Country Code IN

ESSID example1

Encryption wpa2-psk-aes

WPA2 Pre-Auth Disabled

Enable Management Frame Protection Disabled

Require Management Frame Protection Disabled

DTIM Interval 1 beacon periods

802.11a Basic Rates 6 12 24

802.11a Transmit Rates 6 9 12 18 24 36 48 54

Station Ageout Time 1000 sec

Max Transmit Attempts 16

RTS Threshold 2333 bytes

Max Associations 64

Wireless Multimedia (WMM) Enabled

Wireless Multimedia U-APSD (WMM-UAPSD) Powersave Enabled

WMM TSPEC Min Inactivity Interval 0 msec

DSCP mapping for WMM voice AC N/A

DSCP mapping for WMM video AC N/A

DSCP mapping for WMM best-effort AC N/A

DSCP mapping for WMM background AC N/A

Hide SSID Disabled

Deny Broadcast Probes Disabled

Local Probe Response Enabled

Local Probe Request Threshold (dB) 0

Disable Probe Retry Enabled

Maximum Transmit Failures 0

BC/MC Rate Optimization Disabled

Rate Optimization for delivering EAPOL frames Enabled

Strict Spectralink Voice Protocol (SVP) Disabled

802.11a Beacon Rate 0

Advertise QBSS Load IE Enabled

Advertise Location Info Disabled

Advertise AP Name Disabled

40 MHz channel usage Enabled

BA AMSDU Enable Disabled

Temporal Diversity Enable Enabled

High throughput enable (SSID) Enabled

Low-density Parity Check Enabled

Maximum number of spatial streams usable for STBC reception 1

Maximum number of spatial streams usable for STBC transmission 1

MPDU Aggregation Enabled

Max received A-MPDU size 65535 bytes

Max transmitted A-MPDU size 65535 bytes
Min MPDU start spacing 16 usec
Short guard interval in 20 MHz mode Enabled
Short guard interval in 40 MHz mode Enabled
Supported MCS set
Explicit Transmit Beamforming Disabled
Transmit Beamforming Compressed Steering Disabled
Transmit Beamforming non Compressed Steering Disabled
Transmit Beamforming delayed feedback support Disabled
Transmit Beamforming immediate feedback support Disabled
Transmit Beamforming Sounding Interval 0 sec
40 MHz channel usage Enabled
BA AMSDU Enable Disabled
Temporal Diversity Enable Enabled
High throughput enable (SSID) Enabled
Low-density Parity Check Enabled
Maximum number of spatial streams usable for STBC reception 1
Maximum number of spatial streams usable for STBC transmission 1
MPDU Aggregation Enabled
Max received A-MPDU size 65535 bytes
Max transmitted A-MPDU size 65535 bytes
Min MPDU start spacing 16 usec
Short guard interval in 20 MHz mode Enabled
Short guard interval in 40 MHz mode Enabled
Supported MCS set
Explicit Transmit Beamforming Disabled
Transmit Beamforming Compressed Steering Disabled
Transmit Beamforming non Compressed Steering Disabled
Transmit Beamforming delayed feedback support Disabled
Transmit Beamforming immediate feedback support Disabled
Transmit Beamforming Sounding Interval 0 sec
Forward mode bridge
Band Steering Enabled
Steering Mode prefer-5ghz
Dynamic Multicast Optimization (DMO) Disabled
Dynamic Multicast Optimization (DMO) Threshold 0 

VAP on radio 1 : is not created and is not enabled

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug mgmt-frames

show ap debug mgmt-frames

Description

This command displays the trace information for the 802.11 management frames.

Syntax

Parameter Description
	Displays trace information for a W-IAP based on MAC address.

Example

The following example shows the partial output of show ap debug mgmt-frames command:

Traced 802.11 Management Frames

Timestamp stype SA DA BSS signal Misc

May 9 23:09:42 deauth d8:c7:c8:c4:29:82 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15 - May 9 23:09:42 disassoc d8:c7:c8:c4:29:82 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15 - May 9 23:09:03assoc-respd8:c7:c8:c4:29:82 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15Success May 9 22:02:40 auth d8:c7:c8:c4:29:8b c4:85:08:de:06:d4 d8:c7:c8:c4:29:8b 15Success May 9 01:25:51 auth 08:ed:b9:e1:51:87 d8:c7:c8:c4:29:8a d8:c7:c8:c4:29:8a 60 -

The output of this command includes the following information:

Column Description
Timestamp	Indicates timestamp for the authentication management frame.
stype	Indicates the type of the packet.
SA	Indicates the source of the packets.
DA	Indicates the destination to which the packets are intended.
BSS	Indicates the BSSID.
Signal	Indicates the signal level.
Misc	Indicates miscellaneous information such as status and other relevant details.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug persistent-clients

show ap debug persistent-clients

Description

This command displays the information about the persistent W-IAP clients.

Usage Guidelines

Use this command to view information about the clients that are persistently connected to a W-IAP.

Example

The following example shows the output of show ap debug persistent-clients command:

Persistent Clients

MAC Address ESSID State Expired Update Time Expiration Time

The output of this command includes the following information:

Column Description
MAC Address	Shows the MAC address of the client.
ESSID	Shows the ESSID used by the client.
State	Indicates the connection status of the client
Expired	Indicates if the client session is expired.
Update Time	Indicates the update time.
Expiration Time	Indicates the time at which the client session expires.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug radio-stats

show ap debug radio-stats []

Description

This command displays the aggregate radio debug statistics of a W-IAP.

Syntax

Parameter Description
	Allows you to specify the ID number of the radio (for example, 0 or 1) for which you want to view statistics.

Usage Guidelines

Use this command to view the radio debug statistics for a W-IAP.

Example

The output of this command displays general statistics for the radio, as well as statistics for transmitted and received frames.

RADIO Stats

____

Parameter Value

____ ____

Tx Powersave Queue Timeouts 0

Tx Dropped After Retry 158551

Tx Dropped No Buffer 0

Tx Missed ACKs 158581

Tx Failed Beacons 1

Tx Multi-Beacon Fail 0

Tx Long Preamble 557658

Tx Short Preamble 0

Tx Beacon Interrupts 2597365

Tx Interrupts 780044

Tx FIFO Underrun 0

Tx Allocated Desc 557660

Tx Freed Desc 557660

Tx EAPOL Frames 15

TX STBC Frames 0

TX LDPC Frames 0

Tx AGGR Good 0

Tx AGGR Unaggr 0

Tx Data Priority [BE] 125

Tx Data 6 Mbps (Mon) 125

Tx Data 12 Mbps (Mon) 0

Tx Data 24 Mbps (Mon) 0

Tx Data 36 Mbps (Mon) 0

Tx Data 54 Mbps (Mon) 0

Tx Data 108 Mbps (Mon) 0

Tx Data 108 Mbps+ (Mon) 0

Tx Data Bytes 6 Mbps (Mon) 16648

Tx Data Bytes 12 Mbps (Mon) 0

Tx Data Bytes 24 Mbps (Mon) 0

Tx Data Bytes 36 Mbps (Mon) 0

Tx Data Bytes 54 Mbps (Mon) 0

Tx Data Bytes 108 Mbps (Mon) 0

RADIO Stats

Parameter Value

Tx Data Bytes 108 Mbps+ (Mon) 0

Tx 6 Mbps 557650

Tx WMM [BE] 125

Tx WMM [VO] 557532

Tx WMM [BE] Dropped 158561

Tx UAPSD OverflowDrop 0

TX Timeouts 36

Lost Carrier Events 8

Tx HT40 Hang Detected 0

Tx HT40 Hang Stuck 0

Tx HT40 Hang Possible 0

Tx HT40 Dfs IMM WAR 0

Tx HT40 Dfs HT20 WAR 0

Tx MAC/BB Hang Stuck 0

Tx Mgmt Bytes 1434583125

Tx Beacons Bytes 1202571538

Receive Specific Statistics

Rx Last SNR 16

Rx Last SNR CTL0 14

Rx Last SNR CTL1 13

Rx Last ACK SNR 0

Rx Frames Received 5622989

Rx Good Frames 4517471

Rx Bad Frames 1105518

Rx Total Data Frames Recvd 518806

Rx Total Mgmt Frames Recvd 3261635

Rx Total Control Frames Recvd 736829

Rx Total Bytes Recvd 755424522

Rx Total Data Bytes Recvd 78179450

Rx Total RTS Frames Recvd 230212

Rx Total CTS Frames Recvd 204854

Rx Total ACK Frames 2344801

The output of this command provides the following information:

Column Description
Parameter	Displays the transmission and reception parameters.
Value	Displays the values associated with the transmission and reception parameters.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug radius-statistics

show ap debug radius-statistics

Description

This command displays the RADIUS statistics for the authentication servers configured on a W-IAP.

Usage Guidelines

Use this command to view the authentication server details.

Example

The output of this command displays general statistics of the authentication servers configured on a W-IAP.

RADIUS Statistics
Statistics TerminationServer InternalServer testserver test1234
In Service: Management Auth Not used Not used Not used Not used
In Service: Example1 Not used Up 67920s Not used Not used
Accounting Requests 0 0 0 0
Raw Requests 0 0 0 0
PAP Requests 0 0 0 0
CHAP Requests 0 0 0 0
MS-CHAP Requests 0 0 0 0
MS-CHAPv2 Requests 0 0 0 0
Mismatch Response 0 0 0 0
Invalid Secret 0 0 0 0
Access-Accept 0 0 0 0
Access-Reject 0 0 0 0
Accounting-Response 0 0 0 0
Access-Challenge 0 0 0 0
Unknown Response code 0 0 0 0
Timeouts 0 0 0 0
AvgRespTime (ms) 0 0 0 0
Total Qrequests 0 0 0 0
Total Response 0 0 0 0
Read Error 0 0 0 0
SEQ first/last/free 0/0/0 0/0/0 0/0/0 0/0/0 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug shaping-table

show ap debug shaping-table

Description

This command displays the shaping information for clients associated to a W-IAP.

Usage Guidelines

Use this command to view the shaping information for clients connected to a W-IAP.

Example

The following output is displayed for the show ap debug shaping-table command:

Interface :wifi1
VAP aruba102
in out drop fail q cmn[C:O:H] Numcl TotCl BWmgmt
28 28 0 0 0 328787-328787-328787 0-0-0 0 1 -0
d1 d2 d3 d4 d5 d6 d7 d8 d9
0 28 0 28 0 28 0 0 0

idx tokens last-t bw-t in out drop fail q tx-t rx-t al-t rate
idx d1 d2 d3 d4 d5 d6 d7 d8 d9 d10
0 2147483647 0 0 0 0 0 0 0 0 0
VAP aruba103
in out drop fail q cmn[C:O:H] Numcl TotCl BWmgmt
0 0 0 0 0 328787-328787-328787 0-0-0 0 1 -0
d1 d2 d3 d4 d5 d6 d7 d8 d9
0 0 0 0 0 0 0 0 0

idx tokens last-t bw-t in out drop fail q tx-t rx-t al-t rate
idx d1 d2 d3 d4 d5 d6 d7 d8 d9 d10
0 2147483647 0 0 0 0 0 0 0 0 0

The output of this command provides the following information:

Column Description
in	Shows the number of packets received by the AP.
out	Shows the number of packets sent by the AP.
drop	Shows the number of packets dropped by the AP.
fail	Shows the number of packets failed.
Numcl	Shows the number of CCK (802.11b) and OFDM (802.11a/g) packets dropped.
TotCl	Shows the total number of clients associated with the AP
Bwmgmt	Displays 1 if the bandwidth management feature has been enabled. Otherwise, it displays a 0.
idx	Shows the association index value.
tokens	Represents the credits the station has to transmit tokens.
last-t	Shows the number of tokens that were allocated to the station last time toke allocation algorithm ran.
in	Shows the number of packets received.
out	Shows the number of packets sent.
drop	Shows the number of dropped packets.
q	Shows the number of queued packets
tx-t	Shows the total time spent transmitting data.
rx-t	Shows the total time spent receiving data.
al-t	Shows the total time allocated for transmitting data to this station.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug spanning-tree

show ap debug spanning-tree

Description

This command displays the Spanning Tree Protocol (STP) information for a W-IAP.

Usage Guidelines

Use this command to view STP details on a W-IAP. STP is enabled for a wired port profile to ensure that t loops in any bridged Ethernet network. STP operates on all downlink ports, regardless of forwarding mode. S not operate on the uplink port and is supported only on W-IAPs with three or more ports.

Example

The following example shows the output displayed for the show ap debug spanning-tree command when there are no STP devices found:

stpdev: can't get info No such device

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ap debug stm-config

show ap debug stm-config

Description

This command displays the W-IAP station management configuration information.

Usage Guidelines

Use this command to view the details of station management configuration.

Example

The following output is displayed for the show ap debug stm-config command:

SSID:
Server Load Balancing:disable
MAC Authentication:disable
RADIUS Accounting:disable
SSID:_wired_ethl
Server Load Balancing:disable
MAC Authentication:disable
RADIUS Accounting:disable
SSID:wireless-local-nw
Server Load Balancing:disable
MAC Authentication:disable
RADIUS Accounting:disable
Associated RADIUS Server:InternalServer 

The output of this command provides the following information for each SSID:

Column Description
SSID	Indicates the name of the SSID.
Server Load Balancing	Indicates if server load balancing is enabled.
MAC Authentication	Indicates if MAC authentication is enabled.
RADIUS Accounting	Indicates if RADIUS accounting is enabled.
Associated RADIUS Server	Displays the authentication server details configured for an SSID.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap debug system-status

show ap debug system-status

Description

This command displays the detailed system configuration information for a W-IAP.

Usage Guidelines

Use this command under the guidance of Dell technical support to troubleshoot network issues. The output of command displays the following types of information if any for the selected W-IAP:

Bootstrap information	Per-radio statistics	Ethernet duplex/speed settings
Descriptor Usage	Encryption statistics	Tunnel heartbeat stats
Interface counters	AP uptime	Boot version
MTU discovery	memory usage	LMS information
ARP cache	Kernel slab statistics	Power status
Route table	Interrupts	CPU type
Interface Information	Crash Information	CPU usage statistics

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ap dot11k-beacon-report

show ap dot1lk-beacon-report

Description

This command displays the beacon report details for the 802.11k clients of a W-IAP.

Syntax

Parameter Description
	Allows you to specify the MAC address of the client for which you want to view the beacon report details.

Usage Guidelines

Use this command to view the beacon report details for 802.11k clients connected to a W-IAP.

Example

The following example shows the output of the show ap dot11k-beacon-report command:

(Instant AP)# show ap dot1lk-beacon-report 70:11:24:56:02:72

Client: 70:11:24:56:02:72

Status: Success

Nor count: 4

Last received: 31s

Client 11k Beacon Report

BSSID	Channel	RSSI	Antenna
6c:f3:7f:b6:62:f0	38	92	0
6c:f3:7f:b6:69:30	38	94	0
6c:f3:7f:4a:43:d0	46	94	0
6c:f3:7f:b6:66:30	46	92	0

The output of this command displays information on the number of 802.11k neighbors, connection status, and channel, RSSI and antenna details for the specified MAC address.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap dot11k-nbrs

show ap dot11k-nbrs

Description

This command displays the neighboring details of the 802.11k clients connected to a W-IAP.

Usage Guidelines

Use this command to view neighbors of the 802.11k clients connected to a W-IAP.

Example

The following example shows the output of the show ap dot11k-nbrs command:

Radio: 0

Nbr count: 3

11k Neighbours

BSSID	Channel	Last Update
6c:f3:7f:b6:62:f0	292	1s
6c:f3:7f:b6:69:30	816	6s
6c:f3:7f:b6:66:30	808	5s

Radio: 1

Nbr count: 3

11k Neighbours

BSSID	Channel	Last Update
6c:f3:7f:b6:62:e0	1	13s
6c:f3:7f:b6:66:20	6	33s
6c:f3:7f:b6:69:20	6	33s

The output of this command displays information on the number of 802.11k neighbors on each radio of the V

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap flash-config

show ap flash-config

Description

This command shows the statistics of the W-IAP configuration stored in flash memory.

Usage Guidelines

Use this command to view the configuration details in the flash memory.

Example

The following example shows the output of show ap flash-config command:

IP Address: 10.15.20.252

Network Mask:10.15.22.257

Gateway IP:10.15.20.255

DNS Server: 92.168.1.10

Domain Name: floor1.test.com

Name: Undefined

The output of this command includes the following information:

Parameter Description
IP Address	Displays the IP address of the W-IAP.
Network Mask	Displays the Network mask of the network.
Gateway IP	Displays the Gateway IP address to which traffic is sent.
DNS Server	Displays the IP address of the DNS server.
Domain Name	Displays the Domain name of the server
Name	Displays the name of the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap mesh counters

show ap mesh counter

Description

This command displays the mesh counters for a W-IAP.

Usage Guidelines

Use this command to view a list of mesh counters available for a W-IAP.

Example

The following example shows the output of show ap mesh counter command.

Mesh Packet Counters

Interface Echo Sent Echo Recv Probe Req Probe Resp Assoc Req Assoc Resp Assoc Fail Link up/down Resel. Switch Other Mgmt

Parent 0 0 770 770(770 HT) 0 0 0 0 - - 0

Received Packet Statistics: Total 7013859, Mgmt 7013859 (dropped non-mesh 0), Da ta 0 (dropped unassociated 0)HT: pns=770 ans=0 pnr=0 ars=0 arr=0 anr=0

Recovery Profile Usage Counters

Item Value

Enter recovery mode 0

Exit recovery mode 0

Total connections to switch 0

Mesh loop-prevention Sequence No.:370765

Mesh timer ticks:370764

d8:c7:c8:c4:42:98# show ap mesh counters

Mesh Packet Counters

Interface Echo Sent Echo Recv Probe Req Probe Resp Assoc Req Assoc Resp Assoc Fail Link up/down Resel. Switch Other Mgmt

Parent 0 0 770 770(770 HT) 0 0 0 0 - - 0

Received Packet Statistics: Total 7016747, Mgmt 7016747 (dropped non-mesh 0), Data 0 (dropped unassociated 0)HT: pns=770 ans=0 pnr=0 ars=0 arr=0 anr=0

Recovery Profile Usage Counters

Item Value

Enter recovery mode 0

Exit recovery mode 0

Total connections to switch 0

Mesh loop-prevention Sequence No.:370891

Mesh timer ticks:370890

Column Description
Interface	Indicates whether the mesh interface connects to a Parent AP or a Child A Each row of data in the Mesh Packet Counters table shows counter values an individual interface.
Echo Sent	Number of echo packets sent.
Echo Recv	Number of echo packets received.
Probe Req	Number of probe request packets sent from the interface specified in the Mesh-IF parameter.
Probe Resp	Number of probe response packets sent to the interface specified in the Interface parameter.
Assoc Req	Number of association request packets from the interface specified in the Interface parameter.
Assoc Resp	Number of association response packets from the interface specified in the Interface parameter. This number includes valid responses and fail responses.
Assoc Fail	Number of fail responses received from the interface specified in the Interface parameter.
Link up/down	Number of times the link up or link down state has changed.
Resel.	Number of times a mesh point attempted to reselect a different mesh portal.
Switch	Number of times a mesh point successfully switched to a different mesh portal.
Other Mgmt	Management frames of any type other than association and probe frames, either received on child interface, or sent on parent interface.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap mesh link

show ap mesh link

Description

This command shows the mesh link of the W-IAP.

Example

The following example shows the output of show ap mesh link command:

(Instant AP)# show ap mesh link Neighbor list

MAC Portal Channel Age Hops Cost Relation Flags RSSI Rate Tx/Rx

00:0b:86:e8:09:d1 00:1a:1e:88:01:f0 157 0 1 11.00 C 3h:15m:42s - 65 54/54

00:1a:1e:88:02:91 00:1a:1e:88:01:f0 157 0 1 4.00 C 3h:35m:30s HL 59 300/300

00:0b:86:9b:27:78 Yes 157 0 0 12.00 N 3h:22m:46s - 26 - 00:0b:86:e8:09:d0 00:1a:1e:88:01:f0 157 0 1 11.00 N 3h:15m:36s - 65 - 00:1a:1e:88:02:90 00:1a:1e:88:01:f0 157+ 0 1 2.00 N 3h:35m:6s HL 59 - A-Req A-Resp A-Fail HT-Details Cluster ID

1 1 0 Unsupported sw-ad-GB32 1 1 0 HT-40MHzsgi-2ss sw-ad-GB322 0 0 0 Unsupported mcl 0 0 0 Unsupported sw-ad-GB32 0 0 0 HT-40MHzsgi-2ss sw-ad-GB32 Total count: 5, Children: 2

The output of this command includes the following information:

Parameter Description
MAC	MAC address of the mesh node.
Portal	By default, this column displays the BSSID of the mesh point. If you include the optional names parameter, this column will display AP names, if available. The AP names will include [p] (parent), or [c] (child) suffixes to indicate the role of the mesh BSSID.
Channel	Number of a radio channel used by the AP.
Age	Number of seconds elapsed since the AP heard from the neighbor.
Hops	Indicates the number of hops it takes traffic from the mesh node to get to the mesh portal. The mesh portal advertises a hop count of 0, while all other mesh nodes advertise a cumulative count based on the parent mesh node.
Cost	A relative measure of the quality of the path from the AP to the controller. A lower number indicates a better quality path, where a higher number indicates a less favorable path (For example, a path which may be longer or more congested than a path with a lower value.) For a mesh point, the path cost is the sum of the (parent path cost) + (the parent node cost) + (the link cost).
Relation	Shows the relationship between the specified AP and the AP on the neighbor listand the amount of time that relationship has existed.P = ParentC = ChildN = NeighborB = Blacklisted-neighbor
Flags	This parameter shows additional information about the mesh neighbor. The key describing each flag is displayed at the bottom of the neighbor list.
RSSI	The Receive Signal Strength Indicator (RSSI) value displayed in the output of this command represents signal strength as a signal to noise ratio. For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold.
Rate Tx/Rx	The rate, in Mbps, that a neighbor transmits data to or receives data from the mesh-node specified by the command.
A-Req	Number of association requests from clients.
A-Resp	Number of association responses from the mesh node.
A-Fail	Number of association failures.
Cluster ID	Name of the Mesh cluster that includes the specified AP or BSSID.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap mesh neighbors

show ap mesh neighbors

Description

This command shows all mesh neighbors for an AP.

Example

The following example shows the output of show ap mesh neighbors command:

Neighbor list

MAC Portal Channel Age Hops Cost Relation Flags RSSI Rate Tx/Rx A-Req A-Resp A-Fail HT-Details Cluster ID

6c:f3:7f:a5:df:90 Yes 157 23 0 5.00 N 23s HLK 33 - 0 0 0 HT-20MHzsgi-3ss
78042e34005c8b372de0472df0727ef
6c:f3:7f:a5:df:30 Yes 153 0 0 5.00 N 3d:18h:16m:4s HLK 13 - 0 0 0 HT-20MHzsgi-3ss
b8e356bcb60d4ce984d9a7077a43936
d8:c7:c8:3d:3b:10 Yes 161 15 0 5.00 N 15s HLK 50 - 0 0 0 HT-20MHzsgi-3ss
78042e34005c8b372de0472df0727ef
Total count: 3, Children: 0
Relation: P = Parent; C = Child; N = Neighbor; B = Blacklisted-neighbor
Flags: R = Recovery-mode; S = Sub-threshold link; D = Reselection backoff; F = Auth-failure; H = High Throughput; L = Legacy allowed
K = Connected; U = Upgrading; G = Descendant-upgrading; Z = Config pending; Y = Assoc-
resp/Auth pending
a = SAE Accepted; b = SAE Blacklisted-neighbour; e = SAE Enabled; u = portal-unreachable; o =
opensystem 

The output of this command includes the following information:

Parameter Description
MAC	MAC address of the mesh node.
Portal	By default, this column displays the BSSID of the mesh point. If you include the optional names parameter, this column will display AP names, if available. The AP names will include [p] (parent), or [c] (child) suffixes to indicate the role of the mesh BSSID.
Channel	Number of a radio channel used by the AP.
Age	Number of seconds elapsed since the AP heard from the neighbor.
Hops	Indicates the number of hops it takes traffic from the mesh node to get to the mesh portal. The mesh portal advertises a hop count of 0, while all other mesh nodes advertise a cumulative count based on the parent mesh node.
Cost	A relative measure of the quality of the path from the AP to the Virtual Controller. A lower number indicates a better quality path, where a higher number indicates a less favorable path (e.g, a path which may be longer or more congested than a path with a lower value.) For a mesh point, the path cost is the sum of the (parent path cost) + (the parent node cost) + (the link cost).
Relation	Shows the relationship between the specified AP and the AP on the neighbor list and the amount of time that relationship has existed.P = ParentC = ChildN = NeighborB = Blacklisted-neighbor
Flags	This parameter shows additional information about the mesh neighbor. The key describing each flag is displayed at the bottom of the neighbor list.
RSSI	The Receive Signal Strength Indicator (RSSI) value displayed in the output of this command represents signal strength as a signal to noise ratio. For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold.
Rate Tx/Rx	The rate, in Mbps, that a neighbor transmits data to or receives data from the mesh-node specified by the command.
A-Req	Number of association requests from clients.
A-Resp	Number of association responses from the mesh node.
A-Fail	Number of association failures.
Cluster ID	Name of the Mesh cluster that includes the specified AP or BSSID.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap monitor

show ap monitor {active-laser-beams|ap-list|ap-wired-mac |arp-cache| containment-info | enet-wired-mac | ids-state | pot-ap-list | pot-sta-list | routers | scan-info | sta-list | state | stats | status}

Description

This command shows information for W-IAP Air Monitors.

Syntax

Parameter Description
active-laser-beams	Shows active laser beam generators. The output of this command shows a list of all APs that are actively performing policy enforcement containment such as rogue containment. This command can tell us which AP is sending out deauthorization frames, although it does not specify which AP is being contained.
ap-list	Shows list of APs being monitored.
ap-wired-mac	Shows the MAC address of the wired W-IAP.
arp-cache	Shows ARP Cache of learned IP to MAC binding
containment-info	Shows containment events and counters triggered by the wired containment and wireless containment features configured in theids. The output of this command shows device and target data for wired containment activity, as well as data for the following counters. Wireless Containment Counters:Last Deauth Timer TickDeauth frames to APDeauth frames to ClientLast Tarpit Timer TickTarpit Frames: Probe ResponseTarpit Frames: Association ResponseTarpit Frames: AuthenticationTarpit Frames: Data from APTarpit Frames: Data from ClientLast Enhanced Adhoc Containment Timer TickEnhanced Adhoc Containment: Frames To Data SenderEnhanced Adhoc Containment: Frames To Data ReceiverEnhanced Adhoc Containment: Response to RequestEnhanced Adhoc Containment: Replay Response Wired Containment Counters:Last Wired Containment Timer TickLast Tagged Wired Containment Timer TickSpoof frames sentSpoof frames sent on tagged VLAN
enet-wired-mac	Shows Wired MAC Addresses learned.
ids-state	Shows IDS State.
pot-ap-list	Display the Potential AP table. The Potential AP table shows the following data:bssid: the AP's Basic Service Set Identifier.channel: The AP's current radio channelphy type: The radio's PHY type. Possible values are 802.11a, 802.11a-HT-40, 802.11b/g, 802.11b/g-HT-20.num-beacons: Number of beacons seen during a 10-second scantot-beacons: Total number of beacons seen since the last reset.num-frames: Total number of frames seen since the last rest.mt: Monitor time; the number of timer ticks elapsed since the first AP is recognized.at: Active time, in timer ticks.ibss: Shows if ad-hoc BSS is enabled or disabled. It will be enabled if the bssid has detected an ad-hoc BSS (an ibss bit in an 802.11 frame).rssi: The Receive Signal Strength Indicator (RSSI) value displayed in the output of this command represents signal strength as a signal to noise ratio.For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold.
pot-sta-list	Shows the Potential client table. The Potential Client table shows the following values:last-bssid: the Last BSSID to which the client associated.from-bssid,to-bssidmt:Monitor time; the number of timer ticks elapsed since the first client is recognized.it: Client Idle time, expressed as a number of timer ticks.
routers	Shows Router MAC Addresses learned. The output of this command includes the router's MAC address, IP address and uptime.
scan-info	Shows scanned information for the W-IAP.
sta-list	Shows the configuration and status of monitor information of the W-IAP.
state	Shows the AP monitoring state.
stats	Shows the AP monitoring statistics.
status	Shows the status of the AP monitoring.

Examples

show ap monitor active-laser-beams

The following example shows the output of show ap monitor active-laser-beams command:

Active Laser Beam Sources

bssid channel rssi ap name lms ip master ip inactive time

show ap monitor ap-list

The following example shows the output of show ap monitor ap-list command:

Monitored AP Table

bssid essid chan ap-type phy-type dos dt/mt ut/it encr nstas avg-rssi curr-rssi wmacs ibss

d8:c7:c8:3d:3a:93 rahul_wep 149 interfering 80211a-HT-40 disable 3904/36 97/0 wep 0 0 20 0 no

00:24:6c:80:7d:11 NTT-SPOT 1 interfering 8021b/g disable 3897/3897 9/8 wep 0 9 11 0 no

6c:f3:7f:b6:74:22 syelburgi 1 interfering 80211b/g-HT-20 disable 3817/3817 0/0 wpa2-psk-aes 0
42 41 0 no

00:24:6c:80:7d:12 docomo 1 interfering 80211b/g disable 3779/3779 1/0 wep 0 8 7 0 no

6c:f3:7f:b6:74:32 syelburgi 40 interfering 80211a-HT-40 disable 3729/612 34/0 wpa2-psk-aes 0
59 59 0 no

00:0b:86:51:02:28 kannan-01 44 interfering 80211a disable 3613/1212 10/0 wpa2-psk-aes 0 36 33
3 no

00:0b:86:51:02:2b kannan-03 44 interfering 80211a disable 3555/1154 10/0 wpa2-psk-aes 0 38 35
0 no

00:0b:86:51:02:29 ssid-2 44 interfering 80211a disable 3518/1117 10/0 wpa2-psk-aes 0 37 33 0
no

00:0b:86:51:02:2c kannan-04 44 interfering 80211a disable 3494/1093 10/0 open 0 38 35 0 no

00:0b:86:51:02:2a kannan-02 44 interfering 80211a disable 3459/1058 10/0 open 0 38 34 0 no

00:0b:86:51:02:2d kannan-05 44 interfering 80211a disable 3459/1058 10/0 open 0 37 34 0 no

00:0b:86:51:02:2e kannan-06 44 interfering 80211a disable 3459/1058 10/0 open 0 37 33 0 no

00:0b:86:51:02:2f kannan-07 44 interfering 80211a disable 3459/1058 10/0 open 0 37 34 0 no

00:0b:86:51:02:20 kannan-01 11 interfering 80211b/g disable 3444/1160 23/0 wpa2-psk-aes 0 0 24
0 no

6c:f3:7f:56:81:00 7SPOT 1 interfering 80211b/g-HT-20 disable 3308/3308 72/71 open 0 0 10 0 no

00:0b:86:51:02:21 ssid-2 11 interfering 80211b/g disable 3277/764 101/0 wpa2-psk-aes 0 0 28 0
no

00:0b:86:51:02:22 kannan-02 11 interfering 80211b/g disable 3271/958 58/0 open 0 0 27 0 no 

show ap monitor ap-wired-mac

The following example shows the output of show ap monitor ap-wired-mac command:

Wired MAC Table
mac age 

show ap monitor arp-cache

The following example shows the output of show ap monitor arp-cache command:

br0:10.17.88.188
ARP Cache Table
mac ip vlanid age
--- -- ---- ---
d8:c7:c8:cb:d4:20 10.17.88.188 0 ls
d8:c7:c8:cb:d3:d4 10.17.88.186 0 ls
00:0b:86:40:1c:a0 10.17.88.129 0 lm:18s 

show ap monitor containment-info

The following example shows the output of show ap monitor containment-info command:

br0:10.17.88.188
ARP Cache Table
---
mac ip vlanid age
--- -- ---- ---
d8:c7:c8:cb:d4:20 10.17.88.188 0 ls
d8:c7:c8:cb:d3:d4 10.17.88.186 0 ls
00:0b:86:40:1c:a0 10.17.88.129 0 lm:18s 

show ap monitor enet-wired-mac

The following example shows the output of show ap monitor enet-wired-mac command:

Wired MAC Table
mac age 

show ap monitor ids-state

Use this command to view information about the Intrusion Detection System (IDS) the following detection policy

• Detect Block ACK DOS
- Disconnect station attack
- Intrusion event Type
• Intrusion rate parameters
- Detect Omerta attack
• Detect Power Save DOS Attack
• Detect Rate Anomaly
- Sequence
- IDS Signature—Deauthentication Broadcast and Deassociation Broadcast
- Detect AP Spoofing
- Valid and Protected SSIDs (from IDS Unauthorized Device Profile)

The following example shows the output of show ap monitor ids-state valid-ssid command.

System Generated (using WLAN SSID profile configuration)

SSID

Valid and Protected SSIDs (from IDS Unauthorized Device Profile)

SSID

example1

example-local-nw

a36534e02ee1f3a7edeb0c247d07c9b

show ap monitor pot-ap-list

The following example shows the output of show ap monitor pot-ap-list command.

Potential AP Table

bssid channel phy num-beacons tot-beacons num-frames mt it at ibss rssi

d8:c7:c8:3d:3b:13 161 80211a 0 9 0 3 352 1 disable 26

d8:c7:c8:3d:3b:03 1 80211b 0 9 0 4 363 1 disable 43

00:24:6c:81:64:a8 36 80211a 0 9 0 3 185 2 disable 17

00:24:6c:81:64:a9 36 80211a 0 9 0 1 45 1 disable 17

00:24:6c:80:7a:a2 6 80211b 0 0 0 1 1 1 disable 30

Num Potential APs:5

show ap monitor pot-sta-list

The following example shows the output of show ap monitor pot-sta-list command.

Potential Client Table

mac last-bssid from-bssid to-bssid mt it channel rssi

00:24:d7:40:bb:b0 00:1a:1e:17:dc:62 00:00:00:00:00:00 00:00:00:00:00:00 133 50 7 44

60:67:20:5f:e1:94 00:1a:1e:17:d4:a0 00:00:00:00:00:00 00:00:00:00:00:00 6 43 7 0

58:94:6b:a0:47:74 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 217 104 7 0

b0:ec:71:98:da:44 00:24:6c:80:55:b0 00:00:00:00:00:00 00:00:00:00:00:00 37 2 7 0

00:27:10:2a:c6:ac 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 72 50 7 30

b0:65:bd:dc:51:8a 00:24:6c:80:03:4e 00:00:00:00:00:00 00:00:00:00:00 217 10 149 11

74:e1:b6:15:1b:5f d8:c7:c8:3d:42:13 00:00:00:00:00:00 00:00:00:00:00:00 164 19 149 10

60:67:20:5b:33:28 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 6 5 7 0
00:27:10:5c:23:78 00:24:6c:80:fd:72 00:00:00:00:00:00 00:00:00:00:00:00 56 53 7 27
00:24:d6:9d:7c:28 00:24:6c:80:a3:90 00:00:00:00:00:00 00:00:00:00:00:00 97 96 7 28
58:94:6b:b3:14:a8 00:24:6c:80:03:4e 00:00:00:00:00:00 00:1c:b0:eb:d7:00 154 1 7 14
24:77:03:d0:0a:d8 00:1a:1e:17:dc:62 00:00:00:00:00:00 00:00:00:00:00:00 19 14 7 16
24:77:03:7a:7f:40 6c:f3:7f:94:63:80 00:00:00:00:00:00 00:00:00:00:00:00 42 41 7 0
24:77:03:ce:a5:fC 00:24:6c:80:4f:80 00:00:00:00:00:00 00:00:00:00:00:00 143 16 7 0
24:77:14:9d:ba:fO 143 16 7 22
24:77:14::cf::f9::2c 143 16 7 22
24:77::d1::d5::bO 143 16 7 22
24:77::d1::d5::bO 143 16 7 22
24:77::d1::d5::bO 143 16 7 22 

show ap monitor routers

The following example shows the output of show ap monitor routers command.

Wired MAC of Potential Wireless Devices
mac ip age 

show ap monitor scan-info

The following example shows the output of show ap monitor scan-info command.

WIF Scanning State: wifi0: d8:c7:c8:3d:42:10 

Parameter Value 

Probe Type m-portal
Phy Type 80211a-HT-40
Scan Mode reg-domain
Scan Channel no
Disable Scanning yes
RegDomain Scan Completed yes
DOS Channel Count 0
Current Channel 149+
Current Scan Channel 153-
Current Channel Index 9
Current Scan Start Milli Tick 232927000
Current Dwell Time 110
Current Scan Type active
Scan-Type-Info
Info-Type Active Reg-domain All-reg-domain Rare DOS
Dwell Times 500 250 200 100 500
Last Scan Channel 153-44+000 

show ap monitor state

The following example shows the output of show ap monitor state command.

DoS State 

tx old-tx rx old-rx last-dos-time ap-ev-time sta-ev-time last-enhanced-cm-time enhanced-cm-ev-time 

show ap monitor stats

The following example shows the output of show ap monitor stats command.

(Instant AP)# show ap monitor stats d8:c7:c8:cb:d4:22
Aggregate Stats

retry low-speed non-unicast recv-error frag bwidth

0 0 0 0 0 0
RSSI

avg-signal low-signal high-signal count duration (sec)

40 40 40 748 70
AP Impersonation State

beacons prev-beacons exp-beacons beacon-interval imp-time imp-active wait-time

0 11 11.00 100 0 0 0
AP Non-beacon-Frames:0
AP Tarpit Fake Channel:0
Raw Stats

tx-pkt tx-byte rx-pkt rx-byte tx-retry-pkt rx-retry-pkt rx-frag-pkt rx-frag-pkt short-hdr-pkt long-hdr-pkt

2662202 830665629 31438 440132 0 0 0 0 2662202 0
Frame Type Stats

type mgmt-pkt mgmt-byte ctrl-pkt ctrl-byte data-pkt data-byte

tx 2662202 830665629 0 0 0 0
rx 0 0 31438 440132 0 0
Dest Addr Type Stats

bcast-pkt bcast-byte mcast-pkt mcast-byte ucast-pkt ucast-byte

0 0 0 0 0 0
Frame Size Packet Stats

type 0-63 64-127 128-255 256-511 512-1023 1024+
tx 0 0 0 0 0 0
rx 0 0 0 0 0 0
Frame Rate Stats

type pkt-6m byte-6m pkt-9m byte-9m pkt-12m byte-12m pkt-18m byte-18m pkt-24m byte-24m pkt-36m byte-36m pkt-48m byte-48m pkt-54m byte-54m

tx 0 0 0 0 0 0 0 0 0 0 0 0 0
rx 0 0 0 0 0 0 0 0 0 0 0 0 0
HT RX Rate Stats

Rate Pkts Bytes

HT TX Rate Stats

Rate Pkts Bytes

Detailed RSSI

10s 2m 3m 4m 5m 6m 7m 8m 9m 10m 11m 12m 13m 14m 15m 

average 40 40 40 40 40 40 40 40 40 40 40 40 40 40
high 40 40 40 40 40 40 40 40 40 40 40 40 40 40
low 40 40 40 40 40 40 40 40 40 40 40 40 40 40
count 110 638 638 638 638 638 638 649 649 638 638 429 649 638 528 649
Monitored Time:233496
Last Packet Time:233528
Uptime:233529
DoS State
----
tx old-tx rx old-rx last-dos-time ap-ev-time sta-ev-time last-enh time
----
----
0 0 0 0 0 0 0 0 

show ap monitor status

The following example shows the output of show ap monitor status command.

AP Info

key value

Uptime 233059

AP Name d8:c7:c8:cb:d4:20

LMS IP 0.0.0.0

Master IP 0.0.0.0

AP Type 135

Country Code 21

Wired Interface

mac ip gw-ip gw-mac status pkts macs gw-macs dot1q-pkts vlans

d8:c7:c8:cb:d4:20 10.17.88.188 10.17.88.129 00:0b:86:40:1c:a0 enable 2660 4 1 0 0

WLAN Interface

bssid scan monitor probe-type phy-type task channel pkts

d8:c7:c8:3d:42:10 enable enable m-portal 80211a-HT-40 tuned 149+ 17332616

d8:c7:c8:3d:42:00 enable enable sap 80211b/g-HT-20 tuned 1 56090990

WLAN packet counters

Interface Packets Read Bytes Read Interrupts Buffer Overflows Max PPS Cur PPS Max PPI Cur PPI

Invalid OTA msg

d8:c7:c8:3d:42:10(wifi0) 17332616 401055780 12288142 703 1445 216 20 3 0

d8:c7:c8:3d:42:00(wifil) 56090990 3565742575 50110266 13315 1024 275 20 1 0

Data Structures

ap sta pap psta ch msg-hash ap-l

256 288 45 136 26 2 256

Other Parameters

key value

Classification enable

Wireless Containment disable

Wired Containment disable

Rogue Containment disable

System OUI Table

oui

RTLS Configuration and State

Type Server IP Port Freq Active Rpt-Tags Tag-Mcast-Addr Tags-Sent Rpt-Sta Incl-Unassoc-Sta Sta-Sent Cmpd-Msgs-Sent

MMS N/A N/A 30 disable 01:0c:cc:00:00:00 N/A disable N/A N/A N/A

Aeroscout N/A N/A N/A disable 00:00:00:00:00:00 N/A disable N/A N/A N/A

RTLS N/A N/A 30 disable 01:18:8e:00:00:00 N/A disable N/A N/A N/A

The outputs of the AP monitor command displays the following:

• Active laser beam sources for the W-IAP.
• List of APs monitored by the W-IAP.
• ARP cache details for the W-IAP.
• List of clients monitored by the W-IAP.
• Containment details for the W-IAP.
• List of potential APs for the W-IAP.
• List of potential clients for the W-IAP.
• Information about the potential wireless devices.
- Scanned information for the W-IAP.
- Configuration and status of monitor information of the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap pmkcache

show ap pmkcache

Description

This command displays the pairwise master key (PMK) cache table for clients associated with the W-IAP.

Usage Guidelines

Use this command to view PMK cache table contents for the clients associated with a W-IAP.

Example

The following example shows the output of show ap pmkcache command.

PMK Cache Table

Client MAC Key OKC/11r Expiry Name Role VLAN ESSID

00:90:7a:0d:a0:62 1F4C17D8A70C...okc 6h:52m:18s polycoml okc-internal 1 okc-internal

00:90:7a:0d:b2:ce F20E35DB311F...okc 7h:31m:15s polycom2 okc-internal 1 okc-internal

Column Description
Client MAC	Indicates the MAC address of the client from the which PMK is derived.
Key	Displays the cached key for the client.
OKC/11r	Indicates if OKC or 802.11r roaming is enabled.
Expiry	Displays the PMK cache expiration details in HH:MM:SS format.
Name	Indicates the name of client.
Role	Indicates the user role assigned to the client.
VLAN	Indicates the VLAN to which the client is assigned.
ESSID	Displays the ESSID details to which the client is connected.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap virtual-beacon-report

show ap virtual-beacon-report

Description

This command displays a report with the MAC address details and RSSI information of a W-IAP.

Usage Guidelines

Use this command to view virtual beacon table of a W-IAP. The virtual beacon table with the details of clien associated a W-IAP is broadcast by each table.

Example

The following example shows the output of show ap virtual-beacon-report command.

Virtual Beacon Table

Station CM State Triggered Succeeded Owner AP RSSI Received

00:db:df:0a:57:4e Adopted 1 1 Yes 00:24:6c:07:44:c8 (Local 0) 47 59s

Normal No 00:24:6c:07:44:c0 (Local 1) 49 2m:2s

No 6c:f3:7f:ef:12:c0 44 18s

No 6c:f3:7f:ee:f7:80 44 11s

No 6c:f3:7f:ee:f7:90 36 13s

No 6c:f3:7f:ef:12:d0 43 13s

a0:88:b4:41:64:18 Normal 1 0 No 00:24:6c:07:44:c8 (Local 0) 34 20s

Normal No 00:24:6c:07:44:c0 (Local 1) 40 18s

No 6c:f3:7f:ef:12:c0 43 18s

No 6c:f3:7f:ee:f7:80 48 11s

No 6c:f3:7f:ee:f7:90 35 13s

Yes 6c:f3:7f:ef:12:d0 36 13s

Normal Working well

Home Current AP found a better AP for the client

Deny Current AP is not the better AP

Target Current AP is the better AP

Voice Ready to move, but client is doing voice

Refused Too many clients try to move to me

Done Current AP just deauth the client

Adopted Client has moved to me successfully

Total 2 VBRs

00:24:6c:c8:74:4c# show ap debug client-match 0

Client Match Status:: RUNNING BALANCING

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ap-alert

show ap-alert

Description

This command displays all the alerts received for the specified APs.

Usage Guidelines

Use this command to check all the alerts received for all the APs specified.

Example

The following example shows the output of show ap-alert command.

AP Alerts

Timestamp Type MAC Address IP Address Description

The output of this command includes the following information:

Column Description
Timestamp	Indicates the time at which the alert was received.
Type	Indicates the type of alert received for the AP.
MAC Address	Indicates the MAC address of the W-IAP clients.
IP Address	Indicates the IP address associated with the AP.
Description	Displays a brief description of the alert received.

Command History

Version Description
Dell Networking W-Series Instant6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show app-services

show app-services

Description

This command displays the list of application services available on a W-IAP.

Usage Guidelines

Use this command to view the list of application services available on a W-IAP.

Example

The following example shows the output of the show app-services command:

Application Service
----
Name IP Protocol Start Port End Port
----
any 0 0 65535
adp 17 8200 8200
bootp 17 67 69
cfgm-tcp 6 8211 8211
cups 6 515 515
dhcp 17 67 68
dns 17 53 53
esp 50 0 65535
ftp 6 21 21
gre 47 0 65535
h323-tcp 6 1720 1720
h323-udp 17 1718 1719
http-proxy2 6 8080 8080
http-proxy3 6 8888 8888
http 6 80 80
https 6 443 443
icmp 1 0 65535
ike 17 500 500
kerberos 17 88 88
l2tp 17 1701 1701
lpd-tcp 6 631 631
lpd-udp 17 631 631
msrpc-tcp 6 135 139
msrpc-udp 17 135 139
natt 17 4500 4500
netbios-dgm 17 138 138
netbios-ns 17 137 137
noe 17 32512 32512
noe-oxo 17 5000 5000
netbios-ssn 6 139 139
nterm 6 1026 1028
ntp 17 123 123
papi 17 8211 8211
pop3 6 110 110
pptp 6 1723 1723
rtsp 6 554 554
sccp 6 2000 2000
sips 6 5061 5061
sip-tcp 6 5060 5060
sip-udp 17 5060 5060
smb-tcp 6 445 445
smb-udp 17 445 445 

smtp 6 25 25
snmp 17 161 161
snmp-trap 17 162 162
ssh 6 22 22
svp 119 0 65535
syslog 17 514 514
telnet 6 23 23
tftp 17 69 69
vocera 17 5002 5002 

The output of this command provides the following information:

Parameter Description
Name	Indicates the list of application services available on a W-IAP.
IP Protocol	Displays the IP protocol numbers for each application service.
Start Port and End Port	Indicates the range of port numbers on which the application services are enabled.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show arm-channels

show arm-channels

Description

This command displays the ARM channel details configured on a W-IAP.

Usage Guidelines

Use this command to view the channel details configured on a W-IAP.

Example

The following example shows the output of show arm-channels command:

2.4 GHz

Channel Status

1 disable

2 disable

3 disable

4 disable

5 disable

6 disable

7 disable

8 disable

9 disable

10 disable

11 enable

12 disable

13 disable

1+ enable

2+ disable

3+ disable

4+ disable

5+ disable

6+ disable

7+ enable

5.0 GHz

---

Channel Status

36 disable

40 disable

44 disable

48 disable

52 disable

56 enable

60 enable

64 enable

149 enable

153 enable

157 enable

161 enable

165 enable

36+ enable

44+ enable

52+ disable

60+ disable

149+ enable

157+ enable

The output of this command provides the following information:

Parameter Description
Channel	Displays the list of channels available in the 2.4 GHz and 5 GHz bands.
Status	Indicates if the channels in the 2.4 GHz and 5 GHz bands are enabled or disabled.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show arm config

show arm config

Description

This command displays the ARM configuration details for a W-IAP.

Usage Guidelines

Use this command to view the ARM configuration details for a W-IAP.

Example

The following example shows the output of show arm config command:

Minimum Transmit Power :18

Maximum Transmit Power :127

Band Steering Mode : prefer-5ghz

Client Aware : enable

Scanning : enable

Wide Channel Bands :5ghz

Air Time Fairness Mode : fair-access

Spectrum Load Balancing : disable

SLB NB Matching Percent :75

SLB Calculating Interval :30

SLB Threshold :2

Custom Channels : No

2.4 GHz Channels

Channel Status

1 enable

2 disable

3 disable

4 disable

5 disable

6 enable

7 disable

8 disable

9 disable

10 disable

11 enable

12 disable

13 disable

1+ enable

2+ disable

3+ disable

4+ disable

5+ disable

6+ disable

7+ enable

5.0 GHz Channels

Channel Status

36 enable

40 enable

44 enable

48 enable

52 enable

56 enable

60 enable
64 enable
149 enable
153 enable
157 enable
161 enable
165 enable
36+ enable
44+ enable
52+ disable
60+ disable
149+ enable
157+ enable

The output of this command provides the following information:

Parameter Description
Minimum Transmit Power	Displays the minimum transmission power configured for the ARM channels.
Maximum Transmit Power	Displays the maximum transmission power configured for the ARM channels.
Band Steering Mode	Displays the band steering mode configuration parameters
client aware	Indicates the activation status of the Client aware feature.
Scanning	Indicates if scanning for available channels is enabled.
Wide Channel Bands	Indicates if 40MHz channel are enabled on 2.4 GHz or 5 GHz band.
Air Time Fairness Mode	Displays configuration details for the Airtime Fairness Mode feature.
Spectrum Load Balancing	Indicates if the Spectrum load balancing feature is enabled or disabled.
SLB NB Matching Percent	Indicates the percentage for comparing client density of AP neighbors for spectrum load balancing.
SLB Calculating Interval	Indicates the frequency at which the client density on W-IAP is calculated for spectrum load balancing.
Custom Channels	Displays custom channels if any.
Channel	Displays the list of channels available in the 2.4 GHz and 5 GHz bands.
Status	Indicates if the channels in the 2.4 GHz and 5 GHz bands are enabled or disabled.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show arp

show arp

Description

This command displays the Address Resolution Protocol (ARP) entries for the Virtual Controller.

Usage Guidelines

Use this command to view the ARM messages sent or received by the Virtual Controller.

Example

The following example shows the output of show arp command

IP address HW type Flags HW address Mask Device 192.168.10.2 0x1 0x6 D8:C7:C8:C4:42:98 * br0 10.17.88.2 0x1 0x2 00:0B:86:40:1C:A0 * br0

The output of this command includes the following information:

Parameter Description
IP address	Displays the IP address of the device.
HW Type	Displays the type of the device.
Flags	Displays any flags for this AP.
HW address	Displays the MAC address of the device.
Mask	Displays the network mask or the IP address range.
Device	Displays the device used to send ARP requests and replies.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show attack

show attack {config|stats}

Description

This command displays information about firewall settings configured on a W-IAP to protect the network again wired attacks such as ARP attacks or malformed DHCP packets.

Syntax

Parameter Description
config	Displays firewall configuration details to protect the network from wired attacks.
stats	Displays attack counters.

Usage Guidelines

Use this command to view firewall configuration details or attack counters enabled on a W-IAP to protect the network from ARP attacks and malformed DHCP packets.

Example

The following example shows the output of show attack config command:

Current Attack

Attack Status

drop-bad-arp Disabled

fix-dhcp Disabled

poison-check Enabled

The output of this command indicates if the firewall settings to block invalid ARP packets and fix malformed packets are enabled. You can also view the status of the Poison-check parameter, which triggers an alert to the user about the ARP poisoning when enabled.

The following example output for the show attack stats command shows the attack counters:

attack counters

Counter Value

---

arp packet counter 0

drop bad arp packet counter 0

dhcp response packet counter 0

fixed bad dhcp packet counter 0

send arp attack alert counter 0

send dhcp attack alert counter 0

arp poison check counter 0

garp send check counter 1628

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show auth-survivability

show auth-survivability {cached-info} debug-log [] | time-out}

Description

This command displays the authentication survivability information for a W-IAP.

Syntax

Command/Parameter Description
cached-info	Displays authentication credentials cached by the W-IAP.
debug-log []	Displays the log details for troubleshooting. The count attribute allows you to specify the number of logs to display.
time-out	Displays the duration configured for the cache expiry.

Usage Guidelines

Use this command to view the information cache expiry duration, cached information, and log details to debug the authentication survivability feature is enabled. The authentication survivability feature supports a survivable authentication framework against the remote link failure when working with the external authentication servers. When enabled, this feature allows the W-IAPs to authenticate the previously connected clients against the cac credentials if the connection to the authentication server is temporarily lost.

Example

The following example shows the output of the auth-survivability cached-info command:

UserName Remaining Cache-Time(minutes)

admin1 20

The following example shows the output of the show auth-survivability time-out command:

Auth Survivability time out :24

The output of these commands provide the following information:

Parameter Description
UserName	Indicates the username of the client whose credentials are cached.
Remaining Cache-Time	Displays the remaining duration for cache expiry.
Auth Survivability time out	Indicates the configured duration for cache expiry.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show backup-config

show backup-config

Description

This command displays the backup configuration information on a W-IAP,

Usage Guidelines

Use this command to view the current configuration information stored in the W-IAP flash memory.

Example

The following text provides an example for the show backup-config command output:

version 6.4.0.0-4.1.0
virtual-controller-country IN
virtual-controller-key 0cb5770401cdeb6e4363c25fdfde17d907c4b095a9be5e4258
name instant-C4:42:98
terminal-access
clock timezone none 00 00
rf-band all
allow-new-aps
allowed-ap d8:c7:c8:c4:42:98
arm
wide-bands 5ghz
80mhz-support
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
scanning
client-match
syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless
mgmt-user admin 82c496d47485380deb0a01d41345d3f1
wlan access-rule default_wired_port_profile
index 1
rule any any match any any any permit
wlan access-rule wired-instant
index 2
rule masterip 0.0.0.0 match tcp 80 80 permit
rule masterip 0.0.0.0 match tcp 4343 4343 permit
rule any any match udp 67 68 permit
rule any any match udp 53 53 permit
wlan access-rule test
index 3
rule any any match any any any deny
wlan external-captive-portal
server localhost
port 80
url "/" 
auth-text "Authenticated"
auto-whitelist-disable
https 

blacklist-time 3600
auth-failure-blacklist-time 3600
ids classification
ids
wireless-containment none
airgroup
disable
airgroupservice airplay
disable
description AirPlay
airgroupservice airprint
disable
description AirPrint 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show blacklist-client

show blacklist-client [config]

Description

This command shows the configuration details for blacklisting clients and lists the clients blacklisted by W-IAP.

Syntax

Parameter Description
config	Displays the parameters and values configured for manual or dynamic blacklisting clients.

Usage Guidelines

Use this command to view information about the clients blacklisted by a W-IAP.

Example

The following output is displayed for the show blacklist-client command:

Blacklisted Clients
----
MAC Reason Timestamp Remaining time(sec) AP name
----
00:24:6c:ca:41:51 user-defined 14:46:18 Permanent - 

The output of this command provides information on the MAC address of client that is blacklisted, the reason blacklisting, timestamp, the associated W-IAP name, and the duration until which the client is blacklisted.

The following output is displayed for the show blacklist-client config command:

Blacklist Time :3600
Auth Failure Blacklist Time :3600
Manually Blacklisted Clients
----
MAC Time
----
00:24:6c:ca:41:51 14:46:18
Dynamically Blacklisted Clients
----
MAC Reason Timestamp Remaining time(sec) AP name
----
Dyn Blacklist Count :0 

The output of this command provides the following information:

Parameter	Description
Blacklist Time	Indicates the duration in seconds since the blacklisting has been triggered due to an ACL rule.
auth-survivability cache-time-out	Indicates the duration in seconds after which the clients that exc the maximum authentication failure threshold are blacklisted.
Parameter Description
Manually Blacklisted clients	Displays the details of clients that are blacklisted manually.
Dynamically Blacklisted Clients	Displays the list of clients that dynamically blacklisted due to multiple authentication rules or an ACL rule trigger.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show calea config

show calea config

Description

This command displays the details configured for CALEA server integration on a W-IAP.

Usage Guidelines

Use this command to CALEA configuration details.

Example

The following example shows the output of the show calea config command:

(Instant AP)# show calea config
calea-ip :10.0.0.5
encapsulation-type :gre
gre-type :25944
ip mtu : 150 

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show calea statistics

show calea statistics

Description

This command displays the tunnel encapsulation statistics for a W-IAP.

Usage Guidelines

Use this command to view the GRE encapsulation statistics for the W-IAPs with CALEA server integration feature enabled.

Example

The following example shows the output of the show calea statistics command:

(Instant AP)# show calea statistics

Rt resolve fail : 0
Dst resolve fail: 0
Alloc failure : 0
Fragged packets : 0
Jumbo packets : 263
Total Tx fail : 0
Total Tx ok : 263 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show captive-portal

show captive-portal

Description

This command shows the external and internal captive portal parameters configured for a network profile.

Usage Guidelines

Use this command to view information about the contents displayed on the internal and external captive porta for guest users.

Example

The following output is displayed for the show captive-portal command:

:Captive Portal Configuration
Background Color:13421772
Banner Color :16750848
Decoded Texts :
Banner Text :Welcome to Guest Network
Use Policy :Please read terms and conditions before using Guest Network
Terms of Use :This network is not secure, and use is at your own risk
Internal Captive Portal Redirect URL:
Captive Portal Mode:Acknowledged
:External Captive Portal Configuration
Server:localhost
Port :80
URL :/
Authentication Text:Authenticated
External Captive Portal Redirect URL:
Server Fail Through:No 

The output of this command provides the following information:

Parameter Description
Background Color	Displays the color code configured for the internal captive portal splash page.
Banner Color	Displays the color code configured for the banner on the internal captive portal splash page.
Banner Text	Displays the banner text for the internal captive portal splash page.
decoded-texts	Displays decoded texts.
Terms of use	Displays the terms and conditions that the internal captive portal user must be aware of.
Use Policy	Displays usage policy text for the internal captive portal splash page.
Captive Portal Mode	Indicates if the authentication is successful and acknowledged.
Internal Captive Portal Redirect URLExternal Captive Portal Redirect URL	Displays the URL that the users are redirected to, after a successful authentication.
Server	Displays the external Captive port server.
URL	Displays the URL of the external captive portal splash page server.
Authentication Text	Indicates if the external captive portal user authentication is successful.
Port	Displays the port used for communicating with the external captive portal splash page server.
Server Fail Through	Indicates if the guest clients are allowed to access the Internet when the external captive portal server is not available.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show captive-portal-domains

show captive-portal-domains

Description

This command displays the internal and external captive portal server domains.

Usage Guidelines

Use this command to view information about the internal and external captive portal domains.

Example

The following output is displayed for the show captive-portal-domains command:

Internal Captive Portal Domain: securelogin.arubanetworks.com External Captive Portal Domains: localhost

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show cellular

show cellular {config | status}

Description

These commands display the status and cellular configuration of the W-IAP.

Syntax

Parameter Description
show cellular config	Displays the cellular configuration details available for the W-IAP
show cellular status	Displays the status of the cellular configuration for the W-IAP

Usage Guidelines

Use these commands to view the details of the cellular configuration and status.

Example

The following output is displayed for show cellular config command:

No Comm USB Plugged in Cellular configuration

Type Value

---

4g-usb-type

usb-type

usb-dev

usb-tty

usb-init

usb-auth-type PAP

usb-user

usb-passwd

usb-dial

usb-modeswitch

modem-isp

modem-country

Supported Country list

Country list

France

NZ

Israel

HK

Sweden

Spain

China

UK

norway

Germany

Croatia

Aus

Saudi-Arabia

Japan

India

US
Canada
Supported ISP list
----
ISP list
----
Cincinnati Bell
Virgin
Telecom
Telenor
Vodafone/SmarTone
O2
SFR
Orange
3/HUTCH
Optus
SingTel
HKCSL/1010
Verizon
ICE
Reliance NetConnect+
Tata Indicom
Airtel-3G
Nokia CS-10
NTT
KDDI
Movistar
China Unicom
China Telecom
Vodafone
Netcom
T-Mobile
Telstra
Mobily
EMOBILE
Sprint
Cricket
Vodafone-3G
Airtel
ATT
Rogers
Bell

modem status summary: No USB modem attached 

The output of this command includes the following parameters:

Parameters Description
type	Displays the type of cellular configuration. For example, 3G or 4G modems.
value	Displays the values associated with the cellular configuration parameters.
Supported Country list	Lists the countries that support cellular deployment.
ISP List	Lists the service providers that support cellular connections.

The following output is displayed for show cellular status command:

cellular status
card detect link 

Not-present Not-detect Linkdown

The output of this command includes the following parameters:

Parameters Description
Card	Indicates if the cellular cards are currently configured on the W-IAP.
detect	Indicates if cellular modems are detected on the W-IAP
Link	Indicates the current status of cellular link.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show cert all

show cert all

Description

This command displays the details about the certificates uploaded on a W-IAP.

Usage Guidelines

Use this command to view information about the certificates uploaded to a W-IAP.

Example

The following example shows the output of show cert command:

Default Server Certificate:
Version :3
Serial Number :01:DA:52
Issuer :C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA
Subject :0x05=1LUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=US, O=securelogin.arubanetworks.com,
OU=GT28470348, OU=See www.geotrust.com/resources/cps (c)11, OU=Domain Control Validated - QuickSSL(R) Premium, CN=securelogin.arubanetworks.com
Issued On :2011-05-11 01:22:10
Expires On :2017-08-11 04:40:59
Signed Using :SHA1
RSA Key size :2048 bits 

Default CP Server Certificate:
Version :3
Serial Number :01:DA:52
Issuer :C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA
Subject :0x05=1LUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=US, O=securelogin.arubanetworks.com,
OU=GT28470348, OU=See www.geotrust.com/resources/cps (c)11, OU=Domain Control Validated -
QuickSSL(R) Premium, CN=securelogin.arubanetworks.com
Issued On :2011-05-11 01:22:10
Expires On :2017-08-11 04:40:59
Signed Using :SHA1
RSA Key size :2048 bits 

The output of this command displays details such as the version, serial number, subject, issue date, expiry data type of encryption, and RSA key information for the certificates uploaded to the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show clients

show clients [| accounting | checksum | debug | roaming | status | wired [debug]]

Description

This command displays details about the W-IAP clients.

Syntax

Parameter Description
	Displays difference summary of the client table since the specified interval.
accounting	Displays accounting information for a specific client MAC address.
checksum	Filters checksum errors for a specific client MAC address.
debug	Displays the W-IAP client configuration details, which can be used for debugging purpose.
roaming	Displays information about roaming clients.
status	Displays the current status for a client based on the specified MAC address.
wired [debug]	Displays the list of clients connected to wired or Ethernet interface. You can also use the optional debug parameter to view the end-to-end information of the wired clients for debugging purpose.

Usage Guidelines

Use this command to view information about the W-IAP clients. The W-IAP client table provides basic information about the clients. For detailed information of each client, use the required parameter and specify the MAC ad the client.

Example

show clients and show clients wired

The following output is displayed for the show clients command:

Client List

Name IP Address MAC Address OS Network Access Point Channel

10.17.88.226 08:ed:b9:e1:51:7d Network1 d8:c7:c8:cb:d4:20 44+

Type Role Signal Speed (mbps)

AN admin1 51(good) 300(good)

Info timestamp :233732

A similar output is displayed for the show clients wired command.

The client list in the command output for both wireless and wired clients provides the following information:

Column Description
Name	Displays the name of the client
IP address	Displays the IP address of the client.
MAC address	Displays the MAC address of the client.
OS	Indicates the OS running on the client system.
Network	Indicates the SSID and network to which the client is connected.
Access Point	Indicates the IP address of the Access Point to which the client is connected.
Channel	Indicates the channel assigned to the client.
Type	Indicates the type of the Wi-Fi client device.
Role	Indicates the role assigned to the client.
Signal	Indicates the current signal strength of the client, as detected by the W-IAP.
Speed(Mbps)	Indicates the current speed at which data is transmitted. When the client is associated with a W-IAP, it constantly negotiates the speed of data transfer. value of 0 means that the W-IAP has not received any packets from the client some time.

show clients

The show clients command displays the change in the clients table data that occurred during the specified interval. For example, if the value specified for parameter is 10 seconds, the client table displays the changes such as signal strength or speed that occurred since the last 10 seconds.

show accounting

The show accounting command displays the accounting information such as status and session ID for a specific client MAC address.

show checksum

The following output is displayed for the show checksum command:

Mac Address:08:ed:b9:e1:51:7d
Basic info
---
mac
---
08 ed b9 e1 51 7d
bssid
d8 c7 c8 3d 3d 52
ap_ip
0a 11 58 ba
name
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00
essid
73 72 6f 79 2d 73 6f 6d 65 74 68 69 6e 67 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00
auth_failure_count
00
acl 

00 8a
acct_session
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
user_role
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
swarm_basic_client_t
08 ed b9 e1 51 7d d8 c7 c8 3d 3d 52 0a 11 58 ba 73 72 6f 79 2d 73 6f 6d 65 74 68 69 6e 67 00
checksum
ocb ba ec 

The show checksum command displays the checksum errors associated with the W-IAP clients.

show clients debug and show clients wired debug

The show clients debug command displays detailed information about the clients MAC and IP addresses, client role, authentication aging time, and accounting intervals, ESSID and BSSID details, VLAN and multicast group which the client is associated, and DHCP roles and options associated with the client. The show clients wired debug command displays a similar output.

The following example shows the show clients debug command output:

Client List

Name IP Address MAC Address OS Network Access Point Channel

169.254.90.154 08:ed:b9:e1:51:7d Network1 10.17.88.186 48-

Type Role Signal Speed (mbps) Auth Age Session Timeout ESSID

AN admin1 68(good) 6(poor) 0 0

Authenticated DEL Age Vlan Essid Private role info Accounting Session

mcast groups Acct Interval Class Attribute Dhcp-Opt Vlan

224.0.0.252, 239.255.255.250, 224.0.0.251 0 null 0, (null) Dhcp-Opt role

---- , 0, 0-0

show clients status

The show clients status command displays the status of a W-IAP client.

show clients roaming

The show clients roaming command displays the MAC address and IP address details of W-IAP from which the client has roamed and IP address of the W-IAP to which the client is roamed.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show clock

show clock [summer-time|timezone all]

Description

This command displays the system clock, current timezone, and the daylight saving time configured on a W-I

Syntax

Parameter Description
summer-time	Displays the summer (daylight saving) time settings.
timezone all	Displays the configured timezone for the W-IAP.

Usage Guidelines

Use this command to display the system clock. Include the optional summer-time parameter to display configu daylight savings time settings. The timezone parameter shows the current timezone, with its time offset from Greenwich Mean Time.

Example

show clock timezone all

The following example shows the partial output of show clock timezone all command:

Support Timezones
Country Timezone DST Name DST Recurring
International-Date-Line-West UTC-11
Coordinated-Universal-Time-11 UTC-11
Hawaii UTC-10
Alaska UTC-09 AKDT second sunday march 02:00 first sunday november 02:00
Baja-California UTC-08 MDT first sunday april 02:00 last sunday october 02:00
Pacific-Time UTC-08 PDT second sunday march 02:00 first sunday november 02:00
Arizona UTC-07
Chihuahua UTC-07 MDT first sunday april 02:00 last sunday october 02:00
La-Paz UTC-07 MDT first sunday april 02:00 last sunday october 02:00
Mazatlan UTC-07 MDT first sunday april 02:00 last sunday october 02:00
Mountain-Time UTC-07 MDT second sunday march 02:00 first sunday november 02:00
Central-America UTC-06
Central-Time UTC-06 CDT second sunday march 02:00 first sunday november 02:00
Guadalajara UTC-06 CDT first sunday april 02:00 last sunday october 02:00
Mexico-City UTC-06 CDT first sunday april 02:00 last sunday october 02:00
Monterrey UTC-06 CDT first sunday april 02:00 last sunday october 02:00
Saskatchewan UTC-06
Bogota UTC-05
Lima UTC-05
Quito UTC-05
Eastern-Time UTC-05 EDT second sunday march 02:00 first sunday november 02:00
Indiana(East) UTC-05 EDT second sunday march 02:00 first sunday november 02:00 

The output of this command includes the following information:

Parameter Description
Country	Displays the country name.
Timezone	Displays the name of the timezone.
DST Name	Displays the name of the Daylight Saving Time.
DST Recurring	Displays the name of the Daylight Saving recurring time.

show clock summer-time

The following example shows the partial output of show clock summer-time command:

Summer Time

DST Name Start Week Start Day Start Month Start Hour End Week End Day End Month End Hour

PST recurring 2 Sun Mar 2:00 first Sun Nov 3:00 -8

The output of this command includes the following information:

Parameter Description
DST Name	Name of the Daylight Saving Time.
Start Week	Enter the week number when the time change begins.
Start Day	Enter the weekday when the time change begins.
Start Month	Enter the month when the time change begins.
Start Hour	Enter the hour when the time change begins.
End Week	Enter the week number when the time change ends.
End Day	Enter the weekday when the time change ends.
End Month	Enter the month when the time change ends.
End Hour	Enter the hour when the time change ends.

Related Commands

Command	Description	Mode
clock timezone	Configures timezones for the W-IAP.	Config mode
clock summer-time	Configures the summer-time for the daylight savings time settings.	Config mode

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show configuration

show configuration

Description

This command displays the configuration saved on the W-IAP.

Usage Guidelines

Use this command to view the entire configuration saved on the W-IAP, including all wireless and wired profil uplink configuration, ARM settings, radio profiles, ACLs, and interface settings.

Example

The following example displays the show configuration command output:

version 6.2.1.0-3.3.0.0
virtual-controller-country IN
virtual-controller-key e10e371601fae77a3ba78e44585d06c407f0a3e9a83835c1c4
name Instant-CB:D4:20
terminal-access
clock timezone none 00 00
rf-band all
allow-new-aps
allowed-ap d8:c7:c8:cb:d4:20
allowed-ap d8:c7:c8:cb:d3:98
allowed-ap d8:c7:c8:cb:d3:b4
routing-profile
route 192.0.2.0 255.0.0.0 192.0.2.1
arm
wide-bands 5ghz
a-channels 56,60,64,149,153,157,161,165,36+,44+,149+,157+
g-channels 11,1+,7+
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
scanning
syslog-level debug ap-debug
syslog-level debug network
syslog-level debug security
syslog-level debug system
syslog-level debug user
syslog-level debug user-debug
syslog-level debug wireless
mgmt-user admin 16e8d1cbd13f13a18cd1adb8b0d23022
wlan access-rule default_wired_port_profile
rule any any match any any any permit
wlan access-rule wired-instant
rule 192.0.2.1 255.255.255.255 match tcp 80 80 permit
rule 192.0.2.2 255.255.255.255 match tcp 4343 4343 permit
rule any any match udp 67 68 permit
rule any any match udp 53 53 permit
wlan access-rule rule-1
rule any any match any any any permit
wlan access-rule rule-local-nw
rule any any match any any any permit
hotspot anqp-nai-realm-profile "test"
enable
nai-realm-name "" 

nai-realm-eap-method eap-ttls
nai-realm-auth-id-1 non-eap-inner-auth
nai-realm-auth-value-1 mschapv2
nai-realm-auth-id-2 credential
nai-realm-auth-value-2 uname-password
nai-realm-encoding utf8
no nai-home-realm
hotspot anqp-nwk-auth-profile "test"
enable
nwk-auth-type http-redirect
url "http:///"
hotspot anqp-3gpp-profile "test"
enable
3gpp-plmn1 ""
3gpp-plmn2 ""
3gpp-plmn3 ""
3gpp-plmn4 ""
3gpp-plmn5 ""
3gpp-plmn6 ""
hotspot anqp-ip-addr-avail-profile "test"
enable
ipv4-addr-avail
no ipv6-addr-avail
hotspot h2qp-wan-metrics-profile "test"
enable
wan-metrics-link-status (null)
no symm-link
no at-capacity
uplink-speed 0
downlink-speed 0
uplink-load 0
downlink-load 0
load-duration 0
hotspot hs-profile "test"
enable
no comeback-mode
no asra
no internet
no pame-bi
no group-frame-block
no p2p-dev-mgmt
no p2p-cross-connect
query-response-length-limit 127
access-network-type private
venue-group business
venue-type research-and-dev-facility
roam-cons-len-1 0
roam-cons-ci-1 ""
roam-cons-len-2 0
roam-cons-ci-2 ""
roam-cons-len-3 0
roam-cons-ci-3 ""
wlan ssid-profile profile-1
enable
index 0
type employee
essid profile-1
wpa-passphrase c52acfeb3e59ef254a6d14fe2ad565382e46f7eecde33af3
opmode wpa2-psk-aes
max-authentication-failures 0
vlan 333
rf-band all 

captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
external-server
bandwidth-limit 65535
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64
wlan ssid-profile profile-local-nw
enable
index 1
type employee
essid profile-local-nw
wpa-passphrase dd4da86c25c31bf83417024a338982ed4f01e1751e7a4502
opmode wpa2-psk-aes
max-authentication-failures 0
vlan 2
auth-server InternalServer
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64
auth-survivability cache-time-out 24
wlan external-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"
auto-whitelist-disable
blacklist-time 3600
auth-failure-blacklist-time 3600
ids classification
ids
wireless-containment none
ip dhcp something-vlan10
server-type Centralized,L2
server-vlan 333
ip dhcp local-vw-vlan2
server-type Local
server-vlan 2
subnet 192.0.2.5
subnet-mask 255.255.255.0
wired-port-profile wired-instant
switchport-mode access
allowed-vlan all
native-vlan guest
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poe
type guest
captive-portal disable
no dotlx
wired-port-profile default_wired_port_profile
switchport-mode trunk
allowed-vlan all 

native-vlan 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type employee
captive-portal disable
no dotlx
enet0-port-profile default_wired_port_profile
uplink
preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180
airgroup
enable
airgroupservice airplay
disable
description AirPlay
airgroupservice airprint
disable
description AirPrint 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show config-status

show config-status

Description

This command displays the details about the configuration status of a W-IAP.

Usage Guidelines

Use this command to view the current configuration status of the W-IAP in flash memory.

Example

The following example shows the output of the show config-status command:

Config Status

[EMPTY]

Config Name Compressed

[EMPTY]

Primary No

Backup No

The backup configuration is used when the primary configuration is lost. And the Compressed option indicates that the configuration file has been compressed if the file size is large.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show console-settings

show console-settings

Description

This command displays the details about the console settings of a W-IAP.

Usage Guidelines

Use this command to view if the access to W-IAP console is enabled or disabled.

Example

The following example shows the output of the show console-settings command:

(Instant AP)# show console-settings

Console Setting

____

Status

[EMPTY]

enabled

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show country-codes

show country-codes

Description

This command shows the country code for the W-IAP. The country code specifies allowed channels for that code

Usage Guidelines

Use this command to view a list of W-IAP country codes.

Example

The following example shows the output of show country-codes command.

CA:Canada
DE:Germany
NL:Netherlands
IT:Italy
PT:Portugal
LU:Luxembourg
NO:Norway
SE:Sweden
FI:Finland
DK:Denmark
CH:Switzerland
CZ:Czech Republic
BE:Belgium
ES:Spain
GB:United Kingdom
KR:Republic of Korea (South Korea)
CN:China
FR:France
HK:Hong Kong
SG:Singapore
TW:Taiwan
MY:Malaysia
BR:Brazil
SA:Saudi Arabia
LB:Lebanon
AE:United Arab Emirates
ZA:South Africa
AR:Argentina
AU:Australia
AT:Austria
BO:Bolivia
CL:Chile
GR:Greece
HU:Hungary
IS:Iceland
IN:India
IE:Ireland
KW:Kuwait
LV:Latvia
LI:Liechtenstein
LT:Lithuania
MX:Mexico
MA:Morocco
NZ:New Zealand
PL:Poland
PR:Puerto Rico 

SK:Slovak Republic
SI:Slovenia
TH:Thailand
UY:Uruguay
PA:Panama
RU:Russia
EG:Egypt
TT:Trinidad and Tobago
TR:Turkey
CR:Costa Rica
EC:Ecuador
HN:Honduras
KE:Kenya
UA:Ukraine
VN:Vietnam
BG:Bulgaria
CY:Cyprus
EE:Estonia
MT:Malta
MU:Mauritius
RO:Romania
CS:Serbia and Montenegro
ID:Indonesia
PE:Peru
VE:Venezuela
JM:Jamaica
BH:Bahrain
OM:Oman
JO:Jordan
BM:Bermuda
CO:Colombia
DO:Dominican Republic
GT:Guatemala
PH:Philippines
LK:Sri Lanka
SV:El Salvador
TN:Tunisia
MO:Macau
PK:Islamic Republic of Pakistan
QA:Qatar
DZ:Algeria
NG:Nigeria
HR:Croatia
GH:Ghana
BA:Bosnia and Herzegovina
MK:Macedonia
MI:Maritime Offshore
MB:Maritime Forward Operating Base
KZ:Kazakhstan
TD:Chad
ML:Mali 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show cpcert

show 1xcert

Description

This command displays the details of the captive portal server certificate, which is used by the W-IAP for guest authentication.

Usage Guidelines

Use this command to view information about the captive portal server certificate uploaded on W-IAP.

Example

The following example shows the default certificate details of the captive portal server in the output of the show cpcert command:

Default Server Certificate:
Version :3
Serial Number :01:DA:52
Issuer :C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA
Subject :0x05=1LUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=US, O=securelogin.arubanetworks.com,
OU=GT28470348, OU=See www.geotrust.com/resources/cps (c)11, OU=Domain Control Validated - QuickSSL(R) Premium, CN=securelogin.arubanetworks.com
Issued On :2011-05-11 01:22:10
Expires On :2017-08-11 04:40:59
Signed Using :SHA1
RSA Key size :2048 bits 

The output of this command describes details such as the version, serial number, subject, issue date, expiry type of encryption, and RSA key information for the certificates uploaded to the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show cpu

show cpu [details]

Description

This command displays the CPU details.

Syntax

Parameter Description
[details]	Include this optional parameter at the request of Dell technical support to display additional CPU troubleshooting statistics.

Usage Guidelines

Use this command to view CPU load for application and system processes.

Example

The following example shows the output of show cpu command:

user 0% nice 8% system 1% idle 89% io 0% irq 0% softirq 2%

The following example shows the output of show cpu details command:

Mem: 66488K used, 59668K free, OK shrd, OK buff, 22540K cached
Load average: 0.12 0.09 0.09 (Status: S=sleeping R=running, W=waiting)
PID USER STATUS RSS PPID %CPU %MEM COMMAND
1434 root R N 5540 1377 8.3 4.3 sapd
13137 root R < 356 12694 2.3 0.2 top
1430 root R < 7256 1377 0.0 5.7 cli
12694 root S < 2880 12685 0.0 2.2 cli
1429 root S 2508 1 0.0 1.9 cli
1682 root S < 2392 1377 0.0 1.8 radiusd-term
1699 root S < 2384 1377 0.0 1.8 radiusd
1442 root S < 2092 1377 0.0 1.6 snmpd
1436 root S < 1804 1377 0.0 1.4 stm
1449 root S < 1472 1377 0.0 1.1 meshd
1413 root R N 1408 1377 0.0 1.1 awc
1448 root S < 1332 1377 0.0 1.0 lldpd
1445 root S < 1164 1377 0.0 0.9 mdns
1259 root S 948 1 0.0 0.7 tinyproxy
1377 root S < 844 1 0.0 0.6 nanny
1450 root S < 796 1377 0.0 0.6 hostapd
1281 root S < 748 1 0.0 0.5 mini_httpd
1284 root S < 740 1 0.0 0.5 mini_httpd
1278 root S < 728 1 0.0 0.5 mini_httpd
1382 root S < 688 1377 0.0 0.5 msgHandler
1451 root S < 624 1377 0.0 0.4 wpa_supplicant 

The output of this command shows the percentage of CPU utilization.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show datapath

show datapath {acl |acl-all|acl-allocation|acl-rule |acl-rule-detail|bridge|dmo-session|dmo-station |mcast|nat-pool |route session|statistics|user|vlan}

Descriptions

This command shows the system statistics for your W-IAP.

Syntax

Parameter Description
acl	Displays datapath statistics associated with a specified ACL.
acl-all	Displays datapath statistics associated with all ACLs.
acl-allocation	Displays ACL table allocation details.
acl-rule	Displays the name of the ACL.
acl-rule-detail	Displays the ACL rule details.
bridge	Shows bridge table entry statistics including MAC address, VLAN, assigned VLAN, Destination and flag information for an AP.
dmo-session	Displays details of a DMO session.
dmo-station	Displays details of a DMO station.
mcast	Displays multicast table statistics for the W-IAP.
nat-pool	Displays the contents of the datapath NAT entries table. It displays NAT pools as configured in the datapath. Statistics include pool, SITP start, SIP end and DIP.
route	Displays datapath route table statistics.
session	Displays datapath session statistics.
statistics	Displays datapath station association table statistics.
user	Displays datapath user statistics such as current entries, pending deletes, high water mark, maximum entries, total entries, allocation failures, invalid users and maximum link length.
vlan	Displays VLAN table information such as VLAN memberships inside the datapath including L2 tunnels which tunnel L2 traffic.

Usage Guidelines

Use the show datapath command to display various datapath statistics for debugging purposes

Examples

show datapath acl

The following example shows the output of show datapath acl command.

Datapath ACL 3 Entries

Flags: P - permit, L - log, E - established, M/e - MAC/etype filter

S - SNAT, D - DNAT, R - redirect, r - reverse redirect m - Mirror

I - Invert SA, i - Invert DA, H - high prio, O - set prio, C - Classify Media

A - Disable Scanning, B - black list, T - set TOS, 4 - IPv4, 6 - IPv6

show datapath acl-all

The following example shows the output of show datapath acl-all command.

ACL Name {magic-vlan} Number {106}

The following example shows the output of show datapath acl-allocation command.

ACL ACE Start ACE Block Size

105 3200 32
103 3234 16
107 3250 32
104 3282 16
108 3298 32
100 3330 2
101 3332 4
102 3336 4
134 3340 4
135 3344 8
136 3352 4
143 3360 8
145 3372 8
130 3380 16
131 3412 16
132 3444 16
133 3476 16
137 3508 8
139 3520 8
141 3532 8
146 3540 4
147 3544 8
148 3552 4
149 3556 8
150 3564 4
151 3568 4
152 3572 4
153 3576 4
138 3580 8
140 3588 8
142 3596 8
144 3604 8
106 3612 8 

show datapath acl-rule

The following example shows the output of show datapath acl-rule command.

Datapath SSID: test ACL Entries

Flags: P - permit, L - log, E - established, M/e - MAC/etype filter
S - SNAT, D - DNAT, R - redirect, r - reverse redirect m - Mirror
I - Invert SA, i - Invert DA, H - high prio, O - set prio, C - Classify Media
A - Disable Scanning, B - black list, T - set TOS, 4 - IPv4, 6 - IPv6

ACL Name {test 0} Number {142}
1: any any 17 0-65535 8209-8211 P4
2: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any P4
3: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 any P4
4: 192.168.10.0 255.255.254.0 any any PS4
5: any any any P4

ACL Name {test 1} Number {143}
1: any any 17 0-65535 8209-8211 P4
2: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any P4
3: 192.168,10.0 255.255.254.0 224.0.0.0 224.0.0.0 any P4
4: 192.168.10.0 255.255.254.0 any any PS4
5: any any any P4 

ACL Name {test 2} Number {144}
1: any any 17 0-65535 8209-8211 P4
2: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any PT4 

3: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 any PT4

4: 192.168.10.0 255.255.254.0 any any PST4

5: any any any PT4

ACL Name {test 3} Number {145}

show datapath bridge

The following example shows the output of show datapath bridge command.

Datapath Bridge Devices

Flags: F - source-filter, T - trusted, Q - tagged, I - IP

S - split-tunnel, B - bridge, M - mesh, P - PPPoE

C - content-filter, O - corp-access, h - to HAP, f - to FAP

h - dhcp-redirect

Dev Name VLANs PVID ACLs FramesRx FramesTx Flags

3 bond0 1 1 0/0 618048 95826 FTQB

8 br0 0 1 105/0 95432 0 IB

11 aruba002 1 1 100/0 0 176788 B

12 aruba102 1 1 100/0 0 140373 B

13 aruba003 1 1 100/0 0 139236 B

14 aruba103 1 1 100/0 0 0 B

Datapath Bridge Table Entries

Flags: P - Permanent, D - Deny, R - Route, M - Mobile, X - Xsec, A - Auth

AP Flags: X - Awaiting 1X reply, B - Block all non-1X traffic, F - Force bridge role

MAC VLAN Assigned VLAN Destination Flags AP Flags Bridge Role ACL

00:1A:1E:0D:7E:D3 1 1 dev3 0

D8:C7:C8:C4:42:98 1 1 local P 0

D8:C7:C8:C4:42:98 3333 3333 local P 0

00:0B:86:40:1C:A0 1 1 dev3 0

6C:F3:7F:C3:5C:12 64 64 dev3 0

show datapath dmo-session

The following example shows the output of show datapath dmo-session command.

MCAST Groups:

Source Group Vlan Age[s] BSSs Received Multicast Converted Unicast Dropped _Stas _12grp _13grp

DMO queue: size:256, dropped:0, rescheduled:0, length:0, high-water:0

DMO Sessions:

show datapath dmo-station

The following example shows the output of show datapath dmo-station command.

Group Ref_count Position

show datapath mcast

The following example shows the output of show datapath mcast command.

Dev Vlans

dev3 1
dev11 1
dev12 1
dev13 1
dev14 1 

show datapath nat-pool

The following example shows the output of show datapath nat-pool command.

Datapath NAT Pool Entries

ID Begin Source IP End Source IP Destination IP Flags

show datapath route

The following example shows the output of show datapath route command.

Route Table Entries

Flags: L - Local, P - Permanent, T - Tunnel, I - IPsec, M - Mobile, A - ARP, D - Drop IP Mask Gateway Cost VLAN Flags

0.0.0.0 0.0.0.0 10.17.88.2 0 0

192.168.10.0 255.255.254.0 192.168.10.1 0 3333 D

0.0.0.0 255.255.255.192 10.17.88.59 0 1 L

Route Cache Entries

Flags: L - local, P - Permanent, T - Tunnel, I - IPsec, M - Mobile, A - ARP, D - Drop IP MAC VLAN Flags

10.17.88.2 00:0B:86:40:1C:A0 1 A

10.17.88.59 D8:C7:C8:C4:42:98 1 LP

192.168.10.1 D8:C7:C8:C4:42:98 3333 LP

show datapath session

The following example shows the output of show datapath session command.

Datapath Session Table Entries

Flags: F - fast age, S - src NAT, N - dest NAT

D - deny, R - redirect, Y - no syn

H - high prio, P - set prio, T - set ToS

C - client, M - mirror, V - VOIP

I - Deep inspect, U - Locally destined

s - media signal, m - media mon, a - rtp analysis

RAP Flags: 0 - Q0, 1 - Q1, 2 - Q2

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Flags

10.17.88.59 10.13.110.198 6 22 62719 0 0 0 0 dev3 733

10.17.88.59 10.0.0.1 6 64104 443 0 0 0 1 local 5b YC

10.13.110.198 10.17.88.59 6 62719 22 0 0 0 0 dev3 733 C

10.13.23.237 10.17.88.59 6 55302 22 0 0 0 0 dev3 8be C

10.17.88.59 10.13.23.237 6 22 55302 0 0 0 0 dev3 8be

10.0.0.1 10.17.88.59 6 443 64104 0 0 0 1 local 5b Y

show datapath statistics

The following example shows the partial output of show datapath statistics command.

Datapath Counters

Counter Value

---

Tagged frames dropped on untagged interface 0

Frames dropped for being too short 0

Frames received on port not in VLAN 0

Non-dot1x frames dropped during L2 blocking 0

Frames dropped for ingress change on permanent bridge entry 0

Frames received on port not in VLAN 0

Unicast frames filtered 86

Frames dropped due to FP firewall 6

Frames that failed FP spoofing check 0

Frames dropped with logging 0

Frames dropped due to unknown FP opcode 0

Frames freed by FP 3

Frames that failed SP spoofing check 0

Frames dropped due to excessive user misses 0

Frames dropped due to no buffers 0

Frames dropped due to no 'br0' device 0

Frames dropped due to no stack IP address 0

Frames dropped while user miss pending 0

Frames dropped when user entry creation failed 0

Frames dropped due to unknown FP opcode 0

Frames dropped due to initial IP route lookup failure 0

Frames dropped due to final IP route lookup failure 0

Frames dropped due to ARP processing failure 0

Frames dropped due to illegal device index 0

Frames dropped due to interface being down 0

Unicast frames not bridged due to split-tunnel destination 0

Unicast frames from bridge role user dropped 0

Unicast frames that could not be bridged to split tunnel 0

Frames dropped due to missing PPP device 0

Frames dropped due to pullup failure 0

Frames dropped due to misalignment 0

Frames received by firewall 715679

DHCP frames on DHCP local VLAN 96041

PPPOE frames to session processing 0

Frames needing bridging 716075

Mesh frames forwarded 0

Thin AP frames forwarded 0

Frames to session processing 718714

Frames to SP 21792

Frames bridged by SP 396

Frames routed by SP 0

Frames for SP session processing 17454

Frames for FP application processing 3942

Frames bridged by FP 0

Frames for FP session processing 2725

Frames routed by FP 18577

FP user misses 73

Frames not tunneled from bridge role user 0

SP user misses 73

Frames to DHCP 18

Frames to DNS 0

Frames held 0

Frames needed routing 715572

Frames needed forwarding 634373

Frames redirected to CSS tunnel 0

Frames sent by firewall 94681

Frames delivered to stack 82061

Frames delivered to CP 0

Frames to be flooded 538842

Frames potentially needing flooding 637659

show datapath user

The following example shows the partial output of show datapath user command.

Datapath User Table Entries

Flags: P - Permanent, W - WEP, T- TKIP, A - AESCCM
R - ProxyARP to User, N - VPN, L - local
FM(Forward Mode): S - Split, B - Bridge, N - N/A
IP MAC ACLs Contract Location Age Sessions Flags Vlan FM 

10.17.88.59 D8:C7:C8:C4:42:98 105/0 0/0 0 0 1/65535 1 N
0.0.0.0 D8:C7:C8:C4:42:98 105/0 0/0 0 0 0/65535 P 1 N
192.168.10.1 D8:C7:C8:C4:42:98 105/0 0/0 0 11115 0/65535 P 3333 B 

show datapath vlan

The following example shows the partial output of show datapath vlan command.

Datapath VLAN Table Entries

Flags: N - Nat Inside, M - Route Multicast, R - Routing
S - Snoop MLD, G - Snoop IGMP, P - Proxy IGMP
VLAN Flags Ports 

1 R dev3
1 R dev11
1 R dev12
1 R dev13
1 R dev14 

The outputs of the show datapath command indicates the following:

• ACL table allocation details for the W-IAP.
  • AP Datapath ACL Tables
• List of ACL rules configured for the SSID and Ethernet port profiles.
• Bridge table entry statistics including MAC address, VLAN, assigned VLAN, destination and flag information for the W-IAP.
  • Details of a DMO session.
  • Multicast table statistics for the W-IAP.
• Route table statistics for the W-IAP.
  • Datapath session table statistics for the W-IAP
  • Hardware packet statistics for the W-IAP.
• Datapath user statistics such as current entries, pending deletes, high water mark, maximum entries, total entries, allocation failures, invalid users, and maximum link length for the W-IAP.
  • VLAN table information such as VLAN memberships inside the datapath including L2 tunnels for the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show delta-config

show delta-config cfgid

Description

This command displays the difference between the current configuration in the current CLI session and the configuration that is saved on the W-IAP.

Usage Guidelines

Use this command to view the difference between the current configuration information stored in the W-IAP file memory and the configuration information saved in the W-IAP memory.

Example

The following example shows the output of the show delta-config command:

103-Master# show delta-config
IAP delta configuration current_config_id:7
IAP delta configuration top_config_id:7 

Command History

Version	Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show derivation-rules

show derivation-rules

Description

This command displays the list of role and VLAN derivation rules configured for the WLAN SSIDs and wired in a W-IAP.

Usage Guidelines

Use this command to view the derivation rules configured for a network profile.

Example

The following example shows the output of the show derivation-rules command:

SSID:Example1

Role Derivation Rules

Attribute Operation Operand Role Name Index Hits

Filter-Id contains 123456 Example1 8 0

AP-Name contains instant instant 90

Vlan Derivation Rules

Attribute Operation Operand Vlan Id Hits

AP-Group contains instant 200 0

Filter-Id contains 123456 200 0

The output of the command provides a list of role and VLAN derivation rules configured for each SSID and profile.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show dhcp-allocation

show dhcp-allocation

Description

This command displays information about the DHCP address allocation.

Usage Guidelines

Use this command to view DHCP address allocation for network address translated clients to allow mobility of clients across W-IAPs.

Example

The following example shows the output of show dhcp-allocation command:

(Instant AP)# show dhcp-allocation
----/etc/dnsmasq.conf----
listen-address=127.0.0.1
addn-hosts=/etc/ld_eth_hosts
addn-hosts=/etc/ld_ppp_hosts
dhcp-src=192.168.10.1
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-authoritative
filterwin2k
#magic-vlan
{
vlan-id=3333
dhcp-range=192.168.10.3,192.168.11.254,255.255.254.0,12h
dhcp-option=1,255.255.254.0
dhcp-option=3,192.168.10.1
dhcp-option=6,10.1.1.50
dhcp-option=54,192.168.10.1
}
----/tmp/dnsmasq.leases---- 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show dhcpc-opts

show dhcpc-opts

Description

This command displays the DHCP options configured on a W-IAP.

Usage Guidelines

Use this command to view the current status of the vendor-specific DHCP options configured on a W-IAP. The DHCP options are configured and enabled for assignment and distribution to DHCP clients based on the type DHCP server, scope, and clients.

Example

The following output is displayed for the show dhcp-opts command:

DHCP option43

Not available

The output of this command displays the vendor-specific DHCP option configured for a DHCP scope and the status of the DHCP option.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show dhcp config

show dhcp config

Description

This command provides information about the DHCP scopes configured for a W-IAP.

Usage Guidelines

Use this command to view configuration details associated with the DHCP scopes enabled on a W-IAP.

Example

The following example shows the output of the show dhcps config command:

Distributed DHCP Scopes

Name Type VLAN Netmask Default Router DNS Server Domain Name

dhcp-11 Distributed,L2 11 11.11.11.0 255.255.255.0 0.0.0.0

Lease Time IP Address Range Client Count DHCP Option Reserve First Reserve Last

43200 5 None

Branch ID Branch Netmask Branch Router DHCP Host

Centralized DHCP Scopes

Name Type VLAN DHCP Relay DHCP Relay Servers DHCP Option 82 VLAN IP VLAN Mask Split Tunnel

Local DHCP Scopes

Name Type VLAN Network Netmask Exclude Address DNS Server Domain Name Lease Time DHCP Option

local Local 12 12.12.12.0 255.255.255.0 0.0.0.0 0.0.0.0

DHCP Host DNS Cache

None

The output of this command displays the following information:

Parameter Description
Name	Displays the name of the DHCP scope.
type	Displays the DHCP assignment modes. The current release of Instant supports the following DHCP assignme modes.Distributed, L2Distributed, L3LocalLocal, L3Centralized, L2
VLAN	Indicates the VLAN ID assigned to DHCP scope.
Netmask	Displays the subnet mask.
DNS Server	Displays the DNS server IP address.
Domain Name	Displays the domain name configured for the DHCP scope.
Default router	Displays the IP address of the default router.
lease-time	Displays the lease-time configured for the DHCP clients.
IP Address Range	Displays the range of IP addresses configured for the distributed DHCP scopes.
client-count	Displays the number of clients allowed per DHCP branch
DHCP Option	Displays the DHCP option if configured.
Reserve First and Reserve Last	Displays the first few and the last few IP addresses reserved in the subnet.
Branch ID	Displays the DHCP branch ID.
Branch Netmask	Displays the branch subnet mask.
Branch Router	Displays the IP address if the branch router.
Exclude IP address	Displays the excluded IP address. The value displayed in this determines the exclusion range of the subnet. Based on the size of the subnet, the IP addresses that come before or after the IP address value specified in this field are excluded.
DHCP Relay	Displays the DHCP relay information that enables the W-IAPs to intercept the broadcast packets and relay DHCP requests directly to corporate network.
DHCP Relay Server	Displays the IP address of the corporate DHCP server for the DHCP request relay.
Split Tunnel	Indicates if the split-tunnel function is enabled or disabled
DHCP Host	Indicates the DHCP host name if configured.
DNS cache	Indicates if DNS caching is enabled or disabled.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show dhcp subnets

show dhcp subnets

Description

This command displays the subnet details and the gateway IP for distributed L2 and L3 networks.

Usage Guidelines

Use this command to view the subnet details for the distributed,12 and 13 networks.

Example

The following example shows the output of the show dhcp subnets command:

DHCP Subnet Table

VLAN Type Subnet Mask Gateway Mode Rolemap

[EMPTY]

532 12 192.168.132.0 255.255.255.0 0.0.0.0 remote, full-tunnel VLAN532

539 nat 192.168.1.0 255.255.255.0 192.168.1.1 local, split-tunnel VLAN532

538 13 192.168.2.0 255.255.255.0 192.168.2.1 local, split-tunnel VLAN532

534 12 0.0.0.0 255.255.255.255 0.0.0.0 remote, full-tunnel VLAN532

The output of this command displays the following information:

Parameter Description
VLAN	Displays the VLAN details.
Type	Displays the type of DHCP assignment mode.
Subnet	Displays the subnet details.
Mask	Displays the subnet mask details.
DNS Server	Displays the DNS server IP address.
Gateway	Displays the gateway IP address.
Mode	Displays details of the tunnel mode.
Rolemap	Displays the role assigned to the clients.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show distributed-dhcp-branch-counts

show distributed-dhcp-branch-counts

Description

This command displays the branch count for the distributed DHCP scopes configured on a W-IAP.

Syntax

Parameter Description
type	Displays the branch details for the distributed DHCPs based on the type of the DHCP scope specified. The current release of Instant supports the following distributed DHCP assignment modes.Distributed, L2Distributed, L3
	Filters the branch count information based on an IP address range specified for the starting IP addressand ending IP address parameters. You can specify up to four different ranges of IP addresses to filter the command output.

Usage Guidelines

Use this command to view branch details for the distributed DHCP scopes.

Example

The following example shows the output of the show distributed-dhcp-branch-counts command:

Branch Count Table

Client Count Upto Branch Count

1 10 2 4 3 3 7 1

The output of this command displays the following information:

Parameter	Description
Client Count Upto	Displays the number of clients allowed for each DHCP branch.
Branch Count	Displays the number of branches allowed for the specified range of IP addresses.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show domain-names

show domain-names

Description

This command displays the list of enterprise-domains configured on a W-IAP.

Usage Guidelines

Use this command to view enterprise-domains list. The enterprise domains list displays the DNS domain name are valid on the enterprise network.

This list is used to determine how client DNS requests should be routed. When Content Filtering is enabled, DNS request of the clients is verified and the domain names that do not match the names in the list are se open DNS server.

Example

The following example shows the output of the show domain-names command:

example1.com

example.com

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show dpi

show dpi {app all|appcategory all|debug statistics|qsessions [detail []]|webcategory all|webcategory-lookup }

Description

This command displays the DPI configuration information.

Syntax

Command/Parameter Description
app	Displays a list of all applications (with the all keyword) and details such as application name, ID, application category, and default ports when a specific application name is provided.
appcategory	Displays the list of all application categories (with the all keyword) and details of the applications that belong to a specific application category when an application category is specified.
debug statistics	Displays DPI statistics that can be used for debugging.
qsessions [detail []	Displays advanced debug statistics for troubleshooting the DPI issues.
webcategory	Displays the list of web categories.
webcategory-lookup	Displays the details for a given URL and the reputation score based on security rating. Run this command twice to fetch information from the cloud server.

Usage Guidelines

Use this command to view the DPI configuration details.

Example

show dpi app

The following example shows the output of the show dpi app command:

(Instant AP)# show dpi app wikipedia

Pre-defined Application

Name App ID App Category Default Ports

wikipedia 222 web tcp 80

The output of this command displays details such as the name of the application, application category, default configured for deep packet inspection.

show dpi appcategory

The following example shows the output of the show dpi appcategory all command:

(Instant AP)# show dpi appcategory all

Pre-defined Application Categories

Name App Category ID
----
antivirus 1
authentication 2
cloud-file-storage 3
collaboration 4
encrypted 5
enterprise-apps 6
gaming 7
im-file-transfer 8
instant-messaging 9
mail-protocols 10
mobile-app-store 11
network-service 12
peer-to-peer 13
social-networking 14
standard 15
streaming 16
thin-client 17
tunneling 18
unified-communications 19
web 20
webmail 21
Total application category 

The output of this command displays all application categories.

show dpi debug statistics

The following example shows the output of the show dpi debug statistics command.

(Instant AP)# show dpi debug statistics
DPI Running :TRUE
Dpi Debug Statistics
----
Key Value
----
dpimgr total pkt handled 5507(55)
dpimgr total classified 975(6)
dpimgr qsession total alloc 417(2)
dpimgr qsession total uapp alloc 417(2)
dpimgr qsession total uapp alloc free 417(2)
dpimgr qsession total session age 417(3)
dpimgr qsession classified skipped 7(0)
dpimgr qsession event param error 20(0)
dpimgr qsession total classified 834(4)
dpimgr qsession total request received 424(2)
dpimgr bca total cloud lookup 22(2)
dpimgr bca total cached lookup 123(2)
dpimgr bca total request received 145(4)
dpimgr bca total classified 141(2)
DPI internal stats
number of cache hits :12
number of cloud hits :2
number of cloud lookups :2
number of local database hits :0
number of uncategorized responses :0
number of cache entries :20
maximum queue depth reached :0
trusted user rep average :90
guest user rep average :0
total number of lookup errors :0
current major version :0 

current minor version :1

show dpi webcategory

The following example shows the output of the show dpi webcategory all command:

(Instant AP)# show dpi webcategory all Pre-defined BrightCloud Web Categories

Name Web Category ID

real-estate 1
computer-and-internet-security 2
financial-services 3
business-and-economy 4
computer-and-internet-info 5
auctions 6
shopping 7
cult-and-occult 8
travel 9
abused-drugs 10
adult-and-pornography 11
home-and-garden 12
military 13
social-networking-web 14
dead-sites 15
individual-stock-advice-and-tools 16
training-and-tools 17
dating 18
sex-education 19
religion 20
entertainment-and-arts 21
personal-sites-and-blogs 22
legal 23
local-information 24
streaming-media 25
job-search 26
gambling 27
translation 28
reference-and-research 29
shareware-and-freeware 30
peer-to-peer-web 31
marijuana 32
hacking 33
games 34
philosophy-and-political-advocacy 35
weapons 36
pay-to-surf 37
hunting-and-fishing 38
society 39
educational-institutions 40
online-greeting-cards 41
sports 42
swimsuits-and-intimate-apparel 43
questionable 44
kids 45
hate-and-racism 46
personal-storage 47
violence 48
keyloggers-and-monitoring 49
search-engines 50
internet-portals 51
web-advertisements 52 

cheating 53
gross 54
web-based-email 55
malware-sites 56
phishing-and-other-frauds 57
proxy-avoidance-and-anonymizers 58
spyware-and-adware 59
music 60
government 61
nudity 62
news-and-media 63
illegal 64
content-delivery-networks 65
internet-communications 66
bot-nets 67
abortion 68
health-and-medicine 69
spam-urls 71
dynamically-generated-content 74
parked-domains 75
alcohol-and-tobacco 76
private-ip-addresses 77
image-and-video-search 78
fashion-and-beauty 79
recreation-and-hobbies 80
motor-vehicles 81
web-hosting 82
category-unknown 83
Total web categories = 80 

The output of this command displays the list of web categories and the IDs associated with these categories.

show dpi webcategory-lookup

The following example shows the output of the show dpi webcategory-lookup command:

(Instant AP)# show dpi webcategory-lookup www.yahoo.com
Input URL: www.yahoo.com
Request sent for CLOUD LOOKUP, please try again. 

On running command again, the following information is retrieved from the cloud server and displayed as the

Input URL: www.yahoo.com
Found CACHED RESULT:
URL: yahoo.com REP: 81 A1: 0, Serial = 0x200001
Index: 0 Category: internet-portals(51) Confidence level: 98 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show dpi-stats

show dpi-stats
    app [id <app> |user ip <ip-addr>][full]
    appcategory [id <appcat> |user ip <ip-addr>][full]
    session [full]
    webcategory [id <web> |user ip <ip-addr>][full]
    webreputation [id <rep> |user ip <ip-addr>][full] 

Description

This command displays the DPI statistics.

Syntax

Command/Parameter Description
app	Displays application statistics.
appcategory	Displays the DPI statistics for application category.
session	Displays datapath session details for DPI.
webcategory	Displays the DPI statistics for web category.
webreputation	Displays the DPI statistics for web reputation score.
id	Displays DPI statistics for the specified application, application category, web category or web reputation ID.
user ip	Displays DPI statistics for specified user IP address.
full	Displays the complete DPI statistics for the application, application category, session, web category, and web reputation stored on the W-IAP since the last 15 minutes.

Usage Guidelines

Use this command to view the DPI statistics.

Example

show dpi-stats app

The following example shows the output of the show dpi-stats app full command:

Last snapshot timestamp 17:10:47

Dpi Top Application list

App AppId Total bytes

apple 306 10172

apns 1118 278

Not-Classified 0 160

Total bytes :10610

Classification percentage :98

show dpi-stats appcategory

The following example shows the output of the show dpi-stats appcategory full command:

Last snapshot timestamp 17:10:47

Dpi Top Application category list

App Category App Category Id Total bytes

web 20 10172

Not-Classified 0 160

Total bytes :10610

Classification percentage :98

show dpi-stats session

The following example shows the output of the show dpi-stats session full command:

Datapath DPI CDR Session Table Entries

Source IP App Webcat Webrep TX Bytes Rx Bytes

172.31.98.103 google-plus(1125) social-networking-web(14) trustworthy-sites(5) 8635 3697

172.31.98.103 krb5(97) Not-Classified(0) Not-Classified (0) 8237 5998

172.31.98.189 smb(185) Not-Classified(0) Not-Classified (0) 886 0

172.31.98.103 http(67) Not-Classified(0) Not-Classified (0) 507 4074

172.31.98.103 https(68) computer-and-internet-info(5) trustworthy-sites(5) 449597 644401

172.31.98.103 yahoo(1294) web-based-email(55) trustworthy-sites(5) 6044 10818

172.31.98.103 gtalk(1441) Not-Classified(0) Not-Classified (0) 3375 5904

172.16.100.174 ssdp(197) Not-Classified(0) Not-Classified (0) 4339 0

Datapath DPI CDR Session Table Entries

Source IP App Webcat Webrep TX Bytes Rx Bytes

10.17.139.167 ssdp(197) Not-Classified(0) Not-Classified (0) 6923 0

10.17.139.183 ssdp(197) Not-Classified(0) Not-Classified (0) 5458 0

172.16.100.174 udp(216) Not-Classified(0) Not-Classified (0) 152 0

10.17.139.167 windowslive(298) internet-portals(51) trustworthy-sites(5) 893 5907

172.31.98.103 http(67) computer-and-internet-info(5) trustworthy-sites(5) 439 1783

10.17.139.183 http(67) computer-and-internet-info(5) trustworthy-sites(5) 643 620

Num of Entries:47

show dpi-stats webcategory

The following example shows the output of the show dpi-stats webcategory full command:

Last snapshot timestamp 17:25:43

Dpi Top Web Category list

Web Category Web Category Id Total bytes

computer-and-internet-info 5 740

Total bytes :740

show dpi-stats webreputation

The following example shows the output of the show dpi-stats webreputation full command:

Last snapshot timestamp 15:39:32

Dpi Top Web Reputation list

Web Reputation Web Reputation Id Total bytes

trustworthy-sites 5 1211900

moderate-risk-sites 3 2998

Total bytes :1214898

Command History

Version Description
Dell Networking W-SeriesInstant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show election

show election {statistics}

Description

This command shows master W-IAP election statistics.

Syntax

Parameter Description
statistics	Shows master election statistics.

Usage Guidelines

Use this command to view the statistics of the W-IAP selected as Virtual Controller.

Example

The following example shows the output of show election statistics command:

State : Master
master_beacon : sent=8162 rcvd=0
hierarchy_beacon: sent=7685 rcvd=0
hierarchy_ack : sent=0 rcvd=0
beacon_req : sent=0 rcvd=0
Slave->Pot-Master : 0 time
Pot-master->Master: 0 time
Pot-master->Slave : 0 time
spoof arp rcvd: 0
last spoof mac: 00:00:00:00:00:00 

The output of this command includes the following information:

Parameter	Description
State	Indicates if the W-IAP is provisioned as master.
master_beacon	Displays the number of beacons transmitted and received by the master W-IAP
hierarchy_beacon	Displays the number of beacons transmitted and received.
hierarchy_ack	Displays the number of beacons transmitted and received.
beacon_req	Displays the number of beacons required.
spoof arp rcvd	Displays the number of ARP spoof attacks detected.
last spoof mac	Displays the MAC address of the last spoof detected.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show external-captive-portal

show external-captive-portal []

Description

This command displays the external captive portal configuration details.

Syntax

Parameter Description
name	Filters the output based on an existing external captive portal profile.

Usage Guidelines

Use this command to view information about the external captive portal server configuration details.

Example

The following output is displayed for the show external-captive-portal command:

External Captive Portal

Name Server Port Url Auth Text Redirect Url Server Fail Through Disable Auto

default localhost 80 / Authenticated Disable Enable

Whitelist Use HTTPS In Use Redirect Mode

No Yes No

The output of this command displays details such as the external captive portal profile name, server name, support, redirection URL, and automatic whitelisting status.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show fault

show fault [history]

Description

This command displays the list of active faults that occur in the event of a system fault and the faults that were cleared from the system.

Syntax

Parameter Description
history	Displays the list of faults that were cleared.

Usage Guidelines

Use this command to view the active faults for a W-IAP. Active faults are generated due to system faults.

Example

The following example shows the output for the show fault command:

Active Faults

Time Number Description

Total number of entries in the queue :0

The following example shows the output for the show fault history command:

Cleared Faults

Time Number Cleared By Description

Total number of entries in the queue :0

The output of these commands provide the following information:

Parameter Description
Timestamp	Displays the system time at which an event occurs.
Number	Indicates the sequence
Cleared By	Displays the module which cleared this fault.
Description	Provides a short description of the event details.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ids

show ids {ap | aps| client | clients| phy-types| rap-types}

Description

This command displays the list of unknown APs and clients detected by the W-IAP with the IDS feature enab

Syntax

Parameter Description
ap	Displays the signal details for the W-IAP.
aps	Displays the unknown Access Points detected by the W-IAP.
client	Displays the details of the W-IAP to which the client is connected.
clients	Displays the list of unknown clients detected by the W-IAP.
phy-types	Displays the PHY details of the W-IAP.
rap-types	Displays the list of Remote APs (W-IAPs) detected by the W-IAP.

Usage Guidelines

Use this command to view the intrusion detection details.

Examples

The following output is displayed for the show ids aps command:

Unknown Access Points Detected

MAC Address Network Classification Chan. Type Last Seen

6c:f3:7f:56:6d:01 NTT-SPOT Interfering 1 G 17:32:19

6c:f3:7f:56:67:41 NTT-SPOT Interfering 1 G 17:37:49

00:24:6c:2a:78:d2 edward-suiteb-178 Interfering 11 GN 20MZ 17:37:19

6c:f3:7f:94:63:30 avyas vap1 Interfering 6 G 17:40:20

6c:f3:7f:94:63:02 avyas vap2 Interfering 6 G 17:40:20

00:24:6c:2a:7d:0b edward-suiteb Interfering 149 AN 40MZ 17:39:19

6c:f3:7f:a5:df:34 sw-san-rapng-nat Interfering 153 AN 20MZ 17:38:49

6c:f3:7f:56:7d:00 7SPOT Interfering 1 GN 20MZ 17:32:19

00:24:6c:80:8e:82 instant Interfering 11 GN 20MZ 17:29:48

00:1a:1e:40:06:00 test123 Interfering 11 G 17:37:49

00:24:6c:2a:78:d3 ssid_edward_psk_178 Interfering 11 GN 20MZ 17:37:49

6c:f3:7f:94:63:31 avyas vap2 Interfering 6 G 17:40:20

6c:f3:7f:b5:bd:22 iClarice2 Interfering 6 GN 20MZ 17:39:19

6c:f3:7f:94:63:03 avyas vap1 Interfering 6 G 17:40:20

00:24:6c:2a:7d:0c edward tls2k Interfering 149 AN 40MZ 17:39:19

6c:f3:7f:a5:df:35 sw-san-native Interfering 153 AN 20MZ 17:38:49

00:24:6c:80:4f:88 ethersphere-wpa2 Interfering 52 AN 40MZ 17:40:20

The show ids aps command output provides information on the MAC address of interfering W-IAPs, the network to which the unknown W-IAPs are connected, the interference classification, channels on which the unknown APs detected, the radio configuration type and recent timestamp of the interference.

The following output is displayed for the show ids clients command:

Unknown Clients Detected

MAC Address Network Classification Chan. Type Last Seen

00:26:c6:4d:2b:74 ethersphere-wpa2 Interfering 1 GN 20MZ 17:26:48

00:24:d7:40:a8:64 akvoice1 Interfering 6 G 17:38:49

00:24:d7:40:ca:88 akvoice1 Interfering 6 G 17:39:50

74:e5:43:4b:3b:ff manju34-vap1 Interfering 44 AN 40MZ 17:39:50

The show ids clients command output provides information on the MAC address of interfering clients, the network to which the unknown clients are connected, the interference classification, channels on which the unknown cl are detected, the radio configuration type and recent timestamp of the interference.

The following output is displayed for the show ids phy-types command:

Physical Types

Keyword Value

b 0

a 1

g 2

ag 3

The following output is displayed for the show ids rap-types command:

RAP Types

Keyword Value

valid 0

interfering 1

rogue 2

dos-attack 3

unknown 4

known-interfering 5

suspect-rogue 6

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ids-detection config

show ids-detection config

Description

This command displays the list of intrusion detection policies configured on a W-IAP.

Usage Guidelines

Use this command to view a list of intrusion detection policies enabled for a W-IAP.

Example

The following output is displayed for the show ids-detection command:

infrastructure detection level :off

Policies Status Low Medium High

---

detect-ap-spoofing disable enable enable enable detect-windows-bridge disable enable enable enable signature-deauth-broadcast disable enable enable enable signature-deassociation-broadcast disable enable enable enable detect-adhoc-using-valid-ssid enable disable enable enable detect-malformed-large-duration enable disable enable enable detect-ap-impersonation enable disable disable enable detect-adhoc-network enable disable disable enable detect-valid-ssid-misuse enable disable disable enable detect-wireless-bridge disable disable disable enable detect-ht-40mhz-intolerance disable disable enable detect-ht-greenfield disable disable enable detect-ap-flood disable disable enable detect-client-flood disable disable enable detect-bad-wep disable disable enable detect-cts-rate-anomaly disable disable enable detect-rts-rate-anomaly disable disable enable detect-invalid-addresscombination disable disable enable detect-malformed-htie disable disable enable detect-malformed-assoc-req disable disable enable detect-malformed-frame-auth disable disable enable detect-overflow-ie disable disable enable detect-overflow-eapol-key disable disable enable detect-beacon-wrong-channel disable disable enable detect-invalid-mac-oui disable disable enable client detection level :off

Policies Status Low Medium High

detect-valid-clientmisassociation disable enable enable enable detect-disconnect-sta disable disable enable enable detect-omerta-attack disable disable enable enable detect-fatajack disable disable enable enable detect-block-ack-attack disable enable enable detect-hotspotter-attack disable disable enable enable detect-unencrypted-valid disable enable enable detect-power-save-dos-attack disable enable enable detect-eap-rate-anomaly disable disable enable enable detect-rate-anomalies disable disable enable enable detect-chopchop-attack disable disable enable enable detect-tkip-replay-attack disable disable enable signature-airjack disable disable enable

signature-asleap disable disable disable enable

The output for this command provides the following information:

Parameter Description
Infrastructure detection level	Indicates if the detection level for the policies is set to off, low, medium, or high.
Policies	Displays the list of intrusion detection policies.
Status	Indicates if a policy is enabled or disabled.
Low	Indicates if the detection level for a policy is set to low.
Medium	Indicates if the detection level for a policy is set to medium.
High	Indicates if the detection level for a policy is set to high.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ids-protection config

show ids-protection config

Description

This command displays the list of infrastructure protection policies for a W-IAP.

Usage Guidelines

Use this command to view the status of infrastructure protection policies on a W-IAP.

Examples

The following output is displayed for the show ids-protection config command:

Wireless Containment :none
Wired Containment :off
infrastructure protection level :off

Policies Status Low High

protect-ssid disable enable enable
rogue-containment disable enable enable
protect-adhoc-network disable disable enable
protect-ap-impersonation disable disable enable
client protection level :off

Policies Status Low High

protect-valid-sta disable enable enable
protect-windows-bridge disable disable enable 

Parameter Description
Infrastructure protection level	Indicates if the protection level for the policies is set to off, low, medium, or high.
Policies	Displays the list of wired and wireless network infrastructure protection policies.
Status	Indicates if a policy is enabled or disabled.
Low	Indicates if the protection level for a policy is set to low.
Medium	Indicates if the protection level for a policy is set to medium.
High	Indicates if the protection level for a policy is set to high.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show image

show image version

Description

This command displays the Instant software version running on a W-IAP.

Example

The following example shows the output of show image version command:

Primary Partition Build Time :2013-03-31 11:47:06 PDT Primary Partition Build Version :6.2.1.0-3.3.0.0_37845 AP Images Classes

---

Class

Cassiopeia

Parameter Description
Primary Partition Build Time	Shows the W-IAP image build time.
Primary Partition Build Version	Shows the W-IAP build version.
AP Image Class	Indicates the W-IAP class. The following examples describe the image class for different W-IAP models:For W-IAP135/134 –DellInstant_CassiopeiaFor W-IAP108/109 –DellInstant_PegasusFor W-IAP155/155P–DellInstant_AriesFor all other W-IAPs –DellInstant_Orion

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show interface counters

show interface counters

Description

This command shows the Ethernet interface packet counters for the W-IAP.

Usage Guidelines

Use this command to view table of L2 interface counters.

Example

The following example shows the partial output of show interface counters command:

bond0 is up, line protocol is up Hardware is Gigabit Ethernet, address is d8:c7:c8:c4:42:98 Speed 1000Mb/s, duplex full Received packets 9441 Received bytes 1134064 Receive dropped 0 Receive errors 0 Receive missed errors 0 Receive overrun errors 0 Receive frame errors 0 Receive CRC errors 0 Receive length errors 0 Transmitted packets 16435 Transmitted bytes 841278 Transmitted dropped 0 Transmission errors 0 Lost carrier 0

Parameter Description
Speed	Shows speed of the Ethernet interface.
Received packets	Shows total number of received packets.
Received bytes	Shows the total number of received bytes.
Receive dropped	Shows total number of packets dropped.
Receive errors	Shows total number of errors during packet receive.
Receive missed errors	Shows total number of errors missed during packet receive.
Receive overrun errors	Shows total number of received overrun errors.
Receive frame errors	Shows total number of frame errors during packet receive.
Receive CRC errors	Shows total number of CRC errors during packet receive.
Receive length errors	Shows total length of the error.
Transmitted packets	Shows total number of transmitted packets.
Transmitted bytes	Shows total number of transmitted bytes.
Transmitted dropped Shows total number of packets dropped.
Transmission errors Shows total number of errors during packet transmit.
Lost carrier Shows total number of lost carriers.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show inbound-firewall-rules

show inbound-firewall-rules

Description

This command displays the details of inbound firewall rules configured on a W-IAP.

Usage Guidelines

Use this command to view the details of the inbound firewall rules configured for a W-IAP network.

Example

The following output is displayed for the show inbound-firewall-rules command:

Access Rules

Src IP Src Mask Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Application Action Log TOS 802.1P Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia

any any any any match h323-tcp permit

any any 192.0.2.0 255.255.255.0 match h323-udp permit

The output of this command displays information about the inbound firewall access rule configuration parameter which indicate whether a particular type of traffic is to allowed to a particular destination from the source subnet, and the service and protocol in use. It also indicates if other options such as logging and prioritizing traffic are either when the rule is triggered.

Command History

Version Description
Dell Networking W-Series Instant6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ip dhcp database

show ip dhcp database

Description

This command displays the DHCP server settings.

Usage Guidelines

Use this command to the DHCP server settings. The DHCP server is a built-in server, used for networks in clients are assigned IP address by the Virtual Controller.

Example

The following output is displayed for the show ip dhcp database command:

DHCP Subnet :192.0.2.0

DHCP Netmask :255.255.255.0

DHCP Domain Name :example.com

DHCP DNS Server :192.0.2.1

DHCP DNS Cache :Disabled

The output of this command provides the following information:

Column Description
DHCP subnet	Indicates the network range for the client IP addresses.
DHCP Netmask	Indicates the subnet mask specified for the IP address range for the DHCP subnet.
DHCP Lease Time (m)	Indicates the duration of DHCP lease. The lease time refers to the duration of lease that a DHCP-enabled client has obtained for an IP address from a DHCP server.
DHCP Domain Name	Indicates the domain-name of the DHCP client.
DHCP DNS Server	Indicates the IP address of the DNS server.
DHCP DNS Cache	Indicates if the DNS cache is enabled.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	The output of this command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ip igmp

show ip igmp group [maddr ]

Description

This command displays information about the Internet Group Management Protocol (IGMP) group table.

Syntax

Parameter Description
maddr	Filters group table information based on the multicast IP address.

Usage Guidelines

Use this command to view the IGMP group table information for a W-IAP.

Example

The following output is displayed for the show ip igmp group command:

IGMP Group Table

Group Members vlan

239.255.255.250 1 333

224.0.0.251 1 333

224.0.0.252 1 333

The following output is displayed for the show ip igmp group maddr command:

IGMP Group 224.0.0.251 Table

Member Mac Vlan Destination Age

10.17.88.226 08:ed:b9:e1:51:7d 333 aruba002 15

The output of this command includes the following parameters:

Parameter	Description
IGMP Group Table	Displays details for the IGMP multicast group.
Group	Indicates the IP addresses for the multicast group.
Members	Indicates the number of members assigned to the multicast group.
VLAN	Indicates the VLAN ID associated with the multicast group.
IGMP GroupTable	Displays the IGMP details specific to a multicast address.
Member	Indicates the IP address of the member associated with the specified multicast group address.
MAC	Indicates the MAC address of member associated with the specified multicast group address.
Parameter Description
VLAN Indicates	the VLAN ID associated with the multicast groups or a specific multicast group address.
Destination	Indicates the destination to which the multicast packets are routed.
Age	Indicates the aging time of the forwarding table entries.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ip interface brief

show ip interface brief

Description

This command displays a summary of IP related information for all interfaces configured on a W-IAP.

Usage Guidelines

Use this command to view a brief summary of IP related information for the W-IAP interfaces.

Example

The following output is displayed for the show ip interface brief command:

Interface IP Address / IP Netmask Admin Protocol br0 10.17.88.188 / 255.255.255.192 up up

The output of this command provides the following information:

Column Description
Interface	Lists the interface and interface identification, where applicable.
IP Address /IP Netmask	Lists the IP address and subnet mask for the interface.
Admin	Displays the administrative status of the interface. Enabled-upDisabled-down
Protocol	Displays the status of the IP on the interface. Enabled-upDisabled-down

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show ip route

show ip route

Description

This command displays the W-IAP routing table.

Usage Guidelines

Use this command to view the IP routes configured for a W-IAP.

Examples

The following output shows the ip address of routers and the VLANs to which they are connected.

Kernel IP routing table

Destination Gateway Genmask Flags MSS Window irtt Iface

172.16.10.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0

10.17.88.128 0.0.0.0 255.255.255.192 U 0 0 0 br0

2.2.2.0 0.0.0.0 255.255.255.0 U 0 0 0 br0

192.168.10.0 0.0.0.0 255.255.254.0 U 0 0 0 br0

0.0.0.0 10.17.88.129 0.0.0.0 UG 0 0 0 br0

The output of this command provides the following information:

Column Description
Destination	Displays the destination IP address for the IP routes.
Gateway	Displays the gateway IP address for the IP routes.
Genmask	Displays the subnet mask details for the IP routes.
Flags	Indicates if the route is up (U), targeted to the host (UH), or if it uses Gateway (UG).
MSS	Indicates the default maximum segment size for TCP connections over this route.
Window	Indicates the default window size for TCP connections over this route.
irrt	Indicates the initial RTT (Round Trip Time). The kernel uses this to determine the best TCP protocol parameters instead of relying on slow responses.
Iface	Indicates the Interface to which packets are routed.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show lacp status

show lacp status

Description

This command displays the Link Aggregation Control Protocol (LACP) configuration status on a W-IAP.

Usage Guidelines

Use this command to view the LACP status on W-IAP220 Series devices. LACP provides a standardized measure of exchanging information with partner systems to form a dynamic link aggregation group. The LACP feature is automatically enabled during W-IAP boots and it dynamically detects the AP if connected to a partner system in LACP capability, by checking if there is any LACP Protocol Data Unit (PDU) received on either eth0 or eth1

Example

The following example shows the output of the show lacp status command:

AP LACP Status

Link Status LACP Rate Num Ports Actor Key Partner Key Partner MAC

Up slow 2 17 1 70:81:05:11:3e:80

Slave Interface Status

Slave I/f Name Permanent MAC Addr Link Status Member of LAG Link Fail Count

eth0 6c:f3:7f:c6:76:6e Up Yes 0

eth1 6c:f3:7f:c6:76:6f Up Yes 0

Traffic Sent on Enet Ports

Radio Num Enet 0 Tx Count Enet 1 Tx Count

0 0 0

100

non-wifi 2 17

The output of this command displays details such as the link status, number of ports, AP partner MAC address the interface status.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform	Command Mode
W-IAP220 Series	Privileged EXEC mode

show l2tpv3 config

show 12tpv3 config

Description

This command displays the L2TPV3 session and tunnel configuration details.

Usage Guidelines

Use this command to view the tunnel and session configuration details.

Example

The following example shows the output of the show l2tpv3 config command:

(Instant AP)# show l2tpv3 config L2TPV3 Tunnel configuration

Tunnel Profile Primary Peer Backup Peer Peer UDP Port Local UDP Port Hello Interval Host Name MTU Message Digest Type secret Key Failover Mode Failover Retry Count Retry Interval Checksum

test_tunnel 10.0.0.63 10.0.0.65 3000 1701 150 Instant-C4:42:98 1570 MD5 625beed39fa4ff3424edb3082ede48fa non-preemptive 5 80 Disabled L2TPV3 Session configuration

Session Name Tunnel Name Local tunnel IP Tunnel Mask Tunnel Vlan Session Cookie Length Session Cookie Session Remote End ID

test_session 1.1.1.1 255.255.255.0 5 0 0 0

The output of this command includes the following information:

Parameter Description
Tunnel Profile	Displays the tunnel profile name.
Primary Peer	Displays the IP address of the remote end tunnel.
Backup Peer	Displays the IP address of the remote end backup tunnel.
Peer UDP Port	Displays the UDP port number of the remote end backup tunnel.
Local UDP Port	Displays the UDP port number of the remote end tunnel.
Hello Interval	Displays the interval (in seconds) at which hello packets are routed in the tunnel.
Host Name	Displays the name of the W-IAP.
MTU	Displays the value for the tunnel MTU.
Message Digest Type	Displays the message digest to be used to create the MD AVP.
secret Key	Displays the shared key used for message digest.
Failover Mode	Displays the backup/primary tunnel failover mode.
Failover Retry Count	Displays the number of failover attempts.
Retry Interval	Displays the interval between each failover.
Checksum	Displays the end-to-end checksum of packets that pass through the tunnel.
Session Name	Displays the session profile name.
Tunnel Name	Displays the tunnel profile name.
Local tunnel IP	Displays the IP address of the remote end tunnel.
Tunnel Mask	Displays the network mask of the tunnel.
Tunnel Vlan	Displays the VLAN number to be carried in this tunnel session.
Session Cookie Length	Displays the cookie length for the cookie.
Session Cookie	Displays the cookie value.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show l2tpv3 global

show 12tpv3 global parameter

Description

This command displays L2TPv3 global configuration details such as hostname.

Usage Guidelines

Use this command to view the hostname configured.

Example

The following example shows the output of the show l2tpv3 global parameter command:

L2TPV3 Global configuration

Host Name

Instant-C4:42:98

The output of this command includes the following information:

Parameter Description
Host Name	Displays the W-IAP name.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show l2tpv3 session

show 12tpv3 session status

Description

This command displays the L2TP session connectivity status.

Usage Guidelines

Use this command to view the session connectivity status.

Example

The following example shows the output of the show l2tpv3 session status command:

Session 1821009927 on tunnel 858508253:-
type: LAC Incoming Call, state: ESTABLISHED
created at: Jul 2 04:58:45 2013
administrative name: 'test_session' (primary)
created by admin: YES, peer session id: 12382
session profile name: test_session_primary
data sequencing required: OFF
use data sequence numbers: OFF
Peer configuration data:-
data sequencing required: OFF
framing types:
data rx packets: 16, rx bytes: 1560, rx errors: 0 rx cookie error 0
data tx packets: 6, tx bytes: 588, tx errors: 0 

The output of this command shows the session connectivity status, tunnel creation time. configuration data, da frame types and so on.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show l2tpv3 system

show 12tpv3 system statistics

Description

This command displays the L2TPV3 system statistics details.

Usage Guidelines

Use this command to view the tunnel and session statistics.

Example

The following example shows the output of the show l2tpv3 system statistics command:

(Instant AP)# sh l2tpv3 system statistics
L2TP counters:-
Total messages sent: 99, received: 194, retransmitted: 0
illegal: 0, unsupported: 0, ignored AVPs: 0, vendor AVPs: 0
Setup failures: tunnels: 0, sessions: 0
Resource failures: control frames: 0, peers: 0
tunnels: 0, sessions: 0
Limit exceeded errors: tunnels: 0, sessions: 0
Frame errors: short frames: 0, wrong version frames: 0
unexpected data frames: 0, bad frames: 0
Internal: authentication failures: 0, message encode failures: 0
no matching tunnel discards: 0, mismatched tunnel ids: 0
no matching session_discards: 0, mismatched session ids: 0
total control frame send failures: 0, event queue fulls: 0
Message counters:-
Message RX Good RX Bad TX
ILLEGAL 0 0 0
SCCRQ 0 0 1
SCCRP 1 0 0
SCCCN 0 0 1
STOPCCN 0 0 0
RESERVED1 0 0 0
HELLO 95 0 95
OCRQ 0 0 0
OCRP 0 0 0
OCCN 0 0 0
ICRQ 0 0 1
ICRP 1 0 0
ICCN 0 0 1
RESERVED2 0 0 0
CDN 0 0 0
WEN 0 0 0
SLI 0 0 0 

The output of this command shows the system statistics such as total number of messages sent or received, message, and so on.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show l2tpv3 tunnel

show 12tpv3 tunnel {config | status}

Description

This command displays the L2TP tunnel status and configuration details.

Usage Guidelines

Use this command to view the tunnel connectivity status and configuration details.

Example

The following example shows the output of the show l2tpv3 tunnel config command:

Tunnel profile test_tunnel_primary
l2tp host name: aruba1600pop658509.hsb-dev4.aus
local UDP port: 1701
peer IP address: 10.13.11.157
peer UDP port: 1701
hello timeout 60, retry timeout 1, idle timeout 0
rx window size 10, tx window size 10, max retries 5
use UDP checksums: OFF
do pmtu discovery: OFF, mtu: 1460
framing capability: SYNC ASYNC
bearer capability: DIGITAL ANALOG
use tiebreaker: OFF
peer profile: NOT SET
session profile: NOT SET
trace flags: PROTOCOL FSM API AVPDATA FUNC XPRT DATA SYSTEM CLI 

Tunnel profile test_tunnel_backup
12tp host name: aruba1600pop658509.hsb-dev4.aus
local UDP port: 1701
peer IP address: 10.13.11.157
peer UDP port: 1701
hello timeout 60, retry timeout 1, idle timeout 0
rx window size 10, tx window size 10, max retries 5
use UDP checksums: OFF
do pmtu discovery: OFF, mtu: 1460
framing capability: SYNC ASYNC
bearer capability: DIGITAL ANALOG
use tiebreaker: OFF
peer profile: NOT SET
session profile: NOT SET
trace flags: PROTOCOL FSM API AVPDATA FUNC XPRT DAT 

The output of this command shows the tunnel profile name, L2TP hostname, local UDP port number, hello pa interval, and so on.

The following example shows the output of the show l2tpv3 tunnel status command:

Tunnel 858508253, from 10.13.11.29 to 10.13.11.157:-
state: ESTABLISHED
created at: Jul 2 04:58:25 2013
administrative name: 'test_tunnel' (primary)
created by admin: YES, tunnel mode: LAC, persist: YES
local host name: Instant-C4:42:98
peer tunnel id: 1842732147, host name: aruba1600pop636635.hsbtst2.aus
UDP ports: local 1701, peer 3000
session limit: 0, session count: 1
tunnel profile: test_tunnel_primary, peer profile: default 

session profile: default
hello timeout: 150, retry timeout: 80, idle timeout: 0
rx window size: 10, tx window size: 10, max retries: 5
use udp checksums: OFF
do pmtu discovery: OFF, mtu: 1460
trace flags: PROTOCOL FSM API AVPDATA FUNC XPRT DATA SYSTEM CLI
peer vendor name: Katalix Systems Ltd. Linux-2.6.32-358.2.1.el6.x86_64 (x86_64)
peer protocol version: 1.0, firmware 0
peer rx window size: 10
Transport status:-
ns/nr: 98/97, peer 98/96
cwnd: 10, ssthresh: 10, congpkt_acc: 9
Transport statistics:-
out-of-sequence control/data discards: 0/0
ACKs tx/txfail/rx: 0/0/96
retransmits: 0, duplicate pkt discards: 0, data pkt discards: 0
hellos tx/txfail/rx: 94/0/95
control rx packets: 193, rx bytes: 8506
control tx packets: 195, tx bytes: 8625
data rx packets: 0, rx bytes: 0, rx errors: 0
data tx packets: 6, tx bytes: 588, tx errors: 0
establish retries: 0 

The output of this command shows the tunnel profile name, tunnel creation date, hello packets sent or receive so on.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show 13-mobility

show 13-mobility {config|datapath| events [ ] | status}

Description

This command displays details about the Layer-3 (L3) events, mobility configuration, and roaming status of the IAP clients.

Syntax

Parameter Description
config	Displays the L3 mobility configuration details for a W-IAP.
datapath	Displays the datapath statistics associated with L3 mobility.
events []	Displays L3 mobility events for all W-IAP clients or individual clients filtered based on MAC address.
status	Displays the L3 mobility status for a W-IAP.

Usage Guidelines

Use this command to view the L3 mobility information for a W-IAP.

Examples

show I3-mobility config

The following example shows the output of the show I3-mobility config command:

Flags
----
Type Value
----
Home Agent Load Balancing enable
Virtual Controller Table
----
Virtual Controller IP
----
192.0.1.0
Subnet Table
----
Subnet Netmask VLAN Virtual Controller
----
192.0.2.0 255.255.255.255 2 192.0.1.0

The output of this command provides the following information:

Column Description
Flags	Indicates if any L3 mobility features are enabled.
Type	Indicates the type of the flag.
Value	Indicates if a flag is enabled.
Virtual Controller IP	Displays the Virtual Controller IP address. The Virtual Controller IP configuration for each W-IAP allows the clients to roam seamlessly among the W-IAPs.
Subnet	Indicates the IP address for the mobility domain.
Netmask	Displays the subnet mask configuration details.
VLAN	Displays the VLAN ID configured for the mobility domain.
Virtual Controller	Displays the Virtual Controller configuration associated with the mobility domain.

show 13-mobility datapath

The following example shows the output of show I3-mobility datapath command:

L3 Mobility Datapath Home Table

Client Index Client MAC Home Vlan Destinaton Device Index

L3 Mobility Datapath Foreign Table

Client Index Client MAC Home Vlan VAP Vlan Destination Device Index HAP IP Virtual Controller IP Packets Forwarded

L3 Mobility Datapath Tunnel Table

Tunnel Device Remote Protocol Dest IP Clients Idle Time Rx Packets Tx Packets Rx Mcasts Tx Mcasts ARP Proxy Pkts Tx Jumbo MTU Rx HB Tx HB MTU Reqs MTU Resps HB Mismatch IP Mismatch Type Vlan Translations

The output of this command provides the following information:

Parameter Description
L3 Mobility Datapath Home Table	Displays details such as client index, client MAC address, VLAN, destination device associated with the L3 mobility home subnet.
L3 Mobility Datapath Foreign Table	Displays details such as client index, client MAC address, VLAN, Destination device home AP IP address, Virtual Controller IP address and packet details associated with the L3 mobility foreign subnet.
L3 Mobility Datapath Tunnel table	Displays the following details about L3 mobility tunnel:• Tunnel - Indicates the tunnel interface.• Device - Displays the device ID.• Remote Protocol - Indicates the remote protocol used by the roaming clients.• Dest IP - Indicates the destination IP address to which the packets are route• Clients - Displays the list of clients• Idle Time - Displays the idle time• Rx Packets - Displays information about packets received.• Tx Packets - Displays information about packets transmitted.• Rx Mcasts - Displays information about multicast packets received.Tx Mcasts - Displays information about multicast packets transmitted.ARP Proxy Pkts - Displays information packets resolved to destination IP add by the proxy Address Resolution Protocol (ARP)Tx Jumbo MTU - Displays information about the Maximum Transmission Unit (MTU) in jumbo frames.Rx HBTx HBMTU Reqs - Indicates the number of MTU requests sent.MTU Resps - Indicates the number of MTU responses received.HB MismatchIP Mismatch - Indicates IP address mismatch if anyTypeVlan Translations - Displays details about VLAN translation.

show 13-mobility events

The following example shows the output of the show I3-mobility events command:

L3 Mobility Events

Time Client MAC Event IP Dir

---- ---- ------ -- ---- May 9 23:26:29 08:ed:b9:e1:51:87 Station Offline 10.17.88.59 <- May 9 23:26:29 08:ed:b9:e1:51:87 Potential Foreign Client10.17.88.59 <-

May 9 23:09:05 08:ed:b9:e1:51:87 This Client is Normal 10.17.88.59 ->

Peer IP Home Vlan VAP Vlan Tunnel ID Old AP IP FAP IP HAP IP VC IP Additional Info

self - 1 - - - - - -

self - - - - - - -

self - 1 -- 10.17.88.59 - 12-timed-out, test

The output of this command provides the following information:

Parameter Description
Time	Indicates the timestamp of the L3 mobility event.
Client MAC	Indicates the MAC address of the roaming clients.
Event	Provides a description of the mobility event.
IP	Indicates the IP address of the roaming client.
Dir	Indicates if the client has roamed in or out of the mobility subnet.
Peer IP	Displays the peer IP address, if any peer clients are configured.
Home Vlan	Displays the VLAN ID associated with the home subnet.
VAP Vlan	Displays the VLAN ID associated with the Virtual AP.
Tunnel ID	Indicates the tunnel interface used for routing packets.
Old AP IP	Indicates the IP address of the W-IAP from which the client has roamed.
FAP IP	Indicates the IP address of the W-IAP in the foreign subnet.
HAP IP	Indicates the IP address of the W-IAP in the home subnet, to which the client currently connected.
VC IP	Indicates the IP address of the Virtual Controller.
Additional Info	Displays additional information if any.

show 13-mobility status

The following example shows the output of the show I3-mobility status command:

Roaming Client Table

Client MAC Home Vlan VAP Vlan Tunnel ID Status Virtual Controller IP Peer IP Old AP IP Device Name

Tunnel Table

Peer IP Local Tunnel ID Remote Tunnel ID Use Count Type

Virtual Controller Table

Virtual Controller IP Type HAP IP Local Tunnel ID Remote Tunnel ID

192.0.1.0 C ---

The output of this command provides the following information:

Parameter Description
Roaming Client Table	Displays details such as client MAC address, Home AP and Virtual AP VLAN, Tunnel ID, roaming status, Virtual Controller IP address, peer IP address, old IP address, and the name of the device.
Tunnel Table	Displays details such as peer IP address, local tunnel ID, remote tunnel ID, tunnel count, and the type of tunnel used for routing packets.
Virtual Controller Table	Displays details such as Virtual Controller IP address, type, Home AP IP address, local tunnel ID, and remote tunnel ID.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show ldap-servers

show radius-servers

Description

This command displays the Lightweight Directory Access Protocol (LDAP) servers configured for user authentication on the Virtual Controller.

Usage Guidelines

Use this command to view the LDAP server configuration information available on a W-IAP.

Example

The following example shows the output of show ldap-servers command:

LDAP Servers

Name IP Address Port Timeout Retry Count Admin-DN Admin Password

Server1 192.0.2.5 389 5 3 admin-dn cn=admin password123

Base-DN Filter Key-Attribute In Use

dc=example, dc=com (objectclass=*) sAMAccountName No

The output of this command provides the following information:

Command/Parameter Description
Name	Displays the name of the LDAP authentication server.
IP Address	Displays the IP address of the LDAP server.
Port	Displays the authorization port number of the LDAP server.
Timeout	Displays a timeout value for the LDAP requests from the clients.
Retry Count	Displays number of times that the clients can attempt to connect to the serv
Admin-DN	Displays distinguished name for the administrator.
Admin Password	Displays the password for LDAP administrator.
Base-DN	Displays a distinguished name for the node which contains the entire user database.
Filter	Shows the filter to apply when searching for a user in the LDAP database.
Key-Attribute	Displays the attribute to use as a key when searching for the LDAP server. For Active Directory, the value is sAMAccountName
In Use	Indicates if the server is in use.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log ap-debug

show log ap-debug

Description

This command shows the W-IAP debug logs.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log apifmgr

show log apifmgr

Description

This command shows the log information for W-IAP interface manager.

Syntax

Parameter Description
count	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log convert

show log convert

Description

This command shows image conversion details for the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log debug

show log debug(count)

Description

This command shows the W-IAP full log.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log driver

show log driver

Description

This command displays the status of drivers configured on the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log kernel

show log kernel

Description

This command shows AP's kernel logs.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log 13-mobility

show log 13-mobility []

Description

This command displays the logs for Layer-3 mobility domains configured on a W-IAP.

Syntax

Parameter Description
	Filters the log output based on the number specified.

Usage Guidelines

Use this command to view the L3-mobility logs for a W-IAP.

Example

The following output is displayed for the show log l3-mobility command:

May 9 21:23:07: Potential Foreign Client Information: mac c4:85:08:de:06:d4 rcvd from self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info 12-timed-out,test May 9 01:43:22: Station Offline: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 0 tid 255 oldapip 0.0.0.0 fapip 0.0.0.0 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 01:25:53: This Client is Normal: mac 08:ed:b9:e1:51:87 sent to self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 01:25:53: Too many retries: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 01:25:52: Potential Foreign Client Information: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info 12-timed-out,test

The output of this command provides the following information:

Content Description
Timestamp	Indicates the timestamp of the L3 mobility event.
Client MAC	Indicates the MAC address of the roaming clients.
Event	Provides a description of the mobility event.
Home Vlan	Displays the VLAN ID associated with the home subnet.
VAP Vlan	Displays the VLAN ID associated with the Virtual AP.
tid	Indicates the tunnel interface used for routing packets.
Old AP IP	Indicates the IP address of the W-IAP from which the client has roamed.
FAP IP	Indicates the IP address of the W-IAP in the foreign subnet.
HAP IP	Indicates the IP address of the W-IAP in the home subnet, to which the client is currently connected.
VC IP	Indicates the IP address of the Virtual Controller.
Additional Info	Displays additional information if any.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log network

show log network

Description

This command shows network logs for the W-IAP.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log pppd

show log pppd

Description

Shows the Point-to-Point Protocol daemon (PPPd) network connection details.

Syntax

Parameter Description
	PPPd network count.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log rapper

show log rapper

Description

This command show details the VPN connection logs in detail.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log sapd

show log sapd

Description

This command shows the SAPd details.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log security

show log security

Description

This command shows security logs of the W-IAP.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log system

show log system

Description

This command shows system logs of W-IAP.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log upgrade

show log upgrade

Description

This command shows image download from URL and upgrade details for both local image file and URL for t IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log user

show log user [count]

Description

This command shows the W-IAP user logs.

Syntax

Parameter Description
count	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log user-debug

show log user-debug [count]

Description

This command shows the W-IAP user debug logs.

Syntax

Parameter Description
count	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show log vpn-tunnel

show log vpn-tunnel [count]

Description

This command shows VPN tunnel status for the W-IAP.

Syntax

Parameter Description
count	Starts displaying the log output from the specified number of lines from the end of the log.

Usage Guidelines

Use this command without the optional parameter to view a complete table of VPN tunnel status. Ind the parameter to display status for the specified count of VPN tunnels.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show log wireless

show log wireless []

Description

This command shows wireless logs of the W-IAP.

Syntax

Parameter Description
	Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show memory

show memory

Description

Displays the information about memory utilization for a W-IAP.

Usage Guidelines

Use this command to view information about memory utilization on a W-IAP.

Example

The following example shows the output of the show memory command:

MemTotal: 248048 kB
MemFree: 169204 kB
Buffers: 0 kB
Cached: 18164 kB
SwapCached: 0 kB
Active: 21472 kB
Inactive: 12640 kB
Active(anon): 15948 kB
Inactive(anon): 0 kB
Active(file): 5524 kB
Inactive(file): 12640 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 15972 kB
Mapped: 7728 kB
Shmem: 0 kB
Slab: 32252 kB
SReclaimable: 884 kB
SUnreclaim: 31368 kB
KernelStack: 816 kB
PageTables: 512 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 124024 kB
Committed_AS: 33616 kB
VmallocTotal: 516096 kB
VmallocUsed: 39452 kB
VmallocChunk: 449532 kB 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show mgmt-user

show mgmt-user

Description

This command displays the credentials for the admin users for the W-IAP management interface.

Usage Guidelines

Use this command to view the admin user credentials required for accessing the W-IAP and external server configuration details for the management users.

Examples

The following output is displayed for the show mgmt-user command:

Server Load Balancing : Disabled

Local User DB Backup :Disabled

RADIUS Servers

Name IP Address Port Key Timeout Retry Count

Server1 192.0.2.2 1616 23567aea01cb66d354d2blf5d13df7f85d4a dldlf181fb4827 5

NAS IP Address NAS Identifier In Use RFC3576

Yes

Management User Table

Name Password Type

admin admin Admin

The output of this command provides the following information:

Column Description
Server Load Balancing	Indicates if load balancing is enabled when two authentication servers are used.
Local User DB Backup	Indicates if the backing up of the local user database is enabled.
Name	Indicates the name of the RADIUS server.
IP address	Indicates the IP address of the RADIUS server.
Port	Indicates the authorization port number of the RADIUS server.
Key	Indicates the key for communicating with the RADIUS server.
Timeout	Indicates timeout value in seconds for one RADIUS request.
Retry count	Indicates the maximum number of authentication requests sent to the RADIUS server.
NAS IP address	Displays the IP address of the Network Access Server (NAS) if NAS is configured.
NAS Identifier	Indicates the NAS identifier to be sent with the RADIUS requests ifNAS is configured.
In Use	Indicates if the server is in use.
RFC3576	Indicates if the W-IAPs are configured to process RFC 3576-compliant Change of Authorization (CoA).
NAS IP address	Displays the IP address of the Network Access Server (NAS) if NAS is configured.
Name (Management User Table)	Indicates the username of the admin user
Password	Indicates the password of the admin user.
Type	Indicates if the type of the user (admin, read-only, or guest management user).

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	The output of this command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show network

show network

Description

This command shows network configuration details for a W-IAP.

Syntax

Parameter Description
	Displays the name of a network profile.

Usage Guidelines

Use this command without the optional parameter to view a complete configuration details of a network profile on the W-IAP. Include the parameter to display settings for a single network SSID only.

Example

The following example shows the partial output of show network command:

Name :test
ESSID :test
Status :Enabled
Mode :wpa2-aes
Band :all
Type :employee
Termination :Disabled
Passphrase :
WEP Key :
WEP Key Index :1
VLAN :
Server Load Balancing :Disabled
MAC Authentication :Disabled
L2 Auth Failthrough :Disabled
Captive Portal :disable
Exclude Uplink :none
Hide SSID :Disabled
Content Filtering :Disabled
Auth Survivability :Disabled
Auth Survivability time-out :24
RADIUS Accounting :Disabled
Interim Accounting Interval :0
Radius Reauth Interval :0
DTIM Interval :1
Inactivity Timeout :1000
Legacy Mode Bands :all
G Minimum Transmit Rate :1
G Maximum Transmit Rate :54
A Minimum Transmit Rate :6
A Maximum Transmit Rate :54
Multicast Rate Optimization :Disabled
LEAP Use Session Key :Disabled
Broadcast-filter :none
Max Authentication Failures :0
Blacklisting :Disabled
WISPr :Disabled
Accounting mode :Authentication 

Work without usable uplink :Disabled

Percentage of Airtime: :Unlimited

Overall Limit: :Unlimited

Per-user Limit: :Unlimited

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show network-summary

show network-summary

Description

This command displays the status of the available network configurations on the W-IAP.

Usage Guidelines

Use this command to view the status of the network configurations.

Examples

The following output is displayed for the show network-summary command:

Internet reachable : Detection disabled Active uplink : eth0 Primary VPN : Not configured Secondary VPN : Not configured AirWave : Not configured

The output of this command provides the following information:

Column Description
Internet Reachable	Indicates the status of the WLAN network.
Active uplink	Indicates the uplink that is currently active on the W-IAP.
Primary VPN	Indicates the status of the Primary VPN configuration.
Secondary VPN	Indicates the status of the Secondary VPN connection.
Airwave	Indicates the status of the W-AirWave configuration.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show opendns

show opendns [support]

Description

This command displays the open DNS configuration details for a W-IAP.

Syntax

Parameter Description
support	Displays if the OpenDNS credentials if the OpenDNS service is configured on the W-IAP.

Usage Guidelines

Use this command to view open DNS configuration details. The OpenDNS credentials are used by Instant to OpenDNS to provide enterprise-level content filtering.

Example

The following example shows the output of show opendns command:

OpenDNS Account :admin

OpenDNS Password :admin123

OpenDNS Status : Not connected

OpenDNS Error Message:N/A

The output of this command includes the following parameters:

Column Description
OpenDNS Account	Indicates the username for the OpenDNS account.
OpenDNS Password	Indicates the username for the OpenDNS account.
OpenDNS Status	Indicates if the W-IAP is connected to the OpenDNS server.
OpenDNS Error Message	Displays OpenDNS error message.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show port status

show port status

Description

Displays the activity statistics on each of the port on the controller.

Example

The following example shows the output of the show port status command:

(Instant AP)# show port status Port Type Admin-State Oper-State

bond0 GE down up

Parameter Description
Port	Displays the port number on the controller.
Type	Displays the port type.
Admin-State	Displays if the port is enabled or disabled.
Oper-State	Displays if the port is currently up and running.

Command History

Version	Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platforms	Command Mode
All platforms	Privileged Exec mode

show pppoe

show pppoe {config|debug logs|debug status}

Description

This command shows PPPoE debug logs and uplink status.

Syntax

Parameter Description
config	Displays PPPoE configuration details.
debug logs	Displays PPPoE debug logs.
debug status	Displays the uplink status.

Example

show pppoe config

The following example shows the configuration of the PPPoE show pppoe config command.

PPPoE Configuration

Type Value

---

User user

Password d226ccefac5a95cd6bb04ca74f20473eae9085fb16892b66

Service name ServiceA

CHAP secret 8acc867926ad85681fd0b0c1a15bb818

Unnumbered dhcp profile dhcpProfile1

show pppoe debug logs

The following example shows the configuration of the PPPoE show pppoe debug logs command.

pppd log not available

show pppoe debug status

The following example shows the configuration of the PPPoE show pppoe debug status command. pppoe uplink state : Suppressed.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show process

show process

Description

This command displays a list of processes running on a W-IAP.

Usage Guidelines

Use this command to view the processes running on the W-IAP for debugging purpose.

Example

The following example shows the partial output for the show process command:

PID Uid VmSize Stat Command
1 root 332 S init
2 root SWN [ksoftirqd/0]
3 root SW< [events/0]
4 root SW< [khelper]
5 root SW< [kthread]
6 root SW< [kblockd/0]
7 root SW [pdflush]
8 root SW [pdflush]
10 root SW< [aio/0]
9 root SW [kswapd0]
992 root 348 S /sbin/udhcpc -i br0 -b
1343 root 744 S /aruba/bin/tinyproxy
1344 root 476 S /aruba/bin/tinyproxy
1345 root 476 S /aruba/bin/tinyproxy
1348 root 476 S /aruba/bin/tinyproxy
1349 root 476 S /aruba/bin/tinyproxy
1350 root 476 S /aruba/bin/tinyproxy
1351 root 476 S /aruba/bin/tinyproxy
1362 root 716 S /usr/sbin/mini_httpd -c *.cgi -d /etc/httpd -u root
1365 root 732 S /usr/sbin/mini_httpd -c *.cgi -d /etc/httpd -u root -
1368 root 732 S /usr/sbin/mini_httpd -c *.cgi -d /etc/httpd -u root - 

The output of this command provides information on the process ID, user ID of the user running the process memory consumed by the process, statistics and the command associated with the processes running on the IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show proxy config

show proxy config

Description

This command displays the HTTP proxy configuration settings on a W-IAP.

Example

The following example shows the output of show proxy config command:

Proxy server :192.0.2.1

Proxy port :8080

Exceptions

No Exception

1 192.0.2.2

The output of this command provides the following information:

Parameter Description
Proxy server	Displays the IP address of the HTTP proxy.
Proxy port	Displays the port number configured for the HTTP proxy.
Exceptions	Displays the IP address of the hosts for which HTTP proxy configuration is not applied.

Command History

Version	Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show radio config

show radio config

Description

This command displays the 2.4 GHz and 5 GHz radio configuration details for a W-IAP.

Usage Guidelines

Use this command to view the 2.4 GHz and 5 GHz radio configuration details for a W-IAP.

Example

The following example shows the output of show radio config command:

(Instant AP)# show radio config

Legacy Mode: enable

Beacon Interval:100

802.11d/802.11h:enable

Interference Immunity Level:2

Channel Switch Announcement Count:0

MAX Distance:600

Channel Reuse Type:disable

Background Spectrum Monitor:disable

5.0 GHz:

Legacy Mode: enable

Beacon Interval:100

802.11d/802.11h:enable

Interference Immunity Level:2

Channel Switch Announcement Count:2

MAX Distance:600

Channel Reuse Type:disable

Background Spectrum Monitor:disable

The output of this command provides the following information:

Parameter Description
Legacy Mode	Indicates if the legacy mode is enabled on the W-IAPs to run the radio in the non-802.11n mode.
Beacon Interval	Displays beacon interval for the W-IAP in milliseconds. When beacon interval is configured, the 802.11 beacon management frames are transmitted by the access point at the specified interval.
802.11d/802.11h	Displays if the W-IAP is allowed advertise its 802.11d (country information) and 802.11h (transmit power control) capabilities.
Interference Immunity Level	Displays the immunity level configured for an AP radio profile to improve performance in high-interference environments. For more information on configuring immunity levels, see rf dot11a-radio-profile and rf dot11g-radio-profile.
Channel Switch	Displays the number of channel switching announcements that are sent before
Announcement Count	switching to a new channel.
MAX distance	Indicates the maximum distance in meters between a client and an AP or between a mesh point and a mesh portal.
Channel Reuse Type	Indicates if channel reuse type is enabled.
Channel Reuse Threshold	Displays the channel reuse threshold configured for channel reuse type.
Background Spectrum Monitor	Indicates background spectrum monitoring is enabled. When enabled, the W-IAPs in access mode continue with normal access service to clients, while performing additional function of monitoring RF interference (from both neighboring APs and non Wi-Fi sources such as, microwaves and cordless phones) on the channel they are currently serving clients.
Standalone Spectrum	Indicates the portion of the channel (upper, middle, or lower) that is being monitored on the 5 GHz band.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show radius-servers support

show radius-servers support

Description

This command displays the RADIUS server configuration details for a W-IAP.

Usage Guidelines

Use this command to view the RADIUS server information for a W-IAP.

Example

The following example shows the output of show radius-servers support command:

RADIUS Servers

Name IP Address Port Acctport Key

Server1 192.0.2.2 1616 1813 23567aea01cb66d354d2b1f5d13df7f85d4a

Timeout Retry Count NAS IP Address NAS Identifier In Use RFC3576

d1d1f181fb4827 5 Yes 0

Airgroup RFC3576-ONLY Airgroup RFC3576 port Deadtime

5

The output of this command provides the following information:

Parameter Description
Name	Indicates the name of the RADIUS server.
IP address	Indicates the IP address of the RADIUS server.
Port	Indicates the authorization port number of the RADIUS server.
AcctPort	Indicates the authorization port number of the RADIUS server.
Key	Indicates the key for communicating with the RADIUS server.
Timeout	Indicates timeout value in seconds for one RADIUS request.
Retry count	Indicates the maximum number of authentication requests sent to the RADIUS server.
NAS IP address	Displays the IP address of the Network Access Server (NAS) if NAS is conf
NAS Identifier	Indicates the NAS identifier to be sent with the RADIUS requests.
In Use	Indicates if the server is in use.
RFC3576	Indicates if the W-IAPs are configured to process RFC 3576-compliant Chang Authorization (CoA).
Airgroup RFC3576-ONLY	Indicates if W-IAPs are configured to be RFC 3576 compliant only.
Airgroup RFC3576 port	Indicates the port number used for sending AirGroup CoA.
Deadtime	Indicates the RADIUS server dead-time.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show rft trans-id

show rft trans-id {| all}

Description

This command shows the transaction IDs of tests performed for RF troubleshooting.

Syntax

Parameter Description
	Indicates the transaction ID for which you want to view the output.
all	Displays all the transaction IDs associated with the RF tests.

Usage guidelines

Use the show rft trans-id command to view the transaction IDs for the most recent test performed for RF troubleshooting.

Example

The following example shows the transaction IDs for the latest RF tests.

(Instant AP)# show rft trans-id 201

Command History

Version Description
Dell Networking W-Series Instant6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show rft profile

show rft profile {all|antenna-connectivity|ht-link-quality|link-quality|raw}

Description

This command shows the RF test profile for testing RF parameters such as antenna connectivity, link quality, channel link quality.

Syntax

Parameter Description
all	Displays the parameters for all test profiles.
antenna-connectivity	Displays the parameters details for the antenna-connectivity test profile.
ht-link-quality	Displays the parameter details for the HT link quality test profile.
link-quality	Displays the parameter details for the link quality test profile.
raw	Displays the parameter details for the raw test profile.

Usage guidelines

Use the show rft profile command to view the test profile parameters for RF troubleshooting.

Example

The following example shows the profile parameters for all RF test profiles:

(Instant AP)# show rft profile all

Profile RAW: Built-in profile

Parameter Value

Antenna 1 and/or 2

Frame Type Null Data

Num Packets 100

Packet Size 1500

Num Retries 3

Profile LinkQuality: Built-in profile

Parameter Value

Antenna 1 and/or 2

Frame Type Null Data

Num Packets 100 for each data-rate

Packet Size 1500

Num Retries 0

Data Rate All rates are tried

Profile HTLinkQuality: Built-in profile

Parameter Value

Antenna 1 and/or 2

Frame Type Null Data

Num Packets 100 for each data-rate

Packet Size 1500

Num Retries 0

Data Rate All rates are tried

Profile AntennaConnectivity: Built-in profile

Parameter Value

Frame Type Null Data

Num Packets 100

Packet Size 1500

Num Retries 0

Radio 0 (1 for AP-80-S only)

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show running-config

show running-config

Description

This command displays the current configuration running on a W-IAP, including the current changes that are y be saved.

Usage Guidelines

Use this command to view the current configuration information stored in the W-IAP flash memory.

Example

The following example shows the partial output of the show running-config command output:

version 6.4.0.0-4.1.0
virtual-controller-country IN
virtual-controller-key 0cb5770401cdeb6e4363c25fdfde17d907c4b095a9be5e
name instant-C4:42:98
terminal-access
clock timezone none 00 00
rf-band all
allow-new-aps
allowed-ap d8:c7:c8:c4:42:98
arm
wide-bands 5ghz
80mhz-support
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
scanning
client-match
syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless
mgmt-user admin aba950f14f5764975371fcb66a72d10f
wlan access-rule default_wired_port_profile
index 1
rule any any match any any any permit
wlan access-rule wired-instant
index 2
rule masterip 0.0.0.0 match tcp 80 80 permit
rule masterip 0.0.0.0 match tcp 4343 4343 permit
rule any any match udp 67 68 permit
rule any any match udp 53 53 permit
wlan access-rule test
index 3
rule any any match any any any deny
wlan ssid-profile test
enable
index 1
type employee
essid instant
opmode opensystem 

max-authentication-failures 0
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64
dot1lk
dot1lv
auth-survivability cache-time-out 24
wlan external-captive-portal
server localhost
port 80
url "/""
auth-text "Authenticated"
auto-whitelist-disable
https
blacklist-time 3600
auth-failure-blacklist-time 3600
ids
wireless-containment none
wired-port-profile wired-instant
switchport-mode access
allowed-vlan all
native-vlan guest
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poe
type guest
captive-portal disable
no dotlx
wired-port-profile default_wired_port_profile
switchport-mode trunk
allowed-vlan all
native-vlan 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type employee
captive-portal disable
no dotlx
enet0-port-profile default_wired_port_profile
uplink
preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180
airgroup
disable
airgroupservice airplay
disable
description AirPlay
airgroupservice airprint
disable
description AirPrint 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show snmp-configuration

show snmp-configuration

Description

This command displays the Simple Network Management Protocol (SNMP) configuration details for a Virtual Controller.

Usage Guidelines

Use this command to view the SNMP information configured on a Virtual Controller.

Example

The following example shows the output of show snmp-configuration command:

Engine ID:D8C7C8CBD420

Community Strings

Name

---

SNMPv3 Users

Name Authentication Type Encryption Type

SNMP Trap Hosts

IP Address Version Name Port Inform

The output of this command includes the following parameters:

Parameter Description
Engine ID	Displays the SNMP engine ID.
Community Strings	Displays the SNMP community strings..
SNMPv3 Users	Displays details about the SNMPv3 users.
Name	Indicates the name of the SNMP user
Authentication Type	Indicates the authentication protocol configured for the SNMP users.
Encryption Type	Indicates the encryption type, for example, Advanced Encryption Standard (AES) or CBC-DES Symmetric Encryption Protocol (DES) configured for SN users.
SNMP Trap Hosts	Displays the traps generated by the host system.
IP Address	Indicates the host IP address generating the SNMP trap.
Version	Displays the SNMP version for which the trap is generated.
Name	Indicates the name of system generating the SNMP traps.
Port	Indicates the port number to which notification messages are sent.
Inform	Displays the SNMP inform messages to send to the configured host.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show snmp trap-queue

show snmp trap-queue

Description

This command displays the list of SNMP traps in queue.

Usage Guidelines

Use this command to view the SNMP traps in queue.

Example

The following example shows the partial output of show snmp trap-queue command:

2013-05-12 14:05:27 An AP (NAME d8:c7:c8:cb:d4:20 and MAC d8:c7:c8:cb:d4:20 on RADIO 2) detected an interfering access point (BSSID 00:24:6c:80:7d:11 and SSID NTT-SPOT on CHANNEL 1). 2013-05-12 14:09:53 An AP (NAME d8:c7:c8:cb:d4:20 and MAC d8:c7:c8:cb:d4:20 on RADIO 2) detected an interfering access point (BSSID 6c:f3:7f:45:5d:20 and SSID 7SPOT on CHANNEL 1). 2013-05-12 14:10:36 An AP (NAME d8:c7:c8:cb:d4:20 and MAC d8:c7:c8:cb:d4:20 RADIO 2) changed its channel from channel 1 (secchan offset 1) to channel 7 (secchan offset 1) due to reason 12.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show spectrum-alert

show spectrum-alert

Description

This command displays the list of spectrum alerts for a W-IAP.

Syntax

Parameter Description
	Filters the alerts based on the specified number.

Usage Guidelines

Use this command to view the spectrum alerts for a W-IAP. When a new non Wi-Fi device is found, an alert reported to the Virtual Controller. The spectrum alert messages provide information about the device ID, device IP address of the spectrum monitor or hybrid AP, and the timestamp. The Virtual Controller reports the details of device information to W-AirWave Management server.

Example

The following example shows the output for the show spectrum-alert command when no alerts are generated.

Spectrum Alerts

Timestamp Type ID Access Point

The output of this command provides the following information:

Parameter Description
Timestamp	Displays the time at which alert was recorded.
Type	Displays the type of the device that generated the alert.
ID	Displays the device ID for which the alert is generated.
Access Point	Displays the IP address of the W-IAP.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show stats

show stats {ap | client | global | network } [count]

Description

This command displays the aggregate statistics for W-IAPs, W-IAP clients, W-IAP cluster, and network profiles configured on a W-IAP.

Syntax

Parameter Description
ap	Displays information on W-IAP utilization, RF trends, and client details for a specific W-IAP.
client	Displays information on a client and its mobility records, the cluster to which the client has joined, and the details of the W-IAP to which it is currently connected.
global	Displays global statistics for the W-IAP cluster, and the W-IAPs and clients connected to the W-IAP cluster.
network	Displays aggregate information about a network profile configured on a W-IAP.
[count]	Allows you to filter the command output for the W-IAP, client, global, and network profile statistics based on the specified number.

Usage Guidelines

Use this command to view the following information about W-IAPs, the clients connected to the W-IAPs, and corresponding W-IAP cluster:

• Utilization trend – Displays information about the W-IAP utilization, the number of clients associated with a W-IAP, Virtual Controller, or the W-IAP network over the last 15 minutes.
• RF trends – Displays information the utilization, noise, or error threshold for a W-IAP. It also shows the current speed or signal strength for the clients in the network and the RF information for the W-IAPs to which they are connected.
• Mobility Trail – Shows duration of the client is association with a W-IAP and the name of the W-IAP to which it is currently connected.

Examples

show stats ap

The following example shows the output for the show stats ap command:

Util Level:good
Noise Level:good
Error Level:good
2.4 GHz Channel:7
5.0 GHz Channel:149+
Usage
----
Timestamp CPU Utilization (%) Memory Free (MB) Neighboring APs [Valid] Neighboring APs [Interfering] Neighboring APs [Rogue] Neighboring Clients [Valid] Neighboring Clients [Interfering] Clients Throughput [Out] (bps) Throughput [In] (bps) 

00:34:46 8 164 4 239 0 1 8 1 93 99

00:34:17 8 164 4 239 0 1 8 1 186 199

0 1 9

RF Trends

Timestamp Utilization [2.4 GHz] (%) Utilization [5.0 GHz] (%) Noise Floor [2.4 GHz]

(dBm) Noise Floor [5.0 GHz] (dBm) 2.4 GHz Frames [Errors] (fps) 5.0 GHz Frames [Errors] (fps)

2.4 GHz Frames [Out] (fps) 5.0 GHz Frames [Out] (fps) 2.4 GHz Frames [In] (fps) 5.0 GHz Frames

[In] (fps) 2.4 GHz Frames [Drops] (fps) 5.0 GHz Frames [Drops] (fps) 2.4 GHz Mgmt Frames [In]

(fps) 5.0 GHz Mgmt Frames [In] (fps) 2.4 GHz Mgmt Frames [Out] (fps) 5.0 GHz Mgmt Frames [Out] (fps)

00:34:46 59 4 -91 -93 41 0 0 0 68 18 1 1 403 265 1 0

00:34:17 61 5 -92 -93 45 0 0 1 78 21 1 1 408 287 1 1

Client Heatmap

Clients Signal Speed IP Address

AP List

Name IP Address Mode Spectrum Clients Type CPU Utilization %: Memory Free (MB): Serial Number:

Need Antenna Config From Port

d8:c7:c8:cb:d4:20 10.17.88.188 access disable 1 135 8 164 AX0059921 No none

show stats client

The following example shows the output for the show stats client command:

Name::

IP Address::169.254.90.154

MAC Address::08:ed:b9:e1:51:7d

Access Point::d8:c7:c8:cb:d4:20

Channel::149+

Network::Network1

Connection Time::4h:50m:48s

Type::AN

OS::

Swarm Client Stats

Timestamp Signal (dB) Frames [In] (fps) Frames [Out] (fps) Throughput [In] (bps) Throughput

[Out] (bps) Frames [Retries In] (fps) Frames [Retries Out] (fps) Speed (mbps)

00:32:46 47 0 0 0 170 0 0 6

00:32:16 47 0 0 0 170 0 0 6

00:31:46 47 0 1 0 5946 0 0 6

00:31:16 49 0 0 0 316 0 0 6

Mobility Trail

Association Time Access Point

11:04:56 d8:c7:c8:cb:d4:20

Client Heatmap

Client Signal Speed IP Address

169.254.90.154 good good 169.254.90.154

Access Point Heatmap

Access Point Utilization Noise Errors

d8:c7:c8:cb:d4:20 good good good

Client List

Name IP Address MAC Address OS Network Access Point Channel Type Role

169.254.90.154 08:ed:b9:e1:51:7d Network1 d8:c7:c8:cb:d4:20 149+ AN Network1

Info timestamp :48662

show stats global

The following example shows the output for the show stats global command:

Swarm Global Stats

Timestamp Clients Frames [Out] (fps) Frames [In] (fps) Throughput [Out] (bps) Throughput [In] (bps)

00:38:05 1 0 0 294 380

00:37:35 1 0 0 98 101

00:37:04 1 0 0 0 0

00:36:33 1 0 0 0 0

00:36:03 1 0 0 0 0

00:35:32 1 0 0 46 49

00:35:01 1 0 0 93 99

00:34:31 1 0 0 186 199

00:34:00 1 0 0 0 0

00:33:29 1 0 0 0 0

00:32:59 1 0 0 0 170

00:32:28 1 0 0 0 170

00:31:58 1 0 1 2961 5946

00:31:27 1 0 0 196 316

00:30:56 1 0 0 196 202

Access Point Heatmap

Access Points Utilization Noise Errors

Client Heatmap

Clients Signal Speed IP Address

show stats network

The following example shows the output for the show stats network command:

Swarm Network Stats

Timestamp Clients Frames [Out] (fps) Frames [In] (fps) Throughput [Out] (bps) Throughput [In] (bps)

16:39:25 0 0 0 0 0

16:38:55 0 0 0 0 0

16:38:25 0 0 0 0 0

16:37:54 0 0 0 0 0

16:37:24 0 0 0 0 0

16:36:54 0 0 0 0 0

16:36:24 0 0 0 0 0

16:35:54 0 0 0 0 0

16:35:23 0 0 0 0 0

16:34:53 0 0 0 0 0

16:34:23 0 0 0 0 0

Access Point Heatmap

Access Points Utilization Noise Errors

d8:c7:c8:c4:42:98 poor good good

Client Heatmap

---

Clients Signal Speed IP Address

Name :test123

ESSID :test123

Status : Enabled

Mode :wpa2-aes

Band :all

Type : employee

Termination : Disabled

Passphrase :

WEP Key :

WEP Key Index :1

VLAN :

Server Load Balancing :Disabled

MAC Authentication : Disabled

L2 Auth Failthrough :Disabled

Captive Portal : disable

Exclude Uplink :none

Hide SSID :Disabled

Content Filtering :Disabled

Auth Survivability : Disabled

Auth Survivability time-out :24

RADIUS Accounting : Disabled

Interim Accounting Interval :0

Radius Reauth Interval :0

DTIM Interval :1

Inactivity Timeout :1000

Legacy Mode Bands :all

G Minimum Transmit Rate :1

G Maximum Transmit Rate :54

A Minimum Transmit Rate :6

A Maximum Transmit Rate :54

Multicast Rate Optimization : Disabled

LEAP Use Session Key :Disabled

Broadcast-filter :none

Max Authentication Failures :0

Blacklisting :Disabled

WISPr :Disabled

Accounting mode :Authentication

Work without usable uplink :Disabled

Percentage of Airtime: :Unlimited

Overall Limit: :Unlimited

Per-user Limit: :Unlimited

Access Control Type: :Role

Machine-only Role: :test1

User-only Role: :test1

Dynamic Multicast Optimization : Disabled

DMO Channel Utilization Threshold :90

Local Probe Request Threshold :0

Max Clients Threshold :64
Background WMM Share :0
Best Effort WMM Share :0
Video WMM Share :0
Voice WMM Share :0
Certificate Installed: :No
Internal Radius Users: :0
Internal Guest Users: :0
Role Derivation Rules

Attribute Operation Operand Role Name Index

Vlan Derivation Rules

Attribute Operation Operand Vlan Id

RADIUS Servers

Name IP Address Port Key Timeout Retry Count NAS IP Address NAS Identifier RFC3576

test 10.0.0.1 1812 test123 5 3
test123 10.0.0.0 1812 test123 5 3
LDAP Servers

Name IP Address Port Timeout Retry Count Admin-DN Admin Password Base-DN

test 0.0.0.0 0 5 3
Access Rules

Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Action Log TOS 802.1P Blacklist Mirror DisScan ClassifyMedia

any any match any permit
Vlan Id :0
ACL Captive Portal:disable
:Captive Portal Configuration
Background Color:13421772
Banner Color :16750848
Decoded Texts :
Banner Text :Welcome to Guest Network
Use Policy :Please read terms and conditions before using Guest Network
Terms of Use :This network is not secure, and use is at your own risk
Internal Captive Portal Redirect URL:
Captive Portal Mode:Acknowledged
:External Captive Portal Configuration
Server:localhost
Port :80
URL :/

Authentication Text:Authenticated
External Captive Portal Redirect URL:
Server Fail Through:No 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show subscription-aps

show subscription-aps

Description

This command displays the subscription status of a W-IAP.

Example

(Instant AP) (config) # show subscription-aps

IAP controlled by Cloud-Server:disable

subscription enabled by manually :disable

Subscription Ap List

MAC Address Status

d8:c7:c8:c4:56:de ACTIVE

d8:c7:c8:c4:57:06 ACTIVE

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show summary

show summary { | support}

Description

This command shows the current configuration details.

Syntax

Parameter Description
	Shows the difference in configuration.
support	Shows the summary support containing the configuration details used by support.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show swarm

show swarm {state|mode}

Description

This command displays the current status of the W-IAP cluster and indicates if W-IAPs are in a cluster or st mode.

Usage Guidelines

Use this command to view the current status of the W-IAP cluster and to view information about the function mode of the W-IAP cluster.

Example

The following example shows the output of show swarm state command:

AP Swarm State : swarm_config_sync_complete mesh ldart State : suspending

The output of this command describes synchronization status of the W-IAP cluster.

The following text shows an example output for the show swarm mode command:

Swarm Mode :Cluster

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show supported-cert-formats

show supported-cert-formats

Description

This command displays the supported server and CA certificate formats.

Usage Guidelines

Use this command to view the list certificate formats supported by the W-IAP.

Examples

Server Certificate Formats

Name

PEM

CA Certificate Formats

Name

PEM

DER

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	The output of this command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.4	This command was modified.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show syslog-level

show syslog-level

Description

This command displays the Syslog logging levels configured for a W-IAP.

Usage Guidelines

Use this command to view the Syslog logging facilities and the associated logging level.

Example

The following example shows to output of the show syslog-level command:

Logging Level

____

Facility Level

____ ____ ____

ap-debug debug

network debug

security debug

system debug

user debug

user-debug debug

wireless debug

The output of this command provides the following information:

Parameter Description
Facility	Displays the list of logging facilities configured on the W-IAP.
ap-debug	Generates a log for the AP device for debugging purposes.
network	Generates a log when there is a change in the network, for example, when a new W-IAP is added to a network.
security	Generates a log for network security, for example, when a client connects using wrong password.
system	Generates a log about the system configuration and status.
user	Generates a log for the W-IAP clients.
user-debug	Generates a detailed log about the clients for debugging purposes.
wireless	Generates a log about radio configuration.
syslog-level	Displays any of the following Syslog logging level configured for the Syslog facility.Emergency – Panic conditions that occur when the system becomes unusable.Alert – Any condition requiring immediate attention and correction.Critical – Any critical conditions, for example, hard drive error.Errors –Error conditions.Warning – Warning messages.Notice – Significant events of a non-critical and normal nature. The default value for all Syslog facilities.Informational – Messages of general interest to system users.Debug – Messages containing information useful for debugging.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show tacacs-servers

show tacacs-servers

Description

This command displays all the tacacs servers configured on a W-IAP.

Usage Guidelines

Use this command to view the list of tacacs servers available on a W-IAP.

Example

The following example shows the output of the show tacacs-servers command:

TACACS Servers

Name IP Address Port Key Timeout Retry Count In Use

tacacs1 10.64.16.240 49 pass123 20 1 Yes

tacacs2 192.168.0.100 49 pass456 10 2 No

The output of this command provides the following information:

Parameter Description
Name	Indicates the list of tacacs server available on a W-IAP.
IP Address	Displays the IP address for each tacacs server.
Port	Indicates the TCP Port in use for the tacacs server.
key	Indicates the shared secret key used to authenticate and access tacacs server.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show tech-support

show tech-support

Description

This command displays the complete W-IAP information and the associated configuration details, which can be used by the technical support representatives for debugging.

Usage Guidelines

Use this command to view and analyze W-IAP configuration details for debugging any AP related issues.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show uncommitted-config

show uncommitted-config

Description

This command displays the current configuration details that are yet to be committed and saved on the W-IAI

Usage Guidelines

Use this command to view the uncommitted configuration details. Use the commit apply command to commit the configuration changes.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show upgrade info

show upgrade info

Description

This command displays the image upgrade details for a W-IAP.

Usage Guidelines

Use this command to view the image upgrade details for a W-IAP.

Example

The following example shows the output of show upgrade info command:

Image Upgrade Progress

Mac IP Address AP Class Status Image Info Error Detail

d8:c7:c8:cb:d4:20 10.17.88.188 Cassiopeia image-ok image file none

The output of this command provides the following information:

Parameter Description
Mac	Shows the MAC address of the W-IAP.
IP Address	Shows the IP address of the W-IAP.
AP Image Class	Indicates the W-IAP class. The following examples describe the image class for different W-IAP models:For W-IAP 135/134 –DellInstant_Cassiopeia_For W-IAP108/109, W-IAP103, and W-IAP114/115– DellInstant_Pegasus_For W-IAP155/155P–DellInstant_Aries_For W-IAP224/225 and W-IAP274/275–DellInstant_Centaurus_For all other W-IAPs –DellInstant_Orion_
Status	Indicate the current status of the image upgrade.
Image Info	Indicates the source of image.
Error Detail	Displays errors generated when an upgrade fails.
Auto Reboot	Indicates if automatic rebooting of W-IAP is enabled on a successful upgra
Use External URL	Indicates if an external URL can be used for loading an image file.

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

Description

This command displays uplink configuration details and status of for a W-IAP.

Syntax

Parameter Description
show uplink config	Displays the uplink interface configuration details for a W-IAP.
show uplink stats	Displays the aggregate uplink statistics for a W-IAP

Usage Guidelines

Use this command to view the information about uplink status and configuration for a W-IAP.

Example

The following output is displayed for the show uplink config command:

Uplink preemption : enable

Uplink enforce :none

Ethernet uplink eth0 : DHCP

Internet failover : disable

Max allowed test packet loss:10

Secs between test packets :30

VPN failover timeout (secs) :180

The output of this command provides the following information:

Column Description
Uplink preemption	Indicates if the uplink preemption is enabled.
Uplink enforce	Indicates if any uplinks are enforced.
Ethernet uplink eth0	Indicates if Ethernet uplink is configured.
Max allowed test packet loss	Indicates an allowed number of test packets that can be lost verifying the Internet availability.
Secs between test packets	Indicates the frequency at which the test packets are sent to verify the Internet availability.
VPN failover timeout (secs)	Indicates the number of seconds to wait, before trying a different uplink when a VPN tunnel is down.

The following output is displayed for the show uplink status command:

Uplink preemption : enable

Uplink enforce :none

Ethernet uplink eth0 :DHCP

Uplink Table

Type State Priority In Use

eth0 UP 0 Yes

Wifi-sta INIT 6 No

3G/4G INIT 7 No

Internet failover :disable

Max allowed test packet loss:10

Secs between test packets :30

VPN failover timeout (secs) :180

ICMP pkt sent :0

ICMP pkt lost :0

Continuous pkt lost :0

VPN down time :0

The output of this command provides the following information:

Column Description
Uplink preemption	Indicates if the uplink preemption is enabled.
Uplink enforce	Indicates if any uplinks are enforced.
Ethernet uplink eth0	Indicates if Ethernet uplink is configured.
Type	Indicates the type of the uplink.
State	Indicates the uplink status.
Priority	Indicates if any priority levels are assigned to the uplink.
In Use	Indicates if the uplink is in use.
Max allowed test packet loss	Indicates an allowed number of test packets that can be lost verifying the Internet availability.
Secs between test packets	Indicates the frequency at which the test packets are sent to verify the Internet availability.
VPN failover timeout (secs)	Indicates the number of seconds to wait, before trying a different uplink when a VPN tunnel is down.
ICMP pkt sent	Indicates the number of ICMP packets sent to verify the Internet availability for uplink switchover.
ICMP pkt lost	Indicates the number of ICMP packets lost.
Continuous pkt lost	Indicates if the packets are lost continuously.
VPN down time	Indicates the time since the VPN connection is unavailable.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show uplink-vlan

show uplink-vlan

Description

This command displays the uplink VLAN configuration details for the management traffic.

Usage Guidelines

Use this command to view the uplink VLAN configuration details for management traffic. The uplink management VLAN configuration allows you to tag management traffic and connect multiple W-IAP clusters (Virtual Controls to the same port on an upstream switch (for example, W-AirWave server).

Example

The following output is displayed for the show uplink-vlan command:

Uplink Vlan Current :0 Uplink Vlan Provisioned :

The output of this command provides the following information:

Column Description
Uplink Vlan Current	Indicates if the VLAN ID.
Uplink Vlan Provisioned	Indicates if the uplink VLAN is provisioned.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show users

show user [portal| Radius]

Description

This command displays users configured for a W-IAP.

Syntax

Parameter Description
portal	Displays the W-IAP user credentials.
radius	Displays the user credentials for the RADIUS server authentication

Usage Guidelines

Use this command to view the W-IAP user credentials.

Examples

The following output is displayed for the show user command:

show user

User Table

Name Password Attribute

____ ____ ____

d8:c7:c8:cb:d4:20# show user portal

Portal User Table

Name Password

____ ____ ____

d8:c7:c8:cb:d4:20# show user radius

Radius User Table

Name Password

____ ____ ____

The output of this command provides the following information:

Column Description
Name	Indicates the username of the W-IAP, portal, and the RADIUS users
Password	Indicates the password details of the users.
Attribute	Indicates the attributes

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show valid-channels

show valid-channels

Description

This command displays the list of channels that are valid for a W-IAP serving a specific regulatory domain.

Usage Guidelines

Use this command to view the list of valid channels that can be configured on your W-IAP.

Example

The following example shows the output of show valid-channels command:

2.4 GHz
1
2
3
4
5
6
7
8
9
10
11
12
13
1+
2+
3+
4+
5+
6+
7+
5.0 GHz
36
40
44
48
52
56
60
64
149
153
157
161
165
36+
44+
52+
60+
149+
157+ 

The output of this command provides the following information:

Parameter Description
2.4 GHz	Displays the list of channels valid for a W-IAP in the 2.4 GHz band.
5.0 GHz	Displays the list of channels valid for a W-IAP in the 5.0 GHz band.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show version

show version

Description

This command displays the Instant software version running on a W-IAP.

Example

The following example shows the output of the show version command:

Aruba Operating System Software.

ArubaOS (MODEL: W-AP105), Version 6.3.1.1-4.0.0.0

website: http://www.dell.com

Copyright (c) 2002-2013, Aruba Networks, Inc.

Compiled on 2013-11-18 at 09:46:18 PST (build 40933) by p4build

AP uptime is 2 days 3 hours 32 minutes 48 seconds

Reboot Time and Cause: AP rebooted Wed Nov 20 05:28:48 UTC 2013; Image Upgrade Successful

The output of this command provides the following information:

Parameter Description
Version	Indicates the version of W-IAP software.
Reboot Time and Cause	Indicates the reason for which the W-IAP was last rebooted and the reboot time.
Model	Indicates the W-IAP model.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show vpn

show vpn {config|status|tunnels}

Description

This command displays the status and configuration details for VPN-enabled W-IAPs.

Syntax

Parameter Description
config	Displays configuration details for the VPN-enabled W-IAPs.
status	Displays the status of the VPN connections enabled on a W-IAP.
tunnels	Displays the IAP-VPN retry counter statistics.

Example

The following example shows the output displayed for show vpn config command:

Concentrator
----
Type Value
----
VPN Primary Server
VPN Backup Server
VPN Preemption disable
VPN Fast Failover disable
VPN Hold Time 600
VPN Monitor Pkt Send Freq 5
VPN Monitor Pkt Lost Cnt 2
VPN Ikepsk
VPN Username
VPN Password 95a5624fbf08dfb3e794ac2c6686e330
GRE outside vpn disable
GRE Server
GRE IP Address 0.0.0.0
GRE Type 1
GRE Per AP Tunnel disable
Reconnect User On Failover disable
Reconnect Time On Failover 60
Routing Table
----
Destination Netmask Gateway Type 

The output displayed for this command provides information on the parameters configured for the VPN concent

For more information on the VPN configuration parameters, see the following commands:

• vpn primary
- vpn backup
• vpn preemption
• vpn fast-failover
• vpn gre-outside
• vpn hold-time
• vpn monitor-pkt-lost-cnt

• vpn monitor-pkt-send-freq
• vpn ikepsk
- gre type
- gre primary
- gre per-ap-tunnel

The following example shows the output displayed for show vpn status command:

profile name:default

current using tunnel :unselected tunnel
ipsec is preempt status :disable
ipsec is fast failover status :disable
ipsec hold on period :600
ipsec tunnel monitor frequency (seconds/packet) :5
ipsec tunnel monitor timeout by lost packet cnt :2
ipsec primary tunnel crypto type :Cert
ipsec primary tunnel peer address :N/A
ipsec primary tunnel peer tunnel ip :N/A
ipsec primary tunnel ap tunnel ip :N/A
ipsec primary tunnel current sm status :Init
ipsec primary tunnel tunnel status :Down
ipsec primary tunnel tunnel retry times :0
ipsec primary tunnel tunnel uptime :0
ipsec backup tunnel crypto type :Cert
ipsec backup tunnel peer address :N/A
ipsec backup tunnel peer tunnel ip :N/A
ipsec backup tunnel ap tunnel ip :N/A
ipsec backup tunnel current sm status :Init
ipsec backup tunnel tunnel status :Down
ipsec backup tunnel tunnel retry times :0
ipsec backup tunnel tunnel uptime :0 

The show vpn status command displays the current status of VPN connection, IP address configured for VPN/IPSec connections, and the tunnel details.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1 The tunnels keyword was added.
Dell Networking W-Series Instant 6.3.1.1-4.0	The command output is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show walled-garden

show walled-garden

Description

This command displays the domain names and websites that are blacklisted or whitelisted by a W-IAP.

Usage Guidelines

Use this command to view the walled garden configuration details for a W-IAP. A walled garden typically con access to Web content and services. The Walled garden access is required when an external captive portal i For example, a hotel environment where the unauthenticated users are allowed to navigate to a designated lc page (for example, a hotel website) and all its contents.

The users who do not sign up for the Internet service can view the “allowed” websites (typically hotel proper websites). The website names must be DNS-based and support the option to define wildcards. This works for devices with or without HTTP proxy settings.

When a user attempts to navigate to other websites, which are not in the whitelist of the walled garden profi user is redirected to the login page. In addition, a blacklisted walled garden profile can also be configured to explicitly block the unauthenticated users from accessing some websites.

Example

The following example shows the output of show walled-garden command:

White List
----
Domain Name
----
example.com
Black List
----
Domain Name
----
example2.com 

The output of this command provides the following information:

Parameter Description
Domain Name	Displays the blacklisted or whitelisted domain names and URLs.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show wifi-uplink

show wifi-uplink {auth log |config | status}

Description

This command displays the configuration details, the status, and authentication log for the Wi-Fi uplinks config on a W-IAP.

Syntax

Parameter Description
auth log	Displays the authentication configuration details and an authentication lo
config	Displays the Wi-Fi configuration parameters enabled on a W-IAP.
status	Displays the status of the Wi-Fi uplink.

Usage Guidelines

Use this command to view the information about status and configuration details for the Wi-Fi uplink enabled IAP.

Example

show wifi-uplink auth log

The following output is displayed for the show wifi-uplink auth log command:

wifi uplink auth configuration:

wifi uplink auth log:

[1536]2013-05-08 23:42:06.647: Global control interface '/tmp/supp_gbl'

show wifi-uplink config

The following output is displayed for the show wifi-uplink config command:

ESSID :Wifi

Cipher Suite :wpa-tkip-psk

Passphrase :test1234

Band :dot11a

The output for this command displays the following information:

Parameter	Description
ESSID	Displays the name of the network for which the Wi-Fi uplink is configured.
Cipher Suite	Displays the encryption settings configured for the Wi-Fi uplink. For example, wpa-tkip-psk or wpa2-ccmp-psk.
Passphrase	Displays the WPA passphrase configured for the Wi-Fi uplink.
uplink-band	Displays the band configured for the Wi-Fi uplink connection. For example, dot11a and dot11g.

show wifi-uplink status

The following output is displayed for the show wifi-uplink status command:

configured : YES
enabled : YES 

The output of this command indicates if the Wi-Fi uplink is configured and enabled on the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show wired-port

show wired-port

Description

This command displays the configuration details associated with a wired profile configured on a W-IAP.

Syntax

Parameter Description
	Displays the current configuration details for a specific wired profile.

Usage Guidelines

Use this command to view the details of a wired profile configured on a W-IAP.

Example

The following example shows the output of the show wired-port command:

Name :default_wired_port_profile
VLAN Mode :Trunk
Allowed VLANs :all
Native VLAN :1
Admin Status :Down
Role :default_wired_port_profile
Speed :auto
Duplex :full
POE :No
Type :employee
Content Filtering :Disabled
Server Load Balancing :Disabled
MAC Authentication :Disabled
8021.x :Disabled
L2 Auth Fallthrough :Disabled
Captive Portal :disable
Exclude Uplink :none
Access Control Type :Network
Uplink enable :Disabled
Certificate Installed: :No
Internal Radius Users: :0
Internal Guest Users: :0
Role Derivation Rules

Attribue Operation Operand Role Name Index

Vlan Derivation Rules

Attribue Operation Operand Vlan Id

RADIUS Servers

Name IP Address Port Key Timeout Retry Count NAS IP Address NAS Identifier RFC3576

LDAP Servers

Name IP Address Port Timeout Retry Count Admin-DN Admin Password Base-DN

Access Rules 

Dest IP Dest Mask Dest Match Protocol (id:sport:eport) Action Log TOS 802.1P Blacklist Mirror DisScan ClassifyMedia

any any match any permit
Vlan Id :0
ACL Captive Portal:disable
:Captive Portal Configuration
Background Color:13421772
Banner Color :16750848
Decoded Texts :
Banner Text :Welcome to Guest Network
Use Policy :Please read terms and conditions before using Guest Network
Terms of Use :This network is not secure, and use is at your own risk
Internal Captive Portal Redirect URL:
Captive Portal Mode:Acknowledged
Custom Logo
:External Captive Portal Configuration
Server:localhost
Port :80
URL :/
Authentication Text:Authenticated
External Captive Portal Redirect URL:
Server Fail Through:No 

The output of this command shows the configuration parameters associated with the selected wired profile and value assigned for each of these parameters:

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show wired-port-settings

show wired-port-settings

Description

This command displays the list of wired profiles configured on a W-IAP.

Usage Guidelines

Use this command to view the wired profiles configured on a W-IAP.

Example

The following example shows the output of show wired-port-settings command:

Wired Port Profiles

Name VLAN Mode Allowed VLANs Native VLAN Admin Status Role Speed

wiredProf1 Access all guest Up wired-instant auto

WiredProf2 Trunk all 1 Down WiredProf2 auto

Duplex POE In Use Authentication Method

auto Yes Yes None

full No Yes None

Port Profile Assignments

Port Profile Name

0 default_wired_port_profile

1 example1-crash
2 wired-instant
3 wired-instant
4 wired-instant

The output of this command provides the following information:

Column Description
Name	Indicates the name of the wired port profile.
VLAN Mode	Indicates the name of switchport mode for the wired profiles. The VLAN modes can be Access or Trunk.
Allowed VLAN	Indicates the list of allowed VLANs. The Allowed VLAN refers to the VLANs carried by the port in Access mode.
Native VLAN	Indicates the values assigned for Native VLAN. A VLAN that does not have a VLAN ID tag in the frames is referred to as Native VLAN.
Admin Status	Indicates the status of admin port.
Role	Indicates the role assigned to the wired profile users.
Speed	Indicates the speed of wired client traffic.
duplex	Indicates if the client traffic duplexing full, half, or automatically assigned basedon the capabilities of the client, the AP, and the cable.
poe	Indicates if Power over Ethernet (PoE) is enabled.
In Use	Indicates if the wired profile is in use.
Authentication Method	Indicates the authentication method configured for the wired profile.
Port	Indicates the port number to which a wired profile is assigned.
Profile	Indicates the name of wired profile assigned to a wired port.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

show wispr config

show wispr config

Description

This command displays the Wireless Internet Service Provider roaming (WISPr) authentication parameters configured on a W-IAP.

Usage Guidelines

Use this command to view the WISPr configuration details for a W-IAP.

Example

The following example shows the output of show wispr config command:

WISPr ISO Country Code :91
WISPr E.164 Country Code :IN
WISPr E.164 Area Code :80
WISPr SSID :Network1
WISPr Operator Name :XYZ
WISPr Location Name :airport 

The output of this command provides the following information:

Parameter Description
WISPr ISO Country Code	Indicates the ISO country code configured for WISPr authentication.
WISPr E.164 Country Code	Indicates the E.164 Country Code for the WISPr Location ID.
WISPr E.164 Area Code	Indicates the E.164 Area Code for the WISPr Location ID.
WISPr SSID	Indicates the SSID for which the WISPr authentication profile is configured.
WISPr Operator Name	Indicates the hotspot operator profile associated with the WISPr authentication profile.
WISPr Location Name	Indicates Hotspot location associated with the WISPr profile.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

show xml-api-server

show xml-api-server config

Description

This command displays the XML API server configuration details.

Usage Guidelines

Use this command to view the XML API server configuration details.

Example

The following example shows the output of the show xml-api-server command:

ip :192.0.2.5

key :user1234

Command History

Version Description
Dell Networking W-Series Instant6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

snmp-server

snmp-server

community host version {1 udp-port } | {2c|3 [inform] [udp-port ]}

user [

Description

This command configures SNMP parameters.

Syntax

Parameter Description Range Default
community	Sets the read-only community string.	-	-
engine-id	Sets the SNMP server engine ID as a hexadecimal number.	24 characters maximum	-
host	Configures the IP address of the host to which SNMP traps are sent. This host needs to be running a trap receiver to receive and interpret the traps sent by the controller.	-	-
version	Configures the SNMP version and security string for notification messages.	-	-
inform	Sends SNMP inform messages to the configured host.	-	disabled
udp-port	Indicates the port number to which notification messages are - sent.	-	162
user	Configures an SNMPv3 user profile for the specified username.	-	-
auth-prot	Indicates the authentication protocol for the user, either HMACMD5/SHA MD5-98 Digest Authentication Protocol (MD5) or HMAC-SHA-98 Digest Authentication Protocol (SHA), and the password for use with the designated protocol.	-	SHA
priv-prot	Indicate the privacy protocol for the user, either Advanced Encryption Standard (AES) or CBC-DES Symmetric Encryption Protocol (DES), and the password for use with the designated protocol.	AES/DES	DES

Usage Guidelines

This command configures SNMP on the W-IAPs only.

Example

The following example configures an SNMP host and community string:

(Instant AP)(config)# snmp-server community user123

(Instant AP) (config)# snmp-server host 10.0.0.1 version 2c udp-port 162 inform

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

subscription-ap

subscription-ap status no...

Description

This command configures the subscription status for a W-IAP.

Syntax

Command/Parameter Description
	Enter the MAC address of the W-IAP.
	Enter the subscription status for the W-IAP.
no...	Removes the configuration.

Usage Guidelines

Use this command to subscribe the W-IAP based on its MAC address.

Example

(Instant AP) (config) # subscription-ap a1:b2:c3:d4:42:98 status

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

subscription-ap-enable

subscription-ap-enable no...

Description

This command enables the subscription of a W-IAP.

Syntax

Command/Parameter Description
subscription-ap-enable	Enables the subscription for a W-IAP.
no	Removes the configuration.

Usage Guidelines

Use this command to enable the subscription of the W-IAP.

Example

(Instant AP) (config) # subscription-ap-enable

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

syslocation

syslocation no...

Description

This command allows you to define the physical location for the W-IAP.

Syntax

Command/Parameter Description
	Allows you to specify a physical location.
no	Removes the configuration.

Usage Guidelines

Use this command to define the physical location of the W-IAP.

Example

The following example sets the physical location of the W-IAP to Sunnyvale:

(Instant AP) (config) # syslocation

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

syslog-level

syslog-level {ap-debug|network|security|system|user|user-debug|wireless} no...

Description

This command configures syslog facility levels. Syslog Facility is an information field associated with a syslog message.

Syntax

Parameter Description Range Default
syslog-level	Configures the Syslog facility level.You can configure any of the following logging levels:Emergency – Panic conditions that occur when the system becomes unusable.Alert – Any condition requiring immediate attention and correction.Critical – Any critical conditions such as a hard drive error.Errors –Error conditions.Warning – Warning messages.Notice – Significant events of a non-critical and normal nature. The default value for all Syslog facilities.Informational – Messages of general interest to system users.Debug – Messages containing information useful for debugging.	Emergency, Alert, Critical, Errors, Warning, Notice, Informational, Debug	Notice
ap-debug	Generates a log for the AP device for debugging purposes.	-	-
network	Generates a log when there is a change in the network, for example, when a new W-IAP is added to a network.		-
security	Generates a log for network security, for example, when a client connects using wrong password.	-	-
system	Generates a log about the system configuration-and status.		-
user	Generates a log for the W-IAP clients. - -
user-debug	Generates a detailed log about the clients for debugging purposes.	-	-
wireless	Generates a log about radio configuration. - -
no...	Removes the configuration. - -

Usage Guidelines

Use this command to configure syslog facility levels and to generate logs based on various user and W-IAP parameters.

Example

The following example configures syslog facility levels for ap-debug and user-debug:

(Instant AP) (config)# syslog-level error ap-debug
(Instant AP) (config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

syslog-server

syslog-server no...

Description

This command configures Syslog server for a W-IAP.

Syntax

Parameter Description Range Default
syslog-server	Specifies the IP address to configure the syslog - server.	-	-
no...	Removes the configuration. --

Usage Guidelines

Use this command to configure syslog server for a W-IAP.

Example

The following command configures the IP address of the syslog server for a W-IAP.

(Instant AP)(config)# syslog-server 192.0.2.9 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

telnet-server

telnet-server no...

Description

This command enables Telnet access to Instant command line interface (CLI).

Syntax

Command/Parameter Description
telnet-server	Enables Telnet access to the Instant CLI.
no...	Removes the configuration

Usage Guidelines

Use this command to enable Telnet access to the Instant CLI.

Example

The following example enables Telnet access to the W-IAP:

(Instant AP)(config)# telnet-server
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

terminal-access

terminal-access no...

Description

This command enables Secure Shell (SSH) access to Instant CLI.

Syntax

Command/Parameter Description
terminal-access	Enables terminal access to the Instant CLI.
no...	Removes the configuration.

Usage Guidelines

Use this command to enable SSH access to the Instant CLI.

Example

The following example enables terminal access to the W-IAP:

(Instant AP)(config)# terminal-access
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

tftp-dump-server

tftp-dump-server no...

Description

This command configures TFTP dump server for a W-IAP.

Syntax

Parameter Description
tftp-dump-server	Configures TFTP dump server IP address.
no...	Removes the configuration

Usage Guidelines

Use this command to configure TFTP dump server for storing core dump files.

Example

The following example configures a TFTP dump server:

(Instant AP)(config)# tftp-dump-server <IP-address>
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

traceroute

traceroute

Description

This command traces the route to the specified IP address.

Syntax

Parameter Description
	Displays the destination IP address.

Usage Guidelines

Use this command to identify points of failure in your network.

Example

The following example shows the output of traceroute command:

#traceroute 10.1.2.3

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

upgrade-image

upgrade-image upgrade-image2 upgrade-image2-no-reboot

Description

These commands allow you to upgrade a W-IAP to use a new image file.

Syntax

Parameter Description
upgrade-image	Upgrades the W-IAP to use a new image.
upgrade-image2	Uploads an additional image file and upgrades the W-IAP to use this image file when required.
upgrade-image2-no-reboot	Uploads an additional image file and upgrades the W-IAP to use the new image without rebooting the W-IAPs.
	Allows you to specify the FTP, TFTP, or HTTP URL.

Usage Guidelines

Use these commands to upgrade W-IAP to use an image file uploaded from the FTP or TFTP server, or by HTTP URL. Before uploading an image file, ensure that you have the appropriate image file for your W-IAP. following examples describe the image class for different W-IAP models:

• For W-IAP134/135-DellInstant Cassiopeia
  For W-IAP108/109, W-IAP103, and W-IAP114/115-DellInstant_Pegasus_
• For W-IAP155/155P-DellInstant Aries
• For W-IAP224/225, and W-IAP274/275-DellInstant_Centaurus
• For all other W-IAPs -DellInstant_Orion

Example

The following examples upgrade a W-IAP by using an image file from the FTP server:

(Instant AP)# upgrade-image ftp://192.0.2.7/Dell_Orion_6.2.1.0-4.0.0.0_xxxx (Instant AP)# upgrade-image2-no-reboot ftp://192.0.2.7/Dell_Orion_6.2.1.0-4.0.0.0_xxxx

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	These commands are introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

uplink

uplink
enforce {ethernet| cellular |wifi | none}
failover-internet
failover-internet-check-timeout
failover-internet-pkt-lost-cnt <count>
failover-internet-pkt-send-freq <frequency>
failover-vpn-timeout <seconds>
preemption
uplink-priority {cellular <priority> | ethernet <priority>| [port <Interface-number>
<priority>]|wifi <priority>}
no... 

Description

This command configures uplink connections.

Syntax

Parameter Description Range Default
uplink	Enables the uplink configuration sub-mode.	-	-
enforce {ethernet|cellular|wifi | none}	Enforces the specified uplink connection.You can specify the following types of uplink: · ethernet · cellular · wifi · none	ethernet, cellular, wifi, none	None
failover-internet	Enables uplink switchover based on the availability of the Internet.When enabled, the W-IAP continuously sends ICMP packets to some well-known Internet servers. If the request is timed out due to a bad uplink connection or uplink interface failure, and the public Internet is not reachable from the current uplink, the W-IAP switches to a different connection.	- Disabled
failover-internet-check-timeout	The number of seconds after which the Internet based uplink verification times out.	0-3600 10
failover-internet-pkt-lost-cnt	Configures the number of packets that are to be lost when verifying the uplink availability using the Internet.	1-1000 10
failover-internet-pkt-send-freq	Configures the frequency in seconds, at which the ICMPpackets are sent to verify the uplink availability using the Internet.	1-3600 30
failover-vpn-timeout	Configures a duration to wait for an uplink switch based on VPN status.	-180	seconds
preemption	Enables pre-emption when no uplinks are enforced. When enabled, if the current uplink is active, the W-IAP periodically tries to use a higher priority uplink, and switches to a higher priority uplink even if the current uplink is active.	-Disabled
uplink-priority{cellular|ethernet|[port]}wifi}	Sets an uplink priority.You can specify the type of uplink to configure and assign a priority. If Ethernet uplink needs to be prioritized, specify the interface port number.	Integer	Eth0
no..	Removes the configuration.	--

Usage Guidelines

Use this command to set preferences for enforcing uplinks or enabling preemption and to configure uplink switchover.

Enforcing uplinks

The following configuration conditions apply to the uplink enforcement:

- When an uplink is enforced, the W-IAP uses the specified uplink regardless of uplink preemption configuration and the current uplink status.

- When an uplink is enforced and multiple Ethernet ports are configured and uplink is enabled on the wired profiles, the W-IAP tries to find an alternate Ethernet link based on the priority configured.

- When no uplink is enforced and preemption is not enabled, and if the current uplink fails, the W-IAP tries to find an available uplink based on the priority configured.

Uplink Preemption

When no uplink is enforced and preemption is enabled, and if the current uplink fails, the W-IAP tries to find available uplink based on in the priority configured. If current uplink is active, the W-IAP periodically tries to higher priority uplink and switches to the higher priority uplink even if the current uplink is active.

Uplink Priority

When uplink priority is configured, the W-IAP tries to get a higher priority link every ten minutes even if the uplink is up. This does not affect the current uplink connection. If the higher uplink is usable, the W-IAP swit over to that uplink. Preemption is enabled by default.

Uplink Switchover

The default priority for uplink switchover is Ethernet and then 3G/4G. The W-IAP has the ability to switch to priority uplink if the current uplink is down.

Uplink Switching based on VPN Status

Instant supports switching uplinks based on the VPN status when deploying mixed uplinks (Eth0, 3G/4G,Wi-Fi) When VPN is used with multiple backhaul options, the W-IAP switches to an uplink connection based on the connection status instead of only using Eth0, the physical backhaul link.

The following configuration conditions apply to uplink switching:

- If the current uplink is Eth0 and the VPN connection is down, the W-IAP will retry to connect to VPN. This retry time depends on the configuration of primary/backup and fast-failover for VPN. If all the possibilities fail, the W-IAP waits for a vpn-failover-timeout and then a different u plink (3G,Wi-Fi) is selected.

- If the current uplink is 3G or Wi-Fi, and Eth0 has a physical link, the W-IAP periodically suspends user traffic to try and connect to the VPN on the Eth0. If the W-IAP succeeds, then the W-IAP switches to Eth0. If the does not succeed, then the W-IAP restores the VPN connection to the current uplink.

Switching Uplinks Based on Internet Availability

When the uplink switchover based on Internet availability is enabled, the W-IAP continuously sends ICMP pac to some well-known Internet servers. If the request is timed out due to a bad uplink connection or uplink inte failure, and the public Internet is not reachable from the current uplink, the W-IAP switches to a different con

Example

The following example configures uplink priority:

(Instant AP)(uplink)# uplink-priority ethernet port 0 1 (Instant AP)(uplink)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and uplink configuration sub-mode.

uplink-vlan

uplink-vlan

Description

This command configures uplink VLAN for management traffic on a W-IAP.

Syntax

Parameter Description Range Default
	Assigns a VLAN ID for the uplink management traffic	0-4093 0

Usage Guidelines

Use this command to configure the uplink VLAN configuration details for management traffic. When configured, uplink management VLAN allows you to tag management traffic and connect multiple W-IAP clusters (Virtual Controllers) to the same port on an upstream switch (for example, W-AirWave server).

Example

The following example configures uplink management VLAN:

(Instant AP)# uplink-vlan 0

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode

user

user [] [portal|radius] no...

Description

This command creates users for a W-IAP.

Syntax

Parameter Description
user	Creates a username for the W-IAP user.
	Assigns a password for the W-IAP user
portal	Configures a guest user.
radius	Configures an employee user
no...	Removes the configuration

Usage Guidelines

The Instant user database consists of a list of guest and employee users. Addition of a user involves specify login credentials for a user. The login credentials for these users are provided outside the Instant system.

A guest user can be a visitor who is temporarily using the enterprise network to access the Internet. However, do not want to allow access to the internal network and the Intranet, you can segregate the guest traffic from enterprise traffic by creating a guest WLAN and specifying the required authentication, encryption, and access

An employee user is the employee who is using the enterprise network for official tasks. You can create Emj WLANs, specify the required authentication, encryption and access rules and allow the employees to use the enterprise network.

The user database is also used when a W-IAP is configured as an internal RADIUS server. The local user of APs can support up to 512 user entries except W-IAP-9x supports only 256 user entries. If there are already users, W-IAP-9x will not be able to join the cluster.

Example

The following example configures an employee user for a W-IAP:

(Instant AP)(config)# user user1 password123 radius (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

version

version

Description

This command configures a version number for the W-IAP.

Syntax

Parameter Description
version	Assigns a version number for the W-IAP.

Usage Guidelines

Use this command to configure a version number for the W-IAP.

Example

The following example configures a version number for the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

virtual-controller-country

virtual-controller-country no...

Description

This command configures the location of the W-IAP.

Syntax

Parameter Description
virtual-controller-country	Specifies the country of operation for a W-IAP.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure the country code for W-IAPs.

Example

The following example configures a country code for W-IAP:

(Instant AP)(config)# virtual-controller-country US
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

virtual-controller-ip

virtual-controller-ip

Description

This command configures an IP address for the Virtual Controller.

Syntax

Parameter Description
virtual-controller-ip	Assigns an IP address for the Virtual Controller.

Usage Guidelines

Use this command to configure an IP address for the Virtual Controller.

Example

The following example assigns an IP address for the Virtual Controller:

(Instant AP)(config)# virtual-controller-ip 192.0.2.2
(Instant AP)(config)# end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

virtual-controller-key

virtual-controller-key

Description

This command configures a unique name for the Virtual Controller.

Syntax

Parameter Description
virtual-controller-key	Defines a unique name for the Virtual Controller.

Usage Guidelines

Use this command to assign a name for the Virtual Controller.

Example

(Instant AP) (config)# virtual-controller-key <name>
(Instant AP) (config)# virtual-controller-ip <IP-address>
(Instant AP) (config)# virtual-controller-vlan <Vlan-ID> <Mask> <Gateway-IP-address>
(Instant AP) (config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

virtual-controller-vlan

virtual-controller-vlan no...

Description

This command configures a VLAN for the Virtual Controller.

Syntax

Parameter Description
virtual-controller-vlan	Associates a VLAN ID with the Virtual Controller.
	Configures a subnet mask for the Virtual Controller.
	Configures a gateway for the Virtual Controller.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure VLAN, Netmask, and Gateway for the Virtual Controller.

Example

The following example configures VLAN for the Virtual Controller:

(Instant AP) (config)# virtual-controller-vlan <Vlan-ID> <Mask> <Gateway-IP-address>
(Instant AP) (config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

vpn backup

vpn backup no...

Description

This command configures a secondary or backup VPN server for VPN connections.

Syntax

Parameter Description
vpn backup	Configures a fully qualified domain name for the secondary VPN or IPSec endpoint.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure a backup VPN server. When both primary and secondary VPN servers are configured, the W-IAP can switch to the available VPN connection when a the primary VPN server is not available.

Example

The following example configures a backup server for VPN connections:

(Instant AP)(config)# vpn backup (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

vpn fast-failover

vpn fast-failover no...

Description

This command configures fast failover feature for VPN connections.

Syntax

Parameter Description
vpn fast-failover	Enables fast failover feature for VPN connections.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure fast failover feature for VPN connections. Enabling the fast failover feature allows the W-IAP to create a backup VPN tunnel to the controller along with the primary tunnel, and maintain both primary and backup tunnels separately. If the primary tunnel fails, the W-IAP can switch the data stream to the backup tunnel. This reduces the total failover time to less than one minute.

Example

The following example configures the VPN fast failover feature:

(Instant AP) (config)# fast-failover (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

vpn gre-outside

vpn gre-outside no...

Description

This command enables automatic configuration of the GRE tunnel between the W-IAP and the controller.

Usage Guidelines

Use this command to enable automatic configuration of the GRE tunnel between the controller to provide L2 connectivity.

Example

The following example configures an automatic GRE tunnel:

(Instant AP) (config)# vpn gre-outside (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

vpn hold-time

vpn hold-time no...

Description

This command configures the time interval after which the W-IAP can switch over to the primary host when preemption is enabled.

Syntax

Parameter Description
vpn hold-time	Configures a time period in seconds after which the W-IAPs can switch to primary VPN server.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure a period to hold on switching to the primary server when pre-emption is enable

Example

The following example configures a hold-time to switch to the primary host server:

(Instant AP) (config)# hold-time (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

vpn ikepsk

vpn ikepsk username password no...

Description

This command configures user credentials for the VPN connection.

Syntax

Parameter Description
vpn ikepsk	Specifies an IKE authentication for VPN connection using pre-shared keys
username	Defines a username that enables access to VPN.
password	Defines a password that enables access to VPN.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure user credentials to establish VPN connection.

Example

The following commands enable user access to VPN connection.

(Instant AP)(config)# vpn ikepsk secretKey username User1 password password123 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

vpn monitor-pkt-lost-cnt

vpn monitor-pkt-lost-cnt no...

Description

This command configures the number of lost packets after which the W-IAP can determine that the VPN con is not available.

Parameter Description Range	Default
vpn monitor-pkt-lost-cnt	Defines the number of lost packets for VPN connection test or monitoring by the W-IAP.	-	2
no...	Removes the configuration. --

Usage Guidelines

Use this command to configure a count for the lost packets, so that the W-IAPs can determine if the VPN connection is unavailable.

Example

The following example configures a count for the lost packets:

(Instant AP) (config)# vpn monitor-pkt-lost-cnt (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

vpn monitor-pkt-send-freq

vpn monitor-pkt-send-freq no...

Description

This command configures the frequency at which the W-IAP can verify if the active VPN connection is availal

Syntax

Parameter Description	Range	Default
vpn monitor-pkt-send-freq	Configures a frequency interval in seconds at which the test packets are sent.	-	5
no..	Removes the VPN monitoring frequency configuration.	-	-

Usage Guidelines

Use this command to monitor VPN connections and verify its availability at regular intervals.

Example

The following example configures the VPN monitoring frequency:

(Instant AP) (config)# vpn monitor-pkt-send-freq 10 (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

vpn preemption

vpn preemption no...

Description

This command enables pre-emption to allow the VPN tunnel to switch back to the primary host after a failover

Syntax

Parameter Description
vpn preemption	Enables pre-emption to allow the VPN tunnel to switch to the primary server when it becomes available after a failover.
no...	Removes the VPN pre-emption configuration.

Usage Guidelines

Use this command to enable pre-emption when both primary and secondary servers are configured and fast f feature is enabled.

Example

The following example enables VPN pre-emption.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

vpn primary

vpn primary no...

Description

This command configures a primary Virtual Private Networks (VPN) server for VPN connections.

Syntax

Parameter Description Range Default
vpn primary	Configures a fully qualified domain name for the main VPN or IPSec endpoint.	-	-
no...	Removes the VPN server configuration.	-	-

Usage Guidelines

Use this command to configure a primary VPN server for IAP-VPN connections. When a secondary VPN serve configured along with the primary server, you can enable the fast failover feature that allows the W-IAP to cr backup VPN tunnel to the controller along with the primary tunnel, and maintain both the primary and backup separately.

Example

The following example configures a primary VPN server:

(Instant AP) (config)# vpn primary (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version	Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

vpn reconnect-time-on-failover

vpn reconnect-time-on-failover

Description

This command defines a period after which the VPN connection can be reestablished when the primary VPN fails.

Syntax

Parameter Description
vpn reconnect-time-on-failover	Configures a time period in minutes after which the VPN is reconnected when the primary VPN tunnel fails.

Usage Guidelines

Use this command to configure a time period for reestablishing VPN connections. When configured, the W-IA reconnects the user session when the interval specified for this command expires.

Example

The following example configures a VPN reconnection duration:

(Instant AP)(config)# vpn reconnect-time-on-failover 20
(Instant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

vpn reconnect-user-on-failover

vpn reconnect-user-on-failover no...

Description

This command enables the users to reconnect to the VPN when the primary VPN tunnel fails.

Syntax

Parameter Description
vpn reconnect-user-on-failover	Enables users to reconnect to the VPN during a VPN failover.
no...	Removes the configuration.

Usage Guidelines

Use this command to allow the users to reconnect to the VPN after a VPN failover. When enabled, the W-reconnects the user during a VPN failover.

Example

The following example enables users to reconnect to VPN after a failover:

(Instant AP)(config)# vpn reconnect-user-on-failover (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode

wifi0-mode

wifi0-mode

Description

This command configures a W-IAP to function in the access, monitor, or spectrum monitor mode.

Syntax

Parameter Description Range Default
	Configures the W-IAP to function in any of the following modes:Access– In Access mode, the W-IAP serves clients, while also monitoring for rogue APs in the background.Monitor–In Monitor mode, the AP acts as a dedicated monitor, scanning all channels for rogue W-IAPs and clients.Spectrum Monitor– In Spectrum Monitor mode, the W-IAP functions as a dedicated full-spectrum RF monitor, scanning all channels to detect interference, whether from neighboring APs or from non-WiFi devices such as microwaves and cordless phones.NOTE: In Monitor and Spectrum Monitor modes, the W-IAP does not provide access services to clients.	access, monitor, spectrum-monitoraccess

Usage Guidelines

Use this command to configure a Wi-Fi interface of a W-IAP to function in the access, monitor, or spectrum mode.

Example

The following example configures the wifi0 interface to use the access mode:

(Instant AP)# wifi0-mode access

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode.

wifi1-mode

wifil-mode

Description

This command configures a W-IAP to function in the access, monitor, or spectrum monitor mode.

Syntax

Parameter Description Range Default
	Configures the W-IAP to function in any of the following modes:Access– In Access mode, the W-IAP serves clients, while also monitoring for rogue APs in the background.Monitor–In Monitor mode, the AP acts as a dedicated monitor, scanning all channels for rogue W-IAPs and clients.Spectrum Monitor– In Spectrum Monitor mode, the W-IAP functions as a dedicated full-spectrum RF monitor, scanning all channels to detect interference, whether from neighboring APs or from non-WiFi devices such as microwaves and cordless phones.NOTE: In Monitor and Spectrum Monitor modes, the W-IAP does not provide access services to clients.	access, monitor, spectrum-monitor	access

Usage Guidelines

Use this command to configure a Wi-Fi interface of a W-IAP to function in the access, monitor, or spectrum mode.

Example

The following example configures the wifi0 interface to use the access mode:

(Instant AP)# wifi1-mode access

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Privileged EXEC mode.

wired-port-profile

wired-port-profile <port>
    access-rule-name <name>
    allowed-vlan <vlan>
    auth-server <name>
    captive-portal {<type>[exclude-uplink <types>]|external[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
    content-filtering
    dot1x
    duplex <duplex>
    12-auth-failthrough
    mac-authentication
    native-vlan <vlan>
    poe
    radius-reauth-interval <minutes>
    server-load-balancing
    set-role <attribute>{{equals|not-equal|starts-with|ends-with|contains} <operator><role>|value-of}
    set-role-mac-auth <MAC-authentication>
    set-role-machine-auth <machine-only> <user-only>
    set-role-pre-auth <role>
    set-role-unrestricted
    set-vlan <attribute>{{equals|not-equals|starts-with|ends-with|contains} <operator> <VLAN-ID>|value-of}
    shutdown
    spanning-tree
    speed <speed>
    switchport-mode <mode>
    type <type>
    uplink-enable
    no... 

Description

This command configures a wired port profile for wired W-IAP clients.

Syntax

Command/Parameter Description	Range Default
wired-port-profile	Creates a wired profile. - -
access-rule-name	Maps the already configured access rules with the wired profile.	-	-
allowed-vlan	Configures a list of allowed VLANs. The Allowed VLAN refers to the VLANs carried by the port in Access mode.You can configure the list of comma separated digits or ranges 1,2,5 or 1-4, all.	-	-
auth-server	Configures the authentication server for the wired profile.	-	-
captive-portal{[exclude-uplink] |external [exclude-uplink| profile[exclude-uplink] }]	Enables internal or external captive portal authentication for the wired profile users.You can also disable redirection to the captive portal based on the type of current uplink.If the external captive profiles are created, you can specify the profile name by using the external and profile keywords and associated parameters.	-	-
content-filtering	Enables content filtering - -
dot1x	Enables 802.11X authentication for the Wired profile users	- Disable	d
duplex	Assigns a value for duplexing client traffic full, half, auto auto based on the capabilities of the client, the AP, and the cable. You can specify full, half, or auto.
l2-auth-failthrough	Allows the clients to use 802.1X authentication when MAC authentication fails.	- Disable	d
mac-authentication	Enables MAC authentication	- Disable	d
native-vlan	Configures a value for Native VLAN. A VLAN that does not have a VLAN ID tag in the frames is referred to as Native VLAN.	1-4093	-
poe	Enables power over Ethernet	- Enabled
radius-reauth-interval	Configures a reauthentication interval at which all associated and authenticated clients must be reauthenticated.	-	-
server-load-balancing	Enables load balancing across two RADIUS servers if two authentication servers are configured for the SSID.	- Enabled
set-role{equals| not-equal|starts-with| ends-with| contains} operator>| value-of}	Assigns a user role to the clients. The first rule that matches the configured condition is applied.You can specify any of the following conditions:contains - The rule is applied only if the attribute value contains the specified string.ends-with - The rule is applied only if the attribute value ends with the specified string.equals – The rule is applied only if the attribute value is equal to the specified string.not-equals – The rule is applied only if the attribute value is not equal to the specified string.starts-with – The rule is applied only if the attribute value begins with the specified string.value-of - This rule sets the user role to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.		-
set-role-machine-auth<machine-only><user-only>	Configures a machine authentication rule.You can assign different rights to clients based on whether their hardware device supports machine authentication.Machine authentication is only supported on Windows devices, so this can be used to distinguish between Windows devices and other devices such as iPads.	-	-
set-role-mac-auth<mac-only>	Configures a MAC authentication based user role.	-	-
set-role-pre-auth<role>	Configures a pre-authentication role to allow some access to the guest users before the client authentication.	-	-
set-role-unrestricted	Configures unrestricted access control.	-
set-vlan<attribute>{equals|not-equals| starts-with|ends-with| contains}<operator><VLAN-ID>| value-of}	Assigns a VLAN to the clients. The first rule that matches the configured condition is applied.You can specify any of the following conditions:contains – The rule is applied only if the attribute value contains the specified string.ends-with – The rule is applied only if the attribute value ends with the specified string.equals – The rule is applied only if the attribute value is equal to the specified string.not-equals – The rule is applied only if the attribute value is not equal to the specified string.starts-with – The rule is applied only if the attribute value begins with the specified string.value-of - This rule sets the VLAN tothe value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.	-	-
shutdown	Shuts down the admin status port up, down up
spanning-tree	Enables Spanning Tree Protocol on the wired profile.STP ensures that there are no loops in any bridged Ethernet network and operates on all downlink ports, regardless of forwarding mode. STP will not operate on the uplink port and is supported only on W-IAPs with three or more ports. By default Spanning Tree is disabled on wired profiles.	-	-
speed	Assigns a value for indicating speed of client traffic based on the capabilities of the client, the AP, and the cable.	10,100,200, auto	auto
switchport-mode	Defines the switchport mode for the wired profile.You can specify any of the following modes:Access - Use this mode to allow the port to carry a single VLAN specified as the native VLAN.Trunk - Use this mode to allow the port to carry packets for multiple VLANs specified as allowed VLANs.	access, trunk	trunk
type	Defines the primary usage of the wired profile.	employee, guest	employeee
uplink-enable	Enables uplink for the wired profile	--
no...	Removes any existing configuration	--

Usage Guidelines

Use this command to create a wired profile for employee and guest users. The Ethernet ports allow third-part devices such as VoIP phones or printers (which support only wired connections) to connect to the wireless net You can also configure an Access Control List (ACL) for additional security on the Ethernet downlink.

Example

The following example configures a wired profile for an employee network:

(Instant AP)(config)# wired-port-profile employeeWired1
(Instant AP)(wired ap profile"employeeWired1")# type employee
(Instant AP)(wired ap profile"employeeWired1")# speed auto
(Instant AP)(wired ap profile"employeeWired1")# duplex auto
(Instant AP)(wired ap profile"employeeWired1")# no shutdown
(Instant AP)(wired ap profile"employeeWired1")# poe
(Instant AP)(wired ap profile"employeeWired1")# uplink-enable
(Instant AP)(wired ap profile"employeeWired1")# content-filtering 

(Instant AP) (wired ap profile"employeeWired1")# switchport-mode trunk
(Instant AP) (wired ap profile"employeeWired1")# allowed-vlan 2,3,5
(Instant AP) (wired ap profile"employeeWired1")# native-vlan 1
(Instant AP) (wired ap profile"employeeWired1")# mac-authentication
(Instant AP) (wired ap profile"employeeWired1")# dot1x
(Instant AP) (wired ap profile"employeeWired1")# l2-auth-failthrough
(Instant AP) (wired ap profile"employeeWired1")# auth-server server1
(Instant AP) (wired ap profile"employeeWired1")# server-load-balancing
(Instant AP) (wired ap profile"employeeWired1")# radius-reauth-interval 20
(Instant AP) (wired ap profile"employeeWired1")# access-rule-name wiredACL
(Instant AP) (wired ap profile"employeeWired1")# set-role Group-Name contains wired wired-instant
(Instant AP) (wired ap profile"employeeWired1")# set-vlan ap-name equals test 400
(Instant AP) (wired ap profile"employeeWired1")# end
(Instant AP)# commit apply 

The following example configures a guest wired profile:

(Instant AP) (config)# wired-port-profile guestWired1
(Instant AP) (wired ap profile"guestWired1")# type guest
(Instant AP) (wired ap profile"guestWired1")# speed auto
(Instant AP) (wired ap profile"guestWired1")# duplex auto
(Instant AP) (wired ap profile"guestWired1")# no shutdown
(Instant AP) (wired ap profile"guestWired1")# poe
(Instant AP) (wired ap profile"guestWired1")# uplink-enable
(Instant AP) (wired ap profile"guestWired1")# content-filtering
(Instant AP) (wired ap profile"guestWired1")# switchport-mode trunk
(Instant AP) (wired ap profile"guestWired1")# allowed-vlan 200,201,400
(Instant AP) (wired ap profile"guestWired1")# native-vlan 1
(Instant AP) (wired ap profile"guestWired1")# captive-portal external exclude-uplink Ethernet
(Instant AP) (wired ap profile"guestWired1")# mac-authentication
(Instant AP) (wired ap profile"guestWired1")# auth-server server1
(Instant AP) (wired ap profile"guestWired1")# server-load-balancing
(Instant AP) (wired ap profile"guestWired1")# access-rule-name wiredACL
(Instant AP) (wired ap profile"guestWired1")# set-role Group-Name contains wired wired-instant
(Instant AP) (wired ap profile"guestWired1")# set-vlan ap-name equals test 200
(Instant AP) (wired ap profile"guestWired1")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and Wired port profile configuration sub-mode.

wlan access-rule

wlan access-rule <name>
    bandwidth-limit {downstream <kbps>| upstream <kbps>| peruser { downstream <kbps>| upstream <kbps>}}
    calea
    captive-portal {external [profile <name>]|internal}
    index <index>
    rule <dest> <mask> <match> {<protocol> <start-port> <end-port> {permit|deny|src-nat|dst-nat {<IP-address> <port>| <port>}}| app <app> {permit| deny}| appcategory <appgrp>| webcategory <webgrp> {permit| deny}| webreputation <webrep> [<option1...option9>]
    vlan <vlan-id>
    no... 

Description

This command configures access rules for WLAN SSID or wired profile.

Syntax

Command/Parameter Description	Range Default
wlan access-rule	Specifies the profile name for which the access rule is configured.	-	-
bandwidth-limit {downstream| upstream|peruser {downstream| upstream}}	Assign bandwidth contracts to user roles.The administrator can assign a bandwidth contract configured in Kbps to upstream (client to the W-IAP) or downstream (W-IAP to clients) traffic for a user role.If you want to assign a bandwidth contract specific for each user, you can run the command with peruser parameter.The bandwidth contract will not be applicable to the user traffic on the bridged out (same subnet) destinations.NOTE: In the earlier releases, bandwidth contract could be assigned per SSID. In the current release, the bandwidth contract can also be assigned per SSID user. If the bandwidth contract is assigned for an SSID in Instant 6.2.1.0-3.4.0.0 image and when the W-IAP is upgraded to 6.3.1.1-4.0 release version, the bandwidth configuration per SSID will be treated as per-user downstream bandwidth contract for that SSID.	1-65535 Kbps	-
calea	Creates an access rule for CALEA integration.	-	-
captive-portal{external [profile[] |internal}	Configures a captive-portal role, to assign to the users role after a successful authentication.	-	-
	Creates an index entry for access	--
	rules.
rule	Creates an access rule.You can create up to 128 access control entries in an ACL for a user role. However, it is recommended to delete any existing configuration and apply changes at regular intervals.	-	-
	Allows you to specify the destination address.	IP-	-
	Specifies the subnet mask for the destination IP address.	-	-
	match-Indicates if the rule specific to the destination IP address and subnet mask matches the value specified for protocol.invert- Indicates if the rule allows or denies traffic with an exception to the specified destination IP address and subnet mask.	match invert	-
	Configures any of the following:Protocol number between 0-255any: any protocoltcp: Transmission Control Protocoludp: User Datagram Protocol	1-255 -
	Specifies the starting port number from which the rule applies.	1-65534 -
	Specifies the ending port number until which the rule applies	1-65534 -
dst-nat	Allows the W-IAP to perform destination NAT on packets.	-	-
src-nat	Allows the W-IAP to perform source NAT on packets. When configured, the source IP changes to the outgoing interface IP address (implied NAT pool) or from the pool configured (manual NAT pool).	-	-
	Specifies the destination NAT IP address for the specified packets when dst-nat action is configured.	-	-
	Specifies the destination NAT port for the specified packets when dst-nat action is configured.	-	-
app	Specifies a rule to allow or deny access to a specific type of application.	To view the listof applications,run the show dpiapp allcommand.	-
appcategory	Specifies a rule to allow or denyaccess to a specific category ofapplication.	To view the listof applicationcategories, runthe show dpiappcategory allcommand.	-
webcategory	Specifies a rule to allow or denyaccess to websites based on websitecategory.	To view the listof websitecategories, runthe show dpiwebcategory allcommand.	-
webreputation	Specifies a rule to allow or denyaccess to websites based on securityrating.	• trustworthy-sites• low-risk-sites• moderate-risk-sites• suspicious-sites• high-risk-sites	-
permit	Creates a rule to allow the specifiedpackets.	-	-
deny	Creates a rule to reject the specifiedpackets	-	-
	Allows you to specify any of thefollowing options:Log –Creates a log entry when thisrule is triggered.Blacklist – Blacklists the clientwhen this rule is triggered.Classify-media – Performs a packetinspection on all non-NAT trafficand marks the critical traffic.Disable-scanning – Disables ARMscanning when this rule istriggered.DSCP tag – Specifies a DSCPvalue to prioritize traffic when thisrule is triggered.802.1p priority – Sets an 802.1ppriority.Application throttling: To set abandwidth limit based onapplication, application category,web category or website reputation,you can configure application throttling by using the throttle-downstream and throttle-up options. For example, you can limit the bandwidth rate for video streaming applications such as Youtube or Netflix, or set a low bandwidth for suspicious websites.	-	-
vlan	Configures an access rule for VLAN assignment.	1-4093 –
no...	Removes the configuration – –

Usage Guidelines

Use this command to configure access rules for user roles, to create a captive-portal role, and to assign VLA the clients.

If TCP and UDP uses the same port, ensure that you configure separate access rules to permit or deny acc

Example

The following example configures access rules for the wireless network:

(Instant AP)(config)# wlan access-rule WirelessRule
(Instant AP)(Access Rule "WirelessRule")# rule 192.0.2.2 255.255.255.0 match 6 4343 4343 log classify-media
(Instant AP)(Access Rule "WirelessRule")# rule 192.0.2.2 255.255.255.0 192.0.2.7 255.255.255.0 match tcp 21 21 deny
(Instant AP)(Access Rule "WirelessRule")# rule 192.0.2.2 255.255.255.0 192.0.2.7 255.255.255.0 match udp 21 21 deny
(Instant AP)(Access Rule "WirelessRule")# rule any any match app youtube permit throttle-downstream 256 throttle-up 256
(Instant AP)(Access Rule "WirelessRule")# rule any any match appcategory webmail permit throttle-downstream 256 throttle-up 256
(Instant AP)(Access Rule "WirelessRule")# rule any any match webcategory gambling deny
(Instant AP)(Access Rule "WirelessRule")# rule any any match webcategory training-and-tools permit
(Instant AP)(Access Rule "WirelessRule")# rule any any match webreputation high-risk-sites deny
(Instant AP)(Access Rule "WirelessRule")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and access rule configuration sub-mode.

wlan auth-server

wlan auth-server <auth_profile_name>
acctport <accounting-port>
cppm-rfc3576-only
cppm-rfc3576-port <rfc3576-port>
deadtime <time>
drp-ip <IP-address> <mask> vlan <vlan> gateway <gateway-IP-address>
ip <IP-address>
key <key>
nas-id <NAS-ID>
nas-ip <IP-address>
port <port-name>
retry-count <count>
rfc3576
timeout <seconds>
no... 

Description

This command configures an external RADIUS and CPPM server for user authentication.

Syntax

Command/Parameter Description Range Default
wlan auth-server	Configures the external RADIUS server authentication profile.	-	-
acctport	Configures the accounting port number used for sending accounting records to the RADIUS server.	-1813
cppm-rfc3576-only	Configures a CPPM server used for AirGroup CoA (Change of Authorization) with RFC3576 only.The CPPM server acts as a RADIUS server and asynchronously provides the Air Group parameters for the client device, including shared user, shared role and shared location.	-	-
cppm-rfc3576-port	Configures the port number for sending AirGroup CoA, instead of the standard CoA port.	-5999
deadtime	Configures a dead time interval for the authentication server.When two or more authentication servers are configured on the W-IAP and a server is unavailable, the dead time configuration determines the duration for which the authentication server would be available if the server is marked as unavailable.	1-1440 minutes	5
drp-ip	Configures the IP address, net mask and VLAN, which will be used as	-	-
IP-address>	source address and VLAN for RADIUS packets.NOTE: Before configuring DRP IP address, ensure that dynamic RADIUS proxy is enabled, and a static Virtual Controller IP is configured.
ip	Configures the IP address of the RADIUS server	-	-
key	Configures a shared key communicating with the external RADIUS server.	-	-
nas-id	Configures Network Attached Storage (NAS) identifier strings for RADIUS attribute 32, which is sent with RADIUS requests to the RADIUS server.	-	-
nas-ip	Configures the Virtual Controller IP address as the NAS address which is sent in data packets.	-	-
port	Configures the authorization port number of the external RADIUS server.	-1812
retry-count	Configures the maximum number of authentication requests that can be sent to the server group.	1-5 3
rfc3576	Allows the W-IAPs to process RFC 3576-compliant Change of Authorization (CoA) and disconnect messages from the RADIUS server.Disconnect messages cause a user session to be terminated immediately, whereas the CoA messages modify session authorization attributes such as data filters.	-Disabled
timeout	Configures a timeout value in second determine when a RADIUS request must expire.The W-IAP retries to send the request several times (as configured in the Retry count), before the user gets disconnected. For example, if the Timeout is 5 seconds, Retry counter is 3, user is disconnected after 20 seconds.	to1 to 30 seconds	5
no...	Removes the configuration.	--

Usage Guidelines

Use this command to configure an external RADIUS server and a CPPM server as a RADIUS server for AirChange of Authorization (CoA) requests.

Example

The following example configures the external RADIUS server parameters:

(Instant AP)(config)# wlan auth-server RADIUS1
(Instant AP)(Auth Server <RADIUS1>)# ip 192.0.0.5
(Instant AP)(Auth Server <RADIUS1>)# key SecretKey
(Instant AP)(Auth Server <RADIUS1>)# port 1812
(Instant AP)(Auth Server <RADIUS1>)# acctport 1813
(Instant AP)(Auth Server <RADIUS1>)# no nas-id
(Instant AP)(Auth Server <RADIUS1>)# no nas-ip
(Instant AP)(Auth Server <RADIUS1>)# drp-ip 192.0.2.11 255.255.255.255 vlan 200 gateway 192.0.2.15
(Instant AP)(Auth Server <RADIUS1>)# timeout 10
(Instant AP)(Auth Server <RADIUS1>)# retry-count 3
(Instant AP)(Auth Server <RADIUS1>)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and authentication server profile sub-mode.

wlan captive-portal

wlan captive-portal
authenticated
background-color <background-color>
banner-color <banner-color>
banner-text <banner-text>
custom-logo <name>
decoded-texts <decoded-text>
redirect-url <url>
terms-of-use <terms-of-use-text>
use-policy <policy-text>
no... 

Description

This command customizes the appearance of the internal captive portal splash page of the guest users.

Syntax

Command/Parameter Description Range Default
wlan captive-portal	Displays the sub-mode for configuring internal captive portal splash page.	-	-
authenticated	Configures the authentication text. The authenticated text is used for indicating that the authentication mode is enabled for the internal Captive Portal users. When the authentication mode is enabled, the W-IAP displays a splash page that requires the guest users to enter their credentials. The users allowed to access the Internet only if they complete the authentication successfully.	-	-
background-color	Configures the color code for the internal captive portal splash page.	Web color codes	134217772
banner-color	Configures the color code for the banner on the splash page.	Web color codes	16750848
banner-text	Configures the text displayed on splash page banner	Text string not exceeding 127 characters	Welcome to Guest Network
custom-logo	Allows you to save the customized logo to the internal captive portal server.	-	-
decoded-texts	Displays decoded texts.	--
redirect-url	Configures a URL to redirect the users after a successful authentication. NOTE: By default, after entering the requested info at the splash page, the users are redirected to the URL that wasoriginally requested. When a URL is configured for redirection, it overrides the user's original request and redirects them to URL configured for redirection.	-	-
terms-of-use	Defines the terms and conditions that the user must be aware of.	Text string This network is not secure, and use is at your own risk
use-policy	Configures usage policy text for splash page.	Text string Please	read terms and conditions before using Guest Network
no...	Removes the configuration. --

Usage Guidelines

Use this command to customize the appearance of internal captive portal splash page for the guest users.

Example

The following example configures the contents of the internal captive portal splash page:

(Instant AP)(config)# wlan captive-portal
(Instant AP)(Captive Portal)# authenticated
(Instant AP)(Captive Portal)# background-color 13421772
(Instant AP)(Captive Portal)# banner-color 16750848
(Instant AP)(Captive Portal)# banner-text "Welcome to Guest Network"
(Instant AP)(Captive Portal)# no decoded-texts
(Instant AP)(Captive Portal)# redirect-url example1.com
(Instant AP)(Captive Portal)# terms-of-use "This network is not secure, and use is at your own risk"
(Instant AP)(Captive Portal)# use-policy "Please read terms and conditions before using Guest Network"
(Instant AP)(Captive Portal)# end
(Instant AP)# commit apply 

Command History

Version	Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform	Command Mode
All platforms	Configuration mode and captive portal sub-mode.

wlan external-captive-portal

wlan external-captive-portal [profile-name]
    auth-text <text>
    auto-whitelist-disable
    https
    port <port>
    redirect-url <redirection-url>
    server <server-name>
    server-fail-through
    url <url>
    no... 

Description

This command configures profiles for external captive portal.

Syntax

Command/Parameter Description Range Default
wlan external-captive-portal [profile-name]	Creates an external captive portal profile. You can create multiple external captive portal profiles and apply to an SSID or a wired profile.	-	-
auth-text	Configures the authentication text to be returned by the external server.The authentication text command configuration is required only for the External - Authentication Text splash mode.	-	-
auto-whitelist-disable	Disables automatic whitelisting of URLs.	- Enabled
https	Enables HTTPS for client connections.	--
Port	Configures the port to use for communication with the external captive portal server.	-	80
redirect-url	Configures a URL to redirect the users after-a successful authentication.NOTE: By default, after entering therequested info at the splash page, the usersare redirected to the URL that was originallyrequested. When a URL is configured forredirection, it overrides the user's originalrequest and redirects them to URLconfigured for redirection.		-
server	Configures the external captive portal server.	-	-
url	Configures the URL of the external captive portal server.	-	-
server-fail-through	Allows the guest clients to access theInternet when the external captive portal server is not available.	- Disabled
no...	Removes the configuration. --

Usage Guidelines

Use this command to configure external captive portal profiles for guest users. When the captive portal profile applied to an SSID or a wired profile, the users connecting to the SSID or wired network are assigned a rol captive portal rule. You can create up to 8 external captive portal profiles.

Example

The following example configures external captive portal splash page:

(Instant AP)(config)# wlan external-captive-portal AuthText1
(Instant AP)(External Captive Portal "AuthText1")# auth-text authenticated
(Instant AP)(External Captive Portal "AuthText1")# port 80
(Instant AP)(External Captive Portal "AuthText1")# redirect-url http://www.example1.com
(Instant AP)(External Captive Portal "AuthText1")# server CPServer1
(Instant AP)(External Captive Portal "AuthText1")# url "/example.php"
(Instant AP)(External Captive Portal "AuthText1")# server-fail-through
(Instant AP)(External Captive Portal "AuthText1")# no auto-whitelist-disable
(Instant AP)(External Captive Portal "AuthText1")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and external captive portal sub-mode.

wlan ldap-server

wlan ldap-server <server-name>
    admin-dn <domain-name>
    admin-password <password>
    base-dn <base_domain-name>
    deadtime <time>
    filter <filter>
    key-attribute <key-attribute>
    ip <IP-address>
    port <port-name>
    timeout <seconds>
    retry-count <count>
    no... 

Description

This command configures a Lightweight Directory Access Protocol (LDAP) server for user authentication on the Virtual Controller.

Syntax

Command/Parameter Description Range Default
wlan ldap-server	Configures an LDAP authentication server.	-	-
admin-dn	Configures a distinguished name for the administrator with read and search privileges across all the entries in the LDAP database. The user need not have write privileges, but the user must be able to search the database, and read attributes of other users in the database.	-	-
admin-password	Configures a password for administrator.	-	-
base-dn	Configures a distinguished name for the node which contains the entire user database.	-	-
deadtime	Configures a dead time interval for the authentication server.When two or more authentication servers are configured on the W-IAP and a server is unavailable, the dead time configuration determines the duration for which the authentication server would be available if the server is marked as unavailable.	1–1440 minutes	5
filter	Configures the filter to apply when searching for a user in the LDAP database.	strings (objectclass=*)
key-attribute	Configures the attribute to use as a key when searching for the LDAP server.For Active Directory, the value is sAMAccountName	-	-
ip	Configures the IP address of the LDAP server.	-	-
port	Configures the authorization port number of the LDAP server.	-389
timeout	Configures a timeout value for LDAP requests from the clients	1-30 seconds	5
retry-count	Defines the number of times that the clients can attempt to connect to the server.	1-5 3
no...	Removes the configuration.	-	-

Usage Guidelines

Use this command to configure an LDAP server as an external authentication server. The LDAP service is based on a client-server model. The W-IAP client requests for an LDAP session after connecting to the LDAP server and server sends its responses.

Example

The following example configures an LDAP server:

(Instant AP) (config)# wlan ldap-server Server1
(Instant AP) (LDAP Server <name>)# ip 192.0.1.5
(Instant AP) (LDAP Server <name>)# port 389
(Instant AP) (LDAP Server <name>)# admin-dn cn=admin
(Instant AP) (LDAP Server <name>)# admin-password password123
(Instant AP) (LDAP Server <name>)# base-dn dc=example, dc=com
(Instant AP) (LDAP Server <name>)# filter (objectclass=*)
(Instant AP) (LDAP Server <name>)# key-attribute sAMAccountName
(Instant AP) (LDAP Server <name>)# timeout 5
(Instant AP) (LDAP Server <name>)# retry-count 3
(Instant AP) (LDAP Server <name>)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and LDAP server sub-mode.

wlan ssid-profile

wlan ssid-profile <ssid_profile>
    a-max-tx-rate <rate>
    a-min-tx-rate <rate>
    air-time-limit <limit>
    auth-server <name>
    auth-survivability
    bandwidth-limit <limit>
    blacklist
    broadcast-filter <type>
    captive-portal {<type>[exclude-uplink <types>]|external[exclude-uplink <types>| profile
    <name>[exclude-uplink <types>]}}
    content-filtering
    deny-inter-user-bridging
    deny-local-routing
    disable
    dmo-channel-utilization-threshold <threshold>
    dot1lk
    dot1lr
    dot1lv
    dtim-period <value>
    dynamic-multicast-optimization
    enable
    enforce-dhcp
    essid <essid>
    external-server
    g-min-tx-rate <rate>
    g-max-tx-rate <rate>
    hide-ssid
    hotspot-profile <name>
    inactivity-timeout <interval>
    index <idx>
    key-duration <duration>
    12-auth-failthrough
    leap-use-session-key
    local-probe-req-thresh <threshold>
    mac-authentication
    mac-authentication-delimiter <delim>
    mac-authentication-upper-case
    max-authentication-failures <limit>
    max-clients-threshold <Max_clients>
    multicast-rate-optimization
    okc-disable
    opmode <opmode>
    per-user-bandwidth-limit <limit>
    radius-accounting
    radius-accounting-mode {user-association|user-authentication}
    radius-interim-accounting-interval <minutes>
    radius-reauth-interval <minutes>
    rf-band <band>
    server-load-balancing
    set-role <attribute> {{contains|ends-with|equals|matches-regular-expression|not-
    equals|starts-with} <operand> <role>|value-of}}
    set-role-by-ssid
    set-role-mac-auth <mac_only>
    set-role-machine-auth {<machine-only>|<user-only>}
    set-role-pre-auth <role>
    set-role-unrestricted
    set-vlan <attribute> {{contains|ends-with|equals|matches-regular-expression|not-
    equals|starts-with} <operand> <vlan>|value-of}}
    termination 

type {employee|voice|guest}
vlan <vlan>
wep-key <wep-key>
wispr
wmm-background-dscp <dscp>
wmm-background-share <share>
wmm-best-effort-dscp <dscp>
wmm-best-effort-share <share>
wmm-video-dscp <dscp>
wmm-video-share <share>
wmm-voice-dscp <dscp>
wmm-voice-share <share>
work-without-uplink
wpa-passphrase <wpa-passphrase>
zone <zone>
no... 

Description

This command configures a WLAN SSID profile.

Syntax

Command/Parameter Description Range Default
wlan ssid-profile	Creates a WLAN SSID profile.	-	-
a-max-tx-rate	Configures the specify the maximum transmission rate for the 5 GHz band.	6-54 Mbps 54	Mbps
a-min-tx-rate	Configures the specify the minimum transmission rate for the 5 GHz band.	6-54 Mbps 6	Mbps
air-time-limit	Configures an aggregate amount of airtime that all clients using this SSID can use for sending and receiving data.	-	-
auth-server	Configures an authentication server for the SSID users.	-	-
auth-survivability	Enables the authentication survivability feature.NOTE: The authentication survivability feature requires ClearPass Policy Manager 6.0.2 or later, and is applicable only when external servers such as RADIUS are configured for the SSID. When enabled, Instant authenticates the previously connected clients using EAP-PEAP authentication even when connectivity to ClearPass Policy Manager is temporarily lost.The Authentication survivability feature is not applicable when a RADIUS server is configured as aninternal server.	-	-
bandwidth-limit	Configures an aggregate amount of bandwidth that each radio is allowed to provide for the connected clients.	1-65535 -
blacklist	Enables dynamic blacklisting of clients.	-	-
broadcast-filter	Configures broadcast filtering parameters:You can configure any of the following filtering parameters:All-When set to All, the W-IAP drops all broadcast and multicast frames except DHCP and ARP.ARP-When set to ARP, the W-IAP converts ARP requests to unicast and send frames directly to the associated client.Disabled- When set to Disabled, all broadcast and multicast traffic is forwarded.	All, ARP, Disabled	Disabled
captive-portal{[exclude-uplink]}|external[exclude-uplink|profile[exclude-uplink]]}	Configures captive portal authentication for the SSID.If the external captive profiles are created, you can specify the profile name by using the external and profile keywords and associated parameters.	-	-
	You can also exclude an uplink type for the captive portal based SSID profiles. When an uplink type is selected for the exclude-uplink option, redirection to the captive portal based on the type of specified uplink is disabled.	3G,4G, wifi,ethernet	-
content-filtering	Routes all DNS requests for the non-corporate domains to OpenDNS on this network.	- Disabled
deny-inter-user-bridging	Disables the bridging traffic between two clients connected to the same SSID on the same VLAN.When inter-user bridging is disabled, the clients can connect to the Internet, but cannot communicate with each other, and the bridging traffic between the clients is sent to the upstream device to make the forwardingdecision.	-	-
deny-local-routing	Disables the routing traffic between two clients connected to the same SSID on different VLANs. When local routing is disabled, the clients can connect to the Internet, but cannot communicate with each other, and the routing traffic between the clients is sent to the upstream device to make the forwarding decision.	-	-
disable	Disables the SSID. By default all SSIDs are enabled.	-	-
dmo-channel-utilization-threshold	Sets a threshold for DMO channel utilization. W-IAP sends multicast traffic over the wireless link.	1-100 percentage value	90
dotllk	Enables 802.11k roaming on the SSID profile.The 802.11k protocol enables W-IAPs and clients to dynamically measure the available radio resources.When 802.11k is enabled, W-IAPs and clients send neighbor reports, beacon reports, and link measurement reports to each other.	-	-
dotllr	Enables 802.11r on the SSID profile.802.11r or fast BSS transition (FT) is an IEEE standard that permits continuous connectivity across wireless devices during client mobility. Fast BSS Transition mechanism minimizes the delay in roaming when a client transitions from one BSS to another within the same cluster.Fast BSS Transition is operational only if the wireless client supports 802.11r standard. If the client does support 802.11r standard, it falls back to normal WPA2 authentication method.	-	-
dotllv	Enables 802.11v based BSS transition.	-	-
dtim-period	Configures the Delivery Traffic Indication Message (DTIM) intervalfor the SSID profile.The DTIM interval determines how often the W-IAP should deliver the buffered broadcast and multicast frames to associated clients in the powersaving mode.When configured, the client checks for buffered data on the W-IAP at the specified number of beacons. You can also configure a higher value for DTIM interval for power saving.	1-10 beacons	1
dynamic-multicast-optimization	Allows the W-IAP to convert multicast streams into unicast streams over the wireless link.Enabling Dynamic Multicast Optimization (DMO) enhances the quality and reliability of streaming video, while preserving the bandwidth available to the non-video clients.NOTE: When you enable DMO on multicast SSID profiles, ensure that the DMO feature is enabled on all SSIDs configured in the same VLAN.	- Disabled
enable	Re-enables the deactivated SSIDs.	- Enabled
enforce-dhcp	Enforces dynamic VLAN assignment for clients from the DHCP server.	- Disabled
essid	Defines a name that uniquely identifies a wireless network.	-	-
external-server	Configures an external RADIUS server for authentication.	-	-
g-min-tx-rate	Configures the specify the minimum transmission rate for the 2.4 GHz band.	1-54 Mbps	1 Mbps
g-max-tx-rate	Configures the specify the maximum transmission rate for the 2.4 GHz band.	1-54 Mbps	54 Mbps
hide-ssid	Hides the SSID. When enabled, the SSID will not be visible for the users.	- Disabled
hotspot-profile	Associates a hotspot profile with the WLAN SSID profile.	-	-
inactivity-timeout	Configures a timeout value for the inactive client sessions.When a client session is inactive for the specified duration, the session expires and the clients are required to log in again.	60-86400 seconds	1000
index	Assigns an index value for the SSID.	-	-
l2-auth-failthrough	Allows the clients to use 802.1X authentication when MAC authentication fails.	- Disabled
leap-use-session-key	Allows the users to derive session keys for Lightweight Extensible Authentication Protocol (LEAP) authentication.Configure this command for old printers that use dynamic WEP and if you do not want use a session key from the RADIUS Server to derive pair wise unicast keys.	- Disabled
local-probe-req-thresh	Configures a Received signal strength indication (RSSI) threshold value to limit the number of incoming probe requests.When enabled, this command controls the system response to the broadcast probe requests sent by clients to search for the available SSIDs and ignores the probe request if required,	0-100 dB -
mac-authentication	Enables MAC authentication for clients that use this SSID profile.	- Disabled
mac-authentication-delimiter	Allows you to set a delimiter that can be used in the MAC address string for MAC authentication.You can specify colon or dash for delimiter. If the delimiter is not specified, the MAC address in the xxxxxxxxxxxx format is used. If you specify colon for the delimiter, the MAC addresses in the xx:xx:xx:xx:xx:xx format are used.	colon or dash	-
mac-authentication-upper-case	Enables the W-IAP to use uppercase letters in MAC address string for MAC authentication.	-	-
max-authentication-failures	Configures the maximum number of authentication failures to dynamically blacklist the users.The users who exceed the number of authentication failures configured through this command are dynamically blacklisted.	-	-
max-clients-threshold	Configures the maximum number of clients for a BSSID on a WLAN.	0-255 64
multicast-rate-optimization	Allows the W-IAP to select the optimal rate for sending broadcast and multicast frames based on the lowest of unicast rates across all associated clients.When enabled, the multicast traffic can be sent at the rate of 1-24 Mbps. The default rate for sending frames for 2.4 GHz is 1 Mbps and 5.0 GHz is 6 Mbps.	- Disabled
okc-disable	Disables opportunistic key caching (OKC).In the OKC based roaming, the AP stores one pairwise master key (PMK) per client, which is derived from last 802.1X authentication completed by the client in the network. The cached PMK is used when a client roams to a new W-IAP to allow faster roaming of clients.NOTE: If the wireless client (the 802.1X supplicant) does not support this feature, a complete 802.1X authentication is required whenever it roams to a new W-IAP.OKC is supported on WPA2-AES Enterprise network only.	-	-
opmode	Configures the layer-2 authentication and encryption for this SSID to protect access and ensure the privacy of the data transmitted to and from the network.You can configure any of the following types of encryption:opensystem - No authentication and encryption.wpa2-aes -WPA2 with AES encryption and dynamic keys using 802.1x.wpa2-psk-aes - WPA2 with AES encryption using apreshared key.wpa-tkip - WPA with TKIP encryption and dynamic keys using 802.1x.wpa-psk-tkip - WPA with TKIP encryption using a pre-shared key.wpa-tkip, wpa2-aes - WPA with TKIP and WPA2 with AES encryption.wpa-psk-tkip, wpa2-psk-aes - WPS with TKIP and WPA2 with AES encryption using a pre-shared key.static-wep - WEP with static keys.dynamic-wep - WEP with dynamic keys.	opensystem, wpa2-aes, wpa2-psk-aes, wpa-tkip, wpa-psk-tkip, wpa-tkip, wpa2-aes, wpa-psk-tkip, wpa2-psk-aes, static-wep, dynamic-wep	opensystem
per-user-bandwidth-limit	Configures a bandwidth limit in Kbps for the SSID users.NOTE: The bandwidth contracts can also be applied per SSID user.	1-65535Kbps	-
radius-accounting	Enables accounting for the RADIUS server authentication.When enabled, the W-IAPs post accounting information to the Radius server at the specified accounting interval.	- Disabled
radius-accounting-mode{user-association|user-authentication}	Configures an accounting mode for the captive portal users.You can configure any of the following modes for accounting:user-authentication - when configured, the accounting starts only after client authentication is successful and stops when the client logs out of the network.user-association - When configured, the accounting starts when the client associates to the network successfully and stops when the client is disconnected.	-user-	authentication
radius-interim-accounting-interval	Configures an interval for posting accounting information as RADIUS INTERIM accounting records to the RADIUS server.When configured, the W-IAP sends interim-update messages with current user statistics to theRADIUS server at regular intervals.	Any integer value in minutes	-
radius-reauth-interval	Configures an interval at which W-IAPs can periodically reauthenticate all associated and authenticated clients.	Any integer value in minutes	-
rf-band	Configures the radio frequency band on which this SSID will be broadcast. You can select either 2.4GHz, 5 GHz, or all to specify both bands.	2.4 GHz, 5 GHz, all	all
server-load-balancing	Enables load balancing across two RADIUS servers if two authentication servers are configured for the SSID.	- Enabled
set-role{{contains|ends-with|equals|matches-regular-expression|not-equals|starts-with}|value-of}	Assigns a user role to the clients. The first rule that matches the configured condition is applied.You can set any of the following conditions:contains - The rule is applied only if the attribute value contains the specified string.ends-with - The rule is applied only if the attribute value ends with the specified string.equals - The rule is applied only if the attribute value is equal to the specified string.not-equals - The rule is applied only if the attribute value is not equal to the specified string.starts-with - The rule is applied only if the attribute value begins with the specified string.value-of - This rule sets the user role to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.matches-regular-expression - The rule is applied only if the attribute value matches the regular expression pattern specified in Operand. This operator is available only if the mac-address-and-dhcp-options attribute is selected in the Attribute drop-down.	-	-
set-role-by-ssid	Configures a user role based on the type of SSID configured.	-	-
set-role-mac-auth	Configures a MAC authentication based user role.	-	-
set-role-machine-auth	Configures a machine authentication rule.You can assign different rights to clients based on whether their hardware device supports machine authentication.Machine authentication is only supported on Windows devices, so this can be used to distinguish between Windows devices and other devices such as iPads.	-	-
set-role-pre-auth	Configures a pre-authentication role to allow some access to the guest users before the client authentication.	-	-
set-role-unrestricted	Configures unrestricted access control.	-	-
set-vlan{{contains|ends-with|equals|matches-regular-expression|not-equals|starts-with}|value-of}	Assigns a VLAN to the clients. The-first rule that matches the configured condition is applied.You can specify any of the following conditions:contains - The rule is applied only if the attribute value contains the specified string.ends-with - The rule is applied only if the attribute value ends with the specified string.equals - The rule is applied only if the attribute value is equal to the specified string.not-equals - The rule is applied only if the attribute value is not equal to the specified string.starts-with - The rule is applied only if the attribute value begins with the specified string.value-of - This rule sets the VLAN to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.matches-regular-expression - The rule is applied only if the attribute value matches the regular expression pattern specified in Operand. Thisoperator is available only if the mac-address-and-dhcp-options attribute is selected in the Attribute drop-down.	-	-
termination	Configures the EAP portion of 802.1X authentication on the W-IAP, instead of the RADIUS server.When enabled, this command reduces network traffic to the external RADIUS server by terminating the authorization protocol on the W-IAP. By default, for 802.1X authorization, the client conducts an EAP exchange with the RADIUS server, and the W-IAP acts as a relay for this exchange. The W-IAP by itself acts as an authentication server and terminates the outer layers of the EAP protocol, only relaying the innermost layer to the external RADIUS server.	- Disabled
type {employee|voice|guest}	Configures the type of network such as employee, voice, guest network.	-	-
vlan	Allows the administrators to assign a VLAN to the SSID users.	1...4095 -
wep-key	Static WEP key associated with the key index. The WEP key values can be 10 or 26 hexadecimal characters in length.	-	-
wispr	Enables WISPr authentication for the SSID profile.	-	-
wmm-background-dscp	Allows you to specify the DSCP mapping value for the background traffic.	0–63	-
wmm-background-share	Allocates bandwidth for background traffic such as file downloads or print jobs.	-	-
wmm-best-effort-dscp	Allows you to specify the DSCP mapping value for the best effort traffic.	0–63	-
wmm-best-effort-share	Allocates bandwidth or best effort traffic such as traffic from legacy devices or traffic from applications or devices that do not support QoS.	-	-
wmm-video-dscp	Allows you to specify the DSCP mapping value for the video traffic.	0-63 -
wmm-video-share	Allocates bandwidth for video traffic generated from video streaming.	-	-
wmm-voice-dscp	Allows you to specify the DSCP mapping value for the voice traffic.	0-63 -
wmm-voice-share	Allocates bandwidth for voice traffic generated from the incoming and outgoing voice communication.	-	-
work-without-uplink	Allows the SSID to be used without an uplink connection		-
wpa-passphrase	Defines a WPA passphrase with which you can generate a pre-shared key (PSK).	-	-
zone	Allows you to specify a zone for SSID. If an SSID belongs to a zone, it is not broadcast on any AP which does not belong to the zone.

Usage Guidelines

Use this command to configure a WLAN SSID profile to set up an employee, voice, or guest network.

Example

The following example configures an employee WLAN SSID profile:

(Instant AP) (config)# wlan ssid-profile employee1
(Instant AP) (SSID Profile "employee1")# type employee
(Instant AP) (SSID Profile "employee1")# essid employee1
(Instant AP) (SSID Profile "employee1")# enable
(Instant AP) (SSID Profile "employee1")# vlan 1
(Instant AP) (SSID Profile "employee1")# wpa-passphrase user@123
(Instant AP) (SSID Profile "employee1")# opmode wpa2-psk-aes
(Instant AP) (SSID Profile "employee1")# max-authentication-failures 0
(Instant AP) (SSID Profile "employee1")# mac-authentication
(Instant AP) (SSID Profile "employee1")# l2-auth-failthrough
(Instant AP) (SSID Profile "employee1")# termination
(Instant AP) (SSID Profile "employee1")# blacklist
(Instant AP) (SSID Profile "employee1")# mac-authentication
(Instant AP) (SSID Profile "employee1")# auth-server InternalServer
(Instant AP) (SSID Profile "employee1")# rf-band all
(Instant AP) (SSID Profile "employee1")# dtim-period 1
(Instant AP) (SSID Profile "employee1")# inactivity-timeout 1000
(Instant AP) (SSID Profile "employee1")# broadcast-filter none
(Instant AP) (SSID Profile "employee1")# dmo-channel-utilization-threshold 90
(Instant AP) (SSID Profile "employee1")# local-probe-req-thresh 0
(Instant AP) (SSID Profile "employee1")# max-clients-threshold 64
(Instant AP) (SSID Profile "employee1")# set-role Group-Name contains wireless employee 

(Instant AP)(SSID Profile "employee1")# set-vlan mac-address-and-dhcp-options matches-regular-expression ..link 200
(Instant AP)(SSID Profile "employee1")# no wmm-background-dscp
(Instant AP)(SSID Profile "employee1")# wmm-best-effort-dscp 21
(Instant AP)(SSID Profile "employee1")# no wmm-video-dscp
(Instant AP)(SSID Profile "employee1")# wmm-voice-dscp 46,44,42,41
(Instant AP)(SSID Profile "employee1")# zone Zone1
(Instant AP)(SSID Profile "employee1")# end
(Instant AP)# commit apply 

The following example configures a guest WLAN SSID profile:

(Instant AP) (config)# wlan ssid-profile guestNetwork
(Instant AP) (SSID Profile "guestNetwork")# type guest
(Instant AP) (SSID Profile "guestNetwork")# essid guestNetwork
(Instant AP) (SSID Profile "guestNetwork")# enable
(Instant AP) (SSID Profile "guestNetwork")# opmode opensystem
(Instant AP) (SSID Profile "guestNetwork")# rf-band all
(Instant AP) (SSID Profile "guestNetwork")# dtim-period 1
(Instant AP) (SSID Profile "guestNetwork")# g-min-tx-rate 1
(Instant AP) (SSID Profile "guestNetwork")# g-max-tx-rate 54
(Instant AP) (SSID Profile "guestNetwork")# a-min-tx-rate 6
(Instant AP) (SSID Profile "guestNetwork")# a-max-tx-rate 54
(Instant AP) (SSID Profile "guestNetwork")# inactivity-timeout 1000
(Instant AP) (SSID Profile "guestNetwork")# vlan 1
(Instant AP) (SSID Profile "guestNetwork")# dmo-channel-utilization-threshold 90
(Instant AP) (SSID Profile "guestNetwork")# max-clients-threshold 64
(Instant AP) (SSID Profile "guestNetwork")# local-probe-req-thresh 0
(Instant AP) (SSID Profile "guestNetwork")# blacklist
(Instant AP) (SSID Profile "guestNetwork")# max-authentication-failures 3
(Instant AP) (SSID Profile "guestNetwork")# radius-interim-accounting-interval 10
(Instant AP) (SSID Profile "guestNetwork")# radius-reauth-interval 30
(Instant AP) (SSID Profile "guestNetwork")# captive-portal external
(Instant AP) (SSID Profile "guestNetwork")# mac-authentication
(Instant AP) (SSID Profile "guestNetwork")# auth-server server1
(Instant AP) (SSID Profile "guestNetwork")# set-role-by-ssid
(Instant AP) (SSID Profile "guestNetwork")# set-role-pre-auth test1
(Instant AP) (SSID Profile "guestNetwork")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.4	This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and WLAN SSID profile configuration sub-mode.

wlan sta-profile

wlan sta-profile
essid <ESSID>
cipher-suite <cipher-suite-string>
wpa-passphrase <WPA-key>
uplink-band <band>
no... 

Description

This command enables Wi-Fi uplink on a W-IAP.

Syntax

Command/Parameter Description Range Default
wlan sta-profile	Configures a Wi-Fi uplink profile for-a W-IAP.	-	-
essid	Defines a unique name for the network on which the Wi-Fi uplink will be enabled.	-	-
cipher-suite {clear| wpa-tkip-psk| wpa2-ccmp-psk}	Configures encryption settings.You can specify the following types of encryption:clear-To clear a cipher suitewpa-tkip-psk-To use WPA with TKIP encryption along with Pre-shared key (PSK).wpa2-ccmp-psk-To use WPA2 with Counter Cipher Mode with Block Chaining Message Authentication Code Protocol (CCMP), an AES-based encryption mode with strong security.	-	-
wpa-passphrase	Defines a WPA passphrase with which a pre-shared key (PSK) can be generated.The passphrase must be between 8 and 64 characters.	-	-
uplink-band	Configures the band for uplink connection. The valid options are dot11a and dot11g.	-	-
no...	Removes the configuration--

Usage Guidelines

Use this command to configure Wi-Fi uplink for a client station connected to a W-IAP.

Example

The following commands configure the Wi-Fi uplink profile:

(Instant AP)(config) # wlan sta-profile (Instant AP)(sta uplink)# uplink-band dotlla (Instant AP)(sta uplink)# uplink-band dotlla (Instant AP)(sta uplink)# cipher-suite wpa-tkip-psk (Instant AP)(sta uplink)# wpa-passphrase user@123

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and Wi-Fi uplink (sta) sub-mode.

wlan tacacs-server

wlan tacacs-server <profile-name>
    ip <IP-address>
    port <port>
    key <key>
    timeout <seconds>
    retry-count <number>
    deadtime <minutes>
    no... 

Description

This command is used to configure a TACACS server for management users.

Syntax

Command/Parameter Description Default
wlan tacacs-server	Configures the TACACS server profile. -
ip	Configures the IP address of the TACACS server.	-
port	Configures the TCP port for the server 49
key	Configures a shared secret key to authenticate communication between the TACACS+ client and server.	-
timeout	Configures a timeout value for TACACS+ requests from the management users	20
retry-count	Configures the maximum number of authentication requests that are sent to the server	3
no...	Removes the specified configuration parameter.	-

Usage Guidelines

Use this command to configure a TACACS server as an external authentication server. This configuration app only for management users in Instant and not for the other SSID or wired profiles.

Example

The following example configures the TACACS protocols:

(Instant AP) (config) # wlan tacacs-server Server1
(Instant AP) (TACACS Server <Server1>) # ip <10.17.121.54>
(Instant AP) (TACACS Server <Server1>) # port <49>
(Instant AP) (TACACS Server <Server1>) # key <pass123>
(Instant AP) (TACACS Server <Server1>) # timeout <30>
(Instant AP) (TACACS Server <Server1>) # retry-count <4>
(Instant AP) (TACACS Server <Server1>) # deadtime <30>
(Instant AP TACACS Server <Server1>) # end
(Instant AP) # commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and TACACS server profile sub-mode.

wlan walled-garden

wlan walled-garden
white-list <domain>
black-list <domain>
no... 

Description

This command configures a walled garden to control user access to the Web content and services. The walled garden access is required when an external captive portal is used.

Syntax

Command/Parameter Description Range Default
wlan walled-garden	Creates a Walled Garden profile for the W-IAP.	--
white-list	Configures a whitelist of URLs to allow the authenticated users to access to a specific domain.You can specify the URLs which the users can access. To allow access to various sites in the same domain, you can specify a POSIX regular expression (regex(7)). For example, yahoo.com/* to provide access to various domains such as news.yahoo.com, travel.yahoo.com and finance.yahoo.com. Similarly, the www.apple.com/library/test is only allow a subset of www.apple.com site corresponding to path /library/test/*.	URLs, URLs with POSIX regular expression (regex(7))	-
black-list	Configures a blacklist to prevent the users from accessing the websites in a specific domain.You can specify the URLs for which the user access is denied. When a URL specified in blacklist is accessed by an unauthenticated user, W-IAP sends an HTTP 403 response to the client with a simple error message.	URLs	-
no...	Removes the configuration.	--

Usage Guidelines

Use this command to configure a walled garden profile. A walled garden access is required when an external portal is used. For example, a hotel environment where the unauthenticated users are allowed to navigate to designated login page (for example, a hotel website) and all its contents.

The users who do not sign up for the Internet service can view the “allowed” websites (typically hotel property websites). The website names must be DNS-based and support the option to define wildcards. This works for devices with or without HTTP proxy settings.

When a user attempts to navigate to other websites not in the whitelist of the walled garden profile, the user redirected to the login page. Similarly, a blacklisted walled garden profile blocks the users from accessing sor websites.

Example

The following example configures a walled garden profile:

(Instant AP) (config)# wlan walled-garden
(Instant AP) (Walled Garden)# white-list <domain>
(Instant AP) (Walled Garden)# black-list <domain>
(Instant AP) (Walled Garden)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

wlan wispr-profile

wlan wispr-profile
wispr-location-id-ac <ac>
wispr-location-id-cc <cc>
wispr-location-id-isocc <issoc>
wispr-location-id-network <network>
wispr-location-name-location <location-name>
wispr-location-name-operator-name <operator-name>
no... 

Description

This command configures a Wireless Internet Service Provider roaming (WISPr) authentication profile for a W-1 WISPr authentication allows a smart client to authenticate on the network when they roam between wireless I service providers, even if the wireless hotspot uses an Internet Service Provider (ISP) with whom the client m have an account.

Syntax

Command/Parameter Description
wlan wispr-profile	Creates a WISPr authentication profile
wispr-location-id-ac	Configures an E.164 Area Code for the WISPr Location ID.
wispr-location-id-cc	Configures an E.164 Country Code for the WISPr Location ID.
wispr-location-id-isocc	Configures an ISO Country Code for the WISPr Location ID.
wispr-location-id-network	Configures an SSID associated with the WISPr Location ID.
wispr-location-name-location	Associates the Hotspot location to the WISPr profile.
wispr-location-name-operator-name	Associates the hotspot operator profile to the WISPr authentication profile.
no...	Removes the configuration

Usage Guidelines

Use this command to configure a WISPr authentication profile for the captive portal users. Instant supports the following smart clients:

iPass
- Boingo

These smart clients enable client authentication and roaming between hotspots by embedding iPass Generic Interface Specification (GIS) redirect, authentication, and logoff messages within HTML messages that are sent the W-IAP.

The WISPr RADIUS attributes and configuration parameters are specific to the RADIUS server used by your I the WISPr authentication. Contact your ISP to determine the parameter values for WISPr profile configuration. can find a list of ISO and ITU country and area codes at the ISO and ITU websites (iso.org and itu.int).

Example

The following commands configure a WISPr authentication profile:

(Instant AP) (config)# wlan wispr-profile
(Instant AP) (WISPr)# wispr-location-id-ac 408
(Instant AP) (WISPr)# wispr-location-id-cc 1
(Instant AP) (WISPr)# wispr-location-id-isocc US
(Instant AP) (WISPr)# wispr-location-id-network wispr
(Instant AP) (WISPr)# wispr-location-name-location airport
(Instant AP) (WISPr)# wispr-location-name-operator-name KNP
(Instant AP) (WISPr)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode and WISPr profile sub-mode.

write

write {erase |memory}

Description

This command saves the running configuration to memory or displays the running configuration on the screen. command can also be used to erase the running configuration and return to factory default setting

Syntax

Parameter Description
erase	Erases the running system configuration file. Rebooting the W-IAP resets it to the factory default configuration. If you specify all, the configuration and all data in the W-IAP databases are erased.
memory	Saves the current system configuration to memory. Any configuration changes made during this session will be made permanent.

Usage Guidelines

Configuration changes made using the CLI affect only the current session. You must save your changes for t be retained across system reboots. Changes are lost if the system reboots before saving the changes.

The following command assumes you have already saved your configuration. Reboot the W-IAP:

The W-IAP returns the following messages:

Do you really want to reset the system(y/n): y System will now restart! ... Restarting system.

Example

The following command saves your changes so they are retained after a reboot:

write memory

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Privileged EXEC mode

xml-api-server

xml-api-server
ip <ip-address>
key <shared-key>
no... 

Description

This command integrates an XML API interface to the W-IAP.

Syntax

Command/Parameter Description
xml-api-server	Displays the sub-mode for configuring the XML API interface parameters.
ip	Configures the IP address of the XML API server.
key	Configures the key required for accessing the XML API interface.
no...	Removes the configured parameter.

Usage Guidelines

Use this command to integrate a W-IAP with an external XML API interface.

Example

The following command configures the XML API Server details on a W-IAP:

(Instant AP) (config)# xml-api-server
(Instant AP) (xml-api-server)# ip 12.0.132.61
(Instant AP) (xml-api-server)# key123
(Instant AP) (xml-api-server)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

zonename

zonename no...

Description

This command configures a zone name for the W-IAP. You can configure zone settings on a W-IAP and the profile, to assign an SSID to a specific W-IAP.

Syntax

Parameter Description
zonename	Configures zone on a W-IAP.
no...	Removes the configuration.

Usage Guidelines

Use this command to configure an AP zone. To assign an SSID to a specific W-IAP, the AP zone name must be configured on the WLAN SSID profile.

The following constraints apply to the AP zone configuration:

• A W-IAP can belong to only one zone and only one zone can be configured on an SSID.
• If an SSID belongs to a zone, all W-IAPs in this zone can broadcast this SSID. If no W-IAP belongs to the zone configured on the SSID, the SSID is not broadcast.
• If an SSID does not belong to any zone, all W-IAPs can broadcast this SSID.

Example

The following example configures a zone name on a W-IAP:

(Instant AP)# zonename zoneA

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1	This command is introduced.

Command Information

W-IAP Platform Command Mode
All platforms	Configuration mode

Acronyms and Abbreviations

The following table lists the abbreviations used in this document.

Table 11List of abbreviations

Abbreviation Expansion
ARM Adaptive Radio Management
ARP	Address Resolution Protocol
BSS	Basic Server Set
BSSID	Basic Server Set Identifier
CA	Certification Authority
CLI	Command Line Interface
DHCP	Dynamic Host Configuration Protocol
DMZ	Demilitarized Zone
DNS	Domain Name System
EAP-TLS	Extensible Authentication Protocol- Transport Layer Security
EAP-TTLS	Extensible Authentication Protocol-Tunneled Transport Layer Security
W-IAP	Instant Access Point
IDS	Intrusion Detection System
IEEE Institute of Electrical and	Electronics Engineers
ISP	Internet Service Provider
LEAP	Lightweight Extensible Authentication Protocol
MX	Mail Exchanger
MAC	Media Access Control
NAS	Network Access Server
NAT	Network Address Translation
NS	Name Server
NTP	Network Time Protocol

Table 11: List of abbreviations

Abbreviation Expansion
PEAP Protected Extensible Authentication Protocol
PEM Privacy Enhanced Mail
PoE Power over Ethernet
RADIUS Remote Authentication	Dial In User Service
VC Virtual Controller
VSA	Vendor-Specific Attributes
WLAN	Wireless Local Area Network

Glossary

The following table lists the terms and their definitions used in this document.

Table 12: List of Terms

Term Definition
802.11	An evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and CSMA/CA (carrier sense multiple access with collision avoidance) for path sharing.
802.11a	Provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps.
802.11b	WLAN standard often called Wi-Fi; backward compatible with 802.11. Instead of the phase-shift keying (PSK) modulation method historically used in 802.11 standards, 802.11b uses complementary code keying (CCK), which allows higher data speeds and is less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps.
802.11g	Offers transmission over relatively short distances at up to 54 Mbps, compared with the 11 Mbps theoretical maximum of 802.11b. 802.11g operates in the 2.4 GHz band and employs orthogonal frequency division multiplexing (OFDM), the modulation scheme used in 802.11a, to obtain higher data speed. Computers or terminals set up for 802.11g can fall back to speeds of 11 Mbps, so that 802.11b and 802.11g devices can be compatible within a single network.
802.11n	Wireless networking standard to improve network throughput over the two previous standards 802.11a and 802.11g with a significant increase in the maximum raw data rate from 54 Mbps to 600 Mbps with the use of four spatial streams at a channel width of 40 MHz. 802.11n operates in the 2.4 and 5.0 bands.

Table 12: list of Terms

Term Definition
AP An access point (AP) connects users to other users within the network and also can serve as the point of interconnection between the WLAN and a fixed wire network. The number of access points a WLAN needs is determined by the number of users and the size of the network.
access point mapping The act of locating and possibly exploiting connections to WLANs while driving around a city or elsewhere. To do war driving, you need a vehicle, a computer (which can be a laptop), a wireless Ethernet card set to work in promiscuous mode, and some kind of an antenna which can be mounted on top of or positioned inside the car. Because a WLAN may have a range that extends beyond an office building, an outside user may be able to intrude into the network, obtain a free Internet connection, and possibly gain access to company records and other resources.
ad-hoc network A LAN or other small network, especially one with wireless or temporary plug-in connections, in which some of the network devices are part of the network only for the duration of a communications session or, in the case of mobile or portable devices, while in some close proximity to the rest of the network.
band A specified range of frequencies of electromagnetic radiation.
DHCP The Dynamic Host Configuration Protocol (DHCP) is an auto-configuration protocol used on IP networks. Computers or any network peripherals that are connected to IP networks must be configured, before they can communicate with other computers on the network. DHCP allows a computer to be configured automatically, eliminating the need for a network administrator. DHCP also provides a central database to keep track of computers connected to the network. This database helps in preventing any two computers from being configured with the same IP address.
DNS Server A Domain Name System (DNS) server functions as a phonebook for the Internet and Internet users. It converts human readable computer hostnames into IP addresses and vice-versa.A DNS server stores several records for a domain name such as an address 'A' record, name server (NS), and mail exchanger (MX) records.The Address 'A' record is the most important record that is stored in a DNS server, because it provides the required IP address for a network peripheral or element.
DST Daylight saving time (DST), also known as summer time, is the practice of advancing clocks, so that evenings have more daylight and mornings have less. Typically clocks are adjusted forward one hour near the start of spring and are adjusted backward in autumn.
EAP Extensible authentication protocol (EAP) refers to the authentication protocol in wireless networks that expands on methods used by the point-to-point protocol (PPP), a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.

Table 12:ist of Terms

Term Definition
fixed wireless Wireless devices	or systems in fixed locations such as homes and offices.Fixed wireless devices usually derive their electrical power from the utility mains, unlike mobile wireless or portable wireless which tend to be battery-powered. Although mobile and portable systems can be used in fixed locations, efficiency and bandwidth are compromised compared with fixed systems.
frequency allocation Use of radio	frequency spectrum regulated by governments.
frequency spectrum Part of the	electromagnetic spectrum.
hotspot A WLAN node that provides Internet connection and virtual private network (VPN) access from a given location. A business traveler, for example, with a laptop equipped for Wi-Fi can look up a local hot spot, contact it, and get connected through its network to reach the Internet and their own company remotely with a secure connection. Increasingly, public places, such as airports, hotels, and coffee shops are providing free wireless access for customers.
IEEE 802.11 standards The IEEE 802.11 is a set of standards that are categorized based on the radio wave frequency and the data transfer rate.
POE Power over Ethernet (PoE)	is a method of delivering power on the same physical Ethernet wire used for data communication. Power for devices is provided in one of the following two ways:Endspan- The switch that an AP is connected for power supply.Midspan- A device can sit between the switch and APsThe choice of endspan or midspan depends on the capabilities of the switch to which the W-IAP is connected. Typically if a switch is in place and does not support PoE, midspan power injectors are used.
PPPoE	Point-to-Point Protocol over Ethernet (PPPoE) is a method of connecting to the Internet typically used with DSL services where the client connects to the DSL modem.
QoS	Quality of Service (QoS) refers to the capability of a network to provide better service to a specific network traffic over various technologies.
RF	Radio Frequency (RF) refers to the portion of electromagnetic spectrum in which electromagnetic waves are generated by feeding alternating current to an antenna.
TACACS	Family of protocols that handle remote authentication and related services for network access control through a centralized server.
TACACS+	Derived from TACACS but an entirely new and separate protocol to handle AAA services. TACACS+ uses TCP and is not compatible with TACACS. Because it encrypts password, username, authorization, and accounting, it is less vulnerable than RADIUS.
VPN	A Virtual Private Network (VPN) network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or individual users with secure access to their organization's network. A VPN ensures privacy through security procedures and tunneling protocols such as the Layer Two Tunneling Protocol (L2TP). Data is encrypted at the sending end and decrypted at the receiving end.

Table 12:ist of Terms

Term Definition
W-CDMA Officially known as IMT-2000 direct spread; ITU standard derived from Code-Division Multiple Access (CDMA). Wideband code-division multiple access (W-CDMA) is a third-generation (3G) mobile wireless technology that promises much higher data speeds to mobile and portable wireless devices than commonly offered in today's market.
Wi-Fi A term for certain types of WLANs. Wi-Fi can apply to products that use any 802.11 standard. Wi-Fi has gained acceptance in many businesses, agencies, schools, and homes as an alternative to a wired LAN. Many airports, hotels, and fast-food facilities offer public access to Wi-Fi networks.
WEP Wired equivalent privacy (WEP) is a security protocol specified in 802.11b, designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Data encryption protects the vulnerable wireless link between clients and access points; once this measure has been taken, other typical LAN security mechanisms such as password protection, end-to-end encryption, virtual private networks (VPNs), and authentication can be put in place to ensure privacy.
wireless Describes telecommunications in which electromagnetic waves (rather than some form of wire) carry the signal over part or all of the communication path.
wireless network In a Wireless LAN (WLAN), laptops, desktops, PDAs, and other computer peripherals are connected to each other without any network cables. These network elements or clients use radio signals to communicate with each other. Wireless networks are set up based on the IEEE 802.11 standards.
WISP Wireless ISP (WISP) refers to an internet service provider (ISP) that allows subscribers to connect to a server at designated hot spots (access points) using a wireless connection such as Wi-Fi. This type of ISP offers broadband service and allows subscriber computers, called stations, to access the Internet and the Web from anywhere within the zone of coverage provided by the server antenna, usually a region with a radius of several kilometers.
wireless service provider A company that offers transmission services to users of wireless devices through radio frequency (RF) signals rather than through end-to-end wire communication.
WLAN Wireless local area network (WLAN) is a local area network (LAN) that the users access through a wireless connection.