DELL

W-IAP214/215 - Unspecified DELL - Free user manual and instructions

Find the device manual for free W-IAP214/215 DELL in PDF.

📄 601 pages English EN Download 💬 AI Question
Notice DELL W-IAP214/215 - page 2
Pick your language and provide your email: we'll send you a specifically translated version.

User questions about W-IAP214/215 DELL

0 question about this device. Answer the ones you know or ask your own.

Ask a new question about this device

The email remains private: it is only used to notify you if someone responds to your question.

No questions yet. Be the first to ask one.

Download the instructions for your Unspecified in PDF format for free! Find your manual W-IAP214/215 - DELL and take your electronic device back in hand. On this page are published all the documents necessary for the use of your device. W-IAP214/215 by DELL.

USER MANUAL W-IAP214/215 DELL

Dell Networking W-Series Instant

6.4.2.0-4.1.1

Command-Line Interface

jide

© 2014 Aruba Networks, Inc. Aruba Networks trademarks Include , Aruba Networks ^® , Aruba Wireless Networks ^® , the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System ^® . Dell ^™ , the DELL ^™ logo, and PowerConnect ^™ are trademarks of Dell Inc.

All rights reserved. Specifications in this manual are subject to change without notice.

Originated in the USA. All other trademarks are the property of their respective owners.

Open Source Code

Certain Aruba products include Open Source software code developed by third parties, including software subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other OpSource Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011 Infoblox, Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Source code used can be found at this site:

http://www.arubanetworks.com/open_source

The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate other vendors' VPN client devices constitutes complete acceptance of liability by that individual corporation for this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of those vendors.

Chapter 1

About this Guide

This document describes the Instant command syntax and provides the following information for each command:

  • Command Syntax—The complete syntax of the command.
    • Description—A brief description of the command.
  • Syntax—A description of the command parameters, the applicable ranges and default values, if any.
  • Usage Guidelines—Information to help you use the command, including prerequisites, prohibitions, and related commands.
    • Example—An example of how to use the command.
  • Command History—The version of Instant in which the command was first introduced.
  • Command Information—This table describes command modes and platforms for which this command is applicable.

The commands are listed in alphabetical order.

Intended Audience

This guide is intended for customers who configure and use Dell Networking W-Series Instant (W-IAP).

In addition to this document, the Dell W-IAP product documentation includes the following:

• Dell Networking W-Series Instant Access Point Installation Guides
• Dell Networking W-Series Instant 6.4.2.0-4.1.1 Quick Start Guide
• Dell Networking W-Series Instant 6.4.2.0-4.1.1 User Guide
• Dell Networking W-Series Instant 6.4.2.0-4.1.1 MIB Reference Guide
• Dell Networking W-Series Instant 6.4.2.0-4.1.1 Syslog Messages Reference Guide

Table 1: Typographical Conventions

Type Style Description
ItalicsThis style is used for emphasizing important terms and to mark the titles of books.
BoldfaceThis style is used for command names and parameter options when mentioned in the text.
CommandsThis fixed-width font depicts command syntax and examples of commands and command output.
In the command syntax, text within angle brackets represents items that you should replace with information appropriate to your specific situation.For example, pingIn this example, you would type "ping" at the system prompt exactly as shown, followed by the IP address of the system to which ICMP echo packets are to be sent. Do not type the angle brackets.
|square brackets|In the command syntax, items enclosed in brackets are optional. Do not type the brackets.
{Item_A|Item_B}In the command examples, single items within curled braces and separated by a vertical bar represent the available choices. Enter only one choice. Do not type the braces or bars.
{ap-name}|{ipcodr}Two items within curled braces indicate that both parameters must be entered together. If two or more sets of curled braces are separated by a vertical bar, like in the example to the left, enter only one choice. Do not type the braces or bars.

Contacting Dell

Table 2: Support Information

Support
Main Website dell.com
Contact Information dell.com/contactdell
Support Website dell.com/support
Documentation Websitedell.com/support/manuals

What is New in Instant 6.4.0.2-4.1.1

This section lists the new and modified commands in the Instant 6.4.0.2-4.1.1 release.

New Commands

There are no new commands introduced in this release.

Modified Commands

The following commands are modified in the Instant 6.4.0.2-4.1.1 release:

Table 3: Modified Commands in 6.4.0.2-4.1.1

Command Description
wlan ssid-profileThis command now enables configuring an accounting server for the specified SSID to perform accounting functions.
show dpi-statsThis command now enables the W-IAP to display the DPI statistics for the last 15 minutes of the SSID to which it is connected in the network.

Chapter 2 Instant CLI

Instant supports the use of Command Line Interface (CLI) for scripting purposes. You can access the Inst CLI through a Secure Shell (SSH).

To enable the SSH access to the Instant CLI:

  1. From the Instant UI, navigate to System > Show advanced options.
  2. Select Enabled from the Terminal access drop-down list.
  3. Click OK.

Connecting to a CLI Session

On connecting to a CLI session, the system displays its host name followed by the login prompt. Use the administrator credentials to start a CLI session. For example:

(Instant AP)
User: admir
Password: **** 

If the login is successful, the privileged command mode is enabled and a command prompt is displayed. example:

(Instant AP) # 

The privileged mode provides access to show, clear, ping, traceroute, and commit commands. The configuration commands are available in the configuration (config) mode. To move from privileged mode the configuration mode, enter the following command at the command prompt:

(Instant AP)# configure terminal 

The configure terminal command allows you to enter the basic configuration mode and the command pr is displayed as follows:

(Instant AP) (config)# 

The Instant CLI allows CLI scripting in several other sub-command modes to allow the users to configure

(Instant AP) || commit apply

To apply the configuration changes to the cluster, without saving the configuration, use the following command in the privileged mode:

(Instant AP) || commit apply no-save

To view the changes that are yet to be applied, use the following command in the privileged mode:

(Instant AP) || show uncommitted-config

To revert to the earlier configuration, use the following command in the privileged mode.

(Instant AP)# commit revert

Example:

(Instant AP) (config)# rf dotlla-radio-profile

(Instant AP) (RF dotilla Radio Profile) || beacon-interval 200

(Instant AP) (RF dotlla Radio Profile)# no legacy-mode

(Instant AP) (RF dot11a Radio Profile)# dot11h

(Instant AP) (RF dotlla Radio Profile)# interference-immunity 3

(Instant AP) (RF dot11a Radio Profile)# csa-count 2

(Instant AP) (RF dotlla Radio Profile)# spectrum-monitor

(Instant AP) (RF dotlla Radio Profile)# end

(Instant AP)# show uncommitted-config

rf dotila-radio-profile
ro legacy-mode
beacon-interval 200
ro dotilh
interference-immunity 3
csa-count 1
no spectrum-monitor 

Instant Access Point# commit apply

Configuration Sub-modes

Some commands in configuration mode allow you to enter into a sub-mode to configure the commands specific to that mode. When you are in a configuration sub-mode, the command prompt changes to indi the current sub-mode.

You can exit a sub-command mode and return to the basic configuration mode or the privileged Exec (e

Using Sequence Sensitive Commands

The Instant CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, i recommended that you remove the existing configuration before adding or modifying the configuration details for sequence-sensitive commands. You can either delete an existing profile or remove a specific configuration by using the no... commands.

The following table lists the sequence-sensitive commands and the corresponding no command to remove the configuration.

Table 4: Sequence-Sensitive Commands

Sequence-Sensitive Command Corresponding no command
opendnsno opendns
rule{permit | deny | src-nat | dst-nat [||}no rule| permit | deny | src-nat | dst-nat|
mgmt-auth-serverno mgmt-auth-server
set-role{|equals| not-equals| starts-with| ends-with| contains}| value-of|no set-role{|equals| not-equals| starts-with| ends-with| contains}| value-of| no set-role
set-vlan{|equals| not-equals| starts-with| ends-with| contains}| value-of|no set-vlan{|equals| not-equals| starts-with| ends-with| contains}| value-of| no set-vlan
auth-serverno auth-server

Saving Configuration Changes

Command Line Editing

The system records your most recently entered commands. You can review the history of your actions, or reissue a recent command easily, without having to retype it.

To view items in the command history, use the up arrow key to move back through the list and the down arrow key to move forward. To reissue a specific command, press Enter when the command appears in the command history. You can also use the command line editing feature to make changes to the command to entering it. The command line editing feature allows you to make corrections or changes to a comma without retyping. The following table lists the editing controls. To use key shortcuts, press and hold the Ctrl button while you press a letter key.

Table 5:ine Editing Keys

Key Effect Description
Ctrl AHome Move the cursor to the beginning of the line.
Ctrl B or the left arrowBack Move the cursor one character left.
Ctrl DDelete Right Delete the character to the right of the cursor.
Ctrl EEnd Move the cursor to the end of the line.
Ctrl F or the right arrowForward Move the cursor one character right.
Ctrl KDelete Right Delete all characters to the right of the cursor.
Ctrl N or the down arrowNextDisplay the next command in the command history.
Ctrl P or up arrowPreviousDisplay the previous command in the comma history.
Ctrl TTransposeSwap the character to the left of the cursor

Specifying Addresses and Identifiers in Commands

This section describes addresses and other identifiers that you can reference in CLI commands.

Table 6: Addresses and Identifiers

Address/IdentifierDescription
IP address For any command that requires entry of an IP address to specify a network entity, use IPv4 network address format in the conventional dotted decimal notation (for example, 192.0.2.1).
Netmask address Forsubnet addresses, specify a subnet mask in dotted decimal notation (for example, 255.255.255.0).
Media Access Control (MAC) addressFor any command that requires entry of a device's hardware address, use the hexadecimal format (for example, 00:05:4e:50:14:aa).
Service Set Identifier (SSID)A unique character string (sometimes referred to as a network name), consisting of no more than 32 characters. The SSID is case-sensitive (for example, WLAN-01).
Basic Service Set Identifier (BSSID)This entry is the unique hard-wireless MAC address of the AP. A unique BSSID applies to each frequency—802.11a and 802.11g—used from the AP. Use the same format as for a MAC address.
Extended Service Set Identifier (ESSID)Typically the unique logical name of a wireless network. If the ESSID includes spaces, enclose the name in quotation marks.

a-channel

a-channel

Description

This command configures 5 GHz radio channels for a specific W-IAP.

Syntax

Parameter Description Range
Configures the specified 5 GHz channel.The valid channels for a band are determined by the AP regulatory domain.
Configures the specified transmission power values.0-127 dBm

Usage Guidelines

Use this command to configure radio channels for the 5 GHz band for a specific W-IAP.

Example

The following example configures the 5 GHz radio channel:

(Irstant AP) | a-channel 46 18

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

a-external-antenna

a-external-antenna

Description

This command configures external antenna connectors for a W-IAP.

Syntax

Parameter Description Range
Configures the antenna gain. You can configure a gain value in dBi for the following types of antenna:• Dipole/Omni• Panel• SectorDiploe/Omni - 6Panel -14Sector - 14

Usage Guidelines

If your W-IAP has external antenna connectors, you need to configure the transmit power of the system. configuration must ensure that the system's Equivalent Isotropically Radiated Power (EIRP) is in compliance with the limit specified by the regulatory authority of the country in which the W-IAP is deployed. You can measure or calculate additional attenuation between the device and antenna before configuring the anter gain. To know if your AP device supports external antenna connectors, see the Install Guide that is shipped along with the AP device.

EIRP and Antenna Gain

The following formula can be used to calculate the EIRP limit related RF power based on selected antenna (antenna gain) and feeder (Coaxial Cable loss):

EIRP = Tx RF Power (dBm)+GA (dB) - FL (dB)

The following table describes this formula:

(Instant AP) || a-external-antenna 14

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0.3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

aaa test-server

aaa test-server

Description

This command tests a configured authentication server.

Syntax

Parameter Description
Allows you to specify the authentication server for which the authentication test is run.
Allows you to specify the user name for which the authentication test is run.

Usage Guidelines

Use this command to view the CPU load for application and system processes. This command allows you to verify a configured RADIUS authentication server or the internal database. You can use this command to for an "out of service" RADIUS server.

Example

The following example shows the output of the aaa test-server command:

Authentication is successful

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3This command is introduced.

aeroscout-rtls

aeroscout-rtls [include-unassoc-sta] no...

Description

This command configures the Aeroscout Real-Time Asset Location Server (RTLS) settings for Instant and set the Radio-frequency identification (RFID) tag information to an Aeroscout RTLS server.

Syntax

Command/Parameter Description Default
IP address of the Aeroscout RTLS server to which the-location reports are sent.
Port number of the Aeroscout RTLS server to which thelocation reports are sent..
include-asaccoc-stasIncludes the client stations not associated to any W-IADisabled when mobile unit reports are sent to the AeroscoutRTLS server.
noRemoves the Aeroscout RTLS configuration. -

Usage Guidelines

This command allows you to integrate Aeroscout RTLS server with Instant by specifying the IP address at number of the Aeroscout RTLS server. When enabled, the RFID tag information for the stations associate a W-IAP are sent to the AeroScout RTLS. You can also send the RFID tag information for the stations that not associated with any W-IAP.

Example

The following example configures the Aeroscout RTL5 server:

(Tratant AP) (config) | aeroscout-rtls 192.0.2.2 3030 include-unassoc-sta

airgroup

airgroup

cppn enforce-registration
cppn-query-interval <interval>
cppn-server <server-name>
disable
enable [dlna-only mdns-only]
enable-guest-multicast
multi-swarm
no... 

Description

This command configures the AirGroup settings on a W-IAP.

Syntax

Parameter Description RangeDefault
cppm enforcee-registrationEnforces the discovery of the CPPM registered devices. When enabled, only devices registered with CPPM will be discovered by Bonjour® or DLNA devices, based on the CPPM policy configured.- Enabled
cppm-query-intervalConfigures a time interval at which Instant sends a query to ClearPass Policy Manager for mapping the access privileges of each device to the available services.1-24 10 hours
cppm-serverConfigures the ClearPass Policy Manager server information for AirGroup policy.--
disableDisables the AirGroup feature.VLAN.--
multi swarmEnables inter cluster mobility. When enabled, the W-IAP shares the mDNS database Information with the other clusters. The AirGroup records in the Virtual Controller can be shared with all the Virtual Controllers specified for L3 Mobility.- Disabled
no.Removes the specified configuration parameter.--

Usage Guidelines

Use this command to configure the AirGroup, the availability of the AirGroup services, and ClearPass Poli Manager (CPPM) servers.

Example

The following example configures an AirGroup profile:

(Instant AP) (config) | airgroup

(Instant AP)(airgroup)≠ enable

(Istant AP) (airgroup) | copm enforce-registration

(Instant AP) {airgroup} # ccpm-server Test

(Instant AP)(airgroup)‡ copm-query-interval 10

(Instant AP)(airgroup) \$ enable-guest-multicast

(Instant AP)(airgroup)‡ multi-swarm

(Instant AP) (afrgroup) | end

(Instant AP)# commit apply

Command History

airgroupservice

airgroupservice

description <description>
disable
disallow-role <role>
disallow-vlan <VLAN-ID>
enable
id <AirGroupservice-ID>
re... 

Description

This command configures the availability of AirGroup services for the W-IAP clients.

Syntax

Parameter Description Default
Specifies the AirGroup service to configure.The following pre-configured services are available for W-IAP clients:AirPlayTM— Apple® AirPlay allows wireless streaming of music, video, and slideshows from your iOS device to Apple TV® and other devices that support the AirPlay feature.AirPrintTM— Apple® AirPrint allows you to print from an iPad®, iPhone®, or iPod® Touch directly to any AirPrint compatible printers.Itunes— iTunes service is used by iTunes Wi-Fi sync and iTunes home-sharing applications across all Apple® devices.RemoteMgmt— Use this service for remote login, remote management, and FTP utilities on Apple® devices.You can allow all services or add custom services. Up to 10 services can be configured on a W-IAP.-
descriptionAdds a description to the AirGroup service profile. -
disableDisables AirGroup services for the profile. -
disallow-roleRestricts the user roles specified for role from accessing the AirGroup service.Disabled
disallow-vlanRestricts the AirGroup servers connected on the specified VLANs from being discovered.Disabled
enableEnables the AirGroup service for the profile. -
fdAllows you to specify the AirGroup service ID corresponding to the service that you are trying to configure. NOTE: The service IDs cannot be added for the pre-configured services.-
no..Removes the AirGroup service configuration. -

Usage Guidelines

Use this command to enforce AirGroup service policies and define the availability of a services for an AI profile. When configuring AirGroup service for an AirGroup profile, you can also restrict specific user role VLANs from availing the AirGroup services.

Example

The following example configures AirGroup services:

(Instant AP)(config)# airgroupservice AirPlay

(Instant AP)(airgroup-service)‡ description AirPlay Service

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and AirGroup services configuration sub-mode.

airwave-rtls

airwave-rtls [include-unassoc-sta] no...

Description

This command integrates W-AirWave Real-Time Asset Location Server (RTLS) settings for Instant and sends Radio-frequency identification (RFID) tag information to a W-AirWave RTLS server with the RTLS feed to accurately locate the wireless clients.

Syntax

Command/Parameter Description Default
Configures the IP address of the W-AirWave RTLS server.-
Configures the port for the W-AirWave RTLS server.-
Configures key for service authorization. -
Configures the frequency at which packets are sent to 5 the RTLS server in seconds.
Include-unassoc-staWhen enabled, this option sends mobile unit reports to Disabled the W-AirWave RTLS server for the client stations that are not associated to any W-IAP (unassociated stations).
no...Removes the specified configuration parameter. -

Usage Guidelines

Use this command to send the RFID tag information to W-AirWave RTLS. Specify the IP address and port number of the W-AirWave server, to which the location reports must be sent. You can also send reports unassociated clients to the RTLS server for tracking purposes.

ale-report-interval

ale-report-interval no...

Description

This command configures the interval at which a W-IAP sends data to the Analytics and Location Engine server.

Syntax

Command/ParameterDescriptionRangeDefault
ale-report-interval(seconds)Configures an Interval at which the Virtual Controller can report the W-IAP and client details to the ALE server.6-60 seconds30
no...Removes the specified configuration parameter.

Usage Guidelines

Use this command to specify an interval for W-IAP and ALE server communication.

Example

The following example configures the ALE server details:

(Instant AP) (config)# alo-report-interval 60

Command History

VersionDescription
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

ale-server

ale-server

r.o.

Description

This command configures Analytics and Location Engine (ALE) server details for W-IAP integration with AL

Syntax

Command/Parameter Description
ale-serverAllows you to specify the Fully Qualified Domain Name (FQDN) or IP address of the ALE server.
10...Removes the specified configuration parameter.

Usage Guidelines

Use this command to enable a W-IAP for ALE support.

Example

The following example configures the ALE server details:

(Instant AP) (config)# ale-server AleServer1

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

alg

alg

sccp-disable

sip-disable

vocera-disable

F:G

Description

This command allows you to modify the configuration settings for Application Layer Gateway (ALG) protocol enabled on a W-IAP. An application-level gateway consists of a security component that augments a fireNAT used in a network.

Syntax

Command/Parameter Description Default
scop-disableDisables the Skinny Call Control Protocol (SCCP). Enabled
sip-disableDisables the Session Initiation Protocol (SIP) for VOIP and other text and multimedia sessions.Enabled
vocera-disableDisables the VOCERA protocol. Enabled
no..Removes the specified configuration parameter.-

Usage Guidelines

Use this command to functions such as SIP, Vocera, and Cisco Skinny protocols for ALG.

Example

The following example configures the ALG protocols:

(Instant AP) (config)# alg

(Instant AP) (ALG) 1 accp-disable

(Instant AP) (ALC) ≠ no sip-disable

allow-new-aps

allow-new-aps no...

Description

This command allows the new access points to join the W-IAP cluster.

Syntax

Command/Parameter Description
allow-now-apsAllows new access points in the domain.
noRemoves the specified configuration parameter.

Usage Guidelines

Use this command to allow the new access points to join the W-IAP cluster.

Example

The following command allows the new W-IAPs to join the cluster.

(Instant AP) (config) | allow-new-aps

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode

allowed-ap

allowed-ap no...

Description

This command allows an AP to join the W-IAP cluster.

Syntax

Command/Parameter Description
allowed-apSpecifies the MAC address of the W-IAP that is allowed to join the cluster.
no...Removes the specified configuration parameter.

Usage Guidelines

Use this command to allow a W-IAP to join the cluster.

Example

The following command configures an allowed W-IAP: (Instant AP) (config) allowed-ap 01:23:45:67:89:AB

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

ams-backup-ip

ams-backup-ip <1²-address or domain name> no...

Description

This command adds the IP address or domain name of the backup W-AirWave Management server.

Syntax

Parameter Description
Configures the IP address or domain name of the secondary W-AirWai Management Server.
no.Removes the specified configuration parameter.

Usage Guidelines

Use this command to add the IP address or domain name of the backup W-AirWave Management Server backup server provides connectivity when the W-AirWave primary server is down. If the W-IAP cannot set data to the primary server, the Virtual Controller switches to the backup server automatically.

Example

The following command configures a W-AirWave backup server.

(Instant AP) (config)# ans-backup-1p 192.0.2.1

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

ams-identity

ams-identity

Description

This command uniquely identifies the group of W-IAPs managed or monitored by the W-AirWave Manage console. The name can be a location, vendor, department, or any other identifier.

Syntax

Parameter Description
ams-identityConfigures a name that uniquely identifies the W-IAP on the W-AirWave Management server. The name defined for this command will be displayed under the Groups tab in the W-AirWave user interface.

Usage Guidelines

Use this command to assign an identity for the W-IAPs monitored or managed by the W-AirWave Manag Server.

Example

The following command configures a W-AirWave identifier:

(Instant AP) (config)# ams-identity dell

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

ams-ip

ams-ip < P-address or domain name> no...

Description

This command configures the IP address or domain name of the W-AirWave Management console for a

Syntax

Parameter Description
Configures the IP address or domain name of anW-AirWave Management server for a W-IAP.

Usage Guidelines

Use this command to configure the IP address or domain name of the AMS console for a W-IAP.

Example

The following command configures the W-AirWave Server. (Tratant AP)(config)†ars-ip 192.0.1.2

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced, 3.3

Command Information

WIAP Platform Command Mode

ams-key

ams-key

no...

Description

This command assigns a shared key for service authorization.

Syntax

Parameter Description
Authorizes the first Virtual Controller to communicate with the W-AirWave server.
NO...Removes the specified configuration parameter.

Usage Guidelines

Use this command to assign a shared key for service authorization. This shared key is used for configur first AP in the W-IAP network.

Example

The following command configures the shared key for the W-AirWave server.

(Instant AP) (config)# ans-key key@789

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

apply

apply (cplogo-install|cplogo-uninstall|debug-command|delta-config)

Description

This command is used to save or apply the configuration settings on the W-IAP.

Syntax

Parameter Description
cplogo-installInstalls the Captive Portal logo on the W-IAP.
cplogo-uninstallUninstalls the Captive Portal logo on the W-IAP.
debug-commandApplies the configuration settings from the debug command.
delta-configApplies the configuration settings from the delta-config command.

Usage Guidelines

Use this command to apply the current configuration settings on the W-IAP.

Example

The following example installs the captive portal logo on a W-IAP.

(Instant AP)(config)# apply cplogo-inistall http://cp.logo.com

The following example uninstalls the captive portal logo on a W-IAP.

(Instant AP)(config)# apply cplogo-inistall http://cp.logo.com

Command History

Version Description
Doll Networking W-Series Instant 6.4.0.2.4.1This command is introduced

arm

am

@0mhz-support
a-channels <a-channel>
air-tine-fairness-mode {<default-access>| <fair-access>| <preferred-access>;
band-steering-mode {balance-bands|prefer-5ghz| force-5ghz| disable}
client-aware
client-match {calc-interval <seconds>| calc-threshold <threshold> | debug <level>| holdtime <number> | max-adopt or <count>| max-request <count> | nb-matching <percentage> | slb-node <mode>
q-channels
max-tx-power
min-tx-power
scanning
wide-bands {<none>| <all>| <2.4>| <5>}
no... 

Description

This command assigns an Adaptive Radio Management (ARM) profile for a W-IAP and configures ARM fea such as band steering, spectrum load balancing, airtime fairness mode, and access control features.

Syntax

Command/Parameter Description Range Default
80mhz-supportEnables the use of 80 MHz channels on APs with 5GHz radios, which support a very high throughput.NOTE: Only the APs that support 802.11ac can be configured with 80 MHz channels.--
a-channelsConfigures 5 GHz channels. --
air-limo-fairnows-mode(|Allows equal access to all clients on the wireless medium, regardless of client type, capability, or operating system anddefault-access,fair-access.default-access
Command/Parameter Description Range Default
band-steering-mode||Assigns the dual-band capable clients to the 5 GHz band on dual-band. It reduces co-channel interference and increases available bandwidth for dual-band clients, because there are more channels on the 5 GHz band than on the 2.4 GHz band. You can configure any of the following band-steering modes:prefer-5ghz-To allow the W-IAP to steer the client to 5 GHz band (if the client is 5 GHz capable). However, the W-IAP allows the client connection on the 2.4 GHz band if the client persistently attempts for 2.4 GHz association.force-5ghz-To enforce 5 GHz band steering mode on the W-IAPs, so that the 5 GHz capable clients are allowed to use only the 5GHz channels.balance-bands-To allow the W-IAPs to balance the clients across the two 2.4 GHz and 5 GHz radio and to utilize the available bandwidth.disable-To allow the clients to select the bands.balance-bands, prefer-5ghz, force-5ghz, disablebalance-bands
client-awareEnables the client aware feature. When enabled, the W-IAP will not change channels for the Access Points when clients are active, except for high priority events such as radar or excessive noise. The client aware feature must be enabled in most deployments for a stable WI AN- Enabled
Command/Parameter Description Range Default
calc-intervalConfigures an interval at which client match is calculated.10-600 30seconds
calc-thresholdConfigures a threshold that takes acceptance client count difference among all the channels of Client match into account. When the client load on an AP reaches or exceeds the threshold in comparison, client match is enabled on that AP.1-255 2
debugDisplays information required for debugging client match issues.0-40-none, 1-error, 2-information, 3-debug, 4-dump0
holdtimeConfigures a hold time for client match. 1-1800 900
max-adoptionConfigure a maximum number for adopting clients.0-100 5
max-requestConfigures the maximum number of requests for client match.0-100 5
nb-matchingConfigures a percentage value to be considered in the same virtual RF neighborhood of Client match.20-100% 75%
s1b-modeConfigures a balancing strategy for client match.the AP. If the maximum transmission EIRP configured on an AP is not supported by the AP model, the value is reduced to the highest supported power setting.NOTE: Higher power level settings may be constrained by local regulatory requirements and AP capabilities.1-31-Channel-based2-Pedic1
scanningAllows the W-IAPs to scan other channels for RF Management and Wireless Intrusion Protection System enforcement.- Disabled
wide-bands (|<2.4>| <5>)Allows administrators to configure 40 MHz channels in the 2.4 GHz and 5.0 GHz bands. 40 MHz channels are two 20 MHz adjacent channels that are bonded together. The 40 MHz channels double the frequency bandwidth available for data transmission. For high performance, enter 5GHz. If the AP density is low, enter 2.4GHz.none, all, 2.4, and 55
no.Removes the current value for that parameter and return it to its default setting--

Usage Guidelines

Use this command to configure ARM features on a W-IAP. ARM ensures low-latency roaming, consistently performance, and maximum client compatibility in a multi-channel environment. By ensuring the fair distribution of available Wi-Fi bandwidth to mobile devices, ARM ensures that data, voice, and video applications have sufficient network resources at all times. ARM allows mixed 802.11ac, a, b, g, and n cli types to inter-operate at the highest performance levels.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration and ARM configuration sub-mode.

attack

attack

drop-bad-arp-enable

fix-dhcp-enable

πο...

poison-check-enable

Description

This command enables firewall settings to protect the network against wired attacks, such as ARP attacks malformed DHCP packets, and notify the administrator when these attacks are detected.

Syntax

Command/Parameter Description
drop-bad-arp-enableEnables the W-IAP to block the bad ARP request.
fix-dhcp-enableEnables the W-IAP to fix the malformed DHCP packets.
poison-check-enableEnables the W-IAP to trigger an alert notifying the user about the ARP poisoning that may have been caused by the rogue APs.
no...Removes the specified configuration parameter.

Usage Guidelines

Use this command to block ARP attacks and to fix malformed DHCP packets.

Example

The following example configures firewall settings to protect the network from Wired attacks:

(Instant AP) (config)# attack

(Instant AP) (ATTACK) # drop-bad-arp-enable

(Instant AP) (ATTACK) # fix-dhcp-enable

(Instant AP) (ATTACK)# poison-check-enable

(Instant API (ATTACK) and

auth-failure-blacklist-time

auth-failure-blacklist-time

Description

This command allows the W-IAPs to dynamically blacklist the clients when they exceed the authentication failure threshold.

Syntax

Parameter Description Default
auth-failure-blacklist-timeConfigures the duration in seconds for which the clients3600 that exceed the maximum authentication failure threshold are blacklisted.

Usage Guidelines

Use this command to dynamically blacklist the clients that exceed the authentication failure threshold configured for a network profile.

Example

The following example blacklists the clients dynamically: (Instant, AP) (config) | auth-failure-blacklist-time 60

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.03.3This command is introduced.

Command Information

auth-survivability cache-time-out

auth-survivability cache-time-out

Description

This command configures an interval after which the authenticated credentials of the clients stored in the cache expire. When the cache expires, the clients are required to authenticate again.

Syntax

Parameter DescriptionRange Default
auth-survivabilitycache-time-outIndicates the duration after which the authenticated credentials in the cache expire.1-99 hours 24hours

Usage Guidelines

Use this command when the authentication survivability is enabled on a network profile, to set a duratic which the authentication credentials stored in the cache expires. To enable the authentication survivability feature, use the auth-survivability in WLAN SSID profile sub-mode.

Example

(Instant AP) (config)# auth-survivability cache-time-out 60

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

blacklist-client

blacklist-client. no...

Description

This command allows you to manually blacklist the clients by using MAC addresses of the clients.

Syntax

Parameter Description
blacklist-clientAdds the MAC address of the client to the blacklist.
no...Removes the specified configuration parameter.

Usage Guidelines

Use this command to blacklist the MAC addresses of clients.

Example

The following command blacklists a W-IAP client:

(Instant AP)(config)# blacklist-client 01:23:45:67:89:AB

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

blacklist-time

blacklist-time

Description

This command sets the duration in seconds for which the clients can be blacklisted due to an ACL rule

Syntax

Parameter Description Default

blacklist-time <seconds>Sets the duration in seconds for blacklisting clients due3600 to an ACL rule trigger.

Usage Guidelines

Use this command to configure the duration in seconds for which the clients can be blacklisted when the blacklisting rule is triggered.

Examples

The following command configures the duration for blacklisting clients:

(Instant AP) (config) # blacklist-time 30

Command History

Version Description

Dell Networking W-Series Instant 6.2.1.0- This command is introduced.
3.3

Command Information

W-IAP Platform Command Mode

calea

cale

encapsulation-type <gre>
ip <IP-address>
ip mtu <size>
gre-type <type>
no... 

Description

This command creates a Communications Assistance for Law Enforcement Act (CALEA) profile to enable V for Lawful Intercept (LI) compliance and CALEA integration.

Syntax

Command/ParameterDescription Range Default
ca'eaEnables calea configuration sub-mode for CALEA profile configuration.--
encapsulation-typeSpecifies the encapsulation type for Generic Routing Encapsulation (GRE) packets.GRE GRE
ipConfigures the IP address of the CALEA server on a W-IAP.--
tp mtuConfigures the Maximum Transmission Unit size to use.68–1500 1500
gre-typeSpecifies GRE type.-25944
no...Removes the configuration--

Usage Guidelines

Use this command to configure a W-IAP to support Lawful Intercept (LI). LI allows the Law Enforcement Agencies (LEA) to conduct an authorized electronic surveillance. Depending on the country of operation,

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.4

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and access rule configuration sub-mode
cellular-uplink-profile <profile>
4g-usb-type <4C-usb-type>
modem-lsp <modem_lsp>
modem-country <modem-country>
usb-auto-type <usb_authentication_type>
usb-dev <usb-dev>
usb-dial <usb-dia_>
usb-lr't <usb-nit>
usb-modeswitch <usb-modeswitch>
usb-passwd <usb-passwd>
usb-tty <usb-try>
usb-type <usb-lype>
usb-user <usb-user>
modem-lsp <modem_lsp>
modem-country <modem-country>
nc... 

Description

This command provisions the cellular (3G/4G) uplink profiles on a W-IAP.

Syntax

Parameter Description RangeDefault
Configures a 3G or 4G cellular profile for a W-IAP.--
4g-usb-typo <4G-usb-typo>Configures the driver type for the 4G modem.ether-lte, pantech-lte, none-
modem-ispSpecifies the name of the ISP to connect.--
modem-countrySpecifies the country for the deployment.--
usb-typeConfigures the driver type for the 3G modem.acm, airprime, hso, option, pantech-3g, sierra-evdo, sierra-gsm,none
usb-ttySpecifies the modem tty port.— —
usb-userSpecifies the username of subscriber of the selected ISP.
no..Removes the specified configuration parameter.

Usage Guidelines

Use this command to configure a cellular uplink profile on a W-IAP and modem parameters 3G /4G upli provisioning. Instant supports the use of 3G/4G USB modems to provide Internet backhaul to an Instant network. The 3G/4G USB modems can be used to extend client connectivity to places where an Ethernet uplink cannot be configured. This enables the W-IAPs to automatically choose the available network in a specific region.

DELL W-IAP214/215 - Usage Guidelines - 1

The3G and 4G LTE USB modems can be provisioned on W-IAP3WN/3WNP and W-IAP155/155P.

Types of Modems

The following 3G modems are supported:

• USBConnect 881 (Sierra 881U)
• Quicksilver (Globetrotter ICON 322)

UM100C (UTotower)

  • NTT DoCoMo L-02A
    • ZTE WCDMA Technologies MSM (MF668?)
  • Fivespot (ZTE)
    • c-motech CNU-600
    • ZTE AC2736
    • SEC-8089 (EpiValley)
  • Nokia CS-10
    • NTT DoCoMo L-08C (LG)
    • NTT DoCoMo L-02C (LG)
    • Novatel MC545
    • Huawei E220 for Movistar in Spain
    • Huawei E180 for Movistar in Spain
    ZTE-MF820
  • Huawei E173s-1
  • Sierra 320
  • Longcheer WM72
    • U600 (3G mode)
    • Sierra USB-306 (HK CLS/1010 (HK))
    • Sierra 306/308 (Telstra (Aus))
    • Sierra 503 PCIe (Telstra (Aus))
    • Sierra 312 (Telstra (Aus))
    • Aircard USB 308 (AT&T's Shockwave)
    • Compass 597(Sierra) (Sprint)
    • U597 (Sierra) (Verizon)
    • Tstick C597(Sierra) (Telecom(NZ))
    • Ovation U727 (Novatel) (Sprint)
    • USB U727 (Novatel) (Verizon)
    • USB U760 (Novatel) (Sprint)

• ZTE MF637 (Orange in Israel)
• Huawei E180, E1692,E1762 (Optus (Aus))
• Huawei E1731 (Airtel-3G (India))
• Huawei E3765 (Vodafone (Aus))
• Huawei E3765 (T-Mobile (Germany)
• Huawei E1552 (SingTel)
• Huawei E1750 (T-Mobile (Germany))
• UGM 1831 (TMobile)
• Huawei D33HW (EMOBILE(Japan))
• Huawei GD01 (EMOBILE(Japan))
• Huawei EC150 (Reliance NetConnect+ (India))
• KDDI DATA07(Huawei) (KDDI (Japan))
• Huawei E353 (China Unicom)
• Huawei EC167 (China Telecom)
• Huawei E367 (Vodafone (UK))
• Huawei E352s-5 (T-Mobile (Germany))
• Huawei K4505 (Vodafone/SmarTone (HK))
• Huawei K4505 (Vodafone (UK))
• ZTE MF656 (Netcom (norway))
• ZTE MF636 (HK CSL/1010)
• ZTE MF633/MF636 (Telstra (Aus))
• ZTE MF637 (Orange in Israel)
• Huawei E180, E1692,E1762 (Optus (Aus))
• Huawei E1731 (Airtel-3G (India))
• Huawei E3765 (Vodafone (Aus))
• Huawei E3765 (T-Mobile (Germany)
• Huawei E1552 (SingTel)
• Huawei E1750 (T-Mobile (Germany))

DELL W-IAP214/215 - Types of Modems - 1

• Fraklin Wireless u770
• Huawei 3276s-150
MC551L
- Pantech UML295
- Pantech UML290

When UML290 runs in auto detect mode, the modem can switch from 4G network to 3G network or vice versa based on the signal strength. To configure the UML290 for the 3G network only, manually set the type to pantech-3g. To configure the UML290 for the 4G network only, manually set the 4G USB type to pantech-Ite.

Example 1

The following example configures a cellular uplink profile:

[Instant AP](config) | cellular-uplink-profile
[Instant AP](cellular-uplink-profile)# usb-type sierra-net
[Instant AP](cellular-uplink-profile)# usb-dev 0x0fads8aa
[Instant AP](cellular-uplink-profile)# usb-init 3,broadband
[Instant AP](cellular-uplink-profile)# end
[Instant AP] commit apply 

Example 2

The following example configures a cellular uplink profile for UML295 Country US and ISP Pantech:

(Instant AP)(config)↓cellular-uplink-profile
(Instant AP)(cellular-uplink-profile)↑ usb-type rndis-un1295
(Instant AP)(cellular-uplink-profile)↑ usb-dev 0x10a86064
(Instant AP)(cellular-uplink-profile)↑ usb-tty ttyACMO
(Instant AP)(cellular-uplink-profile)↑ ord
(Instant AP)↑ commit apply 

Command History

Version Description

Dell Metronohms W.F. Series instead 674 A This command is introduced

clear

clear

ap

arp

client

datapath (session-all| statistics)

Description

This command clears various user-configured values from the running configuration on a W-IAP.

Syntax

Parameter Description
apClears all W-IAP related information.
arpClears all ARP table information for a W-IAP.
Clears all information pertaining to a W-IAP client.
datapath {session-all} statistics)Clears all configuration information and statistics for datapath modules and user sessions.

Usage Guidelines

Use the clear command to clear the current information stored in the running configuration of a W-IAP.

Example

The following command clears all information related to a W-IAP:

(Instant AP)# clear ap 192.0.2.3

Command History

clear airgroup state statistics

clear airgroup state statistics

Description

This command removes the AirGroup statistics.

Usage Guidelines

Use this command to remove AirGroup details from the W-IAP database.

Example

The following command clears AirGroup statistics:

(Insten. AP) (config) * clear airgroup state statistics

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

clear-cert

clear-cert (ca|cp|server)

Description

This command clears client and server certificates from the W-IAP database.

Syntax

Parameter Description
ccClears all certificates uploaded on the W-IAP.
cpClears the captive portal server certificate uploaded on the W-IAP
serverClears all server certificates.

Usage Guidelines

Use this command to clear the certificates from the W-IAP database.

Example

The following command shows an example for clearing server certificates:

(Instant AP)# clear-cort server

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.0-4.0This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

clock set

clock set

Description

This command sets the date and time on the W-IAP system clock.

Syntax

Parameter DescriptionRange
Sets the year. Requires all 4 digits. Numeric
Sets the month. 1-12
Sets the day. 1-31
Sets the time. Specify hours, minutes, and seconds separated by spaces.Numeric

Usage Guidelines

You can configure the year, month, day, and time. Specify the time using a 24-hour clock with hours, m and seconds separated by spaces.

Example

The following example sets the clock to 21 May 2013, 1:03:52 AM:

(Instant AP)# clock set 2013 5 21 1 3 52

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0-7.7This command is introduced.

clock summer-time

clock summer-time recurring

Description

This command configures daylight saving for the time zones that support daylight saving time.

Syntax

Parameter Description Range
clock summer-time<timezone>Configures Daylight Saving time.Timezones that support daylight saving configuration
recurringIndicates the recurrences. -
Indicates the week from which the daylight saving configuration is effective.-
Indicates the day from which the daylight saving configuration applies.-
Indicates the month from which the daylight saving configuration applies.-
Indicates the hour from which the daylight saving configuration applies.1-24
Indicates the week in which the daylight saving configuration ends. -
Indicates the day on which daylight saving configuration ends. -
Indicates the month in which daylight saving configuration ends.-

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

clock timezone

clock timezone no...

Description

This command sets the timezone on a W-IAP.

Syntax

Parameter Description Range
clock timezoneConfigures the required timezone. All supportedtimezones
Specifies the hours offset from the Universal Time Clock (UTC).-
Specifies the hours offset from the Universal Time Clock (UTC).-
no...Removes the timezone configuration. -

Usage Guidelines

Use this command to set the timezone on a W-IAP.

Example

The following example configures the PST timezone:

(Instant AP) (config) | clock timezone PST - 6.0 (Instant AP) (config) # end (Instant AP) || commit apply

Command History

commit

commit {apply [no-save] | revert}

Description

This command allows you to commit configuration changes performed during a user session. You can also revert the changes that are already committed.

Syntax

Parameter Description
applyApplies and saves the W-IAP configuration changes.
no-saveApplies the configuration changes to the cluster, but does not save the configuration. To save the configuration, run the write memory or commit apply command.
revertReverts the changes committed to the current configuration of a W-IAP.

Usage Guidelines

Each command processed by the Virtual Controller is applied on all the slave W-IAPs in a cluster. The cf configured in a CLI session are saved in the CLI context. The CLI does not support the configuration dat exceeding the 4K buffer size in a CLI session: therefore, Dell recommends that you configure fewer chan a time and apply the changes at regular intervals.

To apply and save the configuration changes, use the commit apply command. To apply the configuration changes without saving the configuration, use the commit apply no-save command.

Example

The following command allows you to commit the configuration changes:

(Instant AP) # commit apply

The following command reverts the already committed changes.

configure terminal

configure terminal

Description

This command allows you to enter configuration commands.

Syntax

No parameters.

Usage Guidelines

Upon entering this command, the enable mode prompt changes to:

(Instant AP) (config)#

To return to EXEC mode, enter Ctrl-Z, end or exit.

Example

The following command allows you to enter configuration commands:

(Instant AP) # configure terminal

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode.

console

console

enable

disable

Description

This command enables console access to a W-IAP through the serial port.

Syntax

Command/Parameter Description
consoleAllows you to enter the console configuration mode.
enableEnables console access to the W-IAP.
disableDisables console access to the W-IAP.

Usage Guidelines

Use this command to enable or disable access to the W-IAP console and thus allow users to configure \ settings or debug system errors. By default, the console access to the W-IAP is enabled.

Example

The following example disables console access to the W-IAP:

(Instant AP) (config)# console

(Instant AP) (console) # disable

(Instant AP) {console}# end

(Instant AP)# commit apply

Command History

Version Description

content-filtering

content-filtering no...

Description

This command enables content filtering feature. When content filtering is enabled on an SSID, all DNS re to non-corporate domains on this wireless network are sent to OpenDNS.

Syntax

Command/ParameterDescription
content-filteringEnables content filtering.
noRemoves the configuration.

Usage Guidelines

Use this command to enable content filter. With content filter feature enabled, you can:

  • Prevent known malware hosts from accessing your wireless network.
  • Improve employee productivity by limiting access to certain websites.
  • Reduce bandwidth consumption significantly.

You can enable content filtering on an SSID. When enabled, all DNS requests to non-corporate domains SSID are sent to the open DNS server.

Example

The following example enables content filtering:

(Instant AP)# content-filtering (Instant AP)# end (Instant AP)# commit apply

Command History

convert-aos-ap

convert-aos-ap

Description

This command allows you to provision a W-IAP as a Campus AP or Remote AP in a controller-based net as a standalone AP.

Syntax

Parameter Description Range
Provisions the W-IAP as remote AP or campus AP in a controller-based network.W-IAP, CAP.
Allows you to specify the IP address of the controller to which the Remote AP or Campus AP will be connected.

Usage Guidelines

Before converting a W-IAP, ensure that both the W-IAP and controller are configured to operate in the s regulatory domain. A W-IAP can be converted to a Campus AP and Remote AP only if the controller is r ArubaOS 6.1.4 or later.

Example

The following command allows you to convert a W-IAP to a remote AP:

(Instant AP)# convert-aos-ap W-IAP 192.0.2.5

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.

copy

copy {config tftp |core-file tftp | flash tftp | tftp {cpserver cert format [pl2|pen] | portal logo | system {lxca [format [der|pen]] lxcert | format [pl2|pen] | config|flash);}

Description

This command copies files to and from the W-IAP.

Syntax

Parameter Description
config Copies a configuration file to the TFTP server.
core-file Copies a core file to the TFTP server.
flash Copies a file from flash to the TFTP server or to flash from a TFTP server.
tftp Copies files and certificates to the W-IAP database from a TFTP server.
Indicates the name of the file to be copied.
cpservercertCopies internal captive portal server certificate.
portallogoCopies customized logo for the internal captive portal server.
systemCopies the file to the system partition.
1xcaCopies the CA certificate used for 802.1X authentication from the TFTP server.

Example

The following example copies a configuration file to the TFTP server:

(Instant AP)# copy config tftp 10.0.0.1 filename.cfg

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

deny-inter-user-bridging

dery-inter-user-bridging no...

Description

This command disables bridging traffic between two clients of a W-IAP on the same VLAN. Bridging traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

Parameter Description
deny-inter-user-bridgingPrevents the inter-user bridging.
no...Removes the configuration.

Usage Guidelines

Use this command if you have security and traffic management policies defined for upstream devices.

Example

The following command disables inter-user bridging:

(Instant AP) (config)# deny-inter-user-bridging (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

deny-local-routing

dery-local-routing no...

Description

This command disables routing traffic between two clients of a W-IAP on different VLANs. Routing traffic between the clients will be sent to the upstream device to make the forwarding decision.

Syntax

Parameter Description
deny-local-routingDisables local routing of traffic.
no...Removes the configuration.

Usage Guidelines

Use this command to prevent the local routing of traffic if you have security and traffic management po defined for upstream devices.

Example

The following command disables local routing:

(Instant AP) (config) # deny-local-routing

(Instant AP) (config)# end

(Instant AP)† commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

device-id

device-10

Description

This command assigns an ID for the AP device.

Syntax

Parameter Description
device-id

Usage Guidelines

Use this command to configure a device identification.

Example

The following example configures a device ID:

(Instant AP)(config)# device-ID Device1

(Instant AP) (config) # end

(Instant AP) || commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode

disable-prov-ssid

disable-prov-said no...

Description

This command disables the default provisioning SSID enabled in the W-IAP factory default settings.

Usage Guidelines

The default provisioning SSID is used during the initial configuration of the W-IAP if the automatic provis of the W-IAP falls and if W-AirWave is not reachable.

Example

The following example disables the default provisioning SSID:

(Instant AP)# disable-prov-ssid

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

disconnect-user

disconnect-user {|all|mac | network }

Description

This command disconnects the clients from a W-IAP.

Syntax

Parameter Description
Allows you to disconnect a client by specifying the IP address of the client.
AllDisconnects all users associated with a W-IAP.
macAllows you to disconnect a client by specifying the MAC address of the client.
networkAllows you to disconnect the clients connected to a specific network.

Example

The following example disconnects all clients associated with a W-IAP:

(Instant AP) | disconnect-user

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode

download-cert

download-cert (ca|cp|server)

Description

This command allows you to download the client, authentication server, and captive portal server certificate from an FTP or TFTP server, or by using an HTTP URL.

Syntax

Parameter Description
caDownloads client certificates.
cpDownloads captive portal server certificates.
serverDownloads Server certificates.
Allows you to specify the FTP, TFTP, or HTTP URL.

Usage Guidelines

Use this command to download certificates.

Example

The following command shows an example for downloading CA client certificates:

(Instant AP)# download-cost ca ftp://192.0.2.7

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is modified.

dpi

dpi no...

Description

This command enables visualization of traffic from wired and wireless clients associated with a W-IAP.

Syntax

Parameter Description
dpiEnables AppRF visualization.
no...Removes the configuration.

Usage Guidelines

Use this command to enable AppRF visibility for wired and wireless clients associated with a W-IAP. AppF supports an application and web-filtering service that allows creating firewall policies based on types of application. AppRF includes the following capabilities:

- Access control, QoS, and bandwidth contract rules based on application and application categories.

- Content filters based on web categories and reputation scores (security ratings).

For more information access rule configuration and web-filtering options, see Dell Networking W-Series Instant 6.4.2.0-4.1.1 User Guide and the wlan access-rule command page.

The application and application category based access rule configuration and visualization are not supported on W-IAP104/105, W-IAP134/135, and W-IAP3WN/3WNP platforms. Only the web category charts are displayed for these W-IAP models.

DELL W-IAP214/215 - Usage Guidelines - 1

Example

The following command configures DPI support:

(Instant AP) (config)# dpi

dynamic-cpu-mgmt

dynamic-cpu-mqmt (auto| disable| enable)

Description

This command enables or disables the dynamic CPU management feature, to manage resources across different functions performed by a W-IAP.

Syntax

Parameter Description
autoConfigures the W-IAP to automatically enable or disable CPU management feature during run-time. When configured, the W-IAP determines the need for enabling or disabling CPU management, based on the real-time load calculations taking into account all different functions that the CPU needs to perform.The auto option is the default and recommended setting.
disableDisables CPU management on all APs, typically for small networks. This setting protects the user experience.
enableEnables the CPU management feature. When configured, the client and network management functions are protected. This setting helps in large networks with high client density.

Usage Guidelines

Use this command to enable or disable resource management across different functions performed by a IAP.

Example

The following example enables the automatic enabling or disabling of CPU management:

(Instant AP) (config)# dynamic-cpu-mant auto

dynamic-radius-proxy

dynamic-radius-proxy no...

Description

This command enables the use of IP Address of the Virtual Controller for communication with external F servers.

Syntax

Command/Parameter Description
dynamic-radius-proxyEnables dynamic RADIUS proxy feature to allow the Virtual Controller network to use the IP address of the Virtual Controller when communicating with the external RADIUS servers.
no...Removes the configuration.

Usage Guidelines

Ensure that you set the Virtual Controller IP address as a NAS client in the RADIUS server when Dynami RADIUS proxy is enabled.

Example

The following example enables the dynamic RADIUS proxy feature:

(Instant AP)(config)# dynamic-radius-proxy

(Instant AP) (config) end

(Instant AP)# commit apply

Command History

Version Description

enet-vlan

enet-vlan

no...

Description

This command configures a VLAN for Ethernet connections.

Syntax

Parameter DescriptionRange Default
cnet-vlanConfigures VLAN for the upstream switch to 0-4093.1 which the AP is connected.
no...Removes the configuration.--

Usage Guidelines

Use this command to configure VLAN settings for upstream switch to which the AP is connected. By default, the value is set to 1. The VLAN setting configured by this command is used for restricting the AP from sending out tagged frames to clients connected on the SSID that has the same VLAN as the native VLAN of the upstream switch, to which the W-IAP is connected.

Example

The following example configures a non-default VLAN value for the Ethernet ports:

(Instant AP) (config)# enet-vlan 200

(Instant AP) (config)# end

(Instant AP) # commit apply

Command History

VersionDescription

enet0-bridging

enet0-br'dq'ng

Description

This command allows you to use all ports on the APs as downlink ports.

Usage Guidelines

Use this command for W-IAP models that have only one Ethernet port enabled. When Eth0 bridging is configured, ensure that the uplink for each W-IAP is mesh link, Wi-Fi, or 3G/4G.

Example

The following command enables Eth0 bridging:

(Instant AP)# enet0-bridging

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

enet0-port-profile

enet0-port-profile

Description

This command assigns a wired profile to the Ethernet 0 port on a W-IAP.

Syntax

Parameter Description
enet0-port-profileAssigns a wired profile to the Ethernet 0 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 0 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 0 port:

[Instant AP] (config)] enet0-port-profile <name>
[Instant AP] (config)] end
[Instant AP]# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

enet1-port-profile

enet1-port-profile

Description

This command assigns a wired profile to the Ethernet 1 port on a W-IAP.

Syntax

Parameter Description
enet1-port-profileAssigns a wired profile to the Ethernet 1 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 1 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 1 port:

(Istant AP)(config) enetl-port-profile <name>
(Istant AP)(config)# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

enet2-port-profile

enet2-port-profile

Description

This command assigns a wired profile to the Ethernet 2 port on a W-IAP.

Syntax

Parameter Description
enet2-port-profileAssigns a wired profile to the Ethernet 2 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 2 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 2 port:

[Instant AP] (config)] enet2-port-profile <name>
[Instant AP] (config)] end
[Instant AP]# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

enet3-port-profile

enet3-port-profile

Description

This command assigns a wired profile to the Ethernet 3 port on a W-IAP.

Syntax

Parameter Description
enet3-port-profileAssigns a wired profile to the Ethernet 3 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 3 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 3 port:

[Instant AP] (config)] enet3-port-profile <name>
[Instant AP] (config)] end
[Instant AP]# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

enet4-port-profile

enet4-port-profile

Description

This command assigns a wired profile to the Ethernet 4 port on a W-IAP.

Syntax

Parameter Description
enet4-port-profileAssigns a wired profile to the Ethernet 4 interface port.

Usage Guidelines

Use this command to assign a wired profile to the Ethernet 4 port to activate the wired profile.

Example

The following command assigns a wired profile to the Ethernet 4 port:

[Instant AP] (config)] enet4-port-profile <name>
[Instant AP] (config)] end
[Instant AP]# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

extended-ssid

extended-ss+d no...

Description

This command enables the configuration of additional WLAN SSIDs. Extended SSID is enabled by default factory default settings of Instant APs. Disabling the extended ssid option in the factory default mode will take effect.

Syntax

Command/Parameter Description
extended-ssidEnables the users to configure additional SSIDs.
no...Removes the configuration.

Usage Guidelines

Use this command to create additional SSIDs. By default, you can create up to six WLAN SSIDs. With the Extended SSID option enabled, you can create up to 16 WLANs. The following W-IAPs support 16 WLANs

W-IAP3WNP
W-IAP134
W-IAP135

The number of SSIDs that become active on each W-IAP depends on the W-IAP platform.

Example

The following example enables the configuration of extended SSIDs:

(Instant AP) (config) | extended-asid
(Instant AP) {config} # end
(Instant AP)# commit apply

factory-ssid-enable

factory-ssid-enable

Description

This command resets the W-IAP to use the factory configuration.

Syntax

Parameter Description
factory-asid-enableEnables factory SSID configuration.

Usage Guidelines

Use this command to reset a W-IAP to use the factory default SSID.

Example

The following example enables factory default configuration:

(Instant AP)(config)# factory-ssid-enable

(Instant AP) (config) | end

(Instant AP) commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode

firewall-external-enforcement

firewall-external-enforcement pan

disable

enable ip

port

user

no...

Description

This command configures external firewall details such as Palo Alto Networks (PAN) firewall to enable integration with the W-IAP.

Syntax

Parameter Description RangeDefault
firewall-external-enforcement panPAN firewall configuration sub-mode.--
disableDisables PAN firewall. - -
enableEnables PAN firewall. - -
ipConfigures PAN firewall IP address on the W-IAP--
portConfigures a port for the PAN firewall1-65535 443
userConfigures administrator user credentials of PAN firewall on a W-IAP.--
no...Removes the specified configuration parameter.--

(Irstant AP) (firewall-external-enforcement pan) | user admin1 admin

(Instant AP) {firewall-external-enforcement pan} # end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1- This command is introduced.4.0

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and firewall-external-enforcement sub-mode.

g-channel

q-channel

Description

This command configures 2.4 GHz radio channels for a specific W-IAP.

Syntax

Parameter Description Range
Configures the specified 2.4 GHz channel.The valid channels for a band are determined by the AP regulatory domain.
Configures the specified transmission power valuesD-127 dBm

Usage Guidelines

Use this command to configure radio channels for the 2.4 GHz band for a specific W-IAP.

Example

The following example configures the 2.4 GHz radio channel:

(Irphant AP) | q-channe 11 18

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

g-external-antenna

q-external-antenna

Description

This command configures external antenna connectors for a W-IAP.

Syntax

Parameter Description Range Default
Configures the antenna gain. You can configure gain value in dBi for the following types of antenna: Dipole/Omni Panel -12 Sector - 12Diploe/Omni - 6Panel -12Sector - 12-

Usage Guidelines

If your W-IAP has external antenna connectors, you need to configure the transmit power of the system. configuration must ensure that the system's Equivalent Isotropically Radiated Power (EIRP) is in compliance with the limit specified by the regulatory authority of the country in which the W-IAP is deployed. You can measure or calculate additional attenuation between the device and antenna before configuring the anter gain. To know if your AP device supports external antenna connectors, see the Install Guide that is shipped along with the AP device.

EIRP and Antenna Gain

The following formula can be used to calculate the EIRP limit related RF power based on selected antenna (antenna gain) and feeder (Coaxial Cable loss):

EIRP = Tx RF Power (dBm)+GA (dB) - FL (dB)

The following table describes this formula:

(Instant AP) || q-external-antenna 12

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0.3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode.

gre per-ap-tunnel

qre pex-ap-tunnel

no...

Description

This command configures a generic routing encapsulation (GRE) tunnel from each W-IAP to the VPN/GRE Endpoint rather than the tunnels created just from the Virtual Controller.

Syntax

Parameter Description
gre per-ap-tunnelCreates a GRE tunnel from the W-IAP to the VPN/GRE endpoint.
no...Removes the configuration.

Usage Guidelines

Use this command to allow the traffic to be sent to the corporate network through a Layer-2 GRE tunnel the W-IAP itself. When a GRE tunnel per W-IAP is created, the traffic need not be forwarded through the Controller.

Example

The following example creates a GRE tunnel for the W-IAP:

(Instant AP) (config)# gre per-ap-tunnel

(Instant AP)(config)# end

(Instant AP) # commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0This command is introduced.

gre primary

qre primary

no...

Description

This command configures a host for the primary VPN/GRE endpoint.

Syntax

Parameter Description
gre primarySpecifies the fully qualified domain name (FQDN) of the primary host.
no...Removes the configuration.

Usage Guidelines

Use this command to configure the primary VPN/GRE host.

Example

The following example configures a GRE primary host:

(Instant AP)(config)# gre primary

(Instant AP) (config)# end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

gre type

qre type

Description

This command configures a GRE protocol number as GRE type.

Syntax

Parameter Description Range Default
gre typeConfigures the protocol number or IP address for GRE type16-bit protocol number0

Usage Guidelines

Use this command to specify GRE type. The 16-bit protocol number uniquely identifies a Layer-2 tunnel. W-IAPs or controllers at both endpoints of the tunnel must be configured with the same protocol number

Example

The following example configures the GRE type:

(Instant AP)(config)#gre type 0

(Irratant AP) (config) | end

(Instant AP)# commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

help

help

Description

This command displays help for the CLI.

Usage Guidelines

This command displays keyboard editing commands that allow you to make corrections or changes to the command without retyping.

You can also enter the question mark (?) to get various types of command help:

  • When typed at the beginning of a line, the question mark lists all commands available in the current mode.
  • When typed at the end of a command or abbreviation, the question mark lists possible commands that match.
  • When typed in place of a parameter, the question mark lists available options.

Example

The following example shows the output of the help command.

HRLP:
Special keys:
BS .... delete previous character
Ctrl-A .... go to beginning of line
Ctrl-B .... go to end of line
Ctrl-F .... go forward one character
Ctrl-B .... go backward one character
Ctrl-D .... delete current character
Ctrl-U, X .. delete to beginning of line
Ctrl-K .... delete to end of line
Ctrl-W .... delete previous word
Ctrl-T .... transpose previous character
Ctrl-P .... go to previous line in history buffer
Ctrl-N .... go to next line in history buffer
Ctrl-Z .... return to root command prompt
Tab .... command-line completion 

Command History

Version Description
Doll Networking W-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

hostname

hostname

Description

This command changes the hostname of the Virtual Controller.

Syntax

Parameter Description
Configures a hostname for the Virtual Controller.

Usage Guidelines

The hostname is used as the default prompt. You can use any alphanumeric character, punctuation, or s characters. When spaces, plus symbols (+), question marks (?), or asterisks (*) are used, enclose the text quotes.

Example

The following example configures host name for a W-IAP.

(Tratant AP)# hostname TAP1

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-This command is introduced.3.3

Command Information

WJAP Platform Command Mode

hotspot anqp-3gpp-profile

hotspot anqp-3gpp-profile 3gpp-p_mnl...3gpp-p_mn6 enable no...

Description

This command configures a 3rd Generation Partnership Project (3GPP) Cellular Network for hotspots that roaming relationships with cellular operators.

Syntax

Parameter Description
hotspot anqp-3gpo-profileCreates a 3GPP profile.
3gpp-plmn1..3gpp-plmn6Configures the Public Land Mobile Networks (PLMN) value of network. The PLMN value can be specified for first, second, fourth, fifth, and sixth highest priority network.The PLMN ID consists of a 12-bit Mobile Country Code (MCC) the 12-bit Mobile Network Code (MNC).
enableActivates the configuration profile.
no...Removes the configuration

Usage Guidelines

Use this command to configure a 3GPP Cellular Network hotspot profile that defines the ANQP information element (IE) for 3G Cellular Network for hotspots. The IE defined in this profile will be sent in a Generic Advertisement Service (GAS) query response from a W-IAP in a cellular network hotspot. The 3GPP Mobil Country Code (MCC) and the 12-bit Mobile Network Code data in the IE can help the client select a 3GF network when associated with a hotspot profile and enabled on a WLAN SSID profile.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the 3GPP hotspot profile configurat sub-mode

hotspot anqp-domain-name-profile

hotapot anqp-domain-name-profile

domain-name

enable

π.0...

Description

This command defines the domain name to be sent in an Access Network Query Protocol (ANQP) inform element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description
hotspot anqp-domain-name-profileCreates a domain profile.
domain-nameConfigures a domain name of the hotspot operator.
enableEnables the configuration profile.
no...Removes the existing configuration

Usage Guidelines

Use this command to configure a domain name in the ANQP Domain Name profile. If a client uses the Advertisement Service (GAS) to post an ANQP query to a W-IAP, the W-IAP will return an ANQP Informat Element with the domain name when this profile is associated with a hotspot profile and enabled on a SSID profile.

Example

The following command defines a domain name for the ANQP domain name profile:

(Instant AP) (config) hotspot anqp-domain-name-profile domain

(Instant AP) (domain-name "domain1")# domain-name example.com

hotspot anqp-ip-addr-avail-profile

hotapot anqp-ip-addr-avail-profile

enable
ipv4-addr-avail
ipv6-addr-avail
no... 

Description

This command defines the available IP address types to be sent In an Access network Query Protocol (A information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter Description
hotapot anqp-ip-addr-avail-profileCreates an ANQP IP Address availability profile.
enableEnables the IP address availability profile.
ipv4-addr-availIndicates the availability of an IPv4 network.
ipv6-addr-availIndicates the availability of an IPv6 network.
no...Removes the existing configuration.

Usage Guidelines

Use this command to configure the IP Address availability information and IP address types which could allocated to the clients after they associate to the hotspot W-IAP.

Example

The following command configures an AP using this profile to advertise a public IPv4 network.

(Instant AP)(config)# hotspot anqp-ip-addr-avail-profile default

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the ANQP IP address availability pr configuration sub-mode

hotspot anqp-nai-realm-profile

hotapot ango-rai-realm-profile

enable

rai-none-realm

rai-realm-auth-id-1

nai-realm-auth-id-2

rai-realm-auth-value-1

rai-realm-auth-value-2

rai-realm-eap-method

rai-realm-encoding

ral-realm-name

ΓΩ...

Description

This command defines a Network Access Identifier (NAI) realm information that can be sent as an Access network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter DescriptionRange
hotspot anqp-nai-realm-profileConfigures a NAI realm hotspot profile. -
enableEnables the NAI realm profile.-
nai-home-realmSets the realm in this profile as the NAI Home Realm. -
nai-realm-auth-id-1Configures the NAI realm authentication ID.-
nai-realm-auth-id-2Use the nal-realm-auth-id-1 command to send the one of the following authentication methods for the primary NAI realm ID.
nal-realm-auth-value-1nal-realm-auth-value-2Configures a value for NAI realm authentication. Use the nal-realm-auth-value-1 command to select an authentication value for the authentication method specified by nal-realm-auth-id-1. Use thenal-realm-auth-value-2 command to select the authentication value for the authentication method specified bynai-realm-auth-id-2.-
Configures any of following types of authentication values forsim, usim. nfc-secure, hw-token, certificate, unamepassword, none, reserved, vendor-specific, pappap, mschap, mschapv2, exp-inner-eap, expanded-eap, reservedConfigures any of the following EAP methods:crypto-card— Crypto card authenticationeap-aka—EAP for UMTS Authentication and Key Agreementeap-sim—EAP for GSM Subscriber Identity Moduleseap-tls—EAP-Transport Layer Securityeap-ttls—EAP-Tunneled Transport Layer Securitygeneric-token-card—EAP Generic Token Card (EAP-GTC)identity— EAP Identity typenotification—The hotspot realm uses EAP Notification messages for authentication.one-time-password—Authentication with a single-use passwordpeap—Protected Extensible Authentication Protocolpeapmschapv2— Protected Extensible Authentication Protocol with Microsoft Challenge Handshake Authentication Protocol version 2For credential, specify the following values:simusimnfc-securehw-tokensoftokencertificatenname-passwordnonereservedvendor-specific reserved, pap chap, mschap, mschapv2, exp-inner-eap, expanded-eap, reservedcrypto-card, eap-aka, eap-sim, eap-tls, eap-ttls, generic-token-card, identity notification, one-time-password, peap, peapmschapv2
nai-realm-encodingConfigures a UTF-8 or rfc4282 formatted character string for NAI realm encoding.rfc4282, utf8
nai-realm-nameConfigures a name for the NAI realm. The realm name is— often the domain name of the service provider.
no..Removes any existing configuration.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the NAI realm profile configuration sub-mode

hotspot anqp-nwk-auth-profile

hotapot anqp-rwk-auth-profile

enable

risk-auth-type

url

F:G

Description

This command configures an ANQP network authentication profile to define authentication type being used in the hotspot network.

Syntax

Parameter DescriptionRange
hotspot anqp-rwk-auth-profileConfigures an ANQP network authentication profile.-
enableEnables the network authentication profile. -
nvk-auth-typeDefines the network Authentication type being - used by the hotspot network.
Allows you to specify any of the following values:accept-term-and-cond—When configured, the network requires the user to accept terms and conditions.NOTE: This option requires you to specify a redirection URL string as an IP address, FQDN or URL.online-enrollment—When configured, the network supports the online enrollment.http-redirect—When configured, additional information on the network is providedaccept-term-and-cond, online-enrollment, http-redirect, dns-redirect

Usage Guidelines

When the asra option is enabled in the hotspot profile associated with a WLAN SSID, the settings configured for the network authentication profile are sent in the GAS response to the client.

Example

The following command configures a network authentication profile for DNS redirection.

(Instant AP) {config} # hotspot anqp-rwk-auth-profile default
(Instant AP) {network-auth "default"} # rwk-auth-type dns-redirection
(Instant AP) {network-auth "default"} # uzi http://www.example.com
(Instant AP) {network-auth "default"} # enable
(Instant AP) {network-auth "default"} # end
(Instant AP) # commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the ANQP network authentication profile configuration sub-mode

hotspot anqp-roam-cons-profile

hotapot anqp-roam-cons-profile

enable

rcam-cons-01

roam-cons-oi-len

F:G

Description

This command configures the Roaming Consortium Organization Identifier (OI) information to be sent in a Access network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) que response.

Syntax

Parameter DescriptionRange
hotspot anqo-roan-cons-profileCreates roaming consortium profile.-
enableEnables the roaming consortium profile. -
roam-cons-oiSends the specified roaming consortium OI in a GAS query response. The OI must be hexadecimal number 3-5 octets in length.Hexadecimal #number 3-5 octets in length
roam-cons-oi-lenIndicates the length of the OI. The value of- the roam-cons-oi-len parameter must equal upon the number of octets of the roam- cons-oi field.0: 0 Octets in the OI (Null)3: OI length is 24-bit (3 Octets)5: OI length is 36-bit (5 Octets)
no...Removes any existing configuration.-

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the ANQP roaming consortium profile configuration sub-mode

hotspot anqp-venue-name-profile

hotapot anqp-venue-name-profile

enable

venue-group

venue-lang-code

venue-name

venue-type

no...

Description

This command defines venue information be sent in an Access network Query Protocol (ANQP) information element in a Generic Advertisement Service (GAS) query response.

Syntax

Parameter DescriptionRange Default
hotspot anqp- venue-name-profileCreates a ANQP venue name profile.--
enableEnables the ANQP venue name profile.--
vonie-groupConfigures one of the following venue groups to be advertised in the IEs from APs associated with this hotspot profile.assemblybusinesseducationalfactory-and-industrialassembly, business, educational, factory-and-industrial, institutional, mercantile, outdoor, residential, storage,unspecified
venue-lang-codeConfigures an ISO 639 language code that identifies the language used in the Venue Name field.--
venue-nameConfigures the venue name to be advertised in the ANQP IEs. If the venue name includes spaces, the name must be enclosed in quotation marks, e.g. "Midtown Shopping Center".--
venue-typeSpecifies the venue type to be advertised in the IThe complete list of Essupported venue types is described in hotspot anqp-venue-name-profile on page 107.unspecified
no...Removes any existing configuration.--

Usage Guidelines

Use this command to configure the venue group and venue type in an ANQP Venue Name profile. If a uses the Generic Advertisement Service (GAS) to post an ANQP query to an Access Point, the W-IAP will ANQP Information Elements with the values configured in this profile.

Venue Group Associated Venue Type Value
restauranttheaterbarcoffee-shopzoo-or-aquarlumemergency-cord-centerunspecified
businessdoctorbankfire-stationpolice-stationpost-officeprofessional-officeresearch-and-dev-facilityattorney-officeunspecified
educationalschool-primaryschool-secondaryuniv-or-collegeunspecified
factory-and-industrialfactoryunspecified
institutionalhospitallong-term-carerest-areatraffic-controlbus-stopkisokunspecified
residentialprivate-residencehoteldormitoryboarding-houseunspecified
storageunspecified
utility-and-miscunspecified
vehicularunspecifiedautomobile-or-truckalprlanebusferryshiptrainmotor-bike

Example

The following command defines an ANQP Venue Name profile for a shopping mall:

(Instant AP)(config)# hotspot anqp-venue-name-profile Mall1

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the ANQP venue name profile configuration sub-mode

hotspot h2qp-conn-cap-profile

hotapot h2gp-contr-cap-profile

enable
esp-port
icmp
tcp-ftp
tcp-http
tcp-pptp-vpn
tcp-ssh
tcp-tls-vpn
tcp-vo'p
udp-ike2
udp-ipsec-vpn
udp-vo'p
no... 

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) profile that advertises hotspot protocol at port capabilities.

Syntax

Parameter Description
hotspot h2qp-corn-cap-profileCreates a connection capability profile.
enableEnables the connection capability H2QP profile.
esp-portEnables the Encapsulating Security Payload (ESP) port used by IP VPNs. (port 0)
icmpIndicates that the ICMP port is enabled and available. (port 0)
tcp-ftpEnables the FTP port. (port 20)

Usage Guidelines

Use this command to configure the values to be sent in an ANQP IE to provide information about the I protocols and associated port numbers that are available and open for communication.

Example

The following example allows the H2QP connection capability profile to advertise the availability of ICMP HTTP ports.

(Instant AP)(config) # hotspot h2gp-conn-cap-profile Man1
(Instant AP)(connection-capabilities "Man")# icmp
(Instant AP)(connection-capabilities "Man")# tcp-http
(Instant AP)(connection-capabilities "Man")# enable
(Instant AP)(connection-capabilities "Man")# end
(Instant AP)# commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the H2QP connection capability profile configuration sub-mode

hotspot h2qp-oper-name-profile

hotapot h2qp-oper-name-profile

enable

op-fr-name

op-lang-code

ΓC

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) operator-friendly name profile.

Syntax

Parameter DescriptionRange Default
hotspot h2qp-oper-name-profileCreates an operator-friendly name profile. --
enableEnables the operator-friendly name profile.--
op-fr-nameConfigures an operator-friendly name to be sent devices using this profile. If the name includes quotation marks ("), include a backslash character ( ) before each quotation mark. (e.g. \"example\")by-64 alphanumeric characters-
op-lang-codeConfigures an ISO 639 language code that identifies the language used in the op-fr-name command.--
no...Removes any existing configuration.--

Usage Guidelines

Use this command to configure an operator-friendly name that can identify the operator and also provide information about the location.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the H2QP operator friendly name profile configuration sub-mode

hotspot h2qp-oper-class-profile

hotspot h2qo-oper-class-profile

enable

op-class

πο...

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) profile that defines the Operating Class to sent in the H2QP IE.

Syntax

Parameter DescriptionRange Default
hotspot h2qp-oper-class-profileCreates operating class profile. --
enableEnables the operating class profile.--
cp-classConfigures the operating class for the devices' BSS.1-255 1
no...Removes any existing configuration.--

Usage Guidelines

Use this command to configure values for the H2QP Operating Class profile that lists the channels on w the hotspot is capable of operating.

Example

The following example configures and enables a profile with the default operating class value.

Instant API (config) # hotspot b2cp-oper-class-profile Profile

                                                                                                                                                                                                    1. 99.

hotspot h2qp-wan-metrics-profile

hotapot h2qp-wan-metrics-profile

at-capacity

downlink-load

downlink-speed

enable

load-duration

sym-12x

uplink-load

uplink-speed

wan-metrics-link-status

ΓΩ...

Description

This command configures a Hotspot 2.0 Query Protocol (H2QP) profile that specifies the hotspot WAN sta and link metrics.

Syntax

Parameter Description Range Default
hotspot h2qp-wor-metrics-profileCreates a H2QP WAN metric profile --
at-capacityIndicates if the WAN Link has reached its maximum capacity. If this parameter is enabled, no additional mobile devices will be permitted to associate to the hotspot W-IAP.
downlink-loadConfigures the percentage of the WAN downlink that is currently utilized. If no value set, this parameter will show a default value 0 to indicate that the downlink speed is unknown or unspecified.1-1000 (unspecified)
uplink-loadThe percentage of the WAN uplink that is currently utilized. If no value is set, this parameter will show a default value of 0 to indicate that the downlink speed is unknown or unspecified.1-100 0(unspecified)
uplink-speedUse the uplinkparameter to indicate0-the current WAN backhaul uplink speed in Kbps,147,483,647If no value is set, this parameter will show a kbps default value of 0 to indicate that the uplink speed is unknown or unspecified.0(unspecified)
wan-metricu-link-statusDefine the status of the WAN Link by configuring one of the following values.--
Configures any of the following states:link-up— Indicates if WAN link is up.link-down— Indicates if WAN link is downlink-under-test—Indicates if WAN link is currently in a test state.link-down,link-under-test, link-upunspecified

Usage Guidelines

Use this command to configure the values be sent in an H2QP IE to provide information about access r characteristics such as link status and the capacity and speed of the WAN link to the Internet.

Examples

The following example configures a WAN metric profile:

(Instant AF) (config) ♦ hotspot h2qp-wan-metrics-profile Wani

(Instant AP) (NAN-metrics "Nanl") # at-capacity

(Instant AF) (WAN-metrics "Wan1") # downlink-load 5

Instant API (WAN-retries, "Wan1") II downlink speed 167

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and the H2QP WAN metrics profile configuration sub-mode

hotspot hs-profile

hotspot hs-profile <profile-name>
access-network-type <type>
addtl-roam-cons-ois <addtl-roam-cons-ois>
advertisement-profile {anqp-3qp0|anqp-domain-name|anqp-ip-addr-svail|anqp-nai-realm| anqp-rwk-auth|anqp-roam-cons|anqp-venue-name|h2cp-corn-cap|h2qp-oper-class|h2cp-oper-name|h2qp-wan-metrics} <profile-name>
advert'sement-protocol <protocol>
asra
comoback-mode
enable
gas-comoback-delay <delay>
group-frame-block
hessid <id>
internet
no
p2p-cross-connect
p2p-dev-mgmt
pams-bi
query-response-length-limit <len>
roam-cons-len-1 0 3|5
roam-cons-len-2 0 3|5
roam-cons-len-3 0 3|5
roam-cons-oi-1 <roam-cons-oi-1>
roam-cons-oi-2 <roam-cons-oi-1>
roam-cons-oi-3 <roam-cons-oi-1>
venue-group <venue-group>
venue-type <venue-type> 

Description

This command configures a hotspot profile for an 802.11u public access service provider.

Syntax

Parameter DescriptionRange Default
access-network-type <type>Configures any of the following access network (802.11v, network)The corresponding integer value for this network type is 1.chargeable-public— This network provides access to the Internet based on payment. For example, a subscription-based Internet access in a coffee shop or a hotel offering chargeable in-room Internet access service. The corresponding integer value for this network type is 2.free-public—This network is accessible to all without any charges applied. For example, a hotspot in airport or other public places that provide Internet access with no additional cost. The corresponding integer value for this network type is 3.personal-device—This network is accessible for personal devices. For example, a laptop or camera configured with a printer for the purpose of printing. The corresponding integer value for this network type is 4.emergency-services—Thisprivate, private-chargeable- public
addtl-roam-cons-aisConfigures the number of additional roaming consortium Organization Identifiers (Ols) advertised by the AP. This feature supports up to three additional Ols, which are defined using the roam-cons-oi-1, roam-cons-oi-2 and roam-cons-oi-3 parameters.--
advertisement-profile(angp-3gpp|angp-domain-nameangp-ip-addz-available|angp-nai-realm|angp-nwk-auth|angp-roam-cons|angp-venue-name|h2qp-conn-cap|h2qp-oper-class|h2qp-oper-name|h2qp-wan-metrics)Associates an advertisement profile with the hotspot profile. You can associate any of the following advertisement profiles:anqp-3gppangp-domain-nameangp-ip-addr-availableangp-nai-realmangp-nwk-authangp-roam-consangp-venue-nameh2qp-conn-caph2qp-oper-classh2qp-oper-nameh2qp-wan-metrics--
Allows you to associate a specific advertisement profile to the hotspot profile.--
comeback-modeBy default, ANQP Information is obtained from a GAS Request and Response. If you enable the comeback-mode option,advertisement information is obtained using a GAS Request and Response. as well as a Comeback-Request and Comeback-Response. This option is disabled by default.--
enableEnables the hotspot profile.--
gas-comeback-delayConfigures a GAS comeback delay interval after which the client can attempt to retrieve the query response using a Comeback Request Action frame.100–2000 milliseconds500
group-frame-blockConfigures the Downstream Group Addressed Forwarding (DGAF) Disabled Mode. This feature ensures that the W-IAP does not forward downstream group-addressed frames. It is disabled by default, allowing the W-IAP to forward downstream group-addressed frames.--
hessidConfigures a homogenous ESS identifier (HESSSID)MAC address in colon-separated hexadecimal format-
pame-oiEnables the Pre-Association Message Exchange BSSID Independent (PAME-BI) bit, which is used by an AP to indicate whether the AP indicates that the Advertisement Server can return a query response that is independent of the BSSID used for the GAS Frame exchange.--
query-response-length-limitConfigures the maximum length of the Generic Advertisement Service (GAS query response. GAS enables advertisement services that allow the clients to query multiple 802.11 networks at once, while also allowing the client to learn more about a network's 802.11 infrastructure before associating.If a client transmits a GAS Query using a GAS Initial Request frame, the responding W-IAP will provide the query response (or information on how to receive the query response) in a GAS Initial Response frame.1-127 127
roam-cons-len-1Configures the length of the OI. The value of the roam-cons-len-1parameter is based upon the number of octets of the roam-cons-ol-1 field.0: Zero Octets in the OI (Null),3: OI length is 24-bit (3 Octets),5: OI leneth is 36--
roam-cons-oi-1roam-cons-oi-2roam-cons-oi-3Configures the roaming consortium OI to assign to one the service provider's top three roaming partners. This additional OI will only be sent to a client if the addtl-roam-consparameter is set to 1 or higher.NOTE:The service provider's own roaming consortium OI is configured using the hotspot anqp-roam-cons-profile command.- of-
venue-groupConfigures one of the following venue groups to be advertised the IEs from APs associated with this hotspot profile.assemblybusinesseducationalfactory-and-industrialinstitutionalmercantileoutdoorresidentialstorageunspecifiedutility-and-miscvehicularNOTE: This parameter only defines the venue type advertised in the IEs from hotspot APs. To define the venue type to be included in ANQP responses, use the hotspot anqp-venue-name-profilecommand.assembly, inbusiness, educational, factory-and-industrial, institutional, mercantile, outdoor, residential, storage, unspecified, utility-and-misc, vehicularbusiness

Usage Guidelines

Use this command to configure a hotspot profile. Hotspot 2.0 is a Wi-Fi Alliance specification based on t802.11u protocol, which allows wireless clients to discover hotspots using management frames (such as beacon, association request and association response), connect to networks, and roam between networks without additional authentication.

The Hotspot 2.0 provides the following services:

- Network discovery and selection—Allows the clients to discover suitable and available networks by advertising the access network type, roaming consortium, and venue information through the management frames. For network discovery and selection, Generic Advertisement Service (GAS) and Access Network Query Protocol (ANQP) are used.

- QOS Mapping—Provides a mapping between the network-layer QoS packet marking and over-the-air QoS frame marking based on user priority.

When a hotspot is configured in a network:

  • The clients search for available hotspots using the beacon management frame.
  • When a hotspot is found, the client sends queries to obtain information about the type of network authentication and IP address, and IP address availability using the Generic Advertisement Service (GAS) action frames.
  • Based on the response of the advertisement Server (response to the GAS Action Frames), the relevant hotspot is selected and the client attempts to associate with it.
  • Based on the authentication mode used for mobility clients, the client authenticates to access the network

• Roaming Consortium List: Defined using the hotspot anqp-roam-cons-profile command.
• NAI Realm: Defined using the hotspot anqp-nai-realm-profile command.
• Cellular Network Data: Defined using the hotspot anqp-3gpp-nwk-profile command.
• Connection Capability: Defined using the hotspot h2qp-conn-capability-profile command.
• Operator Class: Defined using the hotspot h2qp-op-cl-profile command.
- Operator Friendly Name: Defined using the hotspot h2qp-operator-friendly-name-profile command.
- WAN Metrics: Defined using the hotspot h2qp-wan-metrics-profile command.

Roaming Consortium Ols

Organization Identifiers (OIs) are assigned to service providers when they register with the IEEE registratic authority. You can specify the OI for the hotspot's service provider in the ANQP Roaming Consortium pro using the hotspot anqp-roam-cons-profile command. This Hotspot profile also allows you to define and send up to three additional roaming consortium OIs for the service provider's top three roaming partners: send this additional data to clients, you must specify the number of roaming consortium elements a client query using the addtl-roam-cons-ois <1-3> parameter, then define those elements using the following parameters:

• roam-cons-oi-1 and roam-cons-len 1
• roam-cons-oi-2 and roam-cons-len 2
• roam-cons-oi-3 and roam-cons-len 3

The configurable values for each additional OI include the Organization Identifier itself, the OI length, and venue group and venue type associated with those OIs.

Venue Types

The following list describes the different venue types for each venue group:

Table 9: Venue Types

Venue Group Associated Venue Type Value
unspecifiedThe associated numeric value is 0.
assemblyThe associated numeric value is 1.unspecified—The associated numeric value is 0.arena—The associated numeric value is 1.stadium—The associated numeric value is 2.passenger-terminal—The associated numeric value is 3.amphitheater—The associated numeric value is 4.amusement-park—The associated numeric value is 5.place-of-worship—The associated numeric value is 6.convention-center—The associated numeric value is 7.library—The associated numeric value is 8.museum—The associated numeric value is 9.restaurant—The associated numeric value is 10.theater—The associated numeric value is 11.bar—The associated numeric value is 12.coffee-shop—The associated numeric value is 13.zoo-or-aquarium—The associated numeric value is 14.emergency-cord-center—The associated numeric value is 15.
businessThe associated numeric value is 2.unspecified—The associated numeric value is 0.doctor—The associated numeric value is 1bank—The associated numeric value is 2fire-station—The associated numeric value is 3police-station—The associated numeric value is 4post-office—The associated numeric value is 6
long-term-care—The associated numeric value is 2.alc-drug-rehab—The associated numeric value is 3.group-home—The associated numeric value is 4.prison-or-jail—The associated numeric value is 5.
mercantileThe associated numeric value is 6.unspecified—The associated numeric value is 0.retail-store—The associated numeric value is 1.grocery-market—The associated numeric value is 2.auto-service-station—The associated numeric value is 3.shopping-mall—The associated numeric value is 4.gas-station—The associated numeric value is 5
residentialThe associated numeric value is 7.unspecified—The associated numeric value is 0.private-residence—The associated numeric value is 1.hotel—The associated numeric value is 3.dormitory—The associated numeric value is 4boarding-house—The associated numeric value is 5.
storageThe associated numeric value is 8.unspecified—The associated numeric value is 0.
utility-mlscThe associated numeric value is 9.unspecified—The associated numeric value is 0.
vehicularThe associated numeric value is 10unspecified—The associated numeric value is 0.automobile-or-truck—The associated numeric value is 1.airplane—The associated numeric value is 2.bus—The associated numeric value is 3.
(Instant AP) (config) | hotspot hs-profile hal
(Instant AP) (Eotspot2.0 "hs1")‡ enable
(Instant AP) (Hotspot2.0 "hs1")‡ comeback-mode
(Instant AP) (Eotspot2.0 "hs1")‡ gas-comeback-delay 10
(Instant AP) (Hotspot2.0 "hs1")‡ no asra
(Instant AP) (Hotspot2.0 "hs1")‡ no internet
(Instant AP) (Eotspot2.0 "hs1")‡ query-response-length-limit 127
(Instant AP) (Hotspot2.0 "hs1")‡ access-network-type chargeable-public
(Instant AP) (Eotspot2.0 "hs1")‡ roam-cons-len-1 3
(Instant AP) (Eotspot2.0 "hs1")‡ roam-cons-oi-1 123656
(Instant AP) (Hotspot2.0 "hs1")‡ roam-cons-len-2 3
(Instant AP) (Eotspot2.0 "hs1")‡ roam-cons-oi-2 223355
(Instant AP) (Hotspot2.0 "hs1")‡ addt1-roan-cons-ois 0
(Instant AP) (Eotspot2.0 "hs1")‡ venue-group business
(Instant AP) (Hotspot2.0 "hs1")‡ venue-type research-and-dev-facility
(Instant AP) (Eotspot2.0 "hs1")‡ pane-bi
(Instant AP) (Hotspot2.0 "hs1")‡ group-frame-block
(Instant AP) (Hotspot2.0 "hs1")‡ p2p-dev-mqmt
(Instant AP) (Hotspot2.0 "hs1")‡ p2p-cross-connect
(Instant AP) (Hotspot2.0 "hs1")‡ end
(Instant AP)# commit apply 

The following commands associate anqp-3gpp advertisement profile with a hotspot profile:

(Instant AP) (config)# hotspot hs-profile hol
(Instant AP) (Hotspot2.0"hs1")# advertisement-protocol anpp
(Instant AP) (Hotspot2.0"hs1")# advertisement-profile anqp-3gpp 3gppl
(Instant AP) (Hotspot2.0"hs1")# end
(Instant AP) # commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

iap-master

lap-master

no...

Description

This command provisions a W-IAP as a master W-IAP.

Syntax

Command/Parameter Description
iep-masterProvisions the W-IAP as a master W-IAP.
no...Removes the configuration.

Usage Guidelines

Use this command to manually provision a W-IAP as a master W-IAP.

Example

The following example provisions a master IAP:

(Instant AP)# iap-master

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

ids

ids

client-detection-level

client-protection-level

detect-adhoc-network

detect-ap-flood

detect-ap-impersonation

detect-ap-spoofing

detect-bad-wep

detect-beacon-wrong-channel

detect-block-ack-attack

detect-chopchop-attack

detect-client-flood

detect-cts-rate-anomaly

detect-disconnect-sta

detect-eap-rate-anomaly

detect-fatajack

detect-hotspotter-attack

detect-ht-40mbz-intolerance

detect-ht-greenfield

detect-invalid-addresscombination

detect-invalid-mac-oui

detect-mal formed-assoc-req

detect-malformed-frame-auth

detect-malformed-htie

detect-malformed-large-duration

detect-omerta-attack

detect-overflow-eapol-key

detect-overflow-ie

detect-power-save-dos-attack

detect-rate-anomalies

detect-rts-rate-anomaly

detect-tkip-replay-attack

detect-unencrypted-valid

detect-valid-clientmisassociation

detect-valid-ssid-misuse

detect-windows-bridge

detect-wireless-bridge

infrastructure-detection-level

infrastructure-protection-level (tune)

Syntax

Parameter Description Range Default
idsCreates an IDS policy --
client-detection-levelSets the client detection level. off, low, medium, highoff
client-protection-levelSets the client protection level. off, low, medium, highoff
detect-adhoc-networkEnables detection of adhoc networks.--
detect-ap-floodEnables detection of flooding with fake W-IAP beacons to confuse the legitimate users and to increase the amount of processing needed on client operating systems.--
detect-ap-impersonationEnables detection of AP impersonation. In AP impersonation attacks, the attacker sets up an AP that assumes the BSSID and ESSID of a valid AP. AP impersonation attacks can be done for man-in-the-middle attacks, a rogue AP attempting to bypass detection, or a honeypot attack.--
detect-ap-spoofingEnables AP Spoofing detection.--
detect-bad-wepEnables detection of WEP initialization vectors that are known to be weak and/or repeating. A primary means of cracking WEP keys is to capture 802.11 frames over an extended period of time and search for implementations that are still used by many legacy devices.--
detect-sap-rate-anomalyEnables Extensible Authentication Protocol (EAP) handshake analysis to detect an abnormal number of authentication procedures on a channel and generate an alarm when this condition is detected.--
detect-fatajackEnables detection of fatjack attacks. --
detect-hotspotter-attackEnables detection of hotspot attacks. --
detect-ht-40mhz-intoleranceEnables detection of 802.11n 40 MHz intolerance setting, which controls whether stations and APs advertising 40 MHz intolerance will be reported.--
detect-ht-greenfieldEnables detection of high throughput devices advertising greenfield preamble capability.--
detect-invalid-addresscombinationEnables detection of invalid address combinations.--
detect-invalid-mac-outEnables checking of the first three bytes of a MAC address, known as the organizationally unique identifier (OUI), assigned by the IEEE to known manufacturers. Often clients using a spoofed MAC address do not use a valid OUI and instead use a randomly generated MAC address. Enabling MAC OUI checking causes an alarm to be triggered if an unrecognized MAC address is in use.--
detect-malformed-assoc-reqEnables detection of malformed association requests.--
detect-power-save-dos-attackEnables detection of Power Save DoS attack.--
detect-rate-anomaliesEnables detection of rate anomalies. --
detect-rts-rate-anomalyEnables detection of RTS rate anomaly.--
detect-tkip-replay-attackEnables detection of TKIP replay attack.--
detect-unencrypted-validEnables detection of unencrypted valid clients.--
detect-valid-clientmisassociationEnables detection of misassociation between a valid client and an unsafe This setting can detect the following misassociation types:MisassociationToRogueAPMisassociationToExternalAPIMisassociationToHoneypotAPMisassociationToAchocAPMisassociationToHostedAP-AP.-
detect-valid-asid-miasseEnables detection of interfering or Neighbor APs using valid or protected SSIDs.--
detect-windows-bridgeEnables detection of Windows station bridging.--
detect-wireless-bridgeEnables detection of wireless bridging.--
infrastructure-detection-levelSets the infrastructure detection level.off, low, medium, highoff
infrastructure-protectionSets the infrastructure detection level.allowed to connect to an invalid AP.off, low, medium, highoff
protect-windows-bridgeEnables protection of a windows station bridging--
rogue-containmentControls Rogue APs. When rogue APs are detected, they are not automatically disabled.This option automatically shuts down rogue APs. When this option is enabled, clients attempting to associate to an AP classified as a rogue are disconnected through a denial of service attack.--
signature-airjackEnables signature matching for the AirJack frame type.--
signature-asleepEnables signature matching for the ASLEAP frame type.--
signature-deassociation-broadcastConfigures signature matching for the deassociation broadcast frame type.--
signature-deault-broadcastConfigures signature matching for the deauth broadcast frame type.--
wired-containmentControls Wired attacks. - -
wireless-containmentEnable wireless containment including Tarpit Shielding.Tarpit shielding works by steering a client to a tarpit so that the client associates with it instead of the AP that is being contained.deauth-only, none, tarpit-all-sta, tarpit-non-valid-stadeauth-only

Usage Guidelines

Use this command to configure Intrusion Detection System (IDS) detection and protection policies. The ID feature monitors the network for the presence of unauthorized W-IAPs and clients and enables you to d rogue APs, interfering APs, and other devices that can potentially disrupt network operations. It also logs information about the unauthorized W-IAPs and clients, and generates reports based on the logged information.

Wireless Intrusion Protection (WIP) offers a wide selection of intrusion detection and protection features to protect the network against wireless threats. Like most other security-related features of the Dell network WIP can be configured on the W-IAP.

You can configure the following policies:

• Infrastructure Detection Policies—Specifies the policy for detecting wireless attacks on access points
- Client Detection Policies—Specifies the policy for detecting wireless attacks on clients
• Infrastructure Protection Policies—Specifies the policy for protecting access points from wireless attacks.
- Client Protection Policies—Specifies the policy for protecting clients from wireless attacks.
- Containment Methods—Prevents unauthorized stations from connecting to your Instant network.

Each of these options contains several default levels that enable different sets of policies. An administrat customize enable or disable these options accordingly. The following levels of detection can be configured

  • Off
    Low
    Medium
    • High

Example

The following example configures detection and protection policies:

(Instant AP) (config)# ids
(Instant AP) (IDS) # infrastructure-detection-level low
(Instant AP) (IDS) || client-detection-level low
(Instant AP) (IDS) # infrastructure-protection-level low
(Instant AP) (IDS) # client-protection-level low
(Instant AP) (IDS)# wireless-containment death-only

(Istant AP) (IDS) | detect-overflow-ie
(Instant AP) (IDS) # detect-overflow-eapol-key
(Instant AP) (IDS) # detect-beacon-wrong-channel
(Instant AP) (IDS)# detect-invalid-mac-oui
(Instant AP) (IDS) # detect-valid-clientmisassociation
(Instant AP) (IDS) | detect-disconnect-sta
(Instant AP) (IDS) # detect-omerta-attack
(Instant AP) (IDS) | detect-fatajack
(Instant AP) (IDS) # detect-block-ack-attack
(Instant AP) (IPS) 4 detect-hot spetter-attack
(Instant AP) (IDS) detect-unencrypted-valid
(Instant AP) (IDS) # detect-power-save-dos-attack
(Instant AP) (TDS)† detect-eap-rate-anomaly
(Instant AP) (IDS) # detect-rate-anomalies
(Instant AP) (IDS) | detect-chopchop-attack
(Instant AP) (IDS)# detect-tkip-replay-attack
(Instant AP)(IDS)‡ signature-airjack
(Instant AP) (TDS) | signature-asleap
(Instant AP) (IDS) ≠ protect-ssid
(Instant AP) (IDS) | rogue-containment
(Instant AP) (IDS) # protect-adhoc-network
(Instant AP) (IDS) 4 protect-ap-impersonation
(Instant AP) (IDS) # protect-valid-sta
(Instant AP) (IDS) # protect-windows-bridge
(Instant AP)(IDS)† end
(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

ignore-image-check

ignore-image-check

Description

This command ignores the automatic image check feature. The automatic image check feature automatic checks for a new version of Instant on the image server, once after the AP boots up and every week th

Usage Guidelines

Use this command to disable the automatic image check feature:

Example

The following example disables the image check feature:

(Instant AP)# ignore-image-check

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1- This command is introduced.4.0

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

inactivity-ap-timeout

inactivity-ap-timeout no...

Description

This command configures the timeout interval for inactive user sessions.

Syntax

Parameter Description Range Default
inactivity-ap-timeoutConfigures the inactivity timeout interval in seconds. 1-1000 1000
no...Removes any existing configuration. --

Usage Guidelines

Use this command to configure an inactivity timeout interval for a W-IAP.

Example

The following example configures the inactivity timeout interval:

(Instant AP)(config)# inactivity-ap-timeout 180

(Instant AP) (config)# end

(Instant AP) commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

inbound-firewall

inbound-firewall

rule

{permit|deny|src-nat|dst-nat ip } []

Γ. Θ.

Description

This command configures inbound firewall rules based on the source subnet.

Syntax

Command/Parameter Description Range Default
inbound-firewallOpens the inbound firewall configuration mode.--
ruleCreates an access rule.You can create up to 128 access rules.However, it is recommended to delete any existing configuration and apply changes at regular intervals.--
Allows you to specify the source subnet IP address--
Specifies the subnet mask of the source IP address.--
Allows you to specify the destination IP address.--
Specifies the subnet mask for the destination IP address.--
match—Indicates if the rule specific matchmatch-
Specifies the ending port number until which the rule applies1-65534 -
dst-natAllows the W-IAP to perform destination NAT on packets.--
szo-natAllows the W-IAP to perform source NAT-on packets. When configured, the source IP changes to the outgoing interface IP address (implied NAT pool) or from the pool configured (manual NAT pool).-
ipSpecifies the destination NAT IP address - for the specified packets when dst-nat action is configured.-
Specifies the destination NAT port for the-specified packets when dst-nat action is configured.-
denyCreates a rule to reject the specified packets--
Allows you to specify any of the following-options:Log—Creates a log entry when this rule is triggered.Blacklist—Blacklists the client when this rule is triggered.Classify-media—Performs a packet inspection on all non-NAT traffic and marks the critical traffic.Disable-scanning—Disables ARM scanning when this rule is triggered.-

DELL W-IAP214/215 - Description - 1

For all subnets, a deny rule is created by default as the last rule. If at least one rule is configured, the rule is applied to the upstream traffic by default.

Management access to the AP is allowed irrespective of the inbound firewall rule. For more information configuring restricted management access, see restricted mgmt-access.

The inbound firewall is not applied to traffic coming through GRE tunnel.

Example

The following example configures inbound firewall rules:

(Instant AP) (config)# inbound-firewall

(Instant AP) (inbound-firewall) rule 92.0.2.1 255.255.255.255 any any match € 631 631 permit

(Instant AP) (inbound-firewall)† end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2- This command is introduced.4.1

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and inbound firewall configuration sub-mode.

internal-domains

internal-domains

domain-name

re...

Description

This command configures valid domain names for the enterprise network.

Syntax

Parameter DescriptionRange Default
internal-domainsEnables the internal-domain configuration sub-mode--
domain-nameDefines the valid domain names --
no...Removes any existing configuration --

Usage Guidelines

Use this command to configure the DNS domain names that are valid on the enterprise network. This is used for determining how the client DNS requests should be routed. When Content Filtering is enabled, the DNS request of the clients is verified and the domain names that do not match the names in the list at the open DNS server.

Example

The following example configures the internal domains for a network:

(Tratant AP) (config) internal-domains

(Instan. AF) (domain) ‡ domain-name www.example.com

(Instant AP) (domain) # end

(Instant AP)# commit apply

ip-address

ip-address

Description

This command configures an IP address for the W-IAP.

Syntax.

Parameter Description
Assigns an IP address to the W-IAP.
Specifies the subnet mask.
Specifies the gateway IP address.
Specifies the DNS server IP address.
Specifies the domain name.

Usage Guidelines

Use this command to assign a static IP address to the W-IAP.

Example

The following example configures an IP address for the W-IAP.

(Instant API) ip-address 192.0.2.0 255.255.255.0 192.0.2.3 192.0.2.2 example.com

Command History

Version Description
Del1 Networking M-Series InstantThis command is introduced.

ip dhcp

ip dhcp <dhcp_profile>
    bid <bid>
    client-count <idx>
    default-router <default_router>
    dhcp-relay
    dhcp-server <dhcp_server>
    disable-split-tunnel
    dns-server <dns_server>
    domain-name <domain-name>
    exclude-address <exclude_address>
    host <mac>
    ip-range <start_IP> <end_IP>
    lease-time <lease_time>
    option <option_type> <option_value>
    option82 alu
    reserve {first <count>| last <count>}
    server-type <server_type>
    server-vlan <idx>
    subnet <subnet>
    subnet-mask <Subnet-Mask>
    vlan-ip <VLAN_IP> mask <VLAN mask>
    no... 

Description

This command configures DHCP assignment modes and scopes for Instant network.

Syntax

Parameter Description Range Default
ip dhcpCreates a DHCP profile with a unique name.--
bidDefines the branch ID.NOTE: You can allocate multiple--
Parameter DescriptionRange Default
available in an IP address range configured for a DHCP scope and a client count of 9 is configured, only a few IP addresses (in this example, 9) from this range will be used and allocated to a branch. The W-IAP does not allow the administrators to assign the remaining IP addresses to another branch, although a lower value is configured for the client count.
default-routerDefines the IP address of the default router for the Distributed, L2 DHCP scope.--
dhcp-relayEnables the WIAPs to intercept the broadcast packets and relay DHCP requests directly to corporate network.The DHCP relay is enabled for the centralized DHCP scopes to reduce network traffic caused by the broadcasting of DHCP requests to the corporate network. With a centralized DHCP scope, the clients in the branch are in the same subnet as clients in the corporate network.Normally the DHCP request goes through the VPN tunnel and is broadcast into the corporate network. This feature allows it to succeed without requiring to broadcast and thus reduces theWhen split-tunnel is disabled, all the traffic including the corporate and Internet traffic is tunneled irrespective of the routing profile specifications. If the GRE tunnel is down and when the corporate network is not reachable, the client traffic is dropped.--
dns-server <IP-ackcrosa>Defines the DNS server IP address.--
domain-name <domain-name>Defines the domain name.--
host <mac>Allows you to specify the host MAC address.--
exclude-address<exclude_address>Defines the IP address to exclude for the Local, L3 DHCP scope. The value entered in the field determines the exclusion range of the subnet. Based on the size of the subnet, the IP addresses that come before or after the IP address value specified in this field are excluded.-
ip-range<start_IP><end_IP>Defines a range of IP addresses to use in the distributed,l2 and distributed,l3 DHCP scopes. You can configure a range of DHCP IP addresses used in the branches and the number of client addresses allowed per branch. You can also--
Parameter Description Range Default
configured client count.For Distributed, L3 mode, you can configure any discontinuous IP ranges. The configured IP range is divided into multiple IP subnets that are sufficient to accommodate the configured client count.
lease-timeDefines a lease time for the client in minutes.-720
optionDefines the type and a value for the DHCP option to use.You can configure up to eight DHCP options supported by the DHCP server and enter the option value in not exceeding 255 characters.--
option32 aluEnables the DHCP Option 82 for the Centralized,I2 DHCP scope to allow clients to send DHCP packets with the Option 82 string.--
reserve (firstlast)Reserves the first few and last few addresses in the subnet.P--
server-typeDefines any of the following DHCP assignment modes:Distributed, L2Distributed, L3distributed,I2,distributed,I3,local,local,I2,local,I3,centralized,I2,centralized,I3local
vlan-tdmaskDefines the IP address and subnet mask for vlan of the DHCP server.--
no...Removes any existing configuration.--

Usage Guidelines

Use this command to configure the DHCP address assignment for the branches connected to the corpora network through VPN. You can configure the following types of DHCP profiles.

  • Distributed, L2—In this mode, the Virtual Controller acts as the DHCP server, but the default gateway is in the data center. Based on the number of clients specified for each branch, the range of IP addresses divided. Based on the IP address range and client count configuration, the DHCP server In the Virtual Controller controls a scope that is a subset of the complete IP Address range for the subnet distribute across all the branches. This DHCP Assignment mode is used with the L2 forwarding mode.
  • Distributed, L3—In this mode, the Virtual Controller acts as the DHCP server and the default gateway. Based on the number of clients specified for each branch, the range of IP addresses is divided. Based on IP address range and client count configuration, the DHCP server in the Virtual Controller is configured a unique subnet and a corresponding scope.
  • Local—In this mode, the Virtual Controller acts as both the DHCP Server and the default gateway. The configured subnet and the corresponding DHCP scope are independent of subnets configured in other IAP clusters. The Virtual Controller assigns an IP address from a local subnet and forwards traffic to a corporate and non-corporate destinations. The network address is translated appropriately and the packet is forwarded through the IPSec tunnel or through the uplink. This DHCP assignment mode is U for the NAT forwarding mode.
  • Local, L2—in this mode, the virtual controller acts as a DHCP server with data center as the gateway. When Local, L2 DHCP scope is selected, the network address translation for client IPs is not carried out at 1 source.
  • Local, L3— In this mode, the Virtual Controller acts as a DHCP server and the gateway, and assigns an IP address from the local subnet. The W-IAP routes the packets sent by clients on its uplink. This mode not provide corporate access through the IPsec tunnel. This DHCP assignment mode is used with the forwarding mode.

(Instant AP) (DHCP Profile"corpNetwork1") domain-name www.example.com

(Instant AP) (DHCP Profile"corpNetwork1")# lease-time 1200

(Instant AF)(DUCP Profile"corpNetwork1") ip-range 192.0.1.0 192.0.1.17

(Instant AP) (DHCP Profile"corpNetwork1")# reserve first 2

(Instant AP) (DHCP Profile"corpNetworkk1")# option 176

"MCIPADD-10.72.80.34, MCPORT-1719, TFTPSRVR-10.80.0.5, L2Q-1, L2QVLAN-2, L2QAUD-5, L2QSIG-3"

(Instant AP) (DHCP Profile"corpNetwork1")# end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is Introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and IP DHCP profile configuration sub-mode.

ip dhcp pool

ip dhop poo

dns-server

domain-name

lease-time

subnet

subnet-mask

no...

Description

This command configures a DHCP pool on the Virtual Controller.

Syntax

Parameter DescriptionRange Default
dns-serverDefines the IP address of the DNS server. You can specify up to eight IP addresses as a comma separated list.-
domain-nameDefines the name of domain to which the client belongs.-
lease-timeConfigures the duration of the DHCP lease in minutes.- 720
subnetDefines IP address of the subnet. --
subnet-maskDefines the subnet mask of the IP address,--
no...Removes any existing configuration--

Usage Guidelines

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and IP DHCP configuration sub-mode.

l2tpv3 session

12tpv3 session <12tpv3_session profile>
cookie_len <len_of_cookie> value <cookie_val>
default-12-specific-sublayer
12tpv3 tunnel <12tpv3_tunnel_prof_to_associates>
tunnel-ip <local_ip_add_tunnel> mask <tunnel_mask> vlan <tunnel_mgmt_vlan>
na... 

Description

This command configures an Layer-2 Tunnel Protocol (L2TP) session profile.

Syntax

Parameter Description RangeDefault
12tpv3 sessionConfigures the session profile name.--
cookie_ IcnvalueConfigures the length and alphanumeric value for the cookie.Length: 4/8If cookie length is 4, the cookie value should have exactly 8 hexadecimal characters.If cookie length is 8, the cookie value should have exactly 16 hexadecimal charactersNot set.
default-12-specific-sublayerEnables the default I2 specific sublayer in the L2TPV3 session.
12tpv3 tunnel<12tpv3 tunnel_prof_ttoSelects the tunnel profile name where the session will be--

(Instant AP)(L2TPv3 Session Profile "test session") | tunnel-ip 1.1.1.1 mask 255.255.255.0 vlar 2 (Instant AP)(L2TPv3 Session Profile "test session") | end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

Command Information

W-IAP Platform Command Mode
W-IAP108Configuration mode and L2TPV3 session profile configuration sub-mode.
W-IAP109
W-IAP135

l2tpv3 tunnel

12tpv3 tunnel <12tpv3 tunnel pro*1e>
    backup peer-address <peer_IF_address_backup_tunnel>
    checksum
    failover-mode <node>
    failover-retry-count <retry_count>
    failover-retry-interval <interval_in_sec>
    hello-timeout <interval_in_sec>
    local-port <local udp port>
    message-digest-type <digest_algo>
    mzu <tunnel_MTU>
    peer-port <peer_udp_port>
    primary peer-address <peer_IP_address_primary_tunnel>
    secret-key <key>
    no... 

Description

This command configures an L2TP tunnel profile.

Syntax

Parameter DescriptionRangeDefault
12tpv3 tunnelPROFILE-name>Configures the tunnel profile name and allows you to enter the L2TP tunnel sub-configuration mode.--
backup peer-addressbackup_tunnel>Assigns IP address of the remote end backup tunnel.--
checksumEnables the generation of UDP checksums in packets sent to L2TP peer IP address.the MD AVP.--
mtuConfigures a Maximum Transmission Unit (MTU) value for the tunnel.1-65535 1460
peer-portAssigns a UDP server port to the remote end.1-65535 1701
primary peer-addressAssigns IP address of the remote end tunnel.--
secret-keyConfigures a shared key to use for message digest.--

Usage Guidelines

Use this command tunnel data or traffic to L2TP Network Server (LNS).

Example

The following example configures the L2TPv3 tunnel:

(Instant AP) (config)# _2tpv3 tunnel test_tunnel
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# primary peer-address 10.0.0.65
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# backup peer-address 10.0.0.63
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# fallover-mode non-preemptive
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# fallover-retry-court 5
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# fallover-retry-interval 89
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# hello-timeout 150
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# mtu 1570
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# peer-port 3000
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# secret-key test223
(Instant AP) (L2TPv3 Tunnel Profile "test_tunnel")# end
(Instant AP) # commit apply 

13-mobility

13-mobility

home-agent-load-balancing

virtual-controller

subnet

EC, .

Description

This command configures Layer-3 mobility on a W-IAP.

Syntax

Parameter DescriptionRange Default
13-mobilityEnables Layer-3 mobility configuration sub-mode.--
home-agent-load-balancingEnables home agent load balancing.When enabled, the Virtual Controller assigns the home AP for roamed clients by using a round robin policy. With this policy, the load for the APs acting as Home Agents for roamed clients is uniformly distributed across the W-IAP cluster.- Disabled
virtual-controllerAdds the IP address of a Virtual Controller to the mobility domain.In a typical deployment scenario, all the APs are configured in one subnet and all the clients in another subnet.You can also deploy APs across different subnets, In which case the APs in each subnet will form a cluster with its own Virtual Controller IP address. To allow clients to-

Usage Guidelines

Use this command to configure layer-3 mobility domains on a W-IAP.

Example

The following example configures L3-mobility:

(Instant AP) {config} # 13-mobility
(Instant AP) {L3-mobility} home-agent-load-balancing
(Instant AP) {L3-mobility} # virtual-controller 192.0.2.1
(Instant AP) {L3-mobility} subnet 192.0.2.2 255.255.255.0 + 192.0.2.1
(Instant AP) {L3-mobility} # end
(Instant AP) # commit apply 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and L3 mobility configuration sub-mode

led-off

led-off

no...

Description

This command disables LED display on a W-IAP.

Syntax

Command/Parameter Description
led-offDisables LED display.
no...Re-enables LED display.

Usage Guidelines

Use this command to disable the LED display.

Example

The following example disables LED display on a W-IAP:

(Instant AP) (config)# led-off

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

logout

logout

Description

This command logs you out of the current CLI session.

Usage Guidelines

Use this command to log out of the current CLI session and return to the user login prompt.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

mesh

mesh

no...

Description

This command sets up mesh network on a W-IAP.

Syntax

Parameter Description
meshEnables mesh network on the W-IAP.
no...Removes the configuration.

Usage Guidelines

Use this command to set up mesh network on a W-IAP. Mesh network requires at least one valid uplink or 3G) connection. Any provisioned W-IAP that has a valid uplink (wired or 3G) functions as a mesh port the W-IAP without an Ethernet link functions as a mesh point. The mesh portal can also act as a Virtual Controller. A Mesh portal (MPP) uses its uplink connection to reach the Virtual Controller, a mesh point, establishes an all wireless path to the mesh portal. Mesh portals and mesh points are also known as m nodes, a generic term used to describe W-IAPs configured for mesh.

Mesh W-IAPs detect the environment when they boot up, locate and associate with their nearest neighbor determine the best path to the mesh portal.

Instant mesh functionality is supported only on dual radio W-IAPs only. On dual-radio W-IAPs, the 5 GHz is always used for both mesh-backhaul and client traffic, while the 2.4 GHz radio is always used for client traffic.

DELL W-IAP214/215 - Usage Guidelines - 1

Mesh service is automatically enabled on 802.11a band for dual-radio W-IAP only, and this is not configur

The mesh network must be provisioned for the first time by plugging into the wired network. After that,

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

mgmt-accounting

ngmt-accounting command all no...

Description

This command is used to enable accounting privileges on TACACS+ servers for management users.

Syntax

Parameter Description
ngmt-accounting command allConfigures TACACS+ servers to enable accounting for management users.
no...Removes the configuration.

Usage Guidelines

Use this command to record the user name of the management users and the respective IP address set the request to account for the usage of the authorized network services.

Example

The following example configures a TACACS+ server for management accounting

(Instant Access Point)(config)↑ mgmt-accounting command all tacacs1

(Instant Access Point) (config) | end

(Instant Access Point) # commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2- This command is introduced.4.1

mgmt-auth-server

ngmt-auth-server no...

Description

This command configures authentication servers for management user interface of the Virtual Controller.

Syntax

Parameter Description
mgal-auth-serverConfigures a server for management user authentication.
no...Removes the configuration.

Usage Guidelines

Use this command to configure a management authentication server for administrator users of a Virtual Controller.

Example

The following example configures an authentication server for the management user interface:

(Instant AP) (config)# mgmt-auth-server serverl

(Instant AP) (config) | end

(Instant AP) || commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

mgmt-auth-server-load-balancing

ngmt-auth-server-load-balancing no...

Description

This command enables load balancing when two authentication servers are configured for management u authentication.

Syntax

Parameter Description
mgmt-auto-server-load-balancingEnables load balancing between the primary and the backup authentication servers
no...Removes the configuration.

Usage Guidelines

Use this command to enable load-balancing when two servers are configured.

Example

The following example enables load-balancing between two authentication servers.

(Instant AP) (config)# nqmt-auth-server-load-balancing

(Instant AP) (config) | end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

mgmt-auth-server-local-backup

ngmt-auth-server-local-backup no...

Description

Configures a secondary internal authentication server that will validate the management interface user credentials at runtime.

Syntax

Parameter Description
mqnt-auth-server-local-backupConfigures a backup internal server for management user authentication.When enabled, the authentication switches to Internal if there is response from the RADIUS server (RADIUS server timeout).
no...Removes the configuration.

Usage Guidelines

Use this command to configure a backup authentication server for the Virtual Controller management interface.

Example

The following example configures a backup internal authentication server:

(Instant AP)(config)# mgat-auth-server-local-backup

(Instant AP) (config)# end

(Instant AP)# commit apply

Command History

mgmt-user

ngmt-user [] []

Description

This command configures user credentials for access to the Virtual Controller Management User Interface

Syntax

Parameter Description
mgmt-userConfigures administrator credentials.
Creates a User name for the administrator user.
Creates a password for the administrator user.
Indicates the type of the user. For example, users with read-only privio or the guest management user.

Usage Guidelines

Use this command to configure administrator credentials to access and configure the W-IAP.

Example

The following example configures administrator login credentials for the W-IAP management interface:

(Instant AP)(config)# mgmt-user User1 Password123 guest-mgmt

(Instant AP) {config} # end

(Instant AP)# commit apply

Command History

Version Description

Dell Networking W-Series Instant 6.3.1. This command is modified

name

name

Description

This command configures a unique name for the W-IAP.

Syntax

Parameter Description
nameConfigures a name for the W-IAP or the Virtual Controller.

Usage Guidelines

Use this command to configure a name for the W-IAP:

Example

The following example configures a name for the W-IAP:

(Instant AP)# hostname

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

ntp-server

ntp-server

no...

Description

This command configures NTP server for a W-IAP.

Syntax

Parameter Description Default
http-serverConfigures the IP address or the URL (domain name) the NTP server.pbol.ntp.org
noRemoves the configuration -

Usage Guidelines

The Network Time Protocol (NTP) helps obtain the precise time from a server and regulate the local tim each network element. If NTP server is not configured in the Instant network, a W-IAP reboot may lead variation in time data.

Example

The following command configures an NTP server for a W-IAP:

(Instant AP) (config)# nlp-server

(Instant AP) (config) | end

(Instant AP)# commit apply

Command History

Version Description

Dell Networking W-Series Instant 6.2.1.0- This command is introduced.

..

opendns

opendra no...

Description

This command configures OpenDNS credentials for filtering content and to create Internet access policies allow or deny user access to websites based on website categories and security ratings.

Syntax

Parameter Description
opendnsConfigures user credentials to enable access to OpenDNS to provide enterprise-level content filtering.
Configures user name to access OpenDNS.
Configures password to access OpenDNS.
no...Removes the configuration.

Usage Guidelines

Use this command to configure OpenDNS credentials to allow Instant to filter content at the enterprise-

Example

The following example configures OpenDNS credentials:

(Instant AP) (config) | opendns <username

(Instant AP) (config)# end

(Irritant AP) || commit apply

Command History

Version Description

organization

organization no...

Description

This command configures an organization string for W-IAPs managed or monitored by the W-AirWave Management console.

Syntax

Parameter Description Range
organizationSpecifies the name of your organization.You can use any of the following strings:AMP Role— "Org Admin" (Initially disabled)AMP User— "Org Admin" (assigned to the role "Org Admin")Folder— "Org" (under the Top folder in AMP)Configuration Group— "Org" You can also assign additional strings to create a hierarchy of sub folders under the folder named "Org": For example:subfolder1 for a folder under the "Org" foldersubfolder2 for a folder under subfolder1
no...Removes the configuration settings. —

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

ping

ping

Description

This command sends ICMP echo packets to the specified IP address.

Syntax

Parameter Description
Displays the IP address of the host.

Usage Guidelines

You can send up to five ICMP echo packets to a specified IP address. The W-IAP times out after two se

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

oppoe-up'irk-profile

pppoe-username

pppoe-passwd

pppoe-svname

pppoe-chapsecret

pppoe-unnumbered-local-13-dhcp-profile

no...

Description

Use this command to configure PPPoE uplink profile.

Syntax

Parameter Description
pppos-uplink-profileCreates an uplink profile and enables the PPPoE uplink profile configuration mode.
pppos-usernameConfigures a user name to allow a user to log into the DSL network.
pppos-passwordConfigures a password for the user to log into the DSL network.
pppos-svnameSpecifies the PPPoE service provided by your service provider.
pppos-chapsecretConfigures a secret key used for Challenge Handshake Authentication Protocol (CHAP) authentication.You can use a maximum of 34 characters for the CHAP secret k
pppos-unnumbered-local-13-dhcp-profileConfigures the Local, L3 DHCP gateway IP address as the local I address of the PPPoE interface. When configured, the local interfa acts as an unnumbered PPPoE interface and allows the entire LoL3 DHCP subnet to be allocated to clients.
no...Removes the configuration.

Command History

Version Description
Dell Networking W-Series Instant 6.4.2.0-4.1.1This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and PPPoE uplink profile configuration sub-mode.

proxy

proxy (exception | server }

Description

This command configures HTTP proxy settings.

Syntax

Parameter Description
exceptionSets the IP address or the domain name of the host to be added under the exception list.
serverSets the HTTP proxy server's IP address or domain name and the port number.

Usage Guidelines

This command configures the HTTP proxy settings in a W-IAP to download the image from the cloud set

Example

The following example configures an HTTP proxy settings in a W-IAP:

(Instant AP)(config) proxy exception 192.0.2.2

(Instant AP)(config)# proxy server 192.0.2.1 8080

(Instant AP) (config) | end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.4.0- This command is introduced.

reload

reload

Description

This command performs a reboot of the Virtual Controller.

Syntax

Parameter Description
Reloads all W-IAPs in a cluster.

Usage Guidelines

Use this command to reboot a W-IAP after making configuration changes or under the guidance of Dell Networks customer support. The reload command powers down the W-IAP, making it unavailable for configuration. After the W-IAP reboots, you can access it via a local console connected to the serial port, through an SSH, Telnet, or UI session. If you need to troubleshoot the W-IAP during a reboot, use a loc console connection.

After you use the reload command, the W-IAP prompts you to confirm this action. If you have not saved configuration, the W-IAP returns the following message:

Do you want to save the configuration (y/n):

  • Enter y to save the configuration.
  • Enter n to not save the configuration.
  • Press [Enter] to exit the command without saving changes or rebooting the W-IAP.

If your configuration has already been saved, the W-IAP returns the following message:

Do you really want to reset the system(y/n):

  • Enter y to reboot the W-IAP.
  • Enter n to cancel this action.

The command will timeout if you do not enter y or n.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

remove-blacklist-client

remove-blacklist-client

Description

This command allows you to delete the clients that are blacklisted.

Syntax

Parameter Description
MAC-addressAdds the MAC address of the blacklisted client.
AP_nameAdds the access point name to which the client is connected to.
no...Removes the specified configuration parameter.

Usage Guidelines

Use this command to remove the entries for the clients that are dynamically blacklisted.

Example

The following command deletes the blacklisted W-IAP client entries:

(Instant AP) (config)# remove-blacklist-client d7:a:b2:c3:45:67 AF125

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

restrict-corp-access

restrict-corp-access

no...

Description

This command configures restricted access to the corporate network.

Syntax

Parameter Description
No...Removes the configuration.

Usage Guidelines

Use this command to configure restricted corporate to block unauthorized users from accessing the corp network. When restricted corporate access is enabled, corporate access is blocked from the uplink port c master W-IAP, including clients connected to a slave W-IAP.

Example

The following example enables restricted access to the corporate network;

(Instant AP) (config) # restrict-corp-access

(Instant AP) (config) || end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1- This command is introduced.4.0

restricted-mgmt-access

restricted-ngmt-access no...

Description

This command configures management subnet on a W-IAP.

Syntax

Parameter Description
subnetConfigures a management subnet address.
maskConfigures the subnet mask for the management subnet address.
no...Removes the configuration.

Usage Guidelines

Use this command to configure management subnets. This ensures that the W-IAP management is carried only from these subnets. When the management subnets are configured, Telnet, SSH, and UI access is restricted to these subnets only.

Example

The following example configures a management subnet;

(Instant AP) (config) # restricted-right-access 192.0.2.13 255.255.255.255

(Instant AP) {config} # end

(Instant AP)# commit apply

Command History

Version Description

rf dot11a-radio-profile

rf dotlla-radio-profile

beacon-interval

csa-count

dot1h

interference-immunity

legacy-mode

max-distance

spectrum-band

spectrum-monitor

PQ...

Description

This command configures a 5.GHz or 802.11a radio profile for a W-IAP.

Syntax

Parameter DescriptionRange Default
vf dotlla-radio-profileEnables the 5.0 GHz RF configuration sub-mode--
beacon-intervalEnter the Beacon period for the W-IAP in milliseconds.When enabled, the 802.11 beacon management frames are transmitted by the access point at the specified interval.60-500 100
csa-countConfigures the number of channel switching announcements that must be sent before switching to a new channel.This allows associated clients to recover gracefully from a channel change.Noise Immunity feature.Level 3— Level 2 settings and weak OFDM immunity. This level minimizes false detects on the radio due to interference, but may also reduce radio sensitivity. This level is recommended for environments with a high-level of interference related to 2.4 GHz appliances such as cordless phones.Level 4— Level 3 settings, and FIR immunity. At this level, the AP adjusts its sensitivity to in-band power, which can improve performance in environments with high and constant levels of noise interference.Level 5— The AP completely disables PHY error reporting, improving performance by eliminating the time the W-IAP would spend on PHY processing.NOTE: Increasing the immunity level makes the AP to lose a small amount of range.0-102
legacy-modeEnables the W-IAPs to run the radio in non- Disabled 802.11n mode.
max-distanceConfigures the maximum distance between a client and an AP or between a mesh point and a mesh portal in meters. This value is used to derive ACK and CTS timeout times.A value of 0 specifies the default settings for this parameter, where timeouts are only modified for outdoor mesh radios which use a600-1000 0

Example

The following example configures the 5 GHz radio profile:

(Instant AP) (config)# rf dotlla-radio-profile

(Instant AF) (RF dotlla Radio Profile) beacon-interval 100

(Instant AP) (RF dotlla Radio Profile)# legacy-mode

(Instant AP) (RF dotilla Radio Profile)# do.11h

(Instant AP) (RF dotilla Radio Profile) | interference-immunity 3

(Instan. AF) (RF dotilla Radio Profile)# max-distance 600

(Instant AP) (RF dotilla Radio Profile) || csa-count 2

(Instant AP) (RF dotlla Radio Profile)# spectrum-monitor

(Instant AP) (RF dotlla Radio Profile)# end

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0 This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and RF dot11a Radio Profile configuratio sub-mode

rf dot11g-radio-profile

rf dot11q-radio-profile

beacon-interval

csa-count

dot1h

interference-immunity

legacy-mode

max-distance

spectrum-moritor

r.o...

Description

This command configures a 2.4.GHz or 802.11g radio profile for a W-IAP.

Syntax

Parameter DescriptionRange Default
rf dollig-radio-profileEnables the 2.4 GHz RF configuration sub-mode--
beacon-intervalEnter the Beacon period for the W-IAP in milliseconds.When enabled, the 802.11 beacon management frames are transmitted by the access point at the specified interval.60-500 100
caa-countConfigures the number of channel switching announcements that must be sent before switching to a new channel.This allows associated clients to recover gracefully from a channel change.0-102
dotlihAllows the W-IAP to advertise its 802.11d (current information) and 802.11d (current information)Noise Immunity feature. 1 Level 3—Level 2 settings and weak OFDM immunity. This level minimizes false detects on the radio due to interference, but may also reduce radio sensitivity. This level is recommended for environments with a high-level of interference related to 2.4 GHz appliances such as cordless phones.Level 4—Level 3 settings, and FIR immunity. At this level, the AP adjusts its sensitivity to in-band power, which can improve performance in environments with high and constant levels of noise interference.Level 5—The AP completely disables PHY error reporting, improving performance by eliminating the time the W-IAP would spend on PHY processing.NOTE: Increasing the immunity level makes the AP to lose a small amount of range.- Disabled
legacy-modeEnables the W-IAPs to run the radio in non-Disabled 802.11n mode.
max-distanceConfigures the maximum distance between a client and an AP or between a mesh point and a mesh portal in meters. This value is used to derive ACK and CTS timeout times.A value of 0 specifies the default settings for this parameter, where timeouts are only modified for outdoor mesh radios which use a distance of 16km.600-1000 0

(Instant AP) (RF dotlig Radio Profile) || no legacy-node

(Instant AP) (RF dotllg Radio Profile)# do:llh

(Instant AF) (RF dotllg Radio Profile)# Interference-immunity 3

(Instant AP) (RF dotllg Radio Profile)# nax-distance 600

(Instant AP) (RF dot11g Radio Profile)# csa-count 2

(Instant AP) (RF dotllg Radio Profile) | spectrum-monitor

(Instant AP) (RF dotllg Radio Profile)# end

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and RF dot11g Radio Profile sub-mode

rf-band

rf-band {2.4| 5.0| all}

Description

This command configures the radio frequency band for a W-IAP.

Syntax

Parameter Description Range Default
rf-band (2.4| 5.0| all)Configures a radio frequency band for a W-IAP.You can configure any of the following options:2.4-For 2.4 GHz band or 802.11g configuration5-For 5 GHz and 802.11a configurationall - For a mixed configuration of 2.4GHz and 5 GHz. If you do not specify any value, by default both 5 GHz and 2.4 GHz bands are selected.2.4, 5.0, all all

Usage Guidelines

Use this command to configure RF band for a W-IAP.

Example

The following example configures the 5 GHz RF band for a W-IAP.

(Instant AP) (config)#rf-band 5.0

Command History

VersionDescription

rft

rft test profile

antenna-connectivity ip-addr dest-mac phy [alg] ht-link-quality ip-addr dest-mac phy [alg] mcs link-quality ip-addr dest-mac phy [alg] raw ip-addr dest-mac phy [alg]

Description

This command is used for RF troubleshooting.

Syntax

Parameter Description
rft test profileAllows you to run RF troubleshooting commands
antenna-connectivityAllows you to test the antenna connectivity
ht-link-qualityAllows you to test the HT link quality.
link-qualityAllows you to test the quality of the link.
rawPerforms a raw test.
ip-addrIndicates the IP address of the W-IAP that performs the test.
dest-macSpecifies MAC address of the client to be tested.
shvIndicates the 802.11 type, either a or g.
mcsIndicates the type of Modulation Coding Scheme (MCS).

Usage Guidelines

This command can run predefined test profiles for antenna connectivity, link quality, or raw testing. Run commands only under the supervision of a Dell support representative

Command Information

W-IAP Platform Command Mode

All platforms except W-IAP224/225, and W-IAP274/275

Privileged EXEC mode

routing-profile

routing-profile

route

re...

Description

This command configures a routing profile to define the corporate subnets, which must be tunneled through IPSec.

Syntax

Parameter Description
routing-profileCreates a routing profile for routing traffic into the VPN tunnel.
routeConfigures route parameters.
Configures the destination network that is reachable through the VPN tunnel.
Specify the subnet mask of network that is reachable through the VPN tunnel.
Specify the gateway to which traffic must be routed. This IP address must be the controller IP address on which the VPN connection is terminated.
no...Removes the configuration

Usage Guidelines

Use this command to configure a routing profile for VPN connections.

Example

The following example configures a routing profile:

(Instant AP) (config)# routing-profile

(instant API (Routing-profile) route 192.0.1.0.255.255.255.0.192.0.2.8

show 1xcert

show 1xcert.

Description

This command displays the details about the external server certificate, which is used by the W-IAP for authentication.

Usage Guidelines

Use this command to view information about the server certificates uploaded to a W-IAP.

Example

The following example shows the output of show 1xcert command:

Default Server Certificate:

version :3 Serial Number :01:DA:52

Issuer :C=US, O=CooTrust Inc., OU-Domain Validated SSL, CX=CooTrust DV SS L CA

Subject :0x05-11Uqe2fRPkncue7bolSVdskF8kwv3MF, C=JS, O=securelogin.dell.com, OU=GP28470348, OU=See www.geotrust.com/resources/cps (c)11, OU=Doma in Control Validated - QuickSSL(R)

Premium, CN-securelogin.del1.com

Issued On :2011-05-11 01:22:10

Expires on :2017-08-11 04:40:59

Signed Using :SHA1

RSA Key size :2048 bits

The output of this command describes details such as the version, serial number, subject, issue date, ex date, type of encryption, and RSA key information for the certificates uploaded to the W-IAP.

Command History

Version Description

Dell Networking W-Series Instant 6.2.1.0-3.3

This command is introduced.

Command Information

show about

show about

Description

This command displays information about Instant.

Usage Guidelines

Use this command to view information such as Instant version, build time and W-IAP model.

Example

The show about command displays the Build Time, W-IAP model number, the Instant version, website address of organization, and Copyright information. The following example shows the show about command output:

Name :Aruba Operating System Software
Type :N-AF105
Build Time :2013-04-19 08:30:19 DDT
Version :6.2.1.0-3.3.0_98110
Website :http://www.de'1.com
Legal :Copyright (c) 2002-2013, Aruba Networks, Inc. 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show access-rule

show access-rule

Description

This command displays the details of access rules configured for the wired or wireless clients associated W-IAP.

Syntax

Parameter Description

Displays the access rule configuration details based the name specified for this parameter.

Usage Guidelines

Use this command to view information an access rule configured for a network profile.

Example

The following example shows the output displayed for the show access-rule command:

Access Rule Profiles

Name

- - - -

ethersphere-instant-wpa2

default wired port profile

wired-instant

ethersphere-instant-cp

ethersphere-instant

ether-wired

11-android

On specifying a name of the SSID or the port profile along with the show access-rule command, the

list of access rules configured for the specified profile is displayed. The following example shows the out

this commands

any any match app baidu-hi-
    games deny
any any match app bluejayfilms
    deny
any any match appcategory gaming
    deny
any any match webcategory shopping
    deny
any any match webcategory abused-drugs
    deny
any any match webcategory dead-sites
    deny
any any match webrepresentation 

high-risk-sites deny

Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia

(No text to output)

vlen 1d :0

ACL Captive Portal: disable

ACI ECP Profile :default

CALFA :d' sable

Bandwidth Limit :upstream disable

The output of this command displays information about the access rule parameters configured for a specific wired or wireless profile. It indicates whether a particular type of traffic is allowed to a particular destination, and the service and protocol in use and if options such as logging and prioritizing traffic are enabled when the rule is triggered. If the DPI access rules are configured, it displays the list of rules configured to allow or deny access to certain applications, application categories, web categories, and websites based on their reputation score.

Command History

VersionDescription
Dell Networking W-Series Instant 6.4.0.2-4.1This command is modified
Dell Networking W-Series InstantThis command is introduced.

show access-rule-all

show access-rule-all

Description

This command displays the details of the access rules configured for all wired and wireless profiles on the IAP.

Usage Guidelines

Use this command to view information access rules configured for all wired and wireless profiles on the

Example

The following example shows the partial output of the show access-rule-all command:

Access Rule Name :default_wired_port_profile
In Use :Yes
Access Rules
----.
Dest IP Dest Mask Dest Match Protocol (fd:sport:report) Application Action Loq TOS 802.1P Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia 
Vlan Td :0
ACL Captive Portal:disable
ACL RCP Profile :default
CALZA :disable
Bandwidth Limit :downstream disable upstream disable
Access Rule Name :NewRole17
In Use :No
Access Rules
----
Access Rules
---- 
Parameter Description
Access Rule NameDisplays the name of the access rule.
In useIndicates if the access rules are in use.
Access RulesDisplays the access rules parameter for each rule configured for the SSID or Wired profile users.
VLAN IdIndicates the VLAN ID associated with the SSID or wired profile access rules
ACL Captivo PortalIndicates if the ACL rules are applicable to the captive portal users.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.03.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show acl

show acl (domains)

Description

This command displays the Access Control List (ACL) configuration details.

Syntax

Parameter Description

domains

Displays the domains configured with an access control list.

Usage Guidelines

Use this command to view the ACL configuration details.

Example

The following example shows the output of the show acl command:

(Instant AP)# show acl

role-domain

role-domain inused

d8:c7:c8:c4:42:96#

The output of this command displays information about the role-domain.

Command History

Version Description

Dell Networking W-Series Instant 6.4.0.2-4.1

This command is introduced.

show airgroup

show airgroup {blocked-queries [dlna|mdrs] | blocked-service-id [dlna|mdrs] | cache { | entries [dlna|mdrs] | cppm {auth server [coa-capable | non-coa-only] | entries | query-interval | server; cppm-entry | debug statistics | internal-state statistics | servers [dlna|mdrs|verbose] | status | swarm-info | users [dlna|mdrs|verbose]}

Description

This command displays the AirGroup configuration details for a W-IAP client.

Syntax

Parameter Description
blocked-queries [dlna |mdns]Displays blocked queries if any.
blocked-service-'d [d.nx] mdns]Displays blocked services and service IDs if any.
cache <MAC-address> cache entries [d.nx] mdns]Displays AirGroup cache details for a specific W-IAP or for the W-IAP client cluster.
cppm {auth servor [coa-capable | non-coa-only] | entries | query-interval | server]Displays CPPM server details associated with AirGroup configuration.
cppm-entry <MAC-address>Displays CPPM server details for an AirGroup client.
debug statisticsDisplays debug statistics for AirGroup enabled W-IAPs.
internal-state statisticsDisplays statistical details of queries and responses, and RADIUS client messages.

show airgroup blocked-queries

The show airgroup blocked-queries command output displays the blocked queries if any:

AirGroup dropped Query IDs

Service ID #query-hits

[EMPTY]

Num dropped Query IDs:0

show airgroup blocked-service-id

The show airgroup blocked-service-id command output displays the blocked AirGroup service IDs if any:

AirGroup Blocked Service IDs

Origin Service ID #response-hits

Num Blocked Service-ID:0

show airgroup cache entries

The following output is displayed for the show alrgroup cache entries command:

Cache Entries

Name Type Class TTL Origin Expiry

Last Update

[EMPTY]

_airplay (.tcp.local)PTRTN/50010.16.94.2363696.00
Tue May 13 19:32:11 2014
_raop .tcp .'local'PTRTN450010.16.94.2363794.31
Tue May 13 19:32:11 2014
BIR-DPARASAR-T4 .airplay .tcp.localSRV/NRSTATTN12010.16.94.236311.38
Tue May 13 19:32:11 2014
2577037AB680@BLR-DPARASAR-T4._raop._tcp.localSRV/NRSTATTN12010.16.94.236134.14
Tue May 13 19:32:11 2014
BIR-DPARASAR-T43CS.localATN12010.16.94.236255.07
Tue May 13 19:32:11 2014
BIR-DPARASAR-T43CS.localAAAATN12010.16.94.236393.69
Tue May 13 19:32:11 2014
BIR-DPARASAR-T4 .airplay .tcp.localTXPTN/50010.16.94.2363784.51
Tue May 13 19:32:11 2014
Column Description
ExpiryIndicates the expiration details.
Last updateIndicates when the entries were last updated.

show airgroup cppm auth server non-coa-only

The following output is displayed for the show airgroup cppm auth server non-coa-only command:

All Airgroup Non-CoA-only Servers known to MDNS

Server IP-Address Port timeout rfo3576 rfo3576-only rfo3576-port

test 192.0.2.0 1812 5 Disabled Disabled 5999

test123 192.0.2.1 1812 5 Disabled Disabled 5999

show airgroup cppm auth server coa-capable

The following output is displayed for the show airgroup cppm auth server coa-capable command:

All Airgroup CoA-capable Servers known to MDNS

Server IP-Address Port timeout rfc3576 rfc3576-only rfc3576-port

server1 192.0.1.1 1812 5 Enabled Enabled 5999

show airgroup cppm server

The following output is displayed for the show airgroup cppm server command:

CPDM Servers

Server IP-Address Port timeout rfc3576 rfc3576-only rfc3576-port

test 192.0.2.0 1812 5 Disabled Disabled 5999

Lost 123 192.0.2.1 1812 5 Disabled Disabled 5999

The output of these commands provide the following information:

Column Desenviation

swarm id - fc6520ad018ee6eb13bdc6b985e0fe6361bd37f7d25212a77e

ap 1d = d8:c7:c8:c4:42:98 ap 1p = 192.0.2.0 update no = 0

Device device-owner shared location-id AP-name shared location-id AP-FQLN

shared location-id AP-group shared user-list shared role-list.

Num CPPM Entries:0

The output of this command provides the following information:

Column Description

swarm_idIndicates the cluster ID of the W-IAP.
ap_idDisplays the MAC address of the W-IAP on which AirGroup is configured.
ap_ipDisplays the IP address of the W-IAP on which AirGroup is configured.
update_noIndicates the number of configuration updates if any.
DeviceIndicates the device for which AirGroup is configured.
device-ownerIndicates the device owner's identity.
shared location-id AP-nameIndicates the shared location ID associated with the AP name
shared location-id AP-FQUNIndicates the shared location ID associated with the fully qualified domain name of the AP group.
shared location-id AP-groupIndicates the shared location ID associated with the AP group.

Peer VC address :192.168.20.2

Peer VC address :192.168.30.2

Peer VC address :192.168.40.2

Peer VC address :0.0.0.0

Peer VC address :0.0.0.0

Peer VC address :0.0.0.0

Peer VC address :0.0.0.0

AirGroup Debug Statistics

Key Value

- - - - - -

network cache init counter 2(2)

mdns apdb init counter 7(7)

mdns apdb destroy counter 1(1)

user timed out 1(1)

airgroup restore count 1(1)

mdns mac move counter 4(4)

mdns master to vc hello rx 2060(2060)

mdns slave to slave hello rx 8240(8240)

mdns ap to ap mac sync resp rx 57(57)

mdns master to vc mac req rx 1580(1580)

swarm update counter rx 1(1)

mdns recieved valid swarm packet 11978(11978)

mdns recieved dlna pkt from device 177704(177704)

mdns partial hello tx 2059(2059)

mdns ap update tx 80(80)

mdns master to vc mac sync resp tx 232(232)

mdns ap to ap mac sync resp tx 1348(1348)

dropped init not done tx 6(6)

master to vo hello tx 2059(2059)

master to my swarm hello tx 2354(2354)

mdns ap to swarm hello tx 4118(4118)

mdns slave to slave mac sync req tx 57(57)

mdns total pkt sent to asap tx 112563(112563)

hello ap verification fail count 1(1)

The output of this command provides the following information:

Column Description

S. 1

CPPM Device-Entry Deleted N/A N/A 0.0

Internal MDXS Statistics

Functionality Hit Count Since Last Read Hit Count Total Average Time in microsec (since last read) Average Time in microsec (alltime)

Response - Cache Update 0 0 0

Response 0 0 0

Query - prepare records + Policy C. C. O

(

Query - Policy 0 0 0

Query - resp pkt gen & send 0 0 0

Query - Response packet send 0 0 0

Query 0 0 0

Internal DLNA Statistics

Functionality Hit Count Since Last Read Hit Count Total Average Time in microsec (since last read) Average Time in microsec (alltime)

Response - Cache Update 0 0 0

Response 0 0 0

Query - prepare records + Policy 0 0 0

Query - Policy 0 0 0

Query - resp pkt gen & send 0 0 0

Query - Response packet send 0 0 0

Query 0 0 0

Column Description
TypeIndicates the type of server.
HostnameIndicates the hostname of the AirGroup servers.
ServiceIndicates If AirGroup services such as AirPlay or AirPrint are configured.
VIANDisplays VLAN details of the AirGroup servers.
Wired/WirelessDisplays if the AirGroup server is connected to a wired or wireless interface.
RoleDisplays the user role details.
GroupDisplays the server group.
UsernameDisplays the username details.
AP-nameDisplays the name of the AP.
Num serversDisplays the total number of servers.
Max ServersDisplays the maximum number of servers that are supported.

show airgroup status

The following output is displayed for the show airgroup status command:

AirGroup Feature

Status

Disabled

AirGroup- MDNS Feature

Status

Disabled

AirGroup- DNA Feature

Service Status

airplay Disabled

airprint Disabled

tumes disabled

remotengnt Disabled

sharing Disabled

chat Disabled

Chromecast Disabled

DINA Media Disabled

DLNA Print Disabled

allowall Disabled

The output of this command provides the following information:

Column Description
Airgroup feature statusIndicates if the AirGroup feature such as DLNA or MDNS support is enabled.
AirGroup Multi Swarm statusIndicates if the inter cluster mobility is enabled.
AirGroup Guest MulticastIndicates if a guest VLAN is used for Bonjour services.
CPPM ParametersDisplays CPPM configuration parameters associated with the AirGroup configuration.
AirGroup Service InformationDisplays information about the status of the AirGroup services configuration.

show airgroup swarm-info

The following output is displayed for show airgroup swarm-info command:

AirGroup Swarm info

Swarm id

ef7501af01cd098223100f6d02733552765515ffcd7712c41c

MAC TP Host Name VLAN Wired/Wireless Role Username AP-Mac Query/Resp

Num Users:0

The output of this command provides the following information:

Column Description
MACIndicates the MAC address of the AirGroup clients.
IPIndicates the IP address of the AirGroup clients.
Host NameIndicates the hostname of the AirGroup clients.
VLANDisplays VLAN details of the AirGroup clients.
Wired/wirelessDisplays if the AirGroup user is connected to a wired or wireless interface.
RoleIndicates the AirGroup user role.
UsernameDisplays the username of the AirGroup user.
AP-MacDisplays the MAC address of the W-IAP to which the user is connected.
Query/ROUPDisplays information query and response details exchanged between the AirGroup user and the AirGroup server.
Num UsageIndicates the number of AirGroup users.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command was modified.
Dell Networking W-Series Instant 6.3.1.1-4.0This command was modified.

show airgroupservice

show airgroupservice [disallow {role|vlan}]

Description

This command displays the AirGroup service configuration details for a W-IAP.

Syntax

Parameter Description

show airgroupserviceDisplays a summary of the configuration details for AirGroup services.
disallow {role |vlan}Displays the user roles or VLANs that are restricted from accessing AirGroup services. When the access to AirGroup services is restricted, the clients that are assigned with a specific role or VLAN will not be able to use the AirGroup service.

Usage Guidelines

Use the show airgroupservice command to view the AirGroup services configured on a W-IAP.

Examples

The following output is displayed for the show airgroupservice command:

AirGroupService Details

Service Description status Disallowed-Role Disallowed-VLAN ID

[EMPTY]

airplay AirPlay Disabled airplay, tcp

_raop ._tcp

_appl etv-v2._tcp

airprint AirPrint Disabled_ipp._top

_pdl-datastream._tcp

_prin ter._tcp

_scan ner._tcp

_univ ersal. sub. ipp. top

_rfb._tcp
_net-assistant._tcp
AirGroupService Details
----
Service Description status Disallowed-Role Disallowed-VLAN ID 
sharing Sharing Disabled _odi sk._tcp
_afp overtcp.tcp
_xgr id._tcp

chat Chat Disabled _pro scope._tcp

Chromecast Chromecast Disabled urn: dial-multiscreen-org:service:dial:1
urn: dial-multiscrocn-org:device:clai:1

DTNA Media Media Disabled urn: schemas-upnp-org:device:MediaServer:1
urn: schemas-upnp-org:device:MediaServer:2
urn: schemas-upnp-org:device:MediaServer:3
urn: schemas-upnp-org:device:MediaServer:4
urn: schemas-upnp-org:device:MediaRenderer:1
urn: schemas-upnp-org:device:MediaRenderer:2
urn: schemas-upnp-org:device:MediaRendoror:3
urn: schemas-upnp-org:device:MediaPlayer:1

DLNA Print Print Disabled urn: schemas-upnp-org:device:Printer:1
urn: schemas-upnp-org:service:PrintBasic:1
urn: schemas-upnp-org:service:PrintEnhanced:1
allowall Remaining-Services Disabled
Num Services:10
Num Service-ID:49 

The following example shows the partial output displayed for the show airgroupservice disallow role command:

airplay
----
default_wired_port_profile
port
airprint
----
default_wired_port_profile
port 

The following example shows the partial output displayed for the show airgroupservice disallow vlan command:

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show airgroupservice-ids

show airgroupservice-ids

Description

This command displays the AirGroup service IDs configured on a W-IAP for its AirGroup clients.

Syntax

Parameter Description
serviceIndicates the name of the service and displays the service ID details of specified AirGroup service.

Usage Guidelines

Use the show airgroupservice command to view the IDs of the AirGroup services configured on a W-IAP.

Examples

The following output is displayed for the show airgroupservice-ids command for the AirPlay service:

(Instant AP)# show airgroupservice-ids airplay

airplay

-

Service ids

[EMPTY]

airplay. tcp

raop. top

_appletv-v2._tcp

The output of this command displays the service IDs associated with the AirGroupservice.

Command History

Version Description

show ale

show ale (config status)

Description

This command displays the ALE configuration details.

Syntax

Parameter Description
configDisplays the ALE configuration details.
statusDisplays the status of ALE server.

Usage Guidelines

Use this command to view the ALE configuration status.

Example

The following example shows the output of the show ale config command:

(Instant AP)# show ale config

AIE Config

(No text)

Type value

......

ale-report-interval 60

The output of this command displays the ALE server details and the reporting interval at which the Virtu

Controller sends data to the ALE server.

The following example shows the output of the show ale status command:

(Istant AP) | show ale status

ALE Status

[EMPTY]

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show alert global

show alert global [count]

Description

This command displays the list of client alerts for a W-IAP.

Syntax

Parameter Description
Filters client alerts based on the specified number.

Usage Guidelines

Use this command to view the client alerts for a W-IAP. The client alerts occur when clients are connect Instant network. Alerts are generated when a client encounters problems while accessing or connecting to W-IAP network.

Example

The show alerts global command displays information about the clients for which alerts (if any) are generated. The following example shows the output for the show alerts global command when no client alerts are generated.

Client Alerts

Timestamp Type MAC Address Description Access Point

The output of this command provides the following information:

Parameter Description
TimestampDisplays the time at which the client alert was recorded.
MAC AddressDisplays the MAC address of the client that caused the clart.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show alg

show alg

Description

This command displays the Application Layer Gateway (ALG) protocol information configured on a W-IAP.

Usage Guidelines

Use this command to view configuration details for the ALG protocols. An application-level gateway consists of a security component that augments a firewall or NAT used in a network.

Example

The following output is displayed for the show alg command:

Current ALG

[EMPTY]

ALG Status


sccp Enabled

sip Enabled

vocera Enabled

The output of this command displays if the ALG protocols such as Skinny Call Control Protocol (SCCP), S Initiation Protocol (SIP), and VOCERA are enabled.

Command History

Version Description

Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

show allowed-aps

show allowed-aps

Description

This command displays the list of W-IAPs that are allowed to join the W-IAP cluster.

Usage Guidelines

Use this command to view the W-IAP whitelist.

Example

The following example shows the output of the show allowed-aps command:

Allow New APs : enable

AF Whitelist

MAC Address

d8:c7:c8:cb:d4:20

d8:c7:c8:cb:d3:98

d8:c7:c8:cb:d3:b4

d8:c7:c8:cb:d3:d4

The output of this command provides the following information:

Parameter Description
Allow Now AFsIndicates if the new W-IAPs are allowed to join the network.
MAC AddressDisplays the MAC address of the W-IAPs that are allowed to join the network

Command History

Version Description
Well Networking W-This version is introduced

show all monitor

show all monitor active-laser-beams

Description

This command shows information for Dell Networking W-Series Instant Air Monitors.

Usage Guidelines

Use this command to view the information on Dell Networking W-Series Instant Air Monitors.

Syntax

Parameter Description
active-laser-beansShow active laser beam generators.The output of this command shows a list of all W-IAPs that are actively performing policy enforcement containment such as rogue containment, command can tell us which W-IAP is sending out deauthorization frame although it does not specify which W-IAP is being contained.

Example

The following example shows the output of show all monitor command.

Swarm Active Laser Beam Sources

lossid channel rssi ap name lms ip master ip inactive time reported by

[EMPTY]

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

show amp-audit

show amp-audit.

Description

This command displays the set of configurations on the W-AirWave Management Platform.

Usage Guidelines

Use this command to view the AMP related configurations.

Example

The following example shows the output of the show amp-audit command:

rule any any match any any any deny
wlan access-rule ssid1
index 3
rule any any match any any any deny
hotspot anqp-nai-realm-profile "namel"
enable
nai-realm-name ""
nai-realm-exp-method exp-ttls
nai-realm-auth-id-1 non-eap-inner-user-
nai-realm-auth-value-1 mschapv2
nai-realm-auth-id-2 credential
nai-realm-auth-value-2 uname-password
nai-realm-encoding utf8
no nai-home-realm
hotspot anqp-nai-realm-profile "nrl"
enable
nai-realm-name "namel"
nai-realm-exp-method exp-sim
nai-realm-auth-id-1 non-eap-inner-user-
nai-realm-auth-value-1 mschapv2
nai-realm-auth-id-2 credential
nai-realm-auth-value-2 uname-password
nai-realm-encoding utf8
nai-home-realm
hotspot anqp-venue-name-profile "Vnl" 
2qpp-p'mn1 "40486"
2qpp-p'mn2 ""
3qpp-p'mn3 ""
2qpp-p'mn4 ""
3qpp-p'mn5 ""
3qpp-p'mn6 ""
hotspot anqp-ip-addr-avail-profile "ipl"
enable
ipv4-addr-avail
no ipv6-addr-avail
hotapot anqp-domain-name-profile "dnl"
unable
domain-name "DomainName"
hotspot h2qp-oper-name-profile "onl"
enable
op-lang-code eng
op-fr-name "FriendlyName"
hotspot hs-profile "hs"
unable
comeback-mode
no asra
no internet
pama-bit
group-frame-block
p2p-dev-mgmt
no p2p-cross-connect
addt1-roam-cons-0's 0
gas-comeback-delay 10
gentry-response-length-limit 20
access-network-type chargeable-cublic
vcnuo-group business
venue-type research-and-dev-facility
roam-cons-len-1 3
roan-cons-0i-1 "123456"
roan-cons-len-2 3
roan-cons-0i-2 "223355"
roan-cons-len-2 0
roan-cons-0i-3 ""
advert'sement-profile anqp-naif-realm "nrl"
wlan void-profile test
enable 
max-authentication-failures 0
vlan 200
rf-band all
captive-portal disable
mac-authentication
12-auth-failthrough
dlim-period 1
inactivity-timeout 1000
broadcast-filter none
radius-accounting
blacklist
dmo-channel-utilization-threshold 90
local-probe-red-thresh 0
max-clients-threshold 64
hotspot-profile "hs1"
auth-survivability coche-time-out 24
wlan external-captive-portal
server localhost
port 80
ryl "/"
auth-text "Authenticated"
auto-whitelist-disable
https
blacklist-time 3600
auth-failure-blacklist-time 3600
ids
wirelessa-containment none
wired-port-profile wired-instant
switchport-node access
allowed-vlan all
native-vlan guos.
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poet
type guest
captive-portal disable
no doclx
wired-port-profile default_wired_port_profile switchport-mode trunk 
description AirPlay
airgroupservice airprint
disable
description AirPrint
per-ap-settings d8:c7:c8:c4:42:98
hostname d8:c7:c8:c4:42:98
ip-address 10.17.161.264 255.255.255.0 10.17.161.1 10.13.6.110 ""
swarr-node cluster
wifil-0-node access
wifil-node access
q-channel 0 0
a-channel 0 0
rplink-vlan 0
g-external-antenna 0
g-external-mantenna 0 

The output of this command provides the following information:

Command History

Version Description
Doll Networking X-Series Instant6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap-alert

show ap-alert

Description

This command displays all the alerts received for the specified APs.

Usage Guidelines

Use this command to check all the alerts received for all the APs specified.

Example

The following example shows the output of show ap-alert command.

AF Alerts

[EMPTY]

Timestamp Type MAC Address IP Address Description

The output of this command includes the following information:

Column Description

TimestampIndicates the time at which the alert was received.
TypeIndicates the type of alert received for the AP.
MAC AddressIndicates the MAC address of the W-IAP clients.
IP AddressIndicates the IP address associated with the AP.
DescriptionDisplays a brief description of the alert received.

Command History

Version Description

show ap-env

show ap-env

Description

This command displays all provisioned AP parameters such as the type of antenna used by a. The output this command also indicates if the W-IAP is provisioned as a master W-IAP.

Usage Guidelines

Use this command to view the antenna configuration details for a W-IAP.

Example

The following output is displayed for the show ap-env command:

Antenna Type:Internal

lap master:

The output of this command indicates if the W-IAP is configured to use an external or integrated antenna the W-IAP is configured as a master W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show aps

show aps [scanning] [sync]

Description

This command displays all active W-IAPs, W-IAP scanning, and synchronization status.

Syntax

Parameter Description
apsDisplays the list of all active W-IAPs in the cluster.
aps scanningDisplays W-IAP scanning details.
aps syncDisplays W-IAP synchronization details.

Usage Guidelines

Use this command to view the list of active W-IAPs, W-IAP scanning and synchronization details.

Example

The following output is displayed for the show aps command:

AF List

Name IP Address Mode Spectrum Clients Type Mesh Role 2.4 Channel

d8:c7:c8:cb:d4:20 10.17.88.198 access disable 1 135 Portal 7

2.4 Power (dB) 2.4 Utilization (%) 2.4 Noise Floor (dBm) 5.0 Channel 5.0 Power (dB)

21 52 (ck) -91 (good) 44-22

5.0 utilization (%) 5.0 Noise Floor (dBm) Need Antenna Config From Port Config Id

3 (good) -91 (good) No none 1

Column Description
Mesh RoleIndicates if the W-IAP is functioning as Mesh Point or mesh Portal.
2.4 ChannelIndicates the channels used by the W-IAP in the 2.4 GHz band.
2.4 Power(dB)Indicates the transmission power allocated for 2.4 Ghz band channels.
2.4 UtilizationIndicates the percentage of utilization of 2.4 GHz channels.
2.4 Noise FloorIndicates the noise floor of the 2.4 GHz channels.
5.0 ChannelIndicates the channels used by the W-IAP in the 5 GHz band.
5.0 Power(dB)Indicates the transmission power allocated for 5 GHz band channels.
5.0 UtilizationIndicates the percentage of utilization of 5 GHz channels.
5.0 Noise FloorIndicates the noise floor of the 5 GHz channels.
Need antenna configIndicates if antenna configuration is required.
From portIndicates the port details if any.
Config IdIndicates the configuration ID.

The following output is displayed for the show aps scanning command:

AP Scanning Stats

Name IP Address 2.4 Reqs 2.4 Voice Rejs 2.4 Video Rejs 5.0 Reqs

d8:c7:c8:cb:d4:20 10 17 88 188 5665 0 0 5675

5.0 Voice Rejs 5.0 Video Rejs

0 0

The following output is displayed for the show aps scanning command:

AF Sync List

MAC IP Address Class Current Version

The output of this command includes the following parameters:

Column Description
MACIndicates MAC address of the W-IAP with which the current W-IAP is synchronized.
IP addressDisplays the IP address of the W-IAP.
ClassIndicates if the W-IAP is serving as master or slave.
Current VersionDisplays the Instant version currently running on the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap allowed-channels

show ap allowed-channel's

Description

This command displays a list of allowed channels for a W-IAP.

Syntax

Parameter Description
Specify a country code to display allowed channels for that country.

Usage Guidelines

Specify the country code for your W-IAP during the initial setup. Changing the country code causes the channel lists to be reset to the defaults for that country.

Example

The following example shows the output of the show ap allowed-channels US command:

Allowed Channels for Country Code "US"

(No text to output)

PHY Type Allowed Channels

802.11g (Indoor) 1 2 3 4 5 6 7 8 9 10 11

802.11a (indoor) 36 40 44 48 149 152 157 161 165

802.11q (outdoor) 1 2 3 4 5 6 7 8 9 10 11

802.11a (outdoor) 149 153 157 161 165

802.11g 40MHz (indcor) 1-5 2-6 3-7 4-8 5-9 6-10 7-11

802.11a 40MHz (indoor) 36-40 44-48 149-153 157-161

002.11g 40MHz (outdoor) 1-5 2-6 3-7 4-8 5-9 6-10 7-11

802.11a 40kHz (outdoor) 169-153 157-161

The output of this command includes the following information:

Parameter Description

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap allowed-max-EIRP

show ap allowed-max-PIRP []

Description

This command displays the maximum EIRP settings for the country in which the W-IAP is currently operated. You can also view the maximum EIRP settings for a specific country.

Syntax

Parameter Description

[<country>]Displays the EIRP settings allowed for a specific country.

Usage Guidelines

Use this command to view the maximum EIRP settings for a W-IAP. You can also filter the output to vie EIRP settings for a specific country.

Example

The following example shows the output of the show ap allowed-max-EIRP command:

Max ETRP setting for Country Code US Country United States and AP type AP-105

[EMPTY]

Channel 1 2 3 4 5 6 7 8 9 10 11 12 13 14 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124

128 132 136 140 149 153 157 161 165

The following table provides the information in English:

20 20 20 20 20 20 20 20 20 20 20 20 * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

g/a 22 22 22 22 22 22 22 22 22 22 * * * 22 22 22 22 24 24 24 24 22 22 22 22 22 * * * 22 22

22 23 23 23 23 23

HT 20 22 22 22 22 22 22 22 22 22 22 * * * 21 21 21 21 24 24 24 24 24 22 22 22 22 22 * * * 22

22 22 22 23 24 24 24

HT 40 19 19 20 21 22 23 22 22 22 21 21 * * * 20 20 20 20 23 23 23 23 22 22 22 22 * * * * 22 22

22 22 22 22 20 17

Command History

show ap arm

show ap arm (bandwidth-management | history | neighbors | rf-summary | scan-times)

Description

This command displays information about bandwidth management, historical statistics, W-IAP neighbors, R summary, and scanning details for the W-IAP.

Syntax

Parameter Description
bandwidth managementDisplays ARM bandwidth details for a W-IAP.
historyDisplays detailed information about the ARM configuration changes over a period of time.
neighborsDisplays details about the ARM neighbors.
zf-summaryDisplays a summary of RF configuration information for a W-IAP
scan-timesDisplays ARM channel scanning details for a W-IAP.

Usage Guidelines

Use this command to view information about the Adaptive Radio Management (ARM) bandwidth configuration, historical statistics, W-IAP neighbors, RF summary, and scanning details on a W-IAP.

Example

show ap arm bandwidth-management

The following example shows the output of show ap arm bandwidth-management command:

Interface :wif10

Shaping Table

[EMPTY]

Column Description
ClientDisplays the list of W-IAP clients connected through the Wi-Fi interface.
Tx PktDisplays the transmission packet details associated with the interface.
Tx ByteDisplays the number of bytes in the transmission packets associated with the interface.
Tx Alloc (ms)Indicates the time allocated for transmission in milliseconds.
Tx Time (ms)Indicates the transmission time in milliseconds.
Rx Time (ms)Indicates the reception time in milliseconds.
Active Time (ms)Indicates duration until which the Wi-Fi devices are active.
Tx Rate (Mbps)Indicates the current speed at which data is transmitted through the Wi-Fi interface.

show ap arm history

For each interface on a W-IAP, the show ap arm history command shows the history of channel and power changes due to ARM. ARM can automatically change channel and power levels based on a number of fa such as noise levels and radio interference. The following example shows the output of the show ap arm history command:

Interface :wifi0

ARM History

Time of Change Old Channel New Channel Old Power New Power Reason

2013-05-11 04:24:31 149+ 161- 27 27

2013-05-11 02:54:34 157+ 149+ 27 27 I

2013-05-11 02:46:13 153-157+27 27

2013-05-11 02:27:11 157+ 153- 27 27 I

2013-05-11 02:22:18 149+ 157+ 27 27

2013-05-11 01:35:00 161-149+2727I

2013-05-11 01:28:58 149+ 161- 27 27 I

2013-05-10 09:04:26 149+ 157+ 27 27 T

2013-05-10 06:08:59 1571 1491 27 27 I

2013-05-10 05:55:10 153-157+27 27 1

2013-05-10 05:11:21 1571 153-27 27 1

Interface :with

ARM History

[EMPTY]

Time of Change Old Channel New Channel Old Power New Power Reason

2013-05-1 04:16:28 6 1 24 24

2013-05-1 03:58:53 11 6 24 24 T

2013-05-21 03:13:44 1 21 24 24 I

2013-05-11 01:23:32 6 1 24 24

2013-05-11 01:04:29 11 6 24 24 I

2013-05-1 00:26:16 1 24 24

2013-05-10 23:13:30 6 1 24 24

2013-05-10 23:04:49 11 6 24 24 Q

2013-05-0 22:51:10 6 1 24 24 T

2013-05-10 22:45:01 1 6 24 24

2013-05-10 21:52:39 6 1 24 24

2013-05-10 21:44:37 1 6 24 24 Q

2013-05-10 21:29:52 6 1 24 24

2013-05-10 21:19:16 11 6 24 24 T

2013-05-10 21:12:53 6 11 24 24 1

2013-05-10 20:52:07 1 6 24 24

2013-05-10 19:20:09 6 1 24 24

2013-05-10 19:02:08 11 6 24 24

2013-05-10 18:23:32 1:1 24 24 I

2013-05-10 7:40:55 6 1 24 24

2013-05-10 17:28:40 11 6 24 24 T

2013-05-10 17:01:24 1 11 24 24 I

2013-05-10 15:10:19 6:1 24 24

2013-05-10 15:03:41 11 6 24 24 I

2013-05-10 14:65:39 6 11 24 24

2013-05-10 14:19:32 11 6 24 24 I

2013-05-10 13:37:30 1 11 24 24 1

2013-05-10 11:34:27 6 1 24 24

2013-05-10 11:19:52 11 6 24 24 I

2013-05-10 10:30:51 1 11 24 24

2013-05-10 09:10:51 6 1 24 24

2013-05-10 09:06:31 11 6 24 24

Column Description
ReasonIndicates the reason for changes in channels. For more information about the reason, see the description below the command output.

show ap arm neighbors

The show ap arm neighbors command displays the ARM settings on the W-IAP neighbors. The following example shows the output of the show ap arm neighbors command:

ARM Neighbors

[EMPTY]

basid essid channel rssi tx-power PL (dR) AP Flags Last Update

6c:f3:7f:45:57:20 7SPOT 1 8 0 0 Passive
6c:f3:7f:56:7e:a0 7SPOT 1 9 0 0 Passive
6c:f3:7f:56:7e:a1 NTT-5POT 1 12 0 0 Passive
00:24:6c:80:77:c1 NTT-SPOT 1 9 0 0 Passive
6c:f3:7f:45:57:21 NTT-9POT 1 8 0 0 Passive
6c:f3:7f:44:91:11 NTT-SPOT 1 9 0 0 Passive
00:24:6c:2b:fd:a8 qa-mv-vap3 161 5 9 90 Passive
00:24:6c:80:4d:62 docomo 1 10 0 0 Passive

(Total updates)

Neighbor Summary: One hop 232 Two hop 0 Current Time: 2013-05-11 04:31:33

The output of this command includes the following information:

Column Description
bssidIndicates the BSSID of the W-IAP neighbors.
essidIndicates the ESSID of the W-IAP neighbors.
ChannelIndicates the channels assigned to the W-IAP neighbors
rssiIndicates the Received signal strength indication (RSSI) values associated with the ARM channels to which W-IAP neighbors are connected.

36 0 0 0 93 3/2/0/0/94 0/0(0) 97//0//0/0(137)

40 0 0 0 93 9/2/0/0/92 0/0(0) 120/82//0/0(202)

channel part part wise index

(1) 2016. 2017

149-155 346

36-40 339

157-161 357

44-48 465

Interface Name: wii10

Current ARM Assignment :161-727

Covered channels a/g :1/0

Free channels a/q :7/0

ARM Edge State : disable

Last check channel/pwr :2m:36s/4m:24s

last change channel/pwr :8m:19s/16:23h:47m:12s

Next Check channel/pwr ;2m:36s/2m:15s

Assignment Mode : Single Band

Current ARM Assignment :1/24

Covered channels a/g :0/1

Free channels a/g :0/2

ARM Edge State : disable

Last check channel/pwr ;5m:31s/3m:33s

Last change channel / buy +1.5m+50oz/1d+23h+47m+13s

Column Description
cov-idx(Total)Displays RF coverage details. The W-IAP uses this metric to measure RF coverage. The coverage index is calculated as x+y, where "x" is the W-IAP's weighted calculation of the Signal-to- Noise Ratio (SNR) on all valid APs on a specified 802.11 channel, and "y" is the weighted calculation of the W-IAPs SNR detected by the neighboring APs on that channel.
intf_idx(Total)Displays channel interference details. The W-IAP uses this metric to measure co-channel and adjacent channel interference. The Interference Index is calculated as a/b/c/d, where:Metric value "a" is the channel interference the AP sees on its selected channel.Metric value "b" is the interference the AP sees on the adjacent channel.Metric value "c" is the channel interference the AP's neighbors see on the selected channel.Metric value "d" is the interference the AP's neighbors see on the adjacent channel.To calculate the total Interference Index for a channel add "a+b+c+d".
channel_pairDisplays the list of paired channels.
Pairwise intf_indexDisplays the pairwise interference index.
Interface NameDisplays the interface name.
Current ARM AssignmentDisplays the current ARM assignment details.
Covered channelsDisplays the number of channels being used by the W-IAP's BSSID in the 2.4 GHz and 5 GHz bands.
Free channelsDisplays the number of available channels in the 2.4 GHz and 5 GHz bands.
ARM Edge StateDisplays the ARM Edge status. If ARM edge status is enabled, the ARM-enabled W-IAPs on the network edge will not function as Air Monitors.

36 2483300 1530 0 0 DVACFT 172120 40 576170 1547 0 0 DVACFT 172129 44 9945940 1454 0 0 DVACFT 172145 48 170500 1550 0 0 DVACFT 172158 52 167420 1522 0 0 DVACT 172046 56 65450 595 0 0 DVCT 171880 60 169840 1544 0 0 DVACT 172032 64 170390 1549 0 0 DVACT 172063 149 68631720 952 0 0 DVACFT 172074 153 32278480 1268 0 0 DVACFT 172086 157 38634770 1207 0 0 DVACFT 172132 161 20620710 1361 0 0 DVACFT 172161 165 170280 1548 0 0 DVACT 172110 1 86424330 903 0 0 DVACFT 172161 2 53570 487 0 0 DC 171936 3 55660 506 0 0 DC 171980 4 88550 805 0 0 DC 172030 5 327140 2974 0 0 DVACP 172124 6 40459820 2562 0 0 DVACT 172110 7 334620 3042 0 0 DVACP 172137 8 89210 811 0 0 DC 171627 9 92620 842 0 0 DC 171684 10 192948 1754 0 0 DAC 172144 11 45787400 1340 0 0 DVACFT 172159 12 132550 1205 0 0 DAC 172051 13 51260 466 0 0 DC 171890 Channel Flags: D: All-Req-Domain Channel, C: Req-Domain Channel, A: Activity Present D: Scan 40MHz Lower, U: Scan 40MHz Upper, Z: Rare Channel V: Valid, T: Valid 20MHz Channel, R: Valid 40MHz Channel, P: Valid 40MHz Channel Pair O: DOS Channel, K: DOS 40MHz Upper, R: DOS 40MHz Lower R: Radar detected in last 3~min , X: DES required

WIF Scanning State

Scan mode channel current-scan-channel last-dos-channel timer-milli-tick

Default 161-49-0 172161700

Default 1 11-0 172161700

next-scan-milli-tick (jitter) scans (Dot:Re):EII(%):Last intvl(%)

Column Description
flagsIndicates channel flags. For more information on channel flags, see the flag description below the channel scan time table.
timer-tickIndicates the time interval since the last scan.
Scan modeIndicates if the scan mode enabled on the Wi-Fi interface.
channel (under MTFT Scanning State)Indicates the channels available on the Wi-Fi interface.
current-scan-channelIndicates the current channel scanned.
last-dos-channelIndicates the last channel on which Denial of Service (DOS) was detected.
timer-milli-tickIndicates the time in milliseconds since the Wi-Fi interface channels were scanned.
next-scan-milli-tick (jitter)Indicates the next interval at which the scanning will begin.
scope (Tot:Re):Eff (%):Last intvl(%)Provides a summary of the Wi-Fi scanning details.

Command History

Version Description
Dell Networking W-Series Instant 6,2,1.03.3This command is introduced.

Command Information

W-IAP Platform Command Mode

show ap association

show an association

Description

This command displays the association table for an AP group or for an individual W-IAP.

Usage Guidelines

Use this command to view information about the clients associated with a W-IAP.

Example

The following example shows the output of show ap association command.

The phy column shows client's operational capabilities for current association

Flags: A: Active, B: Band Steerable, H: Hotspot(802.11u) client, K: 802.11K clie

rt, R: 802.11R client, N: WM client, w: 802.11w client

PHY Details: HT : High throughput; 20: 20MHz; 40: 40MHz

VHT : Very High throughput; 80: 8CMHz; 160: 160MHz; 80p80: 80MHz

BOM12

ss: spatial streams

Association Table

The output of this command includes the following information:

ColumnDescription
NameIndicates the Name of a W-IAP or the AP group.
basidIndicates Basic Service Set Identifier (BSSID) associated with the W-IAP. The Basic Service Set Identifier (BSSID) is usually the MAC address of the W-IAP
macIndicates the MAC address of the W-IAP clients.
Column Description
vlan-idIndicates the VLAN ID associated with the W-IAP.
tunnel-idIndicates the identification number of the W-IAP tunnel.
assoc. timeIndicates the amount of time the client has been associated with the W-IAP, in the hours:minutes:seconds format.
num assocIndicates the number of clients associated with the W-IAP.
flagsDisplays flags for this W-IAP if any. For information on flag abbreviations, see the flag description at beginning of the output.
Num ClientsIndicates the number of clients associated with the W-IAP.

Command History

Version Description
Dell Networking X-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap bss-table

show ap bas-table

Description

This command displays an AP's Basic Service Set (BSS).

Usage Guidelines

The output of the show ap bss-table command shows the Dell AP BSS table for all APs. To filter this information and view BSS table data for an individual AP or a specific port and slot number, include the name, bssid, essid, ip-addr or port keywords.

Example

The following example shows the output of show ap bss-table command:

Dell AP BSS Table

loss ess port ip phy type ch/RTRP/max-RTP cur-cl ap name 'n-t(s) to-t

d3:c7:c8:3d:42:12 example1 ?/? 10.17.88.168 a-H' ap 149-/20/22.5 1 d8:c7:c8:c0:d4:20 0

d3:c7:c8:3d:42:13 example-local-rw 2/? 10.17.88.188 a-b" ap 149+/20/22.5 0 d8:c7:c8:cb:d4:20 0

18h:13m:58s

d3:c7:c8:cb:d4:21 wired eth1 2/? 10.17.38.188 b ap 0/0/0 0 d8:c7:c8:cb:d4:20 0 18h:13m:59s

d8:c7:c6:3d:42:02 example1 7/? 10.17.88.188 g-HT ap 7/21.5/21.5 0 d8:c7:c8:cb:d4:20 0

18h:13m:58s

d8:c7:c8:3d:42:03 example-local-nw ?/? 10.17.88.168 g-ET ap 7/21.5/21.5 0 d8:c7:c8:cb:d4:20 0

18h:12m:58s

Channel followed by "*" indicates channel selected due to unsupported configured channel.

"Spectrum" followed by "" indicates Local Spectrum Override in effect.

Num APs:5

Num Associations:1

The output of this command includes the following information:

Column Description

Displays the AD Remote Security Set Identifies (RCCID). This is usually the MAC address of

Column Description
ch/3IRP/max-3IRPDisplays the radio channel used by the AP/current effective Isotropic Radiated Power (EIRP) /maximum EIRP.
curDisplays the current number of clients on the AP.

Command History

Version Description
Dell Networking X-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap client-match-history

show ap client-match-history [client-mac ]

Description

This command displays a historical record of the client match events and actions for the clients associated with W-IAP.

Syntax

Parameter Description
client-macAllows you to filter the output based on a client MAC address. When client MAC address is specified and the command is executed, the d match actions pertaining to the specified client is displayed.

Usage Guidelines

Use this command to view the history of clients match actions for the clients associated with a W-IAP.

Example

The following example shows the output of show ap client-match-history command:

Client Match Action Table

(No text to output)

Station Old State New State Reason Radio Time

[EMPTY]

00:db:df:0a:57:4cNormalNormalClient associated118h:32m:5s
00:db:df:0a:57:4eNormalNormalClient associated015h:20m:1s
00:db:df:0a:57:4cNormalNormalClient associated09h:48m:57s
00:db:df:0a:57:4eNormalTargetI am the better AP07m:9s
00:db:df:0a:57:4eNormalDenyI am not the better AP17m:9s
a0:88:b4:41:64:18NormalDenyI am not the better AP05m:20s
a0:88:b4:41:64:18NormalDenyI am not the better AP15m:20s
00:db:df:0a:57:4cTargetAdoptedClient match succeed05m:7s
00:db:df:0a:57:4eDenyNormalClient match succeed15m:17s
a0:88:b4:41:64:18DenyNormalClient match succeed02m:7s

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap client-match-live

show ap client-match-live

Description

This command displays the current client match events and actions for clients associated with a W-IAP.

Usage Guidelines

Use this command to view the current clients match actions for the clients associated with a W-IAP.

Example

The following example shows the output of the show ap client-match-live command.

Client Match Table

(No text)

Station CM State RSSI Radio Home AP Target AP Time

00:do:df:0a:57:4e Adopted 47 0 -

5π:17s

Total | Client Matches

00:24:6c:c8:74:4c# show ap client-match-his

Client Match Action Table

Station Old State Now State ReasonRadio Time
00:db:df:0a:57:4eNormalNormalClient associated118h:32m:5s
00:db:df:0a:57:4eNormalNormalClient associated015h:20m:1s
00:db:df:0a:57:4eNormalNormalClient associated09h:48m:57s
00:db:df:0a:57:4eNormalTargetI am the better AP07m:9s
00:db:df:0a:57:4eNormalDenyI am not the better AP17m:9s
a0:88:b4:41:64:18NormalDenyI am not the better AP05m:20s
a0:88:b4:41:64:18NormalDenyI am not the better AP15m:20s
00:db:df:0a:57:4eTargetAdoptedClient match succeed05m:17s
00:db:df:0a:57:4eDenyNormalClient match succeed15m:7s
a0:88:b4:41:64:18DenyNormalState aged out.02m:27s
a0:88:b4:41:64:18DenyNormalState aged out.12m:23s

Total 11 Records

show ap client-probe-report

show ap client-probe-report []

Description

This command displays the client probe report for a W-IAP.

Syntax

Parameter Description
Allows you to filter the output based the ID number of the radio (for example, 0 or 1).

Usage Guidelines

Use this command to view a probe report for the clients associated with a W-IAP.

Example

The following example shows the output of the show ap client-probe-report command.

AP Client Probe Report for Wif10

[EMPTY]

MAC RSSI Tr Swarm Received

(No text to output)

12:c6:00:04:00:00 45 No 36s

12:22:00:00:00:63 44 No /s

12:3c:00:04:00:00 44 No 1s

02:88:00:00:00:02 4/ No 1m:3s

12:ce:00:00:40:00 44 No 276

12:4c:00:04:00:00 40 No 42s

02:10:00:00:00:06 34 No 40s

00:26:c6:bd:50:96 37 No 45s

08:ed:b9:e1:51:8b 47 No 1h:49m:18s

00:eb:2d:ab:a1:17 51 No 11h:59m:22s

00:19:77:71:41:20 28 No 2m:24s

12:13:00:00:11:10 30 No 596

00:21:6a:ba:b7:ce 31 No 2s
04:0c:ce:e1:98:78 50 No 8h:3m:27s
00:1e:65:71:18:de 8 No 53m:14s
60:67:20:4d:e8:e8 13 No 2h:8m:22s
04:05:76:42:49:56 41 No 14s
64:65:76:42:49:1F 37 No 25s
c4:85:08:d4:79:48 33 No 29s
b4:b6:76:42:49:4c 48 No 31s
b4:b6:76:42:49:6a 42 No 33s
c8:17:33:a3:69:2f 33 No 34s
c8:f7:33:a0:a9:6f 35 No 41s
b4:b6:76:42:49:47 37 No 41s
00:0b:6b:b1:79:f5 33 No Cs
58:94:6b:36:5a:56 41 No 9h:27m:23s
c8:f7:33:a4:9a:39 33 No 2m:29s
c8:f7:33:a4:5a:dd 46 No 3s
c8:f7:33:a4:5a:2e 42 No 2s
c8:f7:33:e4:5a:c9 40 No 12s
b4:b6:76:42:5a:91 37 No 18s
7c:d1:c3:8a:6b:be 56 No 51m:33s
00:26:c6:52:6b:14 43 No 5h:23m:36s
58:94:6b:36:cb:e8 45 No 10h:3m:19s
c4:85:08:db:db:e8 40 No 20s
b4:b6:76:42:5b:3f 38 No 28s
b4:b6:76:42:5b:44 46 No 47a
ac:81:12:59:5c:12 54 No 3h:50m:3s
00:1e:e5:e4:ec:d0 35 No 1h:58m:59s
3c:a9:f4:1d:ac:a4 40 No 10h:27m:17s
00:03:77:40:00:13 19 No 30s
c0:cb:38:44:fd:1d 34 No. 1h:40m:9s
00:19:76:76:8d:84 13 No 8m:23s
00:19:77:79:ad:e0 52 No 43a
24:b6:76:42:6d:05 40 No 75
b4:b6:75:42:6d:0a.36 No 28
04:35:06:b3:6d:28 16 No 1m:25s
b4:b6:76:41:fe:a6 45 No 7s
00:15:00:5c:de:00 14 No 53a
08:53:2e:2c:ee:6c 24 No 10s
10:40:f3:e4:5f:62 56 No 8h:50m:12s
00:19:7e:75:11:35 26 No 26m:50s
00·26·06·14·45·10 28 No 51

show ap client-match-refused

show ap client-match-refused []

Description

This command displays the list of clients for which the channel allocation is refused based on the client configuration parameters.

Syntax

Parameter Description

Allows you to filter the output based the ID number of the radio (for example, 0 or 1).

Usage Guidelines

Use this command to view the list of clients for which client match actions are refused. When the client feature is enabled on a W-IAP, the W-IAP measures the RF health of its associated clients. If spectrum lc balancing is triggered and a client's Received Signal Strength Indication (RSSI) is or less than 20 dB, client moved from one AP to another for better performance and client experience.

Example

The following example shows the output of the show ap client-match-refused command.

Client Match Status:: RUNNING BALANCING
Associated: , Threshold:1
Leaving:0, Coming:0
Last Refused Clients Table
MAC RSSI Refused Count Last Refused Time
02:99:00:00:01:33 27 2 3
7e:17:7b:2c:f5:e2 5 4 6
00:27:10:c5:96:54 22 1 0
18:3d:a2:0a:48:3c 33 2 1 

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap client-match-triggers

show ap client-match-triggers

Description

This command displays the configuration conditions that trigger client match events and actions for the c associated with a W-IAP.

Usage Guidelines

Use this command to view the clients match trigger records. When the client match feature is enabled c the W-IAP measures the RF health of its associated clients. Based on the following trigger conditions, the are moved from one AP to another for better performance and client experience.

• Dynamic Load Balancing:
- Sticky Clients
- Band Steering
- Channel Utilization
- Client Capability Match

For more information on client match and client match trigger conditions, see Dell Networking W-Series Instant

6.4.2.0-4.1.1 User Guide.

Example

The following example shows the output of the show ap client-match-triggers command:

Client Match Triggers
StationPHYTarget_APReasonSTA_CAPrssi chanccnt
cutilg_contRSS-CHANCCNTROOMCUTIL
----------------------------
A_CCNTTime
--------
00:15:00:5e:7e:3c09c:1c:12:3a:e9:70Dynamic Load Balancing-2536+12
--4444-2---3h:11m:19s
5a:15:00:00:00:1619c:1c:12:3a:e9:10Sticky Client-176-

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap client-view

show ap client-view

Description

This command displays information about the clients in the AP neighborhood.

Usage Guidelines

Use this command to view information about the clients associated with the neighboring W-IAPs.

Example

The following example shows the output of show ap client-view command:

Client Match Neighbor Table

[EMPTY]

MAC Channel RSSI Clients Threshold Channel Util (%) VC Key Flags Received

---
d8:c7:c8:44:50:c06131---
8m:27s
d8:c7:c8:44:50:d04882---V1s
d8:c7:c8:44:51:b0444010---VR
2m:49s
d8:c7:c8:44:61:a01363---VR58s
d8:c7:c8:44:61:b048243---V1s
d8:c7:c8:44:51:a011504---VR1s
d8:c7:c8:44:62:a06192---V20s
6c:f3:7f:ef:12:c0128010271d9383VRIC4s
6c:f3:7f:ef:12:d0149E72010271d9383VRIC13s
d8:c7:c8:44:62:b014933---9m:8s
6c:f3:7f:ef:03:00624000847face0B5m:7s
d8:c7:c8:44:63:9015392---V19s
6c:f3:7f:ce:f7:80376010271d9383VRIC6s
6c:f3:7f:ee:f7:9052K62010271d9383VRIC4s
d8:c7:c8:44:4a:3016172---S
12m:13s
d8:c7:c8:44:4b:806103---VR

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug airwave

show ap debug airwave

Description

This command displays the list of W-AirWave servers configured on a W-IAP.

Usage Guidelines

Use this command to view the list of W-AirWave servers configured for a W-IAP.

Example

The following example shows the output of show ap airwave command:

Airwave Server List

[EMPTY]

Domain/IP Address Type Mode Status

[EMPTY]

test.com Primary - Not connected

test1.com Backup - Not connected

The output of this command includes the following information:

Column Description
Domain/IP AddressDisplays the IP address or domain name of the W-AirWave server.
TypeDisplays the type of the W-AirWave server. For example, backup or primary server.
ModeIndicates the mode of W-AirWave operation.NOTE: W-AirWave can be configured to operate in the Manage Read/Write Monitor-only+ Firmware Upgrades modes.
StatusIndicates the W-AirWave login status.

Command History

show ap debug airwave-config-received

show ap debug airwave-config-received

Description

This command indicates if any configuration information is received by the W-IAP from the W-AirWave se

Usage Guidelines

Use this command to view if any configuration information is received from the W-AirWave server.

Example

The following example shows the output of the show ap debug airwave-config-received command:

show ap debug airwave-config-received

No configuration received from AirWave yet

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug airwave-data-sent

show ap debug airwave-data-sent.

Description

This command displays information about data exchange between the W-AirWave server and the W-IAP.

Usage Guidelines

Use this command to view information about the data sent to the W-AirWave server.

Example

The following example shows the output of the show ap debug airwave-data-sent command:

cat: /tmp/awc_buf.txt; No such file or directory

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug airwave-events-pending

show ap debug airwave-events-pending

Description

This command displays the pending W-AirWave server events.

Usage Guidelines

Use this command to view the pending W-AirWave server events.

Example

The following example shows the partial output of the show ap debug airwave-events-pending command:

110€

654

6c;f3;7f;56;7f;60

7SPOT

d8:c7:c8:cb:d4:20

2

d8:c7:c8:cb:d4:20

1

Varbind deprecated

Command History

Version Description

Dell Networking W-Series Instant 6.2.1.0-This command is introduced.
3.3

Command Information

show ap debug airwave-signon-key

show ap debug airwave-signon-key

Description

This command displays the W-AirWave sign on key used by the used by the administrator to manually authorize the first Virtual Controller for an organization.

Usage Guidelines

Use this command to view the W-AirWave sign on key details for debugging purpose.

Example

The following example shows the output of the show ap debug airwave-signon-key command:

awc_ui_key_new : Badf05e013cb69393335b32627b02db7b49af0705da9fbda6
awc_ui_key_old : 9418cf5e0137b6b2d99e78c64e8604522948881d78fd7781e2 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug airwave-state

show an debug airwave-state

Description

This command displays the configuration details and status of W-AirWave events associated with a W-IAP.

Usage Guidelines

Use this command to view the current state of W-AirWave events associated with the W-IAP.

Example

The following example shows the output of the show ap debug airwave-state command:

<L>
<e1>fc6520ad018ee6eb13bdc6b985e0fe6361bd37f7d25212a77e</e1>
<e2>Instant-C4:42:30</e2>
<o3></o3>
<e5>0.0.0.0</e5>
<e8>6.2.0.0-3.3.0.0_37557</e8>
<e60>Del' </e60>
<e78>c3adebcd0138eb099'a5ee52mof418883ee1756fbf0beIba81</e79>
<e63></e63>
<e64></e64>
</i1>
<t4>
<o25>cst</o25>
<e26>2</e26>
<e27></e27>
<e28>64</e28>
<e29>1</e29>
<o30>2</o30>
</t4>
<t4>
<e25>test123</e25>
<e26>2</e26>
<o27></o27>
<e28>64</e28>
<o29>1</o29> 
<e47>93</e47>
<e46>3</e46>
</t3>
<t3>
<e1>d8:c7:c8:c6:29:80</e1>
<e23>1</e23>
<e24>22</e24>
<e10>1</e10>
<e11>0</e11>
<e47>80</e47>
<e46>61</e46>
</t3>
</t2> 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug airwave-stats

show ap debug airwave-stats

Description

This command displays the configuration statistics associated with a W-IAP managed or monitored by the AirWave server.

Usage Guidelines

Use this command to view configuration details of a W-IAP managed or monitored by the W-AirWave set

Example

The following example shows the partial output of the show ap debug airwave-stats command:

<t>
<e1>d8:c7:c8:3d:3a:83</e1>
<e25>test_wep</e25>
<e23>1</e23>
<e22>1</e22>
<e21>1</e21>
<e19>2</e19>
<e20>1</e20>
</t7>
<t>
<e1>6:c1f3:7f:e5:df:32</c1>
<e25>sw-sar-rapng-13</e25>
<e23>153</e23>
<e22>1</e22>
<e21>1</e21>
<e19>1</e19>
<e20>1</e20>
</t7>
<t>
<e1>d8:c7:c8:3d:46:c2</e1>
<e25>test_1x_term</e25>
<e23>48</e23>
<e22>1</e22>
<e21>1</e21> 

show ap debug am-config

show an debug am-config

Description

This command displays the information required for debugging a W-IAP.

Syntax

Parameter Description
macMAC address in the trace buffer.

Example

The following example shows the partial output of show ap debug am-config command:

Channel Number

(No text)

17

Valid 40MHz A-Channel Pairs

Channel Number

36

44

32

145

157

AP System Configuration

[EMPTY]

Parameter Value

AM Scan RF Band all

RF Behavior Configuration

Frame Receive Error Rate Low Watermark 0

Frame Retry Rate High Watermark 0

Frame Retry Rate Low Watermark 0

Interference Configuration

Parameter Value

Detect Interference Disable

Interference Increase Threshold 0

Interference Increase Timeout ()

Interference Wait Time 0

IDS General Configuration

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug auth-trace-buf

show ap debug auth-trace-buf []

Description

This command displays the trace buffer for authentication events associated with the W-IAP.

Syntax

Parameter Description
Displays the authentication trace information for a specific MAC address.

Usage Guidelines

Use the output of this command to troubleshoot authentication errors. Include the parameter to data by the MAC address of the client to view specific details.

Example

The following example shows the output of show ap debug auth-trace-buf command:

Auth Trace Buffer

May 10 13:05:09 station-up * ac:81:12:59:5c:12 d8:c7:c8:3c:42:13 - - wpa2 pck acc
May 10 13:05:09 wpa2-key1 <- ac:81:12:59:5c:12 d8:c7:c8:3d:42:13 - 117
May 10 13:06:30 station-up * 08:ed:b9:e1:51:7d d8:c7:c8:3c:42:12 - - wpa2 pck acc
May 10 13:06:30 wpa2-key1 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:06:30 wpa2-key2 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:06:30 wpa2-key3 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 151
May 10 13:06:30 wpa2-key4 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 95
May 10 13:07:03 station-up * 08:ed:b9:e1:51:7d d8:c7:c8:3c:42:12 - - wpa2 pck acc
May 10 13:07:03 wpa2-key1 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:07:03 wpa2-key2 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 117
May 10 13:07:03 wpa2-key3 <- 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 151
May 10 13:07:03 wpa2-key4 -> 08:ed:b9:e1:51:7d d8:c7:c8:3d:42:12 - 95 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug client-match

show ap debug client-match

Description

This command displays the information about the client match configuration status on an AP radio interf

Syntax

Parameter Description
Allows you to specify the ID number of the radio (for example, 0 or 1) for which you want to view client match configuration status.

Usage Guidelines

Use this command to view the status of client match configuration for a specific radio interface.

Example

The following example shows the output of show ap debug client-match command:

Client Match Status::RUNNTNG

Associated:0, Threshold:MAX

Leaving:0, Coming:0

Command History

VersionDescription
Dell Networking W-Series Instant 6.3.1.14.0This command is introduced.

Command Information

show ap debug client-stats

show an debug client-stats

Description

This command displays detailed statistics about a W-IAP client.

Syntax

Parameter Description
Displays data based on the client MAC address.

Usage Guidelines

Use this command to view information about a W-IAP client.

Example

The following command output displays statistics for packets received from and transmitted to the specif client:

Station Stats
----
Parameter Value
----
---- General Per-radio Statistics
----
---- Transmit specific Statistics
Frames Rovd For TX 22
Tx Frames Dropped 0
Frames Transmitted 22
Success With Retry 1
Tx Mgmt Frames 2
Tx Probe Responses 0
Tx Data Frames 20
Tx CT5 Frames 0
Dropped After Retry 0
Dropped No Buffer 0 

Rx Data Frames 2930

Null Data Frames 2879

Rx Mont Frames 1

PS Poll Frames 0

Rx 6 Mops 14

Rx 12 Mbps 6

Rx 18 Mbps 5

Rx 24 Mbps 2

Rx 36 Mbps

Rx 48 Mbps 1162

Rx 54 Mbps 1730

Rx NMM [BE] 39

The output of this command includes the following information:

Parameter Description

Frames Rcvd For TXShows the number of frames received for transmission.
Tx Frames DroppedShows the number of transmission frames that were dropped.
Frames TransmittedShows the number of frames successfully transmitted.
Succous With RetryShows the number of frames that were transmitted after being retried.
Tx Mgmt FramesShows the number of management frames transmitted.
Tx Probe ResponsesShows the number of transmitted probe responses.
Tx Data FramesShows the number of transmitted data frames.
Tx CTS FramesShows the number of clear-to-sent (CTS) frames transmitted.
Dropped After RetryShows the number of frames dropped after an attempted retry.
Dropped No BufferShows the number of frames dropped because the AP's buffer was full.
Missed ACKsShows the number of missed acknowledgements (ACKs)
Parameter Description
Tx WMM [VI]: Video
UAPSD OverflowDropShows the number of packets dropped due to Unscheduled Automatic Power Save Delivery (U-APSD) overflow.
Last SNRIndicates the last recorded signal-to-noise ratio.
Last SNR CTL0Indicates the signal-to-noise ratio for the last received data packet on the primary (control) channel 0. This parameter is only displayed for APs operating in 40 MHz mode.
Last SNR CTL1Indicates the signal-to-noise ratio for the last received data packet on the secondary (control) channel 1. This parameter is only displayed for APs operating in 40 MHz mode.
Last SNR CTL2Indicates the signal-to-noise ratio for the last received data packet on the secondary (control) channel 2. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNRIndicates the signal-to-noise ratio for the last received ACK packet.
Last ACK SNR CTL0Indicates the signal-to-noise ratio for the last received ACK packet on the primary (control) channel 0. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR CTL1Indicates the signal-to-noise ratio for the last received ACK packet on the primary (control) channel 1. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR CTL2Indicates the signal-to-noise ratio for the last received ACK packet on the primary (control) channel 2. This parameter is only displayed for APs operating in 40 MHz mode.
Last ACK SNR EXT0Indicates the signal-to-noise ratio for the last received ACK packet on the
Parameter Description
RxMbpsShows the number of frames received atMbps, whereis a value between 6 and 300.
Tx ROMShows the number of Wi-Fi Multimedia (WMM) packets transmitted for the following access categories. If the AP has not transmitted packets in a category type, this data row will not be displayed in the output of the command.Tx WMM [BE]: Best EffortTx WMM [BK]: BackgroundTx WMM [VO]: VoIPTx WMM [VI]: Video

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug client-table

show ap debug client-table

Description

This command shows the clients associated with a W-IAP.

Usage Guidelines

Use this command to view a list of W-IAP clients.

Example

The following example shows the output of show ap debug client-table command:

Client Table

[EMPTY]

MAC ESSID BSSID Assoc_State HT_State AID PS_State

08:ed:b9:e1:51:7d example1 d8:c7:c8:3d:42:12 Associated WSsM 0x1 Awake

UAPSD Tx_Pkts Rx_Pkts PS_Qlen Tx_Retries Tx_Rate Rx_Rate Last_ACK_SNR

(1) 12 (2) 12 (3) 12 (4) 12 (5) 12 (6) 12 (7) 12 (8) 12 (9) 12 (10) 12

(0,0,C,O,N/A,0) 101 12888 0 0 300 300 45

Last Rx SNR TX Chains Tx Timestamp Rx Timestamp MFP Status (C,R)

[EMPTY]

50 3[0x7] Sun May 12 07:41:25 2013 Sun May 12 07:42:13 2013 (0,0)

UAPSD: (VO, VI, BK, BE, Max SP, Q Len)

HT Flags: A - LDPC Coding; W - 40MHz; S - Short GT FT20; s - Short GT HT20

D - Delayed 2A; G - Greenfield; R - Dynamic 3M PS

Q - Static SM PS; N - A-MFDU disabled; B - TX STBC

b - RX 3TBC; M - Max A-MSDU; I - HT4C Intolerant

The output of this command includes the following information:

Parameter Description

Parameter Description
UAPSDShows the following values for Unscheduled Automatic Power Save Delivery (UAPSD) in comma-separated format: VO, VI, BK, BE, Max SP, Q Len.VO: If 1, UAPSD is enabled for the VoIP access category. If UAPSD is disabled for this access category, this value is 0.VI: If 1, UAPSD is enabled for the Video access category. If UAPSD is disabled for this access category, this value is 0.BK: If 1, UAPSD is enabled for the Background access category. If UAPSD is disabled for this access category, this value is 0.BE: If 1, UAPSD is enabled for the Best Effort access category. If UAPSD is disabled for this access category, this value is 0.Max SP: The maximum service period is the number of frame sent per trigger packet. This value is value can be 0, 2, 4 or 8.Q Len: The number of frames currently queued for the client, from 0 to 16 frames.
Tx_FktsShows the number of packets transmitted by the client.
Rx_PktsShows the number of packets received by the client.
FS_GlenShows power save queue length, in bytes.
Tx_RetricsShows the number of packets that the client had to resend due to an initial transmission failure.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.03.3This command is introduced.

show ap debug crash-info

show ap debug crash-info

Description

This command displays log information for a W-IAP that crashed. The stored crash information is cleared the flash after the W-IAP reboots.

Syntax

No parameters

Usage Guidelines

Use this command to view the W-IAP crash information for debugging purpose.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug dhcp-packets

show ap debug dhcp-packets

Description

This command displays information about the DHCP packets sent or received by a W-IAP.

Usage Guidelines

Use this command to view information about the DHCP packets trace information for a W-IAP.

Example

The following example shows the output of show ap debug dhcp-packets command:

Traced Dhop Packets

(No text)

Timestamp Mtype Etype Hops TID Cip Yip Sip Gip Crac

The output of this command includes the following parameters:

Column Description
TimestampDisplays the timestamp for DHCP packets.
MtypeIndicates the message type.
MtypeIndicates the hardware address type
HopsShows the number of hops.
TIDShows the transaction ID.
CipIndicates the client IP address.
YipIndicates the IP address of the W-IAP.
SipIndicates the source IP address from which the DHCP packets originated.

show ap debug dot1x-statistics

show ap debug dox-statistics

Description

This command displays the aggregate 802.11X debug statistics for a W-IAP.

Usage Guidelines

Use this command to view information about the 802.11x authentication.

Example

The following output is displayed for the show ap debug dot1x-statistics command:

802.1X Statistics

(No text)

Mac Name AP Auth-Succs Auth-Fails Auth-Tmout Re-Auths

08:ed:b9:e1:51:7d d0:c7:c8:3d:42:12 0 0 0 0

Total: 0 0 0 0

Supp-Naks UKeyRot MKeyRot

0 0 0

0 0 0

802.1x Counters

NEA2

Message-2....3

Message-2....2

Message-3....2

Message-4....2

The output of this command includes the following parameters:

Parameter Description

Mac

Displays the MAC address of the authenticated client.

Parameter Description
MkeyBotDisplays the multicast key rotation details.
802.1X countersDisplays the 802.1X authentication counters.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug driver-config

show ap debug driver-config

Description

This command displays W-IAP driver configuration.

Usage Guidelines

Use this command to review configuration changes made since the W-IAP driver was last reset.

Example

The show ap debug driver-config command displays the BSSID, SSID, and radio configuration details associated with the W-IAP driver. The following output is displayed for the show ap debug driver-config command:

Downloaded Config for WIFI 0

[EMPTY]

Item Value


BSSTD d8:c7:c8:3d:42:12

LMS IP

Master IP 0.0.0.0

Mode AP Mode

Group Key Received Yes

QRSS Probe Response Allow Access

Native VLAN ID 1

LED operating mode (11n APs only) normal

SAP MTU 1500 bytes

Heartbeat DSCP 0

High throughput enable (radio) Enabled

Channel 44+

Transmit RTRP 24 dBm

Non-Wi-Fi Interference Immunity 2

Enable CSA Disabled

CSA Count 4

Advertise 802.11d and 802.11h Capabilities Disabled

TPC Power 0 dBm

Seoulou, Toud, Thalouling, Dipahled

Honor 40 MHz intolerance Enabled

CSD override Enabled

Advertise 802.11K Capability Disabled

Measurement Mode for Beacon Reports passive

Channel for Beacon Requests in 'A' band 0

Channel for Beacon Requests in 'BG' band 0

Channel for AF Channel Reports in 'A' band 0

Channel for AP Channel Reports in 'BG' band 0

Time duration between consecutive Beacon Requests 0 sec

Time duration between consecutive Link Measurement Requests 0 sec

Time duration between consecutive Transmit Stream Measurement Requests 0 sec

Enable Handover Trigger feature Disabled

Advertise Enabled Capabilities TE Disabled

Advertise Country IE Disabled

Advertise Power Constraint IE Disabled

Advertise TPC Report IE Disabled

Advertise QBSS Load IE Disabled

Advertise RSS AAC TE Disabled

Advertise Quiet IE Disabled

Advertise Fast-RSS Transition (802.11r) Capability Disabled

Fast-BSS Transition Mobility Domain ID 0

Country Code IN

ESSID example1

Encryption wpa2-psk-aes

NPA2 Pre-Auth Disabled

Enable Management Frame Protection Disabled

Require Management Frame Protection Disabled

DTIM Interval 1 beacon periods

802.11a Basic Rates 6-2.24

802.11a Transmit Rates 6 9 12 18 24 36 48 54

Station Agoat Time 1000 sec

Max Transmit Attempts 16

RTS Threshold 2333 bytes

Max Associations 6

Wireless Multimedia (WMK) Enabled

Wireless Multimedia U-AFSD (NMM-UAFSD) Powersave Enabled

MMM TSPEC Min Inactivity Interval 0 msec

DSCP mapping for NMM voice AC N/A

DSCP mapping for WMM video

DSCP mapping for NMM best-effort AC N/A

DSCP mapping for NMM background AC-NA

Max received A-MPOU size 65535 bytes

Max transmitted A-MPDU size 65535 bytes

Min MPDU start spacing 16 usec

Short guard interval in 20 MHz mode Enabled

short guard interval in 40 MHz mode Enabled

Supported MCS set

Explicit Transmi. Beamforming Disabled

Transmit Beamforming Compressed Steering Disabled

Transmit Beamforming non Compressed Steering Disabled

Transmit Beamforming delayed feedback support Disabled

Transmit Beamforming immediate feedback support Disabled

Transmit Beamforming Sounding Interval 0 sec

40 MHz channel usage Enabled

BA AMSDU Enable Disabled

Temporal Diversity Enable Enabled

High throughput enable (SSID) Enabled

Low-density Farity Check Enabled

Maximum number of spatial streams usable for STBC reception 1

Maximum number of spatial streams usable for STBC transmission 1

MPDU Aggregation Enabled

Max received A-MPDU size 65535 bytes

Max transmitted A-MPDU size 65535 bytes

Min MPDU start spacing 16 usec

Short guard interval in 20 MHz mode Enabled

Short guard interval in 40 MHz mode Enabled

Supported MCS set

Explicit Transmit Beamforming Disabled

Transmit Beamforming Compressed Steering Disabled

Transmit Beamforming non Compressed Steering Disabled

Transmit Beamforming delayed feedback support Disabled

Transmit Boanforming immediate feedback support Disabled

Transmit Beamforming Sounding Interval 0 sec

Forward mode bridge

Band Steering Enabled

Steering Kode prefer-5ghz

Dynamic Multicast Optimization (DMC) Disabled

Dynamic Multicast Optimization (DMO) Threshold 0

VA2 or radio 1 : is not created and 's not enabled

show ap debug mgmt-frames

show an debug mgmt-frames

Description

This command displays the trace information for the 802.11 management frames.

Syntax

Parameter Description
Displays trace information for a W-IAP based on MAC address.

Example

The following example shows the partial output of show ap debug mgmt-frames command:

Traced 802.1 Management Frames

(No text to output)

Timestamp style 5A DE BSS signal Misc

[EMPTY]

May 9 23:09:42 daouln d8:c7:c6:c4:29:82 c8:ed:b9:e1:51:87 d8:c7:c6:c4:29:82 15 -

May 9 23:09:42 d:sassoc d8:c7:c8:c4:29:82 c8:ed:b9:e1:51:87 d8:c7:c8:c4:29:82 15 -

May 9 23:09:03assoc-respd8:c7:c8:c4:29:82 08:ed:b9:c1:51:87 d8:c7:c8:c4:29:82 15Success

May 9 22:02:40 auth d8:c7:c8:c4:29:8b c4:65:08:de:06:d4 d8:c7:c8:c4:29:8b 15Success

May 9 01:25:51 auth 08:ed:b9:e1:51:B7 d8:c7:c8:c4:29:8a d8:c7:c8:c4:29:8a 60 -

The output of this command includes the following information:

Column Description
TimestampIndicates timestamp for the authentication management frame.
stypeIndicates the type of the packet.
SAIndicates the source of the packets.
DAIndicates the destination to which the packets are intended.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug persistent-clients

show an debug persistent-clients

Description

This command displays the information about the persistent W-IAP clients.

Usage Guidelines

Use this command to view information about the clients that are persistently connected to a W-IAP.

Example

The following example shows the output of show ap debug persistent-clients command:

Persistent Clients

MAC Address ESSID State Expired Update Time Expiration Time

The output of this command includes the following information:

Column Description
EAC AddressShows the MAC address of the client.
FSSIDShows the ESSID used by the client.
StateIndicates the connection status of the client
ExpiredIndicates if the client session is expired.
Update TimeIndicates the update time.
Expiration TimeIndicates the time at which the client session expires.

Command History

show ap debug radio-stats

show ap debug radio-stats []

Description

This command displays the aggregate radio debug statistics of a W-IAP.

Syntax

Parameter Description
Allows you to specify the ID number of the radio (for example, 0 or 1) for which you want to view statistics.

Usage Guidelines

Use this command to view the radio debug statistics for a W-IAP.

Example

The output of this command displays general statistics for the radio, as well as statistics for transmitted received frames.

RADIO State

Parameter Value

[EMPTY]

Tx Powersave Queue Timouts 0

Tx Dropped After Retry 158551

Tx Dropped No Buffer 0

Tx Missed ACKs 158581

Tx Failed Beacons

Tx Multi-Beacon Fail 0

Tx Long Preamble 557650

Tx short Preamble 0

Tx Beacon Interrupts 2597365

Tx Interranta 780046

Tx Data Bytes 108 Mbps (Mon) C

RADIO Stats

Parameter Value

Tx Data Bytes 108 Mbps+ (Mon) 0

Tx 6 Mbps 557650

Tx NMM [BE] 125

Tx NMM [VO] 557532

Tx WMM [BE] Dropped 158561

Tx UAPSD OverflowDrop 0

TX Timeouts 36

Lost Carrier Events 8

Tx HT40 Hang Detected 0

Tx HT40 Hang Stuck 0

Tx HT40 Hang Possible 0

Tx HT40 Dfs TMM WAR 0

Tx HT40 Dis HT20 MAR O

Tx MAC/BB Fang Stuck 0

Tx Mgmt Bytes 1434583125

Tx Beacons Bytes 1202571538

---- Receive Specific Statistics

Rx Last 5NR 16

Rx Last SNR CTLO 14

Rx Last SNR CTL1 13

Rx Last ACK SNR 0

Rx Frames Received 5622989

Rx Good Frames 4517471

Rx Bed Frames 1105518

Rx Total Data Frames Recvd 518806

Rx Total Mgmt Frames Recvd 3261635

Rx Total Control Frames Recvd 736829

Rx Total Bytes Recvd 755424522

Rx Total Data Bytes Recvd 78179450

Rx Total RTS Frames Recvd 230212

Rx Total CTS Frames Recvd 204854

Rx Total ACK Frames 2344801

The output of this command provides the following information:

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug radius-statistics

show ap debug radius-statistics

Description

This command displays the RADIUS statistics for the authentication servers configured on a W-IAP.

Usage Guidelines

Use this command to view the authentication server details.

Example

The output of this command displays general statistics of the authentication servers configured on a W-l

RADIUS Statistics

Statistics TerminationServer InternalServer testserver test1234

In Service: Management AuthNot usedNot usedNot usedNot used
In Service: Example1Not usedUp 67920sNot usedNot used
Accounting Requests0000
Raw Requests0000
PAP Requests0000
CHAP Requests0000
MS-CHAP Requests0000
MS-CHAPv2 Requests 00
Mismatch Response0000
Invalid Secret0000
Access-Accept0000
Access-Reject0000
Accounting-Response0000
Access-Challenge0000
Unknown Response code0000
Timeouts0000
AvgRespTime (ms)0000
Total Qrequests0000
Total Response0000
Read Error 0000

show ap debug shaping-table

show an debug shaping-table

Description

This command displays the shaping information for clients associated to a W-IAP.

Usage Guidelines

Use this command to view the shaping information for clients connected to a W-IAP.

Example

The following output is displayed for the show ap debug shaping-table command:

Interface :wifil

VAP aruba102

in out drop fail q cmn 'C:O:H] Numcl TotCl 2Wmgmt

28 28 0 0 0 328787-328787-328787 0-0-0 0 1 -0

idx tokens last-t low-t in out drop fail q tx-t rx-t al-t rate

in out drop fail o cmr[C:O:H] Numcl TotCl BWmqmt

0 0 0 0 0 328787-328787-328787 0-0-0 0 1 -0

The output of this command provides the following information:

Column Description

in

Chour the number of oscillates received by the AD

Column Description
last-tShows the number of tokens that were allocated to the station last time allocation algorithm ran.
lnShows the number of packets received.
outShows the number of packets sent.
dropShows the number of dropped packets.
qShows the number of queued packets
tx-tShows the total time spent transmitting data.
zx-tShows the total time spent receiving data.
al-tShows the total time allocated for transmitting data to this station.

token

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is Introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug spanning-tree

show ap debug spanning-tree

Description

This command displays the Spanning Tree Protocol (STP) information for a W-IAP.

Usage Guidelines

Use this command to view STP details on a W-IAP. STP is enabled for a wired port profile to ensure that are no loops in any bridged Ethernet network. STP operates on all downlink ports, regardless of forward mode. STP will not operate on the uplink port and is supported only on W-IAPs with three or more por

Example

The following example shows the output displayed for the show ap debug spanning-tree command when there are no STP devices found:

stpdev: can't get info No such device

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ap debug stm-config

show an debug stm-config

Description

This command displays the W-IAP station management configuration information.

Usage Guidelines

Use this command to view the details of station management configuration.

Example

The following output is displayed for the show ap debug stm-config command:

SSID:

Server Load Balancing: disable

MAC Authentication: disable

RADIUS Accounting: disable

SSID: _wired_eth

Server Load Balancing: disable

MAC Authentication: disable

RADIUS Accounting: disable

SSID:wireless-local-mv

Server Load Balancing: disable

MAC Authentication: disable

RADIUS Accounting: disable

Associated RADIUS Server:InternalServer

The output of this command provides the following information for each SSID:

Column Description
SSIDIndicates the name of the SSID.
Server Load BalancingIndicates if server load balancing is enabled.
MAC AuthenticationIndicates if MAC authentication is enabled.

show ap debug system-status

show ap debug system-status

Description

This command displays the detailed system configuration information for a W-IAP.

Usage Guidelines

Use this command under the guidance of Dell technical support to troubleshoot network issues. The out this command displays the following types of information if any for the selected W-IAP:

Bootstrap informationPer-radio statisticsEthernet duplex/speed settings
Descriptor UsageEncryption statisticsTunnel heartbeat stats
Interface countersAP uptimeBoot version
MTU discoverymemory usageLMS information
ARP cacheKernel slab statisticsPower status
Route tableInterruptsCPU type
Interface InformationCrash InformationCPU usage statistics

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

show ap dot11k-beacon-report

show ap dot1k-beacon-report

Description

This command displays the beacon report details for the 802.11k clients of a W-IAP.

Syntax

Parameter Description

Allows you to specify the MAC address of the client for which you want to view the beacon report details.

Usage Guidelines

Use this command to view the beacon report details for 802.11k clients connected to a W-IAP.

Example

The following example shows the output of the show ap dot11k-beacon-report command:

(Instant AP)# show ap dot11k-beacon-report 70:11:24:56:02:72

Client: 70:11:24:56:02:72

Status: Success

Nbr count:

Last received: 31s

Client 11k Beacon Report

BSSIDChannelRSSIAntenna
6c:f3:7f:b6:62:f038920
6c:f3:7f:b6:69:3038940
6c:f3:7f:4a:43:d046940
6c:f3:7f:b6:66:3046920

The output of this command displays information on the number of 802.11k neighbors, connection status and the channel. RSSI and antenna details for the specified MAC address.

show ap dot11k-nbrs

show ap dot1k-nbrs

Description

This command displays the neighboring details of the 802.11k clients connected to a W-IAP.

Usage Guidelines

Use this command to view neighbors of the 802.11k clients connected to a W-IAP.

Example

The following example shows the output of the show ap dot11k-nbrs command:

Radio: 0

Nbr count: 3

11k Neighbours

[EMPTY]

BSSIDChannelLast Update
6c:f3:7f:b6:62:f02921s
6c:f3:7f:b6:69:308166s
6c:f3:7f:b6:66:308085s
Radio: 1
Nbr count: 3
1lk Neighbours
RSSTDChannelLast Update
6c:f3:7f:b6:62:e0113s
6c:f3:7f:b6:66:20633s
6c:f3:7f:b6:69:20633s

The output of this command displays information on the number of 802.11k neighbors on each radio of W-IAP.

Command History

show ap flash-config

show ap flash-config

Description

This command shows the statistics of the W-IAP configuration stored in flash memory.

Usage Guidelines

Use this command to view the configuration details in the flash memory.

Example

The following example shows the output of show ap flash-config command:

IP Address: 10.15.20.252

Network Mask:10.15.22.257

Gateway IP:10.13.20.255

DNS Server: 92.168.1.10

Domain Name: floor1.test.com

Name: Undefined

The output of this command includes the following information:

Parameter Description
IP AddressDisplays the IP address of the W-IAP.
Network MaskDisplays the Network mask of the network.
Gateway IPDisplays the Gateway IP address to which traffic is sent.
DNS ServerDisplays the IP address of the DNS server.
Domain NameDisplays the Domain name of the server
NameDisplays the name of the W-IAP.

show ap mesh counters

show ap mesh counter

Description

This command displays the mesh counters for a W-IAP.

Usage Guidelines

Use this command to view a list of mesh counters available for a W-IAP.

Example

The following example shows the output of show ap mesh counter command.

Mesh Packet Counters

[EMPTY]

Interface Echo Sent Echo Recv Probe Req Probe Resp Assoc Req Assoc Resp Assoc Fail Link up/down Resel. Switch Other Mgmt

Parent 0 0 770 770(770 HT) 0 0 0 0 - - 0

Received Packet Statistics: Total 7013859, Mgmt 7013859 (dropped non-mesh 0), Data 0 (dropped unassociated 0)HT: pns-770 ans-0 pnr-0 ars-0 arr-0 anr-0 Recovery Profile Usage Counters

Item Value

Enter recovery mode 0

Exit recovery mode (

Total connections to switch 0

Mesh loop-prevention Sequence No.:370765

Mesh timer ticks:37C764

d8:c7:c8:c4:42:96# show ap mesh counters

Mesh Packet Counters

[EMPTY]

Interface Echo Sent Echo Recv Probe Req Probe Resp Assoc Req Assoc Resp Assoc Fail Link up/down Resel. Switch Other Mgmt

Column Description
Echo SentNumber of echo packets sent.
Echo RecvNumber of echo packets received.
Probe ReqNumber of probe request packets sent from the interface specified in the Mesh-IF parameter.
Probe RoupNumber of probe response packets sent to the interface specified in the Interface parameter.
Assoc ReqNumber of association request packets from the interface specified in the Interface parameter.
Assoc RespNumber of association response packets from the interface specified in the Interface parameter. This number includes valid responses and fail responses.
Assoc FailNumber of fail responses received from the interface specified in the Interface parameter.
Link up/downNumber of times the link up or link down state has changed.
Reset.Number of times a mesh point attempted to reselect a different mesh portal.
SwitchNumber of times a mesh point successfully switched to a different mesh portal.
Other MgmtManagement frames of any type other than association and probe frames, either received on child interface, or sent on parent interface.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

show ap mesh link

Description

This command shows the mesh link of the W-IAP.

Example

The following example shows the output of show ap mesh link command:

(Instant AP) | show ap mesh link

Neighbor list

......

MAC Portal Channel Age Hops Cost Relation Flags RSSI

Rate Tx/Fx

00:1a:le:88:02:91 00:1a:le:88:01:f0 157 0 1 4.00 C 3h:35m:30s EL 59

300/300

00:Cb:86:9b:27:78 Yes 157 0 0 12.00 N 3h:22m:46s - 26 -

00:0b:86:e8:09:d0 00:1a:1e:88:01:f0 157 0 1 11.00 X 3n:15m:36s - 65 -

00:1a:1e:88:02:90 00:1a:1e:88:01:f0 157+ 0 1 2.00 N 3h:35m:6s HT, 59 -

A-Req A-Resp A-Fail HT-Details Cluster ID

1 1 0 Unsupported sw-ad-GB32

1 1 0 HT-40MHzsq1-2ss sw-ad-GB322

0 0 0 Unsupported mol

0 0 0 Unsupported sw-ad-GB32

0 0 0 HT-40MHzsqi-2ss sw-ad-GB32

Total count: 5, Children: 2

The output of this command includes the following information:

Parameter Description

MACMAC address of the mesh node.
ErdelParameter DescriptionBu default this column displays the PCCID of the mesh point. If you include the
and the amount of time that relationship has existed.P = ParentC = ChildN = NeighborB = Blacklisted-neighbor
FlagsThis parameter shows additional information about the mesh neighbor. The key describing each flag is displayed at the bottom of the neighbor list.
RSSIThe Receive Signal Strength Indicator (RSSI) value displayed in the output of this command represents signal strength as a signal to noise ratio. For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold.
Rate Tx/RxThe rate, in Mbps, that a neighbor transmits data to or receives data from the mesh-node specified by the command.
A-ReqNumber of association requests from clients.
A-RespNumber of association responses from the mesh node.
A-FoilNumber of association failures.
Cluster IDName of the Mesh cluster that includes the specified AP or BSSID.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

show ap mesh neighbors

show ap mesh neighbors

Description

This command shows all mesh neighbors for an AP.

Example

The following example shows the output of show ap mesh neighbors command:

Neighbor list

MAC Portal Channel Age Hops Cost Relation Flags RSSI Rate Tx/Rx A-Req A-Resp A-Pa1 HT-Details Cluster ID

____

6cf:3:7f:5:df:90 Yes 157 23 0 5.00 N 23a HIK 33 - 0 0 0 HP=20MHzsqi-3ss 78042c34005c8b372do472dl0727of 6cf:3:7f:5:df:30 Yes 153 0 0 5.00 N 3d:18h:16m:4s HIK 13 - 0 0 0 HT=20MHzsqi-3ss 88c35b6cb66d4cc984d9a7077a43936 d8:c7:c8:3d:3b:10 Yes 161 15 0 5.00 N 15a HIK 50 - 0 0 0 HP=20MHzsqi-3ss 78042c34005c8b372do472dl0727of Total count: 3, Children: 0 Relation: P = Parent; C = Child; N = Neighbor; B = Blacklisted-neighbor Flags: R = Recovery-mode; S = Sub-threshold link; D = Reselection backoff; F = Auth-failure; U = High Throughput; S = Legacy allowed K = Connected; U = Upgrading; G = Descendant-upgrading; X = Config pending; Y = Assoc- resp/Auth pending a = SA! Accepted; b = SA! Blacklisted-neighbour; e = SAK, Enabled; u = portal-unreachable; o = opensystem

The output of this command includes the following information:

Parameter Description
MACMAC address of the mesh node.
PortalBy default, this column displays the BSSID of the mesh point. If you includeand the amount of time that relationship has existed.P = ParentC = ChildN = NeighborB = Blacklisted-neighbor
FlagsThis parameter shows additional information about the mesh neighbor. The key describing each flag is displayed at the bottom of the neighbor list.
RSSIThe Receive Signal Strength Indicator (RSSI) value displayed in the output of command represents signal strength as a signal to noise ratio. For example, a value of 30 would indicate that the power of the received signal is 30 dBm at the signal noise threshold.
Rate Tx/RxThe rate, in Mbps, that a neighbor transmits data to or receives data from the mesh-node specified by the command.
A-ReqNumber of association requests from clients.
A-RespNumber of association responses from the mesh node.
A-FoilNumber of association failures.
Cluster IDName of the Mesh cluster that includes the specified AP or BSSID.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

show ap monitor

show ap monitor {active laser-beams | ap-list | ap-wired-mac | arp-cache | containment-info | coet-wired-mac | ids-state | pot-ap-list | pot-sta-list | routers | scan-info | sta-list | state | stats | status}

Description

This command shows information for W-IAP Air Monitors.

Syntax

Parameter Description
active-laser-beansShows active laser beam generators. The output of this command shows a list of all APs that are actively performing policy enforcement containment such as rogue containment. This command can tell us which AP is sending out deauthorization frames, although it does not specify which AP is being contained.
ap-listShows list of APs being monitored.
ap-wired-macShows the MAC address of the wired W-IAP.
arp-cacheShows ARP Cache of learned IP to MAC binding
containment-infoShows containment events and counters triggered by the wired containment and wireless containment features configured in the ids. The output of this command shows device and target data for wired containment activity, as well as data for the following counters. Wireless Containment Counters:Last Deauth Timer TickDeauth frames to APDeauth frames to ClientLast Tarpit Timer TickTarpit Frames: Probe ResponseTarpit Frames: Association Response
ids-stateShows IDS State.
pot-ap-listDisplay the Potential AP table. The Potential AP table shows the following data:• bssid: the AP's Basic Service Set Identifier.• channel: The AP's current radio channel• phy type: The radio's PHY type. Possible values are 802.11a, 802.11a-HT-40, 802.11b/g, 802.11b/g-HT-20.• num-beacons: Number of beacons seen during a 10-second scan• tot-beacons: Total number of beacons seen since the last reset.• num-frames: Total number of frames seen since the last rest.• mt: Monitor time; the number of timer ticks elapsed since the first AP is recognized.• at: Active time, in timer ticks.• ibss: Shows if ad-hoc BSS is enabled or disabled. It will be enabled if the bssid has detected an ad-hoc BSS (an ibss bit in an 802.11 frame).• rssl: The Receive Signal Strength Indicator (RSSI) value displayed in the output of this command represents signal strength as a signal to noise ratio.For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold.
pot-sta-listShows the Potential client table. The Potential Client table shows the following values:• last-bssid: the Last BSSID to which the client associated.• from-bssid,• to-bssid• mt:Monitor time; the number of timer ticks elapsed since the first client is recognized.

Active Laser Beam Sources

(No text to output)

basid channel resl ap name lms ip master ip inactive time

show ap monitor ap-list

The following example shows the output of show ap monitor ap-list command:

Monitored AP Table

[EMPTY]

basid esaid chan ap-type phy-type dos dt/mt ut/it encr hatas avg-rasi curr-rasi wmacs ibss

(No text to output)

d3:c7:c8:3d:3a:93 rahul_wep 149 interfering 80211a-HT-40 disable 3904/36 97/0 wep 0 0 20 0 no

00:24:6c:80:7d:11 NTT-SPOT 1 interfering 80211b/g disable 3897/3897 9/8 wep 0 9 11 0 no

6c:f3:7f:b5:74:22 syelbarg1 Interfering 80211b/q-HT-20 disable 3817/3817 0/0 wpa2-psk-aes 0

42 41 0 no

00:24:6c:80:7d:12 docomo 1 interfering 80211b/q disable 3779/3779 1/0 weo 0 8 7 0 no

6c:f3:7f:b6:74:32 syelburgi 40 interfering 8021la-HC-40 disable 3729/612 34/0 wpa2-psk-aes 0

59 59 0 no

00:00:86:51:02:28 kannan-01 44 interfering 80211a disable 3613/1212 10/0 wpa2-psk-aes 0 36 33

3 no

00:0c:86:51:02:2b kannan-03 44 interfering 8021la disable 3555/1154 10/0 wpa2-psk-aes 0 38 35

0 no

00:Co:86:51:02:29 said-2 44 interfering 8021a disable 35:8/1117 10/0 wpa2-psk-a-s 0 37 33 0

no

00:0b:86:51:02:2c kannan-04 44 interfering 8021la disable 3494/1093 10/0 open 0 38 35 0 no

00:00:86:51:02:2a kannan-02 44 interfering 8021la disable 3459/1058 10/0 open 0 38 34 0 no

00:06:86:51:02:2d kannan-05 44 interfering 8021la disab'e 3459/1058 10/0 open 0 37 34 0 ro

00:Co:86:51:02:2e kannan-06 44 interfering 8021la disable 3459/1058 10/0 open 0 37 33 0 no

00:06:86:51:02:2f kannan-07 4 interfering 80211a disab'e 3/59/1058 10/0 open 0 37 34 0 ro

00:0b:86:51:02:20 kannan-01 11 interfering 80211b/g disable 3444/1160 23/0 wpa2-psk-aes 0 0 24

0 no

6c:13:71:56:81:0C /SPOT 1 interfering 8021b/a-HT-20 disable 3308/3306 72/71 open 0 0 10 C no

00:0b:86:51:02:21 ssid-2 11 interfering 8021/b/g disable 3277/764 101/0 woa2-psk-aes 0 0 28 0

по

00:06:86:51:02:22 kannan-02 1° interfering 8021lb/g disable 3271/958 58/0 open 0 0 27 0 no

show ap monitor ap-wired-mac

The following example shows the output of show ap monitor ap-wired-mac command:

mac ip vlarid age
--- -- ----
d8:c7:c8:cb:d4:20 10.17.88.188 0 ls
d8:c7:c8:cb:d3:d4 10.17.88.186 0 ls
00:0b:86:40:lc:a0 10.17.88.129 0 lm:18s 

show ap monitor enet-wired-mac

The following example shows the output of show ap monitor enet-wired-mac command:

Wired MAC Table

[EMPTY]

mac age

show ap monitor ids-state

Use this command to view information about the Intrusion Detection System (IDS) the following detection policies:

• Detect Block ACK DOS

- Disconnect station attack

• Intrusion event Type

• Intrusion rate parameters

• Detect Omerta attack

• Detect Power Save DOS Attack

• Detect Rate Anomaly

- Sequence

- IDS Signature—Deauthentication Broadcast and Deassociation Broadcast

• Detect AP Spoofing

- Valid and Protected SSIDs (from IDS Unauthorized Device Profile)

The following example shows the output of show ap monitor ids-state valid-ssid command.

System Generated (using WLAN SSID profile configuration)

[EMPTY]

SSID


Valid and Protected SSIDs (from IDS Unauthorized Device Profile)

show ap monitor pot-sta-list

The following example shows the output of show ap monitor pot-sta-list command.

Potentia_ Client Table

mac last-bssid from-bssid to-bssid mt it channel rss

[EMPTY]

00:24:d7:40:bb:b0 00:1a:1e:17:dc:62 00:00:00:00:00:00 00:00:00:00:00 132 50 7 44

60:67:20:5f:e1:94 00:1a:1c:17:d4:a0 00:00:00:00:00:00 00:00:00:00:00:00 6 43 7 0

58:94:6b:a0:47:74 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 217 104 7 0

0:ec:71:98:da:44 00:24:6c:80:55:b0 00:00:00:00:00:00 00:00:00:00:00:00 37 2 7 0

00:27:10:2a:c6:ac 00:1a:1e:17:d4:a1 00:00:00:00:00:00 00:00:00:00:00:00 72 50 7 30

b0:65:bd:dc:51:8a 00:24:6c:80:03:4e 00:00:00:00:00:00 00:00:00:00:00 217 10 149 11

74:a1:b6:15:1b:5f d8:c7:c8:3d:42:13 00:00:00:00:00:00 00:00:00:00:00:00 164 19 149 13

60:67:20:5h:33:29 00:1a:1e:17:54:a1 00:00:00:00:00:00 00:00:00:00:00:00 6:5:7:0

10:27:10:5c:23:38 00:24:6c:80:1d:72 10:00:00:00:00:00 00:00:00:00:00:00 56 53 7 27

00:24:45:04:76:29 00:24:45:03:21:00 00:00:00:00:00:00 00:00:00:00:00:00 07 05 7 29

53:64:65:1:14:9 00:64:66:80:07/a 00:00:00:00:00:00 00:1a,b,c,d,e:27:00 154 1 7 14

24:77:05:d0:0a:d8 00:1a:1a:17:d6:62 00:00:00:00:00:00 00:00:00:00:00:00 19:14:7:16

                                                                                                                                                                                                    1. 99.

24.7705.72.71.46 05.13.71.54.63.00 05.00.00.00.00.00 00.00.00.00.00.00 42 41 7 8

24:77:35:08:25:15 00:24:06:05:41:40 50:30:00:00:00:00 60:05:05:05:05:05 143 16 7 9

00:23:14:9d:ba:FC 00:1a:1e:17:84:a1 00:00:00:00:00:00 00:00:00:00:00:00 158 36 7 0

24:77:03:c1:09:2c 00:24:6c:80:41:81 00:00:00:00:00:00 00:00:00:00:00:00 117 57 7 22

24:77:03:d1:05:b0 00:1a:1e:17:dc:62 00:00:00:00:00:00 00:00:00:00:00:00 169 33 7 3

24:77:03:7a:89:50 00:24:6c:80:a3:91 00:00:00:00:00:00 00:24:6c:80:a3:9a 248 20 7 3

show ap monitor routers

The following example shows the output of show ap monitor routers command.

Wired MAC of Potential Wireless Devices

mac 1p age

......

show ap monitor scan-info

The following example shows the output of show ap monitor scan-info command.

WIF Scanning State: wifi10: d8:c7:c8:3d:42:10

(1)

Parameter Value

show ap monitor state

The following example shows the output of show ap monitor state command.

DoS State

tx old-tx rx old-rx last-dcs-time ap-ev-time sta-ev-time last-enhanced-cm-time enhanced-cm-ev-

time

show ap monitor stats

The following example shows the output of show ap monitor stats command.

(Instant AP)# show ap monitor stats d8:c7:c8:cb:d4:22

Aggregate Stats

[EMPTY]

retry low-speed non-unicast recv-error frag bwidth

0 0 0 0 0 0

RSST


avg-signal low-signal high-signal count duration (sec)

40 40 40 748 70

AP Impersoration State

[EMPTY]

beacons prev-beacons exp-beacons beacon-interval imp-time imp-active wait-time

[EMPTY]

0 11 11.00 100 0 0 0

AP Non-beacon-Frames:0

AF Tarpit Fake Channel:0

Raw Stats


tx-pkt tx-byte rx-pkt rx-byte tx-retry-pkt rx-retry-pkt tx-frag-pkt rx-frag-pkt short-hdr-pkt

long-hdr-pkt

[EMPTY]

[EMPTY]

2662202 830665629 31438 440132 0 0 0 0 2662202 0

- -

[EMPTY]

tx 0 0 0 0 0 0 0 0 0 0 0 0 0 0

rx 0 0 0 0 0 0 0 0 0 0 0 0 0 0

HT RX Rate Stats

Rate Pkts Bytes


HT TX Rate Stats

Rate Pkts Bytes

Detailed RSSI

10s 2m 3m 4n 5m 6n 7m 8m 9m 10m 11m 12m 13m 14m 15m

Monitored Time:233496

Last Packet Time:233528

Uptime:233529

DoS State

[EMPTY]

tx old-tx rx old-rx last-dos-time ao-ev-time sta-ev-time last-enhanced-cm-time enhanced-cm-ev-

time


0 0 0 0 0 0 0 0

show ap monitor status

The following example shows the output of show ap monitor status command.

AP Info


key value


Uptime 233059

AP Name d8:c7:c8:cb:d4:20

LMS TP 0.0.0.0

d8:c7:c8:3d:42:00 (wifi1) 56090990 3565742575 50110266 13315 1024 275 20 1 0

Data Structures

ap sta pap pata ch msg-hash ap-1


256 288 45 136 26 2 256

Other Parameters

key value

Classification enable

Wireless Containment disable

Wired Containment disable

Rogue Containment disable

System OUI Table

[EMPTY]

out

RTLS Configuration and State

Type Server IF Port Freq Active Rpt-Tags Tag-Mcast-Addr Tags-Sent Rpt-Sta Incl-Unassoc-Sta

Sta-Sent. Cmpd-Msqs-Sent.

MMS N/A N/A 30 disable 01:0c:cc:00:00:00 N/A disable N/A N/A N/A

Aeroscout N/A N/A N/A disable 00:00:00:00:00:00 N/A disable N/A N/A N/A

RTLS N/A N/A 30 disable 01:18:8e:00:00:00 N/A disable N/A N/A N/A

The outputs of the AP monitor command displays the following:

• Active laser beam sources for the W-IAP.
• List of APs monitored by the W-IAP.
• ARP cache details for the W-IAP.
• List of clients monitored by the W-IAP.
• Containment details for the W-IAP.
• List of potential APs for the W-IAP.
• List of potential clients for the W-IAP.

show ap pmkcache

show ap prkcache

Description

This command displays the pairwise master key (PMK) cache table for clients associated with the W-IAP.

Usage Guidelines

Use this command to view PMK cache table contents for the clients associated with a W-IAP.

Example

The following example shows the output of show ap pmkcache command.

PMK Cache Table

Client MACKeyORC/11rExpiryNameRoleVLANESSID
00:90:7a:0d:a0:621F4C17D8A70C...okc6h:52m:18spolycom1okc-internal1okc-internal
00:90:7a:0d:b2:ceF20E35DB311F...okc7h:31m:15spolycom2okc-internal1okc-internal
ColumnDescription
Client MACIndicates the MAC address of the client from the which PMK is derived.
KeyDisplays the cached key for the client.
OKC/11rIndicates if OKC or 802.11r roaming is enabled.
ExpiryDisplays the PMK cache expiration details in HH:MM:SS format.
NameIndicates the name of client.
RoleIndicates the user role assigned to the client.
VLANIndicates the VLAN to which the client is assigned.
ESSIDDisplays the ESSID details to which the client is connected.

show ap virtual-beacon-report

show ap virtual-beacon-report

Description

This command displays a report with the MAC address details and RSSI information of a W-IAP.

Usage Guidelines

Use this command to view virtual beacon table of a W-IAP. The virtual beacon table with the details of associated a W-IAP is broadcast by each table.

Example

The following example shows the output of show ap virtual-beacon-report command.

Virtual Beacon Table
Station CK State Triggered Succeeded Owner AP RSSI
Received
00:db:df:0s:57:4e Adopted 1 Yes 00:24:6c:07:44:c8 (Local 0) 47
59s
Normal No 00:24:6c:07:44:c0 (Local 1) 49 2m:2s
No 6c:f3:7f:cf:12:c0 44 18s
No 6c:f3:7f:ee:f7:80 44 11s
No 6c:f3:7f:co:f7:90 36 13s
No 6c:f3:7f:ef:12:d0 43 15s
a0:8B:b4:41:64:18 Normal 1 C No 00:24:6c:07:44:c8 (Local 0) 34
20s
Normal No 00:24:6c:07:44:c0 (Local 1) 40 18s
No 6c:f3:7f:cf:12:c0 43 18s
No 6c:f3:7f:ee:f7:80 48 11s
No 6c:f3:7f:co:f7:90 35 13s
Yes 6c:f3:7f:ef:12:d0 36 13s 
Normal Working well
Home Current AP found a better AP for the client
Deny Current AP is not the better AP 

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show app-services

show app-services

Description

This command displays the list of application services available on a W-IAP.

Usage Guidelines

Use this command to view the list of application services available on a W-IAP.

Example

The following example shows the output of the show app-services command:

Application Service

(No text)

Name IP Protocol Start Port End Port

[EMPTY]

any 0 0 65535

adp 17 8200 8200

bootp 17 67 69

cfom-tcp 6 8211 8211

cups 6 515 515

dhop 17 67 68

dns 17 53 53

esp 50 0 65535

1tp 6 21 21

gre 47 0 65535

h323-tcp 6 1720 1720

h323-udp 17 1718 1719

http-proxy2 6 8080 8080

http-proxy3 6 0860 0860

http 6 80 80

https 6 443 443

temp 1 0 65535

ike 17 500 500

kerberos 17 88 88

12tp 17 1701 1701

Lpd-top 6 631 631

smtp 6 25 25

somp 17 161 161

snmp-trap 17 162 162

ssb 6 22 22

svp 119 0 65535

syslog 17 514 514

telnet 6 23 23

tftp 17 69 69

vocera 17 5002 5002

The output of this command provides the following information:

Parameter Description
NameIndicates the list of application services available on a W-IAP.
IP ProtocolDisplays the IP protocol numbers for each application service.
Start Port and End PortIndicates the range of port numbers on which the application services are enabled.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show arm-channels

show arm-channels

Description

This command displays the ARM channel details configured on a W-IAP.

Usage Guidelines

Use this command to view the channel details configured on a W-IAP.

Example

The following example shows the output of show arm-channels command:

2.4 GHz


Channel Status
[EMPTY]
1 disable
2 disable
3 disable
4. disable
5. disable
6. disable
7. divisible
8 disable
8. divisible
10 disable
il enable
12 disable
13 disab e
i. 1.
21. disabio
The following table
(1) idascibie
(1) 2017年1月1日
ST DISABLE
c+ disable
// enable
5.0 GEz

157+ enable

The output of this command provides the following information:

Parameter Description
ChannelDisplays the list of channels available in the 2.4 GHz and 5 GHz bands.
StatusIndicates if the channels in the 2.4 GHz and 5 GHz bands are enabled or disabled.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show arm config

show arm config

Description

This command displays the ARM configuration details for a W-IAP.

Usage Guidelines

Use this command to view the ARM configuration details for a W-IAP.

Example

The following example shows the output of show arm config command:

Minimum Transmit Power :18

Maximum Transmit Power :127

Band Steering Mode : prefer-5ghz

Client Aware ; enable

Scanning : enable

Wide Channel Bands :59hz

Air Time Fairness Mode : fair-access

Spectrum Load Balancing :disable

SLB NB Matching Percent :75

SLB Calculating Interval :30

SLB Threshold :2

Custom Channels : No

2.4 GHz Channels

[EMPTY]

Channel Status


1 enable

2 disable

The output of this command provides the following information:

Parameter Description

Minimum Transmit PowerDisplays the minimum transmission power configured for the ARM channels.
Maximum Transmit PowerDisplays the maximum transmission power configured for the ARM channels.
Band Steering ModeDisplays the band steering mode configuration parameters
client awareIndicates the activation status of the Client aware feature.
ScanningIndicates if scanning for available channels is enabled.
Wide Channel BandsIndicates if 40MHz channel are enabled on 2.4 GHz or 5 GHz band.
Air Time Fairness ModeDisplays configuration details for the Airtime Fairness Mode feature.
Spectrum Load BalancingIndicates if the Spectrum load balancing feature is enabled or disabled.
SUB NB Matching PercentIndicates the percentage for comparing client density of AP neighbors for spectrum load balancing.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show arp

show arp

Description

This command displays the Address Resolution Protocol (ARP) entries for the Virtual Controller.

Usage Guidelines

Use this command to view the ARM messages sent or received by the Virtual Controller.

Example

The following example shows the output of show arp command

IP address HW type Flags HW address Mask Device

192.168.20.2 0x1 0x6 C8:C7:C8:C4:42:98 * br0

10.17.88.2 0x1 0x2 00:03:86:40:1C:AC * br0

The output of this command includes the following information:

Parameter Description
IP addressDisplays the IP address of the device.
HW TypeDisplays the type of the device.
FlagsDisplays any flags for this AP.
HW addressDisplays the MAC address of the device.
MaskDisplays the network mask or the IP address range.
DeviceDisplays the device used to send ARP requests and replies.

Command History

Version Description

show attack

show attack {config|stats}

Description

This command displays information about firewall settings configured on a W-IAP to protect the network against wired attacks such as ARP attacks or malformed DHCP packets.

Syntax

Parameter Description
configDisplays firewall configuration details to protect the network from wired attacks.
statsDisplays attack counters.

Usage Guidelines

Use this command to view firewall configuration details or attack counters enabled on a W-IAP to protect network from ARP attacks and malformed DHCP packets.

Example

The following example shows the output of show attack config command:

Current Attack

[EMPTY]

Attack Status

drop-bad-arp Disabled

fix-dhcp Disabled

poison-check Enabled

The output of this command indicates if the firewall settings to block invalid ARP packets and fix malformed DHCP packets are enabled. You can also view the status of the Poison-check parameter, which triggers a to notify the user about the ARP poisoning when enabled.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show auth-survivability

show auto-survivability [cached-info] debug-log [] | time-out)

Description

This command displays the authentication survivability information for a W-IAP.

Syntax

Command/Parameter Description
cached-infoDisplays authentication credentials cached by the W-IAP.
debug-log []Displays the log details for troubleshooting. The count attribute allows you to specify the number of logs to display.
time-outDisplays the duration configured for the cache expiry.

Usage Guidelines

Use this command to view the information cache expiry duration, cached information, and log details to when the authentication survivability feature is enabled. The authentication survivability feature supports a survivable authentication framework against the remote link failure when working with the external authentication servers. When enabled, this feature allows the W-IAPs to authenticate the previously connect clients against the cached credentials if the connection to the authentication server is temporarily lost.

Example

The following example shows the output of the auth-survivability cached-Info command:

UserName Renaining Cache-Time(minutes)

[EMPTY]

admin1 20

The following example shows the output of the show auth-survivability time-out command:

Auth Survivability time out :24

图1. ·s (2)

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show backup-config

show backup-config

Description

This command displays the backup configuration information on a W-IAP,

Usage Guidelines

Use this command to view the current configuration information stored in the W-IAP flash memory.

Example

The following text provides an example for the show backup-config command output:

version 6.4.0.0-4.1.0

virtual-controller-country IN

virtual-controller-key 0c5770401cde6e4363c25fofde17d907c4b095a9be5e4258

name instant-C4:42:98

terminal-access

clock timezone none 00 00

rf-band all

allow-new-aps

allowed-ap d8:c7:c8:c4:42:98

a rtt

wide-bands 5ghz

80minz-support

min-tx-power 18

max-tx-power 127

band-steering-mode prefer-5ghz

air-time-fairness-mode fair-access

client-aware

scanning

client-match

syslog-level warn sp-debug

syslog-level warn network

syslog-level warn security

syslog-level warn system.

syslog-level warn user

syslog-level warn user-debug

blacklist-time 3600

auth-failure-blacklist-time 3600

ids classification

ids

wireless-containment none

airgroup

disable

airgroupservice airplay

disable

description AirPlay

airgroupservice airprint

disable

description AirPrint

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show blacklist-client

show blacklist-client [config]

Description

This command shows the configuration details for blacklisting clients and lists the clients blacklisted by W

Syntax

Parameter Description

configDisplays the parameters and values configured for manual or dynamic blacklisting of clients.

Usage Guidelines

Use this command to view information about the clients blacklisted by a W-IAP.

Example

The following output is displayed for the show blacklist-client command:

Blacklisted Clients

MAC Reason Timestamp Remaining Time (sec) AF name

00:24:6c:ca:41:51 user-defined 14:46:18 Permanent -

The output of this command provides information on the MAC address of client that is blacklisted, the r for blacklisting, timestamp, the associated W-IAP name, and the duration until which the client is blacklist

The following output is displayed for the show blacklist-client config command:

Blacklist Time :3600

Auth Failure Blacklist Time :3600

Manually Blacklisted Clients

MAC Time

Parameter Description
Dynamically Blacklisted ClientsDisplays the list of clients that dynamically blacklisted due to multiple authentication rules or an ACL rule trigger.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show calea config

show calea config

Description

This command displays the details configured for CALEA server integration on a W-IAP.

Usage Guidelines

Use this command to CALEA configuration details.

Example

The following example shows the output of the show calea config command:

(Instant AP)# show calea config

caleá-ip :10.0.0.5

encapsulation-type :gre

geo-type :25944

ip mtu : 150

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show calea statistics

show cales statistics

Description

This command displays the tunnel encapsulation statistics for a W-IAP.

Usage Guidelines

Use this command to view the GRE encapsulation statistics for the W-IAPs with CALEA server integration feature enabled.

Example

The following example shows the output of the show calea statistics command:

(Instant AP)# show calea statistics

Rt resolve fail : 0

Dst resolve fail: 0

Alloc failure : 0

Fragged packets : 0

Jumbo packets : 263

Total Tx fail : 0

Total Tx ok : 263

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged BYSC mode

show captive-portal

show captive-portal

Description

This command shows the external and internal captive portal parameters configured for a network profile.

Usage Guidelines

Use this command to view information about the contents displayed on the internal and external captive portal pages for guest users.

Example

The following output is displayed for the show captive-portal command:

:Captive Portal Configuration

Background Color:13421772

Banner Color:16750848

Decoded Texts :

Barner Text: Welcome to Guest Network

Use Policy : Please read terms and conditions before using Guest Network

Terms of Use: This network is not secure, and use is at your own risk

Internal Captive Portal Redirect URL:

Captive Portal Mode: Acknowledged

:External Captive Portal Configuration

Server:localhost

Port :80

URL : /

Authentication Text: Authenticated

External Captive Portal Redirect URL:

Server Fail Through: No

The output of this command provides the following information:

Parameter Description

Background Color

Displays the color code configured for the internal captive portal splash page.

Parameter Description
ServerDisplays the external Captive port server.
URLDisplays the URL of the external captive portal splash page server.
Authentication TextIndicates if the external captive portal user authentication is successful.
PortDisplays the port used for communicating with the external captive portal splash page server.
Server Fail ThroughIndicates if the guest clients are allowed to access the Internet when the external captive portal server is not available.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show captive-portal-domains

show captive-portal-domains

Description

This command displays the internal and external captive portal server domains.

Usage Guidelines

Use this command to view information about the internal and external captive portal domains.

Example

The following output is displayed for the show captive-portal-domains command:

Internal Captive Porta_Domain:

secarelogin.arubanetworks.com

External Captive Portal Domains:

localhost

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show cellular

show cellular (config status)

Description

These commands display the status and cellular configuration of the W-IAP.

Syntax

Parameter Description

show cellular configDisplays the cellular configuration details available for the W-IAP
show cellular statusDisplays the status of the cellular configuration for the W-IAP

Usage Guidelines

Use these commands to view the details of the cellular configuration and status.

Example

The following output is displayed for show cellular config command:

No Comm USB Plugged in

Cellular configuration

-

type value

(q-usb-type

usb-type

usb-dev

usb-ty

usb-init

usb-auth-type PAP

usb-user

usb-passwd

usb-dial

usb-modeswitch

Canada

Supported ISP list

ISP list

Cincinnati Bell

Virgin

Telecom

Telenor

Vodafone/Smartone

02

5FR

Orange

3/HUTCH

Optus

SingTel

HKCSL/1010

Verizon

ICE

Reliance NetConnect+

Tata Indicom

Airtel-3G

Nokia CS-10

NTT

KDDI

Movistar

China Unicom

China Telecom

Vodafone

Netcom

T-Mobile

Telstra

Mobily

EMOBILE

Sprint

Cricket

Vodafone-3G

Airtel

ATT

Rogers

R=17

Not-present Not-detect Linkdown

The output of this command includes the following parameters:

Parameters Description
CardIndicates if the cellular cards are currently configured on the W-IAP.
detectIndicates if cellular modems are detected on the W-IAP
LinkIndicates the current status of cellular link.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show cert all

show cert a11

Description

This command displays the details about the certificates uploaded on a W-IAP.

Usage Guidelines

Use this command to view information about the certificates uploaded to a W-IAP.

Example

The following example shows the output of show cert command:

Default Server Certificate:

Version :3

Serial Number :01:DA:52

Issuer :C=U5, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA

Subject :0x05-1LUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=JS, O=securelogin.arubanetworks.com,

OU=GT28470348, OU=See www.geotrust.com/resources/cps (c)11, OU=Domain Control Validated -

QuickSSL(R) Premium, CN-securelogin.arubanetworks.com

Issued On :2011-05-11 01:22:10

Expires On :2017-08-11 04:40:59

Signed Using :SHA1

RSA Key size :2048 bits

Default CF Server Certificate:

Version :3

Serial Number :01:DA:52

Taster :C-US, O-GeoTrust Inc., OU-Domain Validated SSI, CN-GeoTrust DV SSI. CA

Subject :0x05=1LUge2IRPKMcJe7boLSVdsKCFK8wv3MF, C=JS, O=securelogin.arubanetworks.com,

OU-GT28470348, OU-See www.geotrust.com/resources/cps (c)11, OU-Domain Control Validated -

QuickSSL(R) Premium, CN=securelogin.arubanetworks.com

Issued On :2011-05-11 01:22:10

Expires On :2017-08-11 04:40:59

Signed Using :SHA1

RSA Key size :2048 bits

The output of this command displays details such as the version, serial number, subject, issue date, expl

                                                                                                                                                                                                    1. 99.

show clients

show clients [ accounting checksum | debug| roaming| status wired [debug]]

Description

This command displays details about the W-IAP clients.

Syntax

Parameter Description
Displays difference summary of the client table since the specified interval
accountingDisplays accounting information for a specific client MAC address.
checksumFilters checksum errors for a specific client MAC address.
debugDisplays the W-IAP client configuration details, which can be used for debugging purpose.
roamingDisplays information about roaming clients.
statusDisplays the current status for a client based on the specified MAC address.
wired [debug]Displays the list of clients connected to wired or Ethernet interface. You can use the optional debug parameter to view the end-to-end information of the clients for debugging purpose.

Usage Guidelines

Use this command to view information about the W-IAP clients. The W-IAP client table provides basic information about the clients. For detailed information of each client, use the required parameter and sp the MAC address of the client.

Example

Column Description
NameDisplays the name of the client
IP addressDisplays the IP address of the client.
MAC addressDisplays the MAC address of the client.
OSIndicates the OS running on the client system.
NetworkIndicates the SSID and network to which the client is connected.
Access PointIndicates the IP address of the Access Point to which the client is connected.
ChannelIndicates the channel assigned to the client.
TypeIndicates the type of the Wi-Fi client device.
RoleIndicates the role assigned to the client.
SignalIndicates the current signal strength of the client, as detected by the W-IAP.
Speed (Mbps)Indicates the current speed at which data is transmitted. When the client is associated with a W-IAP, it constantly negotiates the speed of data transfer. value of 0 means that the W-IAP has not received any packets from the click some time.

show clients

The show clients command displays the change in the clients table data that occurred during the specified interval. For example, if the value specified for parameter is 10 seconds, the client table displays the changes such as signal strength or speed that occurred since the last 10 seconds.

show accounting

The show accounting command displays the accounting information such as status and session ID for a specific client MAC address.

00 8a

acct_session

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00

user role

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

swarm basic client t

08 cd b9 e1 51 7d d8 c7 c8 3d 3d 52 0a 11 58 ba 73 72 6f 79 2d 73 6f 6d 65 74 68 69 6e 67 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 a9 Fe 5a 92 03 e8 00 00

checksum

02 ec ba ec

The show checksum command displays the checksum errors associated with the W-IAP clients.

show clients debug and show clients wired debug

The show clients debug command displays detailed information about the clients MAC and IP addresses, client role, authentication aging time, and accounting intervals, ESSID and BSSID details, VLAN and multica groups to which the client is associated, and DHCP roles and options associated with the client. The show clients wired debug command displays a similar output.

The following example shows the show clients debug command output:

Client List

[EMPTY]

Name IF Address MAC Address OS Network Access Point Channel

www.ewww.ewww

169.254.90.154 08:cd:b9:e1:51:7d Network1 10.17.88.186 48-

Type Role Signal Speed (mbps) Auth Age Session Timeout ESSID

AN admin1 68(good) 6(poor) 0 0

Authenticated DEL Age Vlan Essid Private role info Accounting Session

no no 5 333(SSID) () 0(0-0) 0

Name Accounting Start time BSSID Idle Timeout csum

[EMPTY]

d8·c7·c8·3d·3d·52 1000 0 2eobacc(3)

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show clock

show clock [summer-time] timezone all]

Description

This command displays the system clock, current timezone, and the daylight saving time configured on a

Syntax

Parameter Description
summer-timeDisplays the summer (daylight saving) time settings.
timezone allDisplays the configured timezone for the W-IAP.

Usage Guidelines

Use this command to display the system clock. Include the optional summer-time parameter to display configured daylight savings time settings. The timezone parameter shows the current timezone, with its ti offset from Greenwich Mean Time.

Example

show clock timezone all

The following example shows the partial output of show clock timezone all command:

Support Timezones

Country Timezone DST Name DST Recurring

[EMPTY]

International-Date-Line-West OTC-11

Coordinated-Universal-Time-11 UTC-11

Hawaii UTC-10

Alaska UTC-09 AKDT second sunday march 02:00 first sunday november 02:00

Baja-California UTC-03 EDT first sunday april 02:00 last sunday october 02:00

Pacific-Time UTC-08 PDF second sunday march 02:00 first sunday november 02:00

2018年,中国

Parameter Description
CountryDisplays the country name.
TinezoneDisplays the name of the timezone.
DST NameDisplays the name of the Daylight Saving Time.
DST RecurringDisplays the name of the Daylight Saving recurring time.

show clock summer-time

The following example shows the partial output of show clock summer-time command:

Summer Time

DST Name Start Week Start Day Start Month Start Hour End Week End Day End Month End Hour

PST recurring 2 Sun Mar 2:00 first Sun Nov 3:00 -8

The output of this command includes the following information:

Parameter Description
DST NameName of the Daylight Saving Time.
Start WeekEnter the week number when the time change begins.
Start DayEnter the weekday when the time change begins.
Start MonthEnter the month when the time change begins.
Start HourEnter the hour when the time change begins.
End WeekEnter the week number when the time change ends.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show configuration

show configuration

Description

This command displays the configuration saved on the W-IAP.

Usage Guidelines

Use this command to view the entire configuration saved on the W-IAP, including all wireless and wired uplink configuration, ARM settings, radio profiles, ACLs, and interface settings.

Example

The following example displays the show configuration command output:

version 6.2.1.0-3.3.0.0
virtual-controller-country IN
virtual-controller-key e10e371601fae77a3ba78e44585d06c407f0a3e9a83835c1c4
name Instant-CB:D4:20
terminal-access
clock timezone none 00 00
rf-band all
allow-nex-aps
allowed-ap d8:c7:c8:cb:d4:20
allowed-ap d8:c7:c8:cb:d3:98
allowed-ap d8:c7:c8:cb:d3:b4
routing-profile
route 192.0.2.0 255.0.0.0 192.0.2.1
arm
wide-bands 5ghz
a-channels 56,60,64,149,153,157,161,165,36+,44+,149+,157+
q-charne's 11,14,74
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-exare
scanning
syslog-level default an-debug 
nai-realm-seap-method eap-ttls
nai-realm-auth-id-1 non-eap-inner-auth
nai-realm-auth-value-1 wschapy2
nai-realm-auth-id-2 credential
nai-realm-auth-value-2 uname-password
nai-realm-encoding utf8
no nai-bome-realm
hotspot anqp-rwk-auth-profile "test"
enable
nwk-auth-type http-redirect
url "http://"
hotspot anqp-3gpp-profile "test"
enable
3gpp-plmn1 ""
3gpp-plmn2 ""
3gpp-plmn3 ""
3gpp-plmn4 ""
3gpp-plmn5 ""
3gpp-plmn6 ""
hotspot anqp-ip-addr-avail-profile "test"
enable
ipv4-addr-avail
no ipv6-addr-avail
hotspot h2gp-wan-metrics-profile "test"
enable
wan-metrics-link-status (null)
no symm-trk
no at-capacity
uplink-speed 0
downlink-speed 0
uplink-load 0
downlink-load 0
load-duration 0
hotspot hs-profile "test"
enable
no comeback-mode
no asra
no internet
no pane-bi
no group-frames-block
no p2n-dev-nrrar 
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
external-server
bandwidth-1:mit 65535
dmo-channel-utilization-threshold 90
local-probe-reg-thresh 0
max-clients-threshold 64
wlan osid-profile profile-local-nw
enable
index 1
type employee
essid profile-local-nw
wpa-pasaphrase dd4da86c25c31bf83417024a338982ed6f01e1751e7a4502
opmode vpc2-psk-aes
max-authentication-failures 0
vlan 2
auto-server InternalServer
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
local-probe-reg-anresh 0
max-clients-threshold 64
auto-survivability cache-time-out 24
wlan external-captive-portal
server localhost
port 80
url "/"
auto-text "Authenticated"
auto-whitelist-disable
blacklist-time 3600
auto-failure-blacklist-time 3600
ids classification
ids
wireless-containment none
ip dhcp something-vianio
server-type centralized 12 
native-vier 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type employee
captive-portal disable
no doix
cost0-port-profile default_wired_port_profile
uplink
procmption
enforce none
failover-internet-pkt-ost-cnt 10
failover-Internet-pkt-send-freq 30
failover-vpn-timeout 180
airgroup
enable
airgroupservice airplay
disable
description AirPlay
airgroupservice airprint
disable
description AirPrint 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show config-status

show config-status

Description

This command displays the details about the configuration status of a W-IAP.

Usage Guidelines

Use this command to view the current configuration status of the W-IAP in flash memory.

Example

The following example shows the output of the show config-status command:

Config Status

[EMPTY]

Config Name Compressed

[EMPTY]

Primary No

Backup No

The backup configuration is used when the primary configuration is lost. And the Compressed option indicates that the configuration file has been compressed if the file size is large.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2- This command is introduced.4.1

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show console-settings

show console-settings

Description

This command displays the details about the console settings of a W-IAP.

Usage Guidelines

Use this command to view if the access to W-IAP console is enabled or disabled.

Example

The following example shows the output of the show console-settings command:

(Instant AP)# show console-settings

Console Setting

Status

enabled

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2- This command is introduced.4.1

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show country-codes

show country-codes

Description

This command shows the country code for the W-IAP. The country code specifies allowed channels for the country.

Usage Guidelines

Use this command to view a list of W-IAP country codes.

Example

The following example shows the output of show country-codes command.

CA:Canada

DE:Germany

NL:Netherlands

IT:Italy

PT: Portugal

LU:Luxembourg

NO: Norway

SE:Sweden

FI:Finland

DK:Denmark

CH:Switzerland

CZ:Czech Republic

BE:Belgium.

ES:spain

GB:United Kingdom

KR:Republic of Korea (South Korea)

CN:China

FR:France

HK: Hong Kong

SG:Singapore

TW:Taiwan

MY:Malaysia

BR: Brazil

SANSADI ARAHIA

PR:Puerto Rico

SK:Slovak Republic

SI:Slovenia

TH:Thailand

UY:Uruguay

PA: Panama

RU:Russia

EG: Egypt.

TT:Trinidad and Tobago

TR:Turkey

CR: Costa Rica

EC: Ecuador

HN: Honduras

KE: Kenya

UA:Ukraine

VN:Vietnam.

BG:Bulgaria

CY:Cyprus

EE: Estonia

MT: Ma 7 ta

MU: Mauritius

RC:Romania

CS:Serbia and Montenegro

ID: Indonesia

PE: Peru

VE:Venezuela

JM: Jamaica

BH:Bahrain

OM:Oman

JC: Jordan

BM: Bermuda

CO:Colombia

DC:Dominican Republic

GT: Guatemala

PH:Philippines

LK:Sri Lanka

SV:El Salvador

TN:Tunisia

MO: Macau

PK: Islamic Republic of Pakistan

DAS: DASAR

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show cpcert

show 1xcert.

Description

This command displays the details of the captive portal server certificate, which is used by the W-IAP for authentication.

Usage Guidelines

Use this command to view information about the captive portal server certificate uploaded on W-IAP.

Example

The following example shows the default certificate details of the captive portal server in the output of t show cpcert command:

Default Server Certificate:

Version :3

Serial Number :01:0A:52

Issuer :C=US, C=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA

Subject : 0x05-11Lqe2fRPkwcJe7bolSVdsKOFK8uv3MF, C-US, O-securelogin.arbanetworks.com,

OU-GT28470348, OU-See www.geotrust.com/resources/cps (c)11, OU-Domain Control Validated -

QuickSSL(R) Premium, CN-securelogin.arusanetworks.com

Issued On :2011-05-11 01:22:10

Expires on :2017-08-11 04:40:59

Signed Using :SHA1

RS4 Key size :2048 bits

The output of this command describes details such as the version, serial number, subject, issue date, ex date, type of encryption, and RSA key information for the certificates uploaded to the W-IAP.

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

show cpu

show cpu [details]

Description

This command displays the CPU details.

Syntax

Parameter Description
[details]Include this optional parameter at the request of Dell technical support to display additional CPU troubleshooting statistics.

Usage Guidelines

Use this command to view CPU load for application and system processes.

Example

The following example shows the output of show cpu command:

user 0% nice 8% system 1% idle 89% to 0% irq 0% softirq 2%

The following example shows the output of show cpu details command:

Mem: 66488K used, 59668K free, OK shrd, OK buff, 22540K cached

Load average: 0.12 0.09 0.09 (Status: S=sleeping R=running, W=waiting)

PTD USFR STATUS RSS PTD CPU MEM COMMAND

1434 root RN 5540 1377 8.3 4.3 sapd

13137 root R < 356 12694 2.3 0.2 top

1430 root R < 7256 1377 0.0 5.7 cli

12694 root 5 < 2880 12685 0.0 2.2 c11

1429 root S 2508 1 0.0 1.9 cli

1682 root 5 < 2392 1377 0.0 1.8 radiusd-term

1699 root S < 2384 1377 0.0 1.8 radiusd

1442 root S < 2092 1377 0.0 1.6 snmpd

1436 root s < 1804 1377 0.0 1.4 stm

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show datapath

show datapath {acl |acl-all|acl-allocation|acl-rule |acl-rule-detailbridge|demo-session|demo-station |mcast|nat-pool |route session|statistics|user|vlan}

Descriptions

This command shows the system statistics for your W-IAP.

Syntax

Parameter Description
aclDisplays datapath statistics associated with a specified ACL.
acl-allDisplays datapath statistics associated with all ACLs.
acl-allocationDisplays ACL table allocation details.
acl-ruleDisplays the name of the ACL.
acl-rule-detailDisplays the ACL rule details.
bridgeShows bridge table entry statistics including MAC address, VLAN, assigned VLAN, Destination and flag information for an AP.
dmo-sessionDisplays details of a DMO session.
dmo-stationDisplays details of a DMO station.
rcastDisplays multicast table statistics for the W-IAP.
nat-poolDisplays the contents of the datapath NAT entries table. It displays NAT p as configured in the datapath. Statistics include pool, SITP start, SIP end DIP.
routeDisplays datapath route table statistics.

Datapath ACT, 3 Entries

[EMPTY]

Flags: P - permit, L - log, E - established, M/e - MAC/etype filter

S - SNAT, D - DNAT, R - redirect, r - reverse redirect m - Mirror

I - Invert 5A, I - Invert 2A, H - high prio, O - set prio, C - Classify Media

A - Disable Scanning, 6 - black list, T - set TOS, 4 - IPv1, 6 - IPv6

show datapath acl-all

The following example shows the output of show datapath acl-all command.

ACL Name {magic-vlan} Number [106]

1; any any 17 0-65535 0209-0211 P4

2: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any P4

3: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 any P4

4: 192.168.10.0 255.255.254.0 any any PS4

5: any any any P4 hits 2127

ACI Name {internal-cp-magic} Number (107)

1: any 192.168.10.1 255.255.255.255 6 0-65535 80-80 PSD4

2: any 192.168.10.1 255.255.255.255 6 0-65535 443-443 PS24

3: any any 6 0-65535 80-80 P3D4

4: any any 6 0-65535 443-443 P5D4

5: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 17 0-65535 67-68 P4

6: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 17 0-65535 67-68 F4

7: 192.168.10.0 255.255.254.0 any 17 0-65535 67-68 PS4

8: any any 17 0-65535 67-68 P4

9:192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 17 0-65535 53-53 P4

10: 192.168.10.0 255.255.254.0 224.0.0 0 224.0.0 0 17 0-65535 53-53 P4

11: 192.168.10.0 255.255.254.0 any 17 0-65535 53-53 234

12: any any 17 0-65535 53-53 24

13: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 6 C-65535 8081-8081 24

14: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 6 0-65535 8081-8081 P4

15: 192.168.10.0 255.255.254.0 any 6 0-65535 8081-8081 P34

16: any any 6 0-65535 8081-8081 P4

17: any any any 4

ACI. Name (external-cp-magic) Number (108)

1: any 192.168.10.1 255.255.255.255 6 0-65535 80-80 PSD4

2: any 192.168.10.1 255.255.255.255 6 0-65535 443-443 PS34

  1. 10 FFEF PEA BA BA

show datapath acl-rule

The following example shows the output of show datapath acl-rule command.

Datapath SSTD: test ACT Entries

Flags: P - permit, L - log, R - established, M/e - MAC/etype filter

A 51800 B 51750 C 111

4: 192.168.10.0 255.255.254.0 any any PST4

5: any any any PT4

ACL Name (test 3) Number (145)

show datapath bridge

The following example shows the output of show datapath bridge command.

Datapath Bridge Devices

Flags: F - source-filter, T - trusted, Q - tagged, T - IP

S - split-tunnel, B - bridge, M - mesh, P - PPFOE

C - content-filter, O - corp-access, h - to HAP, f - to FAP

h - dhep-redirect.

Dev Name VLANs PVID ACLs FramesRx FramesTx Flags

3 bond0 1 1 0/0 618048 95826 FTQB

8 br0 0 : 105/0 95432 0 IB

11 aruba002 1 1 100/0 0 176788 2

12 artiba'02 1 1 100/0 0 140373

13 aruba003 1 1 100/0 0 139236 B

14 ariba'03 1 1 100/0 0 0 B

Datapath Bridge Table Entries

Flags: P - Permanent, D - Deny, R - Route, M - Mobile, X - Xsec, A - Auth

AF Flags: X - Awaiting 1X reply, 3 - Block all non-1X traffic, F - Force bridge role

MAC VIAN Assigned VIAN Destination Flags AP Flags bridge Role ACI,

00:1A:1E:00:7E:23 1 1 dev3 0

D8:C7:C8:C4:42:98 1 1 _local P C

D8:C7:C8:C4:42:98 3333 3333 Local F U

00:08:86:40:10:AG 1 1 dev3 0

6C:F3:7F:C3:5C:12 64 64 dev3 0

show latest-time data version

dev11 1
dev12 1
dev13 1
dev14 1 

show datapath nat-pool

The following example shows the output of show datapath nat-pool command.

Datapath NAT Pool Entries

ID Begin Source IP End Source IP Destination IP Flags

show datapath route

The following example shows the output of show datapath route command.

Route Table Entries

Flags: L - Local, P - Permanent, T - Tunnel, I - IPsec, M - Mobile, A - ARF, D - Drop

IF Mask Gateway Cost VLAN Flags

0.0.0.0 0.0.0.0 10.17.88.2 0 0

192.168.10.0 255.255.254.0 192.168.10.1 0 3333 D

0.0.0.0 255.255.255.192 10.17.88.59 0 1 L

Route Cache Entries

Flags: I - local, P - Permanent, T - Tunnel, I - TPsec, M - Mobile, A - ARP, D - Drop

IP MAC VLAN Flags

10.17.B8.2 00:0B:86:40:1C:A0 1 A

10.17.88.59 D8:C7:C8:C4:42:98 1 LP

192.168.10.1 08:07:08:04:42:98 3333 LP

show datapath session

The following example shows the output of show datapath session command.

Datapath Session Table Entries

Flags: F - fast age, S - src NAT, N - dest NAT

D - deny, R - redirect, Y - no syn

Tagged frames dropped on untagged interface C

Frames dropped for being too short C

Frames received on port ret in VLAN 0 Non-dotlx frames dropped during L2 blocking C

Frames dropped for ingress change on permanent bridge entry 0

Frames received on port rot in VLAN 0

Unicast frames filtered 86

Frames dropped due to FF firewall 6

Frames that failed FF spoofing check 0

Frames dropped with logging 0

Frames dropped due to unknown FP opcode 0

Francs freed by FP

Frames that failed SP spoofing check C

Frames dropped due to excessive user misses C

Frames dropped due to no buffers 0

Frames dropped due to no 'br0' device 0

Frames dropped due to no stack 12 address 0

Frames dropped while user miss pending 0

Frames dropped when user entry creation failed 0

Frames dropped due to unknown FP opcode 0

Frames dropped due to initial IP route lookup failure 0.

Frames dropped due to final IP route lookup failure 0

Frames dropped due to ARP processing failure 0

Frames dropped due to illegal device index 0

Frames dropped due to interface being down 0

Unicast frames not bridged due to split-tunnel destination 3

unicast frames from bridge role user dropped 0

Unicast frames that could not be bridged to split tunnel 0

Frames dropped due to missing PP device 0

Frames dropped due to pull-up failure 0

Frames dropped due to misalignment C

Frames received by firewall 715679

DECP frames on DECP local VLAN 96041

PFPOE frames to session processing C

Frames needing bridging 716075

Mesh frames forwarded U

Thin AP frames forwarded 0

Frames to session processing 718714

Frames to SP 21792

Frames bridged by SP 396

Frames routed by SP 0

show datapath user

The following example shows the partial output of show datapath user command.

Datapath User Table Entries

Flags: P - Permanent, W - NEP, T - TKIP, A - AESCOM

R - ProxyARE to User, N - VPN, L - local

FM(Forward Mode): S - Split, B - Bridge, N - N/A

IF MAC ACLs Contract Location Age Sessions Flags Vian FM

10.17.88.59 D8:C7:C8:C4:42:98 105/0 0/0 0 0 1/65535 1 N

0.0.0.0 08:07:08:04:42:98 105/0 0/0 0 0 0/65535 P * N

The following example shows the partial output of show datapath vlan command.

Datapath VLAN Table Entries

[EMPTY]

Flags: N - Nat. Inside, F - Route Multicast, R - Routing

S - Snoop MLD, G - Snoop TGMP, P - Proxy TGMP

VLAN Flags Ports

1 R dev3

1 R dev1

1 R dev12

1 R dev13

1 R dev14

The outputs of the show datapath command indicates the following:

  • ACL table allocation details for the W-IAP.
    • AP Datapath ACL Tables
    • List of ACL rules configured for the SSID and Ethernet port profiles.
  • Bridge table entry statistics including MAC address, VLAN, assigned VLAN, destination and flag information for the W-IAP.
    • Details of a DMO session.

14.12.13.14.15.16.17.18.19.20.21.22.23.24.25.26.27.28.29.30.31.32.33.34.35.36.37.38.39.40.41.42.43.44.45.46.47.48.49.50.51.52.53.54.55.56.57.58.59.60.61.62.63.64.65.66.67.68.69.70.71.72.73.74.75.76.77.78.79.80.81.82.83.84.85.86.87.88.89.90.91.92.93.94.95.96.97.98.99.100

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show delta-config

show delta-config cfgiq

Description

This command displays the difference between the current configuration in the current CLI session and t configuration that is saved on the W-IAP.

Usage Guidelines

Use this command to view the difference between the current configuration information stored in the W-flash memory and the configuration information saved in the W-IAP memory.

Example

The following example shows the output of the show delta-config command:

103-Master# show delta-config

IAP delta configuration current_config_id:7

TAP delta configuration top_config_id:7

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform CommandMode
All platformsPrivileged EXEC mode

show derivation-rules

show derivation-rules

Description

This command displays the list of role and VLAN derivation rules configured for the WLAN SSIDs and will profiles in a W-IAP.

Usage Guidelines

Use this command to view the derivation rules configured for a network profile.

Example

The following example shows the output of the show derivation-rules command:

SSID:Example1

Role Derivation Rules

[EMPTY]

Attribute Operation Operand Role Name Index Hits

Filter-Id contains 123456 Example1 8 0

AP-Name contains instant instant 9 C

Vlan Derivation Rules

[EMPTY]

Attribute Operation Operand Vlan Id Hits

[EMPTY]

AF-Group contains instant 200 0

Filter-Id contains 123456 200 0

The output of the command provides a list of role and VLAN derivation rules configured for each SSID: a wired profile.

Command History

Version Description

Dell Networking W-Series

This command is introduced

show dhcp-allocation

show dhcp-allocation

Description

This command displays information about the DHCP address allocation.

Usage Guidelines

Use this command to view DHCP address allocation for network address translated clients to allow mobile the clients across W-IAPs.

Example

The following example shows the output of show dhcp-allocation command:

(Instant AP)# show dhcp-allocation
----/etc/dnsmasq.conf----
listen-address=127.0.0.1
addn-hosts=/etc/id_oth_hosts
addn-hosts=/etc/id_ppp_hosts
dhcp-src=192.168.10.1
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-authoritative
filterwin2k
#magic-vlan
(
vlan-id=3333
dhcp-range=192.168.10.3,192.168.11.254,255.255.254.0,12h
dhcp-option=1,255.255.254.0
dhcp-option=3,192.168.10.1
dhcp-option=6,10.1.1.50
dhcp-option=54,192.168.10.1
)
----/tmp/dnsmasq.leases 

Command History

Version Description

show dhcpc-opts

show dhepc-opts

Description

This command displays the DHCP options configured on a W-IAP.

Usage Guidelines

Use this command to view the current status of the vendor-specific DHCP options configured on a W-IAF DHCP options are configured and enabled for assignment and distribution to DHCP clients based on the of DHCP server, scope, and clients.

Example

The following output is displayed for the show dhcpc-opts command:

DHCP option43

Not available

The output of this command displays the vendor-specific DHCP option configured for a DHCP scope and current status of the DHCP option.

Command History

Version Description
Dell Networking X-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show dhcp config

show dheps config

Description

This command provides information about the DHCP scopes configured for a W-IAP.

Usage Guidelines

Use this command to view configuration details associated with the DHCP scopes enabled on a W-IAP.

Example

The following example shows the output of the show dhcp config command:

Distributed DHCP Scopes

[EMPTY]

Name Type VLAN Netmask Default Router DNS Server Domain Name

dhop-11 Distributed,L2 11 11.11.11.0 255.255.255.0 0.0.0.0

lease Time 12 Address Range Client Count DHCP Option Reserve First Reserve last

43200 5 Note

Branch ID Branch Network Branch Router DHCP Host

Centralized DHCP Scopes

Parameter Description
Centralized, L2
VLANIndicates the VLAN ID assigned to DHCP scope.
NetmaskDisplays the subnet mask.
DNS ServerDisplays the DNS server IP address.
Domain NameDisplays the domain name configured for the DHCP scope.
Default routerDisplays the IP address of the default router.
lease-timeDisplays the lease-time configured for the DHCP clients.
IP Address RangeDisplays the range of IP addresses configured for the distributed DHCP scopes.
client-countDisplays the number of clients allowed per DHCP branch
DHCP OptionDisplays the DHCP option if configured.
Reserve First and Reserve LastDisplays the first few and the last few IP addresses reserved in the subnet.
Branch IDDisplays the DHCP branch ID.
Branch NetmaskDisplays the branch subnet mask.
Branch RouterDisplays the IP address if the branch router.
Exclude IP addressDisplays the excluded IP address. The value displayed in this determines the exclusion range of the subnet. Based on the size of the subnet, the IP addresses that come before or after the IP address value specified in this file.

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command was modified.
Dell Networking W-Series Instant 6.2.1.03.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show dhcp subnets

show deep subrets

Description

This command displays the subnet details and the gateway IP for distributed L2 and L3 networks.

Usage Guidelines

Use this command to view the subnet details for the distributed,12 and 13 networks.

Example

The following example shows the output of the show dhcp subnets command:

DHCP Subnet Table

[EMPTY]

VIANTypeSubsetMaskGatewayModeRolemap
53212192.168.132.0255.255.255.00.0.0.0remote, full-tunnelVIAN532
539nat192.168.1.0255.255.255.0192.168.1.1local, split-tunnelVLAN532
53813192.168.2.0255.255.255.0192.168.2.1'local', split-tunnelVIAN532
534120.0.0.0255.255.255.2550.0.0.0remote, full-tunnelVLAN532

The output of this command displays the following information:

ParameterDescription
VLANDisplays the VLAN details.
TypeDisplays the type of DHCP assignment mode.
SubnetDisplays the subnet details.
MaskDisplays the subnet mask details.
DNS ServerDisplays the DNS server IP address.
GatewayDisplays the gateway IP address.

show distributed-dhcp-branch-counts

show distributed-dhcp-branch-counts

Description

This command displays the branch count for the distributed DHCP scopes configured on a W-IAP.

Syntax

Parameter Description
typeDisplays the branch details for the distributed DHCPs based on the type of the DHCP scope specified. The current release of Instant supports the following distributed DHCP assignment modes.Distributed, L2Distributed, L3
Filters the branch count information based on an IP address range specified for the starting IP addressand ending IP address parameters. You can specify up to four different ranges of IP addresses to filter the command output.

Usage Guidelines

Use this command to view branch details for the distributed DHCP scopes.

Example

The following example shows the output of the show distributed-dhcp-branch-counts command:

Branch Count Table

[EMPTY]

Client Count Upto Branch Count

[EMPTY]

1 10

2 4

3 3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show domain-names

show domain-names

Description

This command displays the list of enterprise-domains configured on a W-IAP.

Usage Guidelines

Use this command to view enterprise-domains list. The enterprise domains list displays the DNS domain that are valid on the enterprise network.

This list is used to determine how client DNS requests should be routed. When Content Filtering is enabled, DNS request of the clients is verified and the domain names that do not match the names in the list at the open DNS server.

Example

The following example shows the output of the show domain-names command:

example1.com

example.com

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3This command is Introduced.

Command Information

W-IAP Platform CommandMode
All platformsPrivileged EXEC mode

show dpi

show dp* {app all abccategory all|debug statistics|qsessions [detail []]|webcategory all|webcategory-lookup |

Description

This command displays the DPI configuration information.

Syntax

Command/Parameter Description
appDisplays a list of all applications (with the all keyword) and details such as application name, ID, application category, and default ports when a specific application name is provided.
appcategoryDisplays the list of all application categories (with the all keyword) and details of the applications that belong to a specific application category when an application category is specified.
debug statisticsDisplays DPI statistics that can be used for debugging.
qessions [detail' []Displays advanced debug statistics for troubleshooting the DPI issues.
webcategoryDisplays the list of web categories.
webcategory-lockupDisplays the details for a given URL and the reputation score based on security rating. Run this command twice to fetch information from the cloud server.

Usage Guidelines

Use this command to view the DPI configuration details.

Example

Name App Category ID

antivirus 1

authentication 2

cloud-file-storage 3

collaboration 4

encrypted 5

enterprise-apps 6

gaming 7

im-file-transfer 8

instant-messaging 9

mail-protocols 10

mobile-app-store 11

network-service 12

peer-to-peer 13

social-networking 14

standard 15

streaming 16

thin-client 17

tunneling 18

unified-communications 19

web 20

webmail 21

Total application categories - 21

The output of this command displays all application categories.

show dpi debug statistics

The following example shows the output of the show dpi debug statistics command.

(Instant AP)# show dpi debug statistics

DFI Running :TRUE

Dpi Debug Statistics

[EMPTY]

Key Value


dpimgr total pkt handled 5507(55)

dpimgr total classified 975(6)

dpimgr qsession total allec 417(2)

dbimor osession total uapo alloc 417(2)

current major version :0

current minor version :1

show dpi webcategory

The following example shows the output of the show dpi webcategory all command:

(Instant AP) || show dpi webcategory all

Pre-defined BrightCloud Web Categories

[EMPTY]

Name: Web Category ID

real-estate 1

computer-and-internet-security 2

financial-services 3

business-and-economy 4

computer-and-internet-info 5

auctions 6

shopping

cult-and-occult 8

Travel 9

abused-drugs 10

adult-and-pornography 11

home-and-garden 12

military 13

social-networking-web 14

dead-sites 15

individual-stock-advice-and-tools 16

training-and-tools 17

dating 18

sex-education 19

religion 20

entertainment-and-arts 21

personal-sites-and-blogs 22

legal 23

local-information 24

streaming-media 25

job-search 26

gambling 27

translation 28

reference-and-research 29

1 F

web-advertisements 52
cheating 53
gross 54
web-based-email 55
malware-sites 56
phishing-and-other-frands 57
proxy-avoidance-and-anonymizers 58
spyware-and-adware 59
music 60
government 61
nudity 62
nows-and-modis63
illegal64
content-delivery-networks 65
internet-communications66
bot-nets 67
abortion 68
health-and-medicine69
spam-urls71
dynamically-generated-content74
parked-domains75
alcohol-and-tobacco76
private-ip-addresses77
image-and-video-search78
fashion-and-beauty 79
recreation-and-hobbies80
motor-vehicles81
web-hosting82
category-unknown83
Total web categories = 80

The output of this command displays the list of web categories and the IDs associated with these categories.

show dpi webcategory-lookup

The following example shows the output of the show dpi webcategory-lookup command:

(Instant AF)# show dpi webcategory-lockup www.yahoo.com

Input URL: www.yahoo.com

Request sent for CLOUD LOOKUP, please try again.

On running command again, the following information is retrieved from the cloud server and displayed as the

Command Information

W-IAP Platform CommandMode
All platformsPrivileged EXEC mode

show dpi-stats

show dpi-stats

app [id <app> |user ip <ip-addr> |ssid <ssid name>][full]
appcategory [id <appcat> |user ip <ip-addr> |ssid <ssid name>][full]
session [full]
webcategory [id <web> |user ip <ip-addr> |ssid <ssid name>][full]
webreputation [id <rep> |user ip <ip-addr> |asid <asid name>][full] 

Description

This command displays the DPI statistics.

Syntax

Command/Parameter Description
appDisplays application statistics.
appcategoryDisplays the DPI statistics for application category.
sessionDisplays datapath session details for DPI.
webcategoryDisplays the DPI statistics for web category.
webrecputationDisplays the DPI statistics for web reputation score.
saidDisplays the DPI statistics for the last 15 minutes from each W-IAP connected to the SSID in the network.
ssid nameDisplays DPI statistics for the last 15 minutes for the specified SSID
idDisplays DPI statistics for the specified application, application category web category or web reputation ID.
user ipDisplays DPI statistics for specified user IP address.
fullDisplays the complete DPI statistics for the application, application category, session, web category, and web reputation stored on the W

Total bytes :10610

Classification percentage :98

show dpi-stats appcategory

The following example shows the output of the show dpi-stats appcategory full command:

Last snapshot timestamp 17:10:47

Dpi Top Application category list

(No text)

App Category App Category Id Total bytes

(No text to output)

web 2C 10172

Not-Classified 0 160

Total bytes :10610

Classification percentage :98

show dpi-stats session

The following example shows the output of the show dpi-stats session full command:

Datapath DPI CDR Session Table Entries

Source IPAppWebcatTX BytesRx BytesWebrep
-------------------
172.31.98.1033697google-plus(1125)social-networking-web(14)trustworthy-sites(5)8635
172.31.98.103kzbs(97)Not-Classified(0)(0)82375998Not-Classified
172.31.98.109sno(185)Not-Classified(0)(0)8860Not-Classified
172.31.98.103http(67)Not-Classified(0)(0)5074074Not-Classified
172.31.98.103449597httpg(68)computer-and-internet-info(5)trustworthy-sites(5)
172.31.98.103yahoo(1294)web-based-email(55)res(5)604410818trustworthy-si

Num of Entries:47

show dpi-stats webcategory

The following example shows the output of the show dpi-stats webcategory full command:

Last snapshot timestamp 17:25:43

Dpl Top Web Category list

Web Category Web Category Id Total bytes

computer-and-internet-info 5 740

Total bytes :740

show dpi-stats webreputation

The following example shows the output of the show dpi-stats webreputation full command:

Last snapshot timestamp 15:39:32

Dpi Top Web Reputation list

Web Reputation Web Reputation To Total bytes

trustworthy-sites 5 1211900

moderate-risk-sites 3 2998

Total bytes :1214898

Command History

VersionDescription
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.
Dell Networking W-Series Instant 6.4.0.2-4.1.1This command is modified.

Command Information

show election

show election (statistics)

Description

This command shows master W-IAP election statistics.

Syntax

Parameter Description
statisticsShows master election statistics,

Usage Guidelines

Use this command to view the statistics of the W-IAP selected as Virtual Controller.

Example

The following example shows the output of show election statistics command:

State : Master

master beacon : sent=8/62 rcvd=0

hierarchy beacon: sent-7685 rcvd-0

hierarchy_ack : sent=0 rovd=0

beacon_req : sent=0 rcvd=0

Slave->Pot-Master : 0 Lime

Pot-master->Master: 0 time

Pot-master->Slave : 0 time

spoof arp revd: 0

last spoof nec: 00:00:00:00:00:00

The output of this command includes the following information:

Parameter Description

State

Indicates if the W-IAP is provisioned as master.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show external-captive-portal

show external-captive-portal []

Description

This command displays the external captive portal configuration details.

Syntax

Parameter Description

nameFilters the output based on an existing external captive portal profile.

Usage Guidelines

Use this command to view information about the external captive portal server configuration details.

Example

The following output is displayed for the show external-captive-portal command:

External Captive Porta

Name Server Port Url Auth Text Redirect Url Server Fail Through Disable Auto

default localhost: 80 / Authenticated Disable Enable

Whitelist Use HTTPS In Use Redirect Mode

No Yes No

The output of this command displays details such as the external captive portal profile name, server nar server port, redirection URL, and automatic whitelisting status.

Command History

Version Description

show fault

show fault [history]

Description

This command displays the list of active faults that occur in the event of a system fault and the faults cleared from the system.

Syntax

Parameter Description

historyDisplays the list of faults that were cleared.

Usage Guidelines

Use this command to view the active faults for a W-IAP. Active faults are generated due to system faults:

Example

The following example shows the output for the show fault command:

Active Faults

Time Number Description

Total number of entries in the queue :0

The following example shows the output for the show fault history command:

Cleared Faults

Time Number Cleared By Description

Total number of entries in the queue :0

The output of these commands provide the following information:

Parameter Description

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ids

show ids {ap | aps| client | clients | phy-types | rap-types}

Description

This command displays the list of unknown APs and clients detected by the W-IAP with the IDS feature enabled.

Syntax

Parameter Description
apDisplays the signal details for the W-IAP.
apsDisplays the unknown Access Points detected by the W-IAP.
clientDisplays the details of the W-IAP to which the client is connected.
clientsDisplays the list of unknown clients detected by the W-IAP.
phy-typesDisplays the PHY details of the W-IAP.
rap-typesDisplays the list of Remote APs (W-IAPs) detected by the W-IAP.

Usage Guidelines

Use this command to view the intrusion detection details.

Examples

The following output is displayed for the show ids aps command:

Unknown Access Points Detected

MAC Address Network Classification Chan. Type Last Seen

The following output is displayed for the show ids clients command:

Unknown Clients Detected

MAC Address Network Classification Chan. Type Last Seen

00:26:c6:4d:2b:74 ethersphere-wpa2 Interfering | GN 20MZ 17:26:48

00:24:d7:40:a8:64 akvo'cel Interfering 6 G 17:38:49

00:24:d7:40:ca:88 akvoicel Interfering 6 G 17:39:50

74:c5:43:4b:3b:11 manju34-vap1 Interfering 44 AX 40MZ 17:39:50

The show ids clients command output provides information on the MAC address of interfering clients, the

network to which the unknown clients are connected, the interference classification, channels on which th unknown clients are detected, the radio configuration type and recent timestamp of the interference.

The following output is displayed for the show ids phy-types command:

Physical Types

(No text)

Keyword Value

[EMPTY]

50

a 1

g 2

ag 3

The following output is displayed for the show ids rap-types command:

RAP Types

[EMPTY]

Keyword Value

(No text)

valid 0

interfering 1

rogue 2

dos-attack 3

unknown 4

known-interfering 5

suspect-rogue 6

Command History

show ids-detection config

show ids-detection config

Description

This command displays the list of intrusion detection policies configured on a W-IAP.

Usage Guidelines

Use this command to view a list of intrusion detection policies enabled for a W-IAP.

Example

The following output is displayed for the show ids-detection command:

infrastructure detection level :off

Policies Status Low Medium High

[EMPTY]

detect-ap-spoofing disable enable enable

detect-windows-bridge disable enable enable

signature-death-broadcast disable enable enable

signature-deassociation-broadcast disable enable enable

detect-adhoc-using-valid-ssid enable disable enable

detect-malformed-large-duration enable disable enable

detect-ap-impersonation enable disable disable enable

detect-achoc-network enable disable disable enable

detect-valid-ssid-misuse enable disable disable enable

detect-wireless-bridge disable disable disable enable

detect-ht-40mhz-intolerance disable disable disable enable

detect-ht-greenfield disable disable disable enable

detect-ap-flood disable disable disable enable

detect-client-flood disable disable enable

detect-bad-wep disable disable disable enable

detect-cts-rate-anomaly disable disable disable enable

detect-rts-rate-anomaly disable disable enable

detect-invalid-addresscombination disable disable disable enable

detect-malformed-ntie disable disable disable enable

detect-malformed-assoc-reg disable disable disable enable

detect-malformed-frame-auth disable disable disable enable

signature-asleap disable disable disable enable

The output for this command provides the following information:

Parameter Description
Infrastructure detection levelIndicates if the detection level for the policies is set to off, low, medium, or
PoliciesDisplays the list of intrusion detection policies.
StatusIndicates if a policy is enabled or disabled.
LowIndicates if the detection level for a policy is set to low.
MediumIndicates if the detection level for a policy is set to medium.
HighIndicates if the detection level for a policy is set to high.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ids-protection config

show ids-protection config

Description

This command displays the list of infrastructure protection policies for a W-IAP.

Usage Guidelines

Use this command to view the status of infrastructure protection policies on a W-IAP.

Examples

The following output is displayed for the show ids-protection config command:

Wireless Containment : none

Wired Containment : off

infrastructure protection level :off

Policies Status Low High


protect-ssid disable enable enable

rogue-containment disable enable enable

protect-adhoc-network disable disable enable

protect-ap-impersonation disable disable enable

client protection level :off

Policies Status Low High


protect-valid-sta disable enable enable

protect-windows-bridge disable disable enable

Parameter Description

Infrastructure protection levelIndicates if the protection level for the policies is set to off, low, medium, or high.
PoliciesDisplays the list of wired and wireless network infrastructure protection policies.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show image

show image version

Description

This command displays the Instant software version running on a W-IAP.

Example

The following example shows the output of show image version command:

Primary Partition Build Time:2013-03-31 11:47:06 PYY

Primary Partition Build Version ;6.2.1.0-3.3.0.0_37845

AP Images Classes

(No text)

Class

- - - - -

Cassiopola

Parameter Description
Primary Partition Build TimeShows the W-IAP image build time.
Primary Partition Build VersionShows the W-IAP build version.
AP Image ClassIndicates the W-IAP class. The following examples describe the image of for different W-IAP models:For W-IAP135/134—DellInstant_Cassiopeia_For W-IAP108/109—DellInstant_Pegasus_For W-IAP155/155P—DellInstant_Aries_For all other W-IAPs—DellInstant_Orion_

Command History

show interface counters

show interface counters

Description

This command shows the Ethernet interface packet counters for the W-IAP.

Usage Guidelines

Use this command to view table of L2 interface counters.

Example

The following example shows the partial output of show interface counters command:

bond0 is up, line protocol is up

Hardware is Gigabit Ethernet, address is d8:c7:c8:c4:42:98

Speed 1000Mo/s, duplex full

Received packets 9441

Received bytes 1134064

Receive dropped C

Receive errors 0

Receive missed errors 0

Receive overrun errors 0

Receive frame errors 0

Receive CRC errors U

Receive length errors 0

Transmitted packets 16435

Transmitted bytes 841278

Transmitted dropped 0

Transmission errors 0

Lost carrier 0

Parameter Description
Speed Shows speed of the Ethernet interface.
Received packets Shows total number of received packets.
Transmitted packets Shows total number of transmitted packets.
Transmitted bytes Shows total number of transmitted bytes.
Transmitted dropped Shows total number of packets dropped.
Transmission errors Shows total number of errors during packet transmit.
Lost carrier Shows total number of lost carriers.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command is Introduced.

Command Information

W-IAP PlatformCommand Mode
All platformsPrivileged EXEC mode

show inbound-firewall-rules

show inboard-firewall-rules

Description

This command displays the details of inbound firewall rules configured on a W-IAP.

Usage Guidelines

Use this command to view the details of the inbound firewall rules configured for a W-IAP network.

Example

The following output is displayed for the show inbound-firewall-rules command:

Access Rules

[EMPTY]

Src IP Src Mask Dest IP Dest Mask Dest Match Protocol (id:sport:report) Application Action Toq 'OS 802.1P Blacklist App Throttle (Up:Down) Mirror DisScan ClassifyMedia

any permitanyanyanymatchh323-tcp
any permitany192.0.2.0255.255.255.0matchh323-usp

The output of this command displays information about the inbound firewall access rule configuration parameters, which indicate whether a particular type of traffic is to allowed to a particular destination from source subnet, and the service and protocol in use. It also indicates if other options such as logging and prioritizing traffic are enabled when the rule is triggered.

Command History

VersionDescription
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

show ip dhcp database

show ip dhcp database

Description

This command displays the DHCP server settings.

Usage Guidelines

Use this command to the DHCP server settings. The DHCP server is a built-in server, used for networks clients are assigned IP address by the Virtual Controller.

Example

The following output is displayed for the show ip dhcp database command:

DHCP Subnet :192.0.2.0

DHCP Netmask :255.255.255.0

DHCP Domain Name :example.com

DHCP DNS Server :192.0.2.1

The output of this command provides the following information:

ColumnDescription
DHCP subnetIndicates the network range for the client IP addresses.
DHCP NetmaskIndicates the subnet mask specified for the IP address range for the DHCP subnet.
DHCP Lease Time(n)Indicates the duration of DHCP lease. The lease time refers to the duration of lease that a DHCP-enabled client has obtained for an IP address from a DHCP server.
DHCP Domain NameIndicates the domain-name of the DHCP client.
DHCP DNS ServerIndicates the IP address of the DNS server.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ip igmp

show ip igmo group [maddr ]

Description

This command displays information about the Internet Group Management Protocol (IGMP) group table.

Syntax

Parameter Description

macdr <multicast-addr>Filters group table information based on the multicast IP address.

Usage Guidelines

Use this command to view the IGMP group table information for a W-IAP.

Example

The following output is displayed for the show lp lgmp group command:

TGMF Group Table

Group Members vlan

239.255.255.250 1 333

224.0.0.251 1 333

224.0.0.252 1 333

The following output is displayed for the show lp igmp group maddr command:

IGMP Group 224.0.0.251 Table

(No text)

Member Mac Vlan Destination Age

10.17.88.226 08:ed:b9:e1:51:7d 353 aruba002 15

The output of this command includes the following parameters:

Parameter Description

ParameterDescription
MACIndicates the MAC address of member associated with the specified multicast group address.
VLAN Indicatesthe VLAN ID associated with the multicast groups or a specific multicast group address.
DestinationIndicates the destination to which the multicast packets are routed.
AgeIndicates the aging time of the forwarding table entries.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show ip interface brief

show ip interface brief

Description

This command displays a summary of IP related information for all interfaces configured on a W-IAP.

Usage Guidelines

Use this command to view a brief summary of IP related information for the W-IAP interfaces.

Example

The following output is displayed for the show ip interface brief command:

Interface IP Address / IP Netmask Admin Protocol

or0 10.17.88.198 / 255.255.255.192 up up

The output of this command provides the following information:

Column Description
InterfaceLists the interface and interface identification, where applicable.
IP Address /IP NetmaskLists the IP address and subnet mask for the interface.
AdminDisplays the administrative status of the interface. Enabled—upDisabled—down
ProtocolDisplays the status of the IP on the Interface. Enabled—upDisabled—down

show ip route

show ip route

Description

This command displays the W-IAP routing table.

Usage Guidelines

Use this command to view the IP routes configured for a W-IAP.

Examples

The following output shows the lp address of routers and the VLANs to which they are connected.

Kernel IP routing table

Destination Gateway Genmask Flags MSS Window irtt Iface

172.16.10.1 0.0.0.3 255.255.255.255 OH 0 0 0 tuno

10.17.88.128 0.0.0.0 255.255.255.192 0 0 0 0 br0

2.2.2.0 0.0.0.3 255.255.255.9 0 0 0 0 BFO

192.168.20.0 0.0.0.0 255.255.254.0 0 0 0 0 bro

0.0.0.0 10.7.88.129 0.0.0.0 ug 0 0 0 b=0

The output of this command provides the following information:

Column Description
DestinationDisplays the destination IP address for the IP routes.
GatewayDisplays the gateway IP address for the IP routes.
GenmaskDisplays the subnet mask details for the IP routes.
FlagsIndicates if the route is up (U), targeted to the host (UH), or if it uses Gate (UG).
ESSIndicates the default maximum segment size for TCP connections over this ro
WindowIndicates the default window size for TCP connections over this route.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show lacp status

show lacp status

Description

This command displays the Link Aggregation Control Protocol (LACP) configuration status on a W-IAP.

Usage Guidelines

Use this command to view the LACP status on W-IAP220 Series devices. LACP provides a standardized m for exchanging information with partner systems to form a dynamic link aggregation group. The LACP fea is automatically enabled during W-IAP boots and it dynamically detects the AP if connected to a partner with LACP capability, by checking if there is any LACP Protocol Data Unit (PDU) received on either eth0 port.

Example

The following example shows the output of the show lacp status command:

AP LACP Status
Link Status LACP Rate Num Ports Actor Key Partner Key Partner MAC
Up slow 2 17 1 70:81:05:11:3e:80
Slave Interface Status
Slave T/f Name Permanent MAC Addr Link Status Member of LAG Link Fail Count
eth0 6c:f3:7f:c6:76:6e Up Yes 0
eth1 6c:f3:7f:c6:76:6f Up Yes 0
Traffic Sent on Enet Ports
Radio Num Enet 0 Tx Count Enet 1 Tx Count
0 0 0
1 0 0
non-wifi 2 17 

The output of this command displays details such as the link status, number of ports, AP partner MAC;

show l2tpv3 config

show 12tpv3 config

Description

This command displays the L2TPV3 session and tunnel configuration details.

Usage Guidelines

Use this command to view the tunnel and session configuration details.

Example

The following example shows the output of the show l2tpv3 config command:

(Instant AP)# show 12tpv3 config

L2TEV3 Tunnel configuration

Tunnel Profile Primary Peer Backup Peer Peer UDP Port Local UDP Port Hello Interval Host Name MTU Message Digest Type secret Key Failover Mode Failover Retry Count Retry Interval Checkaun

[EMPTY]

test tunnel 10.0.0.63 10.0.0.65 3000 1701 150 Instant-C4:42:98 1570 MD5

625beed39fa4ff3424edb3082ede48fa nor-preemptive 5 80 Disabled

L2TPV3 Session configuration

Session Name Tunnel Name Local tunnel IP Tunnel Mask Tunnel Vlan Session Cookie Length Session Cookie Session Remote End ID

(No text)

test session 1.1.1.1 255.255.255.0 5 0 0 0

The output of this command includes the following information:

Parameter Description
Tunnel ProfileDisplays the tunnel profile name.
Primary PeerDisplays the IP address of the remote end tunnel.
Failover Retry CountDisplays the number of failover attempts.
Retry IntervalDisplays the interval between each failover.
ChecksumDisplays the end-to-end checksum of packets that pass through the tunnel.
Session NameDisplays the session profile name.
Tunnel NameDisplays the tunnel profile name.
Local Tunnel IFDisplays the IP address of the remote end tunnel.
Tunnel MaskDisplays the network mask of the tunnel.
Tunnel VlarDisplays the VLAN number to be carried in this tunnel session.
Session Cookie LengthDisplays the cookie length for the cookie.
Session CookieDisplays the cookie value.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show l2tpv3 global

show 12tpv3 global parameter

Description

This command displays L2TPv3 global configuration details such as hostname.

Usage Guidelines

Use this command to view the hostname configured.

Example

The following example shows the output of the show l2tpv3 global parameter command:

L2TPV3 Global configuration

Host Name

[EMPTY]

Instant-C4:42:98

The output of this command includes the following information:

Parameter Description
Host NameDisplays the W-IAP name.

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

Command Information

show l2tpv3 session

show 12tpv3 session status

Description

This command displays the L2TP session connectivity status.

Usage Guidelines

Use this command to view the session connectivity status.

Example

The following example shows the output of the show l2tpv3 session status command:

Session 1821009927 on tunnel 858508253:-
type: LAC Incoming Call, state: ESTABLISHED
created at: Jul 2 04:58:45 2013
administrative name: 'test_session' (primary)
created by admin: YES, peer session id: 12382
session profile name: test_session_primary
data sequencing required: OFF
use data sequence numbers: OFF
Peer configuration data:
data sequencing required: OFF
framing types:
data rx packets: 16, rx bytes: 1560, rx erro
data tx packets: 6, tx bytes: 588, tx ozors: 

The output of this command shows the session connectivity status, tunnel creation time. configuration data frame types and so on.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command is introduced.

show l2tpv3 system

show 12tpv3 system statistics

Description

This command displays the L2TPV3 system statistics details.

Usage Guidelines

Use this command to view the tunnel and session statistics.

Example

The following example shows the output of the show l2tpv3 system statistics command:

(Instant AP)# sh 12tpv3 system statistics
12TP counters:-
Total messages sent: 99, received: 194, retransmitted: 0
illegal: 0, unsupported: 0, ignored AVPs: 0, vendor AVPs: 0
Setup failures: tunnels: 0, sessions: 0
Resource failures: control frames: 0, peers: 0
tunnels: 0, sessions: 0
Limit exceeded errors: tunnels: 0, sessions: 0
Frame errors: short frames: 0, wrong version frames: 0
unexpected data frames: 0, bad frames: 0
Internal: authentication failures: 0, message encode failures: 0
no matching tunnel discards: 0, mismatched tunnel ids: 0
no matching session discards: 0, mismatched session ids: 0
total control frame send failures: 0, event queue fulls: 0
Message counters:-
Message RX Good RX Bad TX
ILLEGAL 0 0 0
SCCRQ 0 0 1
SCCRP 1 0 0
SCCCN 0 0 1
STOPCCN 0 0 0
RESERVED: 0 0 0
HELLO 95 0 95
OCRQ 0 0 0
OCRF 0 0 0 

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show l2tpv3 tunnel

show 12tpv3 tunnel {config | status}

Description

This command displays the L2TP tunnel status and configuration details.

Usage Guidelines

Use this command to view the tunnel connectivity status and configuration details.

Example

The following example shows the output of the show l2tpv3 tunnel config command:

Tunnel profile test_tunnel_primary

12tp host name: aruba1600pop658509.hsb-dev4.aus

local UDP port: 1701

peer IF address: 10.13.11.157

peer UDP port: 1701

hello timeout 60, retry timeout 1, idle timeout 0

rx window size 10, tx window size 10, max retries 5

use UDP checksums: OFF

do pmtu discovery: OFF, mtu: 1460

framing capability: SYNC ASYNC

bearer capability: DIGITAL ANALOG

use tiebreaker: OFF

peer profile: NOT SET

session profile: NOT SET

trace flags: PROTOCOL FSM API AVPDATA FUNC XPRT DATA SYSTEM CLI

Tunnel profile test_tunnel_backup

12tp host name: aruba1600pop658509.hsb-dev4.aus

local UDP port: 1701

peer IP address: 10.13.11.157

peer UDP port: 1701

hello timeout 60, retry timeout 1, idle timeout 0

rx window size 10, tx window size 10, max retries 5

use UDP checksums: OFF

do pmtu discovery: OFF, mtu: 1460

session profile: default

hello timeout: 150, retry timeout: 80, idle timeout: 0

rx window size: 10, tx window size: 10, max retries: 5

use udp checksums: OFF

do pmtu discovery: OFE, mtu: 1460

trace flags: PROTOCOL, FSM API AV0DATA FUNC XPR DATA SYSTEM CLI

peer vendor name: Kataix Systems Ltd. Linux-2.6.32-358.2.1.e16.x86_64 (x86_64)

beer protocol version: 1.0, firmware 0

peer rx window size: 10

Transport status:-

ns/nr: 98/97, peer 98/96

cwnd: 10, ssthresh: 10, ccongpkt_acc: 9

Transport statistics!

out-of-sequence control/data discards: 0/0

ACKa tx/txfall/rx: 0/0/96

retransmits: 0, duplicate pkt discards: 0, data pkt discards: 0

hellos tx/txfat1/rx: 94/0/95

control rx packets: 193, rx bytes: 8506

control tx packets: 195, tx bytes: 8625

data rx packets: 0, rx bytes: 0, rx errors: 0

data tx packets: 6, tx bytes: 588, tx errors: 0

establish retries:

The output of this command shows the tunnel profile name, tunnel creation date, hello packets sent or received, and so on.

Command History

Version Description
Dell Networking W-Series Instant 6.4.2.0-4.1.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EVEC mode

show 13-mobility

show 13-mobility (config | datapath | events [ ] | status)

Description

This command displays details about the Layer-3 (L3) events, mobility configuration, and roaming status of W-IAP clients.

Syntax

Parameter Description
configDisplays the L3 mobility configuration details for a W-IAP.
datapathDisplays the datapath statistics associated with L3 mobility.
events []Displays L3 mobility events for all W-IAP clients or individual clic filtered based on MAC address.
statusDisplays the L3 mobility status for a W-IAP.

Usage Guidelines

Use this command to view the L3 mobility information for a W-IAP.

Examples

show 13-mobility config

The following example shows the output of the show I3-mobility config command:

Flags

- - - -

type value

[EMPTY]

Home Agent Load Balancing enable

Virtual Controller Table

[EMPTY]

Column Description
Virtual Controller IPDisplays the Virtual Controller IP address. The Virtual Controller IP configuration for each W-IAP allows the clients to roam seamlessly among the W-IAPs.
SubsetIndicates the IP address for the mobility domain.
NetmaskDisplays the subnet mask configuration details.
VLANDisplays the VLAN ID configured for the mobility domain.
Virtual ControllerDisplays the Virtual Controller configuration associated with the mobility domain.

show 13-mobility datapath

The following example shows the output of show 13-mobility datapath command:

☐3 Mobility Datapath Home Table

Client Index Client MAC Home Vlan Destination Device Index

13 Mobility Datapath Foreign Table

Client Index Client MAC Home VAP VAP Destination Device Index HAP IP Virtual Controller IP Packets Forwarded

23 Mobility Datapath Tunnel Table

Tunnel Device Remote Protocol Dest IP Clients Idle Time Rx Packets Tx Packets Rx Mcasts Tx Mcasta ARP Proxy Pkts Tx Jumbo MTU Rx FB Tx HR MTU Rega MTU Resps HR Mismatch TP Mismatch Type Vlan Translations

The output of this command provides the following information:

Parameter Description

Rx Packets - Displays information about packets received.Tx Packets - Displays information about packets transmitted.Rx Mcasts - Displays information about multicast packets received.Tx Mcasts - Displays information about multicast packets transmitted.ARP Proxy Pkts - Displays information packets resolved to destination IP address by the proxy Address Resolution Protocol (ARP)Tx Jumbo MTU - Displays information about the Maximum Transmission U (MTU) in jumbo frames.Rx HBTx HBMTU Reqs - Indicates the number of MTU requests sent.MTU Resps - Indicates the number of MTU responses received.HB MismatchIP Mismatch - Indicates IP address mismatch if anyTypeVlan Translations - Displays details about VLAN translation.

show 13-mobility events

The following example shows the output of the show 13-mobility events command:

23 Mobility Events

Time Client MAC Event IF Dir

---- May 9 23:26:29 08:ed:b9:e1:51:87 Station Offline 10.17.88.59 <- May 9 23:26:29 08:ed:b9:e1:51:87 Potential Foreign Client10.17.88.59 <-

May 9 23:09:05 08:ad:b9:e1:51:87 This Client is Normal 10.17.08.59 ->

Peer IP Home Vlan VAP Vlan Tunnel ID Old AP IP FAP IP HAP IP VC IP Additional Info

Parameter Description

Peer IPDisplays the peer IP address, if any peer clients are configured.
Home VlanDisplays the VLAN ID associated with the home subnet.
VAP VlanDisplays the VLAN ID associated with the Virtual AP.
Tunnel IDIndicates the tunnel interface used for routing packets.
Old AP IPIndicates the IP address of the W-IAP from which the client has roamed.
FAP IPIndicates the IP address of the W-IAP in the foreign subnet.
HAP IPIndicates the IP address of the W-IAP in the home subnet, to which the client is currently connected.
VC IPIndicates the IP address of the Virtual Controller.
Additional InfoDisplays additional information if any.

show 13-mobility status

The following example shows the output of the show I3-mobility status command:

Roaming Client Table

Client MAC Home Vlan VAP Vlan Tunnel ID Status Virtual Controller IP Peer IP Old AP IP Device Name

Tunnel Table

Peer IP Local Tunnel ID Remote Tunnel ID Use Count Type

Virtual Controller Table

Virtual Controller IP Type HAP IP Local Tunnel ID Remote Tunnel ID

192 0 1 0 0 - -

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show Idap-servers

show radius-servers

Description

This command displays the Lightweight Directory Access Protocol (LDAP) servers configured for user authentication on the Virtual Controller.

Usage Guidelines

Use this command to view the LDAP server configuration information available on a W-IAP.

Example

The following example shows the output of show ldap-servers command:

LDAP Servers

Name IP Address Port Timeout Retry Count Admin-DN Admin Password

[EMPTY]

Server1 192.0.2.5 389 5 3 admin-dn cn=admin password123

Base-DN Filter Key-Attribute In Use

dc=example, dc=com (objectclass=*) sAMAccountName No

The output of this command provides the following information:

Command/Parameter Description

NameDisplays the name of the LDAP authentication server.
IP AddressDisplays the IP address of the LDAP server.
PortDisplays the authorization port number of the LDAP server.
TimeoutDisplays a timeout value for the LDAP requests from the clients.
Retry CountDisplays number of times that the clients can attempt to connect to the serv

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log ap-debug

show log ap-debug

Description

This command shows the W-IAP debug logs.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines of the

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log apifmgr

show log api-mqr

Description

This command shows the log information for W-IAP interface manager.

Syntax

Parameter Description
countStarts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log convert

show log convert.

Description

This command shows image conversion details for the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log debug

show log debug(count)

Description

This command shows the W-IAP full log.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log driver

show log driver

Description

This command displays the status of drivers configured on the W-IAP.

Command History

Version Description
Dell Networking X-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log kernel

show log kernel

Description

This command shows AP's kernel logs.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log 13-mobility

show log 13-mobility []

Description

This command displays the logs for Layer-3 mobility domains configured on a W-IAP.

Syntax

Parameter Description

Filters the log output based on the number specified.

Usage Guidelines

Use this command to view the L3-mobility logs for a W-IAP.

Example

The following output is displayed for the show log 13-mobility command:

May 9 21:23:07: Potential Foreign Client Information: mac c4:85:08:de:06:d4 rcvd from self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info 12-timed-out,test May 9 01/3:22: Station Offline: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 0 tid 255 oldapip 0.0.0.0 fapip 0.0.0.0 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 01:25:53: This Client is Normal: mac 08:ed:b9:e1:51:87 sent to self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 01:25:53: Too many retries: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info May 9 31:25:53: Potential Foreign Client Information: mac 08:ed:b9:e1:51:87 rcvd from self vlan 0, 1 tid 255 oldapip 0.0.0.0 fapip 10.17.88.59 hapip 0.0.0.0 vcip 0.0.0.0 info 12-timed-out,test

The output of this command provides the following information:

Content Description

Content Description
VC IPIndicates the IP address of the Virtual Controller.
Additional InfoDisplays additional information if any.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log network

show log network

Description

This command shows network logs for the W-IAP.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log pppd

show log ppod

Description

Shows the Point-to-Point Protocol daemon (PPPd) network connection details.

Syntax

Parameter Description
PPPd network count.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log rapper

show log rapper

Description

This command show details the VPN connection logs in detail.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log sapd

show log sand

Description

This command shows the SAPd details.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log security

show log security

Description

This command shows security logs of the W-IAP.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log system

show log system

Description

This command shows system logs of W-IAP.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines from the of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log upgrade

show log upgrade

Description

This command shows image download from URL and upgrade details for both local image file and URL W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log user

show log user [count]

Description

This command shows the W-IAP user logs.

Syntax

Parameter Description
countStarts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform CommandMode
All platformsPrivileged EXEC mode

show log user-debug

show log user-debug [court]

Description

This command shows the W-IAP user debug logs.

Syntax

Parameter Description
countStarts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform CommandMode
All platformsPrivileged EXEC mode

show log vpn-tunnel

show log vpn-tunnel [court]

Description

This command shows VPN tunnel status for the W-IAP.

Syntax

Parameter Description
countStarts displaying the log output from the specified number of lines from the the log.

Usage Guidelines

Use this command without the optional parameter to view a complete table of VPN tunnel status. Include the parameter to display status for the specified count of VPN tunnels.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is Introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show log wireless

show log wireless []

Description

This command shows wireless logs of the W-IAP.

Syntax

Parameter Description
Starts displaying the log output from the specified number of lines from the end of the log.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show memory

show memory

Description

Displays the information about memory utilization for a W-IAP.

Usage Guidelines

Use this command to view information about memory utilization on a W-IAP.

Example

The following example shows the output of the show memory command:

MemTotal: 248048 kB

MemFree: 169204 x3

Buffers: 0 kB

Cacned: 18164 KB

SwapCached: 0 kB

Active: 21472 kB

Inactive: 12640 KB

Active(anon): 15948 kB

Inactive (anon): 0 kb

Active(file): 5524 kB

Inactive(file): 12640 kB

Unevictable: 0 kB

Mlocked: 0 kB

SwapTotal: 0 kb

SwapFree: 0 kB

Dirty: 0 kB

Writeback: 0 kB

AnonPages: 15972 kB

Mapped: 7728 kB

Shmem: 0 kB

slab: 32252 kB

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show mgmt-user

show mgmt-user

Description

This command displays the credentials for the admin users for the W-IAP management interface.

Usage Guidelines

Use this command to view the admin user credentials required for accessing the W-IAP and external ser configuration details for the management users.

Examples

The following output is displayed for the show mgmt-user command:

Server Load Balancing :Disabled

Local User D3 Backup : Disabled

RADIUS Servers

[EMPTY]

Name TP Address Port Key Timeout Retry Count

(No text to output)

server1 192.0.2.2 1616 23567aea01cb66d354d2b1f5d13df7f95d4a d1d1f181fb4827 5

NAS IP Address NAS Identifier In Use RFC3576

(No text to output)

Yes

Management User Table

(1) 40 (20, 35, 36, 38, 40, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55).

Name Password Type

The text in the source image is completely blank, so no text can be extracted.

admin admin Admin

The output of this command provides the following information:

Column Description

Server Load BalancingIndicates if load balancing is enabled when two authentication servers are used.
Indicates if the loading up of the load user distance is enabled.
Column Description
NAS is configured.
In UseIndicates if the server is in use.
RFC3576Indicates if the W-IAPs are configured to process RFC 3576-compliant Change of Authorization (CoA).
NAS IP addressDisplays the IP address of the Network Access Server (NAS) if NAS is configured.
Name (Management User Table)Indicates the username of the admin user
PasswordIndicates the password of the admin user.
TypeIndicates if the type of the user (admin, read-only, or guest management user).

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0The output of this command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show network

show network

Description

This command shows network configuration details for a W-IAP.

Syntax

Parameter Description

<name>Displays the name of a network profile.

Usage Guidelines

Use this command without the optional parameter to view a complete configuration details of a network profile on the W-IAP. Include the parameter to display settings for a single network SSI

Example

The following example shows the partial output of show network command:

Name :test
ESSID :test
Status :Enabled
Mode :wpa2-acs
Band :all
Type :employee
Termination :Disabled
Passphrase :
WEP Key :
WEP Key Index :1
VLAN :
Server Load Balancing :Disabled
MAC Authentication :Disabled
L2 Auth Faiithrough :Disabled
Captive Portal :disable
Exclude Uplink :none 

Work without usable up'ink:Disabled

Percentage of Airtime: :Unlimited

Overall limit: :Unlimited

Per-user Limit: :Unlimited

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3This command is Introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show network-summary

show network-summary

Description

This command displays the status of the available network configurations on the W-IAP.

Usage Guidelines

Use this command to view the status of the network configurations.

Examples

The following output is displayed for the show network-summary command:

Internet reachable : Detection disabled

Active uplink :eth0

Primary VPN : Not configured

Secondary VPN : Not configured

AirWave : Not configured

The output of this command provides the following information:

Column Description
Internet ReachableIndicates the status of the WLAN network.
Active uplinkIndicates the uplink that is currently active on the W-IAP.
Primary VPNIndicates the status of the Primary VPN configuration.
Secondary VPNIndicates the status of the Secondary VPN connection.
AirwaveIndicates the status of the W-AirWave configuration.

Command History

Version Description

show opendns

show opendrs [support]

Description

This command displays the open DNS configuration details for a W-IAP.

Syntax

Parameter Description
supportDisplays if the OpenDNS credentials if the OpenDNS service is configured on the W-IAP.

Usage Guidelines

Use this command to view open DNS configuration details. The OpenDNS credentials are used by Instant access OpenDNS to provide enterprise-level content filtering.

Example

The following example shows the output of show opendns command:

OpenDNS Account :admin

OpenDNS Password :admin123

OpenDNS Status : Not connected

OpenDNS Error Message: N/A

The output of this command includes the following parameters:

Column Description
OpenDNS AccountIndicates the username for the OpenDNS account.
OpenDNS PasswordIndicates the username for the OpenDNS account.
OpenDNS StatusIndicates if the W-IAP is connected to the OpenDNS server.

show port status

show port status

Description

Displays the activity statistics on each of the port on the controller.

Example

The following example shows the output of the show port status command:

(Instant AP) | show port status

Port Type Admin-State Oper-State

bond0 GE down up

Parameter Description
PortDisplays the port number on the controller.
TypeDisplays the port type.
Admin-StateDisplays if the port is enabled or disabled.
Oper-StateDisplays if the port is currently up and running.

Command History

Version Description
De'l Networking X-Series Instant6.2.1.0-3.2This command is introduced.

Command Information

show pppoe

show pppoe {config|debug 1oqs|debug status}

Description

This command shows PPPoE debug logs and uplink status.

Syntax

Parameter Description
configDisplays PPPoE configuration details.
debug logsDisplays PPPoE debug logs.
debug statusDisplays the uplink status.

Example

show pppoe config

The following example shows the configuration of the PPPoE show pppoe config command.

PPPoE Configuration

[EMPTY]

Type Value

User user

Password d226ccefac5a95cd6bb04ca74f20473eae9085fb16892b66

Service name ServiceA

CHAP secret 8acc867926ad85681fd0b0c1a15bb818

Unnumbered dhcp profile dhcpProfile1

show pppoe debug logs

The following example shows the configuration of the PPPoE show pppoe debug logs command.

pppd log not available

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show process

show process

Description

This command displays a list of processes running on a W-IAP.

Usage Guidelines

Use this command to view the processes running on the W-IAP for debugging purpose.

Example

The following example shows the partial output for the show process command:

PID Uid VrSize Stat Command

1 root 332 5 init

2 root SAN [ksoftirqd/0]

3 root SW< [events/0]

4 root SN< [khelper]

5 root SW< [kthread]

6 root SW< [kblockd/0]

7 root SM [pdflush]

8 root SW [pdflush]

10 root SW< [aio/0]

9 root SM [kswapd0]

992 root 348 s /sbin/udhcpc -i br0 -b

1343 root 744 S /aruba/bin/tinyproxy

1344 root 476 S /aruba/bin/tinyproxy

1345 root 476 3 /aruba/bin/tinyproxy

1348 root 476 S /aruba/bin/tinyproxy

1349 root 476 S /aruba/bin/tinyproxy

1350 root 476 S /aruba/bin/tinyproxy

1351 root 476 S /aruba/bin/tinyproxy

1362 root 716 S /usr/sbin/mini_httpd -c *.cgi -d /etc/httpd -u root

1365 root 732 s /usr/sbin/mini httpd -c *.cgi -d /etc/httpd -u root -

1368 root 732 S /usr/sbin/mini httpd -c *.cgi -d /etc/httpd -u root -

The output of this command provides information on the process ID, user ID of the user running the virtual memory consumed by the process, statistics and the command associated with the processes run

show proxy config

show proxy config

Description

This command displays the HTTP proxy configuration settings on a W-IAP.

Example

The following example shows the output of show proxy config command:

Proxy server :192.0.2.

Proxy port :8080

Exceptions

[EMPTY]

No Exception

(1)

1 192.0.2.2

The output of this command provides the following information:

Parameter Description
Proxy serverDisplays the IP address of the HTTP proxy.
Proxy portDisplays the port number configured for the HTTP proxy.
ExceptionsDisplays the IP address of the hosts for which HTTP proxy configuration is applied.

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is introduced.

show radio config

show radio config

Description

This command displays the 2.4 GHz and 5 GHz radio configuration details for a W-IAP.

Usage Guidelines

Use this command to view the 2.4 GHz and 5 GHz radio configuration details for a W-IAP.

Example

The following example shows the output of show radio config command:

(Instant AP)# show radio config

Legacy Mode:enable

Beacon Interval:100

802.11d/802.11h:enable

Interference Immunity Level:2

Channel Switch Announcement Count:0

MAX Distance:600

Channel Reuse Type: disable

Background Spectrum Monitor; disable

5.0 GHz;

Legacy Mode: enable

Beacon Interval:100

802.11d/802.11h:enable

Interference Immunity Level:2

Channel Switch Announcement Count:2

MAX Distance:600

Channel Reuse Type: disable

Background Spectrum Monitor: disable

The output of this command provides the following information:

Parameter Description
Channel SwitchAnnouncement CountDisplays the number of channel switching announcements that are sent before switching to a new channel.
MAX distanceIndicates the maximum distance in meters between a client and an AP or between a mesh point and a mesh portal.
Channel Reuse TypeIndicates if channel reuse type is enabled.
Channel Reuse ThresholdDisplays the channel reuse threshold configured for channel reuse type.
Background SpectrumMonitorIndicates background spectrum monitoring is enabled. When enabled, the W-IAPs in access mode continue with normal access service to clients, while performing additional function of monitoring RF interference (from both neighboring APs and non Wi-Fi sources such as, microwaves and cordless phones) on the channel they are currently serving clients.
Standalone SpectrumIndicates the portion of the channel (upper, middle, or lower) that is being monitored on the 5 GHz band.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode

show radius-servers support

show radius-servers support

Description

This command displays the RADIUS server configuration details for a W-IAP.

Usage Guidelines

Use this command to view the RADIUS server information for a W-IAP.

Example

The following example shows the output of show radius-servers support command:

RADIUS Servers

(No text to output)

Name IP Address Port Acpport Key

......

Server1 192.0.2.2 1616 1813 23567aea01c66d354d2b1f5d13df7f85c4a

Timeout Retry Count NAS IP Address NAS Identifier In Use 3-C3576

[EMPTY]

d1d1=181fb4827 5 Yes 0

Airgroup RFC3576-ONLY Airgroup RFC3576 port Readtime

(No text to output)

5

The output of this command provides the following information:

Parameter Description
NameIndicates the name of the RADIUS server.
IP addressIndicates the IP address of the RADIUS server.
PortIndicates the authorization port number of the RADIUS server.
AcctPortIndicates the authorization port number of the RADIUS server.
Airgroup RFC3576 portIndicates the port number used for sending AirGroup CoA.
DeadtimeIndicates the RADIUS server dead-time.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show rft trans-id

show rft. trans-id {| all}

Description

This command shows the transaction IDs of tests performed for RF troubleshooting.

Syntax

Parameter Description
Indicates the transaction ID for which you want to view the output.
allDisplays all the transaction IDs associated with the RF tests.

Usage guidelines

Use the show rft trans-id command to view the transaction IDs for the most recent test performed for RF troubleshooting.

Example

The following example shows the transaction IDs for the latest RF tests.

(Instant AP) show rft trans-Id 201

Command History

VersionDescription
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

show rft profile

show rft profile (all|antenna-connectivity|ht-link-quality|link-quality|raw)

Description

This command shows the RF test profile for testing RF parameters such as antenna connectivity, link qua and channel link quality.

Syntax

Parameter Description
allDisplays the parameters for all test profiles.
antenna-connectivityDisplays the parameters details for the antenna-connectivity test profile.
ht-link-qualityDisplays the parameter details for the HT link quality test profile.
link-qualityDisplays the parameter details for the link quality test profile.
rawDisplays the parameter details for the raw test profile.

Usage guidelines

Use the show rft profile command to view the test profile parameters for RF troubleshooting.

Example

The following example shows the profile parameters for all RF test profiles:

(Instant AP)# show rift profile all

Profile RAW: Built-in profile

Parameter Value

Antenna 1 and/or 2 Frame Time Null Data

Num Retries 0

Data Rate All rates are tried

Profile AntennaConnectivity: Built-in profile

Parameter Value

Frame Type Null Data

Num Packets 100

Packet Size 1500

Num Retries

Radio 0 (1 for AP-8C-S or1y)

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show running-config

show running-config

Description

This command displays the current configuration running on a W-IAP, including the current changes that yet to be saved.

Usage Guidelines

Use this command to view the current configuration information stored in the W-IAP flash memory.

Example

The following example shows the partial output of the show running-config command output:

version 6.4.0.0-4.1.0
virtual-controller-country IN
virtual-controller-key 0cb5770401cdeb6e4363c25fdfde17d907c4b095a8be5e
name instant-C4:42:98
terminal-access
clock timezone none 00 00
rf-band all
allow-new-aps
allowed-ap d8:c7:c8:c4:42:98
arm
wide-bands 5ghz
80mhz-support
min-tx-power 1B
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
scanning
client-watch
syslog-level warn sp-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user 
max-authentication-failures 0
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
local-probe-reg-thresh 0
max-clients-threshold 64
dotllx
dotllv
auth-survivability cache-time-out 24
wlan exterral-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"
auto-whitel'st-disable
https
blacklist-time 3600
auto-failure-blacklist-time 3600
ids
wireless-containment none
wired-port-profile wired-instant
switchport-node access
allowed-vlan all
native-vlar quest:
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poe
type guest
captive-portal disable
no docix
wired-port-profile default wired_port_profile
switchport-node trunk
allowed-vlan all
native-v'ar l
shutdown
access-rule-name default wired port profile 

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show snmp-configuration

show snmp-configuration

Description

This command displays the Simple Network Management Protocol (SNMP) configuration details for a Virtu

Controller.

Usage Guidelines

Use this command to view the SNMP information configured on a Virtual Controller.

Example

The following example shows the output of show snmp-configuration command:

Engine ID:D8C7C8CBD420

Community Strings

Name

SNMPv3 Users

Name Authentication Type Encryption Type

(No text to output)

SNMP Trap Hosts

TP Address Version Name Port Inform

The output of this command includes the following parameters:

Parameter Description

Engine IDDisplays the SNMP engine ID.
Community StringsDisplays the SNMP community strings..
SNMPv3 UsersDisplays details about the SNMPv3 users.

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show snmp trap-queue

show snmp trap-queue

Description

This command displays the list of SNMP traps in queue.

Usage Guidelines

Use this command to view the SNMP traps in queue.

Example

The following example shows the partial output of show snmp trap-queue command:

2013-05-12 14:05:27 An AP (NAME d8:c7:c8:cb:d4:20 and MAC d8:c7:c8:cb:d4:20 on RADIO 2) detected an interfering access point (RSSID 00:24:6c:80:7d:11 and SSID NTSP-SPOT on CHANNEL 1). 2013-05-12 14:09:53 An AP (NAME d8:c7:c8:cb:d4:20 and MAC d8:c7:c8:cb:d4:20 on RADIO 2) detected an interfering access point (RSSID 6c:f3:7f:(5:5d:20 and SSID 7SPOT on CHANNEL 1). 2013-05-12 14:10:36 An AP (NAME d8:c7:c8:cb:d4:20 and MAC d8:c7:c8:cb:d4:20 RADIO 2) changed its channel from channel 1 (secchar offset 1) to channel 7 (secchar offset 1) due to reason 12.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show spectrum-alert

show spectrum-alert.

Description

This command displays the list of spectrum alerts for a W-IAP.

Syntax

Parameter Description
Filters the alerts based on the specified number.

Usage Guidelines

Use this command to view the spectrum alerts for a W-IAP. When a new non-WI-FI device is found, an reported to the Virtual Controller. The spectrum alert messages provide information about the device ID, device type, IP address of the spectrum monitor or hybrid AP, and the timestamp. The Virtual Controller reports the detailed device Information to W-AirWave Management server.

Example

The following example shows the output for the show spectrum-alert command when no alerts are generated.

Spectrum Alerts

Timestamp Type ID Access Point

The output of this command provides the following information:

Parameter Description
TimestampDisplays the time at which alert was recorded.
TIMEDisplays the type of the device that generated the alert.

show stats

show stats {ap | client | global | network } [count]

Description

This command displays the aggregate statistics for W-IAPs, W-IAP clients, W-IAP cluster, and network profi configured on a W-IAP.

Syntax

Parameter Description
apDisplays information on W-IAP utilization, RF trends, and client details for a specific W-IAP.
clientDisplays information on a client and its mobility records, the cluster to which the client has joined, and the details of the W-IAP to which it is currently connected.
globalDisplays global statistics for the W-IAP cluster, and the W-IAPs and clients connected to the W-IAP cluster.
networkDisplays aggregate information about a network profile configured on a W-IAP.
[count]Allows you to filter the command output for the W-IAP, client, global, and network profile statistics based on the specified number.

Usage Guidelines

Use this command to view the following information about W-IAPs, the clients connected to the W-IAPs, the corresponding W-IAP cluster:

  • Utilization trend—Displays information about the W-IAP utilization, the number of clients associated with a W-IAP, Virtual Controller, or the W-IAP network over the last 15 minutes.
  • RF trends—Displays information the utilization, noise, or error threshold for a W-IAP. It also shows the current speed as signal strength for the clients in the network and the RF information for the W-IAPs

00:34:46 8 164 4 239 0 1 8 1 93 99 00:34:17 8 164 4 239 0 1 8 1 186 19

019

RF Trends

Timestamp Utilization [2.4 GHz] (s) Utilization [5.0 GHz] (w) Noise Floor [2.4 GHz] (dBm) Noise Floor [5.0 GHz] (dBm) 2.4 GHz Frames [Errors] (fps) 3.0 GHz Frames [Errors] (fps) 2.4 GHz Frames [Out] (fps) 5.0 GHz Frames [Out] (fps) 2.4 GHz Frames [In] (fps) 5.0 GHz Frames [In] (fps) 2.4 GHz Frames [Drops] (fps) 5.0 GHz Frames [Drops] (fps) 2.4 GHz Mgmt Frames [In] (fps) 5.3 GHz Mgmt Frames [In] (fps) 2.4 GHz Mgmt Frames [Out] (fps) 5.0 GHz Mgmt Frames [Out] (fps)

00:34:46 59 4 -91 -93 41 0 0 0 68 18 1 2 403 265 1 0 00:34:17 61 5 -92 -93 45 0 0 1 78 21 1 1 408 287 1

Client Heatmap

Clients Signal Speed IP Address

AF List

[EMPTY]

Name: IP Address Mode Spectrum Clients Type CPU Utilization & Memory Free (MR): Serial Number: Need Antenna Config From Port

d8:c7:c8:cb:d4:20 10.17.88.168 access disable 1 135 8 164 AX0059921 No none

show stats client

The following example shows the output for the show stats client command:

Name : :

TP Address::169.254.90.154

MAC Address::08:ed:b9:e1:51:7d

Access Point::d8:c7:c8:cb:d4:20

Channel::149+

Client Signal Speed TP Address

[EMPTY]

169.254.90.154 good good 169.254.90.154

Access Point Heatmap

Access Point Utilization Noise Errors

[EMPTY]

d8:c7:c8:cb:d4:20 good good good

Client List

Name IP Address MAC Address OS Network Access Point Channel Type Role

169.254.90.154 08:ed:b9:e1:51:7d Network1 d8:c7:c8:cb:d4:20 149+ AN Network1

Info timestamp :43662

show stats global

The following example shows the output for the show stats global command:

Swarm Global Status

Timestamp Clients Frames [Out] (fps) Frames [In] (fps) Throughput [Out] (bps) Throughput [In]

(bps)

00:38:05 1 0 0 294 380

00:37:35 1 0 0 96 101

00:37:04 1 0 0 0 0

00:36:33 1 0 0 0 0

00:36:03 1 0 0 0 0

00:35:32 1 0 0 46 49

00:35:01 1 0 0 93 99

00:34:31 1 0 0 186 199

00:34:00 1 0 0 0 0

00:33:29 1 0 0 0 0

00:32:59 1 0 0 0 170

00:32:28 1 0 0 0 170

00:31:58 1 0 1 2961 5946

00:31:27 1 0 0 196 316

00:30:56 1 0 0 196 202

Access Point Heatmap

16:36:54 0 0 0 0 0

16:36:24 0 0 0 0 0

16:35:54 0 0 0 0 0

16:35:23 0 0 0 0 0

16:34:55 0 0 0 0 0

10:34:25 0 0 0 0 0

Access Point Headmap

Access Points Utilization Noise Errors

(No text to output)

a8:c7:c8:c4:42:98 poor good good

Client Heatmap

Clients Signal Speed IP Address

Name :test123

ESSID :test123

Status :Enabled

Mode :wpa2-aes

Band :all

Type: employee

Termination :Disabled

Passphrase :

MEP Key :

(1) _0 = _1 (2)

VLAN :

Server Load Balancing : Disabled

MAC Authentication :Disabled

2 Autn Fat through 10 seconds

Captive Portal :disable

Exclude Uplink : none

Hide SSTD: Disabled

content filtering, disabled

Adult survival ability: disabled

Aeth survivability time=30.24

RADIUS ACCOUNTING ;Disabled

Interim Accounting Interval to

Radius Reauth Interval:0

10110101010101010101010101010101010101010101010

Inactivity Timeout :1000

Learoy Morte Bands Fall

Max Clients Threshold :64

Background WMM Share : 0

Best Effort WMM Share :0

Video KMM Share :0

voice WMH Share :0 Certificate Installed: :No

Internal Radius Users: :0

Internal Guest Users: 10

Role Derivation Rules

Attribute Operation Operand Role Name Index

Vlan Derivation Rules

[EMPTY]

Attribue Operation Operand Vlan Id


RADIUS Servers

Name IP Address Port Key Timeout Retry Count NAS IF Address NAS Identifier RPC3576

test 10.0.0.1 1812 test123 5 3

test123 10.0.0.0 1812 test123 5 3

LDAP Servers

Name IP Address Port Timeout Retry Count Admin-DN Admin Password Base-DN

test 0.0.0.0 0 5 3

Access Rules

Dest TP Dest Mask Dest Match Protocol (id:sport:report) Action Log TOS 802.1P Blacklist Mirror

DisScan ClassifyMedia

ACI Captive Portal: disable

:Captive Portal Configuration

Background Color:13421772

Banner Color :16750848

Decoded Texts :

Banner Text : Welcome to Guest Network

Command Information

W-IAP PlatformCommand Mode
All platformsPrivileged EXEC mode

show subscription-aps

show subscription-aps

Description

This command displays the subscription status of a W-IAP.

Example

(Instant AP) (config) # show subscription-aps

TAP controlled by Cloud-Server:disable

subscription enabled by manually : disable

Subscription Ap List

MAC Address Status

(No text)

d8:c7:c8:c4:56:de ACTIV2

d8:c7:c8:c4:57:06 ACTIVE

Command History

Version Description
De1 Networking Series Instant6.2.1.0-3.3This command is introduced,

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show summary

show summary { | support}

Description

This command shows the current configuration details.

Syntax

Parameter Description
Shows the difference in configuration.
supportShows the summary support containing the configuration details used by sup

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.4This command was modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show swarm

show swarm (state|mode)

Description

This command displays the current status of the W-IAP cluster and indicates if W-IAPs are in a cluster o standalone mode.

Usage Guidelines

Use this command to view the current status of the W-IAP cluster and to view information about the functioning mode of the W-IAP cluster.

Example

The following example shows the output of show swarm state command:

AF Swarm State :swarm_config_sync_complete

mesh idart State ; suspending

The output of this command describes synchronization status of the W-IAP cluster.

The following text shows an example output for the show swarm mode command:

Swarm Mode :Cluster

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged BYSC mode

show supported-cert-formats

show supported-certFormats

Description

This command displays the supported server and CA certificate formats.

Usage Guidelines

Use this command to view the list certificate formats supported by the W-IAP.

Examples

Server Certificate Formats

Name

PEM

CA Certificate Formats

Name

DPM

DER

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0The output of this command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.4This command was modified.

Command Information

show syslog-level

show syslog-level

Description

This command displays the Syslog logging levels configured for a W-IAP.

Usage Guidelines

Use this command to view the Syslog logging facilities and the associated logging level.

Example

The following example shows to output of the show syslog-level command:

Logging Level

(No text)

Facility Level

[EMPTY]

ap-deoing debug

network debug

security debug

system debug

user debug

user-debug debug

wireless debug

The output of this command provides the following information:

Parameter Description

FacilityDisplays the list of logging facilities configured on the W-IAP.
ap-debugGenerates a log for the AP device for debugging purposes.
networkGenerates a log when there is a change in the network, for example, when a new W-IAP is added to a network.
securityGenerates a log for network security, for example, when a client connects using wrong
Parameter Description
for all Syslog facilities. Informational—Messages of general interest to system users. Debug—Messages containing information useful for debugging.

Command History

Version Description
Dell Networking X-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show tacacs-servers

show tacacs-servers

Description

This command displays all the tacacs servers configured on a W-IAP.

Usage Guidelines

Use this command to view the list of tacacs servers available on a W-IAP.

Example

The following example shows the output of the show tacacs-servers command:

TACACS Servers

[EMPTY]

Name IP Address Port Key Timeout Retry Count In Use

The output of this command provides the following information:

Parameter Description
NameIndicates the list of tacacs server available on a W-IAP.
IP AddressDisplays the IP address for each tacacs server.
PortIndicates the TCP Port in use for the tacacs server.
keyIndicates the shared secret key used to authenticate and access tacacs serve

Command History

Version Description

show tech-support

show tech-support

Description

This command displays the complete W-IAP information and the associated configuration details, which can be used by the technical support representatives for debugging.

Usage Guidelines

Use this command to view and analyze W-IAP configuration details for debugging any AP related issues.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show uncommitted-config

show uncommitted-config

Description

This command displays the current configuration details that are yet to be committed and saved on the

Usage Guidelines

Use this command to view the uncommitted configuration details. Use the commit apply command to commit the configuration changes.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show upgrade info

show upgrade info

Description

This command displays the image upgrade details for a W-IAP.

Usage Guidelines

Use this command to view the image upgrade details for a W-IAP.

Example

The following example shows the output of show upgrade info command:

Image Upgrade Progress

(No text)

Mac IP Address AP Class Status Image Info Error Detail

[EMPTY]

d8:c7:c8:cb:d4:20 10.17.88.198 Cassiopeia image-ok image file none

Auto reboot ; enable

use external URL: disable

The output of this command provides the following information:

Parameter Description
PacShows the MAC address of the W-IAP.
IP AddressShows the IP address of the W-IAP.
AP Image ClassIndicates the W-IAP class. The following examples describe the image of for different W-IAP models:For W-IAP 135/134—DellInstant_Cassiopeia...For W-IAP108/109, W-IAP103, and W-IAP114/115— DellInstant_Pegasus...For W-IAP155/155P—DellInstant_Aries...

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show uplink {config|stats}

Description

This command displays uplink configuration details and status of for a W-IAP.

Syntax

Parameter Description
show uplink configDisplays the uplink interface configuration details for a W-IAP.
show uplink statsDisplays the aggregate uplink statistics for a W-IAP

Usage Guidelines

Use this command to view the information about uplink status and configuration for a W-IAP.

Example

The following output is displayed for the show uplink config command:

Uplink preemption: enable

Uplink enforce : none

Ethernet uplink eth0 :DHCP

Internet failover :disable

Max allowed test packet loss:10

Secs between test packets :30

VFN failover timeout (secs) :180

The output of this command provides the following information:

Column Description
Uplink preemptionIndicates if the uplink preemption is enabled.
Uplink enforceIndicates if any uplinks are enforced.

eth0 UP 0 Yes

Wifi-sta INIT 6 No

3G/4G INIT 7 No

Internet fallover : disable

Max allowed test packet loss:10

Secs between test packets :30

VPN fallover timeout (secs) :180

ICMP pkt sent :0

ICMF pkt lost :0

Continuous okt lost :0

VEN down line :0

The output of this command provides the following information:

Column Description
Uplink preemptionIndicates if the uplink preemption is enabled.
Uplink enforceIndicates if any uplinks are enforced.
Ethernet uplink eth3Indicates if Ethernet uplink is configured.
TypeIndicates the type of the uplink.
StateIndicates the uplink status.
PriorityIndicates if any priority levels are assigned to the uplink.
In UseIndicates if the uplink is in use.
Max allowed test packet lossIndicates an allowed number of test packets that can be lost verify the Internet availability.
Secs between test packetsIndicates the frequency at which the test packets are sent to verify Internet availability.
VPN failover timeout (secs)Indicates the number of seconds to wait, before trying a different up when a VPN tunnel is down.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show uplink-vlan

Description

This command displays the uplink VLAN configuration details for the management traffic.

Usage Guidelines

Use this command to view the uplink VLAN configuration details for management traffic. The uplink management VLAN configuration allows you to tag management traffic and connect multiple W-IAP cluster (Virtual Controllers) to the same port on an upstream switch (for example, W-AirWave server).

Example

The following output is displayed for the show uplink-vlan command:

Uplink Vian Current :0

Uplink V-an Provisioned :

The output of this command provides the following information:

Column Description
Uplink Vlan CurrentIndicates if the VLAN ID.
Uplink Vlan ProvisionedIndicates if the uplink VLAN is provisioned.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

show users

show user [portal| Radius]

Description

This command displays users configured for a W-IAP.

Syntax

Parameter Description
portalDisplays the W-IAP user credentials.
radiusDisplays the user credentials for the RADIUS server authentication

Usage Guidelines

Use this command to view the W-IAP user credentials.

Examples

The following output is displayed for the show user command:

show user

User Table

Name Password Attribute

d8:c7:c8:cb:d4:20] show user portal

Portal User Table

Name Password

d8:c7:c8:cb:d4:20# show user radius

Radius User Table

Name Password

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show valid-channels

show valid-channels

Description

This command displays the list of channels that are valid for a W-IAP serving a specific regulatory doma

Usage Guidelines

Use this command to view the list of valid channels that can be configured on your W-IAP.

Example

The following example shows the output of show valid-channels command:

2,4 GHz
1
2
3
4
5
6
7
8
9
10
11
12
13
14
2+
3+
4+
5+
6+
7+
5.0 GHz
36
40
44 
Parameter Description
2.4 GHzDisplays the list of channels valid for a W-IAP in the 2.4 GHz band.
5.0 GHzDisplays the list of channels valid for a W-IAP in the 5.0 GHz band.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show version

show version

Description

This command displays the Instant software version running on a W-IAP.

Example

The following example shows the output of the show version command:

Aruba Operating System Software.

ArubaOS (MODEL: M-AP105), Version 6.3.1.1-4.0.0.0

website: http://www.de1.com

Copyright (c) 2002-2013, Aruba Networks, Inc.

Compiled on 2013-11-18 at 09:46:18 PST (build 40933) by p4build

AP uptime is 2 days 3 hours 32 minutes 48 seconds

Reboot Time and Cause: AP rebooted Wed Nov 20 05:28:48 UTC 2013; Image Upgrade Successful

The output of this command provides the following information:

Parameter Description
VersionIndicates the version of W-IAP software.
Reboot Time and CauseIndicates the reason for which the W-IAP was last rebooted and the reboot time.
ModelIndicates the W-IAP model.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

show vpn

show von {config|status|tunnels}

Description

This command displays the status and configuration details for VPN-enabled W-IAPs.

Syntax

Parameter Description
configDisplays configuration details for the VPN-enabled W-IAPs.
statusDisplays the status of the VPN connections enabled on a W-IAP.
tunnelaDisplays the IAP-VPN retry counter statistics.

Example

The following example shows the output displayed for show vpn config command:

Concentrator

(No text)

type value

VPN Primary Server

VPN Backup Server

VPN Preemption disable

VPN Fast Fanlover disable

VPN Hold Time 600

VFN Monitor Fkt 5end Freq 5

VPN Monitor Pkt Lost Cnt 2

VFN Ikepsk

VPN Username

VEN Password 95a5624fbf08dfb3e794ac2c6686e330

GRE outside vpn disable

GRE Server

CRE IP Address 0.0.0.0

• vpn monitor-pkt-lost-cnt
• vpn monitor-pkt-send-freq
• vpn ikepsk
- gre type
- gre primary
- gre per-ap-tunnel

The following example shows the output displayed for show vpn status command:

profile name:default

current using tunnel : unselected tunnel

ipsec is preempt status :disable

ipsec is fast failover status : disable

ipsec hold on period :600

ipsec tunnel monitor frequency (seconds/packet) :5

ipsec tunnel monitor timeout by lost packet cat :2

ipsed primary tunnel crypto type :Cert

ipsec primary tunnel peer address :N/A

ipsec primary tunnel peer tunnel ip ;N/A

ipsec primary tunnel ap tunnel ip :N/A

ipsec primary tunnel current sm status :Init

ipsec primary tunnel tunnel status :Down

ipsec primary tunnel tunnel retry times :0

ipsec primary tunnel tunnel uptime :0

ipsec backup tunnel crypto type :Cert

ipsec backup tunnel peer address :N/A

ipsec backup tunnel peer tunnel ip :N/A

ipsec backup tunnel ap tunnel ip ;N/A

ipsec backup tunnel current sm status : Init

ipsec backup tunnel tunnel status :Down

ipsec backup tunnel tunnel retry times :0

ipsec backup tunnel tunnel uptime :0

The show vpn status command displays the current status of VPN connection, IP address configured for

VPN/IPSec connections, and the tunnel details.

Command History

show walled-garden

show walled-garden

Description

This command displays the domain names and websites that are blacklisted or whitelisted by a W-IAP.

Usage Guidelines

Use this command to view the walled garden configuration details for a W-IAP. A walled garden typically controls access to web content and services. The Walled garden access is required when an external cap portal is used. For example, a hotel environment where the unauthenticated users are allowed to navigate designated login page (for example, a hotel website) and all its contents.

The users who do not sign up for the Internet service can view the "allowed" websites (typically hotel pr websites). The website names must be DNS-based and support the option to define wildcards. This work client devices with or without HTTP proxy settings.

When a user attempts to navigate to other websites, which are not in the whitelist of the walled garder the user is redirected to the login page. In addition, a blacklisted walled garden profile can also be conf explicitly block the unauthenticated users from accessing some websites.

Example

The following example shows the output of show walled-garden command:

White List

[EMPTY]

Domain Name


example.com

Black List


Domain Name

[EMPTY]

example2.com

The output of this command provides the following information:

show wifi-uplink (auth log config | status)

Description

This command displays the configuration details, the status, and authentication log for the Wi-Fi uplinks configured on a W-IAP.

Syntax

Parameter Description
auth logDisplays the authentication configuration details and an authentication log
configDisplays the Wi-Fi configuration parameters enabled on a W-IAP.
statusDisplays the status of the Wi-Fi uplink.

Usage Guidelines

Use this command to view the information about status and configuration details for the Wi-Fi uplink en on a W-IAP.

Example

The following output is displayed for the show wifi-uplink auth log command:

wifi uplink auth configuration:

wifi uplink auth log:

[1536]2013-05-08 23:42:06.647; Global control interface '/tmp/supp_gbl'

Parameter Description
uplink-bandDisplays the band configured for the Wi-Fi uplink connection. For example, dot11a and dot11g.

The following output is displayed for the show wifi-uplink status command:

configured :YES

enabled:YES

The output of this command indicates if the Wi-Fi uplink is configured and enabled on the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is Introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show wired-port

show wired-port

Description

This command displays the configuration details associated with a wired profile configured on a W-IAP.

Syntax

Parameter Description

Displays the current configuration details for a specific wired profile.

Usage Guidelines

Use this command to view the details of a wired profile configured on a W-IAP.

Example

The following example shows the output of the show wired-port command:

Name :default_wired_port_profile
VLAN Mode :Trunk
Allowed VLANs :all
Native VLAN :1
Admin Status :Down
Role :default_wired_port_profile
Speed :auto
Duplex :full
POE :No
Type :employee
Content Filtering :Disabled
Server Load Balancing :Disabled
MAC Authentication :Disabled
8021.x :Disabled
L2 Auth Falithrough :Disabled
Captive Portal :disable
Exclude Uplink :none 

Access Rules

[EMPTY]

Dest IP Dest Mask Dest Match Protocol (id:sport:epert) Action Log T05 802.1P Blacklist Mirror

DisScan ClassifyMedia

(1) 2017年 ,公司实现扭亏为盈

any any match any perm't.

Vlan Id :0

ACL Captive Portal: disable

:Captive Portal Configuration

Background Color:13421772

Barmer Color:16750848

Decoded Texts :

Barner Text : Welcome to Guest Network

Use Policy : Please read terms and conditions before using Guest Network

Terms of Use: This network is not secure, and use is at your own risk

Internal Captive Portal Redirect LRL:

Captive Portal Mode: Acknowledged

Custom logo

:External Captive Portal Configuration

Server:localhost

Port :80

URL : /

Authentication Text: Authenticated

External Captive Porta Redirect URL:

Server Fail Through: No

The output of this command shows the configuration parameters associated with the selected wired prof and the value assigned for each of these parameters:

Command History

Version Description

Dell Networking W-Series Instant 6.2.1.0-3.3

This command is introduced.

Command Information

show wired-port-settings

show wired-port-settings

Description

This command displays the list of wired profiles configured on a W-IAP.

Usage Guidelines

Use this command to view the wired profiles configured on a W-IAP.

Example

The following example shows the output of show wired-port-settings command:

Wired Port Profiles

[EMPTY]

Name VLAN Mode Allowed VLANs Native VLAN Admin Status Role Speed

Wileau1012 Itank all 1 Down Wileau1012 auto

Duplex POE In Use Authentication Method

auto Yes Yes None

full No Yes None

Port Profile Assignments

Port Profile Name

[EMPTY]

0 default_wired_port_profile

1 example1-crash

2 wired-instant

  1. wired-instant

4 wired-instant

The output of this command provides the following information:

Column Description

Column Description
duplexIndicates if the client traffic duplexing full, half, or automatically assigned b on the capabilities of the client, the AP, and the cable.
poeIndicates if Power over Ethernet (PoE) is enabled.
In UseIndicates if the wired profile is in use.
Authentication MethodIndicates the authentication method configured for the wired profile.
PortIndicates the port number to which a wired profile is assigned.
ProfileIndicates the name of wired profile assigned to a wired port.

Command History

Version Description
Del1 Networking X-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

show wispr config

show wispr config

Description

This command displays the Wireless Internet Service Provider roaming (WISPr) authentication parameters configured on a W-IAP.

Usage Guidelines

Use this command to view the WISPr configuration details for a W-IAP.

Example

The following example shows the output of show wispr config command:

MISPr ISO Country Code :91
MISPr E.164 Country Code :IN
MISPr E.164 Area Code :80
MISPr SSID :Network1
MISPr Operator Name :XV#
MISPr Location Name :airport 

The output of this command provides the following information:

Parameter Description
WISFr ISO Country CodeIndicates the ISO country code configured for WISPr authentication.
WISFr E.164 Country CodeIndicates the E.164 Country Code for the WISPr Location ID.
WISFr E.164 Area CodeIndicates the E.164 Area Code for the WISPr Location ID.
WISPr SSTDIndicates the SSID for which the WISPr authentication profile is configured.
WISPr Operator NameIndicates the hotspot operator profile associated with the WISPr authentication profile.

show xml-api-server

show xml-api-server config

Description

This command displays the XML API server configuration details.

Usage Guidelines

Use this command to view the XML API server configuration details.

Example

The following example shows the output of the show xml-api-server command:

Ip :192.0:2.5

key :user1234

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode

snmp-server

snmp-server

community host version (1 ucp-port || (2c|3 [inform]

[udp-port ]

user |

Description

This command configures SNMP parameters.

Syntax

Parameter Description Range Default
communitySets the read-only community string. — —
engine-idSets the SNMP server engine ID as a hexadecimal number. 24 characters maximum
hostConfigures the IP address of the host to which SNMP traps- are sent. This host needs to be running a trap receiver to receive and interpret the traps sent by the controller.
versionConfigures the SNMP version and security string for notification messages.
informSends SNMP inform messages to the configured host.— disabled
udp-portIndicates the port number to which notification messages sent.are 162
userConfigures an SNMPv3 user profile for the specified username.
auto-protIndicates the authentication protocol for the user, eitherMD5/SHASHA

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

subscription-ap

subscription-ap status no...

Description

This command configures the subscription status for a W-IAP.

Syntax

Command/Parameter Description
Enter the MAC address of the W-IAP.
Enter the subscription status for the W-IAP.
no...Removes the configuration.

Usage Guidelines

Use this command to subscribe the W-IAP based on its MAC address.

Example

(Instant AP)(config) # subscription-ap a1:b2:c3:d4:42:90 status

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

subscription-ap-enable

subscription-ap-enable no...

Description

This command enables the subscription of a W-IAP.

Syntax

Command/Parameter Description
subscription-ap-enableEnables the subscription for a W-IAP.
noRemoves the configuration.

Usage Guidelines

Use this command to enable the subscription of the W-IAP.

Example

(Instant AP) (config) # subscription-ap-enable

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode

syslocation

syslocation no...

Description

This command allows you to define the physical location for the W-IAP.

Syntax

Command/Parameter Description
Allows you to specify a physical location.
noRemoves the configuration.

Usage Guidelines

Use this command to define the physical location of the W-IAP.

Example

The following example sets the physical location of the W-IAP to Sunnyvale:

(Instant AP) (config) # syslocation

Command History

Version Description
Dell Networking W-Series Instant6.2.1.0-3.3This command is introduced.

Command Information

syslog-level

syslog-level {ap-debug|network|security system|user|user-debug|wireless} no...

Description

This command configures syslog facility levels. Syslog Facility is an information field associated with a sys message.

Syntax

Parameter DescriptionRange Default
syslog-levelwirelessConfigures the Syslog facility level.You can configure any of the following logging levels:Emergency—Panic conditions that occur when the system becomes unusable.Alert—Any condition requiring immediate attention and correction.Critical—Any critical conditions such as a hard drive error.Errors—Error conditions.Warning—Warning messages.Notice—Significant events of a non-critical and normal nature. The default value for all Syslog facilities.Informational—Messages of general interest to system users.Debug—Messages containing information useful for debugging.Generates a log about radio configuration. - -Emergency, Alert, Critical, Errors, Warning, Notice, Informational, DebugNotice
no...Removes the configuration. --

Usage Guidelines

Use this command to configure syslog facility levels and to generate logs based on various user and W-I parameters.

Example

The following example configures syslog facility levels for ap-debug and user-debug:

(Instant AP) (config) | syslog-level error as-debug

(Instant AP) (config)# end

(Instant AP)# commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP PlatformCommand Mode
All platformsConfiguration mode

syslog-server

syslog-server <1²-address> no...

Description

This command configures Syslog server for a W-IAP.

Syntax

Parameter DescriptionRange Default
syslog-serverSpecifies the IP address to configure the syslog server.--
noRemoves the configuration. --

Usage Guidelines

Use this command to configure syslog server for a W-IAP.

Example

The following command configures the IP address of the syslog server for a W-IAP.

(Instant AP)(config)# syslog-server 192.0.2.9 (Instant AP)(config)# end (Instant AP)# commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

telnet-server

telnet-server

no...

Description

This command enables Telnet access to Instant command line interface (CLI).

Syntax

Command/Parameter Description
Telnet-serverEnables Telnet access to the Instant CLI.
no...Removes the configuration

Usage Guidelines

Use this command to enable Telnet access to the Instant CLI.

Example

The following example enables Telnet access to the W-IAP:

(Instant AP) (config)# telnet-server

(Instant AP) (config)# end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1- This command is introduced.4.0

Command Information

terminal-access

terminal-access

no...

Description

This command enables Secure Shell (SSH) access to Instant CLI.

Syntax

Command/Parameter Description
terminal-accessEnables terminal access to the Instant CLI.
no...Removes the configuration.

Usage Guidelines

Use this command to enable SSH access to the Instant CLI.

Example

The following example enables terminal access to the W-IAP:

(Instant AP) (config)# terminal-access

(Instant AP) (config)# end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

tftp-dump-server

tftp-dump-server no...

Description

This command configures TFTP dump server for a W-IAP.

Syntax

Parameter Description
Lftp-dump-server <IP-address>Configures TFTP dump server IP address.
no...Removes the configuration

Usage Guidelines

Use this command to configure TFTP dump server for storing core dump files.

Example

The following example configures a TFTP dump server:

(Instant AP)(config)# tftp-dump-server (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

traceroute

traceroute

Description

This command traces the route to the specified IP address.

Syntax

Parameter Description
Displays the destination IP address.

Usage Guidelines

Use this command to identify points of failure in your network.

Example

The following example shows the output of traceroute command:

#traceroute 10.1.2.3

Command History

Version Description
Dell Networking W-SeriesInstant 6.2.1.0-3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode.

upgrade-image

upgrade-Image

upgrade-image2

upgrade-image2-no-reboot

Description

These commands allow you to upgrade a W-IAP to use a new image file.

Syntax

Parameter Description
upgrade-imageUpgrades the W-IAP to use a new image.
upgrade-image2Uploads an additional image file and upgrades the W-IAP to this image file when required.
upgrade-image2-ro-rebootUploads an additional image file and upgrades the W-IAP to the new image without rebooting the W-IAPs.
Allows you to specify the FTP, TFTP, or HTTP URL.

Usage Guidelines

Use these commands to upgrade W-IAP to use an image file uploaded from the FTP or TFTP server, or an HTTP URL. Before uploading an image file, ensure that you have the appropriate image file for your The following examples describe the image class for different W-IAP models:

  • For W-IAP134/135—DellInstant_Cassiopeia_
  • For W-IAP108/109, W-IAP103, and W-IAP114/115—DellInstant_Pegasus_
  • For W-IAP155/155P—DellInstant_Aries_
  • For W-IAP224/225, and W-IAP274/275—DellInstant_Centaurus_
  • For all other W-IAPs—DellInstant_Orion

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode.

uplink

enforce |ethernet cellular |wifi | none|
failover-internet
failover-internet-check-timeout
failover-internet-pkt-lost-cnt <count>
failover-internet-pkt-send-freq <frequency>
failover-vpn-timeout <seconds>
preemption
uplink-priority {cellular <priority> | ethernet <priority>| | port <Interface-number>
<priority> | wifi | <priority>)
no... 

Description

This command configures uplink connections.

Syntax

Parameter Description Range Default
uplinkEnables the uplink configuration sub-mode.--
enforce {ethernet|cellular|wifi | none}Enforces the specified uplink connection.You can specify the following types of uplink: · ethernet · cellular · wifi · noneethemet, cellular, wifi, noneNone
failover-internetEnables uplink switchover based on the availability of the-Disabled
failover-internet-pkt-lost-cntConfigures the number of packets that are to be lost when verifying the uplink availability using the Internet.1-1000 10
failover-internet-pkt-send-freqConfigures the frequency in seconds, at which the ICMP packets are sent to verify the uplink availability using the Internet.1-3600 30
failover-vpn-timeoutConfigures a duration to wait for - 180 an uplink switch based on VPN status.seconds
preemptionEnables pre-emption when no uplinks are enforced. When enabled, if the current uplink is active, the W-IAP periodically tries to use a higher priority uplink, and switches to a higher priority uplink even if the current uplink is active.- Disabled
uplink-priority (cellular|etherret| post|wifi)Sets an uplink priority.You can specify the type of uplink to configure and assign a priority. If Ethernet uplink needs to be prioritized, specify the interface port number.Integer Eth0
no...Removes the configuration. --

Usage Guidelines

When uplink priority is configured, the W-IAP tries to get a higher priority link every ten minutes even if current uplink is up. This does not affect the current uplink connection. If the higher uplink is usable, the switches over to that uplink. Preemption is enabled by default.

The default priority for uplink switchover is Ethernet and then 3G/4G. The W-IAP has the ability to switch lower priority uplink if the current uplink is down.

Instant supports switching uplinks based on the VPN status when deploying mixed uplinks (Eth0, 3G/4G,W) When VPN is used with multiple backhaul options, the W-IAP switches to an uplink connection based on VPN connection status instead of only using Eth0, the physical backhaul link.

The following configuration conditions apply to uplink switching:

  • If the current uplink is Eth0 and the VPN connection is down, the W-IAP will retry to connect to VPN. This retry time depends on the configuration of primary/backup and fast-failover for VPN. If all the possibil fail, then the W-IAP waits for a vpn-failover-timeout and then a different u plink (3G,Wi-Fi) is selected.
  • If the current uplink is 3G or Wi-Fi, and Eth0 has a physical link, the W-IAP periodically suspends user traffic to try and connect to the VPN on the Eth0. If the W-IAP succeeds, then the W-IAP switches to Eth0. IAP does not succeed, then the W-IAP restores the VPN connection to the current uplink.

When the uplink switchover based on Internet availability is enabled, the W-IAP continuously sends ICMP packets to some well-known Internet servers. If the request is timed out due to a bad uplink connection uplink interface failure, and the public Internet is not reachable from the current uplink, the W-IAP switch different connection.

Example

The following example configures uplink priority:

(Instant AP)(uplink)# uplink-priority ethernet port 0 1
(Instant AP)(uplink)# end
(Instant AP)# commit apply 

uplink-vlar

Description

This command configures uplink VLAN for management traffic on a W-IAP.

Syntax

Parameter Description Range Default
Assigns a VLAN ID for the uplink management traffic0-4093 0

Usage Guidelines

Use this command to configure the uplink VLAN configuration details for management traffic. When configured, the uplink management VLAN allows you to tag management traffic and connect multiple W-I clusters (Virtual Controllers) to the same port on an upstream switch (for example, W-AirWave server).

Example

The following example configures uplink management VLAN:

(Instant AP)# uplink-v_ar 0

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

user

user [] [portal radius] no...

Description

This command creates users for a W-IAP.

Syntax

Parameter Description
userCreates a username for the W-IAP user.
Assigns a password for the W-IAP user
portalConfigures a guest user.
radiusConfigures an employee user
no...Removes the configuration

Usage Guidelines

The Instant user database consists of a list of guest and employee users. Addition of a user involves sp: a login credentials for a user. The login credentials for these users are provided outside the Instant syst

A guest user can be a visitor who is temporarily using the enterprise network to access the Internet. How you do not want to allow access to the internal network and the Intranet, you can segregate the guest from the enterprise traffic by creating a guest WLAN and specifying the required authentication, encryptio and access rules.

An employee user is the employee who is using the enterprise network for official tasks. You can create Employee WLANs, specify the required authentication, encryption and access rules and allow the employee use the enterprise network.

The user database is also used when a W-IAP is configured as an internal RADIUS server. The local user

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

version

version

Description

This command configures a version number for the W-IAP.

Syntax

Parameter Description
versionAssigns a version number for the W-IAP.

Usage Guidelines

Use this command to configure a version number for the W-IAP.

Example

The following example configures a version number for the W-IAP.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0.3.3This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

virtual-controller-country

virtual-controller-country no...

Description

This command configures the location of the W-IAP.

Syntax

Parameter Description
virtual-controller-countrySpecifies the country of operation for a W-IAP.
no...Removes the configuration.

Usage Guidelines

Use this command to configure the country code for W-IAPs.

Example

The following example configures a country code for W-IAP:

(Instant AP)(config)# virtual-controller-country US (Instant AP)(config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

virtual-controller-ip

virtual-controller-ip

Description

This command configures an IP address for the Virtual Controller.

Syntax

Parameter Description
virtual-controller-ipAssigns an IP address for the Virtual Controller.

Usage Guidelines

Use this command to configure an IP address for the Virtual Controller.

Example

The following example assigns an IP address for the Virtual Controller:

(Instant AP) (config) virtual-controller-ip 192.0.2.2

(Instant AP) (config) | end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

virtual-controller-key

virtual-controller-key

Description

This command configures a unique name for the Virtual Controller.

Syntax

Parameter Description
virtual-controller-keyDefines a unique name for the Virtual Controller.

Usage Guidelines

Use this command to assign a name for the Virtual Controller.

Example

(Instant AP) {config}# virtual-controller-key (Instant AP) {config}# virtual-controller-p (Instant AP) {config}# virtual-controller-vlan (Instant AP) {config}# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

WJAP Platform Command Mode

virtual-controller-vlan

virtual-controller-vian no...

Description

This command configures a VLAN for the Virtual Controller.

Syntax

Parameter Description
virtual-controller-vlanAssociates a VLAN ID with the Virtual Controller.
Configures a subnet mask for the Virtual Controller.
Configures a gateway for the Virtual Controller.
no...Removes the configuration.

Usage Guidelines

Use this command to configure VLAN, Netmask, and Gateway for the Virtual Controller.

Example

The following example configures VLAN for the Virtual Controller:

(Instant AP) (config)# virtual-controller-vlan (Instant AP) (config)# end (Instant AP)# commit apply

Command History

vpn backup

vpr backup no...

Description

This command configures a secondary or backup VPN server for VPN connections.

Syntax

Parameter Description
vpn backupConfigures a fully qualified domain name for the secondary VPN or IP endpoint.
nowRemoves the configuration.

Usage Guidelines

Use this command to configure a backup VPN server. When both primary and secondary VPN servers are configured, the W-IAP can switch to the available VPN connection when a the primary VPN server is not available.

Example

The following example configures a backup server for VPN connections:

(Instant AP) (config)# vpn backup (Instant AP) (config) # end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.

vpn fast-failover

vpr fast-fa'lover no...

Description

This command configures fast failover feature for VPN connections.

Syntax

Parameter Description
vpn fast-failoverEnables fast failover feature for VPN connections.
no.Removes the configuration.

Usage Guidelines

Use this command to configure fast fallover feature for VPN connections. Enabling the fast fallover feature allows the W-IAP to create a backup VPN tunnel to the controller along with the primary tunnel, and ma both the primary and backup tunnels separately. If the primary tunnel fails, the W-IAP can switch the data stream to the backup tunnel. This reduces the total fallover time to less than one minute.

Example

The following example configures the VPN fast fallover feature:

(Instant AP)(config)# fast-failover

(Instant AP) (config) end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.

vpn gre-outside

vpr gre-outside no...

Description

This command enables automatic configuration of the GRE tunnel between the W-IAP and the controller.

Usage Guidelines

Use this command to enable automatic configuration of the GRE tunnel between the controller to provide connectivity.

Example

The following example configures an automatic GRE tunnel:

(Instant AP) {config} # vpn gre-outside (Instant AP) {config} # end (Instant AP) # commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1- This command is introduced.4.0

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

vpn hold-time

vpr hold-time no...

Description

This command configures the time interval after which the W-IAP can switch over to the primary host w preemption is enabled.

Syntax

Parameter Description
vpn hold-timeConfigures a time period in seconds after which the W-IAPs can switch primary VPN server.
10mRemoves the configuration.

Usage Guidelines

Use this command to configure a period to hold on switching to the primary server when pre-emption is enabled.

Example

The following example configures a hold-time to switch to the primary host server:

(Instant AP) (config)# hold-time (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.

vpn ikepsk

vpn 'kepak username password no...

Description

This command configures user credentials for the VPN connection.

Syntax

Parameter Description
vpn ikepokSpecifies an IKE authentication for VPN connection using pre-shared ke
usernameDefines a username that enables access to VPN.
passwordDefines a password that enables access to VPN.
no.Removes the configuration.

Usage Guidelines

Use this command to configure user credentials to establish VPN connection.

Example

The following commands enable user access to VPN connection.

(Instant AF) (config)# vpn lkopsk secretKey username: User1 password password123 (Instant AP) (config)# end (Instant AP)# commit apply

Command History

Version Description

vpn monitor-pkt-lost-cnt

vpr monitor-pkt-lost-cnt no...

Description

This command configures the number of lost packets after which the W-IAP can determine that the VPN connection is not available.

Parameter Description Range Default
vpn monitor-pkt-lost-satDefines the number of lost packets for VPN connection test or monitoring by the W-IAP.-2
no...Removes the configuration. - -

Usage Guidelines

Use this command to configure a count for the lost packets, so that the W-IAPs can determine if the VF connection is unavailable.

Example

The following example configures a count for the lost packets:

(Instant AP)(config)# vpn monitor-pkt-lesl-cnt

(Instant AP) (config)# end

(Instant AP)# commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

vpn monitor-pkt-send-freq

vpr monitor-pkt-send-freq no...

Description

This command configures the frequency at which the W-IAP can verify if the active VPN connection is av

Syntax

Parameter Description Range Default
vpn monitor-pkt-send-freqConfigures a frequency interval in seconds at which the test packets are sent.-5
no..Removes the VPN monitoring frequency configuration.--

Usage Guidelines

Use this command to monitor VPN connections and verify its availability at regular intervals.

Example

The following example configures the VPN monitoring frequency:

(Instant AP) (config) vpr monitor-pkt-send-freq 10

(Instant AP) (config)# end

(Irritant AP) || commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.2.1.0This command is introduced.

vpn preemption

vpr preemption

no...

Description

This command enables pre-emption to allow the VPN tunnel to switch back to the primary host after a

Syntax

Parameter Description
vpn preemptionEnables pre-emption to allow the VPN tunnel to switch to the primary server when it becomes available after a failover.
no...Removes the VPN pre-emption configuration.

Usage Guidelines

Use this command to enable pre-emption when both primary and secondary servers are configured and failover feature is enabled.

Example

The following example enables VPN pre-emption.

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

vpn primary

vpr primary no...

Description

This command configures a primary Virtual Private Networks (VPN) server for VPN connections.

Syntax

Parameter DescriptionRange Default
vpn primaryConfigures a fully qualified domain name for the main VPN or IPSec endpoint.-
no...Removes the VPN server configuration.--

Usage Guidelines

Use this command to configure a primary VPN server for IAP-VPN connections. When a secondary VPN is configured along with the primary server, you can enable the fast failover feature that allows the W-IA create a backup VPN tunnel to the controller along with the primary tunnel, and maintain both the prim backup tunnels separately.

Example

The following example configures a primary VPN server:

(Instant AF)(config)# vpn primary (Instant AP)(config)# end (Instant AP)# commit apply

Command History

VersionDescription

vpn reconnect-time-on-failover

vpr reconnect-time-on-failover

Description

This command defines a period after which the VPN connection can be reestablished when the primary tunnel falls.

Syntax

Parameter Description
vpn reconnect-time-on-failoverConfigures a time period in minutes after which the VPN is reconnected when the primary VPN tunnel fails.

Usage Guidelines

Use this command to configure a time period for reestablishing VPN connections. When configured, the reconnects the user session when the interval specified for this command expires.

Example

The following example configures a VPN reconnection duration:

(Instant AP)(config)# vpn reconnect-time-on-fail_over 20

(Irratant AP) (config) | end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.4

vpn reconnect-user-on-failover

vpr reconnect-user-on-failover no...

Description

This command enables the users to reconnect to the VPN when the primary VPN tunnel fails.

Syntax

Parameter Description
vpn reconnect-user-on-failoverEnables users to reconnect to the VPN during a VPN failover.
no...Removes the configuration.

Usage Guidelines

Use this command to allow the users to reconnect to the VPN after a VPN failover. When enabled, the reconnects the user during a VPN failover.

Example

The following example enables users to reconnect to VPN after a failover:

(Instant AP) (config) | vpn reconnect-user-on-fai'over

(Instant AP) (config)# end

(Istant AP) || commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.4

wifi0-mode

wif10-mode

Description

This command configures a W-IAP to function in the access, monitor, or spectrum monitor mode.

Syntax

Parameter DescriptionRange Default
Configures the W-IAP to function in any of the following modes:Access— In Access mode, the W-IAP serves clients, while also monitoring for rogue APs In the background.Monitor—in Monitor mode, the AP acts as a dedicated monitor, scanning all channels for rogue W-IAPs and clients.Spectrum Monitor— In Spectrum Monitor mode, the W-IAP functions as a dedicated full-spectrum RF monitor, scanning all channels to detect interference, whether from neighboring APs or from non-WIFI devices such as microwaves and cordless phones.NOTE: In Monitor and Spectrum Monitor modes, the W-IAP does not provide access services to clients.access, monitor, spectrum-monitorasaccess

Usage Guidelines

Use this command to configure a Wi-Fi interface of a W-IAP to function in the access, monitor, or spectr monitor mode.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode.

wifi1-mode

wifil-mode

Description

This command configures a W-IAP to function in the access, monitor, or spectrum monitor mode.

Syntax

Parameter DescriptionRange Default
Configures the W-IAP to function in any of the following modes:Access— In Access mode, the W-IAP serves clients, while also monitoring for rogue APs In the background.Monitor—In Monitor mode, the AP acts as a dedicated monitor, scanning all channels for rogue W-IAPs and clients.Spectrum Monitor— In Spectrum Monitor mode, the W-IAP functions as a dedicated full-spectrum RF monitor, scanning all channels to detect interference, whether from neighboring APs or from non-WiFi devices such as microwaves and cordless phones.NOTE: In Monitor and Spectrum Monitor modes, the W-IAP does not provide access services to clients.eaccess, monitor, spectrum-monitoraccess

Usage Guidelines

Use this command to configure a Wi-Fi interface of a W-IAP to function in the access, monitor, or spectr monitor mode.

Command Information

W-IAP Platform Command Mode
All platformsPrivileged EXEC mode.

wired-port-profile

wired-port-profile <port>
    access-rule-name <name>
    allowed-vlan <vlan>
    auth-server <name>
    captive-portal {<type>[exclude-uplink <types>]|external[exclude-uplink <types>| profile
    <name>[exclude-uplink <types>]};
    content-filtering
    dot'x
    duplex <duplex>
    12-auth-failthrough
    mac-authentication
    native-vlan <vlan>
    pce
    radius-reauth-interval <minutes>
    server-load-balancing
    set-role <attribute>{{equals|not-equal|starts-with|ends-with|contains} <operator>
    <role> value-of}
    set-role-mac-auth <MAC-authentication>
    set-role-machine-auth <machine-only> <user-only>
    set-role-pre-auth <role>
    set-role-unrestricted
    set-vlan <attribute>{equals|not-equals|starts-with|ends-with|contains} <operator> <VLAN-TD> value-of}
    shutdown
    spanning-tree
    speed <speed>
    switchport-mode <mode>
    type <type>
    uplink-enable
    pc... 

Description

This command configures a wired port profile for wired W-IAP clients.

Syntax

Command/Parameter Description Range Default

Command/Parameter Description Range Default
captive-portal[exclude-uplink] |external[exclude-uplink| profile [exclude-uplink]]}Enables internal or external captive portal authentication for the wired profile users.You can also disable redirection to the captive portal based on the type of current uplink.If the external captive profiles are created, you can specify the profile name by using the external and profile keywords and associated parameters.--
content-filteringEnables content filtering - -
dot1xEnables 802.11X authentication for the Wired profile users- Disabled
duplexAssigns a value for duplexing client traffic based on the capabilities of the client, the AP, and the cable. You can specify full, half, or auto.full, half, auto auto
12-auth-failthroughAllows the clients to use 802.1X authentication when MAC authentication fails.- Disabled
mac-authenticationEnables MAC authentication- Disabled
native-vlanends-with| contains|operator>| value-of:Configures a value for Native VLAN. A VLAN that does not have a VLAN ID tag in the frames isYou can specify any of the following conditions:contains—The rule is applied only if the attribute value contains the specified string.ends-with—The rule is applied only if the attribute value ends with the specified string.equals—The rule is applied only if the attribute value is equal to the specified string.not-equals—The rule is applied only if the attribute value is not equal to the specified string.starts-with—The rule is applied only if the attribute value begins with the specified string.value-of - This rule sets the user role to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.1-4093-
set-role-machine-authset-vlan{equals|not-equals| starts-with|ends-with| contains}|value-of}Configures a machine authentication rule.You can assign different rights to clients based on whether their hardware device supports machine authentication.Assigns a VLAN to the clients. The-first rule that matches theconfigured condition is applied.You can specify any of the following conditions:contains—The rule is applied only if the attribute value contains the specified string.ends-with—The rule is applied only if the attribute value ends with the specified string.equals—The rule is applied only if the attribute value is equal to the specified string.not-equals—The rule is applied only if the attribute value is not equal to the specified string.starts-with—The rule is applied only if the attribute value begins with the specified string.value-of - This rule sets the VLAN to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.---
shutdownShuts down the admin status port up, downupup
spanning-treeEnables Spanning Tree Protocol on the wired profile.wired profile.You can specify any of the following modes:Access—Use this mode to allow the port to carry a single VLAN specified as the native VLAN.Trunk—Use this mode to allow the port to carry packets for multiple VLANs specified as allowed VLANs.--
typeDefines the primary usage of the wired profile.employee, guest employee
up_link-enableEnables uplink for the wired profile--
no..Removes any existing configuration--

Usage Guidelines

Use this command to create a wired profile for employee and guest users. The Ethernet ports allow their devices such as VoIP phones or printers (which support only wired connections) to connect to the wirele network. You can also configure an Access Control List (ACL) for additional security on the Ethernet down

Example

The following example configures a wired profile for an employee network:

(Instant AP) (config) | wired-port-profile employeeired

(Instant AP) (wired ap profile"employeeWired1") # type employee

(Instant AF) (wired ap profile"employee wired") 1 speed auto

(Instant AP) (wired ap profile"employeeWired1") duplex auto

(Instan. AF) (wired ap profile"enp_oyceWired1") # no shutdown

(Instant AP) (wired ap profile"quest/ired1") | speed auto
(Instant AP) (wired ap profile"guestWired1")# duplex auto
(Instant AP) (wired ap profile"guestWired1")# no shutdown
(Instant AP) (wired ap profile"guestNiredl")# poe
(Instant AP) (wired ap profile"guestWired1")# uplink-enable
(Instant AP) (wired ap profile"questWired1") | content-filtering
(Instant AP)(wired ap profile"guestMired1")# switchport-mode trunk
(Instant AP) (wired ap profile"questWired1") | allowed-vlan 200,201,400
(Instant AP)(wired ap profile"guestWired1")# native-vlan 1
(Instant AF) (wired ap profile"guestWired1")# captive Postal external exclude-uplink Ethernet
(Instant AP) (wired ap profile"questWired1")# mac-authentication
(Instant AP) (wired ap profile"questWirodl")# auth-server server1
(Instant AP) (wired ap profile"questWired1") server-load-balancing
(Instant AP) (wired ap profile"guestWired1")# access-rule-name wiredACD
(Instant AP) (wired ap profile"guestwired") # set-role Group-Name contains wired wired-instant
(Instant AP) (wired ap profile"guestMired1")# set-vlan ap-name equals test 200
(Instant AP) (wired ap profile"guestWired1") ∥ end
(Instant AP) || commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.3.1.1-4.0This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.4This command is modified.
Dell Networking W-Series Instant 6.2.1.0-3.3This command is introduced.

Command Information

bandwidth-limit |downstream | upstream | peruser | downstream | upstream

;}

C

captive-portal (external [profile ] | internal)

index

rule [ [permit|deny|src-nat|det-nat

| | } || app |permit| deny|| appcategory | webcategory

[permit|deny]| webreputation []

vlan

P.C...

Description

This command configures access rules for WLAN SSID or wired profile.

Syntax

Command/Parameter Description Range Default
wlan access-ruleSpecifies the profile name for which the access rule is configured.--
bandwidth-limit (downstream| upstreamperuser (downstream| upstream)calesAssign bandwidth contracts to user roles.The administrator can assign a bandwidth contract configured in Kbps to upstream (client to the W-IAP) or downstream (W-IAP to clients) traffic for a user role.If you want to assign a bandwidth contract specific for each user, you can run the command with peruser parameter.The bandwidth contract will not beCreates an access rule for CALEA integration.1-65535 Kbps ---
captive-portal (external [profile] |internal)Configures a captive-portal role, to assign to the users role after a successful authentication.--
Creates an index entry for access rules.--
ruleCreates an access rule.You can create up to 128 access control entries in an ACL for a user role. However, it is recommended to delete any existing configuration and apply changes at regular intervals.--
Allows you to specify the destination address.IP--
Specifies the subnet mask for the destination IP address.--
match—Indicates if the rule specific to the destination IP address and subnet mask matches the value specified for protocol.Invert— Indicates if the rule allows or denies traffic with an exception to the specified destination IP address and subnet mask.match invert-
src-natAllows the W-IAP to perform source NAT on packets. When configured, the source IP changes to the outgoing interface IP address (implied NAT pool) or from the pool configured (manual NAT pool).
Specifies the destination NAT IP address for the specified packets when dst-nat action is configured.
Specifies the destination NAT port for the specified packets when dst-nat action is configured.
appSpecifies a rule to allow or deny access to a specific type of application.To view the list of applications, run the show dpi app all command.
appcategorySpecifies a rule to allow or deny access to a specific category of application.To view the list of application categories, run the show dpi appcategory all command.
webcategorySpecifies a rule to allow or deny access to websites based on website category.To view the list of website categories, run the show dpi webcategory all command.
webreputationSpecifies a rule to allow or deny access to websites based on security rules.I trustworthy-sites
Command/Parameter Description Range Default
following options:Log—Creates a log entry whenthis rule is triggered.Blacklist—Blacklists the clientwhen this rule is triggered.Classify-media—Performs apacket inspection on all non-NATtraffic and marks the criticaltraffic.Disable-scanning—Disables ARMscanning when this rule istriggered.DSCP tag—Specifies a DSCP valueto prioritize traffic when this rule istriggered.802.1p priority—Sets an 802.1ppriority.Application throttling: To set abandwidth limit based onapplication, application category,web category or websitereputation, you can configureapplication throttling by using thethrottle-downstreamandthrottle-upoptions. For example,you can limit the bandwidth ratefor video streaming applicationsuch as Youtube or Netflix, or set alow bandwidth for suspiciouswebsites.

(Instant AP) (Access Rule "WirelessRule") | rule 192.0.2.2 255.255.255.0 192.0.2.7 255.255.255.0 match Top 21 21 deny

(Instant AP) (Access Rule "WirelessRule") rule 192.0.2.2 255.255.255.0 192.0.2.7 255.255.255.0 match udp 21 21 deny

(Instant AP) (Access Rule "WirelessRue") rule any any match app youtube permit throttle downstream 256 throttle-up 256

(Instant AP) (Access Rule "wirelessRule") | rule any any match appcategory webmail permit throttle-downstream 256 throttle-up 256

(Instant: AP) (Access Rule "WirelessRule") rule any any match webcategory gambling deny (Instant: AP) (Access Rule "WirelessRule") rule any any match webcategory training-and-tools permit

(Instan. AF) (Access Rule "WirelessRule") # rule any any match webreputation high-risk-sites deny

(Instant AP) (Access Rule "WirelessRule")# end

(Irratant AP) || commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2- This command is modified.4.1
Dell Networking W-Series Instant 6.3.1.1- This command is modified.4.0
Dell Networking W-Series Instant 6.2.1.0- This command is modified.3.4
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode

wlan auth-server

xlan auth-server <auth profile name>
accport <accounting-port>
cppm-rfc3576-only
cppm-rfc3576-port <rfc3576-port>
deadline <time>
dvp-ip <IP-address> <mask> vlan <vlan> gateway <gateway-IP-address>
ip <IP-address>
<key <key>
nas-id <NAS-ID>
nas-ip <IP-address>
port <port-name>
rctry-count <count>
rfc3576
timeout <second>
FC... 

Description

This command configures an external RADIUS and CPPM server for user authentication.

Syntax

Command/Parameter DescriptionRange Default
wlan auth-serverConfigures the external RADIUS server authentication profile.--
acctportConfigures the accounting port number used for sending accounting records to the RADIUS server.-1813
cppm-rfc3576-onlyConfigures a CPPM server used for AirGroup CoA (Change of Authorization) with RFC3576 only.The CPPM server acts as a RADIUS server and asynchronously provides--
drp-ipvlangatewayConfigures the IP address, net mask and VLAN, which will be used as source address and VLAN for RADIUS packets.NOTE: Before configuring DRP IP address, ensure that dynamic RADIUS proxy is enabled, and a static Virtual Controller IP is configured.--
ipConfigures the IP address of the RADIUS server--
keyConfigures a shared key communicating with the external RADIUS server.--
nas-idConfigures Network Attached Storage (NAS) identifier strings for RADIUS attribute 32, which is sent with RADIUS requests to the RADIUS server.--
nas-ipConfigures the Virtual Controller IP address as the NAS address which is sent in data packets.--
portConfigures the authorization port number of the external RADIUS server.-1812
retry-countConfigures the maximum number of authentication requests that can be sent to the server group.Retry count), before the user gets disconnected. For example, if the Timeout is 5 seconds, Retry counter is 3, user is disconnected after 20 seconds.1-5 3
no...Removes the configuration. --

Usage Guidelines

Use this command to configure an external RADIUS server and a CPPM server as a RADIUS server for A Change of Authorization (CoA) requests.

Example

The following example configures the external RADIUS server parameters:

(Instant AP) (config) | wlan auth-server RADIUS
(Instant AP) (Auth Server )# ip 192.0.0.5
(Instant AP) (Auth Server ) # key SecretKey
(Instant AP) (Auth Server )# port 1812
(Instant AP) (Auth Server )# acctport 1813
(Instant AP) (Auth Server ) || no nas-id
(Instant AP) (Auth Server )# no nas-ip
(Instant AP) (Auth Server ) | drp-to 192.0.2.11 255.255.255.255 vlan 200 gateway
192.0.2.25
(Iratant AP) (Auth Server ) || timeout 10
(Instant AP) (Auth Server )# retry-count 3
(Instant AP) (Auth Server ) | end
(Instant AP) # commit apply

Command History

VersionDescription

wlan captive-portal

xian captive-portal

authenticated

background-color

banner-color

banner-text

custom-logo

decoded-texts < decoded-text>

red*rect-url

terms-of-use

use-policy

r o...

Description

This command customizes the appearance of the internal captive portal splash page of the guest users.

Syntax

Command/ParameterDescription Range Default
wlan captive-portalDisplays the sub-mode for configuring internal captive portal splash page.--
authenticatedConfigures the authentication text. The authenticated text is used for indicating that the authentication mode is enabled for the internal Captive Portal users.When the authentication mode is enabled, the W-IAP displays a splash page that requires the guest users to enter their credentials. The users allowed to access the Internet only if they complete the authentication successfully.NOTE: By default, after entering the requested info at the splash page, the users are redirected to the URL that was originally requested. When a URL is configured for redirection, it overrides the user's original request and redirects them to URL configured for redirection.--
terms-of-useDefines the terms and conditions that the user must be aware of.Text string This network is not secure, and use is at your own risk
use-policyConfigures usage policy text for splash page.Text string Please read terms and conditions before using Guest Network
no...Removes the configuration. --

Usage Guidelines

Use this command to customize the appearance of internal captive portal splash page for the guest user

Example

The following example configures the contents of the Internal captive portal splash page:

(Instant AP) (config)# wlan captive-portal

(Instant AP) (Captive Portal) ) authenticated

(Instant AP) (Captive Portal) # background-color 13421772

(Instant AP) (Captive Portal) banner-color 16750848

(Instant AP)(Captive Portal)] banner-text "Welcome to Guest Network"

(Instant AP) (Captive Portal) # no decoded-texts

例 2.1 12 ① 12 ② 12 ③ 12 ④ 12 ⑤ 12

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and captive portal sub-mode.

wlan external-captive-portal

xian external-captive-portal [profile-name]

auth-text

auto-whitelist-disable

https

port

redirect-url

server

server-fall-through

url

P.C.

Description

This command configures profiles for external captive portal.

Syntax

Command/Parameter Description Range Default
wlan external-captive-portal [profile-name]Creates an external captive portal profile. You can create multiple external captive portal profiles and apply to an SSID or a wired profile.--
auth-textConfigures the authentication text to be returned by the external server.The authentication text command configuration is required only for the External - Authentication Text splash mode.--
auto-whitelist-disableDisables automatic whitelisting of URLs. - Enabled
httpsEnables HTTPS for client connections. - -
PortConfigures the port to use forportal server.-80
server-fail-throughAllows the guest clients to access the Internet when the external captive portal server is not available.- Disabled
no...Removes the configuration. --

Usage Guidelines

Use this command to configure external captive portal profiles for guest users. When the captive portal is applied to an SSID or a wired profile, the users connecting to the SSID or wired network are assigned with the captive portal rule. You can create up to 8 external captive portal profiles.

Example

The following example configures external captive portal splash page:

(Instant AP)(config)# wlan external-captive-portal AuthText1
(Instant AP) (External Captive Portal "AuthText1")# auth-text authenticated
(Instant AF) (External Captive Portal "AuthTex1")# port 80
(Instant AP) (External Captive Portal "AuthText1") | redirect-or http://www.example1.com
(Instant AF) (External Captive Portal "AuthTex1")# server CPServer1
(Instant AP) (External Captive Portal "AuthText1") | url "/example.php"
(Instant AP) (External Captive Portal "AuthText1")‡ server-fail-through
(Instant AF) (External Captive Portal "AuthText1")# no auto-whitelist-disable
(Instant AP) (External Captive Portal "AuthText1") # end
(Instant AP)# commit apply

Command History

VersionDescription
Dell Networking W-Series Instant 6.3.1.1-4.0- This command is modified.

wlan Idap-server

xian 1dap-server

admin-on

admin-password

base-dn

deactime

filter

key-attribute

port

timeout

retry-count

NO...

Description

This command configures a Lightweight Directory Access Protocol (LDAP) server for user authentication or Virtual Controller.

Syntax

Command/Parameter Description Range Default
wlan ldap-serverConfigures an LDAP authentication server.--
admin-drConfigures a distinguished name for the administrator with read and search privileges across all the entries in the LDAP database.The user need not have write privileges, but the user must be able to search the database, and read attributes of other users in the database.--
filterConfigures the filter to apply when searching for a user in the LDAP database.strings (objectclass=')
key-attributeConfigures the attribute to use as key when searching for the LDAP server.For Active Directory, the value is sAMAccountNamea--
ipConfigures the IP address of the LDAP server.--
portConfigures the authorization port number of the LDAP server.-389
timeoutConfigures a timeout value for LDAP requests from the clients1-30 seconds5
entry-countDefines the number of times that the clients can attempt to connect to the server.the-5 3
no...Removes the configuration.--

Usage Guidelines

Use this command to configure an LDAP server as an external authentication server. The LDAP service is based on a client-server model. The W-IAP client requests for an LDAP session after connecting to the LDAP server and server sends its responses.

Example

The following example configures an LDAP server:

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and LDAP server sub-mode.

wlan ssid-profile

xian acid-profile <ssid profile>
a-max-tx-rate <rate>
a-min-tx-rate <rate>
air-time-limit <limit>
auth-pkt-mac-format (delimiter|upper-case)
auth-server <name>
auth-survivability
bandwidth-limit <init>
blacklist
broadcast-filter <type>
captive-portal {<type>'exclude-uplink <types>| external[exclude-uplink <types>| profile
<name>[exclude-uplink <types>]};
content-filtering
deny-inter-user-bridging
deny-local-routing
disable
dmo-channel-utilization-threshold'd <threshold'd>
dotilk
dotllr
dotilly
dtim-period <value>
dynamic-multicast-optimization
enable
enforce-shcp
essid <essid>
external-server
q-m'n-tx-rate <rate>
g-max-tx-rate <rate>
hide-ssid
hotspot-profile <name>
inactivity-timeout <interval>
index <idx>
key-duration <duration>
12-auth-failthrough
leap-use-session-key
local-probe-rec-thresh <threshold'd>
mac-authentication
mac-authentication-delimiter <delim>
mac-authentication-upper-case 
termination
type [employee|voice|guest]
vlan <vlan>
wep-key <wep-key>
wispr
wrr=background-dscp <dscp>
wrr=background-share <share>
wrr=best-effort-dscp <dscp>
wrr=best-effort-share <share>
wrr=video-dscp <dscp>
wrr=video-share <share>
wrr=video-dscp <dscp>
wrr=voice-share <share>
work-withcut-uplink
wpa-passphrase <wpa-passphrase>
zone <zone>
NC... 

Description

This command configures a WLAN SSID profile.

Syntax

Command/Parameter DescriptionRange Default
wlan said-profileCreates a WLAN SSID profile.--
accounting-serverThis command enables accounting for the SSID on which it is configured.--
a-max-tx-rateConfigures the specify the maximum transmission rate for the 5 GHz band.6-54 Mbps 54Mbps
a-min-tx-rateConfigures the specify the minimum transmission rate forauthentication methods. And without the mac-authentication-delimiter and mac-authentication-upper-case configuration, it works on the username and password for MAC Authentication.6-54 Mbps 6Mbps
auth-serverConfigures an authentication server for the SSID users.--
auth-survivabilityEnables the authentication survivability feature.NOTE: The authentication survivability feature requires ClearPass Policy Manager 6.0.2 or later, and is applicable only when external servers such as RADIUS are configured for the SSID. When enabled, Instant authenticates the previously connected clients using EAP-PEAP authentication even when connectivity to ClearPass Policy Manager is temporarily lost. The Authentication survivability feature is not applicable when a RADIUS server is configured as an internal server.--
bandwidth-limitConfigures an aggregate amount of bandwidth that each radio is allowed to provide forARP—When set to ARP, the W-IAP drops all broadcast and multicast frames except ARP, DHCP, igmp-group queries, IPv6 neighbor discovery protocol, and additionally converts ARP frames to unicast.Disabled— When set to Disabled, the W-IAP routes all the broadcast and multicast frames to the wireless interfaces.1-65535 -
captive-portal([exclude-uplink])|external[exclude-uplink]|profile[exclude-uplink]])Configures captive portal authentication for the SSID. If the external captive profiles are created, you can specify the profile name by using the external and profile keywords and associated parameters.--
You can also exclude an uplink 3G,4G, type for the captive portal basedwifi,ethernet SSID profiles. When an uplink type is selected for the exclude-uplink option, redirection to the captive portal based on the type of specified uplink is disabled.-
content-filteringRoutes all DNS requests for the - Disabled non-corporate domains to OpenDNS on this network.connect to the Internet, but cannot communicate with each other, and the routing traffic between the clients is sent to the upstream device to make the forwarding decision.
disableDisables the SSID. By default all SSIDs are enabled.--
dmo-channel-utilization-thresholdSets a threshold for DMO channel utilization. W-IAP sends multicast traffic over the wireless link.1-100 percentage value90
dot11kEnables 802.11k roaming on the SSID profile.The 802.11k protocol enables W-IAPs and clients to dynamically measure the available radio resources.When 802.11k is enabled, W-IAPs and clients send neighbor reports, beacon reports, and link measurement reports to each other.--
dot11rEnables 802.11r on the SSID profile.802.11r or fast BSS transition (FT) is an IEEE standard that permits continuous connectivity across wireless--
dot1lyEnables 802.11v based BSS transition.--
dtim-periodConfigures the Delivery Traffic Indication Message (DTIM) interval for the SSID profile.The DTIM interval determines how often the W-IAP should deliver the buffered broadcast and multicast frames to associated clients in the powersaving mode.When configured, the client checks for buffered data on the W-IAP at the specified number of beacons. You can also configure a higher value for DTIM interval for power saving.1-10 beacons1
dynamic-multicast-optimizationAllows the W-IAP to convert multicast streams into unicast streams over the wireless link.Enabling Dynamic Multicast Optimization (DMO) enhances the quality and reliability of streaming video, while preserving the bandwidth available to the non-video clients.NOTE: When you enable DMO on multicast SSID profiles.- Disabled
q-min-tx-rateConfigures the specify the minimum transmission rate for the 2.4 GHz band.1-54 Mbps 1 Mbps
q-max-tx-rateConfigures the specify the maximum transmission rate for the 2.4 GHz band.1-54 Mbps 54 Mbps
hide-ssidHides the SSID. When enabled, the SSID will not be visible for the users.- Disabled
hotspot-profileAssociates a hotspot profile with the WLAN SSID profile.--
inactivity-timeoutConfigures a timeout value for the inactive client sessions.When a client session is inactive for the specified duration, the session expires and the clients are required to log in again.60-86400 seconds1000
indexAssigns an index value for the SSID.--
12-auth-failthroughAllows the clients to use 802.1X- Disabled authentication when MAC authentication fails.
leap-use-session-keyAllows the users to derive session keys for Lightweight Extensible Authentication Protocol (LEAP) authentication.the broadcast probe requests sent by clients to search for the available SSIDs and ignores the probe request if required.- Disabled
mac-authenticationEnables MAC authentication for clients that use this SSID profile.- Disabled
mac-authentication-delimiterAllows you to set a delimiter that can be used in the MAC address string for MAC authentication.You can specify colon or dash for delimiter. If the delimiter is not specified, the MAC address in the xxxxxxxxxxxx format is used. If you specify colon for the delimiter, the MAC addresses in the xx:xx:xx:xx:xx:xx format are used.colon or dash-
mac-authentication-upper-caseEnables the W-IAP to use uppercase letters in MAC address string for MAC authentication.--
max-authentication-failuresConfigures the maximum number of authentication failures to dynamically blacklist the users.The users who exceed the number of authenticationtraffic can be sent at the rate of 1-24 Mbps. The default rate for sending frames for 2.4 GHz is 1 Mbps and 5.0 GHz is 6 Mbps.--
okc-disableDisables opportunistic key caching (OKC).In the OKC based roaming, the AP stores one pairwise master key (PMK) per client, which is derived from last 802.1X authentication completed by the client in the network. The cached PMK is used when a client roams to a new W-IAP to allow faster roaming of clients.NOTE: If the wireless client (the 802.1X supplicant) does not support this feature, a complete 802.1X authentication is required whenever it roams to a new IAP. OKC is supported on WPA2-AES Enterprise network only.—W-
Configures the layer-2 authentication and encryption for this SSID to protect access and ensure the privacy of the data transmitted to and from the network.TKIP encryption using a pre-shared key.wpa-tkip, wpa2-aes—WPA with TKIP and WPA2 with AES encryption.wpa-psk-tkip, wpa2-psk-aes - WPS with TKIP and WPA2 with AES encryption using a pre-shared key.static-wep—WEP with static keys.dynamic-wep—WEP with dynamic keys.opensystem, wpa2-aes, wpa2-psk-aes, wpa-tkip, wpa-psk-tkip, wpa-tkipopensystem
per-user-bandwidth-limitConfigures a bandwidth limit in Kbps for the SSID users.NOTE: The bandwidth contracts can also be applied per SSID user.1-65535 Kbps-
radius-accountingEnables accounting for the RADIUS server authentication.When enabled, the W-IAPs post accounting information to the Radius server at the specified accounting interval.- Disabled
radius-accounting-mode [user-association|user-authentication]Configures an accounting mode for the captive portal users.You can configure any of the- user-authentication
radius-interim-accounting-intervalConfigures an interval for posting accounting information as RADIUS INTERIM accounting records to the RADIUS server.When configured, the W-IAP sends interim-update messages with current user statistics to the RADIUS server at regular intervals.Any integer value in minutes-
radius-reauth-intervalAllows you to configure an interval after which the W-IAPs can redo the RADIUS transaction to reauthenticate clients.If the reauthentication interval is configured:On an SSID performing L2 authentication (MAC or 802.1X authentication):When reauthentication fails, the clients are disconnected. If the SSID is performing only MAC authentication and has a pre-authentication role assigned to the client, the client will get a post-authentication role only after a successful reauthentication. IfL3 authentication (captive portal authentication):When reauthentication succeeds, a pre-authentication role is assigned to the client that is in a post-authentication role. Due to this, the clients are required to go through captive portal to regain access.Any integer value in minutes-
rf-bandConfigures the radio frequency band on which this SSID will beGHz, all broadcast. You can select either 2.4GHz, 5 GHz, or all to specify both bands.2.4 GHz, 5all
server-load-balancingEnables load balancing across two RADIUS servers if two authentication servers are configured for the SSID.- Enabled
set-role{{contains|ends-with|equals|matches-regular-expression|not-equals|starts-with}value-of}Assigns a user role to the clients. The first rule that matches the configured condition is applied.You can set any of the following conditions:• contains-The rule is applied only if the attribute value contains the specified string.- and with. The rule isvalue-of - This rule sets the user role to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.matches-regular-expression-The rule is applied only if the attribute value matches the regular expression pattern specified in Operand. This operator is available only if themac-address-and-dhcp-optionsattribute is selected in theAttributedrop-down.--
set-role-by-ssidConfigures a user role based on the type of SSID configured.--
set-role-mac-authConfigures a MAC authentication based user role.--
set-role-machine-authConfigures a machine authentication rule.You can assign different rights to clients based on whether their hardware device supports machine authentication.Machine authentication is only supported on Windows devices, so this can be used to--

Command/Parameter Description Range Default

value-of

following conditions:

  • contains—The rule is applied only if the attribute value contains the specified string.
  • ends-with—The rule is applied only if the attribute value ends with the specified string.
  • equals—The rule is applied only if the attribute value is equal to the specified string.
  • not-equals—The rule is applied only if the attribute value is not equal to the specified string.
  • starts-with—The rule is applied only if the attribute value begins with the specified string.
  • value-of - This rule sets the VLAN to the value of the attribute returned. To set a user role, the value of the attribute must already be configured on the W-IAP.
  • matches-regular-expression—The rule is applied only if the attribute value matches the regular
Command/Parameter DescriptionRange Default
terminating the authorization protocol on the W-IAP. By default, for 802.1X authorization, the client conducts an EAP exchange with the RADIUS server, and the W-IAP acts as a relay for this exchange. The W-IAP by itself acts as an authentication server and terminates the outer layers of the EAP protocol, only relaying the innermost layer to the external RADIUS server.
type (employee|voice|guest)Configures the type of network such as employee, voice, guest network.--
vlanAllows the administrators to assign a VLAN to the SSID users.1...4095 -
wep-keyStatic WEP key associated with the key index. The WEP key values can be 10 or 26 hexadecimal characters in length.--
wisprEnables WISPr authentication for the SSID profile.--
www-background-docpAllows you to specify the DSCP 0-63 - mapping value for the background traffic.
www-video-shareAllocates bandwidth for video traffic generated from video streaming.--
www-voice-dscpAllows you to specify the DSCP 0–63 - mapping value for the voice traffic.
www-voice-shareAllocates bandwidth for voice traffic generated from the incoming and outgoing voice communication.--
work-without-uplinkAllows the SSID to be used without an uplink connection--
wpa-passphraseDefines a WPA passphrase with which you can generate a pre-shared key (PSK).--
zoneAllows you to specify a zone for SSID. If an SSID belongs to a zone, it is not broadcast on any AP which does not belong to the zone.

Usage Guidelines

Use this command to configure a WLAN SSID profile to set up an employee, voice, or guest network.

Example

The following example configures an employee WLAN SSID profile:

(Instant AP)(config)# wlan ssid-profile employed

(Instant AP) (SSTD Profile: "employee") | set-vian mac-address-and-dhcp-options matches-regular-expression ..link 200

(Instant AP) (SSID Profile "employee") [ no wmm-background-dscp

(Instant AP) (SSID Profile "employee")# wmm-best-effort-dscp 21

(Instant AP)(SSID Profile "employee")# no wmm-video-dscp

(Instant AP)(SSID Profile "employeel")# wnm-voice-dasp 46,44,42,41

(Instant AP) (SSID Profile "employeel") # zone Zone1

(Instant AP) (SSID Profile "employee") # end

(Instant AP)# commit apply

The following example configures a guest WLAN SSID profile:

(Instant AP)(config)# wlan ssid-profile questNetwork

(Instant AP) (SSTD Profile "questNetwork") type quest

(Instant AP) (SSID Profile "guestNetwork")# essid guestNetwork

(Instant AP) (SSID Profile "questNetwork") | enable

(Instant AP) (SSID Profile "guestNetwork")# opmode opensystem

(Instant AP) (SSID Profile "guestNetwork") ↓ rf-band all

(Instant AP) (SSTD Profile "questNetwork") | dtim-period

(Instant AP) (SSID Profile "guestNetwork") # g-min-tx-rate 1

(Instant AP) (SSID Profile "questNetwork") | q-max-tx-rate 5/

(Instant AP)(SSID Profile "guestNetwork")# a-min-tx-rate 6

(Instant AP) (SSID Profile "guestNetwork") # a-max-tx-rate 54

(Instant AP)(SSID Profile "guestNetwork")# inactivity-timeout 1000

(Instant AP) (SSID Profile "guestNetwork") # vlan 1

(Instant AP)(SSID Profile "questNetwork")‡ dmc-channel-utilization-threshold 90

(Instant AP) (SSID Profile "guestNetwork") # max-clients-threshold 64

(Istant AP) (SSID Profile "questNetwork") | loca-probe-req-thresh 0

(Instant AP) (SSID Profile "guestNetwork") # blacklist

(Instant AP) (SSID Profile "questNetwork") | max-authentication-failures 3

(Instant AP)(SSTD Profile "guestNetwork") | radius-interim-accounting-interval 10

(Instant AP)(SSID Profile "guestNetwork")# radius-reath-interval 30

(Instant AP) (SSID Profile "questNetwork") | captive-portal external

(Instant AP)(SSID Profile "guestNetwork")# mac-authentication

(Instant AP) (SSID Profile "guestNetwork") | auth-server server

(Instant AP)(SSID Profile "guestNetwork")# set-role-by-ssid

(Instant AP) (SSID Profile "guestNetwork")‡ set-role-pre-auth test1

(Instant AP) (SSID Profile "guestNetwork") # end

(Instant AP)# commit apply

Command History

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and WLAN SSID profile configuration sub mode.

wlan sta-profile

xian sta-profile

essid

cipher-suite

wpa-pasaphrase

uplink-band

π0...

Description

This command enables Wi-Fi uplink on a W-IAP.

Syntax

Command/Parameter Description Range Default
wlan sta-profileConfigures a Wi-Fi uplink profile for- a W-IAP.-
essidDefines a unique name for the network on which the Wi-Fi uplink will be enabled.--
cipher-suite {clear} wpa-tkip-psk| wpa2-ccmp-psk)Configures encryption settings. You can specify the following types of encryption: clear-To clear a cipher suite wpa-tkip-psk-To use WPA with TKIP encryption along with Pre-shared key (PSK). wpa2-ccmp-psk-To use WPA2 with Counter Cipher Mode with Block Chaining Message Authentication Code Protocol (CCMP), an AES-based--

Example

The following commands configure the Wi-Fi uplink profile:

(Instant AP) (config) # wlan sta-profile

(Instant AP) (sta uplink) # uplink-band detila

(Instant AP)(sta uplink)# uplink-band dotila

(Instant AP)(ste uplink)# cipher-suite wpa-tkip-psk

(Instant AP) (sta up!irk) || wpa-passphrase user@123

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and Wi-Fi uplink (sta) sub-mode.

wlan tacacs-server

xlan tacacs-server

ip <IP-address>
port <port>
key <key>
timeout <seconds>
retry-count <number>
datetime <minutes>
no... 

Description

This command is used to configure a TACACS server for management users.

Syntax

Command/ParameterDescription Default
wlan tacacs-serverConfigures the TACACS server profile. -
ip <IP-address>Configures the IP address of the TACACS server.-
portConfigures the TCP port for the server 49
keyConfigures a shared secret key to authenticate communication between the TACACS+ client and server.-
timeoutConfigures a timeout value for TACACS+ requests from the management users20
retry-countConfigures the maximum number of authentication requests that are sent to the server3
no.Removes the specified configuration parameter.-

Command History

Version Description
Dell Networking W-Series Instant 6.4.0.2-4.1This command is introduced.

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and TACACS server profile sub-mode.

wlan walled-garden

xlan walled-garden

white-list

black-list

Γ.Ο...

Description

This command configures a walled garden to control user access to the web content and services. The v garden access is required when an external captive portal is used.

Syntax

Command/Parameter Description Range Default
wlan walled-gardenCreates a Walled Garden profile for the W-IAP.--
white-listConfigures a whitelist of URLs to allow the authenticated users to access to a specific domain.You can specify the URLs which the users can access. To allow access to various sites in the same domain, you can specify a POSIX regular expression (regex(7)). For example, yahoo.com/* to provide access to various domains such as news.yahoo.com, travel.yahoo.com and finance.yahoo.com. Similarly, the www.apple.com/library/test is only allow a subset of www.apple.com site corresponding to path /library/test/.URLs, URLs with POSIX regular expression (regex(7))-
black-listConfigures a blacklist to prevent the users from accessing the websites in a specific domain.You can specify the URLs for which the userURLs-

When a user attempts to navigate to other websites not in the whitelist of the walled garden profile, the redirected to the login page. Similarly, a blacklisted walled garden profile blocks the users from accessing websites.

Example

The following example configures a walled garden profile:

(Instant AP) (config)# wlan walled-garden

(Instant AP) (Walled Garden) # white-list

(Instant AP) (Walled Cardon)# black-list

(Instant AP) (Walled Garden)† end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode

wlan wispr-profile

xlan wispr-profile

wispr-location-id-ac

wispr-location-id-cc

wispr-location-id-isocc

wispr-location-id-network

wispr-location-name-location

wispr-location-name-operator-name

DC...

Description

This command configures a Wireless Internet Service Provider roaming (WISPr) authentication profile for a IAP. WISPr authentication allows a smart client to authenticate on the network when they roam between wireless Internet service providers, even if the wireless hotspot uses an Internet Service Provider (ISP) with whom the client may not have an account.

Syntax

Command/Parameter Description
wlan wispr-profileCreates a WISPr authentication profile
wispr-location-id-xcConfigures an E.164 Area Code for the WISPr Location ID.
wispr-location-id-ccConfigures an E.164 Country Code for the WISPr Location ID.
wispr-location-id-isoccConfigures an ISO Country Code for the WISPr Location ID.
wispr-location-id-networkConfigures an SSID associated with the WISPr Location ID.
wispr-location-name-locationAssociates the Hotspot location to the WISPr profile.
wispr-location-name-operator-nameAssociates the hotspot operator profile to the WISPr authentication profile.

Example

The following commands configure a WISPr authentication profile:

(Instant AP)(config)# wlan wispr-profile

(Instant AP) (WISP) ↑ wSpr-location-id-ac 408

(Instant AP) (WISP)‡ wispr-location-id-cc 1

(Instant AP) (WISPr)‡ wispr-location-id-isocc US

(Instant AP) (WISPr) | w'spr-location-id-network wispr

(Instant AP) (WISP)‡ wispr-location-name-location airport

(Instant AP) (WISPR) | wispr-location-name-operator-name KNP

(Instant AP) (WISPr) ‡ end

(Instant AP)# commit apply

Command History

Version Description
Dell Networking W-Series Instant 6.2.1.0- This command is introduced.3.3

Command Information

W-IAP Platform Command Mode
All platformsConfiguration mode and WISPr profile sub-mode.

write

write {erase |memory}

Description

This command saves the running configuration to memory or displays the running configuration on the screen. This command can also be used to erase the running configuration and return to factory default

Syntax

Parameter Description
eraseErases the running system configuration file. Rebooting the W-IAP resets it the factory default configuration. If you specify all, the configuration and all in the W-IAP databases are erased.
memorySaves the current system configuration to memory. Any configuration change made during this session will be made permanent.

Usage Guidelines

Configuration changes made using the CLI affect only the current session. You must save your changes if them to be retained across system reboots. Changes are lost if the system reboots before saving the ch The following command assumes you have already saved your configuration. Reboot the W-IAP:

The W-IAP returns the following messages:

Do you really want to reset the system(y/n): y

System will now restart!

...

Restarting system.

Example

The following command saves your changes so they are retained after a reboot:

write memory

xml-api-server

xml-api-server
ip <ip-address>
key <shared-key>
no... 

Description

This command integrates an XML API interface to the W-IAP.

Syntax

Command/Parameter Description
xml-api-serverDisplays the sub-mode for configuring the XML API interface parameters.
ipConfigures the IP address of the XML API server.
keyConfigures the key required for accessing the XML API interface.
no...Removes the configured parameter.

Usage Guidelines

Use this command to integrate a W-IAP with an external XML API interface.

Example

The following command configures the XML API Server details on a W-IAP:

(Instant AP) (config)# xml-api-server
(Instant AP) (xml-api-server) ip 12.0.132.61
(Instant AP) (xml-api-server)# key123
(Instant AP) (xml-api-server) end
(Instant AP)# commit apply 

Command History

zonename

zonename

по...

Description

This command configures a zone name for the W-IAP. You can configure zone settings on a W-IAP and profile, to assign an SSID to a specific W-IAP.

Syntax

Parameter Description
zonenameConfigures zone on a W-IAP.
no...Removes the configuration.

Usage Guidelines

Use this command to configure an AP zone. To assign an SSID to a specific W-IAP, the AP zone name r configured on the WLAN SSID profile.

The following constraints apply to the AP zone configuration:

  • A W-IAP can belong to only one zone and only one zone can be configured on an SSID.
  • If an SSID belongs to a zone, all W-IAPs in this zone can broadcast this SSID. If no W-IAP belongs to the zone configured on the SSID, the SSID is not broadcast.
  • If an SSID does not belong to any zone, all W-IAPs can broadcast this SSID.

Example

The following example configures a zone name on a W-IAP:

(Instant AP) # zorename zoneA

Command History

Terminology

Acronyms and Abbreviations

The following table lists the abbreviations used in this document.

Table 10: List of abbreviations

Abbreviation Expansion
ARM Adaptive Radio Management
ARP Address Resolution Protocol
BSS Basic Server Set
BSSID Basic Server Set Identifier
CA Certification Authority
CLI Command Line Interface
DHCP Dynamic Host Configuration Protocol
DMZDemilitarized Zone
DNSDomain Name System
EAP-TLSExtensible Authentication Protocol- Transport Layer Security
EAP-TTLSExtensible Authentication Protocol-Tunneled Transport Layer Security

Table 10: List of abbreviations

Abbreviation Expansion
NS Name Server
NTP Network Time Protocol
PEAP Protected Extensible Authentication Protocol
PEM Privacy Enhanced Mail
PoE Power over Ethernet
RADIUS Remote Authentication Dial In User Service
VC Virtual Controller
VSA Vendor-Specific Attributes
WLAN Wireless Local Area Network

Glossary

The following table lists the terms and their definitions used in this document.

Table 11: List of Terms

TermDefinition
802.11An evolving family of specifications for wireless LANs developed by working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and CSMA/CA (carrier sense multiple access with collision avoidance) for path share
802.11aProvides specifications for wireless systems. Networks using 802.11a

Table 11: List of Terms

Term Definition
802.11g Offers transmission over relatively short distances at up to 54 Mbps, compared with the 11 Mbps theoretical maximum of 802.11b. 802.1 operates in the 2.4 GHz band and employs orthogonal frequency division multiplexing (OFDM), the modulation scheme used in 802.1 to obtain higher data speed. Computers or terminals set up for 80 can fall back to speeds of 11 Mbps, so that 802.11b and 802.11g can be compatible within a single network.
802.11n Wireless networking standard to improve network throughput over the two previous standards 802.11a and 802.11g with a significant incre in the maximum raw data rate from 54 Mbps to 600 Mbps with th of four spatial streams at a channel width of 40 MHz. 802.11n open in the 2.4 and 5.0 bands.
AP An access point (AP) connects users to other users within the network and also can serve as the point of interconnection between the WL and a fixed wire network. The number of access points a WLAN ne determined by the number of users and the size of the network.
access point mapping The act of locating and possibly exploiting connections to WLANs while driving around a city or elsewhere. To do war driving, you need a vehicle, a computer (which can be a laptop), a wireless Ethernet ca to work in promiscuous mode, and some kind of an antenna which be mounted on top of or positioned inside the car. Because a WL have a range that extends beyond an office building, an outside us may be able to intrude into the network, obtain a free Internet connection, and possibly gain access to company records and other resources.
ad-hoc network A LAN or other small network, especially one with wireless or temporary plug-in connections, in which some of the network devices are part the network only for the duration of a communications session or,

Table 11: List of Terms

Term Definition
DNS Server A Domain NameSystem (DNS) server functions as a phonebook for the Internet and Internet users. It converts human readable computer hostnames Into IP addresses and vice-versa.A DNS server stores several records for a domain name such as address 'A' record, name server (NS), and mail exchanger (MX) recordThe Address 'A' record is the most important record that is storedDNS server, because it provides the required IP address for a network peripheral or element.
DST Daylight saving time (DST)also known as summer time, is the practice of advancing clocks, so that evenings have more daylight and more have less. Typically clocks are adjusted forward one hour near the level of spring and are adjusted backward in autumn.
EAP Extensible authenticationprotocol (EAP) refers to the authenticationprotocol in wireless networks that expands on methods used by the point-to-point protocol (PPP), a protocol often used when connecting computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and public key encryption authentication.
fixed wireless Wireless devicesor systems in fixed locations such as homes and offices. Fixed wireless devices usually derive their electrical power from the utility mains, unlike mobile wireless or portable wireless which to be battery-powered. Although mobile and portable systems can be used in fixed locations, efficiency and bandwidth are compromised compared with fixed systems.
frequency allocation Use of radio frequency spectrum regulated by governments.
frequency spectrum Part of the electromagnetic spectrum.

Table 11: List of Terms

Term Definition
The choice of endspan or midspan depends on the capabilities of the switch to which the W-IAP is connected. Typically if a switch is in place and does not support PoE, midspan power injectors are used.
PPPoEPoint-to-Point Protocol over Ethernet (PPPoE) is a method of connecting to the Internet typically used with DSL services where the client connects to the DSL modem.
QoSQuality of Service (QoS) refers to the capability of a network to provide better service to a specific network traffic over various technologies.
RFRadio Frequency (RF) refers to the portion of electromagnetic spectrum in which electromagnetic waves are generated by feeding alternating current to an antenna.
TACACSFamily of protocols that handle remote authentication and related services for network access control through a centralized server.
TACACS+Derived from TACACS but an entirely new and separate protocol to handle AAA services. TACACS+ uses TCP and is not compatible with TACACS. Because it encrypts password, username, authorization, and accounting, it is less vulnerable than RADIUS.
VPNA Virtual Private Network (VPN) network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or individual users with secure access to their organization's network. A VPN ensures privacy through security procedures and tunneling protocols such as the Layer Two Tunneling Protocol ( L2TP ). Data is encrypted at the sending end and decrypted at the receiving end.
W-CDMAOfficially known as IMT-2000 direct spread; ITU standard derived from

Table 11: List of Terms

Term Definition
WEP Wired equivalent privacy(WEP) is a security protocol specified in802.11b, designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Data encryption protects the vulnerable wireless link between clients and access points; once this measure has been taken, other typical LAN security mechanisms such as password protection, end-to-end encryption, virtual private networks (VPNs), and authentication can be put in place to ensure privacy.
wireless Describes telecommunicationsin which electromagnetic waves (rather than some form of wire) carry the signal over part or all of the communication path.
wireless network In a WirelessLAN (WLAN), laptops, desktops, PDAs, and other computer peripherals are connected to each other without any network cables. These network elements or clients use radio signals to communicate with each other. Wireless networks are set up based on the IEEE 802.11 standards.
WISP Wireless ISP (WISP) refersto an Internet service provider (ISP) that allows subscribers to connect to a server at designated hot spots (access points) using a wireless connection such as WI-Fi. This type of ISP offers broadband service and allows subscriber computers, called stations, to access the Internet and the web from anywhere within the zone of coverage provided by the server antenna, usually a region with a radius of several kilometers.
wireless service provider A companythat offers transmission services to users of wireless devices through radio frequency (RF) signals rather than through end-to-end wire communication.
WLAN Wireless local area network(WLAN) is a local area network (LAN) that
Table of contents Click a title to access it
Manual assistant
Powered by Anthropic
Waiting for your message
Product information

Brand : DELL

Model : W-IAP214/215

Category : Unspecified