Dell PowerConnect W-Series ArubaOS 6.
Copyright Information © 2013 Aruba Networks, Inc. Aruba Networks trademarks include , Aruba Networks®, Aruba ® Wireless Networks , the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice. Originated in the USA. All other trademarks are the property of their respective owners.
Introduction The Dell PowerConnect W-Series ArubaOS 6.2 command line interface (CLI) allows you to configure and manage your controllers. The CLI is accessible from a local console connected to the serial port on the controllers or through a Telnet or Secure Shell (SSH) session from a remote management console or workstation. NOTE: Telnet access is disabled by default.
Command Description ap packet-capture Replaces the pcap command and includes open-port and close-port subcommands for allowing packet monitoring by port. ap remove-r1-key This command removes the r1 key from an AP. clock append This command enables the timestamp feature, adding a date and time to the output of show commands. firewall-visibility This command enables or disables policy enforcement firewall visibility feature.
Command Description to define the information elements advertised by an AP with 802.11k support enabled. wlan tsm-req-profile This command configures a TSM Report Request Profile. Modified Commands The following commands were modified in ArubaOS 6.2. Command Parameter Description aaa authentication mgmt The option to enable mschapv2 was added.
Command Parameter Description mode-radio-1 0 or command to enable single-chain mode for the selected radio. AP radios in single-chain mode will transmit and receive data using only legacy rates and single-stream HT rates up to MCS 7. This setting is disabled by default. rf arm-profilerf arm-profile Channel quality percentage below which ARM initiates a channel change.
Command Parameter Description over trigger settings are now configured using the handover trigger profile. wlan ssid-profile The following parameters were introduced: l l l l l dot11r-profile bSec-128 bSec-256 advertise-location enforce-user-vlan Deprecated Commands The following commands were deprecated in ArubaOS 6.
About this Guide This guide describes the Dell PowerConnect W-Series ArubaOS 6.2 command syntax. The commands in this guide are listed alphabetically. The following information is provided for each command: l Command Syntax—The complete syntax of the command. l Description—A brief description of the command. l Syntax—A description of the command parameters, including license requirements for specific parameters if needed. The applicable ranges and default values, if any, are also included.
CLI Access When you connect to the controller using the CLI, the system displays its host name followed by the login prompt. Log in using the admin user account and the password you entered during the Initial Setup on the controller (the password displays as asterisks). For example: (host) User: admin Password: ***** When you are logged in, the user mode CLI prompt displays. For example: (host) > User mode provides only limited access for basic operational testing such as running ping and traceroute.
If more than one item is shown, type more of the keyword characters to distinguish your choice. However, if only one item is listed, the keyword or abbreviation is valid and you can press tab or the spacebar to advance to the next keyword. When typed in place of a parameter, the question mark lists the available options.
The startup config holds the configuration which will be used the next time the controller is rebooted. It contains all the options last saved using the write memory command. To view the startup-config, use the following command: l (host) # show startup-config When you make configuration changes via the CLI, those changes affect the current running configuration only. If the changes are not saved, they will be lost after the controller reboots.
Table 2: Text Conventions Type Style Description Italics This style is used to emphasize important terms and to mark the titles of books. Boldface This style is used to emphasize command names and parameter options when mentioned in the text. Commands This fixed-width font depicts command syntax and examples of commands and command output.
Key Effect Description Ctrl F or the right arrow Forward Move the cursor one character right. Ctrl K Delete Right Delete all characters to the right of the cursor. Ctrl N or the down arrow Next Display the next command in the command history. Ctrl P or up arrow Previous Display the previous command in the command history. Ctrl T Transpose Swap the character to the left of the cursor with the character to the right of the cursor. Ctrl U Clear Clear the line.
Contacting Dell Table 5: Dell Contacts Contact Center Online Main Website dell.com Support Website dell.com/support Documentation Website dell.com/support/manuals 14 | Introduction Dell PowerConnect W-Series ArubaOS 6.
aaa authentication captive-portal aaa authentication captive-portal auth-protocol mschapv2|pap|chap black-list clone default-guest-role default-role enable-welcome-page guest-logon ip-addr-in-redirection login-page logon-wait {cpu-threshold }|{maximum-delay }|{minimum-delay } logout-popup-window max-authentication-failures no ...
Parameter Description Range Default you add it to the blacklist. NOTE: This parameter requires the Public Access license. clone Name of an existing Captive Portal profile from which parameter values are copied. — — default-guest-role Role assigned to guest. — guest default-role Role assigned to the Captive Portal user when that user logs in.
Parameter Description Range Default option is disabled, the user remains logged in until the user timeout period has elapsed or the station reloads. max-authentication-failures Maximum number of authentication failures before the user is blacklisted. 0-10 0 no Negates any configured parameter. — — protocol-http Use HTTP protocol on redirection to the Captive Portal page. If you use this option, modify the captive portal policy to allow HTTP traffic.
Parameter Description Range Default welcome-page URL of the page that appears after logon and before redirection to the web URL. This can be set to any URL. — /auth/welcome.html white-list Name of an existing white list on an IPv4 or IPv6 network destination. The white list contains authenticated websites that a guest can access.
aaa authentication dot1x aaa authentication dot1x {|countermeasures} ca-cert cert-cn-lookup clear clone eapol-logoff enforce-suite-b-128 enforce-suite-b-192 framed-mtu heldstate-bypass-counter ignore-eap-id-match ignore-eapolstart-afterauthentication machine-authentication blacklist-on-failure|{cache-timeout }|enable| {machine-default-role }|{user-default-role } max-authentication-failures max-requests multicast-keyrotation
Parameter Description Range Default countermeasures Scans for message integrity code (MIC) failures in traffic received from clients. If there are more than 2 MIC failures within 60 seconds, the AP is shut down for 60 seconds. This option is intended to slow down an attacker who is making a large number of forgery attempts in a short time. — disabled ca-cert CA certificate for client authentication. The CA certificate needs to be loaded in the controller.
Parameter Description Range Default machine-default-role Default role assigned to the user after completing only machine authentication. — guest user-default-role Default role assigned to the user after 802.1X authentication. — guest max-authentication-failures Number of times a user can try to login with wrong credentials after which the user is blacklisted as a security threat.
Parameter Description termination Sets options for terminating 802.1X authentication on the controller. Range Default eap-type The Extensible Authentication Protocol (EAP) method, either EAP-PEAP or EAP-TLS. eappeap/ eap-tls eap-peap enable Enables 802.1X termination on the controller. — disabled enable-token -caching If you select EAP-GTC as the inner EAP method, you can enable the controller to cache the username and password of each authenticated user.
Parameter Description Range Default wpa-key-period Interval, in milliseconds, between each WPA key exchange. 10005000 1000 ms wpa2-key-delay Set the delay between EAP-Success and unicast key exchange. 1-2000 0 ms (no delay) tls-guest-access Enables guest access for EAP-TLS users with valid certificates. — disabled tls-guest-role User role assigned to EAP-TLS guest. NOTE: This parameter requires the PEFNG license.
Examples The following example enables authentication of the user’s client device before user authentication. If machine authentication fails but user authentication succeeds, the user is assigned the restricted “guest” role: aaa authentication dot1x dot1x machine-authentication enable machine-authentication machine-default-role computer machine-authentication user-default-role guest The following example configures an 802.
aaa authentication mac aaa authentication mac case upper|lower clone delimiter {colon|dash|none} max-authentication-failures no ... Description This command configures the MAC authentication profile. Syntax Parameter Description Range Default Name that identifies an instance of the profile. The name must be 1-63 characters. — “default” case The case (upper or lower) used in the MAC string sent in the authentication request.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3.1.8 The max-authentication-failures parameter was allowed in the base operating system. In earlier versions of ArubaOS, the max-authentication-failures parameter required the Wireless Intrusion Protection license Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 26 | aaa authentication mac Dell PowerConnect W-Series ArubaOS 6.
aaa authentication mgmt aaa authentication mgmt default-role {guest-provisioning|location-api-mgmt|network-operations|no-access|readonly|root} enable no ... server-group Description This command configures authentication for administrative users.
default-role read-only server-group internal Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.2 The network-operations role was introduced. ArubaOS 3.3 The location-api-mgmt role was introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 28 | aaa authentication mgmt Dell PowerConnect W-Series ArubaOS 6.
aaa authentication-server internal aaa authentication-server internal use-local-switch Description This command specifies that the internal database on a local controller be used for authenticating clients. Usage Guidelines By default, the internal database in the master controller is used for authentication. This command directs authentication to the internal database on the local controller where you run the command. Command History This command was available in ArubaOS 3.0.
aaa authentication-server ldap aaa authentication-server ldap admin-dn admin-passwd allow-cleartext authport base-dn clone enable filter host key-attribute max-connection no ... preferred-conn-type ldap-s|start-tls|clear-text timeout Description This command configures an LDAP server. Syntax Parameter Description Range Default Name that identifies the server.
Parameter Description Range Default host IP address of the LDAP server, in dotted-decimal format. — — key-attribute Attribute that should be used as a key in search for the LDAP server. For Active Directory, the value is sAMAccountName. — sAMAccountName max-connection Maximum number of simultaneous non-admin connections to an LDAP server. — — no Negates any configured parameter. — — preferred-conn-type Preferred connection type.
aaa authentication-server radius aaa authentication-server radius acctport authport clone enable host | key mac-lowercase nas-identifier nas-ip no ... retransmit service-type-framed-user source-interface vlan timeout use-ip-for-calling-station use-md5 Description This command configures a RADIUS server. Syntax Parameter Description Range Default Name that identifies the server.
Parameter Description Range Default nas-ip NAS IP address to send in RADIUS packets. You can configure a “global” NAS IP address that the controller uses for communications with all RADIUS servers. If you do not configure a server-specific NAS IP, the global NAS IP is used. To set the global NAS IP, enter the ip radius nas-ip command. — — no Negates any configured parameter.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 34 | aaa authentication-server radius Dell PowerConnect W-Series ArubaOS 6.
aaa authentication-server tacacs aaa authentication-server tacacs clone enable host key no ... retransmit session-authorization tcp-port timeout Description This command configures a TACACS+ server. Syntax Parameter Description Range Default Name that identifies the server. — — clone Name of an existing TACACS server configuration from which parameter values are copied. — — enable Enables the TACACS server.
host 10.1.1.245 key qwERtyuIOp enable session-authorization Command History Version Description ArubaOS 3.0 Command introduced. ArubaOS 6.0 session-authorization parameter was introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 36 | aaa authentication-server tacacs Dell PowerConnect W-Series ArubaOS 6.
aaa authentication-server windows aaa authentication-server windows clone domain enable host no Description This command configures a windows server for stateful-NTLM authentication. Syntax Parameter Description Name of the windows server. You will use this name when you add the windows server to a server group. clone Name of a Windows Server from which you want to make a copy.
| aaa authentication-server windows Dell PowerConnect W-Series ArubaOS 6.
aaa authentication stateful-dot1x aaa authentication stateful-dot1x default-role enable no ... server-group timeout Description This command configures 802.1X authentication for clients on non-Dell APs. Syntax Parameter Description Range Default default-role Role assigned to the 802.1X user upon login. NOTE: The PEFNG license must be installed. — guest enable Enables 802.1X authentication for clients on non-Dell APs. Use no enable to disable stateful 8021.
aaa authentication stateful-dot1x clear aaa authentication stateful-dot1x clear Description This command clears automatically-created control path entries for 802.1X users on non-Dell APs. Syntax No parameters. Usage Guidelines Run this command after changing the configuration of a RADIUS server in the server group configured with the aaa authentication stateful-dot1x command. This causes entries for the users to be created in the control path with the updated configuration information.
aaa authentication stateful-ntlm aaa authentication stateful-ntlm clone default-role enable server-group timeout Description This command configures stateful NT LAN Manager (NTLM) authentication. Syntax Parameter Description Range Default clone Create a copy of an existing stateful NTLM profile — — default-role Select an existing role to assign to authenticated users. — guest no Negates any configured parameter.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 42 | aaa authentication stateful-ntlm Dell PowerConnect W-Series ArubaOS 6.
aaa authentication via auth-profile aaa authentication via auth-profile clone default-role desc max-authentication-failures no server-group Description This command configures the VIA authentication profile. Syntax Parameter Description Default clone Name of an existing profile from which configuration values are copied. - default-role Name of the default VIA authentication profile.
aaa authentication via connection-profile aaa authentication via connection-profile admin-logoff-script admin-logon-script allow-user-disconnect allow-whitelist-traffic auth_domain_suffix auth-profile auth_doman_suffix auto-launch-supplicant auto-login auto-upgrade banner-message-reappear-timeout client-logging client-netmask client-wlan-profile position clone controllers-load-balance csec-gateway-url csec-http-ports
Syntax Parameter Description Default admin-logoff-script Enables VIA logoff script. Disabled admin-logon-script Enables VIA logon script. Disabled allow-user-disconnect Enable or disable users to disconnect their VIA sessions. Enabled allow-whitelist-traffic If enabled, this feature will block network access until the VIA VPN connection is established.
Parameter Description Default controllers-load-balance Enable this option to allow the VIA client to failover to the next available selected randomly from the list as configured in the VIA Servers option. If disabled, VIA will failover to the next in the sequence of ordered list of VIA Servers. Disabled server l addr l desc l Address: This is the public IP address or the DNS hostname of the VIA controller.
Parameter Description Default sessions. ikev2auth Use this option to set the IKEv2 authentication method. By default user certificate is used for authentication. The other supported methods are EAP-MSCHAPv2, EAP-TLS. The EAP authentication is done on an external RADIUS server. User Certificates ipsec-cryptomap List of IPsec crypto maps that the VIA client uses to connect to the controller. These IPsec Crypto Maps are configured in the CLI using the crypto-local ipsec-map command.
Parameter Description Default certificate presented by the controller. whitelist addr Specify a hostname or IP address and network mask to define a whitelist of users allowed to access the networkif the allow-whitelist-traffic option is enabled — addr Host name of IP address of a client — netmask Netmask, in dotted decimal format — description (Optional) description of the client — Enable or disable the use of the Windows credentials to login to VIA.
Release Modification l suiteb-crypto ArubaOS 6.1.3.2 The auth_domain_suffix parameter was introduced. ArubaOS 6.2 The following commands were introduced: l allow-whitelist-traffic l banner-message-reappear-timeout l controllers-load-balancing l enable-fips l enable-supplicant l whitelist Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
aaa authentication via global-config aaa authentication via global-config no ssl-fallback-enable Description The global config option allows to you to enable SSL fallback mode. If the SSL fallback mode is enabled the VIA client will use SSL to create a secure connection. Syntax Parameter Description Default no Disable SSL fallback option — ssl-fallback-enable Use this option to enable an SSL fallback connection.
aaa authentication via web-auth aaa authentication via web-auth default auth-profile position clone no Description A VIA web authentication profile contains an ordered list of VIA authentication profiles. The web authentication profile is used by end users to login to the VIA download page (https:///via) for downloading the VIA client. Only one VIA web authentication profile is available.
aaa authentication vpn aaa authentication vpn cert-cn-lookup clone default-role max-authentication-failures no ... server-group Description This command configures VPN authentication settings. Syntax Parameter Description Default There are three VPN profiles: default, default-rap or default-cap. This allows users to use different AAA servers for VPN, RAP and CAP clients. NOTE: The default and default-rap profiles are configurable.
Example The following command configures VPN authentication settings for the default-rap profile: aaa authentication vpn default-rap default-role guest clone default max-authentication-failures 0 server-group vpn-server-group The following message appears when a user tries to configure the non-configurable default-cap profile: (host) (config) #aaa authentication vpn default-cap Predefined VPN Authentication Profile "default-cap" is not editable Command History Version Description ArubaOS 3.
aaa authentication wired aaa authentication wired no ... profile Description This command configures authentication for a client device that is directly connected to a port on the controller. Syntax Parameter Description no Negates any configured parameter. profile Name of the AAA profile that applies to wired authentication. This profile must be configured for a Layer-2 authentication, either 802.1X or MAC. See "aaa profile" on page 73.
aaa authentication wispr aaa authentication wispr agent string clone default-role logon-wait {cpu-threshold }|{maximum-delay }|{minimum-delay } no ...
Parameter Description wispr-location-id-ac The E.164 Area Code in the WISPr Location ID. wispr-location-id-cc The 1-3 digit E.164 Country Code in the WISPr Location ID. wispr-location-id-isocc The ISO Country Code in the WISPr Location ID. wispr-location-id-network The SSID/network name in the WISPr Location ID.
Example The following commands configure an WISPr authentication profile: aaa authentication wispr default-role authuser max-authentication-failures 5 server-group wispr1 wispr-location-id-ac 408 wispr-location-id-cc 1 wispr-location-id-isocc us wispr-location-id-network wispr-location-name-location wispr-location-name-operator-name Command History This command was available in ArubaOS 3.4.1.
aaa bandwidth-contract aaa bandwidth-contract {kbits |mbits } Description This command configures a bandwidth contract. Syntax Parameter Description Range Name that identifies this bandwidth contract. — kbits Limit the traffic rate for this bandwidth contract to a specified number of kilobits per second. 256-2000000 mbits Limit the traffic rate for this bandwidth contract to a specified number of megabits per second.
aaa derivation-rules aaa derivation-rules user no ... set {aaa-profile|role|vlan} condition set-value {|} [description ][position ] Description This command configures rules which assigns a AAA profile, user role or VLAN to a client based upon the client’s association with an AP. A user role cannot be assigned by an AAA derivation rule unless the controller has an installed PEFNG license.
Usage Guidelines The user role can be derived from attributes from the client’s association with an AP. User-derivation rules are executed before the client is authenticated. You configure the user role to be derived by specifying condition rules; when a condition is met, the specified user role is assigned to the client. You can specify more than one condition rule; the order of rules is important as the first matching condition is applied. You can also add a description of the rule.
The device identification feature allows you to assign a user role or VLAN to a specific device type by identifying a DHCP option and signature for that device. If you create a user rule with the DHCP-Option rule type, the first two characters in the Value field must represent the hexadecimal value of the DHCP option that this rule should match, while the rest of the characters in the Value field indicate the DHCP signature the rule should match.
Feb 26 02:56:02 :202536: |dhcpdwrap| |dhcp| Datapath vlan10: REQUEST 00:26:c6:52:6b:7c reqIP=10.10.10.254 Options 3d:010026c6526b7c 0c:41525542412d46416c73653232 51:00000041525542412d46416c736532322e73757279612e636f6d 3c:4d53465420352e30 37:010f03062c2e2f1f21f92b 2b:dc0100 Examples The following command sets the client’s user role to “guest” if the client associates to the “Guest” ESSID. The rule description indicates that is was created for special customers.
aaa dns-query-interval aaa dns-query-interval Description Configure how often the controller should generate a DNS request to cache the IP address for a RADIUS server identified via its fully qualified domain name (FQDN). Syntax Parameter Description Specify, in minutes, the interval between DNS requests sent from the controller to the DNS server. By default, DNS requests are sent every 15 minutes.
aaa inservice aaa inservice Description This command designates an “out of service” authentication server to be “in service”. Syntax Parameter Description Server group to which this server is assigned. Name of the configured authentication server.
aaa ipv6 user add aaa ipv6 user add authentication-method {dot1x|stateful-dot1x} mac name profile role Description This command manually assigns a user role or other values to a specified IPv6 client. Syntax Parameter Description IPv6 address of the user to be added. authentication-method Authentication method for the client. dot1x 802.1X authentication. stateful-dot1x Stateful 802.1X authentication.
Command History This command was available in ArubaOS 3.3. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 66 | aaa ipv6 user add Dell PowerConnect W-Series ArubaOS 6.
aaa ipv6 user clear-sessions aaa ipv6 user clear-sessions Description This command clears ongoing sessions for the specified IPv6 client. Syntax Parameter Description IPv6 address of the client. Usage Guidelines This command clears any ongoing sessions that the client already had before being assigned a role with the aaa ipv6 user add command.
aaa ipv6 user delete aaa ipv6 user delete {|all|mac |name |role } Description This command deletes IPv6 clients, users, or roles. Syntax Parameter Description IPv6 address of the client to be deleted. all Deletes all connected IPv6 clients. mac MAC address of the IPv6 client to be deleted. name Name of the IPv6 client to be deleted. role Role of the IPv6 client to be deleted.
aaa ipv6 user logout aaa ipv6 user logout Description This command logs out an IPv6 client. Syntax Parameter Description IPv6 address of the client to be logged out. Usage Guidelines This command logs out an authenticated IPv6 client. The client must reauthenticate. Example The following command logs out an IPv6 client: aaa user logout 2002:d81f:f9f0:1000:e409:9331:1d27:ef44 Command History This command was available in ArubaOS 3.3.
aaa password-policy mgmt aaa password-policy mgmt enable no password-lock-out password-lock-out-time password-max-character-repeat. password-min-digit password-min-length password-min-lowercase-characters password-min-special-character password-min-uppercase-characters password-not-username Description Define a policy for creating management user passwords.
Parameter Description password Range: 6-64 characters. Default: 6. password-min-lowercasecharacters The minimum number of lowercase characters required in a management user password. Range: 0-10 characters. By default, there is no requirement for lowercase letters in a password, and the parameter has a default value of 0. password-min-specialcharacter The minimum number of special characters required in a management user password. Range: 0-10 characters.
Allowed Characters Disallowed Characters curled braces: { } straight braces: [ ] colon : period: .
aaa profile aaa profile authentication-dot1x authentication-mac clone devtype-classification dot1x-default-role dot1x-server-group enforce-dhcp initial-role l2-auth-fail-through mac-default-role mac-server-group no ...
Parameter Description Default dot1x-server-group Name of the server group used for 802.1X authentication. See "aaa server-group" on page 82. — enforce-dhcp When you enable this option, clients must complete a DHCP exchange to obtain an IP address. Best practices are to enable this option, when you use the aaa derivationrules command to create a rule with the DHCP-Option rule type. This parameter is disabled by default. disabled initial-role Role for unauthenticated users.
server group. There are predefined AAA profiles available: default-dot1x, default-mac-auth, and default-open, that have the parameter values shown in the following table.
Command Information Platforms Licensing Command Mode All platforms Base operating system, except for noted parameters Config mode on master controllers 76 | aaa profile Dell PowerConnect W-Series ArubaOS 6.
aaa query-user aaa query-user Description Troubleshoot an LDAP authentication failure by verifying that the user exists in the ldap server database. Syntax Parameter Description Name of an LDAP server. Name of a user whose LDAP record you want to view.
Command History This command was available in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 78 | aaa query-user Dell PowerConnect W-Series ArubaOS 6.
aaa radius-attributes aaa radius-attributes add {date|integer|ipaddr|string} [vendor ] Description This command configures RADIUS attributes for use with server derivation rules. Syntax Parameter Description add Adds the specified attribute name (alphanumeric string), associated attribute ID (integer), and type (date, integer, IP address, or string). date Adds a date attribute. integer Adds a integer attribute.
aaa rfc-3576-server aaa rfc-3576-server clone key no ... Description This command configures a RADIUS server that can send user disconnect and change-of-authorization (CoA) messages, as described in RFC 3576, “Dynamic Authorization Extensions to Remote Dial In User Service (RADIUS)”. Syntax Parameter Description IP address of the server. clone Name of an existing RFC 3576 server configuration from which parameter values are copied.
Related Commands Command Description aaa profilerfc-3576-server Associate an RFC-3576 server to a AAA profile. show aaa state user View information for a user whose session timeout is altered by a RFC 3576 server. Command History Version Description ArubaOS 3.0 Comand introduced Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
aaa server-group aaa server-group allow-fail-through auth-server [match-authstring contains|equals|starts-with ] [match- fqdn ] [position ] [trim-fqdn] clone no ...
Parameter Description Default domain. An authentication request is sent to the server only if there is an exact match between the specified domain and the portion of the user information sent in the authentication request. With this option, the user information must be in one of the following formats: \ @ position Position of the server in the server list. 1 is the top.
include the internal database as a backup to a RADIUS server. You can add the same server to multiple server groups. There is a predefined server group “internal” that contains the internal database. Example The following command configures a server group “corp-servers” with a RADIUS server as the main authentication server and the internal database as the backup. The command also sets the client’s user role to the value of the returned “Class” attribute.
aaa sygate-on-demand (deprecated) aaa sygate-on-demand remediation-failure-role Description This command configures the user role assigned to clients that fail Sygate On-Demand Agent (SODA) remediation. Command History Version Description ArubaOS 3.0 Command introduced ArubaOS 3.4 Command deprecated Dell PowerConnect W-Series ArubaOS 6.
aaa tacacs-accounting aaa tacacs-accounting server-group command {action|all|configuration|show} mode {enable|disable} Description This command configures reporting of commands issued on the controller to a TACACS+ server group. Syntax Parameter Description Range Default server-group The TACACS server group to which the reporting is sent. — — command The types of commands that are reported to the TACACS server group. — — action Reports action commands only.
aaa test-server aaa test-server {mschapv2|pap} Description This command tests a configured authentication server. Syntax Parameter Description mschapv2 Use MSCHAPv2 authentication protocol. pap Use PAP authentication protocol. Name of the configured authentication server. Username to use to test the authentication server. Password to use to test the authentication server.
aaa timers aaa timers dead-time idle-timeout
aaa timers idle-timeout 10 Related Commands (host) (config) #show aaa timers (host) (config) #show datapath user table Command History Version Description ArubaOS 3.0 Command introduced ArubaOS 3.4 Idle timeout values and defaults changed Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
aaa trusted-ap aaa trusted-ap Description This command configures a trusted non-Dell AP. Syntax Parameter Description MAC address of the AP Usage Guidelines This command configures a non-Dell AP as a trusted AP. Example The following command configures a trusted non-Dell AP: aaa trusted-ap 00:40:96:4d:07:6e Command History This command was available in ArubaOS 3.0.
aaa user add aaa user add [] [authentication-method {dot1x|mac|stateful-dot1x|vpn| web}] [mac-addr ] [name ] [profile ] [role ] Description This command manually assigns a user role or other values to a specified client or device. Syntax Parameter Description IP address of the user to be added. Number of users to create starting with . authentication-method Authentication method for the user. dot1x 802.
session-acl log-https In enable mode: aaa user add 10.1.1.236 role web-debug Command History This command was available in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 92 | aaa user add Dell PowerConnect W-Series ArubaOS 6.
aaa user clear-sessions aaa user clear-sessions Description This command clears ongoing sessions for the specified client. Syntax Parameter Description IP address of the user. Usage Guidelines This command clears any ongoing sessions that the client already had before being assigned a role with the aaa user add command. Example The following command clears ongoing sessions for a client: aaa user clear-sessions 10.1.1.236 Command History This command was available in ArubaOS 3.0.
aaa user delete aaa user delete {|all|mac |name |role } Description This command deletes clients, users, or roles. Syntax Parameter Description IP address of the client to be deleted. all Deletes all connected clients. mac MAC address of the client to be deleted. name Name of the client to be deleted. role Role of the client to be deleted. Usage Guidelines This command allows you to manually delete clients, users, or roles.
aaa user fast-age aaa user fast-age Description This command enables fast aging of user table entries. Syntax No parameters. Usage Guidelines When this feature is enabled, the controller actively sends probe packets to all users with the same MAC address but different IP addresses. The users that fail to respond are purged from the system. This command enables quick detection of multiple instances of the same MAC address in the user table and removal of an “old” IP address.
aaa user logout aaa user logout Description This command logs out a client. Syntax Parameter Description IP address of the client to be logged out. Usage Guidelines This command logs out an authenticated client. The client must reauthenticate. Example The following command logs out a client: aaa user logout 10.1.1.236 Command History This command was available in ArubaOS 3.0.
aaa user monitor aaa user monitor Description This command checks to see whether an authenticated user's attributes differ from those in the SOS. Syntax Parameter Description IP address of the user whose attributes are being checked.
aaa xml-api aaa xml-api server clone default-authentication-role key no ... Description This command configures an external XML API server. Syntax Parameter Description server IP address of the external XML API server. clone Name of an existing XML API server configuration from which parameter values are copied. key Preshared key to authenticate communication between the controller and the XML API server.
adp adp discovery {disable|enable} igmp-join {disable|enable} igmp-vlan Description This command configures the Aruba Discovery Protocol (ADP). Syntax Parameter Description Range Default discovery Enables or disables ADP on the controller. enabled/ disabled enabled igmp-join Enables or disables sending of Internet Group Management Protocol (IGMP) join requests from the controllers. enabled/ disabled enabled igmp-vlan VLAN to which IGMP reports are sent.
am am scan [bssid ] am test {suspect-rap bssid match-type match-method |wired-mac {add|remove {bssid |enet-mac } mac } Description These commands enable channel scanning or testing for the specified air monitor. Syntax Parameter Description Range scan IP address of the air monitor to be scanned. — Channel to which the scanning is tuned. Set to 0 to enable scanning of all channels.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
ap-group ap-group ap-system-profile authorization-profile clone dot11a-radio-profile dot11a-traffic-mgmt-profile dot11g-radio-profile dot11g-traffic-mgmt-profile enet0-port-profile enet1-port-profile enet2-port-profile enet3-port-profile enet4-port-profile event-thresholds-profile ids-profile mesh-cluster-profile priority mesh-radio-profile
Parameter Description Range Default dot11g-traffic-mgmtprofile Configures bandwidth allocation. See "wlan trafficmanagement-profile" on page 1508. — — enet0-port-profile Configures the duplex and speed of the Ethernet interface 0 on the AP. For information on how these profiles are defined, see "ap wired-port-profile" on page 165. — “default” enet1-port-profile Configures the duplex and speed of the Ethernet interface 1 on the AP.
Parameter Description Range Default rf-optimization-profile Configure coverage hole and interference detection. See "rf optimization-profile" on page 540. — “default” virtual-ap One or more profiles, each of which configures a specified WLAN. See "wlan virtual-ap" on page 1512. — “default” voip-cac-profile Configures voice over IP (VoIP) call admission control (CAC) options. See "wlan voip-cac-profile" on page 1520. This parameter requires the PEFNG license.
ap-leds ap-leds {all | ap-group | ap-name | ip-addr | wired-mac } {global blink|normal}|{local blink|normal} Description This command allows you to set the behavior of an AP’s LEDs.
Command Information 106 | ap-leds Platforms Licensing Command Mode Available on all platforms Base operating system Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
ap-name ap-name ap-system-profile authorization-profile clone dot11a-radio-profile dot11a-traffic-mgmt-profile dot11g-radio-profile dot11g-traffic-mgmt-profile enet0-profile enet1-profile event-thresholds-profile exclude-mesh-cluster-profile-ap exclude-virtual-ap ids-profile mesh-cluster-profile priority mesh-radio-profile no ...
Parameter Description Default mgmt-profile profile" on page 1508. enet0-profile Configures the duplex and speed of the Ethernet 0 interface on the AP. See "ap enet-link-profile" on page 119. “default” enet1-profile Configures the duplex and speed of the Ethernet 1 interface on the AP. See "ap enet-link-profile" on page 119. “default” event-thresholds-profile Configures Received Signal Strength Indication (RSSI) metrics. See "rf event-thresholds-profile" on page 535.
profile are used. There is no merging of individual parameters between the AP and the AP group to which the AP belongs. Example The following command excludes a virtual AP profile from a specific AP: (host) (config) #ap-name 00:0b:86:c0:cf:d8 exclude-virtual-ap corpnet Related Commands View AP settings using the command show ap-name. Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.2 Support for mesh parameters was introduced. ArubaOS 3.4.
ap-regroup ap-regroup {ap-name |serial-num |wired-mac } Description This command moves a specified AP into a group. Syntax Parameter Description Default ap-name Name of the AP. — serial-num Serial number of the AP. — wired-mac MAC address of the AP. — Name that identifies the AP group. The name must be 1-63 characters. “default” Usage Guidelines All APs discovered by the controller are assigned to the “default” AP group.
ap-rename ap-rename {ap-name |serial-num |wired-mac } Description This command changes the name of an AP to the specified new name. Syntax Parameter Description ap-name Current name of the AP. serial-num Serial number of the AP. wired-mac MAC address of the AP. New name for the AP. The name must be 1-63 characters. NOTE: You cannot use quotes (“) in the AP name. Usage Guidelines An AP name must be unique within your network.
ap authorization-profile ap authorization-profile authorization-group Description This command defines a temporary configuration profile for remote APs that are not yet authorized on the network. Syntax Parameter Description Range Default authorization-profile Name of this instance of the profile. The name must be 1-63 characters. — “default” authorization-group Name of a configuration profile to be assigned to the group unauthorized remote APs.
apboot apboot {all [global|local]|ap-group [global|local]|ap-name |ip-addr |wired-mac } Description This command reboots the specified APs. Syntax Parameter Description Default all Reboot all APs. all global Reboot APs on all controllers. global local Reboot only APs registered on this controller. This is the default. local ap-group Reboot APs in a specified group. ap-group global Reboot APs on all controllers.
apconnect apconnect {ap-name |bssid |ip-addr } parent-bssid Description This command instructs a mesh point to disconnect from its current parent and connect to a new parent. Syntax Parameter Description ap-name Specify the name of the mesh point to be connected to a new parent. bssid Specific the BSSID of the mesh point to be connected to a new parent. ip-addr Specific the IP address of the mesh point to be connected to a new parent.
apdisconnect apdisconnect {ap-name |bssid |ip-addr } Description This command disconnects a mesh point from its parent. Syntax Parameter Description ap-name Specifies the name of the parent AP. bssid Specifies the BSSID of the parent AP. ip-addr Specifies the IP address of the parent AP. Usage Guidelines Each mesh point learns about the mesh portal from its parent (a mesh node that is part of the path to the mesh portal).
apflash [deprecated] apflash all|{ap-group }|{ap-name }|{ip-addr }|{wired-mac } global|local [backup-partition] [server ] Description This command reflashes the specified AP. Starting with ArubaOS 6.1, this command can only be run by Dell Technical Support or users in support mode. Command History Version Description ArubaOS 3.0 Command introduced ArubaOS 6.0 The global and local parameters were introduced. ArubaOS 6.
Parameter Description Range Default events Classification of event type to capture. — — all All events in radio. — — ani Adaptive Noise Immunity control event in radio. — — hex Hex format of event. — — rcfind Tx rate control event in radio. — — rcupdate Tx Rate update event in radio. — — rx Rx status register event in radio. — — text Text record event in radio. — — tx Tx control and Tx status register event in radio. — — Specify the event in hexadecimal format.
Syntax Parameter Description ap-name Name of Access Point ip-addr Collect radio register information for this specific AP radio. ip6-addr Collect radio register information for the spectrum monitor assigned to this ipv6 address. filename Name of file where information is collected. all All registers interrupted. interrupt Interrupt related registers. qcu Collect QCU information.
ap enet-link-profile ap enet-link-profile clone dot3az duplex {auto|full|half} no ... speed {10|100|1000|auto} Description This command configures an AP Ethernet link profile. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters. — “default” clone Name of an existing Ethernet Link profile from which parameter values are copied. — — dot3az Enable support for the 803.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3 Support for 1000 Mbps (1 Gbps) Ethernet port speed was introduced. ArubaOS 6.2 Support for the dot3az parameter was introduced. Command Information Platforms Licensing Command Mode Available on all platforms Base operating system Config mode on master controllers 120 | ap enet-link-profile Dell PowerConnect W-Series ArubaOS 6.
ap lldp med-network-policy-profile ap lldp med-network-policy-profile application-type guest-voice|guest-voice-signaling|softphone-voice|streaming-video|videoconferencing|video-signaling|voice|voice-signaling clone dscp l2-priority no ... tagged vlan Description Define an LLDP MED network policy profile that defines DSCP values and L2 priority levels for a voice or video application.
Parameter Description Range Use this application type if the AP is part of a network that requires a different policy for voice signaling than for the voice media. Do not use this application type if both the same network policies apply to both voice and voice signaling traffic. - clone Make a copy of an existing profile by specifying that profile name.
(host) (AP wired port profile "corp2")lldp-profile video1 Command History This command was introduced in ArubaOS 6.2. Command Information Platforms Licensing Command Mode Available on all platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
ap lldp profile ap lldp profile clone dot1-tlvs port-vlan|vlan-name dot3-tlvs link-aggregation|mac|mfs|power lldp-med-network-policy-profile lldp-med-tlvs capabilities|inventory|network-policy no ...
Parameter Description lldp-med-tlvs Specify which of the following LLDP-MED TLVs the AP will send in LLDP PDUs. The AP will not send any LLDP-MED TLVs by default. capabilities Transmit the LLDP-MED capabilities TLV. The AP will automatically send this TLV if any of the other LLDP-MED TLVs are enabled. inventory Transmit the LLDP-MED inventory TLV. NOTE: An AP can’t send this TLV unless it also sends the LLDP-MED capabilities TLV. network-policy Transmit the LLDP-MED network-policy TLV.
Example The following command configures an LLDP profile allows the AP interface to send the port-vlan and vlan-name TLVs. ap lldp profile 8021TLVs dot1-tlvs port-vlan dot1-tlvs vlan-name Command History This command was introduced in ArubaOS 6.2. Command Information Platforms Licensing Command Mode Available on all platforms Base operating system Config mode on master controllers 126 | ap lldp profile Dell PowerConnect W-Series ArubaOS 6.
ap mesh-cluster-profile ap mesh-cluster-profile clone cluster no ... opmode [opensystem | wpa2-psk-aes] rf-band {a | g} wpa-hexkey wpa-passphrase Description This command configures a mesh cluster profile used by mesh nodes. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 163 characters.
Usage Guidelines Mesh cluster profiles are specific to mesh nodes (APs configured for mesh) and provide the framework of the mesh network. You must define and configure the mesh cluster profile before configuring an AP to operate as a mesh node. You can configure multiple mesh cluster profiles to be used within a mesh cluster. You must configure different priority levels for each mesh cluster profile. See ap-group or ap-name for more information about priorities.
ap mesh-ht-ssid-profile ap mesh-ht-ssid-profile 40MHz-enableba-amsdu-enable clone high-throughput-enable ldpc legacy-stations max-rx-a-mpdu-size max-tx-a-mpdu-size min-mpdu-start-spacing mpdu-agg no short-guard-intvl-20Mhz short-guard-intvl-40Mhz stbc-rx-streams stbc-tx-streams supported-mcs-set txbf-comp-steering txbf-delayed-feedback txbf-explicit-enable txbf-immediate-feedback txbf-noncomp-steering txbf-sounding-interval Description This command configures a mesh high-throughput
Parameter Description Range Default background noise. legacy-stations Allow or disallow associations from legacy (non-HT) stations. By default, this parameter is enabled (legacy stations are allowed). max-tx-a-mpdu-size Maximum size of a transmitted aggregate MPDU, in bytes. 1576 -65535 max-rx-a-mpdu-size Maximum size of a received aggregate MPDU, in bytes. 8191, 16383, 32767, 65535 min-mpdu-startspacing Minimum time between the start of adjacent MPDUs within an aggregate MPDU, in microseconds.
Parameter Description Range Default 400ns (short) and 800ns (long). Enabling a short guard interval can decrease network overhead by reducing unnecessary idle time on each AP. Some outdoor deployments, may, however require a longer guard interval. If the short guard interval does not allow enough time for reflections to settle in your mesh deployment, inter-symbol interference values may increase and degrade throughput. This parameter is enabled by default.
Related Commands To view a complete list of mesh high-throughput SSID profiles and their status, use the following command: (host) (config) #show ap mesh-ht-ssid-profile To view the settings of a specific mesh radio profile, use the following command: (host) (config) #show ap mesh-ht-ssid-profile Command History Version Description ArubaOS 3.4 Command introduced ArubaOS 6.1 The short-guard-intvl-20Mhz, ldpc, stbc-rx-streams and stbc-rx-streams parameters were introduced.
ap mesh-radio-profile ap mesh-radio-profile a-tx rates [6|9|12|18|24|36|48|54] allowed-vlans children clone eapol-rate-opt g-tx rates [1|2|5|6|9|11|12|18|24|36|48|54] heartbeat-threshold hop-count link-threshold max-retries mesh-ht-ssid-profile mesh-mcast-opt mesh-survivability metric-algorithm {best-link-rssi|distributed-tree-rssi} mpv no ...
Parameter Description Range Default The AP attempts to use the highest transmission rate to establish a mesh link. If a rate is unavailable, the AP goes through the list and uses the next highest rate. 12, 18, 24, 36, 48, 54 12, 18, 24, 36, 48, 54 Mbps heartbeatthreshold Indicates the maximum number of heartbeat messages that can be lost between neighboring mesh nodes. 1-255 10 hop-count Indicates the maximum hop count from the mesh portal.
Parameter Description Range Default mpv This parameter is experimental and reserved for future use. 0-4094 0 (disabled) no Negates any configured parameter. — — reselection-mode Specifies the method used to find a better mesh link. Best practices are to use the default value startupsubthreshold.
Parameter Description Range Default 256-2,346 2,333 bytes distant parent because its original, closer parent falls below the acceptable threshold, then as long as that mesh point is connected to that more distant parent, it will seek to reselect a parent at the earlier distance (or less) with good link quality.
Release Modification ArubaOS 3.3.2 The mesh-mcast-opt parameter was introduced. ArubaOS 3.4 The mesh-ht-ssid-profile parameter was introduced The 11a-portal-channel, 11g-portal-channel, beacon-period and tx-power parameters were deprecated. These settings can now be configured via the rf dot11a-radio-profile and rf dot11g-radio-profile commands. ArubaOS 6.1 The eapol-rate-opt parameter was introduced.
ap provisioning-profile ap provisioning-profile apdot1x-passwd apdot1x-username clone cellular_nw_preference g-only|4g-only|advanced|auto link-priority-cellular link-priority-ethernet master clear|{set } no pppoe-passwd pppoe-service-name pppoe-user remote-ap reprovision uplink-vlan usb-dev usb-dial usb-init usb-modeswitch "-v -p -V -P -M " usb-passwd usb-power-mode auto|enable|disable us
Parameter Description Range Default cellular_nw_preference g-only|4g-only| advanced|auto The Cellular Network Preference setting introduced in ArubaOS 6.2.1.0 allows you to select how the modem should operate. Change the FQDN or IP address for the master controller. — — set Specify the or IP address or FQDN for the master controller. — — clear Clear the definition for the master controller in this profile. — — no Negates any configured parameter.
Parameter Description Range port in trunk mode, the AP sends and receives frames tagged with this VLAN on its Ethernet uplink. By default, an AP has an uplink vlan of 0, which disables this feature. NOTE: If an AP is provisioned with an uplink VLAN, it must be connected to a trunk mode port or the AP’s frames will be dropped. disabled) to 4095 usb-dev The USB device identifier. — — usb-dial The dial string for the USB modem.
Usage Guidelines The AP provisioning profile allows you to define a set of provisioning parameters to an AP group. These settings can be saved or assigned to an AP group via the command ap-group provisioning-profile . In order to enable cellular uplink for a remote AP (RAP), the RAP must have the device driver for the USB data card and the correct configuration parameters.
Release Modification l 4g-usb-type The cellular_nw_preference parameter was introduced for provisioning multi-mode modems, and the 4g-usb-type parameter was deprecated. Specify a 2/3G or 4G modem type using the usb-type parameter. ArubaOS 6.2.1.
Parameter Description l l l l l 0 : pcap 1 : peek 2 : airmagnet 3 : pcap+radio header 4 : ppi channel (Optional/Applicable only in Air Monitor mode) Number of a radio channel to tune into to capture packets. maxlen (Optional) Limit the length of 802.11 frames to include in the capture to a specified maximum. interactive Start an interactive packet capture session between an AP and a client running a packet analyzer. Packet Capture filter specification.
(type eq beacon) or ((sta eq 000000010203) and (dir eq tods)) (type == data) && ((sta = 000000010203) || (sta == 000000010203)) (type != beacon) (wep nq 1) (type eq all) Examples The following command starts a raw packet capture session for the AP ly115 on radio 0, and sends the packets to the client at 10.64.102.4 on port 5000. (host) (config) #ap packet-capture raw-start ap-name ly115 10.64.102.
Command Information Platforms Licensing Command Mode All platforms Base operating system Works in Access Point, Air Monitor, and Spectrum Monitor modes on all AP models in enable mode. Dell PowerConnect W-Series ArubaOS 6.
ap regulatory-domain-profile ap regulatory-domain-profile clone country-code no ... valid-11a-40mhz-channel-pair valid-11a-channel valid-11g-40mhz-channel-pair valid-11g-channel Description This command configures an AP regulatory domain profile. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters.
Parameter valid-11gchannel Description Range Default 1-5 2-6 7-11 for the country. Enter a single 802.11g channel number for 20 MHz operation within the specified regulatory domain. country code determines supported channels Note: Changing the country code causes the valid channel lists to be reset to the defaults for the country. Usage Guidelines This profile configures the country code and valid channels for operation of APs.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3 Support for the IEEE 802.11n standard, including channel pairs for 40 MHz mode of operation, was introduced ArubaOS 5.0 The valid-11a-40mhz-channel-pair and valid-11g-40mhz-channel-pair parameters no longer support the + and - parameters that allowed you to define a primary and backup channel within the channel pair.
ap remove-r1-key ap remove-r1-key [ap-name | bssid | ip-addr ] Description This command removes the r1 key from an AP. Syntax Parameter Description MAC address of the client. ap-name Name of the AP. bssid BSSID of the AP. ip-addr IP address of the AP. Usage Guidelines Use this command to remove an r1 key from an AP when the AP does not have a cached r1 key during Fast BSS Transition roaming.
ap snmp-profile (deprecated) Description This command configures an SNMP profile for APs. Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 3.4 Command deprecated 150 | ap snmp-profile (deprecated) Dell PowerConnect W-Series ArubaOS 6.
ap snmp-user-profile (deprecated) ap snmp-user-profile auth-passwd auth-prot {md5|none|sha} clone no ... priv-passwd user-name Description This command configures an SNMPv3 user profile for APs. Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 3.4 Command deprecated Dell PowerConnect W-Series ArubaOS 6.
ap spectrum clear-webui-view-settings ap spectrum clear-webui-view-settings Description Clear a saved spectrum dashboard view. Syntax no parameters Usage Guidelines Saved spectrum view preferences may not be backwards compatible with the spectrum analysis dashboard in earlier versions of ArubaOS.
ap spectrum local-override no override ap-name spectrum-band 2ghz|5ghz Description Convert an AP or AM into a spectrum monitor by adding it to the spectrum local-override list. Syntax Parameter Description Range Default override ap-name name of an AP whose radio should be converted to a spectrum monitor radio — — spectrum band Spectrum band or portion of the band to be monitored by the spectrum monitor radio 2GHz (channels 1-14) 5GHz(channels 36-64, 100-140 and 149-165).
Command Information Platforms Licensing Command Mode All platforms RF Protect license Config mode on master controllers 154 | ap spectrum local-override Dell PowerConnect W-Series ArubaOS 6.
ap system-profile ap system-profile aeroscout-rtls-server ip-addr port [include-unassoc-sta] am-scan-rf-band [a | g | all] bkup-lms-ip bkup-lms-ipv6 bootstrap-threshold clone dns-domain double-encrypt dump-server heartbeat-dscp led-mode normal|off lms-hold-down-period lms-ip lms-ipv6 lms-preemption maintenance-mode max-request-retries mtu native-vlan-id no ...
Parameter Description Range Default aeroscout-rtlsserver Enables the AP to send RFID tag information to an AeroScout real-time asset location (RTLS) server. — — am-scan-rf-band Scanning band for multiple RF radios a, g, all all a Set the scanning band to 802.11a only — all g Set the scanning band to 802.11g only — all all Set the scanning band to apply to all bands — all ip-addr IP address of the AeroScout server to which location reports are sent.
Parameter Description led-mode The operating mode for the AP LEDs. This option is available on all 802.11n indoor AP platforms. normal Display LEDs in normal mode. off Turn off all LEDs. Range Default normal lms-hold-downperiod Time, in seconds, that the primary LMS must be available before an AP returns to that LMS after failover.
Parameter Description Range Default mtu MTU, in bytes, on the wired link for the AP. 1024-1578 — native-vlan-id Native VLAN for bridge mode virtual APs (frames on the native VLAN are not tagged with 802.1q tags). — 1 no Negates any configured parameter. — — number-ipsec-retries The number of times the AP will attempt to recreate an IPsec tunnel with the master controller before the AP will reboot. A value of 0 disables the reboot.
Parameter Description Range Default rf-band For APs that support both a and b/g RF bands, RF band in which the AP should operate: l g = 2.4 GHz l a = 5 GHz a/g g rtls-server Enables the AP to send RFID tag information to an RTLS server. — — ip-addr IP address of the server to which location reports are sent. — — port Port number on the server to which location reports are sent. — — key Shared secret key.
Command Information Platforms Licensing Command Mode All platforms Base operating system, except for noted parameters Config mode on master controllers 160 | ap system-profile Dell PowerConnect W-Series ArubaOS 6.
ap wipe out flash ap wipe out flash ap-name ip-addr Description Overwrite the entire AP compact flash, destroying its contents (including the current image file). Syntax Parameter Description Range Default ap-name Wipe out the flash of the AP with the specified name. — — ip-addr Wipe out the flash of the AP with the specified IP address. — — Usage Guidelines Use this command only under the supervision of Dell technical support.
ap wired-ap-profile ap wired-ap-profile broadcast clone forward-mode {bridge|split-tunnel|tunnel} no ... switchport access vlan | {mode access|trunk} |trunk {allowed vlan | add | except | remove }| native vlan trusted wired-ap-enable Description This command configures a wired AP profile. Syntax Parameter Description Name of this instance of the profile. The name must be 1-63 characters.
Parameter Description switchport Configures the switching mode characteristics for the port. access The VLAN to which the port belongs. The default is VLAN 1. mode The mode for the port, either access or trunk mode. The default is access mode. trunk allowed Allows multiple VLANs on the port interface. You must define this parameter using VLAN IDs or VLAN names VLAN IDs and VLAN names cannot be listed together.
Command Information Platforms Licensing Command Mode All platforms Base operating system, except for noted parameters Config mode on master controllers 164 | ap wired-ap-profile Dell PowerConnect W-Series ArubaOS 6.
ap wired-port-profile ap wired-port-profile aaa-profile authentication-timeout clone enet-link-profile lldp-profile no rap-backup shutdown wired-ap-profile Description This command configures a wired port profile. Syntax Parameter Description aaa-profile Name of a AAA profile to be used by devices connecting to the AP’s wired port.
Example The following command defines a AAA profile for wired port devices: (host) (config) #ap wired-port-profile wiredport1 aaa-profile default-open authentication-timeout 30 wired-ap-profile wiredap1 Command History This command was introduced in ArubaOS 6.0. Command Information Platforms Licensing Command Mode All platforms Base operating system, except for noted parameters Config mode on master controllers 166 | ap wired-port-profile Dell PowerConnect W-Series ArubaOS 6.
arp arp Description This command adds a static Address Resolution Protocol (ARP) entry. Syntax Parameter Description IP address of the device to be added. Hardware address of the device to be added, in the format xx:xx:xx:xx:xx:xx. Usage Guidelines If the IP address does not belong to a valid IP subnetwork, the ARP entry is not added.
audit-trail audit-trail [all] Description This command enables an audit trail. Syntax Parameter Description all Enables audit trail for all commands, including enable mode commands. The audit-trail command without this option enables audit trail for all commands in configuration mode. Usage Guidelines By default, audit trail is enabled for all commands in configuration mode. Use the show audit-trail command to display the content of the audit trail.
backup backup {flash|pcmcia} Description This command backs up compressed critical files in flash. Syntax Parameter Description flash Backs up flash directories to flashbackup.tar.gz file. pcmcia Backs up flash images to external PCMCIA flash card. This option can only be executed on controllers that have a PCMCIA slot. Usage Guidelines Use the restore flash command to untar and uncompress the flashbackup.tar.gz file. Example The following command backs up flash directories to the flashbackup.tar.
banner motd banner motd Description This command defines a text banner to be displayed at the login prompt when a user accesses the controller. Syntax Parameter Description Range Indicates the beginning and end of the banner text. — The text you want displayed. up to 1023 characters Usage Guidelines The banner you define is displayed at the login prompt to the controller. The banner is specific to the controller on which you configure it.
Welcome to my controller. This controller is in the production network, so please do not save configuration changes. Zach Jennings is awesome. Maintenance will be performed at 7:30 PM, so please log off before 7:00 PM. Command History This command was introduced in ArubaOS 1.0 Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
boot boot cf-test [fast | read-only | read-write] config-file remote-node [all|ip-address
The following command uses system partition 1 the next time the controller boots: boot system partition 1 Command History Modification ArubaOS 1.0 Introduced for the first time. ArubaOS 6.0 The remote-node parameter was introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
cellular profile cellular profile dialer driver acm|hso|option|sierra import modeswitch {eject }|rezero no priority <1-255> serial tty user password vendor product Description Create new profiles to support new USB modems or to customize USB characteristics. Syntax Parameter Description cellular profile Enter the keywords cellular profile followed by your profile name.
Parameter Description serial Enter the keyword serial followed by the USB device serial number tty Enter the keyword tty followed by the Modem TTY port (i.e. ttyUSB0, ttyACM0) user password Enter the keyword user followed by your login, and then enter the keyword password followed by your password to establish user name authentication.
cfgm cfgm {mms config {enable|disable}|set config-chunk |set heartbeat |set maximum-updates |snapshot-timer |sync-command-blocks |synctypecomplete|sync-type snapshot} Description This command configures the configuration module on the master controller.
Command History This command was introduced in ArubaOS 3.1. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
clear clear aaa acl ap arp counters crypto datapath dot1x fault gab-db ip ipc ipv6 loginsession master-local-entry master-local-session port provisioning-ap-list provisioning-params rap-wml update-counter voice vpdn wms Description This command clears various user-configured values from your running configuration. Syntax Parameter Description aaa Clear all values associated with authentication profile.
Parameter Description ap Clear all AP related information. arm Clear information on AP. mesh Clear all mesh commands. port Toggle the link on the specified port. remote Clear all information related to remote configuration. arp Clear all ARP table information. You can either clear all information or enter the IP address of the ARP entry to clear a specific value. counters Clear all interface configuration values. fastethernet Clears configuration related to fastethernet ports.
Parameter Description l 180 | clear wired-mac ip Clears all IP information from DHCP bindings, IGMP groups and IP mobility configuration. Use the following parameters: l dhcp l igmp l mobile ipc Clears all inter process communication statistics. ipv6 Clears all IPv6 session statistics, multicast listener discovery (MLD) group and member information, MLD statistics, and counters.
Usage Guidelines The clear command will clear the specified parameters of their current values. Example The following command clears all aaa counters for all authentication servers: (host) (config) #clear aaa authentication-server all Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.
clear wms wired-mac clear wms wired-mac [ all | gw-mac | monitored-ap-wm | prop-eth-mac | regap-oui | system-gw-mac | system-wired-mac | wireless-device ] Description Clear learned and collected Wired MAC information. Optionally, enter the MAC address, in nn:nn:nn:nn:nn:nn format, of the AP that has seen the Wired Mac. Syntax Description all Clear all the learned and collected wired Mac information.
clock append clock clock append Description This command enables the timestamp feature, adding a date and time to the output of show commands. Syntax No parameters. Usage Guidelines When you enable the timestamp feature, the command-line interface includes a timestamp in the output of each show command indicating when the show command was issued. Note that the output of show clock and show log do not include timestamps, even when this feature is enabled.
clock set clock clock set
clock summer-time recurring clock summer-time [recurring] <1-4> first last <1-4> first last [<-23 - 23>] Description Set the software clock to begin and end daylight savings time on a recurring basis. Syntax Parameter Description Range WORD Enter the abbreviation for your time zone.
Example The following example sets daylight savings time to occur starting at 2:00 AM on Sunday in the second week of March, and ending at 2:00 AM on Sunday in the first week of November. The example also sets the name of the time zone to PST with an offset of UTC - 8 hours. clock summer-time PST recurring 2 Sun Mar 2:00 first Sun Nov 3:00 -8 Command History This command was introduced in ArubaOS 1.
clock timezone clock timezone <-23 to 23> Description This command sets the time zone on the controller. Syntax Parameter Description Range Name of the time zone. 3-5 characters -23 to 23 Hours offset from UTC. -23 to 23 Usage Guidelines The name parameter can be any alphanumeric string, but cannot start with a colon (:). A time zone name longer than five characters is not accepted.
cluster-member-custom-cert cluster-member-custom-cert member-mac ca-cert server-cert suite-b ] Description This command sets the controller as a control plane security cluster root, and specifies a custom user-installed certificate for authenticating cluster members.
Related Commands Parameter Description Mode control-plane-security Configure the control plane security profile. Config mode show cluster-config Show the multi-master cluster configuration for the control plane security feature. Enable mode show cluster-switches Issue this command on a master controller using control plane security in a multi-master environment to show other the other controllers to which it is connected. Enable mode Command History. Introduced in ArubaOS 6.1.
cluster-member-factory-cert cluster-member-factory-cert member-mac Description This command sets the controller as a control plane security cluster root, and specifies a custom user-installed certificate for authenticating cluster members.
Command History Introduced in ArubaOS 6.1. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on cluster root controllers Dell PowerConnect W-Series ArubaOS 6.
cluster-member-ip cluster-member-ip ipsec Description This command sets the controller as a control plane security cluster root, and specifies the IPsec key for a cluster member. Syntax Parameter Description Switch IP address of a control plane security cluster member. You can also use the IP address 0.0.0.0 to set a single IPsec key for all cluster members.
Parameter Description Mode show cluster-config Show the multi-master cluster configuration for the control plane security feature. Enable mode show cluster-switches Issue this command on a master controller using control plane security in a multi-master environment to show other the other controllers to which it is connected. Enable mode Command History Introduced in ArubaOS 5.0.
cluster-root-ip cluster-root-ip ipsec ipsec-custom-cert root-mac1 [root-mac2 ] ca-cert server-cert [suite-b ] ipsec-factory-cert root-mac-1 [root-mac-1 ] Description This command sets the controller as a control plane security cluster member, and defines the IPsec key or certificate for secure communication between the cluster member and the controller’s cluster root.
The master controller operating as the cluster root will use the control plane security feature to create a self-signed certificate, then certify it’s own local controllers and APs. Next, the cluster root will send the certificate to each cluster member, which in turn certifies their own local controllers and APs.
configure terminal configure terminal Description This command allows you to enter configuration commands. Syntax No parameters. Usage Guidelines Upon entering this command, the enable mode prompt changes to: (host) (config) # To return to enable mode, enter Ctrl-Z or exit. Example The following command allows you to enter configuration commands: (host) # configure terminal Command History This command was introduced in ArubaOS 3.0.
control-plane-security control-plane-security auto-cert-allow-all auto-cert-allowed-addrs auto-cert-prov cpsec-enable no ... Description Configure the control plane security profile by identifying APs to receive security certificates. Syntax Parameter Description auto-cert-allow-all When you issue the control-plane-security auto-cert-allowall command, the controller will send a certificate to all associated APs when auto certificate provisioning is enabled.
auto-cert-allowed-addrs 10.21.18.10 10.21.10.90 cpsec-enable Related Commands Command Description Mode show control-plane-security Show the current configuration of the control plane security profile. Config mode Command History This command was introduced in ArubaOS 5.0. Command Information Platforms Licensing Command Mode All platforms Base operating system. Config mode on master or local controllers 198 | control-plane-security Dell PowerConnect W-Series ArubaOS 6.
controller-ip controller-ip [loopback|vlan ] no ... Description This command sets the controller IP to the loopback interface address or a specific VLAN interface address. Syntax Parameter Description Default loopback Sets the controller IP to the loopback interface. disabled vlan Set the controller IP to a VLAN interface. — Specifies the VLAN interface ID.
controller-ipv6 controller-ipv6 [loopback|vlan ] no ... Description This command sets the default IPv6 address of the controller to the IPv6 loopback interface address or a specific VLAN interface address. Syntax Parameter Description Default loopback Sets the controller IP to the loopback interface. disabled vlan Set the controller IP to a VLAN interface. — Specifies the VLAN interface ID.
copy copy flash: {flash: | scp: tftp: | usb: partition {0|1} } ftp: system: partition {0|1} | running-config {flash: | ftp: [] | startup-config | tftp: } | scp: {flash: | system: partition [0|1]}| startup-config {flash: | tftp:
| copy Parameter Description ftp: Using FTP, copy the configuration to an FTP server. ftphost Specify the IP address of the FTP server. user User account name required to access the FTP server. password Password required to access the FTP server. remote-dir Specify a remote directory, if needed. startup-config Copy the active, running configuration to the start-up configuration.
Parameter Description destfilename Specify the new name of the copied file. system Copy the file to the system partition. usb: Copy a file from an attached USB device to the flash file system. partition Specify the partition on the USB device. filename Full name of the file to be copied. flash: Copy the file to the flash file system destfilename Specify the new name of the copied file.
Command Information 204 | copy Platforms Licensing Command Mode All platforms Base operating system Enable and Config modes on master controllers Dell PowerConnect W-Series ArubaOS 6.
cp-bandwidth-contract cp-bandwidth-contract {mbits <1..2000>}|{kbits <256..2000000>} Description This command configures a bandwidth contract traffic rate which can then be associated with a whitelist session ACL. Syntax Parameter Description Name of a bandwidth contract. mbits <1..2000> Set a bandwidth rate inn mbits/seconds. kbits <256..2000000> Set a bandwidth rate in kbits/seconds.
crypto-local ipsec sa-cleanup crypto-local ipsec sa-cleanup Description Issue this command to clean IPsec security associations (SAs). Syntax No parameters Usage Guidelines Use this command to remove old IPsec security associations if remote APs on your network still use an old SA after upgrading to a newer version of ArubaOS. Command History This command was introduced in ArubaOS 6.1.
crypto dynamic-map crypto dynamic-map no ... set pfs {group1|group2|group19|group20} set security-association lifetime seconds set transform-set [] [] [] version v1|v2 Description This command configures a new or existing dynamic map. Syntax Parameter Description Range Default Name of the map. — — Priority of the map. 1-10000 10000 no Negates a configured parameter.
Parameter Description Range Default 384-bit random Diffie Hellman ECP modulus group. set security-association lifetime seconds Configures the lifetime, in seconds, for the security association (SA). 300-86400 no limit set transform-set Name of the transform set for this dynamic map. You can specify up to four transform sets. You configure transform sets with the crypto ipsec transform-set command.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 The version parameter was introduced. The pfs parameter was modified to support the group19 and group20 PFS group values. Command Information Platforms Licensing Command Mode All platforms The group19 and group20 PFS options requires the Advanced Cryptography (ACR) license. All other parameters are available in the base operating system. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
crypto ipsec crypto ipsec mtu transform-set esp-3des|esp-aes128|esp-aes128-gcm|esp-aes192|espaes256|esp-aes256-gcm|esp-des esp-md5-hmac|esp-null-hmac|esp-sha-hmac} Description This command configures IPsec parameters. Syntax Parameter Description mtu Configure the IPsec Maximum Transmission Unit (MTU) size. The supported range is 1024 to 1500 and the default is 1500. transform-set Create or modify a transform set.
Command History Release Modification ArubaOS 3.0 Command introduced. ArubaOS 6.1 The esp-aes128-gcm and esp-aes256-gcm transform-set parameters were introduced. Command Information Platforms Licensing Command Mode All platforms The esp-aes128-gcm and esp-aes56-gcm transform-set parameters require the Advanced Cryptography (ACR) license. All other parameters are available in the base OS. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
crypto isakmp crypto isakmp address netmask } disable eap-passthrough eap-mschapv2|eap-peap|eap-tls enable groupname key address netmask udpencap-behind-natdevice enable|disable packet-dump Description This command configures Internet Key Exchange (IKE) parameters for the Internet Security Association and Key Management Protocol (ISAKMP). Syntax Parameter Description address Configure the IP address for the group key.
Parameter udpencap-behindnatdevice Description A subnet mask, in dotted-decimal format Configure NAT-T if controller is behind NAT device. (For Windows VPN Dialer only) enable Enable Nat-T. This is the recommended setting if the controller is behind a NAT device. disable Disable Nat-T. packet-dump Issue this command in enable mode to troubleshoot an IPsec tunnel establishment by looking at the packet exchanges between the controller and the remote AP or the other IPsec peer.
crypto isakmp policy crypto isakmp policy authentication pre-share|rsa-sig|ecdsa-256|ecdsa-384 encryption 3DES|AES128|AES192|AES256|DES group 1|2|19|20 hash md5|sha|sha1-96|sha2-256-128|sha2-384-192 prf PRF-HMAC-MD5|PRF-HMAC-SHA1|PRF-HMAC-SHA256|PRF-HMAC-SHA384 lifetime version v1|v2 Description This command configures Internet Key Exchange (IKE) policy parameters for the Internet Security Association and Key Management Protocol (ISAKMP).
Parameter 20 Description Use the 384-bit random Diffie Hellman ECP modulus group hash md5 Use MD5 as the hash algorithm. sha Use SHA-1 as the hash algorithm. This is the default policy algorithm. SHA1-96 Use SHA1-96 as the hash algorithm. SHA2-256-128 Use SHA2-256-128 as the hash algorithm. SHA2-384-192 Use SHA2-384-192 as the hash algorithm.
Command Information Platforms Licensing Command Mode All platforms The following settings require the Advanced Cryptogram (ACR) license: l hash algorithm: SHA-256-128, SHA-384-192 l Diffie-Hellman (DH) Groups: 19 and 20 l Pseudo-Random Function (PRF): PRF-HMAC-SHA256, PRF-HMAC-SHA384 l Authentication: ecdsa-256 and ecdsa-384 Config mode on master controllers All other parameters are supported in the base OS. 216 | crypto isakmp policy Dell PowerConnect W-Series ArubaOS 6.
crypto-local ipsec-map crypto-local crypto-local ipsec-map
Parameter Description RangDefault e to-site VPN to a statically addressed remote peer, identify the peer device by enteringIP address of the peer gateway. NOTE: If you are configuring an IPsec map for a static-ip controller with a dynamically addressed remote peer, you must leave the peer gateway set to its default value of 0.0.0.0. peer-fqdn For site-to-site VPNs with dynamically addressed peers, specify a fully qualified domain name (FQDN) for the controller.
RangDefault e Parameter Description set server-certificate User-defined name of a server certificate installed in the controller. Use the show crypto-local pki ServerCert command to display the server certificates that have been imported into the controller. — — set transform-set Name of the transform set for this IPsec map. One transform set name is required, but you can specify up to four transform sets. Configure transform sets with the crypto ipsec transform-set command.
src-net 100.1.1.0 255.255.255.0 dst-net 101.1.1.0 255.255.255.0 peer-ip 172.16.100.
Command Information Platforms Licensing Command Mode All platforms The group19 and group20 PFS options requires the Advanced Cryptography (ACR) license. All other parameters are available in the base operating system. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
crypto-local isakmp ca-certificate crypto-local isakmp ca-certificate Description This command assigns the Certificate Authority (CA) certificate used to authenticate VPN clients. Syntax Parameter Description ca-certificate User-defined name of a trusted CA certificate installed in the controller. Use the show crypto-local pki TrustedCA command to display the CA certificates that have been imported into the controller. Usage Guidelines You can assign multiple CA certificates.
crypto-local isakmp certificate-group crypto-local isakmp certificate-group server-certificate ca-certificate Description The command configures an IKE Certificate Group for VPN Clients. Syntax Default Parameter Description Range server-certificate The IKE server certificate name for VPN clients. 1-64 characters — ca-certificate The IKE CA Certificate for this server certificate.
crypto-local isakmp dpd crypto-local isakmp dpd idle-timeout retry-timeout retry-attempts Description This command configures IKE Dead Peer Detection (DPD) on the local controller. Syntax Parameter Description Range Default idle-timeout Idle timeout, in seconds. 10-3600 22 seconds retry-timeout Retry interval, in seconds. 2-60 2 seconds retry-attempts Number of retry attempts.
crypto-local isakmp key crypto-local isakmp key {address netmask }|{fqdn } |fqdn-any Description This command configures the IKE preshared key on the local controller for site-to-site VPN. Syntax Parameter Description key IKE preshared key value, between 6-64 characters. address IP address for the preshared key. netmask Netmask for the preshared key. fqdn Configure the PSK for the specified FQDN.
crypto-local isakmp permit-invalid-cert crypto-local isakmp permit-invalid-cert Description This command allows invalid or expired certificates to be used for site-to-site VPN. Syntax No parameters. Usage Guidelines This command allows invalid or expired certificates to be used for site-to-site VPN. Command History This command was introduced in ArubaOS 3.2.
crypto-local isakmp sa-cleanup crypto-local isakmp sal-cleanup Description This command enables the cleanup of IKE SAs. Syntax No parameters. Usage Guidelines This command removes expired ISAKMP SAs from the controller. Command History This command was introduced in ArubaOS 6.1. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
crypto-local isakmp server-certificate crypto-local isakmp server-certificate Description This command assigns the server certificate used to authenticate the controller for VPN clients using IKEv1 or IKEv2 Syntax Parameter Description server-certificate User-defined name of a server certificate installed in the controller. Use the show crypto-local pki ServerCert command to display the server certificates that have been imported into the controller.
crypto-local isakmp xauth crypto-local isakmp xauth Description This command enables IKE XAuth for VPN clients. Syntax No parameters. Usage Guidelines The no crypto-local isakmp xauth command disables IKE XAuth for VPN clients. This command only applies to VPN clients that use certificates for IKE authentication. If you disable XAuth, then a VPN client that uses certificates will not be authenticated using username/password. You must disable XAuth for Cisco VPN clients using CAC Smart Cards.
crypto-local pki crypto-local pki CRL IntermediateCA OCSPResponderCert OCSPSignerCert PublicCert ServerCert TrustedCA global-oscp-signer-cert rcp Issue this command to configure a local certificate, OCSP signer or responder certificate and Certificate Revocation List (CRL). You can also list revocation checkpoints and enable the responder service.
Parameter Description Name of the signer certificate. Original imported filename of the signer certificate. TrustedCA Trusted CA certificate. This can be either a root CA or intermediate CA. Dell encourages (but does not require) an intermediate CA’s signing CA to be the controller itself. Name of the signer certificate. Original imported filename of the signer certificate.
Command History Version Modification ArubaOS 3.2 Command introduced. ArubaOS 6.1 The following parameters were introduced: l CRL l Intermediate CA l OCSPResponderCert l OCSPSignerCert l global-ocsp-signer-cert l rcp l service-ocsp-responder Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master or local controllers 232 | crypto-local pki Dell PowerConnect W-Series ArubaOS 6.
crypto-local pki rcp crypto-local pki rcp [crl-location ]|[enable-ocsp-responder]|[ocsp-responder-cert ]|[ocsp-signer-cert ]| [ocsp-url ]|[revocation-check [None||]] Description Use this command to specify the certificates used to sign OCSP for the revocation check point. Syntax Parameter Description rcp Specifies the revocation check point.
Usage Guidelines This command lets you configure the check methods that are used for this revocation check point.. You can configure the controller to perform real-time certificate revocation checks using the Online Certificate Status Protocol (OCSP) or traditional certificate validation using the Certificate Revocation List (CRL) client. Refer to the Certificate Revocation chapter in the Dell PowerConnect W-Series ArubaOS 6.
crypto map global-map crypto map global-map ipsec-isakmp {dynamic }|{ipsec } Description This command configures the default global map. Syntax Parameter Description dynamic } ipsec Use a dynamic map. Name of the dynamic map. Use a IPsec map. Name of an IPsec map. Usage Guidelines This command identifies the dynamic or ipsec map used as the default global map.
crypto pki crypto pki csr {rsa key_len |{ec curve-name } common_name country state_or_province city organization unit email Description Generate a certificate signing request (CSR) for the captive portal feature.
Command History Release Modification ArubaOS 3.1 Command introduced. ArubaOS 6.1 The ec curve-name parameter was introduced to support certificate signing requests using an elliptic-curve (EC) key Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
crypto pki-import crypto pki-import {der|pem|pfx|pkcs12|pkcs7} {CRL|IntermediateCA|OCSPResponderCert|OCSPSignerCert|PublicCert|ServerCert|TrustedCA} Description Import certificates for the captive portal feature. Syntax Parameter Description der Import the following certificates in DER format. CRL Import a CRL. IntermediateCA Import an intermediate CA certificate. OCSPResponderCert Import an OCSP Responder certificate.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
database synchronize database synchronize {[period ][rf-plan-data]} Description This command manually synchronizes the database between a pair of redundant master controllers and includes RF Plan data when synchronizing with standby. Syntax Parameter Description period Configures the interval for automatic database synchronization. rf-plan-data Interval in minutes. Range is 1 — 25200 minutes. Includes the RF Plan data when synchronizing with standby mode.
delete delete {filename |ssh-host-addr |ssh-known-hosts} Description This command deletes a file or RSA signature entry from flash. Syntax Parameter Description filename Name of the file to be deleted. ssh-host-addr Deletes the entry stored in flash for the RSA host signature created when you run the copy scp command. ssh-known -hosts Deletes all entries stored in flash for the RSA host signatures created when you run the copy scp command.
destination destination [invert] Description This command configures the destination name and address. Syntax Parameter Description Range STRING Destination name. Alphanumeric A.B.C.D Destination IP address or subnet. — invert Specifies all destinations except this one. — Usage Guidelines You can configure the name and IP address of the destination. You can optionally configure the subnet, or invert the selection.
dir dir Description This command displays a list of files stored in the flash file system. Syntax No parameters. Usage Guidelines Use this command to view the system files associated with the controller. Output from this command includes the following: l The first column contains ten place holders that display the file permissions. n First place holder: Displays - for a file or d for directory.
Command Information 244 | dir Platform License Command Mode Available on all platforms Available in the base operating system Enable and Config modes on local or master controllers Dell PowerConnect W-Series ArubaOS 6.
dynamic-ip dynamic-ip restart Description This command restarts the PPPoE or DHCP process. Syntax No parameters. Usage Guidelines This command can be used to renegotiate DHCP or PPPoE parameters. This can cause new addresses to be assigned on a VLAN where the DHCP or PPPoE client is configured. Command History This command was introduced in ArubaOS 3.
eject usb eject usb: Description Use this command to eject a USB device from your controller. Usage Guidelines Use this command to safely remove an external USB device, Example (host) #eject usb: Command History Command introduced in ArubaOS 6.2 Command Information 246 | eject usb Platform License Command Mode Available on all platforms Available in the base operating system User mode on master or local controllers in enable mode. Dell PowerConnect W-Series ArubaOS 6.
enable enable Description This user mode command switches the controller into enable mode. The enable mode allows you to access privileged commands. Usage Guidelines To enter enable mode, you are prompted for the password configured during the controller’s initial setup. Passwords display as asterisks (*) when you enter them. To change the password, use the config mode enable secret command.
enable bypass enable bypass no enable bypass Description This config mode command allows you to bypass the enable password prompt and go directly to the privileged command mode. Usage Guidelines Use this command when you want to access the privileged mode directly after logging in to the controller and not be prompted to enter an enable mode password. To restore the enable mode password prompt, use the config mode command. no enable bypass.
enable secret enable secret Description This config mode command allows you to change the password for enable mode. Usage Guidelines Use this command to change the password for enable mode. To reset the password to the factory default of “enable”, use the no enable command. NOTE: The password must not contain a space and special characters. Example The following example allows you to change the password for enable mode. (host) #configure terminal Enter Configuration commands, one per line.
encrypt encrypt {disable|enable} Description This command allows passwords and keys to be displayed in plain text or encrypted. Syntax Parameter Description Default disable Passwords and keys are displayed in plain text — enable Passwords and keys are displayed encrypted enabled Usage Guidelines Certain commands, such as show crypto isakmp key, display configured key information. Use the encrypt command to display the key information in plain text or encrypted.
esi group esi group [no]|[ping ]|[server ] Description This command configures an ESI group. Syntax Parameter Description no Negates any configured parameter. ping Specify the name of a set of ping checking attributes defined via the command esi ping. Only one set is allowed. server Specify the name of a server to be added or removed from the ESI group. You define ESI servers via the command esi server.
esi parser domain esi parser domain [no] | [peer ] | [server ] Description This command configures an ESI syslog parser domain. Syntax Parameter Description no Negates any configured parameter peer (Optional.) Specify the IP address of an another controller in this domain. These controllers are notified when the user cannot be found locally.
esi parser rule esi parser rule [condition ] | [domain ] | [enable] [match {ipaddr | mac | user }] | [no] | [position ] | [set {blacklist | role } | [test {msg | file }] Description This command creates or changes an ESI syslog parser rule. Syntax Parameter Description Range Default condition Specifies the REGEX (regular expression) pattern that uniquely identifies the syslog.
l Action: The action to take when a rule match occurs. Once a condition match occurs, no further rule-matching will be made. For the matching rule, only one action can be defined. For more details on the character-matching operators, repetition operators, and expression anchors used to defined the search or match target, refer to the External Services Interface chapter in the Dell PowerConnect W-Series ArubaOS 6.2 User Guide . Use the show esi parser rules command to show ESI parser rule information.
Command History Introduced in ArubaOS 3.1 Command Information Platform License Command Mode Available on all platforms. Requires the PEFNG license Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
esi parser rule-test esi parser rule-test [file ] | [msg ] Description This command allows you to test all of the enabled parser rules. Syntax Parameter Description file Tests against a specified file containing more than one syslog message. msg Tests against a syslog message, where is the message text. Usage Guidelines You can test the enabled parser rules against a syslog message input, or run the expression through a file system composed of syslog messages.
========== Command History Introduced in ArubaOS 3.1 Command Information Platform License Command Mode Available on all platforms Requires the PEFNG license Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
esi ping esi ping [frequency ] | [no] | [retry-count ] | [timeout ] | Description This command specifies the ESI ping health check configuration. Syntax Parameter Description Range Default frequency Specifies the ping frequency in seconds. 1–65536 no Negates any configured parameter — — retry-count Specifies the ping retry count 1–65536 2 timeout Specifies the ping timeout in seconds.
esi server esi server [dport ] | [mode {bridge | nat | route}] | [no] | [trusted-ip-addr [health-check]] | [trusted-port ] | [untrusted-ip-port [health-check]] | [untrusted-port ] Description This command configures an ESI server. Syntax Parameter Description dport Specifies the NAT destination TCP/UDP port. mode Specifies the ESI server mode of operation: bridge, nat, or route no Negates any configured parameter.
Command Information Platform License Command Mode Available on all platforms Requires the PEFNG license Config mode on master and local controllers 260 | esi server Dell PowerConnect W-Series ArubaOS 6.
exit exit Description This command exits the current CLI mode. Syntax No parameters. Usage Guidelines Upon entering this command in a configuration sub-mode, you are returned to the configuration mode. Upon entering this command in configuration mode, you are returned to the enable mode. Upon entering this command in enable mode, you are returned to the user mode. Upon entering this command in user mode, you are returned to the user login.
export export gap-db Description This command exports the global AP database to the specified file. Syntax Parameter Description Name of the file to which the global AP database is exported. Usage Guidelines This command is intended for system troubleshooting. You should run this command only when directed to do so by an Dell support representative. The global AP database resides on a master controller and contains information about known APs on all controllers in the system.
firewall firewall {allow-tri-session|amsdu|attack-rate {cp |ping |session }|broadcastfilter-arp|cp|bwcontracts-subnet-broadcast|cp-bandwidth-contract|tcp-syn |bwcontracts-subnet-broadcast |deny-inter-user-bridging |deny-inter-usertraffic|disable-ftp-server |disable-ftp-server| disable-stateful-h323| disable-statefulsccp-processing|disable-stateful-sip-processing |disable-stateful-ua-processing|disablestateful-vocera-processing|drop-ip-fragments| |enable-per-packet-logging |enfo
Parameter Description Range Default policies that prevent Layer3 traffic between users or networks but this does not block Layer2 traffic. This option can be used to prevent traffic, such as Appletalk or IPX from being forwarded. If enabled, traffic (all non-IP traffic) to untrusted port or tunnel is also blocked. 264 | firewall deny-inter-user-traffic Denies downstream traffic between users in a wireless network (untrusted users) by disallowing layer2 and layer3 traffic.
Parameter Description Range Default gre-call-id-processing Creates a unique state for each PPTP tunnel. Do not enable this option unless instructed to do so by a technical support representative. — disabled imm-fb Immediately free buffers on W-7200 series controllers. Do not enable this option unless instructed to do so by a technical support representative. — — local-valid-users Adds only IP addresses, which belong to a local subnet, to the user-table.
Parameter Description Range Default mirror option. See "ip access-list session" on page 353. l MAC flows to be mirrored with the MAC ACL mirror option. See "ip access-list mac" on page 351. If you configure both an IP address and a port to receive mirrored packets, the IP address takes precedence. session-mirror-ipsec Configures session mirroring of all frames that are processed by IPsec. Frames are sent to IP address specified by the session-mirror-destination option.
Release Modification ArubaOS 3.3 The session-mirror-destination parameter was modified. ArubaOS 3.3.2 The local-valid-users parameter was added. ArubaOS 3.4 The voip-proxy-arp parameter was renamed to broadcast-filter-arp and it does not require a Voice license. The prohibit-arp-spoofing parameter was added. The deny-inter-user-traffic parameter was added. ArubaOS 6.0 The shape-mcast parameter was added. ArubaOS 6.1 The funtionality of the prohibit-ip-spoofing feature was enhanced.
firewall cp firewall cp deny|permit |any|{host } proto{ ports }|ftp|http|https|icmp|snmp|ssh|telnet|tftp[bandwidthcontract ] no... Description This command creates whitelist session ACLs. Whitelist ACLs consist of rules that explicitly permit or deny session traffic from being forwarded or not to the controller.
Usage Guidelines This command turns the session ACL from a blacklist to a whitelist. A rule must exist that explicitly permits the session before it is forwarded to the controller and the last rule in the list denies everything else. Example The following command creates a whitelist ACL that allows on with the source address as 10.10.10.10 and the source mask as 2.2.2.2. The protocol is FTP and the the bandwidth contract name is mycontract. (host) (config-fw-cp) #permit 10.10.10.10 2.2.2.
firewall cp-bandwidth-contract firewall cp-bandwidth-contract {auth|route|sessmirr|trusted-mcast|trusted-ucast |untrusted-mcast|untrusted-ucast} Description This command configures bandwidth contract traffic rate limits to prevent denial of service attacks. Syntax Parameter Description Range Default auth Specifies the traffic rate limit that is forwarded to the authentication process. 1-200 Mbps 1 route Specifies the traffic rate limit that needs ARP requests.
firewall-visibility firewall-visibility no ... Description Enables or disables policy enforcement firewall visibility feature. Syntax No parameters. Usage Guideline When you enable this feature, the Firewall Monitoring page on the Dashboard tab of the WebUI displays the summary of all sessions in the controller aggregated by users, devices, destinations, applications, WLANs, and roles. Example The following command enables firewall visibility.
gateway health-check disable gateway health-check disable Description Disable the gateway health check. Usage Guidelines The gateway health check feature can only be enabled by Dell Technical Support. This command disables the gateway health check, and should only be issued under the guidance of the support staff.
guest-access-email guest-access-email smtp-port smtp-server no... Description This command configures the SMTP server which is used to send guest email. Guest email is generated when a guest user account is created or when the Guest Provisioning user sends guest user account email a later time. Syntax Parameter Description Range Default smtp-port Identifies the SMTP port through which the guest-access email is sent. — — The SMTP port number.
Command History Modification ArubaOS 3.4 Introduced for the first time. Command Information Platform License Command Mode Available on all platforms Available in the base operating system. Config mode on master controllers. 274 | guest-access-email Dell PowerConnect W-Series ArubaOS 6.
halt halt Description This command halts all processes on the controller. Syntax No parameters. Usage Guidelines This command gracefully stops all processes on the controller. You should issue this command before rebooting or shutting down to avoid interrupting processes. Command History Introduced in ArubaOS 3.0 Command Information Platform License Command Mode Available on all platforms Available in the base operating system. Enable mode on master and local controllers.
help help Description This command displays help for the CLI. Syntax No parameters. Usage Guidelines This command displays keyboard editing commands that allow you to make corrections or changes to the command without retyping. You can also enter the question mark (?) to get various types of command help: l When typed at the beginning of a line, the question mark lists all commands available in the current mode.
hostname hostname Description This command changes the hostname of the controller. Syntax Parameter Description Range Default hostname The hostname of the controller 1-63 See below Usage Guidelines The hostname is used as the default prompt. You can use any alphanumeric character, punctuation, or symbol character. To use spaces, plus symbols (+), question marks (?), or asterisks (*), enclose the text in quotes.
ids ap-classification-rule change id-classification-rule check-min-discovered-aps classify-to-type [neighbor | suspected-rogue] clone conf-level-incr discovered-ap-cnt match-ssids no snr-max snr-min ssid Description Configure the AP classification rule profile. Syntax Parameter Description Range Default Enter the AP classification rule profile name.
identified by its ASCII character string name (32 characters maximum). The AP classification rules have one of the following specifications: l SSID of the AP l SNR of the AP l Discovered-AP-Count or the number of APs that can see the AP Once you have created an AP classification rule, but must ienable it by adding it to the IDS AP Matching Rules profile: ids ap-rule-matching rule-name SSID specification Each rule can have up to 6 SSID parameters.
ids ap-rule-matching no rule-name Description Configure the IDS active AP rules profile by enabling an AP classification rule. Syntax Parameter Description no Negates any configured parameter rule-name Name of the IDS AP classification rule Usage Guidelines This command activates an active AP rule created by the ids ap-classification-rule change command. You must create the rule before you can activate it.
ids dos-profile ids ids dos-profile ap-flood-inc-time ap-flood-quiet-time ap-flood-threshold assoc-rate-thresholds auth-rate-thresholds block-ack-dos-quiet-time chopchop-quiet-time client-ht-40mhz-intol-quiet-time client-flood-inc-time client-flood-quiet-time client-flood-threshold client-ht-40mhz-intolerance clone cts-rate-quiet-time cts-rate-threshold cts-rate-time-interval deauth-rate-thresholds detect-ap-flood detect-
power-save-dos-min-frames power-save-dos-quiet-time power-save-dos-threshold probe-request-rate-thresholds probe-response-rate-thresholds rts-rate-quiet-time rts-rate-threshold rts-rate-time-interval spoofed-deauth-blacklist tkip-replay-quiet-time Description This command configures traffic anomalies for denial of service (DoS) attacks. Syntax Parameter Description Range Default Name that identifies an instance of the profile. The name must be 1-63 characters.
Parameter Description Range Default in the system. clone Copy data from another IDS Denial Of Service Profile. — — cts-rate-quiet-time Time to wait, in seconds, after detecting a CTS rate anomaly after which the check can be resumed. 60-360000 seconds 900 seconds cts-rate-threshold Number of CTS control packets over the time interval that constitutes an anomaly. 0-100000 5000 cts-rate-time-interval Time interval, in seconds, over which the packet count should be checked.
Parameter Description Range Default detect-invalid-address Enable/disable detection of invalid address combinations true false false detect-malformed-associationrequest Enable/disable detection of malformed association requests.
Parameter Description Range Default received within the EAP rate time interval to trigger an alarm. eap-rate-time-interval Time, in seconds, during which the configured number of EAP handshakes must be received to trigger an alarm. 1-120 seconds 3 seconds fata-jack-quiet-time Time to wait, in seconds, after detecting a FATA-Jack attack after which the check can be resumed.
Parameter Description Range Default check can be resumed. power-save-dos-threshold The Power Management ON packets sent by a station as a percentage of the Power Management OFF packets sent, in intervals of 10 second, which will trigger this event. 1- 100 % 80% probe-request-rate-thresholds Rate threshold for probe request frames. — — probe-response-rate-thresholds Rate threshold for probe response frames.
Release Modification ArubaOS 6.0 Deprecated predefined profiles and added numerous DoS profile options ArubaOS 6.1 Added the following parameter in support of Detection of the Meiners Power Save DoS attack, including event notification to the user.
ids general-profile ids general-profile adhoc-ap-inactivity-timeout adhoc-ap-max-unseen-timeout ap-inactivity-timeout ap-max-unseen-timeout clone ids-events [logs-and-traps | logs-only | none | traps-only] min-pot-ap-beacon-rate min-pot-ap-monitor-time mobility-manager-rtls mon-stats-update-interval no ...
Range Default Name of an existing IDS general profile from which parameter values are copied. — — ids-events [logs-and-traps | logs-only | none | traps-only] Enable or disable IDS event generation from the AP. Event generation from the AP can be enabled for syslogs, traps, or both. This does not affect generation of IDS correlated events on the switch. — logsandtraps min-pot-ap-beacon-rate Minimum beacon rate acceptable from a potential AP, in percentage of the advertised beacon interval.
Parameter Description Range Default wired-containment Enable containment from the wired side. true false false wired-containment-ap-adj-mac Enable/disable wired containment of MACs offset by one from APs BSSID. true false false wired-containment-susp-l3-rogue The basic wired containment feature enabled using the "wired-containment" on page 290 command contains layer3 APs whose wired interface MAC addresses are either the same as (or one character off from) their BSSIDs.
Parameter Description Range Default wireless side. Note: Enabling this debug option will cause containment to not function properly. Usage Guidelines This command configures general IDS profile attributes.
ids impersonation-profile ids impersonation-profile ap-spoofing-quiet-time beacon-diff-threshold beacon-inc-wait-time beacon-wrong-channel-quiet-time clone detect-ap-impersonation detect-ap-spoofing detect-beacon-wrong-channel detect-hotspotter hotspotter-quiet-time no ... protect-ap-impersonation Description This command configures anomalies for impersonation attacks.
Parameter Description Range Default the incorrect channel detect-hotspotter Enable/disable detection of the Hotspotter attack to lure away valid clients. — disable hotspotter-quiet-time Time to wait in seconds after detecting an attempt to Use the Hotspotter tool against clients. 60-360000 seconds 900 seconds no Negates any configured parameter.
ids management-profile event-correlation [logs-and-traps | logs-only | none | traps-only] event-correlation-quiet-time Description Mange the event correlation. Syntax Parameter Description Range event-correlation logs-and-traps logs-only none traps-only Correlation mode for IDS event traps and syslogs (logs). Event correlation can be enabled with generation of correlated logs, traps, or both. To disable correlation, enter the keyword none.
ids profile ids profile clone dos-profile general-profile impersonation-profile no ... signature-matching-profile unauthorized-device-profile Description This command defines a set of IDS profiles. Syntax Parameter Description Default Name that identifies an instance of the profile. The name must be 1-63 characters. “default” clone Name of an existing IDS profile from which parameter values are copied.
unauthorized-device-profile unauth1 Command History Version Modification ArubaOS 3.0 Command Introduced ArubaOS 6.0 Deprecated predefined profiles Deprecated Predefined Profile Deprecated Profile for levels: disabled, high, medium, and low l ids-disabled l ids-high-setting l ids-medium-setting l ids-low-setting Command Information Platform License Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers.
ids rate-thresholds-profile ids rate-thresholds-profile channel-inc-time channel-quiet-time channel-threshold clone no ... node-quiet-time node-threshold node-time-interval Description This command configures thresholds that are assigned to the different frame types for rate anomaly checking. Syntax Parameter Description Range Default Name that identifies an instance of the profile. The name must be 1-63 characters.
l Probe Response frames l Authentication frames Example The following command configures frame thresholds: (host) (config) #ids rate-thresholds-profile Lobby (host) (IDS Rate Thresholds Profile "Lobby") #channel-threshold 250 Command History Version Modification ArubaOS 3.0 Command Introduced ArubaOS 6.0 Deprecated predefined profiles Deprecated Predefined Profiles Deprecated the predefined profile with probe-request-response-threshold.
ids signature-matching-profile ids signature-matching-profile clone no ... signature Description This command contains defined signature profiles. Syntax Parameter Description Default Name that identifies an instance of the profile. The name must be 1-63 characters. “default” clone Name of an existing IDS signature matching profile from which parameter values are copied. — no Negates any configured parameter. — signature Name of a signature profile.
Command Information Platform License Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers 300 | ids signature-matching-profile Dell PowerConnect W-Series ArubaOS 6.
ids signature-profile ids signature-profile bssid clone dst-mac frame-type {assoc|auth|beacon|control|data|deauth|disassoc|mgmt|probe-request|proberesponse no ... payload [offset ] seq-num src-mac Description This command configures signatures for wireless intrusion detection. Syntax Parameter Description Default Name that identifies an instance of the profile. The name must be 1-63 characters.
Parameter Description Default For beacon, probe-request, and probe-response frame types, specify the length, in bytes, of the SSID. Maximum length is 32 bytes. — no Negates any configured parameter. — payload Pattern at a fixed offset in the payload of an 802.11 frame. Specify the pattern to be matched as a string or hex pattern. Maximum length is 32 bytes. — When a payload pattern is configured, specify the offset in the payload where the pattern is expected to be found in the frame.
Command Information Platform License Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
ids unauthorized-device-profile ids unauthorized-device-profile adhoc-using-valid-ssid-quiet-time allow-well-known-mac [hsrp|iana|local-mac|vmware|vmware1|vmware2|vmware3] cfg-valid-11a-channel cfg-valid-11g-channel classification clone detect-adhoc-network detect-adhoc-using-valid-ssid detect-bad-wep detect-ht-greenfield detect-invalid-mac-oui detect-misconfigured-ap detect-sta-assoc-to-rogue detect-unencrypted-valid-client detect-valid-client-misassociation d
Syntax Parameter Description Range Default Name that identifies an instance of the profile. The name must be 1-63 characters. — “default” adhoc-using-valid-ssid-quiettime Time to wait, in seconds, after detecting an adhoc network using a valid SSID, after which the check can be resumed. 60360000 900 seconds allow-well-known-mac Allows devices with known MAC addresses to classify rogues APs.
Parameter Description Range Default wired side of the network. Any other AP seen in the RF environment that is not part of the valid enterprise network is considered to be interfering — it has the potential to cause RF interference but it is not connected to the wired network and thus does not represent a direct threat. clone Name of an existing IDS rate thresholds profile from which parameter values are copied. — — detect-adhoc-network Enable detection of adhoc networks.
Parameter Description Range Default detect-valid-ssid-misuse Enable/disable detection of Interfering or Neighbor APs using valid/protected SSIDs. — disable detect-windows-bridge Enables detection of Windows station bridging. — true detect-wireless-bridge Enables detection of wireless bridging. — false detect-wireless-hosted-network If enabled, this feature can detect the presence of a wireless hosted network.
Parameter Description Range Default protect-windows-bridge Enable/disable protection of a windows station bridging — disabled protect-wireless-hosted-network When you enable the wireless hosted network protection feature, the controller enforces containment on a wireless hosted network by launching a denial of service attack to disrupt associations between a Windows 7 softwareenabled Access Point (softAP) and a client, and disrupt associations between the client that is hosting the softAP and any a
Parameter Description Range Default onds valid-and-protected-ssid List of valid and protected SSIDs. — — valid-oui List of valid MAC OUIs. — — valid-wired-mac List of MAC addresses of wired devices in the network, typically gateways or servers. — — wireless-bridge-quiet-time Time, in seconds, that must elapse after a wireless bridge alarm has been triggered before another identical alarm may be triggered.
Release Modification l l l l protect-adhoc-enhanced detect-wireless-hosted-network wireless-hosted-network-quiet-time protect-wireless-hosted-network Deprecated Predefined Profiles IDS Unauthorized Device profile: l ids-unauthorized-device-disabled l ids-unauthorized-device-medium-setting l ids-unauthorized-device-high-setting Command Information Platform License Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers ids wms-general-profile wm
Parameter Description Range Default collect-stats Enables collection of statistics (up to 25,000 entries) on the master controller for monitored APs and clients. This only applies when MMS is not configured. — disabled learn-ap Enables “learning” of non-Dell APs. — disabled learn-system-wired-macs Enable or disable “learning” of wired MACs at the controller. — disabled no Negates any configured parameter. — — persistent-neighbor Do not age out known AP neighbors.
Example The following command enables AP learning: (host)(IDS WMS General Profile) #learn-ap To disable AP learning: (host)(IDS WMS General Profile) #no learn-ap Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Added parameter learned-system-wired-mac Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 312 | ids wms-general-profile Dell PowerConnect W-Series ArubaOS 6.
Interface cellular interface cellular ip access-group session Description This command allows you to specify an ingress or egress ACL to the cellular interface of an EVDO modem. Syntax Parameter Description Enter the name or number of the access group you want to apply to the EVDO modem.
interface fastethernet | gigabitethernet interface interface {fastethernet|gigabitethernet} / description duplex {auto|full|half} ip access-group {in|out|session {vlan }} tunneled-node-port no ...
Description Range Default Enables Cisco-style PoE on the interface. — disabled port monitor Monitors another interface on the controller. — — priority-map Applies a priority map to the interface. Use the priority-map command to configure a priority map which allows you to map ToS and CoS values into high priority traffic queues. — — shutdown Causes a hard shutdown of the interface.
Range Default Enables and configures the Extreme Security (xSec) protocol. NOTE: You must purchase and install the xSec software module license in the controller. — — point-to-point MAC address of the controller that is the xSec tunnel termination point, and the 16-byte shared key used to authenticate the controllers to each other. The key must be the same on both controllers. — — allowed vlan VLANs that are allowed on the xSec tunnel. — — mtu (Optional) MTU size for the xSec tunnel.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.4 The trusted VLAN and ip access-group session vlan parameters were introduced. ArubaOS 3.4.1 The trusted vlan parameter was added. ArubaOS 6.1 The parameter muxport was changed to tunneled-node-port Command Information Platforms Licensing Command Mode All platforms This command is available in the base operating system. The ip access-group parameter requires the PEFNG license.
interface loopback interface loopback ip address ipv6 address no ... Description This command configures the loopback address on the controller. Syntax Parameter Description ip address Host IP address in dotted-decimal format. This address should be routable from all external networks. ipv6 address Host IPv6 address that is routable from all external networks. no Negates any configured parameter.
Dell PowerConnect W-Series ArubaOS 6.
interface port-channel interface port-channel add {fastethernet|gigabitethernet} / del {fastethernet|gigabitethernet} / ip access-group {in|out|session {vlan }} no ...
Parameter Description Range Default mode Sets the mode of the interface to access or trunk mode only. — — trunk Sets the interface as a trunk port for the specified VLANs. A trunk port carries traffic for multiple VLANs using 802.1q tagging to mark frames for specific VLANs. You can include all VLANs configured on the controller, or add or remove specified VLANs. — — native Specifies the native VLAN for the trunk mode interface. Frames on the native VLAN are not 802.1q tagged.
l The port-channel mode on the Cisco switch must be “on”. Example The following command configures a port channel: (host) (config) #interface port channel 7 add fastethernet 1/1 add fastethernet 1/2 Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.4 The trusted VLAN and ip access-group session vlan parameters were introduced. ArubaOS 3.4.1 The trusted vlan parameter was added.
Parameter Description Range Default character voip-dot1p Specifies the dot1p priority. — — voip-dscp Specifies the DSCP value for the voice VLAN — — voip-mode [auto-discover | static] Specifies the mode of VoIP operation. — static — — voip-vlan l auto-discover - Operates VoIP on auto discovery mode. l static - Operates VoIP on static mode. Specifies the Voice VLAN ID. Usage Guidelines Use this command to create VoIP VLANs for VoIP phones.
interface range interface range {fastethernet|gigabitethernet} /- duplex {auto|full|half} ip access-group {in|out|session {vlan }} no ...
Parameter Description Range Default Enables forwarding of traffic from the interface. — — speed Sets the interface speed: 10 Mbps, 100 Mbps, or auto configuration. 10|100|auto auto switchport Sets switching mode parameters for the interface. — — access vlan Sets the interface as an access port for the specified VLAN. The interface carries traffic only for the specified VLAN. — — mode Sets the mode of the interface to access or trunk mode only.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.4 The trusted VLAN and ip access-group session vlan parameters were introduced. ArubaOS 3.4.1 The trusted vlan parameter was added. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master and local controllers 326 | interface range Dell PowerConnect W-Series ArubaOS 6.
interface tunnel interface tunnel description inter-tunnel-flooding ip address mtu no ... shutdown trusted tunnel checksum|destination |keepalive [ ]|key |mode gre {|ip}|source {|loopback|vlan }|vlan Description This command configures a tunnel interface. Syntax Parameter Description Range Default tunnel Identification number for the tunnel.
Parameter Description Range Default keepalive Enables sending of periodic keepalive frames on the tunnel to determine the tunnel status (up or down). You can optionally set the interval at which keepalive frames are sent, and the number of times the frames are resent before a tunnel is considered to be down. — disabled (Optional) Number of seconds at which keepalive frames are sent.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
interface vlan interface vlan bandwidth-contract bcmc-optimization description ip address { |dhcp-client|{internal}|pppoe}|helper-address |igmp|local-proxy-arp|[nat inside]|{ospf area }routing}| pppoe-max-segmentsite | pppoe-password|pppoe-service-name|pppoe-username|routing ipv6 {address link-local | [/ | eui-64]| mld [snooping] | nd {ra [dns | enable | hop-limit | interval | life-time | managed-config-fl
Description Range Default helper-address IP address of the DHCP server for relaying DHCP requests for this interface. If the DHCP server is on the same subnetwork as this VLAN interface, you do not need to configure this parameter. — — igmp Enables IGMP and/or IGMP snooping on this interface. — — local-proxy-arp Enables local proxy ARP. — — nat inside Enables source network address translation (NAT) for all traffic routed from this VLAN. — — ospf Define an OSPF area.
Parameter Description l l l l Range Default preference—Configures a router preference prefix—Configures IPv6 RA prefix reachable-time—configures neighbor discovery reachable time retransmit-time—configures neighbor discovery retransmit time no Negates any configured parameter. — — mtu MTU setting for the VLAN. 10241500 — multimode-auth MultiMode Authentication Support on VLAN — — operstate up Set the state of the interface to be up.
Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3 The ipv6 parameters were introduced. ArubaOS 3.4 The igmp snooping parameter was deprecated. For information on configuring IGMP snooping in ArubaOS 3.4 or later, see "interface vlan ip igmp proxy" on page 336. ArubaOS 6.0 The pppoe-max-segment-site, pppoe-password, pppoe-service-name and pppoe-password parameters were introduced. ArubaOS 6.1 The option-82 parameter was introduced. ArubaOS 6.
interface vlan ipv6 address interface vlan ipv6 address link-local | [/ | eui-64] ipv6 {address link-local | [/ | eui-64]| mld [snooping] | nd {ra [dns | enable | hop-limit | interval | life-time | managed-config-flag | mtu | other-config-flag | preference | prefix] | reachable-time | retransmittime }} Description This command configures the IPv6 link local address or the global unicast address, a
Example The following example configures the link local address for the VLAN 1. (host) (conf)# interface vlan 1 (config-subif)#ipv6 address fe80::b:8600:50d:7700 link-local The following example configures the global unicast address in EUI-64 format for the VLAN 1. (host) (conf)# interface vlan 1 (config-subif)#ipv6 address 2001:DB8:0:3::/64 eui-64 Command History Release Modification ArubaOS 6.1 This command was introduced. ArubaOS 6.
interface vlan ip igmp proxy interface vlan ip igmp snooping|{proxy fastethernet|gigabitethernet /} Description This command enables IGMP and/or IGMP snooping on this interface, or configures a VLAN interface for uninterrupted streaming of multicast traffic. Syntax Parameter Description snooping Enable IGMP snooping. The IGMP protocol enables an router to discover the presence of multicast listeners on directly-attached links.
Issue the command interface vlan ipv6 mld to enable the MLD protocol and allow an IPv6 router to discover the presence of multicast listeners on directly-attached links. Use the CLI command interface vlan ipv6 mld snooping, and the IPv6 router will send multicast frames to only those nodes that need to receive them. Command History This command was introduced in ArubaOS 3.
ip access-list eth ip ip access-list eth {|} deny { []|any} [mirror] [position} no ... permit { []|any} [mirror][position] Description This command configures an Ethertype access control list (ACL). Syntax Parameter Description Range eth Enter a name, or a number in the specified range.
Command Information Platform License Command Mode Available on all platforms Requires the PEFNG license. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
ipv6 cp-redirect-address ipv6 cp-redirect-address | disable Description This command configures a redirect address for captive portal. Syntax Parameter Description This address should be routable from all external networks. disable Disables automatic DNS resolution for captive portal. Usage Guidelines This command redirects wireless clients that are on different VLANs (from the controller’s IP address) to the captive portal on the controller.
ipv6 default-gateway ipv6 default-gateway Description This command configures an IPv6 default gateway. Syntax Parameter Description Specify the IPv6 address of the default gateway. cost Specify the distance metric to select the routing protocol that determines the way to learn the route. Usage Guidelines This command configures an IPv6 default gateway.
ipv6 enable ipv6 enable Description This command enables IPv6 packet processing globally. This option is disabled by default. Syntax No parameters. Usage Guidelines This command enables IPv6 packet processing globally. Command History This command was introduced in ArubaOS 6.0. Command Information Platform License Command Mode Available on all platforms Available in the base operating system Config mode on master controllers 342 | ipv6 enable Dell PowerConnect W-Series ArubaOS 6.
ipv6 firewall ipv6 firewall attack-rate {ping |session |tcp-syn } deny-inter-user-bridging | drop-ip-fragments | enable-per-packet-logging | enforce-tcp-handshake | prohibit-ip-spoofing | prohibit-rst-replay | session-idle-timeout | session-mirror-destination {ip-address }|{port } Description This command configures firewall options on the controller for IPv6 traffic.
Parameter Description Range Default prohibit-ipspoofing Detects IP spoofing (where an intruder sends messages using the IP address of a trusted client). When this option is enabled, IP and MAC addresses are checked; possible IP spoofing attacks are logged and an SNMP trap is sent. — disabled prohibit-rst-re play Closes a TCP connection in both directions if a TCP RST is received from either direction. You should not enable this option unless instructed to do so by an Dell representative.
ipv6 mld ipv6 mld query-interval query-response-interval robustness-variable Description This command configures the IPv6 MLD (Multi-listener discovery) parameters. Syntax Parameter Description query-interval Specify the time interval in seconds (1-65535) between general queries sent by the querier. The default value is 125 seconds. By varying this value, you can tune the number of MLD messages on the link; larger values cause MLD queries to be sent less often.
| ipv6 mld Dell PowerConnect W-Series ArubaOS 6.
ipv6 neighbor ipv6 neighbor vlan Description This command configures an IPv6 static neighbor on a VLAN interface. Syntax Parameter Description Specify the IPv6 address of the neighbor entry. vlan Specify the VLAN ID. Specify the 48-bit hardware address of the neighbor entry. Usage Guidelines You can configure an IPv6 static neighbor on a VLAN interface.
ipv6 route ipv6 route Description This command configures static IPv6 routes on the controller. Syntax Parameter Description Specify the IPv6 address and the prefix length of the destination. Specify the next-hop IPv6 address or null 0 to terminate or discard the packets. Specify the distance metric to select the routing protocol that determines the way to learn the route.
ip access-list extended ip access-list extended {|} deny ipv6 no ... permit Description This command configures an extended access control list (ACL). To configure IPv6 specific rules, use the ipv6 keyword for each rule. Syntax Parameter Description Range extended Enter a name, or a number in the specified range. 100-199, 20002699 ipv6 Use the ipv6 keyword to add IPv6 specific rules. — deny Reject the specified packets.
Parameter Description Range any: any source host: specify a single host IP address Destination, which can be one of the following: Destination address (IPv4 or IPv6) and wildcard any: any destination host: specify a single host IP address — Usage Guidelines Extended ACLs are supported for compatibility with router software from other vendors. This ACL permits or denies traffic based on the source or destination IP address or IP protocol.
ip access-list mac ip access-list mac {|} deny {[]|any|host } [mirror] no ... permit {[]|any|host } [mirror] Description This command configures a MAC access control list (ACL). Syntax Parameter Description Range mac Configures a MAC access list. Enter a name, or a number in the specified range.
Command Information Platform License Command Mode Available on all platforms Requires the PEFNG license Config mode 352 | ip access-list mac Dell PowerConnect W-Series ArubaOS 6.
ip access-list session ip access-list session [] ipv6 [alias | any | host | network | user] no ... Description This command configures an access control list (ACL) session. To create IPv6 specific rules, use the ipv6 keyword. Syntax Parameter Description Name of an access control list session. ipv6 Use the ipv6 keyword to create IPv6 specific rules.
Parameter Description tunnel: Specify the ID of the tunnel configured with the interface tunnel command. route: Specify the next hop to which packets are routed, which can be one of the following: l dst-nat: Destination IP changes to the IP configured from the NAT pool. This action functions in bridge/split-tunnel forwarding mode. User should configure the NAT pool in the controller. l src-nat:Source IP changes to RAP’s external IP.
------Priority Source ClassifyMedia IPv4/6 -------- ---------- -----1 10.12.13.14 4 2 11:12:11:11::2 6 Destination Service Action ... Queue TOS 8021P ... ----------- ------- ------ ... ----- --- ----- ... any any permit ... Low ... any any permit ... Low ... -------- Command History Introduced in ArubaOS 3.
ip access-list standard ip access-list standard {|} deny { |any|host } no ... permit { |any|host } Description This command configures a standard access control list (ACL). Syntax Parameter Description Range standard Enter a name, or a number in the specified range. 1-99, 1300-1399 ipv6 Use the ipv6 keyword to create IPv6 specific standard rules.
ip cp-redirect-address ip cp-redirect-address | disable Description This command configures a redirect address for captive portal. Syntax Parameter Description Host address with a 32-bit netmask. This address should be routable from all external networks. disable Disables automatic DNS resolution for captive portal. Usage Guidelines This command redirects wireless clients that are on different VLANs (from the controller’s IP address) to the captive portal on the controller.
ip default-gateway ip default-gateway |{import cell|dhcp|pppoe}|{ipsec } Description This command configures the default gateway for the controller. Syntax Parameter Description IP address of the default gateway. import Use a gateway IP address obtained through the cell interface, DHCP or PPPoE. The default gateway is imported into the routing table and removed when the uplink is no longer active. cell Use a gateway IP address obtained through the cell interface.
ip dhcp excluded-address ip dhcp excluded-address [] Description This command configures an excluded address range for the DHCP server on the controller. Syntax Parameter Description Low end of range of IP addresses. For example, you can enter the IP address of the controller so that this address is not assigned. High end of the range of IP addresses.
ip dhcp pool ip dhcp pool default-router ... dns-server { ... |import} domain-name lease netbios-name-server { ... |import} network {|} no ... option ip pooltype ipupsell|private|public vendor-class-identifier Description This command configures a DHCP pool on the controller. Syntax Parameter Description default-router IP address of the default router for the DHCP client.
Usage Guidelines A DHCP pool should be created for each IP subnetwork for which DHCP services should be provided. DHCP pools are not specifically tied to VLANs, as the DHCP server exists on every VLAN. When the controller receives a DHCP request from a client, it examines the origin of the request to determine if it should respond. If the IP address of the VLAN matches a configured DHCP pool, the controller answers the request.
ip domain lookup ip domain lookup Description This command enables Domain Name System (DNS) hostname to address translation. Syntax There are no parameters for this command. Usage Guidelines This command is enabled by default. Use the no form of this command to disable. Example The following command enables DNS hostname translation: (host)(config) #ip domain lookup Command History This command was available in ArubaOS 3.0.
ip domain-name ip domain-name Description This command configures the default domain name. Syntax Parameter Description domain-name Name used to complete unqualified host names. Do not specify the leading dot (.). Usage Guidelines The controller uses the default domain name to complete hostnames that do not contain domain names. You must have at least one domain name server configured on the controller (see "ip name-server" on page 378).
ip igmp ip igmp last-member-query-count last-member-query-interval max-members-per-group query-interval query-response-interval <.1 seconds> quick-client-convergence robustness-variable <2-10> startup-query-count startup-query-interval version-1-router-present-timeout Description This command configures Internet Group Management Protocol (IGMP) timers and counters.
Usage Guidelines IGMP is used to establish and manage IP multicast group membership. See RFC 3376, “Internet Group Management Protocol, version 3” for more information. Example The following command configures IGMP: (host) (config) #ip igmp query-interval 130 Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.
ip local ip local pool [] Description This command configures a local IP pool for Layer-2 Tunnel Protocol (L2TP). Syntax Parameter Description pool Name for the address pool. Starting IP address for the pool. (Optional) Ending IP address for the pool. Usage Guidelines VPN clients can be assigned IP addresses from the L2TP pool. Example The following command configures an L2TP pool: (host) (config) #ip local pool 10.1.1.1 10.1.1.
ip mobile active-domain ip mobile ip mobile active-domain Description This command configures the mobility domain that is active on the controller. Syntax Parameter Description active-domain Name of the mobility domain. Usage Guidelines All controllers are initially part of the “default” mobility domain. If you use the “default” mobility domain, you do not need to specify this domain as the active domain on the controller.
ip mobile domain ip mobile domain description hat no ... Description This command configures the mobility domain on the controller. Syntax Parameter Description domain Name of the mobility domain. description Description of the mobility domain. hat Configures a home agent table (HAT) entry. Subnet that requires mobility service. Netmask for the IP address. VLAN ID.
-----------------------------Domain name east_building Home Agent Table, 1 subnet(s) subnet mask VlanId Home Agent Description --------------- --------------- ------ --------------- ------------------------10.11.1.0 255.255.255.0 120 10.11.1.200 East building entries Command History Release Modification ArubaOS 3.0 Command available. ArubaOS 6.0 A new parameter, description is added for providing more information about a HAT entry. ArubaOS 3.4.1 vlan range parameter introduced.
ip mobile foreign-agent ip mobile foreign-agent {lifetime | max-visitors | registrations {interval | retransmits }} Description This command configures the foreign agent for IP mobility. Syntax Parameter Description Range Default lifetime Requested lifetime, in seconds, as per RFC 3344, “IP Mobility Support for IPv4”. 10-65534 180 seconds max-visitors Maximum number of active visitors.
ip mobile home-agent ip mobile home-agent {max-bindings |replay } Description This command configures the home agent for IP mobility. Syntax Parameter Description Range Default max-bindings Maximum number of mobile IP bindings. This option is an additional limitation to control the maximum number of roaming users.
ip mobile packet-trace ip mobile packet-trace Description This command enables packet tracing for the given mac address. WARNING: Use this command with caution. It replaces the existing users with user entries from the imported file. Syntax Platform License The MAC address of the host Usage Guidelines Executing this command enables packet tracing for the given mac address. This is used for troubleshooting purposes only.
ip mobile proxy ip mobile proxy auth-sta-roam-only | block-dhcp-release | dhcp {max-requests |transaction-hold |transaction-timeout }| event-threshold | log-trail | no-service-timeout | on-association | refresh-stale-ip stale-timeout | stand-alone-AP | trail-length |trail-timeout Description This command configures the proxy mobile IP module in a mobility-enabled controller.
Parameter Description Range Default moves. no-service-time out Time, in seconds, after which mobility service expires. If nothing has changed from the previous state, the client is given another bridge entry but it will have limited connectivity. 30-60000 180 seconds on-association Mobility move detection is performed when the client associates with the controller instead of when the client sends packets. Enabled by default.
l Derives the address of the home agent for a mobile client from the HAT using the mobile client’s IP address. If there is more than one possible home agent for a mobile client in the HAT, the proxy mobile IP module uses a discovery mechanism to find the current home agent for the client. l Detects when a mobile client has moved. Client moves are detected based on ingress port and VLAN changes and mobility is triggered accordingly.
ip mobile revocation ip mobile revocation {interval |retransmits Description This command configures the frequency at which registration revocation messages are sent. Syntax Parameter Description Range Default interval Retransmission interval, in milliseconds. 100-10000 ms 1000 ms retransmits Maximum number of times the home agent or foreign agent attempts mobile IP registration/revocation message exchanges before giving up.
ip mobile trail (deprecated) ip mobile trail {host IP address | host MAC address} Description This command configures the capture of association trail for all devices. Command History Version Description ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated Dell PowerConnect W-Series ArubaOS 6.
ip name-server ip name-server Description This command configures servers for name and address resolution. Syntax Parameter Description IP address of the server. Usage Guidelines You can configure up to six servers using separate commands. Specify one or more servers when you configure a default domain name (see "ip domain-name" on page 363). Example The following command configures a name server: ip name-server 10.1.1.245 Command History This command was available in ArubaOS 3.0.
ip nat ip nat pool [] Description This command configures a pool of IP addresses for network address translation (NAT). Syntax Parameter Description pool Name of the NAT pool. IP address that defines the beginning of the range of source NAT addresses in the pool. IP address that defines the end of the range of source NAT addresses in the pool. Destination NAT IP address.
ip ospf ip ospf area|{authentication message-digest | cost | dead-interval | hellointerval | message-digest-key | priority | retransmitinterval |transmit-delay Description Configure OSPF on the VLAN interface. Syntax Parameter Description Range Default area Enable OSPF on a specific interface by entering the IP address of the router that will use OSPF.
Related Commands Command Description show ip ospf View the OSPF configuration Command History Release Modification ArubaOS 3.4 Command introduced Command Information Platforms Licensing Command Mode All Platforms Base operating system Configuration Interface Mode (config-subif) Dell PowerConnect W-Series ArubaOS 6.
ip pppoe-max-segment-size (deprecated) ip pppoe-max-segment-size Description This command configures the maximum TCP segment size (mss), in bytes, for Point-to-Point Protocol over Ethernet (PPPoE) data. Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated 382 | ip pppoe-max-segment-size (deprecated) Dell PowerConnect W-Series ArubaOS 6.
ip pppoe-password (deprecated) ip pppoe-password Description This command configures the PPP over Ethernet (PPPoE) password. Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated Dell PowerConnect W-Series ArubaOS 6.
ip pppoe-service-name (deprecated) ip pppoe-service-name Description This command configures the PPP over Ethernet (PPPoE) service name. Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated 384 | ip pppoe-service-name (deprecated) Dell PowerConnect W-Series ArubaOS 6.
ip pppoe-username (deprecated) ip pppoe-username Description This command configures the PPP over Ethernet (PPPoE) username. Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated Dell PowerConnect W-Series ArubaOS 6.
ip radius ip radius {nas-ip |rfc-3576-server udp-port |source-interface {loopback|vlan } Description This command configures global parameters for configured RADIUS servers. Syntax Parameter Description Range Default nas-ip NAS IP address to send in RADIUS packets. A server-specific NAS IP configured with the aaa authentication-server radius command supersedes this configuration.
Dell PowerConnect W-Series ArubaOS 6.
ip route ip route { []|ipsec |null 0} Description This command configures a static route on the controller. Syntax Parameter Description Enter the destination prefix address in dotted decimal format (A.B.C.D). Enter the destination prefix mask address in dotted decimal format (A.B.C.D). [] Enter the forwarding router address in dotted decimal format (A.B.C.D). Optionally, enter the distance metric (cost) for this route.
lacp group lacp group mode {active | passive} Description Enable Link Aggregation Control Protocol (LACP) and configure LACP on the interface. Parameter Description Enter the link aggregation group (LAG) number. Range: 0-7 mode {active | passive} Enter the keyword mode followed by either the keyword active or passive. l Active mode—the interface is in active negotiating state. LACP runs on any link that is configured to be in the active state.
lacp port-priority lacp port-priority Description Configure the LACP port priority. Syntax Parameter Description Enter the port-priority value. The higher the value number the lower the priority. Range: 1 to 65535 Default: 255 Usage Guidelines Set the port priority for LACP.
lacp system-priority lacp system-priority Description Configure the LACP system priority. Syntax Parameter Description Enter the system priority value. The higher the value number the lower the priority. Range: 1 to 65535 Default: 32768 Usage Guidelines Set the LACP system priority.
lacp timeout lacp timeout {long | short} Description Configure the timeout period for the LACP session. Syntax Parameter Description long Enter the keyword long to set the LACP session to 90 seconds. This is the default. short Enter the keyword short to set the LACP session to 3 seconds. Usage Guidelines The timeout value is the amount of time that a port-channel interface waits for a LACPDU (Link Aggregation Control Protocol data unit) from the remote system before terminating the LACP session.
lcd-menu lcd-menu [no] disable menu [maintenance [factory-default| media-eject| qui-quick-setup | mediaeject | system-halt | system-reboot | upgrade-image [parition0 | partition1]| uploadconfig]] Description This command allows you to enable or disable the LCD menu either completely or for specific operations. Syntax Parameter Description lcd-menu Enters the LCD menu configuration mode. no Delete the specified LCD menu option. disable Disables (or enables) the complete LCD menu.
menu menu menu menu menu menu menu menu menu menu menu menu maintenance maintenance maintenance maintenance maintenance maintenance maintenance maintenance maintenance maintenance maintenance system-reboot reboot-local system-halt halt-stack system-halt halt-local upgrade-image upload-config factory-default media-eject system-reboot system-halt gui-quick-setup enabled enabled enabled enabled enabled enabled enabled enabled enabled enabled enabled enabled Example The following example disables the LCD me
license license {add |del |export |import |report } Description This command allows you to install, delete, and manage software licenses on the controller. Syntax Parameter Description add Installs the software license key in the controller. The key is normally sent to you via email. del Removes the software license key from the controller. The key is normally sent to you via email.
local-custom-cert local-custom-cert local-mac ca-cert server-cert suite-b Description This command configures the user-installed certificate for secure communication between a local controller and a master controller. Syntax Parameter Description MAC address of the local controller’s user-installed certificate. ca-cert User-defined name of a trusted CA certificate installed on the local controller.
Command Information Platform License Command Mode Available on all platforms The suite-b gcm-128 and suite-b gcm-256 encryption options for IPsec custom certificates requires the Advanced Cryptography (ACR) license. All other parameters are available in the base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
local-factory-cert local-factory-cert local-mac Description This command configures the factory-installed certificate for secure communication between a local controller and a master controller. Syntax Parameter Description MAC address of the local controller’s factory-installed certificate. Usage Guidelines Use this command on a master controller to configure the factory certificate for communication with a local controller.
local-userdb-ap add local-userdb-ap add mac-address ap-group ap-name description full-name remote-ip Description This command adds a AP entry to the remote AP database. Syntax Parameter Description mac-address MAC address of the AP whose whitelist database entry you want to modify. ap-group AP group of the AP. ap-name Name of the AP. description Description of the AP.
local-userdb-guest add local-userdb-guest local-userdb-guest add {generate-username|username } {generate-password|password } [comment ][email ] [expiry {duration |time }] [guest-company ][guest-fullname ][guest-phone ] [mode disable][opt-field-1 ][opt-field-2 ][opt-field-3 ][opt-field-4 ][sponsor-dept ][sponsor-mail ][sponsor-fullname ] [sponsor-name
Parameter Description Range Default opt-field-2 Same as opt-field-1. — — opt-field-3 Same as opt-field-1. — — opt-field-4 Same as opt-field-1. — — sponsor-dept The guest sponsor’s department name. NOTE: A sponsor is the guest's primary contact for the visit. — — sponsor-email The sponsor’s email address. — — sponsor-fullname The sponsor’s full name. — — sponsor-name The sponsor’s name. — — start-time Date and time, in mm/dd/yyy and hh:mm format, the guest account begins.
Command Information Platform License Command Mode Available on all platforms Available in the base operating system. The role parameter requires the PEFNG license. Enable and config modes on master controllers. 402 | local-userdb-guest add Dell PowerConnect W-Series ArubaOS 6.
local-userdb-remote-node localuserdb local-userdb-remote-node add mac-address remote-node-profile del mac-address Description This command adds a Remote Node to the Remote Node whitelist. You can also delete the whitelist entry using this command. Syntax Parameter Description Range Default mac-address MAC address of the Remote Node in colonseparated six-octet format.
Command Description Mode license usage and running configuration information. show remote-node-dhcp-pool Shows Remote Node dhcp pool configuration information. Enable and Config mode show remote-node-profile Shows Remote Node profile status information. Enable and Config mode show local-userdb-remote-node The output of this command lists the MAC address and assigned Remote Node-profile for of each Remote Node associated with that Remote Node master.
local-userdb add localuserdb local-userdb add {generate-username|username } {generate-password|password } [comment ][email ] [expiry {duration |time }] [guest-company ][guest-fullname ][guest-phone ][mode disable] [opt-field-1 ][opt-field-2 ][opt-field-3 ][opt-field-4 ][[remote-ip ][role ][sponsor-dept ][sponsor-mail ][sponsor-fullname ][sponsor
Parameter Description Range Default opt-field-2 Same as opt-field-1. — — opt-field-3 Same as opt-field-1. — — opt-field-4 Same as opt-field-1. — — remote-ip IP address assigned to the remote peer. role Role for the user. This role takes effect when the internal database is specified in a server group profile with a server derivation rule. If there is no server derivation rule configured, then the user is assigned the default role for the authentication method.
Command Description Mode the output of this command. show local-userdb-guest Use this command to show the parameters displayed in the output of the local-userdb-guest add command. Enable and Config modes mgmt-user Use the webui-cacert command if you want an external authentication server to derive the management user role. This is helpful if there are a large number of users who need to be authenticated.
localip localip ipsec Description This command configures the IP address and preshared key for the local controller on a master controller. Syntax Parameter Description IP address of the local controller. Use the 0.0.0.0 address to configure a global preshared key for all inter-controller communications. ipsec To establish the master-local IPsec tunnel using IKEv1, enter a preshared key between 6-64 characters.
local-userdb-ap del local-userdb-ap del mac-address ap-group ap-name description full-name mode remote-ip Description This command deletes a AP entry from the remote AP database. Syntax Parameter Description mac-address MAC address of the AP to be removed from the AP database. Usage Guidelines Issue this command to permanently delete any AP entries from the remote AP database.
local-userdb-ap modify local-userdb-ap modify mac-address ap-name description full-name remote-ip Description Modify an AP entry in the remote AP whitelist. Syntax Parameter Description mac-address MAC address of the AP whose whitelist database entry you want to modify. ap-group AP group of the AP. ap-name Name of the AP. description Description of the AP.
local-userdb-ap revoke local-userdb-ap revoke mac-address revoke-comment Syntax Parameter Description mac-address MAC address of the AP to be removed from the AP database. revoke-comment Text string describing why the AP was revoked. Description Revoke a lost or stolen remote AP to prevent unauthorized users from accessing the company’s corporate network. To permanently remove an AP from the whitelist, use the command local-userdb-ap del.
local-userdb del local-userdb {del username |del-all} Description This command deletes entries in the controller’s internal database. Syntax Parameter Description del username Deletes the user account for the specified username. del-all Deletes all entries in the internal database. Usage Guidelines User account entries created with expirations are automatically deleted from the internal database at the specified expiration.
local-userdb export local-userdb export Description This command exports the internal database to a file. WARNING: Use this command with caution. It replaces the existing users with user entries from the imported file. Syntax Parameter Description export Saves the internal database to the specified file in flash. Usage Guidelines After using this command, you can use the copy command to transfer the file from flash to another location.
local-userdb fix-database local-userdb fix-database Description This command deletes and reinitializes the internal database. Syntax No parameters. Usage Guidelines Before using this command, you can save the internal database with the local-userdb export command. Command History Introduced in ArubaOS 3.0. Command Information Platform License Command Mode Available on all platforms Available in the base operating system Enable mode on master controllers.
local-userdb-guest del local-userdb-guest {del username |del-all} Description This command deletes entries in the controller’s internal database. Syntax Parameter Description del username Deletes the user account for the specified username. del-all Deletes all entries in the internal database. Usage Guidelines User account entries created with expirations are automatically deleted from the internal database at the specified expiration.
local-userdb-guest modify local-userd-guest modify username [comments ][email ] [expiry {duration |time }] [guest-company ][guest-fullname ][guest-phone ][mode disable][opt-field-1 ][opt-field-2 ][optfield-3 ][opt-field-4 ][password ][sponsor-mail ][sponsor-fullname ][sponsor-name ][start-time
Parameter Description Range Default sponsor-dept The guest sponsor’s department name NOTE: A sponsor is the guest's primary contact for the visit. — — sponsor-email The sponsor’s email address. — — sponsor-fullname The sponsor’s full name. — — sponsor-name The sponsor’s name. — — start-time Date and time, in mm/dd/yyy and hh:mm format, the guest account begins.
local-userdb-guest send-email local-userdb-guest send-email [to-guest][to-sponsor] Description This command causes the controller to send email to the guest and/or sponsor any time a guest user is created. Syntax Parameter Description Range Default Name of the guest 1 – 64 characters — to-guest Allows you to send email to the guest user’s address. — — to-sponsor Allows you to send email to the sponsor’s email address.
local-userdb import local-userdb import Description This command replaces the internal database with the specified file from flash. Syntax Parameter Description import Replaces the internal database with the specified file. Usage Guidelines This command replaces the contents of the internal database with the contents in the specified file. The file must be a valid internal database file saved with the local-userdb export command.
local-userdb maximum-expiration local-userdb maximum-expiration Description This command configures the maximum time, in minutes, that a guest account in the internal database can remain valid. Syntax Parameter Description Range maximum-expiration Maximum time, in minutes, that a guest account in the internal database can remain valid. 1-2147483647 Usage Guidelines The user in the guest-provisioning role cannot create guest accounts that expire beyond the configured maximum time.
local-userdb modify local-userdb modify username [comments ][email ] [expiry {duration |time }] [guest-company ][guest-fullname ] [guest-phone ][mode disable][opt-field-1 ][opt-field-2 ][opt-field-3 ][opt-field-4 ][remote-ip ][role ][sponsor-dept ] [sponsor-mail ][sponsor-fullname ][sponsor-name ][start-time
Parameter Description Range Default role Role for the user. This parameter requires the PEFNG license. — guest sponsor-dept The guest sponsor’s department name NOTE: A sponsor is the guest's primary contact for the visit. — — sponsor-email The sponsor’s email address. — — sponsor-fullname The sponsor’s full name. — — sponsor-name The sponsor’s name. — — start-time Date and time, in mm/dd/yyy and hh:mm format, the guest account begins.
local-userdb send-to-guest local-userdb send-to-guest Description This command automatically sends email to the guest when the guest user is created. Syntax No parameters. Usage Guidelines A guest is the person who needs guest access to the company’s Dell wireless network. Email is sent directly to the guest after the guest user is created. When configuring the guest provisioning feature, the guest user is generally created by Guest Provisioning user.
local-userdb send-to-sponsor local-userdb send-to-sponsor Description This command automatically sends email to the guest’s sponsor when the guest user is created. Syntax No parameters. Usage Guidelines The sponsor is the guest's primary contact. Email is sent directly to the guest’s sponsor after the guest user is created. When configuring the guest provisioning feature, the sponsor is generally created by the Guest Provisioning user.
location location Description This command configures the location of the controller. Syntax Parameter Description location A text string that specifies the system location. Usage Guidelines Use this command to indicate the location of the controller. You can use a combination of numbers, letters, characters, and spaces to create the name. To include a space in the name, use quotation marks to enclose the text string. To change the existing name, enter the command with a different string.
logging logging [facility]|[severity]|[type>] Description Use this command to specify the IP address of the remote logging server, facility, severity, and the type. Syntax Parameter Description Range Default facility To set the remote logging server facility. local 0 to local7 — severity To set the remote logging server severity. — — type To set the remote logging server message type.
logging facility logging facility Description Use this command to set the facility to use when logging to the remote syslog server. Syntax Parameter Description Range The facility to use when logging to a remote syslog server. local0 to local7 Usage Guidelines The local use facilities (local0, local1, local2, local3, local4, local5, local6, and local7) are not reserved for specific message-generating sources, and can be used for sending syslog messages.
logging level logging level [process ] [subcat ] Description Use this command to set the categories or subcategories and the severity levels of messages that are logged. Syntax Parameter Description The message severity level, which can be one of the following (in order of severity level): emergencies (0) Panic conditions that occur when the system becomes unstable. alerts (1) Any condition requiring immediate attention and correction.
Parameter Description cfgm Configuration Manager crypto VPN (IKE/IPsec) cts Transport service dbsync Database synchronization dhcpd DHCP packets esi External Services Interface fpapps Layer 2 and 3 control httpd Apache l2tp L2TP licensemgr License manager localdb Local database mobileip Mobile IP packetfilter Packet filtering of messaging and control frames pim Protocol Independent Multicast pppoed PPPoE pptp PPTP processes Run-time processes profmgr Profile Manager pub
Parameter Description l l l l l security: aaa, all, dot1x, firewall, ike, mobility, packet-trace, vpn, webserver system: all, configuration, messages, snmp, webserver user: all, captive-portal, dot1x, radius, vpn user-debug: all, configuration wireless: all Usage Guidelines There are eight logging severity levels, each with its associated types of messages. Each level also includes the levels below it.
loginsession loginsession timeout Description This command configures the time management session (via Telnet or SSH) remains active without user activity. Syntax Parameter Description Range Default timeout Number of seconds or minutes that a management session remains active without any user activity. 5-60 minutes or 1-3600 seconds, 0 to disable 15 minutes Usage Guidelines The management user must re-login to the controller after a Telnet or SSH session times out.
logout logout Description This command exits the current CLI session. Syntax No parameters. Usage Guidelines Use this command to leave the current CLI session and return to the user login. Example The following command exits the CLI session: (host) >logout User: Command History This command was available in ArubaOS 3.0.
mac-address-table mac-address-table static {fastethernet|gigabitethernet} / vlan Description This command adds a static entry to the MAC address table. Syntax Parameter Description Range Media Access Control (MAC) address, in the format xx:xx:xx:xx:xx:xx. — is always 1. — Number assigned to the network interface embedded in the controller. Port numbers start at 0 from the left-most position. vlan ID number of the VLAN.
master-redundancy master-vrrp master-redundancy master-vrrp Description This command associates a VRRP instance with master controller redundancy. Syntax Parameter Description Range The virtual router ID for the VRRP instance configured with the vrrp command. 1-255 Usage Guidelines To maintain a highly redundant network, you can use a controller as a standby for the master controller. The underlying protocol used is VRRP which you configure using the vrrp command.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
masterip masterip ipsec [interface uplink|{vlan }] [fqdn ] ipsec-custom-cert master-mac1 [master-mac2 ] ca-cert server-cert [interface uplink|{vlan }] [fqdn ] [suite-b gcm-128|gcm-256] ipsec-factory-cert master-mac1 [master-mac2 ] [interface uplink|{vlan }] [fqdn ] Description This command configures the IP address and preshared key or certificate for the master controller on a local controller.
Description Parameter IPsec tunnel using IKEv2. master-mac1 The MAC address of the certificate on the Master. master-mac2 (Optional) the MAC address of the certificate on the backup master controller. interface Specify the uplink or VLAN interface on the master controller to initiate IKE. uplink Use the master controller’s current active uplink to initiate IKE. vlan Specify a VLAN interface on the master controller to initiate IKE.
master-redundancy peer-ip master-redundancy peer-ip ipsec ipsec-custom-cert master-mac ca-cert server-cert [suite-b gcm-128|gcm256] ipsec-factory-cert master-mac Description This command configures the IP address and preshared key or certificate for a redundant master controller on another master controller. Syntax Parameter Description IP address of the redundant controller. Use the 0.0.0.
Example The following command configures the local controller on a master controller: (host) (config) #peer-ip 10.4.62.5 ipsec-custom-cert master-mac 00:02:2D:11:55:4D ca-cert cacert1 server-cert server1 Command History Release Modification ArubaOS 3.0 Command introduced. ArubaOS 6.1 The ipsec-factory-cert and ipsec-custom-cert parameters were introduced to allow certificate-based authentication of master and local controllers.
mgmt-server wlan mgmt-server type {amp|other} primary-server Description Register a management server with the controller by specifying the IP address of an AirWave Management Server or any other server that should receive messages from the controller using the Application Monitoring (AMON) protocol. Syntax Parameter Description amp other Define any other type of management server. primary-server IP address of the primary management server.
mgmt-user mgmt-user mgmt-user mgmt-user mgmt-user localauth-disable ssh-pubkey client-cert webui-cacert serial Description This command configures an administrative user. Syntax Parameter Description Default Name of the user. You can create a maximum of 10 management users. NOTE: If you configure a root management user, you can use special characters except for double-byte characters.
Parameter Description Default Name of the user. — Role assigned to the authenticated user. — The client certificate for authenticating administrative users using the WebUI. — The CA certificate. If configured, certificate authentication and authorization are automatically completed using an authentication server. — serial Serial number of the client certificate. — Name of the user. — Role assigned to the authenticated user.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
mobility-manager mobility-manager user [interval ] [retrycount ] [udp-port ] [rtls ] trap-version {1|2c|3} Description This command allows the controller to communicate with an MMS server. Syntax Parameter Description Range Default IP address of the MMS server. — — user Name and SNMP password for the MMS server user. — — interval Round-trip time, in seconds, to trap server.
Command History This command was introduced in ArubaOS 3.1. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
netdestination netdestination description host [position ] invert name network [position ] no ... range [position ] Description This command configures an alias for an IPv4 network host, subnetwork, or range of addresses. Syntax Parameter Description Name for this host or domain. Maximum length is 63 characters. description Description about the this destination up to 128 characters long.
Example The following command configures an alias for an internal network: (host) (config) #netdestination Internal network 10.1.0.0 255.255.0.0 Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Host functionality now only supports IPv4 subnets. ArubaOS 6.2 Name parameter has maximum character length. Command Information Platforms Licensing Command Mode All platforms Requires the Policy Enforcement Firewall license.
netdestination6 netdestination6 description host [position ] invert name network [position ] no ... range [position ] Description This command configures an alias for an IPv6 network host, subnetwork, or range of addresses. Syntax Parameter Description Default Name of the IPv6 destination host or subnetwork up to 63 characters long.
network fe80:0:0:0:0:0:a01:0/128 Command History Release Modification ArubaOS 6.1 Command introduced Dell PowerConnect W-Series ArubaOS 6.2 A new field, description has been introduced to provide a description about the netdestination up to 128 characters long. Dell PowerConnect W-Series ArubaOS 6.2 Maximum length allowed for netdestination6 is now 63 characters. Command Information Platforms Licensing Command Mode All platforms Requires the Policy Enforcement Firewall license.
netexthdr netexthdr eh deny | permit Description This command allows you to edit the packet filter options in the extension header (EH). Syntax Parameter Description Default Specify the EH alias name.
Command Information Platforms Licensing Command Mode All platforms Base operating system. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
netservice netservice |tcp|udp {list ,}|{ []} [ALG ] Description This command configures an alias for network protocols. Syntax Parameter Description Range netservice Name for this alias. — IP protocol number. 0-255 tcp Configure an alias for a TCP protocol udp Configure an alias for a UDP protocol list , Specify a list of non-contiguous port numbers, by entering up to six port numbers, separated by commas.
Command History Version Modification ArubaOS 3.0 Command introduced. ArubaOS 6.0 The list parameter for defining non-contiguous ports was introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
network-printer [deprecated] network-printer [max-clients <2-20> | max-clients-per-host <1-20> | max-jobs <1-1000>] Description This command allows you to configure client and print job for the USB printer connected to a W-600 seriescontroller. Syntax Parameter Description max-clients Specify the maximum number of clients that can use the printer. Currently, the W-600 series supports a maximum of 20 concurrent clients.
network-storage [deprecated] network-storage [share ] share [usb: disk mode {read-only | read-write} no share Description This command allows you to perform the following operation on a network share: l Configure a file system path for the share–This allows users to access the share from their computer. l Remove the share access using the no share command. Syntax Parameter Description share Enter a name for the share on the controller.
Command Information Platforms Licensing Command Mode W-600 series Base operating system Enable mode 456 | network-storage [deprecated] Dell PowerConnect W-Series ArubaOS 6.
ntp authenticate ntp authenticate Description This command enables or disables NTP authentication. Syntax No parameters. Usage Guidelines Network Time Protocol (NTP) authentication enables the controller to authenticate the NTP server before synchronizing local time with server. This helps identify secure servers from fradulent servers. This command has to be enabled for NTP authentication to work.
ntp authentication-key ntp authentication-key md5 Description This command configures a key identifier and secret key and adds them into the database. NTP authentication works with a symmetric key configured by user. The key is shared by the client (Dellcontroller) and an external NTP server. Syntax Parameter Description Default The key identifier is a string that is shared by the client (Dellcontroller) and an external NTP server. This value is added into the database.
ntp server #ntp server [iburst] [key ] Description This command configures a Network Time Protocol (NTP) server. Syntax Parameter Description Default IP address of the NTP server, in dotted-decimal format. — iburst (Optional) This parameter causes the controller to send up to ten queries within the first minute to the NTP server. This option is considered “aggressive” by some public NTP servers.
ntp trusted-key ntp trusted-key Description This command configures an additional subset of trusted keys which can be used for NTP authentication. Syntax Parameter Description Default An additional trusted string that can be used for authentication — Usage Guidelines You can configure additional subset of keys which are trusted and can be used for NTP authentication. Example The following command configures an additional trusted key(84956) which can be used for NTP authentication.
packet-capture packet-capture [other {disable | enable}] [sysmsg {all | disable | ] [tcp {all | disable | }] [udp {all | disable | ]] Description Use this command to enable or disable packet capturing and set packet capturing options for a single packet capture session. Syntax Parameter Description Default other Enable or disable all other types of packets. Specify up to ten commaseparated opcodes to capture; use all to sniff all opcodes; use disable to bypass the all setting.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 462 | packet-capture Dell PowerConnect W-Series ArubaOS 6.
packet-capture-defaults packet-capture-defaults [other{disable|enable}] [sysmsg{all|disable|] [tcp {all|disable|}] [udp{all|disable|]] Description Use this command to enable or disable packet capturing and define a set of default packet capturing options on the control path for debugging purposes. Syntax Parameter Description Default other Enable or disable all other types of packets.
1 Packet filtering UDP with 1 port(s) enabled: 1 Packet filtering for internal messaging opcodes disabled. Packet filtering for all other packets disabled. Packet Capture Defaults(across switches and reboots if saved) ============================================================ Packet filtering TCP with 2 port(s) enabled: 2 1 Packet filtering UDP with 1 port(s) enabled: 1 Command History This command was introduced in ArubaOS 2.3.
page page Description This command sets the number of lines of text the terminal will display when paging is enabled. Syntax Parameter Description Range length Specifies the number of lines of text displayed. 24 - 100 Usage Guidelines Use this command in conjunction with the paging command to specify the number of lines of text to display. For more information on the pause mechanism that stops the command output from printing continuously to the terminal, see "paging" on page 466.
paging paging Description This command stops the command output from printing continuously to the terminal. Syntax No parameters Usage Guidelines By default, paging is enabled. With paging enabled, there is a pause mechanism that stops the command output from printing continuously to the terminal. If paging is disabled, the output prints continuously to the terminal. To disable paging, use the no paging command. You must be in enable mode to disable paging.
panic panic {clear | info {file |nvram } | list {file |nvram} | save } Description This command manages information created during a system crash. Syntax Parameter Description clear Removes panic information from non-volatile random access memory (NVRAM). info Displays the content of specified panic files. list Lists panic information in the specified file in flash or in NVRAM.
papi-security (deprecated) papi-security key [enhanced-security] no... Description The papi-security command enforces advanced security options and provides an enhanced level of security. WARNING: The best practice is to refrain from modifying these settings unless advised to do so by Dell technical support. Syntax Parameter Description Default key The key authenticates the messages between systems. — The key string.
Related Commands (host)(config) #show papi-security (host)(config) #show ap database Command History Modification ArubaOS 3.4 Command introduced. ArubaOS 6.2 Command deprecated Command Information Platform License Command Mode Available on all platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
pcap (deprecated) pcap {raw-start [bssid ] [channel ] [maxlen ]}|{interactive [bssid ][channel ]}|{clear|pause|resume|stop [bssid ]} Description These commands manage packet capture (PCAP) on Dell air monitors. Syntax Parameter Description raw-start Stream raw packets to an external viewer. IP address of the air monitor collecting packets.
Parameter Description clear Clears the packet capture session. pause Pause a packet capture session. resume Resume a packet capture session. start Start a new packet capture session. stop Stop a packet capture session. IP address of the air monitor collecting packets. ID of the PCAP session. bssid (Optional) Specify the BSSID of the Air Monitor interface for the PCAP session. BSSID of the Air Monitor Interface, which is usually its MAC address.
Command History Version Change ArubaOS 3.0 Command Introduced ArubaOS 3.4 The maxlen parameter was introduced, and the pcap start command deprecated. ArubaOS 6.2 Functionality with 2 new parameters, now subsumed by the ap packet capture command. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 472 | pcap (deprecated) Dell PowerConnect W-Series ArubaOS 6.
phonehome phonehome auto-report disable enable now smtp [port ] {size ] [user pass ] Description This command configures the PhoneHome auto reporting feature. Syntax Parameter Description auto-report The controller will periodically contact Dell support once a week to report any errors or changes to the controller configuration or inventory.
Usage Guidelines The automatic reporting feature, also known as PhoneHome, allows a controller to securely contact Dell support servers over the Internet to report events such as hardware failures, software malfunctions, and other critical events. When the PhoneHome automatic reporting feature is enabled, the controller sends Dell support weekly reports about the controller’s configuration, licenses, software and hardware status, and any software malfunctions via a secure email.
ping ping | ipv6 { | interface vlan } Description This command sends five ICMP echo packets to the specified ip address. You can also ping the specified IPv6 address. Syntax Parameter Description Destination IP Address ipv6 Specify this parameter to ping an IPv6 address. Specify the IPv6 global address. interface vlan Specify the IPv6 link local address of a specific VLAN interface.
Command History Release Modification ArubaOS 1.0 Command introduced ArubaOS 6.1 Introduced ipv6 parameter to provide support for IPv6. This command was introduced in ArubaOS 1.0. Command Information 476 | ping Platforms Licensing Command Mode All platforms Base operating system User, Enable, and Config modes on master controllers Dell PowerConnect W-Series ArubaOS 6.
pkt-trace pkt-trace acl {enable|disable} [trace {cptrace|pktrace} [trace-mask ]]] Description Enable packet tracing in the datapath. Use this feature only under the supervision of Dell technical support. Syntax Parameter Description Enable packet tracing for the specified access-control list. enable Enable packet tracing for the ACL. disable Disable packet tracing for the ACL. cptrace Send packet trace data into the Control Processor.
pkt-trace-global pkt-trace-global {enable|disable} [trace-mask ] Description Enable global packet tracing in the datapath. Use this feature only under the supervision of Dell technical support. Syntax Parameter Description Enable packet tracing for the specified access-control list. enable Enable global packet tracing for the ACL. disable Disable global packet tracing for the ACL. tracemask Specify a trace mask.
Description This command configures a Policer profile to manage the transmission rate of a class of traffic based on user-defined criteria. Command History Release Modification ArubaOS 6.2 Command deprecated. Dell PowerConnect W-Series ArubaOS 6.
pptp ip local pool pptp ip local pool [] Description This command configures an IP address pool for VPN users using Point-to-Point Tunneling Protocol (PPTP). Syntax Parameter Description User-defined name for the address pool. Starting IP address for the pool. Ending IP address for the pool.
priority-map priority-map dot1p high dscp high no ... Description This command configures the Type of Service (ToS) and Class of Service (CoS) values used to map traffic into high priority queues. Syntax Parameter Description Range User-defined name of the priority map. — dot1p IEEE 802.1p priority value, or a range of values separated by a dash (-).
process monitor process monitor log|restart| Description The process monitor validates the integrity of processes every 120 seconds. If a process does not respond during three consecutive 120-second timeout intervals, that process is flagged as nonresponsive and the process monitor will create a log message, restart the process or reboot the controller Syntax Parameter Description log The process monitor creates a log message when a process fails to responding properly.
/mswitch/bin/fpapps /mswitch/bin/pim /mswitch/bin/lic PROCESS_RUNNING PROCESS_RUNNING 0 0 120 120 3 3 Command History Release Modification ArubaOS 3.4 Command introduced ArubaOS 3.4 The process restart command was deprecated. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
prompt prompt Description This command changes the prompt text. Syntax Parameter Description Range Default prompt The prompt text displayed by the controller. 1–64 Usage Guidelines You can use any alphanumeric character, punctuation, or symbol character. To use spaces, plus symbols (+), question marks (?), or asterisks (*), enclose the text in quotes.
provision-ap provision-ap a-ant-bearing a-ant-gain a-ant-tilt-angle a-antenna {1|2|both} altitude ap-group ap-name apdot1x-passwd apdot1x-username cellular_nw_preference g-only|4g-only|advanced|auto copy-provisioning-params {ap-name | ip-addr } dns-server-ip dns-server-ip6 domain-name external-antenna fqln g-ant-bearing g-ant-gain g-ant-tilt-angle g-antenna {1|2|bo
usb-passwd usb-power-mode auto|enable|disable usb-tty usb-tty-control usb-type usb-user Description This command provisions or reprovisions an AP. Syntax Parameter Description Range a-ant-bearing Determines the horizontal coverage distance of the 802.11a (5GHz) antenna from True North. From a planning perspective, the horizontal coverage pattern does not consider the elevation or vertical antenna pattern.
Parameter Description Range based approach. Initially the modem is set to the default auto mode. This allows the modem firmware to select the available network. The RAP determines the RSSI value for the available network type (for example 4G), checks whether the RSSI is within required range, and if so, connects to that network.
Parameter Description Range ip6addr Static IPv6 address of the AP. — ip6prefix The prefix of static IPv6 address of the AP. — ipaddr Static IP address for the AP. — latitude Latitude coordinates of the AP. Use the format: Degrees, Minutes, Seconds (DMS). For example: 37 22 00 N — link-priority-cellular Set the priority of the cellular uplink.
Parameter Description Range pppoe-passwd Point-to-Point Protocol over Ethernet (PPPoE) password for the AP. — pppoe-servicename PPPoE service name for the AP. — pppoe-user PPPoE username for the AP. — read-bootinfo Retrieves current provisioning parameters of the specified AP. NOTE: This parameter can only be used on the master controller. — reprovision Provisions one or more APs with the values in the provisioning-params workspace.
Parameter Description Range usb-init The initialization string for the USB modem. This parameter only needs to be specified if the default string is not correct. usb-passwd A PPP password, if provided by the cellular service provider usb-power-mode auto| enable|disable Set the USB power mode to control the power to the USB port. usb-tty The TTY device path for the USB modem. This parameter only needs to be specified if the default path is not correct.
4. Use the provision-ap options to set new values. Use the show provisioning-params command to display parameters and values in the provisioning-params workspace. Use the clear provisioning-params command to reset the workspace to default values. 5. Use the reprovision option to provision the AP with the values in provisioning-params workspace. The AP automatically reboots.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.2 Introduced support for the mesh parameters, additional antenna parameters, and AP location parameters. ArubaOS 3.4 Introduced support for the following parameters: l installation l mesh-sae l set-ikepsk-by-addr l usb-dev l usb-dial l usb-init l usb-passwd l usb-tty l usb-type l usb-user l link-priority-cellular l link-priority-ethernet ArubaOS 5.0 The mesh-sae parameter no longer has the sae-default option.
qos-profile (deprecated) qos-profile clone dot1p drop-precedence {high | low} dscp no traffic-class Description This command configures a QoS profile to assign TC/DP, DSCP, and 802.1p values to an interface or policer profile. Command History Release Modification ArubaOS 6.2 Command deprecated. Dell PowerConnect W-Series ArubaOS 6.
rap-wml rap-wml [ageout ] [cache{disable|enable}] [db-name ] [ip-addr] [password ] [type {mssql|mysql}] [user ] Description Use this command to specify the name and attributes of a MySQL or an MSSQL server. Syntax Parameter Description Default ageout (Optional) Specifies the cache ageout period, in seconds. 0 cache (Optional) Enables the cache, or disables the cache. Disabled db-name (Optional) Specifies the name of the MySQL or MSSQL database.
Command Information Platforms Licensing Command Mode All platforms Requires the RF Protect license. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
rap-wml table rap-wml table {[delimiter ] | [timestamp-column ]} Description Use this command to specify the name and attributes of the database table to be used for lookup. Syntax Parameter Description Default server-name Specifies the database server name (created using the rap-wml command. — table-name Specifies the database table name.
Command Information Platforms Licensing Command Mode All platforms Requires the RF Protect license. Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
reload-peer-sc (deprecated) reload-peer-sc Description This command performs a reboot of the W-6000M3 controller module. Command History Version Description ArubaOS 6.1 Command deprecated 498 | reload-peer-sc (deprecated) Dell PowerConnect W-Series ArubaOS 6.
reload reload Description This command performs a reboot of the controller. Syntax No parameters. Usage Guidelines Use this command to reboot the controller if required after making configuration changes or under the guidance of Dell Networks customer support. The reload command powers down the controller, making it unavailable for configuration. After the controller reboots, you can access it via a local console connected to the serial port, or through an SSH, Telnet, or WebUI session.
remote-node-local-factory-cert localuserdb remote-node-local-factory-cert Description Configure factory certificates for secure traffic between Remote-Node-Masters and Remote-Nodes. Syntax No parameters Usage Guidelines Issue this command on a Remote-Node Master to use a factory-installed certificate to authenticate a Remote-Node.
remote-node-localip localuserdb remote-node-localip ipsec KEY Description This command configures the switch-IP address and preshared key for the local Remote Node on a master Remote Node. Syntax Parameter Description Switch-IP address of the local remote node. Use the 0.0.0.0 address to configure a global preshared key for all inter-controller communications. ipsec Preshared key, which must be between 6-64 characters.
remote-node-masterip remote-node-masterip ipsec key ipsec-factory-cert Description This command configures the IP address and preshared key or factory-installed certificate for the Remote-Node Master on a local Remote Node. Syntax Parameter Description IP address of the master Remote Node. ipsec Secure communication between a Remote-Node and Remote-Node master by defining a preshared key, which must be between 6-64 characters.
remote-node-profile remote-node-profile aaa authentication-server internal use-local-switch cellular profile clone controller-ip vlan ip address dialer group instance interface cellular [{fastethernet|gigabitethernet} /] |[loopback]| [port-channel ]|[tunnel <1-2147483647>|vlan ] ip [default-gateway ]|{import cell|dhcp|pppoe}|{ipsec } }|[domain lookup|domain-name ]|[nam
uplink {cellular priority }|disable|enable|{wired priority }|{wired vlan } validate vlan []|[ ]|[range ]|[wired aaa- profile ] vrrp {advertise |authentication |description |ip address |preempt|priority |shutdown} tracking interface {fastethernet /|gigabitethernet /}{sub }|tracking master-up-time add |tracking vlan {sub }|tracking
Parameter Description n internal: Then remote node IP will be derived from the remote node DHCP pool. pppoe: Use PPPoE to obtain IP address For details on using this command, see "interface fastethernet | gigabitethernet" on page 314 n ip Configure the Interface Internet Protocol configuration sub commands. For details, see command descriptions beginning with "ip defaultgateway" on page 358.
Parameter Description or RN tunnels. The ID number of the VLAN associated with the RN. IP addresses at the start and end of the RN’s address range, in dotteddecimal format. IP address at the end of the RN’s address range, in dotted-decimal format. num_hosts Maximum number of hosts supported by an RN using this pool. router ospf Enables and configures OSPF.
Related Commands Command Description Mode remote-node-localip Configures security for all Remote Node and Remote Controller control traffic Enable and Config mode remote-node-masterip Configures security for the Remote Node master IP address. Enable and Config mode local-userdb-remote-node This command adds a Remote Node to the Remote Node whitelist. You can also delete the whitelist entry using this command.
rename rename Description This command renames an existing system file. Syntax Parameter Description filename An alphanumeric string that specifies the current name of the file on the system. newfilename An alphanumeric string that specifies the new name of the file on the system. Usage Guidelines Use this command to rename an existing system file on the controller.
restore restore flash Description This command restores flash directories backed up to the flashbackup.tar.gz file. Syntax Parameter Description flash Restores flash directories from the flashbackup.tar.gz file. Usage Guidelines Use the backup flash command to tar and compress flash directories to the flashbackup.tar.gz file. Example The following command restores flash directories from the flashbackup.tar.gz file: (host) #restore flash Command History This command was introduced in ArubaOS 3.0.
rf am-scan-profile clone dwell-time-active-channel dwell-time-other-reg-domain-channel dwell-time-rare-channel dwell-time-reg-domain-channel no scan-mode Description Configure an Air Monitor (AM) scanning profile. Syntax Parameter Description Range Default Name of this instance of the profile.
Command Information Platforms Licensing Command Mode All Platforms RFProtect Configuration Mode (config) Dell PowerConnect W-Series ArubaOS 6.
rft rft test profile antenna-connectivity ap-name [dest-mac [phy {a|g}| radio {0|1}]] rft test profile link-quality {ap-name dest-mac [phy {a|g}| radio {0|1}] | bssid dest-mac | ip-addr dest-mac [phy {a|g}|radio {0|1}]} rft test profile raw {ap-name dest-mac [phy {a|g}|radio {0|1}] | bssid dest-mac | ip-addr dest-mac [phy {a|g}|radio {0|1}]} Description This command is used for RF
rf arm-profile rf rf arm-profile 40MHz-allowed-bands {All|None|a-only|g-only} acceptable-coverage-index active-scan (not intended for use) assignment {disable|maintain|multi-band|single-band} backoff-time client-aware clone error-rate-threshold error-rate-wait-time free-channel-index ideal-coverage-index load-aware-scan-threshold max-tx-power min-scan-time <# of scans> min-tx-power mode-aware multi-band-scan no ...
Parameter g-only Description Range Default 1-6 4 Allows use of 40 MHz channels on the 2.4 GHZ (802.11b/g) frequency band only. acceptable-cov erage-index The minimal coverage that the AP should try to achieve on its channel. The denser the AP deployment, the lower this value should be. This setting applies to multi-band implementations only. active-scan When the Active Scan checkbox is selected, an AP initiates active scanning via probe request.
Parameter Description index channel. The denser the AP deployment, the lower this value should be. Recommended value is 10. load-aware-scanthreshold Load aware ARM preserves network resources during periods of high traffic by temporarily halting ARM scanning if the load for the AP gets too high. The Load Aware Scan Threshold is the traffic throughput level an AP must reach before it stops scanning. The supported range for this setting is 020000000 bytes/second. (Specify 0 to disable this feature.
Parameter Description Range Default ota-updates The ota-updates option allows an AP to get information about its RF environment from its neighbors, even the AP cannot scan. If this feature is enabled, when an AP on the network scans a foreign (non-home) channel, it sends other APs an Over-theAir (OTA) update in an 802.11 management frame that contains information about the scanning AP's home channel, the current transmission EIRP value of its home channel, and one-hop neighbors seen by that AP.
Parameter Description Range Default voip-aware-scan Dell’s VoIP Call Admission Control (CAC) prevents any single AP from becoming congested with voice calls. When you enable CAC, you should also enable voipaware-scan parameter in the ARM profile, so the AP will not attempt to scan a different channel if one of its clients has an active VoIP call. This option requires that scanning is also enabled.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3. Support for the high-throughput IEEE 802.11n standard was introduced ArubaOS 3.3.2 Support for the wait-time parameter was removed. ArubaOS 3.4.1 The voip-aware-scan parameter no longer requires a license, and is available in the base OS. ArubaOS 6.1 The ps-aware-scan parameter is now disabled by default.
rf dot11a-radio-profile rf dot11a-radio-profile am-scan-profile arm-profile beacon-period beacon-regulate cap-reg-eirp cell-size-reduction channel channel-reuse {static|dynamic|disable} channel-reuse-threshold clone csa csa-count disable-arm-wids-function dot11h high-throughput-enable ht-radio-profile interference-immunity maximum-distance mgmt-frame-throttle
Parameter Description Range Default disabled wireless clients. beacon-regulate Enabling this setting introduces randomness in the beacon generation so that multiple APs on the same channel do not send beacons at the same time, which causes collisions over the air. — cap-reg-eirp Work around a known issue on Cisco 7921G telephones by specifying a cap for a radio’s maximum equivalent isotropic radiated power (EIRP).
Parameter Description Range Default channel is determined by decreasing the primary channel number by 4. Example: 157represents 157 as the primary channel and 153 as the secondary channel. NOTE: 20 MHz clients are allowed to associate when a primary and secondary channel are configured; however, the client will only use the primary channel. channel-reuse When you enable the channel reuse feature, it can operate in either of the following three modes; static, dynamic or disable.
Parameter Description Range Default disable-arm-wids-function Disables Adaptive Radio Management (ARM) and Wireless IDS functions. These can be disabled if a small increase in packet processing performance is desired. If a radio is configured to operate in Air Monitor mode, then these functions are always enabled irrespective of this option. CAUTION: Use carefully, since this effectively disables ARM and WIDS 1-16 4 dot11h Enable advertisement of 802.11d (Country Information) and 802.
Parameter Description Range Default supported maximum, the maximum supported value will be used instead. Values below 600m will use default settings. mgmt-frame-throttleinterval Averaging interval for rate limiting management frames in seconds. Zero disables rate limiting. Note: This parameter only applies to AUTH and ASSOC/RE-ASSOC management frames. 0-60 1 second interval mgmt-frame-throttle-limit Maximum number of management frames allowed in each throttle interval.
Parameter Description l Range Default neighborhoods. If spectrum load balancing is enabled in a 802.11a radio profile and a spectrum load balancing domain isalso defined, AP radios belonging to the same spectrum load balancing domain will be considered part of the same RF neighborhood for load balancing, and will not recognize RF neighborhoods defined by the ARM feature.
Parameter Description Range Default Transmission power may be further limited by regulatory domain constraints and AP capabilities. Usage Guidelines This command configures radios that operate in the 5 GHz frequency band, which includes radios utilizing the IEEE 802.11a or IEEE 802.11n standard. Channels must be valid for the country configured in the AP regulatory domain profile (see "ap regulatory-domain-profile" on page 146). To view the supported channels, use the show ap allowed-channels command.
Release Modification ArubaOS 6.1 The spectrum-monitoring and slb-threshold parameters were introduced. ArubaOS 6.1.3.2 The cell-size-reduction parameter was introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 526 | rf dot11a-radio-profile Dell PowerConnect W-Series ArubaOS 6.
rf dot11g-radio-profile rf dot11g-radio-profile am-scan-profile arm-profile beacon-period beacon-regulate cap-reg-eirp cell-size-reduction channel channel-reuse {static|dynamic|disable} channel-reuse-threshold clone csa csa-count disable-arm-wids-function dot11b-protection dot11h high-throughput-enable ht-radio-profile interference-immunity maximum-distance m
Parameter Description Range Default beacon-period Time, in milliseconds, between successive beacon transmissions. The beacon advertises the AP’s presence, identity, and radio characteristics to wireless clients. 60 (minimum) 100 milliseconds beacon-regulate Enabling this setting introduces randomness in the beacon generation so that multiple APs on the same channel do not send beacons at the same time, which causes collisions over the air.
Parameter Description Range Default num: Entering a channel number disables 40 MHz mode and activates 20 MHz mode for the entered channel. l num+: Entering a channel number with a plus (+) sign selects a primary and secondary channel for 40 MHz mode. The number entered becomes the primary channel and the secondary channel is determined by increasing the primary channel number by 4. Example: 157+ represents 157 as the primary channel and 161 as the secondary channel.
Parameter Description Range Default signal strength. If the value is set to zero, the feature will automatically determine an appropriate threshold. disable-arm-wids-function Disables Adaptive Radio Management (ARM) and Wireless IDS functions. These can be disabled if a small increase in packet processing performance is desired. If a radio is configured to operate in Air Monitor mode, then these functions are always enabled irrespective of this option.
Parameter Description Range Default maximum-distance Maximum distance between a client and an AP or between a mesh point and a mesh portal, in meters. This value is used to derive ACK and CTS timeout times. A value of 0 specifies default settings for this parameter, where timeouts are only modified for outdoor mesh radios which use a distance of 16km. 0-24km (40MHz mode) 0 meters 0-54km (20MHz mode) The upper limit for this parameter varies, depending on the 20/40 MHz mode for a 2.
Parameter Description Range Default that triggers load balancing. The default value is 20%, meaning that spectrum load balancing is activated when there are 20% more clients on one channel than on another channel used by the AP radio. slb-update-interval Specify how often spectrum load balancing calculations are made (in seconds). The default value is 30 seconds.
Parameter Description Range Default monitors to examine the radio frequency (RF) environment in which the Wi-Fi network is operating, refer to the Spectrum Analysis chapter of the Dell PowerConnect W-Series ArubaOS User Guide. spectrum-profile Specify the rf spectrum profile used by hybrid APs and spectrum monitors. This profile sets the spectrum band and device ageout times used by a spectrum monitor or hybrid AP radio. For details, see "rf spectrum-profile" on page 542.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3.2 Introduced protection for 802.11b clients and support for the high-throughput IEEE 802.11n standard. ArubaOS 3.4 Support for the following parameters: l Spectrum load balancing l Spectrum load balancing domain l RX Sensitivity Tuning Based Channel Reuse l RX Sensitivity Threshold l ARM/WIDS Override ArubaOS 3.4.1 The maximum-distance parameter was introduced. ArubaOS 3.4.
rf event-thresholds-profile rf event-thresholds-profile bwr-high-wm bwr-low-wm clone detect-frame-rate-anomalies fer-high-wm fer-low-wm ffr-high-wm ffr-low-wm flsr-high-wm flsr-low-wm fnur-high-wm fnur-low-wm frer-high-wm frer-low-wm frr-high-wm frr-low-wm no ... Description This command configures the event thresholds profile.
Parameter Description Range Default ffr-high-wm If the frame fragmentation rate (as a percentage of total frames in an AP) exceeds this value, a frame fragmentation rate exceeded condition exists. The recommended value is 16%. 0-100 16% ffr-low-wm After a frame fragmentation rate exceeded condition exists, the condition persists until the frame fragmentation rate drops below this value. The recommended value is 8%.
detect-frame-rate-anomalies Command History This command was introduced in ArubaOS 3.0 Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
rf ht-radio-profile rf ht-radio-profile 40MHz-intolerance clone diversity-spreading-workaround honor-40MHz-intolerance no Description This command configures high-throughput AP radio settings. High-throughput features use the IEEE 802.11n standard. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters.
Usage Guidelines The ht-radio-profile configures high-throughput settings for networks utilizing the IEEE 802.11n standard, which supports 40 MHZ channels and operates in both the 2.4 GHZ and 5 GHZ frequency bands. Most transmissions to high throughput (HT) stations are sent through multiple antennas using cyclic shift diversity (CSD).
rf optimization-profile rf optimization-profile clone handoff-assist low-rssi-threshold no ... rssi-check-frequency rssi-falloff-wait-time Description This command configures the RF optimization profile. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters. — “default” clone Name of an existing optimization profile from which parameter values are copied.
Version Modification ap-lb-user-high-wm ap-lb-user-low-wm l ap-lb-util-high-wm l ap-lb-util-low-wm l ap-lb-util-wait-time
rf spectrum-profile rf spectrum-profile age-out audio|bluetooth|cordless-ff-phone|cordless-fh-base|cordless-fh-network|genericff|generic-fh|microwave|microwave-inverter|unknown|video|wifi|xbox clone no ... Description Define the device ageout times used by a spectrum monitor, or hybrid AP radio.
Usage Guidelines The Spectrum Analysis software module provides visibility into RF coverage, allowing you to troubleshoot RF interference and identify the 802.11 devices on the network. APs that gather spectrum data are called Spectrum Monitors, or SMs, and reference a spectrum profile that determines the band monitored by that SM radio.
router mobile router mobile Description This command enables Layer-3 (IP) mobility. Syntax No parameters. Usage Guidelines IP mobility is disabled by default on the controller. You need to use this command to enable IP mobility. This command must be executed on all controllers (master and local) that need to provide support for layer-3 roaming in a mobility domain.
router ospf router ospf area default-cost nssa [default-information no-redistribution | no-summary] stub [no-summary] default-information originate always redistribute vlan [ | add | remove ] router-id subnet exclude Description Global OSPF configuration for the upstream router. Syntax Parameter Description area Enter the keyword area followed by the area identification, in dotted decimal format, to configure an OSPF area.
Example By default OSPF will advertise all the user VLAN subnet addresses in the router LSA (Link-State Advertisement). To control the OSPF advertisement, execute the following command: (host) (config) # router ospf subnet exclude 75.1.1.0 255.255.0.0 With the above command, any user VLAN subnet matching 75.1/16 will not be advertised in the router LSA. To return to the default advertisement, execute the command: (host) (config) # no router ospf subnet exclude 75.1.1.0 255.255.0.
service service [dhcp] [network-storage] [print-server] Description This command enables the DHCP server on the controller.
show local-cert-mac show local-cert-mac tag Description Display the IP, MAC address and certificate configuration of local controllers in a master-local configuration. Syntax Parameter Description tag IP address of the local controller or MAC address of the local controller certificate. Usage Guidelines By default the output of this command shows each local controller’s IP and MAC address and the type of certificate used by those local controllers (Custom or Factory).
Related Commands Command Description Mode local-factory-cert This command configures the factory-installed certificate for secure communication between a local controller and a master controller. Enable or Config mode on master controllers. local-custom-cert This command configures a custom certificate for secure communication between a local controller and a master controller. Enable or Config mode on master or local controllers. Command History Available in ArubaOS 6.
show remote-node-dhcp-pool show remote-node-dhcp-pool Description The output of this command lists shows Remote Node DHCP pool summary information. Syntax Parameter Description remote-node-profile-name Name of the Remote Node profile Usage Guidelines Each Remote Node profile contains a Remote Node DHCP address pool, which defines a range of IP addresses allocated for Remote Node controllers at a remote site, and the VLAN to be associated with those addresses.
Command History Release Modification ArubaOS 6.0 Command introduced Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show remote-node-profile show remote-node-profile Description The output of this command shows Remote Node profile configuration information. Syntax Parameter Description remote-node-profile-name Name of the Remote Node profile Usage Guidelines This show remote-node-profile command shows the configuration status of a Remote Node profile. To create a Remote Node profile, use the remote-node-profile command to create a Remote Node profile.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show remote-node Description Shows configuration and other information about the remote node. Syntax Parameter Description config Shows configuration information for the remote node. dhcp-instance Shows the remote node address pool information including pool name, DHCP pool start IP address, DHCP pool mask, DHCP pool broadcast IP address, and the DHCP pool gateway IP address.
ip route 10.100.102.217 255.255.255.255 10.3.29.254 ip route 10.100.102.173 255.255.255.255 10.3.29.254 ip route 10.1.1.41 255.255.255.255 10.3.29.254 mgmt-user "admin" "root" "ade8c0d3890aa97914d926120279aef2" service dhcp ip dhcp pool vlanx domain-name mycorp.com ip dhcp pool vlanx ip dhcp pool vlanx default-router 192.167.1.1 ip dhcp pool vlanx dns-server 192.167.1.1 ip dhcp pool vlanx network 192.167.1.0 255.255.255.
show aaa authentication all show show aaa authentication all Description Show authentication statistics for your controller, including authentication methods, successes and failures. Usage Guidelines This command displays a general overview of authentication statistics. To view authentication information for specific profiles such as a captive-portal, MAC or 801.x authentication profile, issue the commands specific to those features.
show aaa authentication captive-portal show aaa authentication captive-portal [] Description This command shows configuration information for captive portal authentication profiles. Syntax Parameter Description The name of an existing captive portal authentication profile.
Logout popup window Use HTTP for authentication Logon wait minimum wait Logon wait maximum wait logon wait CPU utilization threshold Max Authentication failures Show FQDN Use CHAP (non-standard) Login page Welcome page Show Welcome Page Add switch IP address in the redirection URL Adding user vlan in redirection URL Add a controller interface in the redirection URL Allow only one active user session White List Black List Show the acceptable use policy page Enabled Disabled 5 sec 10 sec 60 % 0 Disabled Disa
Parameter Description Show FQDN If enabled, the user can see and select the fully-qualified domain name (FQDN) on the captive portal login page. Authentication Protocol This parameter specifies the type of authentication required by this profile, PAP is the default authentication type Login page URL of the page that appears for the user logon. Welcome page URL of the page that appears after logon and before the user is redirected to the web URL.
Version Description parameters were added ArubaOS 6.2 the Authentication Protocol parameter was added, and the Use CHAP parameter was deprecated. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 560 | show aaa authentication captive-portal Dell PowerConnect W-Series ArubaOS 6.
show aaa authentication captive-portal customization show aaa authentication captive-portal customization Description Display customization settings for a captive portal profile Syntax Parameter Description The name of an existing captive portal authentication profile. Usage Guidelines The this command shows how a captive portal profile has been customized with non-default configuration settings.
Related Commands Command Description Mode aaa authentication captiveportal If you do not yet have any captive portal profiles defined, use the command aaa authentication captive-portal to configure your captive portal profiles. Config mode Command History This command was introduced in ArubaOS 3.0.
show aaa authentication dot1x show aaa authentication dot1x [|countermeasures] Description This command shows information for 802.1X authentication profiles. Syntax Parameter Description The name of an existing 802.1X authentication profile. countermeasures Reports if WPA/WPA2 Countermeasures have been enabled for 802.1X profiles. If enabled, the AP scans for message integrity code (MIC) failures in traffic received from clients.
Machine Authentication: Default Machine Role Machine Authentication Cache Timeout Blacklist on Machine Authentication Failure Machine Authentication: Default User Role Interval between Identity Requests Quiet Period after Failed Authentication Reauthentication Interval Use Server provided Reauthentication Interval Multicast Key Rotation Time Interval Unicast Key Rotation Time Interval ...
Parameter Value Framed MTU Shows the framed MTU attribute sent to the authentication server. Number of times ID-Requests are retried Maximum number of times ID requests are sent to the client. Maximum Number of Reauthentication Attempts Maximum number of reauthentication attempts.
Parameter Value key as the unicast WEP key. Use Static Key If enabled, the controller will use a static key as the unicast/multicast WEP key. xSec MTU Shows the size of the MTU for xSec. Termination Shows if 802.1X termination is enabled or disabled on the controller. Termination EAP-Type Shows the current Extensible Authentication Protocol (EAP) method, either EAP-PEAP or EAPTLS. Termination Inner EAP-Type When EAP-PEAP is the EAP method, this parameter displays the inner EAP type.
Parameter Value Check certificate common name against AAA server If enabled, this parameter verifies that the certificate's common name exists in the server. This parameter is disabled by default dot1x profiles. Related Commands Command Description Mode aaa authentication dot1x If you do not yet have any 802.1X authentication profiles defined, use the command aaa authentication dot1x to configure your 802.1X profiles. Config mode Command History Version Description ArubaOS 3.
show aaa authentication mac show aaa authentication mac [] Description This command shows information for MAC authentication profiles.Issue this command without the option to display the entire MAC Authentication profile list, including profile status and the number of references to each profile. Include a profile name to display detailed MAC authentication configuration information for that profile.
Related Commands Command Description Mode aaa authentication mac Configure MAC authentication values on your controller. Config mode Command History This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa authentication mgmt show aaa authentication mgmt Description This command displays administrative user authentication information, including management authentication roles and servers. Usage Guidelines Issue this command to identify the default management role assigned to authenticated administrative users, and the name of the group of servers used to authenticate these users. Example The output of the following example displays management authentication information for your controller.
Command History Version Description ArubaOS 3.0 Command introduced. ArubaOS 6.1 The Mode parameter in the command output was renamed Enable. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa authentication stateful-dot1x show aaa authentication stateful-dot1x [config-entries] Description This command displays configuration settings for 802.1X authentication for clients on non-Dell APs. Syntax Parameter Description config-entries Display details for the AP Server configuration list. Usage Guidelines Issue this command to identify the default role assigned to the 802.1X user group, name of the group of RADIUS servers used to authenticate the 802.1X users, and the 802.
Cfg-Name -------cfg22 AP-IP ----- Server -----10.3.14.6 Parameter Description Cfg-Name is a auto-generated name AP-IP IP address of the AP. Server Name of the authentication server. Shared-Secret Shared authentication secret.
show aaa authentication stateful-ntlm show aaa authentication stateful-ntlm Description This command displays configuration settings for the Stateful NTLM Authentication profile.Issue this command without the option to display the entire Stateful NTLM Authentication profile list, including profile status and the number of references to each profile. Include a profile name to display detailed Stateful NTLM authentication configuration information for that profile.
Parameter Description Default Role This parameter shows the role assigned to NTLM authenticated users. Server Group The name of a windows server group. Mode The Mode parameter indicates whether or not this authentication profile is enabled or disabled. Timeout Timeout period for an authentication request, in seconds.
show aaa authentication via auth-profile show aaa authentication via auth-profile [] Description This command displays configuration settings for the VIA Authentication profile.Issue this command without the option to display the entire VIA Authentication profile list, including profile status and the number of references to each profile. Include a profile name to display detailed VIA authentication configuration information for that profile.
Description VIA config for the MV office The output of this command includes the following parameters: Parameter Description Default Role Role assigned to the captive portal user upon login. Server Group Name of the group of servers used to authenticate captive portal users. Max Authentication failures Maximum number of authentication failures before the user is blacklisted. Description Description of the VIA authentication profile.
show aaa authentication via connection-profile show aaa authentication via connection-profile [] Description This command displays configuration settings for the VIA connection profile.Issue this command without the option to display the entire VIA Connection profile list, including profile status and the number of references to each profile. Include a profile name to display detailed VIA connection configuration information for that profile.
Allow client to auto-upgrade VIA tunneled networks Enable split tunneling VIA Client WLAN profiles Allow client side logging VIA IKE V2 Policy VIA IKE Policy Use Windows Credentials Enable IKEv2 Use Suite B Cryptography IKEv2 Authentication method VIA IPSec V2 Crypto Map VIA IPSec Crypto Map Allow user to save passwords Enable Supplicant Enable FIPS Module Auto-launch Supplicant Lockdown All Settings Domain Suffix in VIA Authentication Enable Controllers Load Balance Enable Domain Pre-connect VIA Banner Mes
Configuration Option Description Allow client to autoupgrade Enable or disable VIA client to automatically upgrade when an updated version of the client is available on the controller. Default: Enabled VIA tunneled networks A list of network destination (IP address and netmask) that the VIA client will tunnel through the controller. All other network destinations will be reachable directly by the VIA client. Enable splittunneling Enable or disable split tunneling.
Configuration Option Description Lockdown All Settings If enabled, all user options on the VIA client are disabled. Domain Suffix in VIA Authentication Enables a domain suffix on VIA Authentication, so client credentials are sent as domainname\username instead of just username. Enable Controllers Load Balance This option allows the VIA client to failover to the next available selected randomly from the list as configured in the VIA Servers option.
Configuration Option Description Block traffic rules Specify a hostname or IP address and network mask to define a whitelist of users to which the Block traffic until VPN tunnel is up setting will not apply. Related Commands Command Description Mode aaa authentication via connectionprofile Use aaa authentication via connection-profile to configure the parameters displayed in the output of this show command. Config mode Command History This command was introduced in ArubaOS 5.0.
show aaa authentication via web-auth show aaa authentication via web-auth [default] Description A VIA web authentication profile contains an ordered list of VIA authentication profiles. The web authentication profile is used by end users to login to the VIA download page (https:///via) for downloading the VIA client. Only one VIA web authentication profile is available.
Command History This command was introduced in ArubaOS 5.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 584 | show aaa authentication via web-auth Dell PowerConnect W-Series ArubaOS 6.
show aaa authentication vpn show aaa authentication vpn [default|default-cap|default-rap] Description This command displays VPN authentication settings, including authentication roles and servers. Usage Guidelines Issue this command to identify the default role assigned to VPN users, the name of the group of servers used to authenticate the VPN users, and the maximum number of authentication failures allowed before the user is blacklisted.
Related Commands Command Description Mode aaa authentication via auth-profile Use the command aaa authentication via auth-profile to configure the settings displayed in the output of this show command. Config mode Command History Version Description ArubaOS 3.0 Command introduced. ArubaOS 5.0 The default-cap and default-rap profiles were introduced. ArubaOS 6.1 The Check certificate common name against AAA server parameter was introduced.
show aaa authentication wired show aaa authentication wired Description View wired authentication settings for a client device that is directly connected to a port onthe controller. Usage Guidelines This command displays the name of the AAA profile currently used for wired authentication. Example The following example shows the current wired profile for the controller is a profile named “secure_profile_3.
show aaa authentication wispr show aaa authentication wispr option to display the entire WISPr Authentication profile list, including profile status and the number of references to each profile. Include a profile name to display detailed WISPr authentication configuration information for that profile.
-------------------------------------Parameter Value ------------Default Role guest Server Group default Logon wait minimum wait 5 sec Logon wait maximum wait 10 sec logon wait CPU utilization threshold 60 % WISPr Location-ID ISO Country Code US WISPr Location-ID E.164 Country Code 1 WISPr Location-ID E.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 590 | show aaa authentication wispr Dell PowerConnect W-Series ArubaOS 6.
show aaa authentication-server all show aaa authentication-server all Description View authentication server settings for both external authentication servers and the internal controller database. Usage Guidelines The output of this command displays statistics for the Authentication Server Table, including the name and address of each server, server type and configured authorization and accounting ports.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 592 | show aaa authentication-server all Dell PowerConnect W-Series ArubaOS 6.
show aaa authentication-server internal show aaa authentication-server internal [statistics] Description View authentication server settings for the internal controller database. Examples The output of the command below shows that the internal authentication server has been disabled (host) #show aaa authentication-server internal Internal Server --------------Host IP addr ---------Internal 10.168.254.
Parameter Description PAP Requests Number of PAP requests received by the internal server. PAP Accepts Number of PAP requests accepted by the internal server. PAP Rejects Number of PAP requests rejected by the internal server. MSCHAPv2 Requests Number of MSCHAPv2 requests received by the internal server. MSCHAPv2 Accepts Number of MSCHAPv2 requests accepted by the internal server. MSCHAPv2 Rejects Number of MSCHAPv2 requests rejected by the internal server.
show aaa authentication-server ldap show aaa authentication-server ldap [] Description Display configuration settings for your LDAP servers. Syntax Parameter Description Name that identifies an LDAP server. Examples The output of the example below displays the LDAP server list with the names of all the LDAP servers.
Parameter Description host IP address of the LDAP server Admin-DN Distinguished name for the admin user who has read/search privileges across all of the entries in the LDAP database. Admin Passwd Password for the admin user. Allow Clear-Text If enabled, this parameter allows clear-text (unencrypted) communication with the LDAP server. Auth Port Port number used for authentication.
show aaa authentication-server radius show aaa authentication-server radius [|statistics] Description Display configuration settings for your RADIUS servers. Syntax Parameter Description Name that identifies a RADIUS server. Examples The output of the example below displays the RADIUS server list with the names of all the RADIUS servers.
The output of this command includes the following information: Parameter Description host IP address of the RADIUS server Key Shared secret between the controller and the authentication server. Acct Port Accounting port on the server. auth port Authentication port on the server. Retransmits Maximum number of retries sent to the server by the controller before the server is marked as down.
show aaa authentication-server tacacs show aaa authentication-server tacacs []|statistics Description Display configuration settings for your TACACS+ servers. Syntax Parameter Description Name that identifies an TACACS+ server. statistics Displays accounting, authorization, and authentication request and response statistics for the TACACS server.
Parameter Description host IP address of the TACACS+ server Key Shared secret between the controller and the authentication server. TCP Port TCP port used by the server. Retransmits Maximum number of retries sent to the server by the controller before the server is marked as down. Timeout Maximum time, in seconds, that the controller waits before timing out the request and resending it. Mode Shows whether this server is Enabled or Disabled.
show aaa authentication-server windows show aaa authentication-server windows [] Description Display configuration settings for your Windows servers. Syntax Parameter Description Name that identifies a Windows server. Examples The output of the example below displays the Windows server list with the names of all the Windows servers used for NTLM authentication.
The output of this command includes the following parameters: Command History This command was introduced in ArubaOS 3.4.1. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 602 | show aaa authentication-server windows Dell PowerConnect W-Series ArubaOS 6.
show aaa bandwidth-contracts show aaa bandwidth-contracts Description This command shows the contract names, ID numbers and Rate limits for your bandwidth contracts. Example The output of the following command shows that the bandwidth contract VLAN has a configured rate of 6 Mbps, and the contract User has a rate of 2048 Kbps.
show aaa derivation-rules show aaa derivation-rules [server-group |user ] Syntax Parameter Description Name of a server group Name of a user rule group Description Show derivation rules based on user information or configured for server groups. Example The output of the following command shows that the server group group1 has the internal database configured as its authentication server, and that there is a single rule assigned to that group.
Parameter Description and Operand match Operation This is the match method by which the string in Operand is matched with the attribute value returned by the authentication server. l contains – The rule is applied if and only if the attribute value contains the string in parameter Operand. l starts-with – The rule is applied if and only if the attribute value returned starts with the string in parameter Operand.
Parameter Description l l l l l l contains – The rule is applied if and only if the attribute value contains the string in parameter Operand. starts-with – The rule is applied if and only if the attribute value returned starts with the string in parameter Operand. ends-with – The rule is applied if and only if the attribute value returned ends with the string in parameter Operand. equals – The rule is applied if and only if the attribute value returned equals the string in parameter Operand.
show aaa dns-query-interval show aaa dns-query-interval Description View the configured interval between DNS requests sent from the controller to the DNS server. Syntax No parameters Usage Guidelines If you define a RADIUS server using the FQDN of the server rather than its IP address, the controller will periodically generate a DNS request and cache the IP address returned in the DNS response.
show aaa fqdn-server-names show aaa fqdn-server-names Description Show a table of IP addresses that have been mapped to fully qualified domain names (FQDNs). Syntax No parameters. Usage Guidelines If you define a RADIUS server using the FQDN of the server rather than its IP address, the controller will periodically generate a DNS request and cache the IP address returned in the DNS response. Issue this command to view the IP addreses that currently correlate to each RADIUS server FQDN.
show aaa main-profile show aaa main-profile summary Description Show a summary of all AAA profiles. Example The output of the show aaa main-profile summary command shows roles, server group settings, and wire-to-wirelessroaming statistics for each AAA profile.
Related Commands Command Description Mode aaa profile Use aaa profile define the parameters displayed in the output of this show command. Config mode Command History This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 610 | show aaa main-profile Dell PowerConnect W-Series ArubaOS 6.
show aaa password-policy mgmt show aaa password-policy mgmt [statistics] Description Show the current password policy for management users. Syntax Parameter Description statistics Include this optional parameter to show the numbers of failed login attempts and any lockout periods for management user accounts.
Parameter Description Case characters default, there is no requirement for lowercase letters in a password, and the parameter has a default value of 0. Minimum number of Digits Minimum number of numeric digits required in a management user password. By default, there is no requirement for digits in a password, and the parameter has a default value of 0. Minimum number of Special characters Minimum number of special characters required in a management user password.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa profile show aaa profile Description Show configuration details for an individual AAA profile. Example The output of the following command shows roles, servers and server group settings, and wire-to-wireless-roaming statistics for each AAA profile. (host) #show aaa profile default AAA Profile "default" --------------------Parameter --------Initial role MAC Authentication Profile MAC Authentication Default Role MAC Authentication Server Group 802.1X Authentication Profile 802.
Parameter Description 8021.X Authentication Server Group Name of the server group used for 802.1X authentication. L2 Authentication Fail Through To select the other authentication method if one fails. RADIUS Accounting Server Group Name of the server group used for RADIUS authentication. RADIUS Interim Accounting By default, the RADIUS accounting feature sends only start and stop messages to the RADIUS accounting server.
show aaa radius-attributes show aaa radius-attributes Description Show RADIUS attributes recognized by the controller. Example The output of the following command shows the name, currently configured value, type, vendor and RADIUS ID for each attribute.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa rfc-3576-server show aaa rfc-3576-server [statistics|] Description Show configuration details for an RFC-3576 server, which is a RADIUS server that can send user disconnect and change-of-authorization (CoA) messages, as described in RFC 3576. Example This first example shows that there are two configured servers in the RFC 3567 Server List.
Parameter Description Disconnect Requests Number of disconnect requests sent by the server. Disconnect Accepts Number of disconnect requests sent by the server that were accepted by the user. Disconnect Rejects Number of disconnect requests sent by the server that were rejected by the user. No Secret Number of authentication requests that did not contain a RADIUS secret. No Session ID Number of authentication requests that did not contain a session ID.
show aaa server-group show aaa server-group [|summary] Description Show configuration details for your AAA server groups. Syntax Parameter Description The name of an existing AAA server group. Usage Guidelines Issue this command without the >
Parameter Description name Name of an existing AAA server group. Servers Number of servers in the group. Rules Number of rules configured for the server group. hits Number of hits for the server’s rules. Out-of-Service Indicates whether the server is active, or out of service. Active servers may not have an entry in the Out-of-Service column.
Parameter Description l l l l l starts-with – The rule is applied if and only if the attribute value returned starts with the string in parameter Operand. ends-with – The rule is applied if and only if the attribute value returned ends with the string in parameter Operand. equals – The rule is applied if and only if the attribute value returned equals the string in parameter Operand.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa state ap-group show aaa state ap-group Description Show the names and ID numbers of your AP groups Example This first example shows that the selected controller has two defined AP groups. (host) #show aaa state ap-group AP Group Table -------------Name ID ---- -ap1 ap2 1 2 Related Commands Command Description Mode aaa server-group Use aaa server-group to define the AP groups displayed in the output of this show command Config mode Command History This command was introduced in ArubaOS 3.
show aaa state configuration show aaa state configuration Description Display authentication state configuration information, including the numbers of successful and failed authentications. Example This example shows authentication settings and values for a controller with no current users.
The output of the show aaa state configuration command includes the following parameters: Parameter Description Switch IP IP address of the local controller. Master IP IP address of the master controller. Switch Role Role assigned to the controller on which you issued the show aaa state command.
Parameter Description MAC Total number of MAC authentications or authentication failures since the last controller reset. VPN Total number of VPN authentications or authentication failures since the last controller reset. 802.1x Total number of 802.1X authentications or authentication failures since the last controller reset. Krb Total number of Kerberos authentications or authentication failures since the last controller reset.
show aaa state debug-statistics show aaa state debug statistics Description show debug statistics for controller authentication, authorization and accounting. Syntax No parameters.
Parameter Description non-ip Number of non-IP type packets sent between the datapath and the controlpath. zero-ip Number of packets sent without an internet protocol (IP). loopback If 1, the controller has a defined loopback address. If 0, a loopback address has not yet been configured. mac mismatch Number of users that were not authenticated due to MAC mismatches. spoof Number of users that were not authenticated due to spoofed IP addresses.
Parameter Description Idled users from STM timeout tunnel Number of users in tunnel forwarding mode that aged out after the STM timer expired. dtunnel Number of users in decrypt tunnel forwarding mode that aged out after the STM timer expired. Idled users from STM other Number of users in fowarding modes other than decrypt tunnel or tunnel mode that aged out after the STM timer expired. Logon lifetime iteration Number of users deleted for lack of activity.
Release Modification ArubaOS 6.1 The Mobility Stats parameter was introduced. ArubaOS 6.2 Additional statistics for idled users and user rejects were introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa state messages Description Display numbers of authentication messages sent and received. Syntax No parameters. Usage Guidelines This command displays a general overview of authentication statistics. To view authentication information for specific profiles such as a captive-portal, MAC or 801.x authentication profile, issue the commands specific to those features. Example The output of this command displays tables of statistics for PAPI, RAW socket and Sibyte messages.
111 114 126 dot1x term rand eapkey 196813 1614 1316231 196813 1614 1316231 151161 1612 2632462 151161 1612 2632462 114 rand 2 2 0 0 The output of this command contains the following parameters: Parameter Description Msg ID ID number for the message type Name Message name Since last Read Number of messages received since the buffer was last read. Total Total number of message received since the controller was last reset. opcode Code number of the message type.
show aaa state mux-tunnel Description Show multiplexter (MUX) tunnel IDs. Syntax No parameters. Example The example below shows statistics for one MUX tunnel (host) #show aaa state mux-tunnel Mux Tunnel Information ---------------------IP Tunnel ID Slot/Port --------------- --------------- --------10.2.1.
show aaa state station show aaa state station Description Display AAA statistics for a station. Syntax Parameter Description MAC address of a station/ Example The example below shows statistics for a station with four associated user IP addresses. The output of this command shows station data, the AAA profiles assigned to the station, and the station’s authentication method.
show aaa state user show aaa state user Description Display statistics for an authenticated user. Syntax Parameter Description IP address of a user. Example The example below shows statics for a user with the IP address 10.1.10.11. The output of this command shows user data, the user’s authentication method. and statistics for assigned roles, timers and flags. (host) #show aaa state user 10.1.10.11 Name: MYCOMPANY\tsenter, IP: 10.1.10.
show aaa sygate-on-demand (deprecated) show aaa sysgate-on-demand Syntax No parameters. Command History Release Modification ArubaOS 3.0 Command introduced. ArubaOS 3.4 Command deprecated. Dell PowerConnect W-Series ArubaOS 6.
show aaa tacacs-accounting show aaa tacacs-accounting Description Show configuration information for TACACS+ accounting servers. Usage Guidelines This command displays TACACS+ data for your controller if you have previously configured a TACACS+ server and server group. The output includes the current TACACS+ accounting mode (enabled or disabled), and the name of the TACACS+ server group.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show aaa tacacs-accounting Description Show TACACS accounting configuration. Syntax No parameters. Example The example below shows that TACACS accounting has been enabled, and that the TACACS server is in the server group acct-server.
show aaa timers Description Show AAA timer values. Syntax No parameters Example The example below shows that the controller has all default timer values: (host) #show aaa timers User idle timeout = 6 minutes Auth Server dead time = 10 minutes Logon user lifetime = 5 minutes Related Commands Command Description Mode aaa timers Use aaa timers to define the settings displayed in the output of this show command. Config mode Command History This command was introduced in ArubaOS 3.0.
show aaa web admin-port show aaa web admin-port Description Show the port numbers of HTTP and HTTPS ports used for web administration. Syntax No parameters. Example The example below shows that the controller is configured to use HTTPS on port 4343 or 443, and HTTP on port 8888. (host) #show aaa web admin-port https port = 4343 http port = 8888 Command History This command was introduced in ArubaOS 3.0.
show aaa xml-api server show aaa xml-api server [] Description Show a list of XML servers used for authentication, authorization and accounting. Syntax Parameter Description IP address of an XML API server. Include this parameter to see if a secret key is configured for the specified server. Example The output of this command shows that the controller has two configured XML API servers that are each referenced by two different AAA profiles.
show aaa xml-api statistics show aaa xml-api statistics Description Display statistics for an external XML API server. Syntax Parameter Description IP address of XML API server. Usage Guidelines Issue this command to troubleshoot AAA problems and monitor usage on an XML server. Example The example below shows AAA statistics for an external XML server with the IP address 10.1.2.3. This command shows the number of times that a particular event has occurred per client.
Parameter Description user_authenticate Number of users authenticated on the XML server since the last controller reboot. user_add Number of users added to the controller’s user table. user_delete Number of users removed from the controller’s user table. user_blacklist Number of denied user association requests. user_query Number of user queries performed. unknown user Number of unknown users. unknown role Number of unknown user roles.
Parameter Description Requests Received/Success/Failed Total number of requests received / number of successful requests / number of failed requests Command History This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master and local controllers 646 | show aaa xml-api statistics Dell PowerConnect W-Series ArubaOS 6.
show acl ace-table show acl ace-table {ace <0-1999>}|{acl <1-2700>} Description Show an access list entry (ACE) table for an access control list (ACL). Syntax Parameter Description ace <0-1999> Show a single ACE entry. acl <1-2700> Show all ACE entries for a single ACL. Example The following example shows that there are eighteen access control entries for ACL 1.
show acl acl-table show acl acl-table <1-2700> Description Display information for a specified access control list (ACL). Syntax Parameter Description acl-table <1-2700> Specify the number of the ACL for which you want to view information. Example The following example displays the ACL table for the controller.
Parameter Description ACE count Number of access control entries in the ACL Name Name of the access control list Applied Number of times the ACL was applied to a role. Total free ACE entries The total number of free ACE entries. This includes available ACE entries at the bottom of the list, as well as free ACE entries in the middle of the table from previous access list entries that were later removed. Free ACE entries at the bottom The total number of free ACE entries at the bottom of the list.
show acl hits show acl hits Description Show internal ACL hit counters. Syntax No parameters. Usage Guidelines Issue this command to see the number of times an access control list defined a user’s role, or traffic and firewall policies for a user session. Example In the example below, the output of the User Role ACL Hits table is shown in two separate tables to allow the output to fit on a single page of this document.
Port ACL Hits ------------ACL ACE New Hits --- --- -------5 22 Total Hits ---------- Index ----0 The output of this command includes the following information: Parameter Description Role Name of the role assigned by the ACL. Policy Name of the policy used by the ACL Src The traffic source, which can be one of the following: l : Name of a user-defined alias for a network host, subnetwork, or range of addresses. l any: match any traffic. l host: specify a single host IP address.
Parameter Description New Hits Number of times the ACL was applied since this command was last issued. Total Hits Number of times the ACL was applied since the controller was last reset. Index Index number of the ACL. Command History This command was available in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master controllers 652 | show acl hits Dell PowerConnect W-Series ArubaOS 6.
show adp config show adp config Description Show Aruba Discovery Protocol (ADP) configuration settings. Syntax No parameters. Example The following example shows that the controller has all default settings for ADP.
show adp counters show adp counters Description Show Aruba Discovery Protocol (ADP) counters. Syntax No parameters. Example The following example shows the ADP counter table for the controller. (host) #show adp counters ADP Counters -----------key value ------IGMP Join Tx 1 IGMP Drop Tx 0 ADP Tx 0 ADP Rx 0 The output of this command includes the following parameters: Parameter Description IGMP Join Tx Number of Internet Group Management Protocol (IGMP) join requests sent by the controller.
show ap active show ap active [ap-name |{arm-edge dot11a|dot11g|voip-only}|dot11a|dot11g|essid |ip-addr |ip6-addr |{type access-point|air-monitor|(sensor dot11a|dot11g|voip-only)}|voip-only Description Show all active APs registered to a controller. Syntax Parameter Description ap-name View data for an AP with a specified name. arm-edge Show the state of ARM edge APs. dot11a Show 802.11a radio information. dot11g Show 802.11g radio information.
l No virtual APs are defined on the AP. l The AP has profile errors. Issue the command "show profile errors" for details. l The GRE tunnel between the AP and the controller was blocked by a firewall after the AP became active. l The AP is temporarily down while it is upgrading its software. The AP will become active again after upgrading. l An AP has conflicting configuration settings. For example, if the AP system profile on a single radio dual-band AP configures the radio uses 802.
Column Description l l l l l l l l l l l l l l Uptime B = Battery Boost On d = Drop Mcast/Bcast On or Disconnected Sensor D = Disconn. Extra Calls On E = Wired AP enabled K = 802.11K Enabled L = Client Balancing Enabled M = Mesh N = 802.11b protection disabled P = PPPOE R = Remote AP R- = The remote AP requires captive portal authentication. Once this authentication is successfully completed, the R- flag changes to R.
show ap-group show ap-group [] Description Show settings for an AP group. Syntax Parameter Description The name of an AP group. Usage Guidelines Issue this command without the optional parameter to display the entire AP group list, including profile status for each profile. Include an AP group name to display detailed configuration information for that AP group profile. Example This first example shows that the controller has nine configured AP groups.
Ethernet interface 0 link profile Ethernet interface 1 link profile AP system profile VoIP Call Admission Control profile 802.11a Traffic Management profile 802.
Related Commands Configure AP group settings using the command ap-group. Command History This command was available in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers 660 | show ap-group Dell PowerConnect W-Series ArubaOS 6.
show ap-name show ap-name [] Description Show a list of AP names. Include the parameter to display detailed configuration information for that AP. Syntax Parameter Description The name of an AP. Example This first example shows that the controller has eight registered APs. The Name column lists the names of each registered AP. Note that APs are all user-defined, so they will not have an entry in the Profile Status column.
The output of this command includes the following parameters: Parameter Description Virtual AP Virtual AP profile that which configures a specified WLAN. Excluded Virtual AP Excludes the specified mesh cluster profile from this AP. 802.11a radio profile Profile that defines 802.11a radio settings for the AP. 802.11g radio profile Profile that defines 802.11g radio settings for the AP. Wired AP profile Profile that defines wired port settings for APs assigned to the AP.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show ap allowed-channels show ap allowed-channels [||] Description This command shows configuration information for Captive portal authentication profiles. Syntax Parameter Description Name of an AP. Specify a country code to display allowed channels for that country. IP address of an AP, in dotted-decimal format. Usage Guidelines Specify the country code for your controller during initial setup.
show ap ap-group show ap ap-group {ap-name |bssid |ip-addr } Description Show the AP group settings for an individual AP. Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID). An AP’s BSSID is usually the AP’s MAC address. ip-addr Show data for an AP with a specific IP address. Enter the IP address in dotted-decimal format.
Related Commands Command Description Mode ap-group Configure your AP groups and AP group profiles. Config mode Command History Introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers 666 | show ap ap-group Dell PowerConnect W-Series ArubaOS 6.
show ap arm history show ap arm history {ap-name }|{bssid }|{ip-addr } Description For each interface on an AP, show the history of channel and power changes due to Adaptive Radio Management (ARM). Syntax Parameter Description ap-name Show ARM history for an AP with a specific name. bssid Show ARM history for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address.
The output of this command includes the following information: Parameter Description Reason This column displays one of the following code to indicate why the channel or power change was made. l I: Interference l R: Radar detected l N: Noise exceeded l E: Error threshold exceeded l INV: Invalid Channel l G: Rogue AP Containment l M: Empty Channel l P+: Increase Power l P-: Decrease Power l OFF: Turn off Radio l ON: Turn on Radio The Reason key appears at the bottom of the ARM History table.
show ap arm neighbors show ap arm neighbors {ap-name }|{bssid }|{ip-addr } Description Show the ARM settings for an AP’s neighbors. Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID). An AP’s BSSID is usually the AP’s MAC address. ip-addr Show data for an AP with a specific IP address. Enter the IP address in dotted-decimal format.
show ap arm rf-summary show ap arm rf-summary {ap-name }|{bssid }|{ip-addr } Description Show the state and statistics for all channels being monitored by an individual AP. Syntax Parameter Description ap-name Show channel data for an AP with a specific name. bssid Show channel data for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address.
Parameter Description channel Number of a radio channel used by the AP. retry Number of 802.11 retry frames sent because a client failed to send an ACK. phy-err Number of PHY errors on the AP’s current channel seen during the last second. mac-err Number of MAC errors on the AP’s current channel seen during the last second. noise Current noise level, in -dBm. cov-idx The AP uses this metric to measure RF coverage.
show ap arm scan-times show ap arm scan-times {ap-name |bssid |ip-addr } Description Show AM channel scan times for an individual AP. Syntax Parameter Description ap-name Show channel scan data for an AP with a specific name. bssid Show channel scan data for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address. ip-addr Show channel scan data for an AP with a specific IP address.
WIF Scan Time ------------channel last-scan-channel ------- ----------------48 56/50655 current-scan-channel -------------------56 last-dos-channel ---------------0 The output of this command includes the following parameters: Parameter Description channel A radio channel on the specified AP. Assign-time The amount of time that an AP has been on a channel.
show ap arm state show ap arm state [ap-name |dot11a|dot11g|ip-addr ] Description Display Adaptive Radio Management (ARM) information for an individual AP’s neighbors, or show all available data for any neighboring AP using an 802.11a or 802.11g radio type. Syntax Parameter Description ap-name Show aggregate ARM Neighbor Information for a specific AP. dot11a Show aggregate ARM Neighbor Information for all APs using an 802.11a radio.
Column Description Assignment The AP’s current channel assignment. Neighbor Density The neighborhood density for the specified AP is listed with the values A/B/C/D, where: l A= Number of the AP’s clients heard in the AP neighbor’s client list l B= Number of clients in AP neighbor’s client list l C= Density percentage, (AP clients heard in in the AP neighbor client list / AP client density * 100).
show ap association show ap association [ap-name |ap-group |bssid |channel |client-mac |essid |ip-addr |phy {a|b|g}|voip-only] Description Show the association table for an AP group or for an individual AP. Syntax Parameter Description ap-group Show AP associations for a specific AP group. You can also include the channel, essid or voip-only keywords to further filter the output of this command.
shows an 'A ', the client associated last to that AP. Alternately, the AP with the smallest value of association time is the last AP to which the client had associated. In the example below, the output of this command has been broken into two separate tables to better fit this page. In the actual output of the command, this information is shown in a single, wide table.
Command History Introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers 678 | show ap association Dell PowerConnect W-Series ArubaOS 6.
show ap association remote show ap association remote [ap-name |ap-group |bssid |channel |essid Description Display the association table for an individual AP or group of APs in bridge mode. Syntax Parameter Description ap-name Show AP associations for a specific remote AP. ap-group Show AP associations for a specific group of remote APs. bssid Show the AP associations for an specific AP Basic Service Set Identifier (BSSID).
Column Description auth This column displays a y if the AP has been configured for 802.11 authorization frame types. Otherwise, it displays an n. assoc This column displays a y if the AP has been configured for 802.11 association frame types. Otherwise, it displays an n. aid 802.11 association ID. A client receives a unique 802.11 association ID when it associates to an AP. 1-int Number of beacons in the 802.11 listen interval.
show ap authorization-profile show ap authorization-profile [] Description This command shows information for AP authorization profiles. Syntax Parameter Description The name of an an existing AP authorization profile. Usage Guidelines The AP authorization profile specifies which configuration should be assigned to a remote AP that has been provisioned but not yet authenticated at the remote site.
Parameter Value AP authorization group Name of a configuration profile to be assigned to the group unauthorized remote APs. Related Commands Command Description Mode ap authorization-profile This command defines a temporary configuration profile for remote APs that are not yet authorized on the network. Config mode Command History This command was introduced in ArubaOS 3.0.
show ap blacklist-clients show ap blacklist-clients Description Show a list of clients that have been denied access. Usage Guidelines Use the stm CLI command to add or remove users from a blacklist. Additionally, the dot1x authentication, VPN authentication and MAC authentication profiles allow you to automatically blacklist a client if machine authentication fails. Examples The output of this command shows that the controller has a single user-defined blacklisted client.
Related Commands Command Description Mode stm add-blacklist-client stm remove-blacklist-client Manually add or remove clients from a blacklist. Config mode Command History Introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers 684 | show ap blacklist-clients Dell PowerConnect W-Series ArubaOS 6.
show ap bss-table show ap bss-table [ap-name |bssid |essid |ip-addr |port \] Description Show an AP’s Basic Service Set (BSS). Syntax Parameter Description ap-name Show the BSS table for a specific AP. bssid Show the BSS table for an specific AP Basic Service Set Identifier (BSSID). The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address. essid Show the BSS table for an Extended Service Set Identifier (ESSID).
00:0b:86:9b:49:c0 0 corp-ap 1/0 192.0.2.15 2m:0s g ap 1578 11/16.5/33 - Channel followed by "*" indicates channel selected due to unsupported configured channel.Num APs:7 Num Associations:1 The output of this command includes the following information: Column Description bss The AP Basic Service Set Identifier (BSSID). This is usually the MAC address of the AP ess The AP Extended Service Set Identifier (ESSID). s/p ip IP address of an AP. phy An AP radio type. Possible values are: l a—802.
show ap bw-report show ap bw-report {ap-name |bssid |ip-addr } Description Show the bandwidth reporting table for a specific AP. Syntax Parameter Description ap-name Show bandwidth data for an AP with a specific name. bssid Show bandwidth data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
Column Description Offered Load Attempted throughput for the Virtual AP, in kbps. Delivered Load Actual throughput for the Virtual AP, in kbps. This value may be less than the offered load if the Virtual AP has used all its allocated bandwidth. Average Throughput Average throughput for the virtual AP, in kbps. Command History Introduced in ArubaOS 3.0.
show ap client status show ap client status Description Show the current status of a specific client. Syntax Parameter Description MAC address of a client Examples The output of the command shows the status of an individual client in the STA (station) table.
Column Description state If the client has been both authorized and associated, this data column will display authassoc. If the client has only been authorized, this data column will display auth. Reason If the client failed to authenticate, this data column lists the reason code for 802.11 authentication failure Command History Introduced in ArubaOS 3.0.
show ap config show ap config {ap-group }|{ap-name }|{essid } Description Show a large list of configuration settings for an ap-group or an individual AP. Syntax Parameter Description ap-group Display configuration settings for an AP group. ap-name Display configuration settings for an AP with a specific name. essid Display configuration settings for an AP with a specific Extended Service Set Identifier (ESSID).
Telnet "default" FIPS enable "default" SNMP sysContact "default" RFprotect Server IP "default" RFprotect Backup Server IP "default" AeroScout RTLS Server "default" RTLS Server configuration "default" Remote-AP DHCP Server VLAN "default" Remote-AP DHCP Server Id "default" Remote-AP DHCP Default Router "default" Remote-AP DHCP Pool Start "default" Remote-AP DHCP Pool End "default" Remote-AP DHCP Pool Netmask "default" Remote-AP DHCP Lease Time "default" Heartbeat DSCP "default" Session ACL "default" Image URL
Parameter Description LMS Preemption When this parameter is enabled, the local management switch automatically reverts to the primary LMS IP address when it becomes available. LMS Hold-down Period Time, in seconds, that the primary LMS must be available before an AP returns to that LMS after failover. Number of IPsec retries Shows the number of times the AP will attempt to recreate an IPsec tunnel with the master controller before the AP will reboot.
Parameter Description Keepalive Interval Time, in seconds, between keepalive messages from the AP Dump Server (For debugging purposes.) Displays the server to receive the core dump generated if an AP process crashes. Telnet Reports whether telnet access the AP is enabled or disabled. SNMP sysContact SNMP system contact information. AeroScout RTLS Server Displays whether or not the AP will send RFID tag information to an AeroScout real-time asset location (RTLS) server.
Parameter Description l l l ap-mode: Device provides transparent, secure, highspeed data communications between wireless network devices and the wired LAN. am-mode: Device behaves as an air monitor to collect statistics, monitor traffic, detect intrusions, enforce security policies, balance traffic load, self-heal coverage gaps, etc. spectrum-mode: Device behaves as a spectrum monitor, sending spectrum analysis data to the controller. Spectrum monitors do not serve clients.
Parameter Description Spectrum load balancing update interval This value determines how often spectrum load balancing calculations are made (in seconds). The default value is 30 seconds. Advertised regulatory max EIRP A cap for an radio’s maximum equivalent isotropic radiated power (EIRP). Even if the regulatory approved maximum for a given channel is higher than this EIRP cap, the AP radio using this profile will advertise only this capped maximum EIRP in its radio beacons.
Parameter Description Non 802.11a interference Immunity The value for 802.11 Interference Immunity. This parameter sets the interference immunity on the 2.4 Ghz band. The default setting for this parameter is level 2. When performance drops due to interference from non-802.11 interferers (such as DECT or Bluetooth devices), the level can be increased up to level 5 for improved performance.
Parameter Description Assignment Displays whether or not ARM channel and power assignment has been enabled or disabled. Allowed bands for 40MHz channels Forty MHz channels may be used on the specified radio bands (802.11a or 802.11g). Client Aware Shows if the client aware feature has been enabled or disabled for this AP. If enabled, AP will not change channels when there are active clients. Max Tx Power Maximum transmission power for this AP, in dBm.
Parameter Description Default: enabled Ideal Coverage Index The Dell coverage index metric is a weighted calculation based on the RF coverage for all DellAPs and neighboring APs on a specified channel. The Ideal Coverage Index specifies the ideal coverage that an AP should try to achieve on its channel. The denser the AP deployment, the lower this value should be.
Parameter Description than necessary. This helps avoid higher levels of interference on the WLAN. Although this setting is disabled by default, you may want to enable this feature if your APs are deployed in close proximity (e.g. less than 60 feet apart). Scan mode Identifies the scan mode for the AP. all-reg-domain: The AP scans channels within all regulatory domains. This is the default setting. l reg-domain:Limit the AP scans to just the regulatory domain for that AP.
Parameter Description Short Preamble Shows if a short preamble for 802.11b/g radios is enabled or disabled for this AP. Network performance may be higher when short preamble is enabled. In mixed radio environments, some 802.11b wireless client stations may experience difficulty associating with the AP using short preamble. To use only long preamble, disable short preamble. Legacy client devices that use only long preamble generally can be updated to support short preamble.
Parameter Description the AP. If enabled, this feature converts multicast traffic to unicast before delivery to the client, thus allowing you to set a longer DTIM interval.
Parameter Description MPDU Aggregation Shows if the AP has enabled or disabled MAC protocol data unit (MDPU) aggregation. Max transmitted A-MPDU size Shows the maximum size, in bytes, of an A-MPDU that can be sent on the AP’s high-throughput SSID. Max received A-MPDU size Shows the maximum size, in bytes, of an Aggregated-MAC Packet Data Unit (A-MPDU) that can be received on the AP’s high-throughput SSID.
Parameter Description l all—both 802.11a and 802.11b/g bands (5 GHz and 2.4 GHz) VLAN Shows the VLAN(s) into which users are placed in order to obtain an IP address. Forward mode Shows the current forward mode (tunnel, bridge, splittunnel, or decrypt-tunnel) for the virtual AP. This parameter controls whether 802.
Parameter Description a blacklisted client is blocked indefinitely. Fast Roaming Shows if the AP has enabled or disabled fast roaming. Strict Compliance If enabled, the virtual AP denies client association requests if the AP and client station have no common rates defined. Some legacy client stations which are not fully 802.11compliant may not include their configured rates in their association requests.
Parameter Description VoIP Bandwidth Capacity (kbps) Shows the maximum bandwidth that can be handled by one radio, in kbps. VoIP Call Handoff Reservation Shows the percentage of call capacity reserved for mobile VoIP clients on call. VoIP Send SIP 100 Trying If enabled, the AP sends SIP 100 - trying messages to a call originator to indicate that the call is proceeding. This is useful when the SIP invite may be redirected through a number of servers before reaching the controller.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap coverage-holes (deprecated) show ap coverage holes Description Show information for APs that have detected coverage holes in the wireless network. Command History Version Description ArubaOS 2.0 Command introduced ArubaOS 6.1 Command deprecated 708 | show ap coverage-holes (deprecated) Dell PowerConnect W-Series ArubaOS 6.
show ap database show ap database {group |inactive|indoor|local|long|outdoor|{page }| sensors [disconnected]|sort-by [ap-group|ap-ip|ap-type|fqln|provisioned|status {up|down}|switch-ip] |sort-direction[ascending|descending]|start |status {up|down]|switch |unprovisioned|usb} Description Show the list of access points in the controller’s database. Syntax Parameter Description group Show data for a specified AP group.
Parameter switch-ip sort-direction Description Sort by controller IP address. Choose sort direction of AP list:. ascending Sort AP list in ascending order by name. descending Sort AP list in descending order by name. start Start showing the AP index at the specified index number. status Show only APS with a given status as active or inactive. down Show only APs that are inactive. up Show only APs that are active.
R = Remote AP; I = Inactive; X = Maintenance Mode; P = PPPoE AP S = RFprotect Sensor; d = Disconnected Sensor; H = Using 802.11n license M = Mesh node; Y = Mesh Recovery i = Indoor; o = Outdoor Total APs:15 Related Commands Command Description Mode show ap database-summary To display a more general summary overview of the AP registered to a controller, use the command show ap database-summary. Enable and Config modes Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 6.
show ap database-summary show ap database-summary Description Show a general summary of access point information for this controller. Usage Guidelines Use this command to show the current number of active APs and Air Monitors. This command is also useful for determining how many unprovisioned APs or duplicate APs are on the network. For full details on each AP registered to a controller, use the command show ap database.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap debug association-failure (deprecated) show ap debug association-failure [{ap-name }|{bssid }|{client-mac }|{essid }|{ip-addr }] Description Display association failure information that can be used to troubleshoot problems on an AP. Command History Platforms Licensing ArubaOS 3.0 Command introduced ArubaOS 5.0 Command deprecated 714 | show ap debug association-failure (deprecated) Dell PowerConnect W-Series ArubaOS 6.
show ap debug bss-config show ap debug bss-config [ap-name |bssid ||essid |ip-addr |port /] Description Show the configuration for each BSSID of an AP. This information can be used to troubleshoot problems on an AP. Syntax Parameter Description ap-name Filter the AP Config table by AP name. bssid Filter the AP Config table by BSSID. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
Column Description bss Basic Service Set (BSS) identifier, which is usually the AP’s MAC address. ess Extended Service Set (ESS) identifier; a user-defined name for a wireless network. vlan The BSSID’s VLAN number. IP The AP’s IP address. phy One of the following 802.11 types l a l a-HT (high-throughput) l g l g-HT (high-throughput) type This column shows if the BSSID is for an access point (ap) or an air monitor (am). fw-mode The configured forward mode for the AP’s virtual AP profile.
show ap debug bss-stats show ap debug bss-stats [bssid ] Description Show debug and troubleshooting statistics from a specific BSSID of an AP. Syntax Parameter Description bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address. Examples The example below shows part of the output of the command show ap debug bss-stats bssid .
Parameter Description Frames Rcvd For TX Number of frames received for transmission. Tx Frames Dropped Number of transmission frames that were dropped. Frames Transmitted Number of frames successfully transmitted. Success With Retry Number of frames that were transmitted after being retried. Tx Mgmt Frames Number of management frames transmitted. Beacons Transmitted Number of beacons transmitted. Tx Probe Responses Number of transmitted probe responses.
Parameter Description Tx HT 216 Mbps Number of frames transmitted at 216 Mbps. Tx HT 240 Mbps Number of frames transmitted at 240 Mbps. Tx HT 243 Mbps Number of frames transmitted at 243 Mbps. Tx HT 270 Mbps Number of frames transmitted at 270 Mbps. Tx HT 300 Mbps Number of frames transmitted at 300 Mbps. Tx WMM Number of Wifi Multimedia (WMM) packets transmitted for the following access categories.
Parameter Description Rx Data Frames Number of data frames received. Null Data Frames Number of null data frames received. Rx Mgmt Frames Number of management frames received. Control Frames Number of control frames received. Frames To Me Number of wireless frames received that are addressed to the specified BSSID. Probe Requests Number of probe requests. PS Poll Frames Number of Power Save poll frames Rx 6 Mbps Number of frames received at 6 Mbps.
show ap debug client-mgmt-counters show ap debug client-mgmt-counters Description Show the numbers of each type of message from an AP’s clients. This information can be used to troubleshoot problems on an AP. Examples The output of the command below shows client management counters.
Parameter Description Update STA Tunnel Request (For internal use only) Update STA Tunnel Response (For internal use only) ARM Update Number of times an AP has changed its adaptive radio management (ARM) settings.
show ap debug client-stats show ap debug client-stats
Rx Rx Rx Rx 36 Mbps 48 Mbps 54 Mbps WMM [BE] 13 1162 1730 39 The output of this command includes the following information: Parameter Description Frames Rcvd For TX Number of frames received for transmission. Tx Frames Dropped Number of transmission frames that were dropped. Frames Transmitted Number of frames successfully transmitted. Success With Retry Number of frames that were transmitted after being retried. Tx Mgmt Frames Number of management frames transmitted.
Parameter Description channel 2. This parameter is only displayed for APs operating in 40 Mhz mode. Last ACK SNR Signal-to-noise ratio for the last received ACK packet. Last ACK SNR CTL0 Signal-to-noise ratio for the last received ACK packet on the primary (control) channel 0. This parameter is only displayed for APs operating in 40 Mhz mode. Last ACK SNR CTL1 Signal-to-noise ratio for the last received ACK packet on the primary (control) channel 1.
show ap debug client-table show ap debug client-table [ap-name |bssid |ip-addr ] Description Show clients associated to an AP. Syntax Parameter Description ap-name Filter the AP Config table by AP name. bssid Filter the AP Config table by BSSID. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address. ip-addr Filter the AP Config table by IP address by entering an IP address in dotted-decimal format.
Parameter Description MAC MAC address of a client. ESSID Extended Service Set identifier (ESSID) used by the client. An ESSID is a user-defined name for a wireless network. BSSID Basic Service Set identifier for the client. Assoc_State Shows whether or not the client is currently authorized and/or associated with the AP. HT_State Shows the client’s high-throughput (802.11n) transmission type: l none: AP is a legacy AP that does not support the 802.11n standard.
show ap debug counters show ap debug counters {ap-name |bssid |group |ip-addr } Description Show AP reboot/bootstrap counters, and crash information for an individual AP or AP group, or all APs referenced on the controller. Syntax Parameter Description ap-name Show debug counters for an AP with a specified name. bssid Show debug counters for a specific Basic Service Set Identifier (BSSID).
Column Description Name Name of the AP. Group Name of the AP’s group. IP Address IP address of the AP. Configs sent Number of times configuration changes have been sent to the AP. Configs Acked Number of times that the AP has acknowledged receiving a configuration change. AP Boots Sent Number of times reboot requests have been sent to the AP. AP Boots Acked Number of times that the AP has acknowledged receiving a reboot request.
show ap debug crash-info show ap debug crash-info {ap-name |ip-addr } Description Show crash log information (if it exists) for an individual AP. The stored information is cleared from the flash after the AP reboots. Syntax Parameter Description ap-name Show crash information for an AP with a specified name. ip-addr Show crash information for an AP with a specified IP address by entering an IP address in dotted-decimal format.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap debug datapath show ap debug datapath {ap-group |ap-name |bssid |ip-addr } Description Show datapath tunnel parameters of an AP or AP group. Syntax Parameter Description ap-group Show data path information for a specific AP group. ap-name Show data path information for an AP with a specific name. bssid Show data path information for a specific Basic Service Set Identifier (BSSID).
Command History Introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap debug driver-log show ap debug driver-log {ap-name |bssid |ip-addr } Description Show an AP’s driver logs. Syntax Parameter Description ap-name Show log information for an AP with a specific name. bssid Show log information for a specific Basic Service Set Identifier (BSSID). The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
show ap debug log show ap debug log {ap-group |ap-name |bssid |ip-addr } Description Show an AP’s debug log. Syntax Parameter Description ap-name Show log information for an AP with a specific name. bssid Show log information for a specific Basic Service Set Identifier (BSSID). The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
show ap debug mgmt-frames (deprecated) Description Show traced 802.11 management frames. Command History Version Modification ArubaOS 3.0 Command Introduced ArubaOS 5.0 Command deprecated 736 | show ap debug mgmt-frames (deprecated) Dell PowerConnect W-Series ArubaOS 6.
show ap debug radio-stats show ap debug radio-stats {ap-name |ip-addr } radio {0|1} [advanced] Description Show aggregate radio debug statistics of an AP. Syntax Parameter Description ap-name Show log information for an AP with a specific name. ip-addr Show log information for an AP with a specific IP address by entering its IP address in dotted-decimal format. radio {0|1} Specify the ID number of the radio for which you want to view statistics.
Parameter Description Resets BeacQ Stuck An AP’s radio typically sends a beacon every 100 milliseconds. If beacons are not sent at a regular interval or the radio experiences excessive noise, the beacon queue will reset. This parameter indicates the number of queue resets. Resets Fatal Intr Number of time the radio was reset because the AP hardware was unresponsive. Resets RX Overrun The number of radio resets due to Receive FIFO overruns. Resets RF Gain Number of radio resets due to gain changes.
Parameter Description Rejects parameter shows the number of times the AP has rejected a scan because of the power-save aware scan feature. Voice aware Scan Rejects If you enable the VoIP Aware Scan feature in the AP’s ARM profile, the AP will not attempt to scan a different channel if one of its clients has an active VoIP call. This Voice aware scan Rejects parameter shows the number of times the AP has rejected a scan because of the Voip aware scan feature. Scan Success Number of successful scans.
Parameter Description Beacons Transmitted Number of beacons transmitted. Tx Probe Responses Number of transmitted probe responses. Tx Data Frames Number of transmitted data frames. Multicast Data Number of multicast and broadcast frames transmitted. Tx CTS Frames Number of clear-to-sent (CTS) frames transmitted. DTIM Timeouts Number of broadcast frames with DTIM data that were not answered by a client. Dropped After Retry Number of frames dropped after an attempted retry.
Parameter Description appear in the output of the command. Tx WMM [BE]: Best Effort Tx WMM [BK]: Background Tx WMM [VO]: VoIP Tx WMM [VI]: Video UAPSD OverflowDrop Number of packets dropped due to Unscheduled Automatic Power Save Delivery (U-APSD) overflow. TX Timeouts Number of transmission timeouts Lost Carrier Events Number of carrier sense timeouts. Last SNR The last recorded signal-to-noise ratio.
Parameter Description Bad Frames Number of bad or error frames received. Rx Clear 1s The percentage of time no activity was seen on the air in the last 1 second. Rx Clear 4s The percentage of time no activity was seen on the air in the last 4 seconds. Rx Clear 64s The percentage of time no activity was seen on the air in the last 64 seconds. Discarded Events Number of non-802.11 events that were detected and discarded during normal operation.
Parameter Description RADAR Events Number of times an AP detects a radar signature. Dell APs are DFS-compliant detects a radar signature, it will change its channel. RX Interrupts The number of receive interrupts received by the CPU from the radio. RX Overrun The number of Receive FIFO overruns. Rx Mbps Packets received at the specified rate (in Mbps). Rx Mbps (Long) Packets with a long preamble received at the specified rate.
show ap debug received-config show ap debug received-config {ap-group |ap-name |bssid |ip-addr } Description Show the configuration the AP downloaded from the controller. Syntax Parameter Description ap-name Show log information for an AP with a specific name. bssid Show log information for a specific Basic Service Set Identifier (BSSID). The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
Country Code ESSID ... US guest The output of this command includes the following information: Parameter Description BSSID The BSSID of the AP. LMS IP The LMS IP is the IP address of the local controller used by the AP for client data processing. Master IP For environments with multiple controllers, the master controller is the central configuration and management point for all local controllers. Mode Shows the operating modes for the AP.
Parameter Description additional management traffic on the network. Active Scan is disabled by default, and should not be enabled except under the direct supervision of Dell Support. VoIP Aware Scan Shows if VoIP aware scanning is enabled or disabled. If you use voice handsets in the WLAN, VoIP Aware Scan should be enabled in the ARM profile so the AP will not attempt to scan a different channel if one of its clients has an active VoIP call. This option requires that Scanning is also enabled.
Parameter Description Max Associations The maximum number of clients allowed to associated with the AP Wireless Multimedia (WMM) Shows if Wireless Multimedia (WMM) is enabled or disabled for this AP. WMM provides prioritization of specific traffic relative to other traffic in the network. WMM TSPEC Min Inactivity Interval Displays the minimum inactivity time-out threshold of WMM traffic for this AP. DSCP mapping for WMM voice AC Displays the DSCP value used to map WMM voice traffic.
Parameter Description Max received A-MPDU size Shows the maximum size, in bytes, of an Aggregated-MAC Packet Data Unit (A-MPDU) that can be received on the AP’s high-throughput SSID. Min MPDU start spacing Displays the minimum time between the start of adjacent MDPUs within an aggregate MDPU, in microseconds. Supported MCS set Comma-separated list of Modulation Coding Scheme (MCS) values or ranges of values to be supported on this high-throughput SSID.
show ap remote debug association-failure show ap remote debug association-failure [{ap-name }|{bssid }{essid }] Description Display association failure information that can be used to troubleshoot problems on an AP. Syntax Parameter Description ap-name Filter the Association Failure Table by AP name. bssid Filter the Association Failure Table by Basic Service Set Identifier (BSSID). The BSSID is usually the AP’s MAC address.
Column Description ESSID Extended Service Set Identifier of an AP. State This data column shows if the client is currently authorized or both authorized and associated with an AP. Radio The AP radio type. Idle Time Amount of time that the client has been idle, in the format hours:minutes:seconds. Reason A brief description of the reason why the client failed to associate. Command History Introduced in ArubaOS 5.0.
show ap debug shaping-table show ap debug shaping-table {ap-name |ip-addr } Description Show shaping information for clients associated to an AP. Syntax Parameter Description ap-name Show shaping table information for a specific AP. ip-addr Show shaping table information for a specific AP IP address by entering its IP address in dotted-decimal format. Example The following command shows the shaping table of an AP named ap22.
Column Description pktin Number of packets received by the AP. pktout Number of packets sent by the AP. pktdrop Number of packets dropped by the AP. pktqd Number of packets queued. cmn [C:O:H] (For internal use only.) drop Number of CCK (802.11b) and OFDM (802.11a/g) packets dropped. Numcl Number of CCK (802.11b) and OFDM (802.11a/g) packets dropped.
show ap debug system-status show ap debug system-status {ap-name |bssid |ip-addr } Description Show detailed system status information for an AP. Syntax Parameter Description ap-name Show system status data for an AP with a specific name. bssid Show system status data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
Parameter Description Rebootstrap Information table /Reboot Information table A large number of reboots can mean that the AP has hardware problems. Command History Release Modification ArubaOS 5.0 Crash information parameter was introduced. ArubaOS 3.0 Command introduced Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers 754 | show ap debug system-status Dell PowerConnect W-Series ArubaOS 6.
show ap debug trace-addr show ap debug trace-addr Description Show MAC addresses in the trace buffer. Usage Guidelines Use this command to troubleshoot wireless clients that are being traced for 802.11 communication Examples The output of the command shows the Trace List table. If no wireless clients are being traced, this table will be empty.
show ap debug usb ap-name show ap debug usb ap-name Description This command displays the USB information provisioned on the RAP. Usage Guidelines Use this command to view the USB information provisioned on the RAP. Examples The output of the command shows the USB information provisioned on the RAP.
show ap details show ap details [advanced]{ap-name |bssid |ip-addr |ip6-addr } Description Show detailed provisioning parameters, hardware, and operating information for a specific AP.
---AP State Entry created Last activity Reboots Bootstraps Bootstrap Threshold ----Running 2008-10-23 20:04:53 2008-10-28 08:07:48 0 1 7Slot/Port 2/24 The output of this command includes the following information: Column Description AP IP Address IP address of the AP LMS IP Address The IP address of the local management switch (LMS)—the Dell controller which is responsible for terminating user traffic from the APs, and processing and forwarding the traffic to the wired network.
Column Description this number of seconds of inactivity on the tunnel. Slot/Port The controller port used by the AP, in the format /. The parameter refers to the network interfaces that are embedded in the front panel of the W-3000 series controller. Port numbers start at 0, from the left-most position. High throughput Shows if high-throughput (802.11n) features are enabled or disabled. Mode Shows the operating modes for the AP.
Column Description Antenna gain for 802.11a Antenna gain for 802.11a (5GHz) antenna. Antenna gain for 802.11g Antenna gain for 802.11g (2.4GHz) antenna. Antenna for 802.11a Antenna use for 5 GHz (802.11a) frequency band. l 1: AP uses antenna 1 l 2: AP uses antenna 2 l both: AP uses both antennas Antenna for 802.11g Antenna use for 2.4 GHz (802.11g) frequency band. l 1: AP uses antenna 1 l 2: AP uses antenna 2 l both: AP uses both antennas IKE PSK The IKE pre-shared key.
Column Description NOTE: This parameter is supported on outdoor APs only. The horizontal coverage pattern does not consider the elevation or vertical antenna pattern. Antenna tilt angle for 802.11a The angle of the 802.11a (5GHz) antenna. This parameter can range from between -90 degrees and 0 degrees for downtilt, and between +90 degrees and 0 degrees for uptilt. Antenna tilt angle for 802.11g The angle of the 802.11g (2.4GHz) antenna.
show ap enet-link-profile show ap enet-link-profile [] Description Show a list of all Ethernet Link profiles. Usage Guidelines Include a profile name to display details for the specified Ethernet Link Profile, or omit the parameter to display a list of all Ethernet Link profiles.
show ap essid show ap essid Description Show a Extended Service Set Identifier (ESSID) summary for the controller, including the numbers of APs and clients associated with each ESSID. Examples The output of the command in the example below shows statistics for four configured ESSIDs.
show ap ht-rates show ap ht-rates bssid Description Show high-throughput rate information for a basic service set (BSS). Syntax Parameter Description bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address. Examples The output of this command shows high-throughput rates for each supported MCS value. These values are applicable to high-throughput (802.11n-capable) APs only.
Command History Introduced in ArubaOS 3.3. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap image version show ap image version [ap-name |ip-addr ] Description Display an AP’s image version information. Syntax Parameter Description ap-name View image version information for an AP with a specific name. ip-addr View image version information for an AP with a specific IP address. Enter the address of the AP in dotted-decimal format.
Column Description Num Matches Number of times the running image version matched the flash image version after a reboot. Num Mismatches Number of times the running image version did not match the flash image version after a reboot. If the images do not match, the AP will upgrade to the flash image. Bad Checksums Number of bad checksum calculations due to an invalid or corrupted image file. Image Load Status Current status of the AP following an upgrade.
show ap license-usage show ap license-usage Description Show AP license usage information. Examples The output of the command below shows that controller has 13 associated campus APs using licenses, with 3 unused campus AP licenses remaining.
Parameter Description Remote-Node APs Number of remote node APs currently using a license on the controller. Tunneled Nodes Number of tunneled nodes currently using a license on the controller. CAPs Number of unused campus APs licenses remaining on the controller. RAPs Number of unused remote APs licenses remaining on the controller. Command History Release Modification ArubaOS 3.0 Command Introduced. ArubaOS 3.3 The following parameters were introduced: l Total 802.11n-120abg Licenses l 802.
show ap lldp show ap lldp [] Description Display a list of LLDP-MED Network Policy profiles, or display the current configuration settings of an individual profile. Syntax Parameter Description Specify a LLDP profile name to view configuration settings for that profile. Examples The following example lists all LLDP profile profiles.
Parameter Description Reception of LLDP PDUs Shows if LLDP PDU reception is enabled on the AP. Transmit interval (seconds) The interval between LLDP TLV transmission seconds. The supported range is 1-3600 seconds and the default value is 30 seconds. Transmit hold multiplier This value is multiplied by the transmit interval to determine the number of seconds to cache learned LLDP information before that information is cleared.
show ap lldp counters show ap lldp counters ap-name ip-addr ip6-addr (ipv6-addr> Description Show LLDP counters for a specific AP, or all APs sending or receiving LLDP Protocol Data Units (PDUs). Syntax Parameter Description ap-name Show counter statistics for an AP with a specific name. ip-addr View counter statistics for an AP with a specific IP address. Enter the IP address of the AP in dotted-decimal format.
Command History Command introduced in ArubaOS 6.2. Command Information Platforms Licensing Command Mode All platforms Base operating system. Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show ap lldp med-network-policy-profile show ap lldp med-network-policy-profile [] Description Display a list of LLDP-MED Network Policy profiles, or display the current configuration settings of an individual profile. Syntax Parameter Description Specify a LLDP-MED Network Policy profile name to view configuration settings for that profile.
LLDP-MED application Differentiated Services Code Point 0 The output of this command includes the following information: Parameter Description LLDP-MED application type Type of application that this profile manages. This profile supports the following options: l guest-voice : The AP services a separate voice network for guest users and visitors. l guest-voice-signaling : The AP is part of a network that requires a different policy for guest voice signaling than for guest voice media.
Command Information Platforms Licensing Command Mode All platforms Base operating system. Enable or Config mode on master or local controllers 776 | show ap lldp med-network-policy-profile Dell PowerConnect W-Series ArubaOS 6.
show ap lldp neighbors show ap lldp neighbors ap-name ip-addr ip6-addr (ipv6-addr> Description Show LLDP neighbors for a specific AP, or all APs sending or receiving LLDP Protocol Data Units (PDUs). Syntax Parameter Description ap-name Show LLDP neighbor statistics for an AP with a specific name. ip-addr View LLDP neighbor statistics for an AP with a specific IP address. Enter the IP address of the AP in dotted-decimal format.
Parameter Description Port Name/ID Port name or ID if the interface sending LLDP PDUs. Mgmt. Address Management address of the LLDP neighbor Capabilities This data column can list any of the following data codes to indicate LLDP neighbor capabilities. l R: Router l B: Bridge l A: Access Point l P: Phone l O: Other Command History Command introduced in ArubaOS 6.2. Command Information Platforms Licensing Command Mode All platforms Base operating system.
show ap load-balancing show ap load balancing Description Show the load-balancing information for each AP with load balancing enabled. Examples The output of the command in the example below shows details for a single AP enabled with the load-balancing feature. (host) #show ap load-balancing Load Balance Enabled Access Point Table --------------------------------------bss cur-cl util(kbps) -------- ---------00:0b:86:cc:8e:4e Wireless_1 mp22 2/24 10.3.148.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers 780 | show ap load-balancing Dell PowerConnect W-Series ArubaOS 6.
show ap mesh active show ap mesh active [|{page }|{start }] Description Show active mesh cluster APs currently registered on this controller. Syntax Parameter Description Name of a mesh cluster profile. page Limit the output of this command to a specific number of entries by entering the number of entries you want to display.
Column Description IP Address IP address of the AP. BSSID Basic Service Set Identifier (BSSID) for the AP. This is usually the AP’s MAC address. Band/Ch/EIRP/MaxEIRP The RF band in which the AP should operate (a or g)/ Radio channel used by the AP/Current effective Isotropic Radiated Power (EIRP) /maximum EIRP MTU Maximum Transmission Unit (MTU) size, in bytes. This value describes the greatest amount of data that can be transferred in one physical frame.
show ap mesh-cluster-profile show ap mesh-cluster-profile [] Description Show configuration settings for a mesh cluster profile. Syntax Parameter Description Name of a mesh cluster profile Usage Guidelines The command show ap mesh-cluster-profile displays a list of all mesh cluster profiles configured on the controller, including the number of references to each profile and each profile’s status.
Command History Introduced in ArubaOS 3.2. Command Information Platforms Licensing Command Mode All platforms This show command is available in the base operating system. Commands to configure the mesh feature require the Mesh license. Enable or Config mode on master controllers 784 | show ap mesh-cluster-profile Dell PowerConnect W-Series ArubaOS 6.
show ap mesh debug counters show ap mesh debug counters {ap-name }|{bssid }|{ip-addr } Description Show counters statistics for a mesh node. Syntax Parameter Description ap-name Show counter statistics for an AP with a specific name. bssid Show counter statistics for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address. ip-addr View counter statistics for an AP with a specific IP address.
Column Description Interface Indicates whether the mesh interface connects to a Parent AP or a Child AP. Each row of data in the Mesh Packet Counters table shows counter values for an individual interface. Echo Sent Number of echo packets sent. Echo Recv Number of echo packets received. Probe Req Number of probe request packets sent from the interface specified in the Mesh-IF parameter. Probe Resp Number of probe response packets sent to the interface specified in the Interface parameter.
show ap mesh debug current-cluster show ap mesh debug current-cluster {ap-name }|{bssid }|{ip-addr } Description Display information for the mesh cluster currently used by a mesh point or mesh portal. Syntax Parameter Description ap-name Show mesh cluster data for an AP with a specific name. bssid Show mesh cluster data for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address.
Command History Introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms This show command is available in the base operating system. Commands to configure the mesh feature require the Mesh license. Enable or Config mode on master controllers 788 | show ap mesh debug current-cluster Dell PowerConnect W-Series ArubaOS 6.
show ap mesh debug forwarding-table show ap mesh forwarding-table {ap-name }|{ip-addr } Description Show the forwarding table for a remote mesh point or remote mesh portal. Syntax Parameter Description ap-name Show data for a remote mesh node with a specific name. ip-addr Show data for a remote mesh node with a specific IP address by entering its IP address in dotted-decimal format. Usage Guidelines This is an internal technical support command.
show ap mesh debug hostapd-log show ap mesh debug hostapd-log {ap-name }|{bssid }|{ip-addr } Description Show the debug log messages for the hostapd process. Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
show ap mesh debug meshd-log show ap mesh debug meshd-log {ap-name }|{bssid }|{ip-addr } [] Description Show the debug log messages for the meshd process. Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
show ap mesh debug provisioned-clusters show ap mesh debug provisioned-clusters {ap-name }|{bssid }|{ip-addr } Description Show cluster profiles provisioned on a mesh portal or mesh point. Syntax Parameter Description ap-name Show data for a mesh node with a specific name. bssid Show data for a mesh node with a specific Basic Service Set Identifier (BSSID). The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
Column Description l l g = 2.4 GHz a = 5 GHz Encryption Data encryption setting for the mesh cluster profile. l opensystem—No authentication and encryption. l wpa2-psk-aes—WPA2 with AES encryption using a preshared key. WPA Hexkey The WPA pre-shared key (only for mesh cluster profiles using WPA2 with AES encryption). WPA Passphrase The WPA password that generates the preshared key (only for mesh cluster profiles using WPA2 with AES encryption). Command History Introduced in ArubaOS 3.0.
show ap mesh-ht-ssid-profile show ap mesh-ht-ssid-profile [] Description Show configuration settings for a mesh high-throughput Service Set Identifier (SSID) profile. Syntax Parameter Description Name of a mesh high-throughput SSID profile. Usage Guidelines High-throughput APs support additional settings not available in legacy APs. A mesh high-throughput SSID profile can enable or disable high-throughput (802.
Column Description BA AMSDU Enable Shows of the AP has enabled or disabled the ability to receive AMSDU in BA negotiation. High throughput enable (SSID) Shows if 802.11n high-throughput features are enabled or disabled for this profile. By default, high-throughput features are enabled. Legacy stations Allow or disallow associations from legacy (non-HT) stations. By default, this parameter is enabled (legacy stations are allowed).
Command History Version Description ArubaOS 3.4 Command introduced ArubaOS 6.1 The allow weak encryption parameter was deprecated.
show ap mesh neighbors show ap mesh neighbors {ap-name }|{bssid }|{ip-addr } [names] Description Show all mesh neighbors for an AP. Syntax Parameter Description ap-name Show mesh neighbors for an AP with a specific name. bssid Show mesh neighbors for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
Total count: 5, Children: 2 Relation: P = Parent; C = Child; N = Neighbor; B = Blacklisted-neighbor Flags: R = Recovery-mode; S = Sub-threshold link; D = Reselection backoff; F = Auth-failure; H = High Throughput; L = Legacy allowed The output of this command includes the following information: Column Description MAC MAC address of the mesh node. Portal By default, this column displays the BSSID of the mesh point.
Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 3.4.1 The names parameter was introduced. The output of this command was also modified to include the Rate Tx/Rx column. Command Information Platforms Licensing Command Mode All platforms This show command is available in the base operating system. Commands to configure the mesh feature require the Mesh license. Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap mesh-radio-profile show ap mesh-radio-profile [] Description Show configuration settings for a mesh radio profile. Syntax Parameter Description Name of a mesh radio profile. Usage Guidelines The radio profile determines the radio frequency/channel used only by mesh nodes to establish mesh links. Mesh nodes operating in different cluster profiles can share the same radio profile.
Parameter Description 802.11a Transmit Rates Indicates the transmit rates for the 802.11a radio. The AP attempts to use the highest transmission rate to establish a mesh link. If a rate is unavailable, the AP goes through the list and uses the next highest rate. 802.11g Transmit Rates Indicates the transmit rates for the 802.11g radio. The AP attempts to use the highest transmission rate to establish a mesh link. If a rate is unavailable, the AP goes through the list and uses the next highest rate.
Parameter Description l l alternative mesh links every 30 seconds. If a mesh node finds a better uplink, the mesh node connects to the new parent to create an improved path to the mesh portal. reselect-never: Connected mesh nodes do not evaluate other mesh links to create an improved path to the mesh portal. subthreshold-only: Connected mesh nodes evaluate alternative links only if the existing uplink becomes a subthreshold link. Retry Limit Maximum number of times a mesh node can re-send a packet.
show ap mesh tech-support show ap mesh tech-support ap-name Description Display all information for an AP, and save that information in a file on the controller Syntax Parameter Description Name of an AP for which you want to create a report Filename for the report created by this command. The file can only be saved in the flash directory. If desired, you can use FTP or TFTP to copy the file to another destination.
show ap mesh topology show ap mesh topology [long] [page ] [start ] Description Show the mesh topology tree. Syntax Parameter Description long Include the names of a mesh portal’s children in the output of this command page Limit the output of this command to a specific number of entries by entering the number of entries you want to display.
Column Description Mesh Role An AP operating as a mesh node can have one of two roles: mesh portal or mesh point. Parent If the AP is operating as a mesh point, this parameter displays the name of its parent mesh portal. Path Cost A relative measure of the quality of the path from the AP to the controller. A lower number indicates a better quality path, where a higher number indicates a less favorable path (e.g, a path which may be longer or more congested than a path with a lower value.
show ap monitor show ap monitor active-laser-beams|ap-list|channel|client-list|containment-info|idsstate|mesh-list|pot-ap-list|pot-client-list|routers|wired-mac {ap-name }|{bssid }|{ip-addr } {ap-bssid }|{enet-mac } Description Show information for Dell Air Monitors. Syntax Parameter Description active-laser-beams Show active laser beam generators.
Parameter Description ap-name Name of Access Point bssid BSSID of Access Point ip-addr IP Address of Access Point mesh-list pot-ap-list Show list of Mesh APs being monitored. Display the Potential AP table. The Potential AP table shows the following data: bssid: the AP’s Basic Service Set Identifier. l channel: The AP’s current radio channel l phy type: The radio’s PHY type. Possible values are 802.11a, 802.11a-HT-40, 802.11b/g, 802.11b/g-HT-20.
Monitored AP Table -----------------bssid load-balance -------------00:1a:1e:11:5f:02 disable 00:1a:1e:11:5f:00 disable 00:1a:1e:11:5f:11 disable 00:1a:1e:11:5f:10 disable 00:1a:1e:11:5f:01 disable 00:1a:1e:11:6e:70 disable 00:1a:1e:11:6e:71 disable 00:1a:1e:88:90:42 disable 00:1a:1e:88:90:41 disable 00:1a:1e:88:90:40 disable 00:1a:1e:8e:73:e1 disable 00:1a:1e:8e:73:e0 disable 00:1a:1e:8e:73:f0 disable 00:1a:1e:8e:73:f1 disable 00:1a:1e:8d:5b:30 disable 00:1a:1e:8d:5b:31 disable 00:1a:1e:85:89:20 disable e
Column Description mt Monitor time; the number of elapsed timer ticks since the AP first recognized the monitored AP. it AP idle time, the number of timer-ticks since the AP last saw any frames from the monitored AP. load-balance Shows if the load-balancing feature has been enabled on the AP. Command History Version Modification ArubaOS 3.0. Command introduced ArubaOS 3.4. The ap-bssid and enet-mac parameters were added to the show ap monitor wired-mac command. ArubaOS 6.
show ap monitor association show ap monitor association {ap-name }|{bssid }|{ip-addr } Description Show the association table for an Air Monitor (AM). Syntax Parameter Description ap-name Show data for an AM with a specific name. bssid Show data for an AM with a specific Basic Service Set Identifier (BSSID). The Basic Service Set Identifier (BSSID) is usually the AM’s MAC address.
Command History Introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap monitor debug show ap monitor debug counters|status {ap-name }|{bssid }|{ip-addr } show ap monitor debug profile-config {ap-name }|{bssid }|{ip-addr } ap-radio|ap-system|arm|event-thresholds|ids-dos|ids-general|ids-impersonation|ids-signaturematching|ids-unauthorized-device|interference|regulatory-domain|rf-behavior Description Show information for an Air Monitor’s current status, message counters, or profile settings.
Parameter Description interference Show an Air Monitor’s interference configuration settings, as defined in its current RF Optimization profile. regulatory-domain Show an Air Monitor’s Regulatory Domain configuration settings, as defined in its Regulatory Domain profile. rf-behavior Show an Air Monitor RF Behavior Configuration Examples The output of the following command includes the WLAN Interface, Data Structures, WLAN InterfaceSwitch Status and RTLS Configuration tables for the specified AP.
WMS on Master Stats Update Interval Poll Interval Num Switches Collect Stats disabled 60 174000 1 enabled WLAN Interface Switch Status ----------------------------Bssid Type Status ack --------------00:1a:1e:11:5f:10 local up 3322965 00:1a:1e:11:5f:00 local up 3322965 RTLS configuration ------------------Type Server IP -----------MMS 102.0.2.19 Aeroscout 192.0.2.199 RTLS 192.0.2.
Column Description status Shows if the interface is currently enabled or disabled. pkts Number of packets seen on the AP’s wired interface. macs Number of MAC addresses in the Wired MAC table for that interface. gw-macs Number of MAC addresses in the Wired MAC table for that interface. tagged-pkts Number VLAN-tagged packets sent to that interface. vlan The VLAN ID for the packets sent to that interface. Packets read Number of packets read by the AP since it was last reset.
Column Description WMS on Master Indicates if the AP communicates to the wms process on a master or local controller. enabled: Communicates with a master controller. disabled: Communicates with a local controller only. Stats Update Interval If the AP is collecting statistics, this value is the interval in seconds in which the AP sends statistics to the WMS process on a controller. Poll Interval Interval, in milliseconds, that the AP sends RSSI updates to the WMS process on a controller.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap monitor stats show ap monitor stats advanced {ap-name }|{bssid }|{ip-addr } client-mac show ap monitor stats {ap-name }|{bssid }|{ip-addr } mac Description Show packet, signal and channel statistics for an AP or a client. Syntax Parameter Description advanced Show advanced statistics for an AP or client. ap-name Show statistics for an AP with a specific name.
FRR FRER --- ---17 4 Handoff Assist -------------rssi-index cur-signal old-cur-signal ---------- ---------- -------------0 51 0 High Throughput Parameters -------------------------ht-type primary-channel sec-channel gf-supported ------- --------------- ----------- -----------none 0 0 0 40mhz-intolerance ----------------0 The output of this command includes the following information: Column Description retry Percent of 802.11 retry frames sent because a client failed to send an ACK.
Column Description NOTE: This value is updated only if 'handoff-assist' is enabled in the AP’s RF Optimization profile. cur-signal The Receive Signal Strength Indicator (RSSI) of the most recent frame received from the specified MAC address. old-cur-signal The most recent Receive Signal Strength Indicator (RSSI) of the MAC which is 3 lower or 5 higher than the current RSSI.
show ap packet-capture status show ap packet-capture status Description This command shows detailed packet capture (PCAP) session information for Dell APs. Syntax Parameter Description ap-name AP name for which you are requesting packet capture status information. ip-addr IP address of the AP for which you are requesting packet capture status information. ip6-addr IP6 address of the AP for which you are requesting packet capture status information.
show ap profile-usage show ap profile-usage {ap-name |bssid |ip-addr } Description Show a complete list of all profiles referenced by an individual AP or an AP BSSID. Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
show ap provisioning show ap provisioning {ap-name }|{bssid }|{ip-addr } Description Show provisioning parameters currently used by an AP. Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. An AP’s BSSID is usually the AP’s MAC address. ip-addr Show data for an AP with a specific IP address.
IKE PSK PAP User Name PAP Password PPPOE User Name PPPOE Password PPPOE Service Name PPPOE CHAP Secret USB User Name USB Password USB Device Type N/A N/A N/A N/A N/A N/A N/A N/A N/A any The output of this command includes the following information: Column Description AP Name Name of the AP. AP Group AP group to which the AP belongs. Location name Fully-qualified location name (FQLN) for the AP.
Column Description l both: AP uses both antennas Single chain mode for Radio 0 If this parameter is set to 1 for an 802.11n-capable radio, the radio will operate in single-chain mode, and will transmit and receive data using only legacy rates and single-stream HT rates up to MCS 7. This parameter is set to 0 (disabled) by default. Single chain mode for Radio 1 If this parameter is set to 1 for an 802.
Column Description Installation Indicates the type of installation (indoor or outdoor). The default parameter indicates that the installation mode is determined by the AP model type. Latitude Latitude coordinates of the AP, in the format Degrees Minutes Seconds (DMS). Longitude Longitude coordinates of the AP, in the format Degrees Minutes Seconds (DMS). Altitude Altitude, in meters, of the AP. This parameter is supported on outdoor APs only. Antenna bearing for 802.
Release Modification l l l l l l ArubaOS 5.0 USB Password USB Device Type USB Device Identifier USB Dial String USB Initialization String USB TTY device path The mesh-sae parameter no longer displays the sae-default setting if the parameter is disabled. Only the sae-disable option indicates that this parameter is currently in its default disabled state.
show ap provisioning-profile ap provisioning-profile [] Description This command shows information for AP provisioning profiles. Syntax Parameter Description The name of an an existing AP provisioning profile. Usage Guidelines The AP provisioning profile allows you to define a set of provisioning parameters to an AP group. These settings can be saved or assigned to an AP group via the command ap-group provisioning-profile .
USB TTY device data path USB TTY device control path Link Priority Ethernet Link Priority Cellular Username of AP so that AP can authenticate to 802.1x using PEAP N/A N/A 0 0 N/A Description This command defines a provisioning profile for an AP or group of APs. Syntax Parameter Description Remote-AP Indicates that the profile is associated with a remote AP using certificates. Master IP/FQDN The FQDN or IP address for the master controller. PPPOE User Name PPPoE username for the AP.
Parameter Description Password of AP so that AP can authenticate to 802.1x using PEAP If your AP uses PEAP authentication, this field displays the AP password. Uplink VLAN If you configured an uplink VLAN on an AP connected to a port in trunk mode, the AP sends and receives frames tagged with this VLAN on its Ethernet uplink. By default, an AP has an uplink vlan of 0, which disables this feature.
show ap radio-database show ap radio-database [band a|g] [group ] [mode access-point|airmonitor|disabled|ht|ht-40mhz|legacy|sap-monitor] [sort-by ap-group|ap-ip|ap-name|aptype|switch-ip] [sort-direction ascending|descending] [start ] [switch ] Description Show radio information for Access Points visible to this controller. Syntax Parameter Description band Show only APs with a radio operating in the specified band. a Show only APs with a radio operating in the 802.
Parameter descending Description Sort the output in descending order. start Start displaying the output of this command at a chosen index number by entering the index number of the AP at which command output should start. switch Display information for APs associated with a specific controller by entering the IP address of that controller. Example The output of the command shows that the AP is aware of five other access points, three of which are active.
Column Description Isotropic Radiated Power (EIRP)/Number of Clients associated with the radio 802.1a radio type and mode/802.11a radio channel used by the AP/current Effective Isotropic Radiated Power (EIRP)/Number of Clients associated with the radio. 11a Mode/Chan/EIRP/Cli Command History Introduced in ArubaOS 3.0.
172.17.153-7 172.17.150-5 172.17.153-13 172.17.151-42 172.17.151-34 172.17.155-26 EIRP/MaxEIRP -----------28/29.5 29.5/29.5 29.5/29.5 25/29.5 25/29.5 28/29.5 172.17.153 172.17.150 172.17.153 172.17.151 172.17.151 172.17.155 NF/U/I ------96/ 67/ -96/ 27/ -96/ 31/ -96/ 28/ -96/ 32/ -96/ 70/ 5 3 3 6 7 4 104 104 104 104 104 104 TD -0/0/0/0/0/0 0/0/0/0/0/0 0/0/0/0/0/0 0/0/0/0/0/0 0/0/0/0/0/0 0/0/0/0/0/0 55.55.57.44 55.55.57.42 55.55.57.35 55.55.57.34 55.55.57.33 55.55.57.22 2.4 2.4 2.4 2.4 2.4 2.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap regulatory-domain-profile show ap regulatory-domain-profile [] Description Show the list of regulatory domain profiles, or the settings in an individual regulatory domain profile Syntax Parameter Description Show data for a specific regulatory domain profile Usage Guidelines Issue this command without the parameter to display the entire regulatory domain profile list, including profile status and the number of references to each profile.
The output of this command includes the following information: Column Description Country Code Code that represents the country in which the APs will operate. The country code determines the 802.11 wireless transmission spectrum. Valid 802.11g channel Selected 802.11b/g channel available for use by an AP using the specified regulatory domain profile. These channels are limited to those valid for the profile’s country code. Valid 802.11a channel Selected 802.
show ap remote counters show ap remote counters {ap-name }|{bssid }|{ip-addr } Description Show the numbers of message counters for Remote APs Syntax Parameter Description ap-name Show data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. You must specify an AP’s BSSID, which is usually the AP’s MAC address ip-addr Show data for an AP with a specific IP address.
show ap remote debug association show ap remote debug association [ap-name |bssid |ip-addr ] Description Show the association table of the AP to identify the clients associated to each AP. Syntax Parameter Description ap-name Show client associations for a specific AP name. bssid Show client associations for an specific AP Basic Service Set Identifier (BSSID). The BSSID is usually the AP’s MAC address.
Column Description mac MAC address of the client. auth This column displays a y if the AP has been configured for 802.11 authorization frame types. Otherwise, it displays an n. assoc This column displays a y if the AP has been configured for 802.11 association frame types. Otherwise, it displays an n. aid 802.11 association ID. A client receives a unique 802.11 association ID when it associates to an AP. 1-int Number of beacons in the 802.11 listen interval.
show ap remote debug association show ap remote debug association [ap-name |bssid |ip-addr Description Show the association table for an AP. Syntax Parameter Description ap-name Show AP associations for a specific AP. You can also include the essid, phy or voip-only keywords to further filter the output of this command. bssid Show the AP associations for an specific AP Basic Service Set Identifier (BSSID).
vlan-id ------65 65 tunnel-id --------0x10c4 0x1072 phy --a-HT-40sgi-2ss a assoc. time ----------35m:41s 24m:29s num assoc --------1 1 Flags ----WA WA The output of this command includes the following information: Column Description Name Name of an AP bssid The AP Basic Service Set Identifier (BSSID) mac MAC address of the AP auth This column displays a y if the AP has been configured for 802.11 authorization frame types. Otherwise, it displays an n.
show ap remote debug bss-config show ap remote debug bss-config [ap-name |bssid |ip-addr Description Show the configuration for each BSSID of an AP. This information can be used to troubleshoot problems on an AP. Syntax Parameter Description ap-name Filter the AP Config Table by AP name. ip-addr Filter the AP Config Table by IP address by entering an IP address in dotted-decimal format.
Column Description l l split-tunnel: Tunnel to controller or NAT locally tunnel: Tunnel to controller max-cl The maximum number of clients allowed for this BSSID. preamble Shows if short preambles are enabled for 802.11b/g radios. Network performance may be higher when short preamble is enabled. In mixed radio environments, some 802.11b wireless client stations may experience difficulty associating with the AP using a short preamble. MTU Maximum Transmission Unit (MTU) size, in bytes.
show ap remote debug client-mgmt-counters show ap remote debug client-mgmt-counters Description Show the numbers of each type of message from an AP’s clients. This information can be used to troubleshoot problems on an AP.
Parameter Description Tunnel VLAN Membership (For internal use only) Update STA Tunnel Request (For internal use only) Update STA Tunnel Response (For internal use only) ARM Update Number of times an AP has changed its adaptive radio management (ARM) settings.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ap remote debug flash-config show ap remote debug flash-config {ap-name |bssid |ip-addr } acls| {vap |vaps Description Show the remote AP configuration stored in flash memory. Syntax Parameter Description ap-name Show debugging data for an AP with a specific name. bssid Show data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
The output of this command includes the following information: Column Description Native VLAN VLAN ID of the native VLAN. DHCP VLAN VLAN ID of Remote AP DHCP server used when the controller is unreachable. DHCP ADDR IP Address used as DHCP Server Identifier. DHCP POOL NETMASK Netmask of the DHCP server pool. DHCP POOL START IP Address used as the start of a range of addresses for a DHCP pool. DHCP POOL END IP Address used as the end of a range of addresses for a DHCP pool.
show ap remote debug mgmt-frames show ap remote debug mgmt-frames {ap-name }|{bssid |{ip-addr } [client-mac ] [count ] Description Show traced 802.11 management frames for a remote AP. Syntax Parameter Description ap-name Show debugging information for a specific AP. bssid Show debugging information for a specific Basic Service Set Identifier (BSSID).
Column Description assoc-resp: Association response assoc-req: Association request SA Source MAC address. DA Destination MAC address. BSS Basic Service Set Identifier (BSSID) of the AP signal Signal strength as a signal to noise ratio. For example, a value of 30 would indicate that the power of the received signal is 30 dBm above the signal noise threshold. Misc Additional information describing the client’s action.
show ap remote debug r1_key show ap remote debug r1_key [ap-name | bssid | ip-addr ] Description This command displays all the r1 keys that are stored in an AP. Syntax Parameter Description ap-name Show debugging information for a specific AP. bssid Show debugging information for a specific Basic Service Set Identifier (BSSID).
show ap spectrum ap-list show ap spectrum ap-list {ap-name }|{ip-addr } ap-bssid channel essid limit or page freq-band 2.4ghz|5ghz sort start Description This command shows spectrum data seen by an access point that has been converted to a spectrum monitor. Syntax Parameter Description ap-name Name of the spectrum monitor for which you want to view spectrum information.
Examples The output of this example shows spectrum data seen by spectrum monitor ap123. The output in the example below has been divided into two tables to better fit this document. In the ArubaOS CLI, the output appears as a single, long table.
Related Commands Command Description Mode ap spectrum local-override Convert an AP or AM into a spectrum monitor by adding it to the spectrum localoverride list. Config mode on master or local controllers rf dot11a-radio-profilemodespectrummode Set a 802.11a radio so the device operates as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client. Config mode on master or local controllers rf dot11g-radio-profilemodespectrummode Set a 802.
show ap spectrum channel-metrics show ap spectrum channel-metrics {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz Description This command shows channel quality, availability and utilization metrics as seen by a spectrum monitor. Syntax Parameter Description ap-name Name of the spectrum monitor for which you want to view spectrum information. ip-addr IP address of the spectrum monitor. freq-band 2.4ghz|5ghz View information for a specific radio type, either 2.
Channel Metrics Table --------------------Channel Quality(%) Availability(%) ------- ---------- --------------1 97 57 2 80 58 3 63 58 4 71 57 5 88 54 6 98 51 7 88 54 8 69 56 9 60 57 10 30 29 11 0 0 12 25 50 13 50 99 14 99 99 1+/563 54 2+/663 51 3+/763 51 4+/869 51 5+/960 51 6+/1030 29 7+/110 0 Utilization(%) -------------43 42 42 43 46 49 46 44 43 71 100 50 1 1 46 49 49 49 49 71 100 WiFi Util(%) -----------40 22 5 16 36 47 35 14 3 1 0 0 0 0 36 47 47 47 47 1 0 Interference Util(%) -------------------3 20
Command Description Mode rf dot11g-radio-profilemodespectrum-mode Set a 802.11g radio so the device operates as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client. Config mode on master or local controllers rf dot11a-radio-profilemodespectrum-mode Set a 802.11a radio so the device operates as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client.
show ap spectrum channel-summary show ap spectrum channel-summary {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz Description This command displays a summary of the 802.11a or 802.11g channels seen by a spectrum monitor. Syntax Parameter Description ap-name Name of the spectrum monitor for which you want to view spectrum information. ip-addr IP address of the spectrum monitor for which you want to view spectrum information. freq-band 2.
Column Description Channel An 802.11a or 802.11g radio channel. Known APs Number of valid APs identified on the radio channel. UnKnown APs Number of invalid or rogue APs identified on the radio channel. Channel Util (%) Percentage of the channel currently in use. Max AP Signal (dBm) Signal strength of the AP that has the maximum signal strength on a channel. Max Interference (dBm) Signal strength of the non-Wi-Fi device that has the highest signal strength.
show ap spectrum client-list show ap spectrum client-list {ap-name }|{ip-addr } ap-bssid channel essid limit mac or page freq-band 2.4ghz|5ghz start Description This command shows details for clients seen by a specified spectrum monitor. Syntax Parameter Description ap-name Name of the spectrum monitor for which you want to view spectrum information.
Examples The example shows that the spectrum monitor ap999 sees eight different clients on channel 149. The output in the example below has been divided into two tables to better fit this document. In the ArubaOS CLI, the output appears as a single, long table.
Column Description signal(dBm) Client signal strength, in dBm. add-time Time when the client was first detected by the spectrum monitor. last-seen Time when the spectrum monitor last detected that the client was active. Related Commands Command Description Mode ap spectrum local-override Convert an AP or AM into a spectrum monitor by adding it to the spectrum localoverride list. Config mode on master or local controllers rf dot11a-radio-profilemodespectrummode Set a 802.
show ap spectrum debug show ap spectrum debug {channel-info|channel-quality|classify|classify-fft|devicedetails|device-info|devices-seen} {ap-name }|{ip-addr } freq-band {2.4ghz|5ghz} Description This command saves spectrum analysis channel information to a file on the spectrum monitor. Syntax Parameter Description channel-info Save channel information for later analysis.
Command History Introduced in ArubaOS 6.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show ap spectrum debug fft show ap spectrum debug fft {ap-name }|{ip-addr } freq-band {2.4ghz|5ghz} avg duty-cycle fft-to-controller max normalized raw raw-normalized Description Save FFT (Fast Fourier Transform) power data to a file on the spectrum monitor. Syntax Parameter Description ap-name Name of the spectrum monitor for which you want to view spectrum information. ip-addr IP address of the spectrum monitor. freq-band 2.
Command Description Mode mode as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client. controllers rf dot11g-radio-profilemodespectrummode Set a 802.11g radio so the device operates as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client. Config mode on master or local controllers Command History Introduced in ArubaOS 6.0.
show ap spectrum debug monitors show ap spectrum debug monitors Description Show a detailed description of all spectrum monitors on the controller. Syntax No parameters Examples The output of this command shows a list of available spectrum monitor or hybrid AP devices, a list of spectrum devices currently subscribed to a spectrum client, message counters for subscribed spectrum devices and the subscription history.
Usage Guidelines Use this command under the guidance of an Dell technical support representative to troubleshoot spectrum analysis errors. Related Commands Command Description Mode ap spectrum local-override Convert an AP or AM into a spectrum monitor by adding it to the spectrum localoverride list. Config mode on master or local controllers rf dot11a-radio-profilemodespectrummode Set a 802.
show ap spectrum debug status show ap spectrum debug status {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz Description This command shows detailed status and statistics for a spectrum monitor or hybrid AP. Syntax Parameter Description ap-name Name of the spectrum device for which you want to view status information. ip-addr IP address of the spectrum device for which you want to view status information. freq-band 2.
show ap spectrum device-duty-cycle show ap spectrum device-duty-cycle {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz Description Shows the current duty cycle for devices on all channels being monitored by the spectrum monitor or hybrid AP radio. Syntax Parameter Description ap-name Name of the spectrum device for which you want to view spectrum information. ip-addr IP address of the spectrum device for which you want to view spectrum information. freq-band 2.
Related Commands Command Description Mode ap spectrum local-override Convert an AP or AM into a spectrum monitor by adding it to the spectrum localoverride list. Config mode on master or local controllers rf dot11a-radio-profilemodespectrummode Set a 802.11a radio so the device operates as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client. Config mode on master or local controllers rf dot11g-radio-profilemodespectrummode Set a 802.
show ap spectrum device-history show ap spectrum device-history {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz [type audio-ff|bluetooth|cordless-base-fh|cordless-network-fh|cordless-phone-ff|genericff|generic-fh|generic-interferer|microwave|microwave-inverter|video|xbox] Description This command shows the history of the last 256 non-Wi-Fi devices. Syntax Parameter Description ap-name Name of the spectrum monitor or hybrid AP for which you want to view spectrum information.
Usage Guidelines Use this command to view channel, signal and duty-cycle information and add/delete times for the last 256 devices seen by a spectrum monitor or hybrid AP. Non-Wi-Fi Interferers The following table describes each type of of non-Wi-Fi interferer detected by a spectrum monitor or hybrid AP. Note also that a hybrid AP on a 20 MHz channel will see 40 MHz Wi-Fi data as non-Wi-Fi data.
Non-Wi-Fi Interferer Type Description environments. Those devices may also be classified as Microwave (Inverter). Generic Interferer Any non-frequency hopping device that does not fall into one of the other categories described in this table is classified as a Generic Interferer. For example a Microwave-like device that does not operate in the known operating frequencies used by the Microwave ovens may be classified as a Generic Interferer.
Column Description ID ID number assigned to the device by the spectrum monitor or hybrid AP radio. Spectrum monitors and hybrid APs assign a unique spectrum ID per device type. Cfreq Center frequency of the signal sent from the device. Bandwidth Channel bandwidth used by the device, in Kilohertz. Channelsaffected Radio channels affected by the wireless device, in Kilohertz. Signal-strength Strength of the signal sent from the device, in dBm. Duty-cycle Device duty cycle.
show ap spectrum device-list show ap spectrum device-list {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz [type audio-ff|bluetooth|cordless-base-fh|cordless-network-fh|cordless-phone-ff|genericff|generic-fh|generic-interferer|microwave|microwave-inverter|video|xbox] Description Show a device summary table and channel information for non-Wi-Fi devices currently seen by a spectrum monitor or hybrid AP radio.
Usage Guidelines Issue this command to view detailed information about currently active non-Wi-Fi devices on the network. Use the optional type parameter to display data for one specific device type only. For additional details about non-Wi-Fi device types shown in this table, see "Non-Wi-Fi Interferers" on page 874. NOTE: A hybrid AP on a 20 MHz channel will see 40 MHz Wi-Fi data as non-Wi-Fi data.
Column Description Signal-strength Strength of the signal sent from the device, in dBm. Duty-cycle Device duty cycle. This value represents the percent of time the device broadcasts a signal. Add-time Time at which the device was first detected. Update-time Time at which the device’s status was updated. Related Commands Command Description Mode ap spectrum local-override Convert an AP or AM into a spectrum monitor by adding it to the spectrum localoverride list.
show ap spectrum device-log show ap spectrum device-log {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz [type audio-ff|bluetooth|cordless-phone-ff|cordless-phone-fh| generic-ff|generic-fh|generic-interferer|microwave|microwave-inverter|video|xbox] Description This command shows a time log of add and delete events for non-Wi-Fi devices. Syntax Parameter Description ap-name Name of the spectrum monitor for hybrid AP or which you want to view spectrum information.
Usage Guidelines Use this table to show a time log of when non-Wi-Fi devices were added to and deleted from the Wi-fi Device log table. For additional details about non-Wi-Fi device types shown in this table, see "Non-Wi-Fi Interferers" on page 874. NOTE: A hybrid AP on a 20 MHz channel will see 40 MHz Wi-Fi data as non-Wi-Fi data. Examples The output of this example shows that the spectrum monitor ap123 logged data for four frequency-hopping cordless base devices seen by its 802.11g radio.
Column Description Signal Strength Strength of the signal sent by the device. Duty Cycle Device duty cycle. This value represents the percent of time a signal is broadcast on a specific channel or frequency. Center Freq Center frequency of the signal sent by the device. Start Freq Lowest signal frequency sent by the device. End Freq Highest signal frequency sent by the device. Channels affected Radio channels affected by the device signal.
show ap spectrum device-summary show ap spectrum device-summary {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz Description This command shows the numbers of wi-fi and non-Wi-Fi device types on each channel monitored by a spectrum monitor or hybrid AP Syntax Parameter Description ap-name Name of the spectrum monitor or hybrid AP for which you want to view spectrum information.
Related Commands Command Description Mode ap spectrum local-override Convert an AP or AM into a spectrum monitor by adding it to the spectrum localoverride list. Config mode on master or local controllers rf dot11a-radio-profilemodespectrummode Set a 802.11a radio so the device operates as an spectrum monitor, and can send spectrum analysis data to a desktop or laptop client. Config mode on master or local controllers rf dot11g-radio-profilemodespectrummode Set a 802.
show ap spectrum interference-power show ap spectrum interference-power {ap-name }|{ip-addr } freq-band 2.4ghz|5ghz [] Description This command shows the interference power detected by a 802.11a or 80211g radio on a spectrum monitor or hybrid AP. Syntax Parameter Description ap-name Name of the spectrum monitor or hybrid AP for which you want to view spectrum information.
Channel Noise Floor(dBm) Max Interference(dBm) ------- -----------------------------------149 -91 -71 153 -63 -58 157 -92 -60 161 -94 -70 165 -93 -69 149+ -60 -58 157+ -89 -60 Max AP Signal(dBm) Max AP SSID Max AP BSSID ACI(dBm) ------------------ ----------- ------------ -------- -40 ethersphere-wpa2 00:24:6c:80:7b:c9 -77 -42 guest 00:1a:1e:87:c1:90 -63 -48 alpha 00:1a:1e:50:01:30 -74 -39 00:24:6C:C0:15:EB 00:24:6c:81:57:c8 -61 -26 sw-jfb-attack 00:1a:1e:9b:1d:c8 -74 -40 ether
show ap spectrum-load-balancing show ap spectrum-load-balancing [group ] Description Show spectrum load balancing information for an AP with this feature enabled. Syntax Parameter Description group Filter this information to show only data for the specified spectrum load balancing domain. Examples The output of the command below shows the APs currently using the spectrum load-balancing domain default-1.
show ap spectrum local-override show ap spectrum local-override Description This command shows a list of AP radios currently converted to spectrum monitors via the spectrum local-override list Syntax No parameters Examples The output of this example shows that three APs each have two radios defined as spectrum monitors.
Command History Introduced in ArubaOS 6.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show ap spectrum monitors show ap spectrum monitors Description This command shows a list of APs terminating on the controller that are currently configured as spectrum monitors or hybrid APs Syntax No parameters Examples The output of this example shows that the 802.11a radio on a spectrum monitor named ap123 is sending spectrum analysis data to a client with the IP address 10.240.16.177.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show ap spectrum technical-support show ap spectrum technical-support ap-name Description Save spectrum data for later analysis by technical support. Syntax Parameter Description Save technical support information for a specific spectrum monitor. Name of the file to which this data should be saved. This file does not have to already exist on the controller, the show ap spectrum technical-support command will create this file.
show ap system-profile show ap system-profile Description Show an AP’s system profile settings. Syntax Parameter Description Name of a system profile. Examples The output of the command below shows the current configuration settings for the default system profile.
Root AP AeroScout RTLS Server RTLS Server configuration Telnet Disabled N/A N/A Disabled The output of this command includes the following information: Column Description RF Band For dual-band radios, this parameter displays the RF band in which the AP should operate: l g = 2.4 GHz l a = 5 GHz RF Band for AM mode scanning Scanning band for multiple RF radios. l g = 2.4 GHz l a = 5 GHz l all = Radio scans both bands. This is the default setting.
Column Description LMS Preemption When this parameter is enabled, the local management switch automatically reverts to the primary LMS IP address when it becomes available. LMS Hold-down Period Time, in seconds, that the primary LMS must be available before an AP returns to that LMS after failover.rap-dhcp-server-vlan VLAN ID of the remote AP DHCP server used if the controller is unavailable. This VLAN enables the DHCP server on the AP (also known as the remote AP DHCP server VLAN).
Column Description encryption is used for traffic to and from a wireless client that is connected to a tunneled SSID. When enabled, all traffic is re-encrypted in the IPsec tunnel. When disabled, the wireless frame is only encapsulated inside the IPsec tunnel. Dump Server (For debugging purposes.) Displays the server to receive the core dump generated if an AP process crashes. Heartbeat DSCP DSCP value of AP heartbeats (0-63). Maintenance Mode Shows if Maintenance mode is enabled or disabled.
Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.2 Support for additional RTLS servers and remote AP enhancements was introduced. ArubaOS 3.3.2 l l l l Maintenance-mode parameter was introduced. Multiple remote AP DHCP server enhancements were introduced. Support for RFprotect server and backup server configuration was introduced. The mms-rtls-server parameter was deprecated in ArubaOS 3.3.2. ArubaOS 5.
show ap tech-support show ap tech-support ap-name [] Description Display all information for an AP, or save that information to a file on the controller. This information can be used by Dell technical support to diagnose a problem with an AP. Syntax Parameter Description Name of the AP for which you want to view tech support data. Save the output of this command into a file on the controller with the specified filename.
show ap vlan-usage show ap vlan-usage [{ap-name }|{bssid |{essid |{ip-addr }] Description Show the numbers of clients on each VLAN. Syntax Parameter Description ap-name Show VLAN data for an AP with a specific name. bssid Show VLAN data for a specific Basic Service Set Identifier (BSSID) on an AP. The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address.
show ap wired-ap-profile show ap wired-ap-profile [] Description Show a list of all wired AP profiles, or display the configuration parameters in a specific wired AP profile. Syntax Parameter Description Name of a wired AP profile. Usage Guidelines The command show ap wired-ap-profile displays a list of all wired AP profiles, including the number of references to each profile and the profile status.
Column Description Access mode VLAN VLAN ID of the access mode VLAN. Trunk mode native VLAN VLAN ID of the native VLAN. Trunk mode allowed VLANs Range of allowed VLAN IDs for the native VLAN. Trusted Shows if the wired port on an AP using this profile is a trusted port. Possible values are Trusted or Not Trusted. Broadcast If set to broadcast, the wired AP port will forward broadcast traffic. If the parameter displays Do Not Broadcast, broadcast traffic will not be forwarded.
show ap wired-port-profile show ap wired-port-profile Description Shows all AP wired port profiles and their status. Syntax No parameters. Example The example below shows that the controller has three wired port profiles. The References column lists the number of other profiles with references to the wired port profile, and the Profile Status column indicates whether the profile is predefined. User-defined profiles will not have an entry in the Profile Status column.
Parameter Description AP LLDP Profile Name of an LLDP Profile associated with this wired port. Shut Down? Shows if the the wired AP port is enabled (no) or disabled (yes). Remote AP Backup Use the rap-backup parameter to use the wired port on a Remote AP for local connectivity and troubleshooting when the AP cannot reach the controller. If the AP is not connected to the controller, no firewall policies will be applied when this option is enabled.
show ap wired stats show ap wired stats {ap-name } | {ip-addr }|{client-ip } | {client-mac } Description Shows statistics for RAP wired clients. Syntax Parameter Description ap-name Show wired RAP statistics for a specified AP name. ip-addr Show wired RAP statistics for a specified AP by entering an IP address in dotteddecimal format. client-ip Show wired RAP statistics for a specified client IP address.
Column Description TX Bytes Number of bytes sent RX Packets Number of packets received RX Bytes Number of bytes received TX Broadcast Packets Number of broadcast packets sent TX Broadcast Bytes Number of broadcast bytes sent TX Multicast Packets Number of multicast packets sent TX Multicast Bytes Number of multicast bytes sent Command History Introduced in ArubaOS 5.0.
show ap wmm-flow show ap wmm-flow [{ap-name }|{bssid }|{essid }|{ip-addr }] dotlla|dotllg Description Show the Wireless Multimedia (WMM) flow table. Syntax Parameter Description ap-name View an AP with a specified name. bssid View data for an AP with a specific BSSID (Basic Service Set Identifier). The Basic Service Set Identifier (BSSID) is usually the AP’s MAC address. essid View data for a specific ESSID (Extended Service Set Identifier).
Column Description AP name Name of an AP with recorded WMM flows ESSID Extended Service Set Identifier (ESSID) of a wireless network. Client MAC address of the client. Description The description is a long string that includes the following information. TSID: Traffic Stream Identifier. The TSID should match the priority level for each flow. Priority: One of the following IEEE 802.
show arp show arp Description Show Address Resolution Protocol (ARP) entries for the controller. Syntax No parameters Example This example shows configured static ARP entries for the controller. (host) #show arp Protocol Address Internet 10.3.129.98 Internet 10.3.129.253 Internet 10.3.129.250 Internet 10.3.129.99 Internet 10.3.129.96 Internet 10.3.129.
show audit-trail show audit-trail {] Description Show the controller’s audit trail log. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. Example By default, the audit trail feature is enabled for all commands in configuration mode. The example below shows the most recent ten audit log entries for the controller. (host) # show audit-trail 10 Feb 5 06:13:17 cli[1239]: USER: admin has logged in from 10.240.16.118.
show auth-tracebuf show auth-tracebuf [count <1-250] [failures] [mac
] Description Show the trace buffer for authentication events. Syntax Parameter Description count <1-250> limit the output of the command to the specified number of packets. failures Filter the output of this command to display only authentication failures mac Filter the output of this command to display only information for a specified MAC address.Feb Feb wpa2 Feb 5 08:08:35 5 08:08:35 psk aes 5 08:08:35 station-down station-up * * 00:09:ef:05:1e:b2 00:09:ef:05:1e:b2 00:1a:1e:97:e5:42 00:1a:1e:97:e5:42 - - station-data-ready * 00:09:ef:05:1e:b2 00:00:00:00:00:00 66 - Each row in the output of this table may include some or all of the following information: l A timestamp that indicates when the entry was created. l The type of exchange that was made. l The direction the packet was sent. l The source MAC address.
show banner show banner Description Show the current login banner Syntax No parameters Usage Guidelines Issue this command to review the banner message that appears when you first log in to the controller’s commandline or browser interfaces. Example (host) # show banner This testlab controller is scheduled for maintenance starting Saturday night at 11 p.m. Related Commands Configure a banner message using the command banner motd. Command History This command was available in ArubaOS 3.0.
show boot show boot Description Display boot parameters, including the boot partition and the configuration file to use when booting the controller. Syntax No parameters. Example (host) # show bootConfig File: default.cfg Boot Partition: PARTITION 1 Related Commands Configure boot parameters using the command boot. Command History This command was available in ArubaOS 1.0.
show cellular profile show cellular profile [] | [factory] Description Display the cellular profiles and profile settings. Syntax Parameter Description Enter the name of an existing cellular profile factory Display a list of factory supported cellular profiles. Usage Guidelines Issue this command without the parameter to display configuration parameters for the entire list of available cellular profiles.
Parameters Description Prod USB product ID in hexadecimal Serial USB device serial number. Dialer Name of a dialer group profile. TTY Modem TTY port. Driver One of the following cellular modem drivers: acm: Linux ACM driver. l hso: Option High Speed driver. l option: Option USB data card driver (default). l sierra: Sierra Wireless driver.
show clock show clock [summer-time|timezone|append] Description Display the system clock. Syntax Parameter Description summer-time Show summer (daylight savings) time settings. timezone Show the configured timezone for the controller. append If the timestamp feature is enabled, including a timestamp in show command output. Usage Guidelines Include the optional summer-time parameter to display configured daylight savings time settings.
show cluster-config show cluster-config Description Show the multi-master cluster configuration for the control plane security feature. Usage Guidelines When you issue this command from the cluster root, the output of this command shows the cluster role of the controller, and the IP address of each member controller in the cluster. When you issue this command from a cluster member , the output of this command shows the cluster role of the controller, and the IP address of the cluster root.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on cluster member or cluster root controllers 918 | show cluster-config Dell PowerConnect W-Series ArubaOS 6.
show cluster-switches show cluster-switches Description Issue this command on a master controller using control plane security in a multi-master environment to show other the other controllers to which it is connected. Usage Guidelines When you issue this command from the cluster root, the output of this command displays the IP address of the VLAN used by the cluster member to connect to the cluster root.
Command History This command was introduced in ArubaOS 5.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on cluster member or cluster root controllers 920 | show cluster-switches Dell PowerConnect W-Series ArubaOS 6.
show command-mapping show command-mapping [reverse] Description Show the mapping new commands to deprecated commands. Syntax Parameter Description reverse Sort the command map by deprecated command syntax. This command is useful to find the current command syntax for a deprecated command. Usage Guidelines The syntax of many commands changed after the release of ArubaOS 3.0. Use this command to display a list of current commands and their deprecated command equivalents.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers 922 | show command-mapping Dell PowerConnect W-Series ArubaOS 6.
show configuration show configuration Description Show the saved configuration on the controller. Syntax No parameters. Usage Guidelines Issue this command to view the entire configuration saved on the controller, including all profiles, ACLs, and interface settings. Example The example below shows part of the output for this command. (host) # show configuration version 6.
show controller-ip show controller-ip Description Show controller’s country and domain upgrade trail. Syntax No parameters. Example The output of this command shows the controller’s IP address and VLAN interface ID. (host) # show controller-ip Switch IP Address: 10.168.254.221 Switch IP is configured to be Vlan Interface: 1 Command History This command was available in ArubaOS 3.
show controller-ipv6 show controller-ipv6 Description Show controller’s IPv6 address and VLAN interface ID. Syntax No parameters. Example (host) # show controller-ipv6 Switch IPv6 Address: 2005:d81f:f9f0:1001::14 Switch IPv6 address is from Vlan Interface: 1 The output of this command shows the controller’s IPv6 address and VLAN interface ID. Command History This command is introduced in ArubaOS 6.
show control-plane-security show control-plane-security Description Show the current configuration of the control plane security profile. Syntax No parameters. Usage Guidelines The control plane security profile enables and disables the control plane security feature and identifies campus APs to receive security certificates. Issue this command to view current control plane security settings.
show country show country [trail] Description Show controller’s country and domain upgrade trail. Syntax Parameter Description trail Display the record showing how the switch was reconfigured for it’s current country domain when the controller hardware was upgraded. Usage Guidelines A controller’s country code sets the regulatory domain for the radio frequencies that the APs use. This value is typically set during the controller’s initial setup procedure.
show cp-bwcontracts show cp-bwcontract Description Display a list of Control Processor (CP) bandwidth contracts for whitelist ACLs. Syntax No parameters. Example The CP bw contracts table lists the contract names, the ID number assigned to each contract, and its defined traffic rate in bits per second.
show cpuload show cpuload [current] Description Display the controller CPU load for application and system processes. Syntax Parameter Description current Include this optional parameter at the request of Dell technical support to display additional CPU troubleshooting statistics. Example This example shows that the majority of the controller’s CPU resources are not being used by either application (user) or system processes. (host) #show cpuload user 6.9%, system 7.7%, idle 85.
show crypto-local ipsec-map show crypto-local ipsec [tag ] Description Displays the current IPsec map configuration on the controller. Syntax Parameter tag Description Display a specific IPsec map. Usage Guidelines The command show crypto-local ipsec displays the current IPsec configuration on the controller. Examples The command show crypto-local ipsec-map shows the default map configuration along with any specific IPsec map configurations.
Command History Version Modification ArubaOS 3.4 Command introduced. ArubaOS 6.1 The output of this command displays the configured IKE version. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show crypto dp show show crypto dp [peer ] Descriptions Displays crypto data packets. Syntax Parameter Description dp Shows crypto latest datapath packets. The output is sent to crypto logs. peer Clears crypto ISAKMP state for this IP. Usage Guidelines Use this command to send crypto data packet information to the controller log files, or to clear a crypto ISAKMP state associated with a specific IP address.
show crypto dynamic-map show crypto dynamic-map [tag ] Descriptions Displays IPsec dynamic map configurations. Syntax Parameter Description dynamic-map IPsec dynamic maps configuration. tag A specific dynamic map. Usage Guidelines Dynamic maps enable IPsec SA negotiations from dynamically addressed IPsec peers. Once you have defined a dynamic map, you can associate that map with the default global map using the command crypto map global-map.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 934 | show crypto dynamic-map Dell PowerConnect W-Series ArubaOS 6.
show crypto ipsec show crypto ipsec {mtu|sa[peer ]|transform-set [tag ]} Descriptions Displays the current IPsec configuration on the controller. Syntax Parameter Description mtu IPsec maximum mtu. sa Security associations. peer transform-set tag IPsec security associations for a peer. IPsec transform sets. A specific transform set.
Transform set will Transform set will Transform set will default-aes: { esp-aes256 esp-sha-hmac } negotiate = { Transport, Tunnel } newset: { esp-3des esp-sha-hmac } negotiate = { Transport, Tunnel } name: { esp-aes256-gcm esp-sha-hmac } negotiate = { Transport, Tunnel } Related Commands Command Description Mode crypto ipsec Use this command to configure IPsec parameters. Config mode Command History This command was introduced in ArubaOS 3.0.
show crypto isakmp show crypto isakmp eap-passthrough groupname key policy sa stats transports udpencap-behind-natdevice Descriptions This command displays Internet Key Exchange (IKE) parameters for the Internet Security Association and Key Management Protocol (ISAKMP). Syntax Parameter Description eap-passthrough Display configured IKEv2 EAP Methods. groupname Show the IKE Aggressive group name. key Show the IKE pre-shared keys.
hash algorithm: Secure Hash Algorithm 160 authentication method: Pre-Shared Key Diffie-Hellman Group: #2 (1024 bit) lifetime: [300 - 86400] seconds, no volume limit Default RAP Certificate protection suite 10002 Version 1 encryption algorithm: AES - Advanced Encryption Standard (256 bit keys) hash algorithm: Secure Hash Algorithm 160 authentication method: Rivest-Shamir-Adelman Signature Diffie-Hellman Group: #2 (1024 bit) lifetime: [300 - 86400] seconds, no volume limit Default RAP PSK protection suite 100
show crypto-local isakmp show crypto isakmp {ca-certificates}|{dpd}|{key}|{server-certificate}|{xauth} Descriptions This command displays Internet Key Exchange (IKE) parameters for the Internet Security Association and Key Management Protocol (ISAKMP). Syntax Parameter Description ca-certificate Shows all the Certificate Authority (CA) certificate associated with VPN clients. certificate-group Shows the existing certificate groups by server certificate name and CA certificate.
(host) #show crypto-local isakmp key ISAKMP Local Pre-Shared keys configured for ANY FQDN ----------------------------------------------------Key --ISAKMP Local Pre-Shared keys configured by FQDN -----------------------------------------------FQDN of the host Key -----------------servers.mycorp.com ******** ISAKMP Local Pre-Shared keys configured by Address --------------------------------------------------IP address of the host Subnet Mask Length Key ---------------------- ------------------ --10.4.62.
Command History Release Modification ArubaOS 3.4 Command introduced. ArubaOS 6.1 The show crypto-local isakmp certificate-group command was introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show crypto-local pki show crypto-local pki CRL [ ALL|crlnumber|fingerprint|hash|issuer|lastupdate|nextupdate] IntermediateCA [ALL|alias|dates|fingerprint|hash|issuer|modulus|purpose|serial|subject] OCSPResponderCert [ALL|alias|dates|fingerprint|hash|issuer|modulus|purpose|serial|subject] OCSPSignerCert [ALL|alias|dates|fingerprint|hash|issuer|modulus|purpose|serial|subject] PublicCert [ALL|alias|dates|fingerprint|hash|issuer|modulus|purpose|serial|subject] ServerCert [AL
Parameter Description NOTE: IntermediateCA has the identical sub-parameters as those listed under the TrustedCA parameter in this table. OSCPResponderCert Shows the name, original filename, reference count and expiration status of all ocsprespondercert certificates on this controller. NOTE: OCSPResponderCert has the identical sub-parameters as those listed under the TrustedCA parameter in this table. OCSPSignerCert Shows the OCSP Signer certificate.
Usage Guidelines Use the show crypto-local pki command to view all CRL and certificate status, OCSP client and OCSP responder status and statistics. Example This example displays a list of all OCSP responder certificates on this controller. (host) (config) #show crypto-local pki OCSPResponderCert Certificates -----------Name -------------ocspJan28 ocspresp-standalone-feb21 ocsprespFeb02 OCSPresponder1 ocspresponder2 OCSPresponderlatest Original Filename ----------------ocspresp-jan28.cer ocspresp-feb21.
S/MIME encryption CA : No CRL signing : No CRL signing CA : No Any Purpose : Yes Any Purpose CA : Yes OCSP helper : Yes OCSP helper CA : No This example displays the certificate’s subject. (host) (config) #show crypto-local pki OCSPResponderCert ocspJan28 subject subject= /CN=WIN-T1BQQFMVDED.security1.qa.mycorp.
show crypto map show crypto ipsec map Descriptions This command displays the IPsec map configurations. Syntax Parameter Description map Usage Guidelines Use the show crypto map command to view configuration for global, dynamic and default map configurations. Examples The command show crypto map shows statistics for the global, dynamic and default maps.
Command History Version Modification ArubaOS 3.0 Command introduced. ArubaOS 6.1 The output of this command displays the configured IKE version for the map. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show crypto pki show crypto pki csr Descriptions This command displays the certificate signing request (CSR) for the captive portal feature. Syntax Parameter Description csr Usage Guidelines Use the show crypto pki command to view the CSR output. Examples The command show crypto pki shows output from the crypto pki csr command. (host) #show crypto pki csr Certificate Request: Data: Version: 0 (0x0) Subject: C=US, ST=CA, L=Sunnyvale, O=sales, OU=EMEA, CN=www.mycompany.com/emailAddress=myname@mycompany.
BxMJU3Vubnl2YWxlMQ4wDAYDVQQKEwVzYWxlczENMAsGA1UECxMERU1FQTEaMBgG A1UEAxMRd3d3Lm15Y29tcGFueS5jb20xKDAmBgkqhkiG9w0BCQEWGXB3cmVkZHlA YXJ1YmFuZXR3b3Jrcy5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOaw 8pU30BjE7ve9XZaFSaNWY3bumYL+SzFsgCXE7ceejl4+oh+QYreRaXUn6Cm60XY8 CxTdgzoMYvIvSZBH9S/mTtzDBn7SUSnsUoxAJt6uxqAhG+5GsXqb3QtnREhmGezH 9CS9KJiix2v7to5DqsciOrjsmgpQwCm3hEZwpT8JAgMBAAGgADANBgkqhkiG9w0B AQUFAAOBgQAlzg8pkXPpzSiF6nR8RLq30F0tU2TcrQf97Qmvt0p/FJpfwwqK+P9A JZz0l3NbU80OnNJjuFWlvSB0WPhwvrmCStAe/I1xoDO7m/mh7tnoYuQ05
show database show database synchronization Description Shows database synchronization status. Syntax No parameters. Usage Guidelines Issue this command to show the status database synchronization status. Example This example shows a database synchronization status.
show datapath show acl id {ap-name }|{ip-addr } application {ap-name |counters|ip-addr } bridge {ap-name |counters|ip-addr |table} bwm table cp-bwm crypto debug {dma counters|epa|opcode|performance|pkttrace-buffer| trace-buffer|trace-route} dhcp {vm-mac} error [counters] esi table exthdr firewall-agg-sess [counters] fqdn frame {ap-name |counters|ip-addr } hardware {counters|statistics} internal dir |file
Syntax Parameter Description acl id Displays datapath statistics associated with a specified ACL. The ACL index is found in the show rights command. ap-name Name of the AP. ip-addr IP address of the AP application counters Shows application counters and errors generated by applications running on a particular AP. These include stateful firewall application layer statistics. ap-name Name of the AP. ip-addr IP address of the AP.
Parameter trace-route dhcp vm-mac error counters Description Route cache tracing statistics are displayed. Datapath DHCP -related information. Datapath of the VM to host client mac Datapath error statistic errors. Show datapath errors including SUM, CPU, Addr and description information. esi table Displays the contents of the datapath ESI server table entries including server, IP, MAC, destination, VLAN, type, session and flag information. exthdr Displays the datapath default IPv6 Extended Header Map.
Parameter Description ip-mcast destination group Displays the data path IP multicast table statistics. These include source, group. VLAN and destination. ip-reassembly Displays the contents of the IP Reassembly statistics tables. ap-name Name of the AP. counters IP reassembly counters. ip-addr IP address of the AP ipv4 Displays the IPv4 contents of the IP Reassembly statistics table. ipv6 Displays the IPv6 contents of the IP Reassembly statistics table.
Parameter Description trusted Displays the the trusted ports. tunneled-node Displays the the tunneled node ports. untrusted-vlan Show if there are untrusted vlan entries for the indicated slot and port. xsec Displays the xsec ports. rap-bw-resv ap-name ip-addr Displays the remote AP uplink BW reservation statistics of the RAP only. rap-pkt-trace ap-name ip-addr Displays the remote AP packet-trace statistics of the RAP only.
Parameter Description services Displays the datapath services table statistics including protocol, port and service. session Displays datapath session statistics ap-name Name of AP counters Displays counters statistics including current entries, high water mark, maximum entries, total entries, allocation failures, duplicate entries, cross linked entries, number of reverse entries and maximum link length. ip-addr IP address of the AP.
Parameter Description station-list Displays the list of stations on the tunnel. table Tunnel table statistics. user Displays datapath user statistics such as current entries, pending deletes, high water mark, maximum entries, total entries, allocation failures, invalid users and maximum link length. ap-name Name of AP. counters User counters. ip-addr IP address of the AP.
Datapath Crypto Statistics -------------------------Crypto Accelerator Crypto Cores In Use Crypto Cores Total Crypto Requests Total Crypto Requests Queued Crypto Requests Failed Crypto Timeouts Crypto NoCoreFree Crypto BadNPlus Crypto SendNPlusFailed IPSec Encryption Failures IPSec Decryption Failures IPSec Decryption Loops IPSec Decryption BufFail IPSec Decr SPI(client) ERR IPSec Decrypt SA Not Ready IPSec Frag Failures IPSec Bad Pad Length IPSec Invalid TCP Index IPSec Invalid Length IPSec Invalid Head-Ro
Version Description ArubaOS 6.1.3.2 The debug opcode parameter was introduced. Issue this command only under the supervision of Dell technical support. ArubaOS 6.2 The firewall-agg-sess parameter is introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show destination show destination Description Display the aliases for default and user-defined network destinations. Syntax Parameter Description string Optional parameter to view details of a specific destination alias. Example This example displays the network destinations configured in the controller. (host) #show destination controller ---------Position Type IP addr -------- ---- ------1 host 10.16.15.
Command History This command was available in ArubaOS 1.0. Replaced with netdestination in 3.0. Command Information Platforms Licensing Command Mode All platforms You must have a PEFNG license to configure or view a destination. Enable or Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show dialer group crypto-local show dialer group Description Display dialer group information. Syntax No parameters. Usage Guidelines Displays the Dialer Group Table with the current dialing parameters. Example (host) #show dialer group Dialer Group Table -----------------Name Init String -------------evdo_us ATQ0V1E0 gsm_us AT+CGDCONT=1,"IP","ISP.CINGULAR" Dial String ----------ATDT#777 ATD*99# Command History Introduced in ArubaOS 3.4.
show dir crypto-local show dir usb: disk Description Display the list of directories in the specified disk and the filesystem path. Syntax Parameter Description Name of the USB device. If you do not know the name of the USB disk, issue the command show usb-storage to view a list of device names. The USB file system path. Example The command below displays the USB directory list for a device named SEGATE-HJ1235_p1.
show dot1x ap-table show dot1x ap-table Description Shows the 802.1X AP table. Syntax No parameters. Example Issue this command to display details from the AP table. AP Table -------MAC IP Essid Type Forwarding-Mode Profile Acl ------------------------------00:1a:1e:87:ff:c0 10.3.9.242 AP FORWARD_TUNNEL_80211 default/ 1 00:1a:1e:87:ff:d0 10.3.9.242 sw-pn-nokia AP FORWARD_TUNNEL_80211 default/default 1 00:1a:1e:82:ab:a0 10.3.9.220 AP FORWARD_TUNNEL_80211 default/ 1 00:1a:1e:82:ab:b0 10.3.9.
Command History This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show dot1x ap-table aes show dot1x ap-table aes Description Shows the AES keys of all APs. Syntax No parameters. Example Issue this command to display AES keys of all APs.
show dot1x ap-table dynamic-wep show dot1x ap-table dynamic-wep Description Shows the dynamic WEP keys of all APs. Syntax No parameters. Example Issue this command to display dynamic keys of all APs.
show dot1x ap-table static-wep show dot1x ap-table static-wep Description Shows the static WEP keys of all APs. Syntax No parameters. Example Issue this command to display the static WEP keys of all APs.
show dot1x ap-table tkip show dot1x ap-table tkip Description Displays a table of TKIP keys on the controller. Syntax No parameters. Example Issue this command to display all TKIP keys.
show dot1x counters show dot1x counters Description Displays a table of dot1x counters. Example Issue this command to display all 802.1X counter information. 802.1x Counters AP Sync Request...................4 Sync Response..................3 Up.............................4 Down...........................1 Resps..........................4 Acl............................53 Station Sync Request...................9 Sync Response..................9 Up.............................2321 Down....................
Parameter Description AP l l l l l l Sync Request Sync Response Up Down Resps Acl Station Sync Request l Sync Response l Up l Down l Unknown l EAP RX Pkts l Dropped Pkts l TX Pkts l l l l l l l l l l l l l l l WPA Message-1 l Message-2 l Message-3 l Message-4 l Group Message-1 l Group Message-2 l Rx Failed l IE Mismatches l Key Exchange Failures l WPA2 Message-1 l Message-2 l Message-3 l Message-4 l Rx Failed l IE Mismatches l Key Exchange Failures l l l l l l l l l l l l l l l l l Number of sy
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers 972 | show dot1x counters Dell PowerConnect W-Series ArubaOS 6.
show dot1x supplicant-info show dot1x supplicant-info Description Shows the details about a specific supplicant. Example Issue this command to display the details about a supplicant.
Parameter Description MAC Address Supplicant MAC address. AP MAC Address AP MAC address. Status Supplicant’s status. Unicast Cipher Supplicant’s unicast cipher. Multicast Cipher Supplicant’s multicast cipher. EAP-Type Supplicant’s EAP-Type. EAPOL Starts Number of EAPOL starts. EAP ID Requests Number of EAP ID requests. EAP ID Responses Number of EAP ID responses. EAPOL Logoffs from station Number of EAPOL logoffs from the station.
Parameter Description Length of the last EAP request The length of the last EAP request. ID of the last EAP response The ID of the last EAP response. Length of the last EAP response The length of the last EAP response. ID of the last radius request The ID of the last radius request. Length of the last radius request The length of the last radius request. ID of the last radius response The ID of the last radius response.
show dot1x supplicant-info list-all show dot1x supplicant-info list all Description Shows all 802.1X supplicants. Syntax No parameters. Example Issue this command to display all 802.1X supplicants as well as additional relevant information. 802.
show dot1x supplicant-info pmkid show dot1x supplicant-info pmkid Description Shows the PMKIDs of the various stations on the controller. Syntax No parameters. Example Issue this command to display the PMKIDs of the various stations on the controller.
show dot1x supplicant-info statistics show dot1x supplicant-info statistics Description Shows the 802.1X statistics of the users. Syntax No parameters. Example Issue this command to display the 802.1X statistics of the users. 802.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show esi groups show esi groups [{group-name |{ping-name }] Description Show ESI group information. Syntax Parameter Description group-name View the facility used when logging messages into the remote syslog server. ping-name Enter the name of a set of ping values to how the names of ESI groups using that set of ping attributes. Define a set of ESI ping values using the command esi ping. server Show the IP address of a remote logging server.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master or local controllers. Dell PowerConnect W-Series ArubaOS 6.
show esi parser show esi parser domains|rules|stats Description Show ESI parser information. Syntax Parameter Description domains Show ESI parser domain information. rules Show ESI parser rule information. stats Show ESI parser rule stats. Usage Guidelines The ESI parser is a generic syslog parser on the controller that accepts syslog messages from external third-party appliances such as anti-virus gateways, content filters, and intrusion detection systems.
Command History This command was introduced in ArubaOS 3.1. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master or local controllers. Dell PowerConnect W-Series ArubaOS 6.
show esi ping show esi ping [ping-name ] Description Show settings for ESI ping health check attributes. Syntax Parameter Description ping-name Include the optional ping-name parameters to display settings for one specified set of ping settings. Example This example below shows that the controller has three defined sets of ping attributes.
Command History This command was introduced in ArubaOS 2.5. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master or local controllers. Dell PowerConnect W-Series ArubaOS 6.
show esi servers show esi servers [{group-name |{server-name }] Description Show configuration information for ESI servers. Syntax Parameter Description group-name Include this optional parameter to display information for all ESI servers assigned to a specific ESI group. server-name Specify an ESI server name to view configuration information for just that server.
Column Description Name Name of the ESI server. Trusted IP Displays the server IP address on the trusted network. As an option, you can also enable a health check on the specified address Untrusted IP Displays the server IP address on the untrusted network. As an option, you can also enable a health check on the specified address Trusted s/p Shows the slot and port connected to the trusted side of the ESI server; slot/port format.
show fast-roaming-r1-efficiency show fast-roaming-r1-efficiency Description This command displays the hit/miss rate of r1 keys cached on an AP before a Fast BSS Transition roaming. Syntax Parameter Description MAC address of the client. Usage Guidelines Use this command to view the hit/miss rate of r1 keys cached on an AP before a Fast BSS Transition roaming. This counter helps to verify if enough r1 keys are pushed to the neighboring APs.
show faults show fault [history] Description Display a list of faults, which are any problematic conditions of the ArubaOS software or hardware. Syntax Parameter Description history Include this parameter to display a history of faults cleared by the controller or the operator. Usage Guidelines A controller can maintain a list of up to 100 faults. Once 100 faults have been logged, any faults arising after that are dropped. The controller maintains a history of the last 100 faults that have cleared.
2009-03-02 18:13:09 111 Authentication Server corp1-supersvr 2009-03-02 18:13:09 112 All authentication servers in server back in service. 2009-03-02 18:13:09 113 Authentication Server corp1-supersvr 2009-03-02 18:13:09 114 All authentication servers in server back in service. 2009-03-02 18:13:09 115 Authentication Server corp1-supersvr Total number of entries in the queue :23 is down. group sg-auth2 are brought is down. group sg-auth2 are brought is down.
show firewall show firewall Description Display a list of global firewall policies. Syntax No parameters Example This example below shows all firewall policies currently configured on the controller.
AMSDU Session-tunnel FIB Prevent DHCP exhaustion Session mirror IPSEC Enabled Enabled Disabled Disabled The output of this command includes the following information: Parameter Description Enforce TCP handshake before allowing data If enabled, this feature prevents data from passing between two clients until the three-way TCP handshake has been performed. This option should be disabled when you have mobile clients on the network as enabling this option will cause mobility to fail.
Parameter Description GRE call id processing If active the controller creates a unique state for each PPTP tunnel. Session Idle Timeout Shows if a session idle timeout interval has been defined. Broadcast-filter ARP If enabled, this feature reduces the number of broadcast packets sent to VoIP clients, thereby improving the battery life of voice handsets.
Parameter Description Stateful VOCERA Processing VOCERA processing is disabled by default. Stateful UA Processing UA processing is disabled by default. Enforce bw contracts for broadcast traffic If enabled, bw contracts are applied ot local subnet broadcast traffic. Multicast automatic shaping If enabled, enables multicast optimization and provides excellent streaming quality regardless of the amount of VLANs or IP IGMP groups that are used.
Dell PowerConnect W-Series ArubaOS 6.
show firewall-cp show firewall-cp [internal] Description Displays the captive-portal (CP) firewall policies on the controller. Syntax No Parameters Example The output of this command shows the CP firewall policies. (host) #show firewall-cp CP firewall policies -------------------IP Version Source IP contract ---------- -----------ipv4 any ipv4 10.10.10.
show firewall-visibility show firewall-visibility {debug|status} Description Displays the policy enforcement firewall visibility process state and status information. Syntax Parameter Description debug Displays process state information for debugging firewall visibility. status Displays the status of firewall visibility as enabled or disabled. Example The output of this command shows the status of firewall visibility.
show gap-debug show gap-debug Description Displays the troubleshooting information for the global AP database. Usage Guidelines Use this command to identify any issues with the global AP database. This command displays the troubleshooting information for the global AP database.
Column Description LMS Seq The sequence number used by the LMS to sync up with the master controller.This tracks the number of times the LMS has communicated with the master controller. Activity The time at which the last activity happened on the LMS. Status Indicates if the status of the LMS is up or down. Msg in Prog Indicates if an active communication is happening between the LMS and the master controller. It can be Yes or No. If it is yes, then the Msg Len and Attempt fields are set.
show gateway health-check show gateway health-check Description Display the current status of the gateway health-check feature. Syntax No parameters. Usage Guidelines The gateway health check feature can only be enabled by Dell Technical Support. Example This example below shows that the gateway health-check feature has not been enabled on the controller.
show global-user-table count show global-user-table show global-user-table count [current-switch] [authentication-method] {dot1x | mac | stateful-dot1x | vpn | web} [role] [bssid] [essid] [ap-name] [phy-type] {a | b | g} [age] Description This command displays a count of global user based on the specified criteria.
Command Information Platforms Licensing Command Mode All platforms Master controller only Base operating system Enable or config mode on master controllers 1002 | show global-user-table count Dell PowerConnect W-Series ArubaOS 6.
show-global-user-table list show global-user-table list current-switch] authentication-method] {dot1x | mac | stateful-dot1x | vpn | web} role bssid devtype essid ap-name phy-type a|b|g age not or rows sort {sort_by_ap-name | sort_by_authtype | sort_by_bssid | sort_by_current-switch | sort_ by_essid | sort_by_ip | sort_by_mac | sort_by_name | sort_by_phy-type | sort_by_role}{asc | desc} start Des
Parameter Description or Show users that satisfy any of the given criteria rows Number of rows to show sort Sort the list based on a specified criteria, in ascending or descending order start Show user table starting from a specific row Example Issue this command to display a global user count. The output of this command is split into two tables in this document, however it appears in one table in the CLI. (host) (config) Global Users ----IP name ------------192.168.160.1 AP63 10.100.105.
Parameter Description Auth Authentication method used by user. VPN Link IP address of the client VPN gateway. AP name AP name. Roaming Roaming status. Essid User’s extended service set identifier (ESSID). Bssid User’s basic service set identifier (BSSID). Phy User Phy type (a, b or g). Profile Profile name Forward mode Forwarding mode assigned to the user (tunnel, split-tunnel, decrypt-tunnel or bridge). Type Type of client device, if identified.
show guest-access-email show guest-access-email Description This command shows a guest access email profile configuration. The guest access email process sends email to either the guest or the sponsor whenever a guest user account is created or when the Guest Provisioning user manually sends email from the Guest Provisioning page. Syntax No parameters. Usage Guidelines Issue this command to show the current guest access email profile parameters.
show hostname show hostname Description Show the hostname of the controller. Syntax No parameters. Example The output of this command shows the hostname configured for the controller. A hostname can contain alphanumeric characters, spaces, punctuation, and symbol characters. (host) # show hostname hostname is SampleHost Related Commands Configure the controller’s hostname using the command hostname. Command History This command was available in ArubaOS 1.0.
show iap table show iap table [branch-key ] Description Shows the details of the branches connected to the controller. Syntax Parameter Description branch-key Key for the branch, which is unique to each branch.
208c416e01e1cfaf0fdc11190349ad43334879f39ba9e191817 8 DOWN 0.0.0.0 d8:c7:c8:c0:01:6c The output of this command includes the following parameters: Parameter Description Branch Key Key for the branch, which is unique to each branch. Index Index assigned to the branch. Status Current status of the branch (UP/DOWN). Inner IP Internal VPN IP of the branch. MAC Address MAC address of the Virtual Controller of the branch. Command History Introduced in Dell PowerConnect W-Series ArubaOS 6.
show ids ap-classification-rule id-classification-rule Description Display the IDS AP classification rule profile. Syntax Parameter Description Enter the AP classification rule profile name. Usage Guidelines Issue this command without the option to view the AP Classification Rule Profile list. Add the rule name option to display values for the rule.
Command Information Platforms Licensing Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ids ap-rule-matching Description Display the IDS active AP rules profile. Example (host) (config) #show ids ap-rule-matching IDS Active AP Rules Profile --------------------------Parameter Value ------------AP Rule name snr0 AP Rule name rule1 AP Rule name rule2 AP Rule name exclude-ssid-rule In the above example, the rule names in the Value column have been activated by the ids ap-rule-matching command. Command History Release Modification ArubaOS 6.
show ids dos-profile show ids dos-profile Description Show an IDS Denial Of Service (DoS) Profile Syntax Parameter Description Name of an IDS DoS profile. Usage Guidelines Issue this command without the parameter to display an IDS DoS profile. Examples The example below shows that the controller has four configured DoS profiles.
Detect EAP Rate Anomaly EAP Rate Threshold EAP Rate Time Interval EAP Rate Quiet Time Detect CTS Rate Anomaly CTS Rate Threshold CTS Rate Time Interval CTS Rate Quiet Time Detect RTS Rate Anomaly RTS Rate Threshold RTS Rate Time Interval RTS Rate Quiet Time Detect Rate Anomalies Rate Thresholds for Assoc Frames Rate Thresholds for Disassoc Frames Rate Thresholds for Deauth Frames ...
show ids general-profile show ids general-profile Description Display an IDS General profile. Syntax Parameter Description Name of an IDS General profile. Usage Guidelines Issue this command without the parameter to display the IDS General profile list. Include a profile name to display detailed configuration information for that profile. Examples The example below shows that the controller has four configured General profiles.
Debug Wireless Containment Wired Containment Wired Containment of AP's Adj MACs Mobility Manager RTLS IDS Event Generation on AP Send Adhoc Info to Controller false false false false none true The output of this command includes the following parameters: Parameter Description Stats Update Interval Interval, in seconds, for the AP to update the controller with statistics. This setting takes effect only if the Dell Mobility Manager is configured.
Related Commands Configure IDS General profiles using the command ids general-profile. Command History Version Description ArubaOS 3.0 Command Introduced ArubaOS 5.0 Mobility Manager RTLS parameter introduced ArubaOS 6.0 Refreshed show output Command Information Platforms Licensing Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ids impersonation-profile show ids impersonation-profile Description Display an IDS Impersonation Profile. Syntax Parameter Description Name of an IDS Impersonation profile. Usage Guidelines Issue this command without the parameter to display the IDS Impersonation profile list. Include a profile name to display detailed configuration information for that profile.
Parameter Description Detect AP Impersonation Shows of the profile has enabled or disabled detection of AP impersonation. Protect from AP Impersonation Shows if AP impersonation is enabled or disabled for the profile. When AP impersonation is detected, both the legitimate and impersonating AP are disabled using a denial of service attack. Beacon Diff Threshold Percentage increase in beacon rates that triggers an AP impersonation event.
show ids management-profile Description Displays the management event correlation for IDS event traps and sylogs (logs). Example The following example displays the current management status.
show ids profile show ids profile Description Display all ids profiles or display a specific profile name. Syntax Parameter Description Name of an IDS profile. Usage Guidelines Issue this command without the parameter to display the list of IDS profiles. Include a profile name to display detailed information for that profile. Examples The example below shows that the controller has seven configured IDS Profiles.
Parameter Description IDS General profile Name of a IDS General profile to be applied to an AP or AP group. IDS Signature Matching profile Name of a IDS Signature Matching profile to be applied to an AP or AP group. IDS DOS profile Name of a IDS Denial of Service profile to be applied to an AP or AP group. IDS Impersonation profile Name of a IDS Impersonation profile to be applied to an AP or AP group.
show ids rate-thresholds-profile show ids rate-thresholds-profile Description Show an IDS Rate Thresholds profile. Syntax Parameter Description Name of an IDS Rate Threshold profile. Usage Guidelines Issue this command without the parameter to display the IDS Rate Threshold profile list. Include a profile name to display detailed configuration information for that profile.
Parameter Description Channel Increase Time Time, in seconds, in which the threshold must be exceeded in order to trigger an alarm. Channel Quiet Time The time that must elapse after a channel rate alarm before another identical alarm may be triggered. This option prevents excessive messages in the log file. Channel Threshold Number of a specific type of frame that must be exceeded within a specific interval in an entire channel to trigger an alarm.
show ids signature-matching-profile show ids signature-matching-profile Description Show an IDS Signature Matching profile. Syntax Parameter Description Name of an IDS Signature Matching profile. Usage Guidelines Issue this command without the parameter to display the entire IDS Signature Matching profile list. Include a profile name to display detailed configuration information for that profile.
Related Commands Configure the Signature Matching profile using the command ids signature-matching-profile. Command History Version Description ArubaOS 3.0 Command Introduced ArubaOS 6.0 Refreshed show output Command Information Platforms Licensing Command Mode Available on all platforms Requires the RFprotect license Config mode on master controllers 1026 | show ids signature-matching-profile Dell PowerConnect W-Series ArubaOS 6.
show ids signature-profile show ids signature-profile Description Show an IDS signature profile. Syntax Parameter Description Name of an IDS Signature profile. Usage Guidelines Issue this command without the parameter to display the entire IDS Signature profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
Parameter Description Frame Type Type of 802.11 frame. For each type of frame, further parameters may be included to filter and detect only the required frames. l assoc: Association frame type. l auth: Authentication frame type. l beacon: Beacon frame type. l control: All control frames. l data: All data frames. l deauth: Deauthentication frame type. l disassoc: Disassociation frame type. l mgmt: Management frame type. l probe-request: Probe request frame type.
show ids unauthorized-device-profile show ids unauthorized-device-profile Description Show an IDS Unauthorized Device Profile. Syntax Parameter Description Name of an IDS Unauthorized Device profile Usage Guidelines Issue this command without the parameter to display the IDS Unauthorized Device profile list. Include a profile name to display detailed configuration information for that profile.
Overlay Rogue AP Classification OUI-based Rogue AP Classification Propagated Wired MAC based Rogue AP Classification Valid Wired MACs Allow Well Known MAC Rogue Containment Suspected Rogue Containment Suspected Rogue Containment Confidence Level Protect Valid Stations Detect Station Association To Rogue AP Detect Bad WEP Detect Misconfigured AP Protect Misconfigured AP Detect Valid SSID Misuse Protect SSID Privacy Require WPA Detect Unencrypted Valid Clients Unencrypted Valid Client Detection Quiet Time Val
Parameter Description Rogue AP Classification Shows if the profile has enabled or disabled rogue AP classification. Overlay Rogue AP Classification Shows if the controller allows APs that are plugged into the wired side of the network to be classified as “suspected rogue” instead of “rogue”. Valid Wired MACs List of valid and protected SSIDs. Allow Well Known MAC Shows if the profile allows devices with known MAC addresses to classify rogue APs.
Parameter Description Protect 40MHz 802.11n High Throughput Devices Shows if the profile enables or disables protection of high-throughput (802.11n) devices operating in 40 MHz mode. Detect Active 802.11n Greenfield Mode Shows if the profile enables or disables detection of high-throughput devices advertising greenfield preamble capability. Related Commands Configure the Unauthorized Device profile using the command ids unauthorized-device-profile. Command History Version Description ArubaOS 3.
Statistics update Persistent Neighbor APs Persistent Valid STAs AP learning Propagate Wired Macs Collect Stats for Monitored APs and Clients Learn System Wired Macs true true false false true false false Column Description AP poll interval Interval, in milliseconds, for communication between the controller and AMs. The controller contacts the AM at this interval to download AP to station associations, update policy configuration changes, and download AP and station statistics.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 1034 | show ids wms-general-profile Dell PowerConnect W-Series ArubaOS 6.
show image version Description Display the current system image version on both partition 0 and 1. Syntax No parameters. Example The following example shows that the controller is running ArubaOS 3.4 and booting off partition 0:0. (host) #show image version ---------------------------------Partition : 0:0 (/dev/hda1) **Default boot** Software Version : AOS-W 3.3.2.
show interface cellular access-group show interface cellular access-group Description List the Access groups configured on the cellular interface. Example (host) (config-cell)#show interface cellular access-group Cell Interface: session access list 3 is configured Command History Release Modification ArubaOS 5.
show interface counters show interface counters Description Displays a table of L2 interfaces counters. Syntax No parameters Example The example below shows the output of show interface counters on an W-650controller.
Command History This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers 1038 | show interface counters Dell PowerConnect W-Series ArubaOS 6.
show interface fastethernet show interface fastethernet Description Displays information about a specified fast Ethernet port. Syntax Parameter Description access-group Displays access groups configured on this interface. counters Displays L2 interface counters for the specified interface. switchport Displays L2 interface information. untrusted-vlan Displays port member vlan untrusted status. xsec Displays xsec configuration.
Parameter Description Encapsulation Encapsulation method assigned to this port. loopback... Displays whether or not loopback is set. Configured Configured transfer operation and speed. Negotiated Negotiated transfer operation and speed. MTU bytes MTU size of the specified port in bytes. BW is... Bandwidth of the link. Last clearing of “show interface counters” Time since “show interface counters” was cleared. Below the time, all current counters related to the specified port are listed.
Parameter Description InOctets Number of octets received through the port. InUcastPkts Number of unicast packets received through the port. InMcastPkts Number of multicast packets received through the port. InBcastPkts Number of broadcast packets received through the port. OutOctets Number of octets sent through the port. OutUcastPkts Number of unicast packets sent through the port. OutMcastPkts Number of multicast packets sent through the port.
Parameter Description Name Name of the specified port. Untrusted Vlan(s) List of untrusted VLANs. #show interface fastethernet 1/1 xsec xsec vlan 7 is ACTIVE The output of this command includes the following parameters: Parameter Description xsec vlan 7 is ACTIVE This states that xsec is active on the specified port as well as the associated VLAN. Command History This command was introduced in ArubaOS 3.0.
show interface gigabitethernet show interface gigabitethernet Description Displays information about a specified Gigabit Ethernet port. Syntax Parameter Description counters Displays L2 interface counters for the specified interface. switchport Displays L2 interface information. untrusted-vlan Displays port member vlan untrusted status. xsec Displays xsec configuration. Examples The example below shows the output of show interface gigabitethernet 1/0.
Parameter Description Encapsulation Encapsulation method assigned to this port. loopback... Displays whether or not loopback is set. Configured Configured transfer operation and speed. Jumpo support... Jumbo frame support is enabled. Negotiated Negotiated transfer operation and speed. MTU bytes MTU size of the specified port in bytes. BW is... Bandwidth of the link. Last clearing of “show interface counters” Time since “show interface counters” was cleared. link status last changed...
Name: GE1/0 Switchport: Enabled Administrative mode: static access Operational mode: static access Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Access Mode VLAN: 62 (VLAN0062) Trunking Native Mode VLAN: 1 (Default) Trunking Vlans Enabled: NONE Trunking Vlans Active: NONE The output of this command includes the following parameters: Parameter Description Name Port name. Switchport Whether or not switchport is enabled.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers 1046 | show interface gigabitethernet Dell PowerConnect W-Series ArubaOS 6.
show interface loopback show interface loopback Description Displays information about the loopback IP interface. Syntax No parameters Example The example below shows the output of show interface loopback on a W-650controller. #show interface loopback loopback interface is up line protocol is up Hardware is Ethernet, address is 00:0B:86:51:14:D0 Internet address is 10.3.49.100 255.255.255.255 The output of this command includes the following parameters: Parameter Description loopback interface is...
show interface port-channel show interface port-channel Description Displays information about a specified port-channel interface. Syntax Parameter Description access-group Displays access groups configured on this interface. counters Displays L2 interface counters for the specified interface. untrusted-vlan Displays port member vlan untrusted status. xsec Displays xsec configuration. Example The example below shows the output of show interface port-channel 0 on a controller.
Parameter Description is indicated as shown in the display output above. If the LAG is created by LACP, you can not statically add or delete any ports under that port channel. All other commands are allowed. If LACP is not shown, then the LAG is created by static configuration. Spanning Tree is... Spanning tree status on the specified port-channel. VLAN membership Number of VLANs the specified port-channel is associated with. Switchport priority Switchport priority of the specified port-channel.
Parameter Description InMcastPkts Number of multicast packets received through the port. InBcastPkts Number of broadcast packets received through the port. OutOctets Number of octets sent through the port. OutUcastPkts Number of unicast packets sent through the port. OutMcastPkts Number of multicast packets sent through the port. OutBcastPkts Number of broadcast packets sent through the port.
show interface-profile voip-profile show interface-profile voip-profile Description This command displays the specified VoIP profile configuration information. Syntax Parameter Description Name of the VoIP profile. Examples The following example shows configuration details for the VoIP profile: (host) #show interface-profile voip-profile profile1 VOIP profile "profile1" ----------------------Parameter Value --------- ----VOIP VLAN 1 DSCP 0 802.
show interface tunnel show interface tunnel Description Displays information about tunnel interfaces. Syntax No parameters Example The example below shows the output of show interface tunnel. #show interface tunnel 2000 Tunnel 2000 is up line protocol is up Description: Tunnel Interface Internet address is 3.3.3.1 255.255.255.0 Source 192.168.203.1 Destination 192.168.202.
Command History This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show interface vlan show interface vlan Description Displays information about a specified VLAN interface. Syntax No parameters Example The example below shows the output of show interface vlan 1 on a W-650 controller. #show interface vlan 1 VLAN1 is up line protocol is down Hardware is CPU Interface, Interface address is 00:0B:86:61:82:40 (bia 00:0B:86:61:82:40) Description: 802.1Q VLAN Internet address is 10.3.49.50 255.255.255.
Parameter Description loopback... Loopback status MTU MTU size of the specified port in bytes Last clearing of “show interface counters” Time since “show interface counters” was cleared link status last changed Time since link status last changed Proxy ARP is... Status of proxy ARP on the specified interface DHCP Option-82 is... Status of DHCP Option 82. If the MAC address and ESSID are configured on this interface Command History This command was introduced in ArubaOS 3.0.
show inventory show inventory Description Displays hardware inventory of the controller. Syntax No parameters. Example Issue this command to display the hardware component inventory of the controller. The output of this command will vary, depending upon controller type.
Fan Tray Assembly# Fan Tray Serial# Back Plane Assembly# Back Plane Serial# Power Supply type Power Supply 0 Power Supply 1 Power Supply 2 M3mk1 Card Temperatures AMP Card Temperatures M3mk1 Card Voltages : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 2000007C (Rev:01.00) C00013879 (Date:12/18/04) 2000006B (Rev:01.
Parameter Description Line Card FPGA Name/type of FPGA associated with the specified line card slot Line Card Switch Chip Name/type of switch card associated with the specified line card slot Line Card Mez Card States whether or not a mezzanine card is present in the specified slot Line Card SPOE States whether or not a SPOE card is present in the specified slot Line Card Sup Card 0 States whether or not a supervisor card 0 is
Parameter Description M3mk1 Card Voltages This parameter displays to columns of voltages for many components displayed previously by this command. The voltage displayed in the right column should match the corresponding value in the left column, generally with +/- 5%. Command History This command was introduced in ArubaOS 1.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show iostat show iostat Description Displays IO statistics information. This command reports Central Processing Unit (CPU) statistics and input/output statistics for devices and partitions. Syntax No parameters. Example Issue this command to display the IO statistics of the controller.
Command History This command was introduced in ArubaOS 1.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show ip access-group show ip access-group Description Display access control lists (ACLs) configured for each port on the controller. Syntax No parameters. Examples The example below shows part of the output of this command. If a port does not have a defined session ACL, the Port-Vlan Session ACL table will be blank.
Command Information Platforms Licensing Command Mode All platforms Base operating system Available in Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show ip access-list show ip access-list {brief|} Description Display a table of all configured access control lists (ACLs), or show details for a specific ACL. Syntax Parameter Description brief Display a table of information for all ACLs. Specify the name of a single ACL to display detailed information on that ACL. Examples The example below shows general information for all ACLs in the Access List table.
Parameter Description l Extended Use Count Number of rules defined in the ACL. Roles Names of user roles associated with the ACL. Include the name of a specific ACL to show detailed configuration information for that ACL. The output in the example below has been divided into two sections to better fit int this document. The output in the command-line interface will appear in a single, long table.
Parameter Description l user: The IP address of the user. l localip: The set of all local IP addresses on the system, on which the ACL is applied. Service Network service, which can be one of the following: l An IP protocol number (0-255). l The name of a network service (use the show netservice command to see configured services). l any: Matches any traffic. l tcp: A TCP port number (0-65535). l udp: A UDP port number (0-65535).
Command Information Platforms Licensing Command Mode All platforms Base operating system Available in Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show ip cp-redirect-address show ip cp-redirect-address Description Show the captive portal automatic redirect IP address. Syntax No parameters. Examples The example below shows the IP address to which captive portal users are automatically directed. (host) # show ip cp-redirect-address Captive Portal redirect Address... 10.3.63.11 Related Commands Command Description ip cp-redirect-address This command configures a redirect address for captive portal. Command History Introduced in ArubaOS 3.0.
show ip dhcp show ip dhcp {binding|database|statistics} Description Show DHCP Server Settings. Syntax Parameter Description binding Show DHCP server bindings. database Show DHCP server settings. statistics Show DHCP pool statistics. Examples The example below shows DHCP statistics for two configured networks. (host) # show ip dhcp statistics Network Name Free leases Active leases Expired leases Abandoned leases 172.19.42.
Command History Introduced in ArubaOS 3.0. 1070 | show ip dhcp Dell PowerConnect W-Series ArubaOS 6.
show ip domain-name show ip domain-name Description Show the full domain name and server. Syntax No parameters. Examples The example below shows that the IP domain lookup feature is enabled, but that no DNS server has been configured on the controller. (host) #show ip domain-name IP domain lookup: IP Host.Domain name: Enabled MyCompany2400. No DNS server configured Related Commands Command Description ip domain lookup This command enables Domain Name System (DNS) hostname to address translation.
show ip igmp show ip igmp config|counters|{group maddr }|{interface [vlan ]}|{proxy-group vlan }|{proxy-mobility-group maddr }|proxy-mobiity-stats|proxy-stats Description Display Internet Group Management Protocol (IGMP) timers and counters.
1 10.6.2.252 255.255.255.0 00:0b:86:01:99:00 disabled disabled 66 10.6.6.252 255.255.255.0 00:0b:86:01:99:00 disabled disabled 63 10.6.3.252 255.255.255.0 00:0b:86:01:99:00 disabled disabled 10.6.2.252 disabled 10.6.6.252 disabled 10.6.3.252 disabled CP CP CP The output of this command includes the following parameters: Parameter Description VLAN A VLAN ID number. Addr IP address of a VLAN router. Netmask Subnet mask for the IP address. MAC Address MAC destination address.
Parameter Description controller sends a host-query message and when it receives a response. This must be less than the query-interval. startup-query-count Number of queries that the controller sends out on startup, separated by startup-query-interval. The default setting is the value of the robustnessvariable parameter. startup-query-interval Interval, in seconds, at which the controller sends general queries on startup. The default value of this parameter is 1/4 of the query-interval.
show ip mobile show ip mobile active-domains binding [||brief] domain [] global hat host [||brief] packet-trace [] remote | trace ||{force |} traffic dropped|foreign-agent|home-agent|proxy|proxy-dhcp trail | tunnel visitor [||brief] Description Display statistics and configuration information for the mobile protocol.
Parameter Description macaddr> ciated with the specified client IP address or MAC address. The output of this command shows the home agent (HA) and foreign agent (FA) for a mobile client, as well as the client's roaming status. trace Show if the Mobile IP feature will poll remote controllers for mobility status of station Host IP address Host MAC address force | Show if the Mobile IP feature will poll remote controllers for mobility status of station.
Domain name default Home Agent Table, 0 subnet(s) Domain name newdomain Home Agent Table, 2 subnet(s) subnet mask --------------- --------------10.2.124.76 255.255.255.255 172.21.5.50 255.255.255.255 VlanId -----1 1 Home Agent --------------10.4.62.2 10.4.62.2 Description ----------------------Corporate mobility entry Reserved entries The output of this command includes the following parameters: Parameter Description subnet Subnet configured for the IP mobility service.
Command Description ip mobile foreign-agent This command configures the foreign agent for IP mobility. ip mobile home-agent This command configures the home agent for IP mobility. ip mobile proxy This command configures the proxy mobile IP module in a mobility-enabled controller. ip mobile revocation This command configures the frequency at which registration revocation messages are sent. ip mobile trail (deprecated) This command configures the capture of association trail for all devices.
show ip nat pool show ip nat pool Description Display pools of IP addresses for network address translation (NAT. Syntax No parameters Examples The example below shows the current NAT pool configuration on the controller. (host) # show ip nat pools NAT Pools --------Name Start IP End IP ---- -------- --------2net 2.1.1.1 DNAT IP ------2.1.1.125 The output of this command includes the following parameters: Parameter Description Name Name of the NAT pool.
show ip ospf show ip ospf [database]|[debug route]|[interface tunnel|vlan ]|[neighbor]| [redistribute] |[subnet] Description Display statistics and configuration information for the Open Shortest Path First (OSPF) routing protocol. Syntax Parameter Description database Show database information for the OSPF protocol. debug route Show debugging information for OSPF routes. interface tunnel|vlan Display the status of OSPF on an individual interface by specifying a tunnel or VLAN ID number.
(host) # show ip ospf interface vlan 10 Vlan 3 is up, line protocol is up Internet Address 3.3.3.1, Mask 255.255.255.0, Area 10.1.1.1 Router ID 10.4.131.227, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State WAIT, Priority 1 Designated Router id 0.0.0.0, Interface Address 3.3.3.1 Backup designated Router id 0.0.0.0, Interface Address 3.3.3.
Parameter Description BadVer Number of received packets that have bad OSPF version number. BadNet Number of received packets that belong to different network than the local interface. BadArea Number of received packets that belong to different area than the local interface. BadDstAdr Number of received packets that have wrong destination address. BadAuType Number of received packets that have different authentication type than the local interface.
show ip pppoe-info show ip pppoe-info Description Display configuration settings for Point-to-Point Protocol over Ethernet (PPPoE). Syntax No parameters. Examples The example below shows the current PPPoE configuration. (host) #show ip pppoe-info PPPoE PPPoE PPPoE PPPoE username: rudolph123 password: service name: ppp2056 VLAN: 22 The output of this command includes the following parameters: Parameter Description PPPoE username PAP username configured on the PPPoE access concentrator.
show ip radius show ip radius nas-ip|source-interface Description Display global parameters for configured RADIUS servers. Syntax Command Description nas-ip Show the Network Access Server (NAS) IP address attribute sent in outgoing RADIUS requests source-interface Show the source address of outgoing RADIUS requests Examples The example below shows the RADIUS client NAS IP address. (host) #show ip radius nas-ip RADIUS client NAS IP address = 10.168.254.
show ip route show ip route [static] Description View the Dellcontroller routing table. Syntax Command Description static Include this optional parameter to display only static routes. Usage Guidelines This command displays static routes configured on the controller via the ip route command. Use the ip defaultgateway command to set the default gateway to the IP address of the interface on the upstream router or switch to which you connect the controller.
Command Information Platforms Licensing Command Mode All platforms Base operating system Available in Config or Enable mode on master or local controllers 1086 | show ip route Dell PowerConnect W-Series ArubaOS 6.
show ipc statistics app-ap show ipc statistics app-ap {am|sapd|sta} {ap-name }|{bssid }|{ip-addr } Description Display Inter Process Communication (IPC) statistics for a specific AP or BSSID. Syntax Parameter Description am Show IPC statistics for an air monitor. sapd Show IPC statistics for the SAPD process. stm Show IPC statistics for station management communications. ap-name Show IPC statistics for an AP with a specific name.
Static Buffer Size 1444 The output of this command includes the following data columns: Parameter Description Tx Msg Number of transmitted messages. Tx Blk Number of blocking messages transmitted. Tx Ret Number of transmitted messages that were returned. Tx Fail Number of failure messages that were transmitted. Rx Ack Number of received acknowledgements. Rx Msg Number of received messages. Rx Drop Number of received messages that were dropped.
show ipc statistics app-id show ipc statistics app-id Description Display Inter Process Communication (IPC) statistics for a specific AP or BSSID. Syntax Parameter Description Application ID number. This number must be obtained from Dell support. Usage Guidelines Issue this command at the request of Dell support to troubleshoot application errors. Command History This command was available in ArubaOS 1.0.
show ipc statistics app-name show ipc statistics app-name Description Display Inter Process Communication (IPC) statistics for a specific application.
Mobile IP 0 Syslog Manager 0 WMS 19 PIM 1 Configuration Man 12 License Manager 0 Datapath 0 Nanny 0 1120303 0 0 0 1076236 1 0 0 2 2 0 0 2 0 0 0 0 0 0 0 0 19 0 0 2 1 0 0 2 1 1 0 2 1 0 0 2 13 0 0 1 1 0 0 1 0 0 0 3281237 66425 1 0 1907552 1382289 104 6 1 0 0 0 0 0 0 0 Tx Msg Tx Blk Tx Ret Tx Fail Rx Ack Rx Msg Rx Drop Rx Err 59 0 0 0 59 0 0 0 54983 0 0 0 0 1527435 0 0 Remote Statistics To application Tx Ack WMS 0 STM 0 All
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master or local controllers 1092 | show ipc statistics app-name Dell PowerConnect W-Series ArubaOS 6.
show ipv6 access-list (deprecated) show ipv6 access-list [ | brief] Description Displays IPv6 access list configured in the controller. Syntax Parameter Description string To view details of a specific ACL. brief To view a summary of all IPv6 ACLs. Command History Version Modification ArubaOS 3.3 Command introduced ArubaOS 6.1 Command deprecated. This command has been replaced by the show ip access-list command. Dell PowerConnect W-Series ArubaOS 6.
show ipv6 datapath session counters (deprecated) show ipv6 datapath session counters Description Displays datapath session table statistics. Command History Version Modification ArubaOS 1.0 Command introduced ArubaOS 6.1 Command deprecated. This command has been replaced by the show datapath session ipv6 counters command. 1094 | show ipv6 datapath session counters (deprecated) Dell PowerConnect W-Series ArubaOS 6.
show ipv6 datapath session table (deprecated) show ipv6 datapath session table Description Displays current IPv6 session on the controller. Syntax Parameter Description Optional parameter. If specified, displays IPv6 datapath session table for that IP address. By default, displays session table for all IPv6 addresses. Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated.
show ipv6 datapath user counters (deprecated) show ipv6 datapath user counters Description Displays datapath user table statistics. Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated. This command has been replaced by the show datapath user ipv6 command. 1096 | show ipv6 datapath user counters (deprecated) Dell PowerConnect W-Series ArubaOS 6.
show ipv6 datapath user table (deprecated) show ipv6 datapath user table Description Displays ipv6 datapath user table entries. Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 Command deprecated. This command has been replaced by the show datapath user ipv6 command. Dell PowerConnect W-Series ArubaOS 6.
show ipv6 firewall show ipv6 firewall Example This example displays the status of all firewall configurations.
Parameter Description clients on the network as. Prohibit RST replay attack If enabled, this setting closes a TCP connection in both directions if a TCP RST is received from either direction. Session Idle Timeout Shows if a session idle timeout interval has been defined. Session mirror destination Destination to which mirrored packets are sent. Prohibit IPv6 Spoofing Status on IPv6 spoofing.
show ipv6 interface show ipv6 interface [brief] Description View IPv6-related information on all interfaces. Syntax Parameter Description brief Optional parameter. If specified, displays the IPv6-related information on all the interfaces in a summary format.
show ipv6 mld config show ipv6 mld config Description Displays Multicast Listener Discover (MLD) configuration details. Example This example displays the current MLD configuration values.
show ipv6 mld counters show ipv6 mld counters Description Displays the statistics of MLD. Example This example displays the MLD statistics for the following values.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show ipv6 mld group show ipv6 mld group Example This example displays MLD group details. (host) #show ipv6 mld group MLD Group Table --------------Group Members ----- ------- The output of this command includes the following parameters: Parameter Description Group Name of MLD groups. Members Number of members in an MLD group. Command History This command was available in ArubaOS 3.3.
show ipv6 mld interface show ipv6 mld interface Example This example displays MLD status on VLANs. To view details for a specific VLAN, you can specify the VLAN ID. (host) #show ipv6 mld interface MLD Interface Table ------------------VLAN Addr Destination ---- ---224 10.224.224.1 1 10.15.44.10 50 156.1.50.1 211 211.1.1.1 51 156.1.51.1 999 99.1.1.2 7 7.7.7.1 170 192.170.1.1 Netmask MAC Address MLD Snooping Querier ------- ----------- --- -------- ------- ---------- 255.255.255.0 255.255.255.
show ipv6 neighbors show ipv6 neighbors Description Displays the IPv6 neighbors configured on a VLAN interface. Usage Guidelines This command displays the IPv6 neighbors configured on a VLAN interface via the ipv6 neighbor command. Examples The example below shows the ipv6 neighbors configured on VLAN 1 .
show ipv6 ra status show ipv6 ra status Description Displays the IPv6 RA status on the VLAN interfaces. Usage Guidelines This command displays the IPv6 RA status on the VLAN interfaces. Examples The example below shows the IPv6 RA status on the VLAN interfaces .
show ipv6 route show ipv6 route [static] Description Displays the Dell controller IPv6 routing table. Syntax Command Description static Include this optional parameter to display only static IPv6 routes. Usage Guidelines This command displays static IPv6 routes configured on the controller via the ipv6 route command. Use the ipv6 default-gateway command to set the default gateway to the IPv6 address of the interface on the upstream router or switch to which you connect the controller.
show ipv6 user-table show ipv6 user-table [authentication-method {dot1x | mac | stateful-dot1x | vpn | web} | bssid | debug {rows | unique} | essid | internal {rows} | ip | location | mac | mobile {bindings | rows | unique | visitors} | name | phy-type {a | b} | role | rows | station | verbose ] Description Displays IPv6 user table entries. You can filter the output based on various parameters are described in table.
Parameter Description name Displays IPv6 user table entries that match the specified name. phy-type Displays IPv6 user table entries that match a or b phy-type. role Displays IPv6 user table entries that match the specified role. rows Displays specific rows in the IPv6 user table. Enter the starting row number and the number of rows to be displayed. station Displays the station table information for the IPv6 user table entries. verbose Displays the complete IPv6 user table with all details.
Command History This command was available in ArubaOS 3.3. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show keys show keys [all] Description Show whether optional keys and features are enabled or disabled on the controller. Syntax Parameter Description all Include this optional parameter to display the status of all optional keys and features. If this parameter is omitted, the output displays the status of the most commonly used features and keys. Example The following example displays the status of the most commonly used keys and features on the controller.
Related Commands To view the license usage database (including the license key strings) use the command "show license" on page 1118. Command History This command was available in ArubaOS 1.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers Dell PowerConnect W-Series ArubaOS 6.
show lacp show lacp {counters | internal | neighbor} Description View the LACP configuration status. Syntax Parameter Description Enter the Link aggregation group number. Range: 0-7 counters Enter the keyword counters to view the LACP traffic. internal Enter the keyword internal to view the LACP internal information. neighbor Enter the keyword neighbor to view the LACP neighbor information. Example The port uses the group number +1 as its “actor admin key”.
(Host)#show lacp 0 counters Port LACPDUTx LACPDURx ----------- -------FE 1/1 10 10 FE 1/2 12 12 MarkrTx ------0 0 MarkrRx -------0 0 MrkrRspTx --------0 0 MrkrRspRx --------0 0 Related Command Command Description lacp group Enable LACP and configure on the interface show interface port-channel View information on a specified port-channel interface show lacp sys-id View the LACP system ID information Command History Release Modification ArubaOS 3.4.
show lacp sys-id show lacp sys-id Description View the LACP system MAC address and port priority. Example This command returns the port priority and the MAC address (comma separated). In the example below, the port priority is the default value 32768 followed by the MAC address 00:0B:86:40:37:C0.
show lcd-menu show lcd-menu Description Displays the current LCD Menu configuration. Syntax None. Example An example output of the show lcd-menu command.
show license show license [limits] Description Displays the license table. Syntax Parameter Description limits Enter the keyword limit to display the current license limits. Example An example output of the show license command.
The output of this command includes the following data columns: Parameter Description Key The license key. Installed The license installation date and time. Expires The date that your evaluation license expires is listed in this column. Permanent license will always have a “Never” in this column. Expired evaluation licenses will also be indicated in this column. Flags This column displays some status about your license. The legend for this column appears at the bottom of the display output.
show license-usage show license-usage acr | ap | user | xsec Description Display license usage information. Syntax Parameter Description acr Show ACR license usage ap Show AP license usage information. user Show Policy Enforcement Firewall (PEF) user license usage. xsec Show Extreme Security (xSec) user and tunnel license usage. Examples The following example displays the user license usage.
Remaining AP Capacity --------------------Type Number ---- -----CAPs 32 RAPs 128 Command History Release Modification ArubaOS 3.0 Command Introduced. ArubaOS 3.3 The following parameters were introduced in the output of show license-usage ap. l Total 802.11n-120abg Licenses l 802.11n-120abg Licenses Used l Total 802.11n-121abg Licenses l 802.11n-121abg Licenses Used l Total 802.11n-124abg Licenses l 802.11n-124abg Licenses Used l Total 802.11n-125abg Licenses l 802.11n-125abg Licenses Used ArubaOS 5.
show local-userdb-ap local-userdb-ap mac-address start Description View detailed information for the obsolete RAP whitelist database used in ArubaOS 6.1 and earlier. Syntax Parameter Description mac-address MAC address of the remote AP to be removed from the Remote AP Whitelist table. start Start displaying the table at the specified record in the database Usage Guidlines When you upgrade from ArubaOS 5.0-6.1 to ArubaOS 6.
Parameter Description Name MAC address of the AP. AP-Group Name of the AP group to which the AP has been assigned. AP-name Name of the AP. If no name has been specified, this column will display the AP’s MAC address Full-name Text string used to identify the AP. This field often describes the AP’s user, and corresponds to the User Name field in the RAP whitelist in the WebUI. Authen-Username User name of the user who authenticated the remote AP.
Command History Modification ArubaOS 5.0 1124 | show local-userdb-ap Command introduced. Dell PowerConnect W-Series ArubaOS 6.
show local-userdb-guest show local-userdb-guest Description Shows information about guest accounts in the local user database. Syntax Parameter Description maximum-expiration How long the account is valid, in minutes, in the internal database. The user account record’s location (by number) as it is listed in the database. The number of user account records that display on one page.
Parameter Description Role Role for the user. This role takes effect when the internal database is specified in a server group profile with a server derivation rule. If there is no server derivation rule configured, then the user is assigned the default role for the authentication method. E-mail Shows the email address of the user account. Enabled Shows whether the account is enabled or disabled. Expiry Shows the expiration date for the user account. If this is not set, the account does not expire.
show local-userdb-remote-node show local-userdb-remote-node mac-address start Description The output of this command lists the MAC address and assigned Remote Node profile for of each Remote Node Controller associated with that Remote Node Controller master. Syntax Parameter Description mac-address How long the account is valid, in minutes, in the internal database. start The user account record’s location (by number) as it is listed in the database.
Related Commands Command Description Mode remote-node-profile The remote-node-profile command lets you create a Remote Node Controller profile. Config mode Command History Release Modification ArubaOS 6.0 Command introduced Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master and local controllers 1128 | show local-userdb-remote-node Dell PowerConnect W-Series ArubaOS 6.
show local-userdb show local-userdb {[maximum-expiration][start page The user account record’s location (by number) as it is listed in the database. The number of user account records that display on one page.
Parameter Description Role Role for the user. This role takes effect when the internal database is specified in a server group profile with a server derivation rule. If there is no server derivation rule configured, then the user is assigned the default role for the authentication method. E-mail Shows the email address of the user account. Enabled Shows whether the account is enabled or disabled. Expiry Shows the expiration date for the user account. If this is not set, the account does not expire.
show local-userdb username show local-userdb username Description Shows information about specific user account in the internal controller database. Usage Guidelines Issue this command to display an overview of a particular user account in the database. Example This example shows the basic summary of a user account Paula in the database.
show local-userdb username show local-userdb username Description Shows information about specific user account in the internal controller database. Usage Guidelines Issue this command to display an overview of a particular user account in the database. Example This example shows the basic summary of a user account Paula in the database.
show localip show localip Description Displays the IP address and VPN shared key between master and local. Syntax No parameters. Example The output of this command shows the controller’s IP address and shared key between master and local controllers. (host) # show localip Local Switches configured by Local Switch IP --------------------------------------------Switch IP address of the Local Key ------------------------------ --0.0.0.0 ******** Command History This command was available in ArubaOS 3.
show log all show log all [] Description Show the controller’s full log. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. Example This example shows the most ten recent log entries for the controller.
show log ap-debug show log ap-debug{[][all]} Description Show the controller’s AP debug logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the AP debug logs for the controller. Example This example shows the ten most recent AP debug logs for the controller. (host) #show log ap-debug 10 Nov 24 20:54:24 KERNEL(AP39@10.6.1.21): All Rights Reserved Nov 24 20:54:24 KERNEL(AP39@10.6.1.
show log bssid-debug show log bssid-debug{[][all]} Description A Basic Service Set Identifier (BSSID) uniquely defines each wireless client and Wireless Broadband Router. This command shows the controller’s BSSID debug logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the BSSID debug logs for the controller. Command History This command was available in ArubaOS 3.0.
show log errorlog show log errorlog{[][all]} Description Show the controller’s system errors and other critical information. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the error logs for the controller. Example This example shows the ten most recent system log errors. (host) #show log errorlog 10 Mar 5 10:30:34 |AP 1.1.1@10.3.49.
Command Information Platforms Licensing Command Mode All platforms Base operating system Available in Enable and Config modes. 1138 | show log errorlog Dell PowerConnect W-Series ArubaOS 6.
show log essid-debug show log essid-debug{[][all]} Description Show the controller’s ESSID debug logs. An Extended Service Set Identifier (ESSID) is used to identify the wireless clients and Wireless Broadband Routers in a WLAN. All wireless clients and Wireless Broadband Routers in the WLAN must use the same ESSID. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log.
show log network show log network{[][all]} Description Show the controller’s system network errors. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the network logs for the controller.
show log security show log security{[][all]} Description Show the controller’s security logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the security logs for the controller. Example This example shows the controller’s last seven security logs.
show log system show log system{[][all]} Description Show the controller’s system logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the system logs for the controller. Example This example shows the controller’s last ten system logs.
show log user show log user{[][all]} Description Show the controller’s user logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the user logs for the controller. Example This example shows the controller’s last ten user logs. (host) #show log user 10 Mar 5 13:29:57 :501083: |stm| Probe request: address from AP 10.3.49.253-00:0b:86:a2:e7:40-1.1.
show log user-debug show log user-debug{[][all]} Description Show the controller’s user debug logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the user debug logs for the controller. Example This example shows the controller’s last ten user debug logs. (host) #show log user-debug 10 Mar 5 13:57:24 :501090: 00:0b:86:a2:e7:40-1.1.1 Mar 5 13:57:24 :501090: 00:0b:86:a2:e7:41-1.1.
show log wireless show log wireless{[][all]} Description Show the controller’s wireless logs. Syntax Parameter Description Start displaying the log output from the specified number of lines from the end of the log. all Shows all the wireless logs for the controller. Example This example shows the controller’s last ten wireless logs.
show logging show logging facility|server|{level [verbose]} Description the IP address of the remote logging server, as well as facility log types and their associated facility levels. Syntax Parameter Description facility View the facility used when logging messages into the remote syslog server. server Show the IP address of a remote logging server. level [verbose] Show logging levels at which the messages are logged.
(host) #show logging server Remote Server: 1.1.1.1 FACILITY MAPPING TABLE ---------------------local-facility severity -------------- -------user debugging remote-facility --------------local1 Related Commands Command Description Mode logging Use this command to specify the IP address of the remote logging server, as well as facility log types and their associated facility levels. Config mode on master and local controllers Command History This command was introduced in ArubaOS 2.5.
show loginsessions show loginsessions Description Displays the current administrator login sessions statistics. Syntax No parameters. Example Issue this command to display the admin login session statistics. Session Table ------------ID User Name -- --------1 admin User Role --------root Connection From --------------10.100.102.
show mac-address-table show mac-address-table Description Displays a MAC forwarding table. Syntax No parameters. Example Issue this command to display the MAC forwarding table.
Command History This command was introduced in ArubaOS 1.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master controllers 1150 | show mac-address-table Dell PowerConnect W-Series ArubaOS 6.
show master-configpending show master-configpending Description Displays the list of global commands which are not saved and are not sent to the local controller. Syntax No parameters. Example This example below displays the commands which are not saved and are not sent to the local controller. (host) #show master-configpending aaa profile "default-xml-api" aaa xml-api server "10.17.93.2" aaa xml-api server "10.17.93.2" aaa xml-api server "10.17.93.
show master-local stats show master-local stats [] [] Description Display statistics for communication between master and local controllers. Syntax Parameter Description Include the IP address of a controller to display statistics that controller only. Start displaying the output of this command at the specified page number. Usage Guidelines By default, master and Local controllers exchange heartbeat messages every 10 seconds.
Parameter Description due to network connectivity problems or when the peer switch reboots. Cfg Terminate Number of times the controller has failed to upgrade to a new configuration Last Synced Timestamp showing the last time the local controller synched its configuration from the master controller. Command History This command was introduced in ArubaOS 3.0.
show master-redundancy show master-redundancy Description Display the master controller redundancy configuration. Syntax No parameters. Example This example below shows the current master redundancy configuration, including the ID number of the master VRRP virtual router and the IP address of the peer controller for master redundancy. (host) #show master-redundancy Master redundancy configuration: VRRP Id 2 current state is MASTER Peer's IP Address is 2.1.1.
show memory show memory [ap {meshd|rfd|sapd} {ap-name }|{bssid }|{ip-addr }]| [auth | cfgm |debug [[verbose]]|dbsync |fpapps | fpcli| isakmpd | l2tpd | mobileip | ospf | pim | pptpd | profmgr | slb| snmpd | stm | udbserver |wms] Description Show the amounts of free and available memory on the controller, or include a process name to show memory information for a process on the AP or controller.
Parameter Description slb Display memory information for the slb process on the controller. apsnmpd Display memory information for the apsnmpd process on the controller. stm Display memory information for the auth process on the controller. udbserver Display memory information for the udbserver process on the controller. wms Display memory information for the wms process on the controller. Usage Guidelines Include the name of a process to show memory information for that process.
Column Description Type The show memory command currently shows information for predefined processes only, so this column always displays the parameter default. Num Alloc Current number of memory allocations. Size Allocs Total size of all memory allocations, in bytes. Total Allocs Maximum number of allocations used throughout in the life of the process. Total Size Maximum size of allocations used throughout in the life of the process, in bytes.
show mgmt-role show mgmt-role Description This command allows the user to view a list of management role configurations. Syntax No parameters. Example Issue this command to display a list of management user roles.
show mgmt-users show mgmt-users [ | local-authentication-mode | ssh-pubkey | webui-cacert ] Description Displays list of management users on the controller and also details of each management users. Syntax Parameter Description username To view details of a specific management user. local-authentication-mode Status of local-authentication mode. ssh-pubkey Number of management users using the ssh-pubkey.
show tunneled-node config show tunneled-node config Description Displays wired tunneled node configuration details. Syntax No parameters. Example The output of this command shows the tunneled node configuration details. (host) # show tunneled-node config Tunneled Node:Enabled Tunneled Node Server:4.4.4.1 Tunnel Loop Prevention:Disabled Tunnel Node MTU:5000 Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 The command name was changed to show tunneled-node config.
show netdestination show netdestination Description Displays IPv4 and IPv6 network destination information. Syntax No parameters. Example Issue this command to display all netdestination configured on this controller. The output below displays information for all configured IPv4 and IPv6 netdestinations. To display additional detailed information for an individual netdestinations, include the name of the netdestination at the end of the command.
show netexthdr show netexthdr Description This command displays the IPv6 extension header (EH) types that are denied. Syntax Parameter Description Default Specify the EH alias name. default Usage Guidelines Example The following command displays the denied extended header types in the default EH: (host) #show netexthdr default Extended Header type(s) Denied -----------------------------51, Command History Release Modification ArubaOS 6.
show netservice show netservice [] Description Show network services Syntax Parameter Description Name of a network service. Usage guidelines Issue this command without the optional parameter to view a complete table of network services on the controller. Include the parameter to display settings for a single network service only. Example The following example shows the protocol type, ports and application-level gateway (ALG) for the DHCP service.
show netstat show netstat [stats] Description Show current active network connections. Syntax Parameter Description Show network statistics, filtered by protocol type. Usage guidelines Issue this command without the optional stats parameter to view a complete table of active network connections. Include the stats parameter to display aggregate statistics for IP, ICMP, TCP and UDP protocols. Example The following example shows incoming and outgoing packet statistics for the controller.
2 connections established 1006383 segments received 1147229 segments send out 9603 segments retransmitted 0 bad segments received. 2568 resets sent Udp: 928478757 packets received 40767 packets to unknown port received. 426937 packet receive errors 910267627 packets sent Related Commands To configure an alias for network protocols, use the command netservice. Command History This command was available in ArubaOS 1.0.
show network-printer show network-printer [config | job | status] Description Displays configuration, job status details, and printer status of USB printers connected to a W-600 seriescontroller. Syntax Parameter Description config Displays the configuration details of the printer service on the controller. job Displays the list of job in queue in all printers connected to the controller. status Displays the status of all printers connected to the controller.
show network-storage show network-storage [ files opened | shares { | disk | status | users {disk } ] Description Displays details about the USB storage device connect to a W-600 seriescontroller. Syntax Parameter Description files opened Displays the list of opened files in the USB storage device connected to the controller. shares Displays the list of shares that are created in the USB storage device.
show ntp peer show ntp peer Description Show NTP peer information. Syntax Parameter Description IP address of an NTP peer Usage guidelines The show ntp peer command is used for NTP server troubleshooting, and should only be used under the supervision of Dell technical support. Issue the show ntp servers command to view basic settings for currently configured NTP servers. Related Commands To configure an NTP server, use the command ntp server.
show ntp servers show rft servers [brief] Description Show information for Network Time Protocol (NTP) servers. Syntax Parameter Description brief Display the IP address of the defined NTP servers, iburst and key settings. Examples The following example shows values for the primary and backup NTP servers. The primary server is marked with an asterisk (*) and the backup server is marked with an equals sign (=).
The following example shows the ntp servers configuration. The NTP server IP address, key ID and iburst status are shown when the ntp servers brief command is used. (host) (config) #show ntp servers brief server 1.1.1.1 key 1234 server 10.1.1.245 iburst key 12345 Related Commands To configure an NTP server, use the command ntp server. Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 6.1 The key-id parameter output displays when the ntp servers brief command is used.
show ntp status show ntp status Description Show information for a NTP server. Syntax No parameters. Example The following example shows values for the primary NTP server.
Parameter Description new version packets Number of packets that match the current NTP version. unknown version number Number of packets with an unknown NTP version. bad packet format Number of NTP packets dropped due to an invalid packet format. packets processed Number of NTP packets received and processed by the controller. bad authentication Number of NTP packets that failed to be authenticated. packets rejected Number of NTP packets rejected because they had an invalid format.
Command History This command was available in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers Dell PowerConnect W-Series ArubaOS 6.
show packet-capture show packet-capture Description Displays packet capture status on the controller. Syntax No parameters. Example The output of this command shows the packet capture configuration details. (host) # show packet-capture Current Active Packet Capture Actions(current switch) ===================================================== Packet filtering TCP with 1 port(s) enabled: 2 Packet filtering UDP with 1 port(s) enabled: 5 Packet filtering for internal messaging opcodes disabled.
show packet-capture-defaults show packet-capture-defaults Description Displays the status of default packet capture options. Syntax No parameters. Example The output of this command shows packet capture status. (host) # show packet-capture-defaults Current Active Packet Capture Actions(current switch) ===================================================== Packet filtering for TCP ports disabled. Packet filtering for UDP ports disabled. Packet filtering for internal messaging opcodes disabled.
show papi-security (deprecated) show papi-security Description This command shows a configured papi-security profile. Syntax Parameter Description Range Default PAPI Key The key string. The key authenticates the messages between systems. Range: 10–64 characters — Enhanced security mode Indicates if the enhanced security mode is enabled or disabled. This mode causes the system to reject messages when an incorrect key is used.
show phonehome show phonehome global history report-status stats Description Use this command to view current configuration settings and debugging statistics for the phonehome automatic reporting feature. Syntax Parameter Description global Show whether the phonehome service and auto-reporting is enabled or disabled, and display current SMTP settings for this feature. history Issue this command under the guidance of Dell support troubleshoot phonehome automatic reporting.
Example The following command turns on the PhoneHome feature, enables weekly auto-reports, and identifies the SMTP server to be used by this feature: (host) #show phonehome global PhoneHome information: PhoneHome Service: Disabled PhoneHome Auto-Report: Disabled Local SMTP server: 172.21.18.170:25 SMTP From Email: admin@mycorp.com Max Attachment Size: 10 MB Command History This command was introduced in ArubaOS 6.0.
show poe show poe [slot/port] Description Displays the PoE status of all or a specific port on the controller. Syntax No parameters. Example The output of this command shows the PoE status of port 10 in slot 1. (host) # show poe 1/10 PoE Status ---------Port Status --------FE 1/10 Off Voltage(mV) ----------N/A Current(mA) ----------N/A Power (mW) ---------N/A Command History This command was available in ArubaOS 3.
show port link-event show port link-event Description Displays the link status on each of the port on the controller. Syntax No parameters. Example The output of this command shows the link status on all ports in the controller.
show port monitor show port monitor Description Displays the list of ports that are configured to be monitored. Syntax No parameters. Example The output of this command shows the link status on all ports in the controller. (host) # show port monitor Monitor Port -----------FE 1/10 Port being Monitored -------------------FE 1/20 Command History This command was available in ArubaOS 3.3.
show port stats show port status Description Displays the activity statistics on each of the port on the controller. Syntax No parameters. Example The output of this command shows the link status on all ports in the controller. (host) # show port stats Port Statistics --------------Port PacketsIn CRCErrors ---------------FE1/4 0 FE1/5 0 FE1/6 0 FE1/7 0 FE1/8 0 FE1/9 0 FE1/10 0 FE1/11 0 FE1/12 0 FE1/13 0 FE1/14 0 FE1/15 0 FE1/16 2937495 FE1/17 0 FE1/18 591066 FE1/19 0 FE1/20 1205264 FE1/21 0 FE1/22 0 ...
show port status show port status Description Displays the status of all ports on the controller. Syntax No parameters. Example The output of this command shows the status of all ports in the controller. (host) # show port status Port Status ----------Slot-Port PortType --------- -------1/0 FE 1/1 FE 1/2 FE 1/3 FE 1/4 FE 1/5 FE 1/6 FE 1/7 FE 1/8 FE 1/9 FE 1/10 FE 1/11 FE 1/12 FE 1/13 FE 1/14 FE 1/15 FE 1/16 FE ...
show port trusted show port trusted Description Displays the list of ports configured with trusted profiles. Syntax No parameters. Example The output of this command shows the list of ports with trusted profile. (host) # show port trusted FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE FE GE GE 1/0 1/1 1/2 1/3 1/4 1/5 1/6 1/7 1/8 1/9 1/10 1/11 1/12 1/13 1/14 1/15 1/16 1/17 1/18 1/19 1/20 1/21 1/22 1/23 1/24 1/25 Command History This command was available in ArubaOS 3.3.
show port xsec show port xsec Description Displays the list of xSec enabled ports. Syntax No parameters. Example The output of this command shows the list of xSec enabled ports. (host) #show port xsec Xsec Ports ---------Interface xsec vlan state --------- --------- ----- Command History This command was available in ArubaOS 3.3.
show priority-map show priority-map Description Displays the list of priority maps on a interface. Syntax No parameters. Example The output of this command shows the priority maps configured on all interfaces. (host) # show priority-map Priority Map ------------ID Name DSCP-TOS -- ----------1 my-map 4-20,60 DOT1P-COS --------4-7 Command History This command was available in ArubaOS 3.
show processes show processes [sort-by {cpu | memory}] Description Displays the list of all process running on the controller. You can sort the list either by CPU intensive or memory intensive processes. Syntax Parameter Description sort-by Add a sort filter to the output cpu This will sort output based on CPU usage. memory This will sort output based on memory usage. Example The output of this command shows list of processes sorted by CPU usage.
Command Information Platformss Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers 1188 | show processes Dell PowerConnect W-Series ArubaOS 6.
show profile-errors show profile-errors Description Displays the list of invalid user-created profiles. Syntax No parameters. Example The output of this command shows list of profiles that are invalid and also displays the error in those profiles. In this example, the VLAN 1000 that is mapped to a virtual-ap that does not exist.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers 1190 | show profile-errors Dell PowerConnect W-Series ArubaOS 6.
show profile-hierarchy show profile-hierarchy Description Displays the profile hierarchy template. Syntax No parameters. Usage Guidelines The output of this command shows how profiles relate to each other, and how some higher-level profiles reference other lower-level profiles. The output of this command will vary, depending upon controller configuration and licenses. Command History This command was available in ArubaOS 3.
show profile-list aaa show profile-list aaa [{authentication [captive-portal | dot1x | mac | stateful-ntlm | wispr]} |{authentication-server [ldap | radius | tacacs | windows]} | {profile} | {rfc-3576server} | {server-group} | {xml-api}] Description Displays the list of AAA profiles. Syntax Parameter Description authentication List of aaa authentication profiles. captive-portal Captive portal authentication profiles. dot1x 802.1X authentication profiles. mac MAC authentication profiles.
Command History This command was available in ArubaOS 3.0 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show profile-list ap show profile-list ap [ enet-link-profile | mesh-cluster-profile | mesh-ht-ssid-profile | mesh-radio-profile | regulatory-domain-profile | snmp-profile | snmp-user-profile | system-profile | wired-ap-profile ] Description Displays the list of AP profiles. Syntax Parameter Description enet-link-profile Display a list of AP Ethernet link profiles. mesh-cluster-profile Display a list of mesh cluster profiles used by mesh nodes.
show profile-list ap-group show profile-list ap-group Description Displays the status of AP groups profiles in the controller. Syntax No parameters. Example The output of this command shows the status of AP group profiles in the controller. (host) # show profile-list ap-group AP group List ------------Name Profile Status ----------------default Total:1 Command History This command was available in ArubaOS 3.
show profile-list ap-name show profile-list ap-name Description Displays the status of AP profiles in the controller. Syntax No parameters. Example The output of this command shows status of AP profiles in the controller. (host) # show profile-list ap-name AP name List -----------Name Profile Status ---- -------------Total:0 Command History This command was available in ArubaOS 3.
show profile-list ids show profile-list ids [dos-profile | general-profile | impersonation-profile | profile | rate-thresholds-profile | signature-matching-profile | signature-profile | unauthorized-device-profile ] Description Displays the status of all IDS profiles in the controller. Syntax Parameter Description dos-profile Display a list of IDS DoS profiles. general-profile Display a list of IDS generate profiles. impersonation-profile Display a list IDS impersonation profile.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers 1198 | show profile-list ids Dell PowerConnect W-Series ArubaOS 6.
show profile-list rf show profile-list rf [ arm-profile | dot11a-radio-profile | dot11g-radio-profile | event-thresholds-profile | ht-radio-profile | optimization-profile ] Description Displays the status of all radio profiles. Syntax Parameter Description arm-profile Details of Adaptive Radio Management (ARM) Profile. dot11a-radio-profile Details of AP radio settings for the 5GHz frequency band, including the ARM profile and the high-throughput (802.11n) radio profile.
show profile-list wlan show profile-list wlan [ dotllk-profile | edca-parameters-profile | ht-ssid-profile | ssid-profile | traffic-management-profile | virtual-ap | voip-cac-profile | wmm-trafficmanagement-profile] Description Displays the status of WLAN profiles on the controller. Syntax Parameter Description dot11k-profile Show a list of all 802.
show provisioning-ap-list show provisioning-ap-list Description Displays the list of all APs that are in queue to be provisioned by the admin. Syntax No parameters. Command History This command was available in ArubaOS 3.4 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show provisioning-params show provisioning-params Description Displays the list of parameters and the values used to provision the APs. Syntax No parameters. Example The output of this command shows list of all provisioning parameters and their values.
Antenna tilt angle for 802.11a Antenna tilt angle for 802.11g Mesh SAE N/A N/A sae-default Command History This command was available in ArubaOS 3.0 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers show qos-profile (deprecated) show qos-profile Description Displays the QoS profile configuration. Command History This command was deprecated in ArubaOS 6.2.
show rap-wml show rap-wml [cache | server | wired-mac ] Description Displays the name and attributes of a MySQL database or a MySQL server. Syntax Parameter Description cache Displays the cache of all lookups for a database server. servers Displays the database server state. wired-mac Displays the wired MAC discovered on traffic through the AP. Example The output of this command shows status of all database servers.
show references aaa authentication crypto-local show references aaa authentication {captive-portal }|{dot1x }| {mac }|mgmt|stateful-dot1x|{stateful-ntlm }|vpn|wired|{wispr {profile-name>} [page ] [start ] Description Show AAA profile references. Syntax Parameter Description captive-portal Show the number of references to a captive-portal profile. dot1x Show the number of references to a 802.
Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 3.4.1 The stateful-ntlm and wispr parameters were introduced. Command Information Platforms Licensing Command Mode Available on all platforms Base operating system Config mode on master and local controllers 1206 | show references aaa authentication Dell PowerConnect W-Series ArubaOS 6.
show references aaa authentication-server crypto-local show references aaa authentication-server {ldap }|{radius }|{tacacs } [page ] [start ] Description Display information about AAA authentication servers. Syntax Parameter Description ldap Show the number of server groups that include references to the specified LDAP server.
show references aaa profile crypto-local show references aaa profile Description Show references to an AAA Profile. Syntax Parameter Description profile Name of an AAA profile for which you want to view references. Example Issue this command to show the wlan virtual AP profiles that include references to the specified AAA profile. The example below shows that seven different virtual AP profiles include a single reference to the AAA profile default.
show references aaa server-group crypto-local show references aaa server-group [page] [start]} Description Show references to a server group. Syntax Parameter Description server-group Name of the server group for which you want to show references page Include this optional parameter to limit output of this command to the specified number of items. start Include this optional parameter to start displaying the output of this command at the specified index number.
Command Information Platforms Licensing Command Mode Available on all platforms Base operating system Config mode on master and local controllers 1210 | show references aaa server-group Dell PowerConnect W-Series ArubaOS 6.
show references ap crypto-local show references ap enet-link-profile mesh-cluster-profile mesh-ht-ssid-profile mesh-radio-profile regulatory-domain-profile system-profile wired-ap-profile page start Description Show the number of references to a specific AP profile.
-------ap-group "10.0.0" enet0-profile ap-group "10.0.
show references guest-access-email crypto-local show references guest-access-email [page ] [start ] Description Show references to the global guest access email profile. Syntax Parameter Description page Include this optional parameter to limit output of this command to the specified number of items. start Include this optional parameter to start displaying the output of this command at the specified index number.
show references ids crypto-local show references ids dos-profilegeneral-profile general-profile impersonation-profile profile rate-thresholds-profile signature-matching-profile signature-profile unauthorized-device-profile Description Displays IDS profile references.
show references papi-security crypto-local show references papi-security [page ] [start ] Description Show references to a PAPI security profile. Syntax Parameter Description page Include this optional parameter to limit output of this command to the specified number of items. start Include this optional parameter to start displaying the output of this command at the specified index number.
show references rf crypto-local show references rf dot11a-radio-profile dot11g-radio-profile event-thresholds-prof ht-radio-profile optimization-profile Description Show RF profile references. Syntax Parameter Description dot11a-radio-profile Show references to a 802.11a radio profile dot11g-radio-profile Show references to a 802.
show references user-role crypto-local show references user-role Description Show access rights for user role. Syntax Parameter Description The role name assigned to a user.
show references web-server crypto-local show references web-server [page ] [start ] Description Show the Web server configuration references. Syntax Parameter Description page Include this optional parameter to limit output of this command to the specified number of items. start Include this optional parameter to start displaying the output of this command at the specified index number.
show references wlan crypto-local show references wlan dot11k-profile edca-parameters-profile ht-ssid-profile ssid-profile traffic-management-pr virtual-ap voip-cac-profile Description Shows WLAN profile references. Syntax Parameter Description dot11k-profile Shows references to a 802.11K profile. edca-parameters-profile Shows references to an EDCA parameters profile.
show rf am-scan-profile show rf am-scan-profile [] Description Display the Air Monitor (AM) scanning profile list. Optionally display parameter and values of a specified Air Monitor profile. Syntax Parameter Description Name of this instance of the profile. Usage Guidelines Enter the basic show command to view a list of profiles, the number of profiles and the profile status.
Parameter Description Scan-mode The scanning mode for the radio all-reg-domain Scan channels in all regulatory domain rare Scan all channels (all regulatory domains and rare channels) reg-domain Scan channels in the APs regulatory domain Dwell time: Active channels Dwell time (in ms) for channels where there is wireless activity Dwell time: Regulatory Domain channels Dwell time (in ms) for AP's Regulatory domain channels Dwell time: non-Regulatory Domain channels Dwell time (in ms) for channe
show rf arm-profile show rf arm-profile [] Description Show an Adaptive Radio Management (ARM) profile. Syntax Parameter Description Name of an ARM profile. Usage Guidelines Issue this command without the parameter to display the entire ARM profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
Scanning Scan Time VoIP Aware Scan Power Save Aware Scan Video Aware Scan Ideal Coverage Index Acceptable Coverage Index Free Channel Index Backoff Time Error Rate Threshold Error Rate Wait Time Noise Threshold Noise Wait Time Minimum Scan Time Load aware Scan Threshold Mode Aware Arm Scan Mode Enabled 110 msec Disabled Disabled Enabled 10 4 25 240 sec 50 % 30 sec 75 -dBm 120 sec 8 1250000 Bps Disabled all-reg-domain The output of this command includes the following parameters: Parameter Description As
Parameter Description direct supervision of Dell Support. Scanning Shows if the AP has enabled or disabled AP scanning of other channels. Scan Time The amount of time, in milliseconds, an AP will drift out of the current channel to scan another channel. VoIP Aware Scan Shows if Dell’s VoIP Call Admission Control (CAC) prevents any single AP from becoming congested with voice calls.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers Dell PowerConnect W-Series ArubaOS 6.
show rf dot11a-radio-profile show rf dot11a-radio-profile [] Description Show an 802.11a Radio profile. Syntax Parameter Description Name of an 802.11a profile. Usage Guidelines Issue this command without the>
Spectrum Load Balancing domain RX Sensitivity Tuning Based Channel Reuse RX Sensitivity Threshold Non 802.
Parameter Description threshold as compared to its immediate neighbors, or if a neighboring Dell AP on another channel does not have any clients, load balancing will be enabled on that AP. This feature is disabled by default. Spectrum load balancing mode SLB Mode allows control over how to balance clients. Channel-based load-balancing balances clients across channels. Radio-based load-balancing distributes clients across radios on the same band, independent of channels.
Parameter Description defined by IEEE 802.11h, enable an AP to announce that it is switching to a new channel before it begins transmitting on that channel. This allows clients that support CSA to transition to the new channel with minimal downtime. CSA Count Number of channel switch announcements that must be sent prior to switching to a new channel. The default CSA count is 4 announcements.
Release Modification l l RX Sensitivity Threshold ARM/WIDS Override ArubaOS 3.4.2 Support for the Beacon Regulate parameter ArubaOS 6.0 Support for the following parameters: l AM Scanning Profile l Advertised regulatory max EIRP l Spectrum Load balancing mode l Spectrum load balancing update interval (sec) ArubaOS 6.1 Support for the following parameters: l Spectrum Monitoring l Spectrum load balancing threshold (%) ArubaOS 6.2.1.0 The Reduce Cell Size (Rx Sensitivity) parameter was introduced.
show rf dot11g-radio-profile show rf dot11g-radio-profile [] Description Show an 802.11g Radio profile. Syntax Parameter Description Name of a 802.11g profile. Usage Guidelines Issue this command without the parameter to display the entire 802.11g profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
RX Sensitivity Tuning Based Channel Reuse RX Sensitivity Threshold Non 802.11 Interference Immunity Enable CSA CSA Count Management Frame Throttle interval Management Frame Throttle Limit ARM/WIDS Override Reduce Cell Size (Rx Sensitivity) Protection for 802.
Parameter Description threshold as compared to its immediate neighbors, or if a neighboring Dell AP on another channel does not have any clients, load balancing will be enabled on that AP. This feature is disabled by default. Spectrum load balancing mode SLB Mode allows control over how to balance clients. Channel-based load-balancing balances clients across channels. Radio-based load-balancing distributes clients across radios on the same band, independent of channels.
Parameter Description Immunity The default setting for this parameter is level 2. When performance drops due to interference from non-802.11 interferers (such as DECT or Bluetooth devices), the level can be increased up to level 5 for improved performance. However, increasing the level makes the AP slightly “deaf” to its surroundings, causing the AP to lose a small amount of range. The levels for this parameter are: l Level-0: no ANI adaptation. l Level-1: noise immunity only.
Parameter Description AM Scanning Profile The AM scanning profile referenced by APs using this 802.11g radio profile. For details, see"rf am-scan-profile" on page 510 Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.3.2 Introduced protection for 802.11b clients and support for the high-throughput IEEE 802.11n standard ArubaOS 3.
show rf event-thresholds-profile show rf event-thresholds-profile [] Description Show an Event Thresholds profile. Syntax Parameter Description name of an Event Thresholds profile Usage Guidelines Issue this command without the parameter to display the entire Event Thresholds profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
Frame Retry Rate High Watermark Frame Retry Rate Low Watermark 16 % 8 % The output of this command includes the following parameters: Parameter Description Detect Frame Rate Anomalies Shows of the profile enables or disables detection of frame rate anomalies. Bandwidth Rate High Watermark If bandwidth in an AP exceeds this value, it triggers a bandwidth exceeded condition. The value represents the percentage of maximum for a given radio. (For 802.11b, the maximum bandwidth is 7 Mbps. For 802.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers 1238 | show rf event-thresholds-profile Dell PowerConnect W-Series ArubaOS 6.
show rf ht-radio-profile show rf ht-radio-profile [] Description Show a High-throughput Radio profile. Syntax Parameter Description Name of a High-throughput Radio profile. Usage Guidelines Issue this command without the parameter to display the entire High-throughput Radio profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
Parameter Description 40 MHz intolerance Shows whether or not APs using this radio profile will advertise intolerance of 40 MHz operation. By default, 40 MHz operation is allowed. Honor 40 MHz intolerance If this parameter is enabled, the radio will stop using the 40 MHz channels if the 40 MHz intolerance indication is received from another AP or station. CSD Override Diversity Spreading Workaround When this feature is enabled, all legacy transmissions will be sent using a single antenna.
show rf optimization-profile show rf optimization-profile [] Description Show an Optimization profile. Syntax Parameter Description name of an ARM profile Usage Guidelines Issue this command without the parameter to display the entire Optimization profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
RSSI Check Frequency 0 sec The output of this command includes the following parameters: Parameter Description Station Handoff Assist If enabled, this parameter allows the controller to force a client off an AP when the RSSI drops below a defined minimum threshold. Detect Association Failure Shows if the profile enables or disables STA association failure detection. Coverage Hole Detection Shows if the profile enables or disables coverage hole detection.
This command was available in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers Dell PowerConnect W-Series ArubaOS 6.
show rf spectrum-profile rf spectrum-profile Description Show a spectrum profile used by the spectrum analysis feature. Syntax Parameter Description Name of a spectrum profile. Usage Guidelines Issue this command without the parameter to display the entire spectrum profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.
The output of this command includes the following information: Parameter Description Age Out: WIFI The number of seconds for which a wifi device must stop sending a signal before the spectrum monitor considers that device no longer active on the network. The default value is 600 seconds. Age Out: Generic Interferer The number of seconds for which an unknown device must stop sending a signal before the spectrum monitor considers that device no longer active on the network.
Parameter Description that device no longer active on the network. The default value is 240 seconds. Age Out: Generic Frequency Hopper The number of seconds for which a generic frequency-hopping device must stop sending a signal before the spectrum monitor considers that device no longer active on the network. The default value is 25 seconds. Related Commands rf spectrum-profile Command History Release Modification ArubaOS 6.0 Command introduced ArubaOS 6.
show rft profile show rft profile {all|antenna-connectivity|link-quality|raw} Description Show parameters for the predefined RF test profiles. Syntax Parameter Description all Show all predefined profiles. antenna-connectivity Show configured parameters for the predefined Antenna Connectivity test profile. link-quality Show configured parameters for the predefined Link Quality test profile. raw Show configured parameters for the predefined RAW test profile.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers 1248 | show rft profile Dell PowerConnect W-Series ArubaOS 6.
show rft result show rft result all|{trans-id } Description Show the results of an RF test. Syntax Parameter Description all Show the most recent test result for each test type (antenna-connectivity, link-quality or raw). trans-id Each RF test is assigned a transaction ID. Include the trans-id parameters to show the test result for a specific transaction ID.
show rft transactions show rft transactions Description Show transaction IDs of RF tests. Syntax No parameters. Usage guidelines The rft command is used for RF troubleshooting, and should only be used under the supervision of Dell technical support. Issue the show rft transaction command to view the transaction IDs for the most recent test of each test type. Example The following example shows the transaction IDs for the latest RAW, link-quality and antenna-connectivity tests.
show rights show rights [] Description Displays the list of user roles in the roles table with high level details of role policies. To view role policies of a specific role specify the role name. Syntax Parameter Description name-of-a-role Enter the role name to view its policy details. Example The output of this command shows the list of roles in the role table.
show roleinfo show roleinfo Description Displays the role of the controller. Syntax No parameters. Example The output of this command shows the role of the controller. (host) # show roleinfo switchrole:master Command History This command was available in ArubaOS 3.0 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers 1252 | show roleinfo Dell PowerConnect W-Series ArubaOS 6.
show rrm dot11k admission-capacity show rrm dot11k admission-capacity Description Displays the available admission capacity for voice traffic on an AP. Syntax No parameters. Example The output of this command shows the available admission capacity for voice traffic on all APs. (host) # show rrm dot11k admission-capacity 802.
show rrm dot11k ap-channel-report show rrm dot11k ap-channel-report [ap-name | bssid | ip-addr ] Description Displays the channel information gathered by the AP. You can either specify an ap-name, bssid or ip-address of an AP to see more details. Syntax Parameter Description ap-name Enter the name of the AP. bssid Enter the BSSID address of the AP. ip-addr Enter the IP address of the AP.
show rrm dot11k beacon-report show rrm dot11k beacon-report Description Displays the beacon report information sent by a client to its AP. Syntax No parameters. Example The output of this command shows the beacon report for the client 00:1f:6c:7a:d4:fd. (host) # show rrm dot11k beacon-report station-mac 00:1f:6c:7a:d4:fd 802.11K Beacon Report Details -------------------------------------------------Channel ---------1 BSSID ------00:0b:86:6d:3e:40 Reg Class -----------0 Antenna ID ------------1 Meas.
show rrm dot11k neighbor-report show rrm dot11k neighbor-report [ap-name | bssid | ip-addr ] Description Displays the neighbor information for a particular AP. If the AP name or the AP’s IP address is specified, the user should specify the ESSID to get the neighbor information. If the ESSID is not specified, the command will display the neighbor information for all the Virtual AP's configured on the AP.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show rrm dot11k transmit-stream-report station-mac show rrm dot11k transmit-stream-report station-mac Description This is a diagnostic option for quick verification of received transmit stream measurement reports. Displays the contents of the transmit stream measurement reports received from a client. Syntax Parameter Description mac-addr MAC address of the client. Command History This command is introduced in ArubaOS 5.
show running-config show running-config Description Displays the current controller configuration, including all pending changes which are yet to be saved. Syntax No parameters. Example The output of this command shows the running configuration on the controller. (host) # show running-config version 5.0 enable secret "******" telnet soe loginsession timeout 0 hostname "vjoshi-2400" clock timezone PST -8 location "Building1.
show session-acl-list show session-acl-list Description Displays the list of configured session ACLs in the controller. Syntax No parameters. Example The output of this command shows the session ACLs in the controller. (host) # show session-access-list v6-icmp-acl allow-diskservices control validuser v6-https-acl vocera-acl icmp-acl v6-dhcp-acl captiveportal v6-dns-acl allowall test sip-acl https-acl ... ... ...
show slots show slots Description Displays the list of slots in the controller, including the status and card type. Syntax No parameters. Example The output of this command shows slot details on the controller. (host) # show slots Slots -----Slot Status ---- -----1 Present Card Type --------A2400 Command History This command was available in ArubaOS 3.
show snmp community show snmp community Description Displays the SNMP community string details. Syntax No parameters. Example The output of this command shows slot details on the controller. (host) # show snmp community SNMP COMMUNITIES ---------------COMMUNITY ACCESS --------- -----public READ_ONLY VERSION ------V1, V2c Command History This command was available in ArubaOS 3.
show snmp inform show snmp inform Description Displays the length of SNMP inform queue. Syntax No parameters. Example The output of this command shows slot details on the controller. (host) # show snmp inform stats Inform queue size is 100 SNMP INFORM STATS ----------------HOST PORT INFORMS-INQUEUE ---- ---- --------------- OVERFLOW -------- TOTAL INFORMS ------------- Command History This command was available in ArubaOS 3.
show snmp trap-host show snmp trap-host Description Displays the configured SNMP trap hosts. Syntax No parameters. Example The output of this command shows details of a SNMP trap host. (host) # show snmp trap-hosts SNMP TRAP HOSTS --------------HOST VERSION ---------10.16.14.1 SNMPv2c SECURITY NAME ------------public PORT ---162 TYPE ---Trap TIMEOUT ------N/A RETRY ----N/A Command History This command was available in ArubaOS 3.
show snmp trap-list show snmp trap-list Description Displays the list of SNMP traps. Syntax No parameters. Example The output of this command shows the list of SNMP traps and the status.
show snmp trap-queue show snmp trap-queue Description Displays the list of SNMP traps in queue. Syntax No parameters. Example The output of this command shows the list of SNMP traps sent to host. (host) # show snmp trap-queue 2009-04-29 00:47:40 An AP/AM 00:0b:86:cd:cc:14, radio 2 at Location 00:0b:86:cd:cc:14 and channel 1, detected an interfering access point (BSSID 00:e0:fc:18:b5:35, SSID WA1003A). More information can be obtained from http://10.16.15.1/screens/wmsi/reports.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show snmp user-table show snmp user-table [user auth-prot [sha | md5] priv-prot [aes | des] ] Description Displays the list of SNMP user profile for a specified username. Syntax Parameter Description auth-prot Authentication protocol for the user, either HMAC-MD5-98 Digest Authentication Protocol (MD5) or HMAC-SHA-98 Digest Authentication Protocol (SHA), and the password for use with the designated protocol.
show spanning-tree show spanning-tree Description View the RSTP and PVST+ configuration.
Timers: hello 0, notification 0 Last topology change: 2 days, 0 hours, 31 mins, 21 secs Command History Release Modification ArubaOS 6.0 PVST+ added ArubaOS 3.4 Upgraded STP to RSTP with full backward compatibility. Command Information Platform Licensing Command Mode All platforms Base operating system Enable mode and Configuration mode (config) on master controllers 1270 | show spanning-tree Dell PowerConnect W-Series ArubaOS 6.
show spantree show spantree | | | | Description View the global RSTP and PVST+ topology. Syntax Parameter Description blocking View the spanning tree ports in the Blocking state. enable View the spanning tree ports in the Enable state. forwarding View the spanning tree ports in the Forwarding state. off View the ports with spanning tree disabled vlan View the spanning tree instance for the VLAN.
-------------------------------------Port State Cost Prio PortFast ----------- ---- -------FE 1/3 Discarding 0 128 Disable FE 1/1 Forwarding 4 128 Disable P-to-P -----Enable Enable Role ---Disabled Designated Command History Release Modification ArubaOS 6.0 PVST+ added ArubaOS 3.4 Upgraded STP to RSTP with full backward compatibility.
show ssh show ssh Description Displays the SSH configuration details. Syntax No parameters. Example The output of this command shows SSH configuration details. (host) # show ssh SSH Settings: ------------DSA Mgmt User Authentication Method Enabled username/password Command History This command was available in ArubaOS 3.
show startup-config show startup-config Description Displays the configuration which will be used the next time the controller is rebooted. It contains all the options last saved using the write memory command. Any unsaved changes are not included. Syntax No parameters. Example The output of this command shows slot details on the controller. (host) # show startup-config version 3.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show station-table show station-table [mac ] Description Displays the internal station table entries and also details of a station table entry. Syntax No parameters. Example The output of this command shows details of an entry in the station table. (host) # show station-table mac 00:1f:6c:7a:d4:fd Association Table ----------------BSSID --------------00:0b:86:6d:3e:30 IP ----------10.15.20.
show storage show storage Description Displays the storage information on the controller. Syntax No parameters. Example The output of this command shows the storage details on the controller. (host) # show storage Filesystem /dev/root none /dev/hda3 /dev/usb/flash3 /dev/usbdisk/2 /dev/usbdisk/1 Size 57.0M 70.0M 149.7M 1.5G 3.5G 3.9G Used Available Use% Mounted on 54.6M 2.3M 96% / 2.0M 68.0M 3% /tmp 9.3M 132.6M 7% /flash 168.6M 1.3G 12% /flash 71.4M 3.2G 2% /mnt/usbdisk/2 131.0M 3.
show switch ip show switch ip Description Displays the IP address of the controller and VLAN ID. Syntax No parameters. Example The output of this command shows the IP address and VLAN ID of the controller. (host) # show switch ip Switch IP Address: 10.16.15.1 Switch IP is from Vlan Interface: 1 Command History This command was available in ArubaOS 3.
show switch software show switch software Description Displays the details of the software running in the controller. Syntax No parameters. Example The output of this command shows the details of software running in the controller. (host) # show switch software Command History This command was available in ArubaOS 3.0 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show switches show switches [all | state {complete | incomplete | inprogress | required} | summary ] Description Displays the details of switches connected to the master controller, including the master controller itself. Syntax Parameter Description all List of all switches. state Configuration status of all switches. summary Status of all switches connected to the master. Example The output of this command shows that there is a single local controller connected to the master controller.
show switchinfo show switchinfo Description Displays the latest and complete summary of controller details including role, last configuration change, hostname, reason for last reboot. Syntax No parameters. Example The output of this command lists all controllers connected to the master controller including the master controller.
show syscontact show syscontact Description Displays the contact information for support. Syntax No parameters. Example The output of this command shows the contact information for technical support. (host) # show syscontact admin@mycompany.com Command History This command was available in ArubaOS 3.
show syslocation show syslocation Description Displays the location details of the controller. Syntax No parameters. Example The output of this command location of the controller. (host) # show syslocation Building 1, Floor 1 Command History This command was available in ArubaOS 3.1 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show tech-support show tech-support Description Displays all information about the controller required for technical support purposes. Syntax No parameters. Command History This command was available in ArubaOS 3.1 Command Information Platforms Licensing Command Mode All platforms Base operating system Config or Enable mode on master or local controllers 1284 | show tech-support Dell PowerConnect W-Series ArubaOS 6.
show telnet show telnet Description Displays the status of telnet access using the command line interface (CLI) or Serial over Ethernet (SOE) to the controller. Syntax No parameters. Example The output of this command shows the status of CLI and SOE access to the controller. (host) # show telnet telnet cli is enabled telnet soe is enabled Command History This command was available in ArubaOS 3.
show threshold show threshold all|controlpath-cpu|controlpath-memory|datapath-cpu| no-of-aps|no-of-locals|total-tunnel-capacity|user-capacity| Description This command shows controller capacity thresholds which, when exceeded, will trigger alerts. Syntax Parameter Description all Display all alert thresholds. controlpath-cpu Display the alert threshold for controlpath CPU capacity.
Usage Guidelines The controller will send a wlsxThresholdAbove SNMP trap and a syslog error message when the controller has exceeded a set percentage of the total capacity for that resource. A wlsxThresholdBelow SNMP trap and error message will be triggered if the resource usage drops below the threshold once again.
show threshold-limits show threshold-limits controlpath-memory|fan-speed|no-of-aps|no-of-locals|total-tunnel-capacity|user-capacity Description This command shows current values of the different resources monitored by the controller. Syntax Parameter Description controlpath-memory The output of this command displays the default memory threshold which, when exceeded, will trigger an alert, the current configured threshold, the total memory (in MB) and the currently available memory (in MB).
RESOURCE -------Datapath-Cpu Controlpath-Cpu Controlpath-Memory Total-Tunnel-Capacity Ap-Tunnel-Capacity User-Capacity No-of-APs No-of-locals THRESHOLD(%) -----------30 % 80 % 85 % 80 % 80 % 80 % 80 % 80 % Command History The command was introduced in ArubaOS 6.2. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show tpm cert-info show tpm cert-info Description Displays the TPM and Factory Certificate information on MIPS controllers (W-6000M3, W-3000 series, W-600 series, W-7200 series). Syntax No parameters. Usage Guidelines Use this command to verify that TPM and factory certificates are installed as expected. This command should be executed before enabling CPSec on MIPS controllers (W-6000M3, W-3000 series, W-600 series, W-7200 series). Example In the example below, the TPM and certificates are installed.
show trunk show trunk Description Displays the list of trunk ports on the controller. Syntax No parameters. Example The output of this command shows details of a trunk port. (host) # show trunk Trunk Port Table ----------------Port Vlans Allowed Vlan ------------------FE2/12 1,613,615-617,632-633,636-640,667-668 Vlans Active Native ------------ ------- 1,613,615-617,632-633,636-640,667-668 1 Command History This command was available in ArubaOS 3.
show tunneled-node show tunneled-node [state|database] Description Displays the state of the tunneled node and lists all tunneled nodes connected to the controller. Syntax No parameters. Example The output of this command shows the tunneled node state. (host) # show tunneled-node state Tunneled Node State --------IP MAC s/p state vlan tunnel inactive-time -- --- --- ----- ---- ------ ------------192.168.123.14 00:0b:86:40:32:40 1/23 complete 10 9 1 192.168.123.
show uplink crypto-local show uplink [config|{connection }|signal|{stats
show usb crypto-local show usb [cellular|ports|test|verbose] Description Display detailed USB device information. Syntax Parameter Description cellular Enter the keyword cellular to display cellular devices. ports Enter the keyword ports to display detailed TTY port information such as signal strength. test Enter the keyword test to test the USB TTY ports. NOTE: Testing an invalid modem port may cause the controller to “hang”. To resolve this, unplug and re-plug the modem.
Command Information Platforms Licensing Command Mode W-600 series and W-7200 series controllers Base operating system Config mode on master and local controllers Dell PowerConnect W-Series ArubaOS 6.
show user show user ap-group ap-name authentication-method dot1x|mac|opensystem|psk|stateful-dot1x|via-vpn|vpn|web[rows ] bssid rows devtype essid rows internal rows ip rows location b.f.
Parameter Description web Show data for devices using captive portal authentication. rows Displays the log output from the specified number of rows from the end of the log and the total number of rows to display. bssid Show user data for a specific device BSSID. devtype Show output for a specified device type, if identified. If the device name includes spaces, you must enclose it in quotation marks. essid Show user data for a specific ESSID.
----IP name ------------192.168.160.1 1263 10.100.105.100 wlan-qa-cage 10.100.105.102 2198 10.100.105.97 2198 10.100.105.109 1109 Users ----Roaming ------Associated Associated Associated Associated Associated MAC Name Role ------------ ------ ---- ---------- ---- 00:23:6c:80:3d:bc madisonl employee 01:05:50 802.1x 00:05:4e:45:5e:c8 CORP1NETWORKS employee 00:02:22 802.1x 00:14:a5:30:c2:7f pdedhia employee 01:20:09 802.1x 00:1b:77:c4:a2:fa CORP1NETWORKS employee 00:02:18 802.
Session Timeout from Radius: No, Session Timeout Value:0 Address is from DHCP: yes The role-how and vlan-how parameters in the output of this command display a code that corresponds to the following values: Role Derivation Code Description 0 Default logon role 1 Default user role for authentication type 2 Role derived from server rules 3 Role derived from user rules 4 Predefined Guest role 5 Role inherited from station 6 Forced role 7 Role derived from Dell vendor-specific attribute (VSA)
Release Modification ArubaOS 6.1 The devtype parameter was introduced, and the output of this command expanded to include the Type column. ArubaOS 6.1 The devtype parameter was introduced, and the output of this command expanded to include the Type column. ArubaOS 6.2 Output for IP address show if it is from DHCP. This command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Available in Enable and Config modes.
show user_session_count (deprecated) show user_session_count Description Show the number of users using an ESSID for different time intervals. Syntax No parameters Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 6.0 Command deprecated Dell PowerConnect W-Series ArubaOS 6.
show util_proc show util_proc guest-email counters Description Show counters for the guest email process. Syntax No parameters. Usage Guidelines As part of guest provisioning, the guest access email feature allows you to define the SMTP port and server that processes guest provisioning email. This server sends email to the guest or the sponsor when a guest user manually sends email from the Guest Provisioning page, or when a user creates a guest account.
show valid-network-oui-profile show valid-network-oui-profile Description This command displays the Valid Equipment OUI Profile table Syntax No parameters Usage Guidelines If you used the valid-networkoui-profile to add a new OUI to the controller, issue the show valid-network-oui-profile command to see a list of current OUIs.
show version show version Description Show the system software version. Syntax No parameters. Example (host) #show version Aruba Operating System Software. ArubaOS (MODEL: Dell PowerConnect W-650 Controller-US), Version 6.1.0.0 Website: http://www.dell.com Copyright (c) 2002-2011, Aruba Networks, Inc. Compiled on 2011-04-28 at 00:18:36 PDT (build 28106) by p4build ROM: System Bootstrap, Version CPBoot 1.0.0.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on local and master controllers Dell PowerConnect W-Series ArubaOS 6.
show via show via version websessions Description Displays VIA version and web session details. Syntax Parameter Description Range Default version Displays the version of VIA client available on the controller. — — websessions Displays the list of users connected to the VIA controller using the VIA client. — — Example The following example displays the version of VIA client available on the controller.
show vlan-bwcontract-explist show vlan-bwcontract-explist [internal] Description Show entries in the VLAN bandwidth contracts MAC exception lists. Syntax Parameter Description internal Include the optional internal parameter to display the MAC addresses in the internal, preconfigured VLAN bandwidth contracts MAC exception list. Example The following command displays the MAC addresses in the internal MAC exception list.
show vlan show vlan Description This command shows a configured VLAN interface number, description and associated ports. Syntax Parameter Description Range Default Identification number for the VLAN. 1-4094 1 Usage Guidelines Issue this command to show the selected VLAN configuration. The VLAN column lists the VLAN ID. The Description column provides the VLAN name or number and the Ports column shows the VLAN’s associated ports.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable or config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show vlan mapping show vlan mapping Description This command shows a configured VLAN name, its pool status, assignment type and the VLAN IDs assigned to the pool. Syntax Parameter Description Range Default Identification number for the VLAN. 1-4094 1 Usage Guidelines Issue this command to show the selected VLAN configuration. The VLANName column displays the name of the VLAN pool. The Pool Status column indicates if the pool is enabled or disabled.
show vlan status show vlan status Description This command shows the current status of all VLANs on the controller. Syntax No parameters. Usage Guidelines Issue this command to show the status of VLANs on the controller. The VLANID column displays the VLAN ID name or number. The IP Address column provides the VLAN’s IP address. The Adminstate column indicates if the VLAN is enabled or disabled. The Operstate column indicates if the VLAN is currently up and running.
show vlan summary show vlan summary Description This command shows the number of existing VLANs. Syntax Parameter Description Number of existing VLANs The number of existing VLANs on the controller. Usage Guidelines Issue this command to show the number of existing VLANs on the controller. (host) #show vlan summary Number of existing VLANs :13 Related Commands (host) (config) #vlan (host) (config) #vlan-name Command History This command was introduced in ArubaOS 3.0.
show voice call-cdrs show voice call-cdrs [bssid | cid | count | detail | essid | extn | ip | proto {sip | svp | noe | sccp | vocera | h323} | rtpa | sta ] Description Displays detailed call records of voice client. Syntax Parameter Description bssid Filter records based on BSSID of voice clients. cid View the detailed records filtered on the CDR Id. count Specify the number of records to be displayed by entering a number.
------ ------------------- ----------- ---------------------- --------------NA 10.15.20.74 6202 sip 13:39:09 82 G729 legap AP-65-2 NA 10.15.20.75 6203 sip 13:39:08 65 G729 NA NA 56 10.15.20.74 6202 sip 13:20:03 60 Terminated G729 legap AP-65-2 55 10.15.20.75 6203 sip 13:20:03 61 Terminated G729 legap AP-65-2 54 10.15.20.
show voice call-counters show voice call-counters Description Displays outgoing, incoming and terminated call counter details. The total calls equals the sum of the calls originated and terminated. It also equals the sum of the active, success, failed, blocked, aborted, and forwarded calls. Syntax No parameters. Example The output of this command shows call counter statitics.
show voice call-density show voice call-density [bssid | essid | extn | ip | proto ] Description Displays call density report for voice calls. Syntax Parameter Description bssid Filter records based on BSSID of voice clients. essid Filter records based on ESSID of voice clients. extn Filter records based on the extension of a voice client. ip Filter records based on the IP address of an AP.
Command History Version Description ArubaOS 3.0 Command introduced. Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show voice call-perf show voice call-perf [bssid | essid | extn | ip | proto Description Displays the performance of voice calls of all clients connected to the controller. You can filter the report based on BSSID, ESSID, extension, IP address or the VOIP protocol type. Syntax Parameter Description bssid Filter records based on BSSID of voice clients. essid Filter records based on ESSID of voice clients.
Command History Version Description ArubaOS 3.3.1 Command introduced. Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show voice call-quality show voice call-quality [bssid | essid | extn | ip | proto | rtpa | sta Description Displays voice call quality for each call over a period of time. Syntax Parameter Description bssid Filter records based on BSSID of voice clients. essid Filter records based on ESSID of voice clients. extn Filter records based on the extension of a voice client.
10.100.1.10 00:11:22:33:bc:bd 3015 100 G711 103.528 6.056 voice-a Num Records:4 sccp 4.622 Jan 31 14:58:58 80 GREEN IC 3042 00:0b:86:5c:d6:08 nkrtp Command History Version Description ArubaOS 3.3.1 Command introduced. ArubaOS 6.0 The rtpa and sta parameters were introduced. Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show voice call-stats show voice call-stats [bssid | cip | essid | extn | ip | proto | sta ] Description Displays voice call statistics for each client. Syntax Parameter Description bssid Filter records based on BSSID of a voice client. cip Filter records based on a client’s IP address. essid Filter records based on ESSID of a voice client. extn Filter records based on the extension of a voice client.
Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show voice client-status show voice client-status [active-only | bssid | essid | extn | ip | proto | sta ] Description Displays list of voice clients and their status. You can also view details of a specifc voice client. Syntax Parameter Description active-only Filter records based on active voice clients bssid Filter records based on BSSID of a voice client. essid Filter records based on ESSID of a voice client.
Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show voice configurations show voice configurations Description Displays the details of the voice related configurations on your controller. Syntax No parameters. Example The output of this command shows details about all voice configurations on a controller.
-----------default ---------------------------Disabled SIP settings ------------s Parameter --------Session Timer Session Expiry Dialplan Profile Value ----Disabled 300 sec N/A Voice rtcp-inactivity:disable Voice sip-midcall-req-timeout:disable Command History Version Description ArubaOS 6.0 Command introduced.
show voice dialplan-profile show voice dialplan-profile Description Displays list of SIP voice dialplan. You can also specify a dialplan to view configuration. Syntax No parameter. Example The output of this command shows list of all dialplans and the configuration of long distance dialplan.
show voice logging show voice logging Description Displays the MAC address of the voice client that has logging enabled. Syntax No parameters. Example The output of this command shows the MAC address of the voice client that has logging enabled. (host) #show voice logging VoIP Logging -----------Parameter --------Client's MAC Address for Logging Value ----11:22:33:44:55:67 Command History Version Description ArubaOS 6.0 Command introduced.
show voice msg-stats show voice msg-stats [sccp { bssid | cip | essid | ip | sta } ] [sip { bssid | cip | essid | ip | sta } ] Description Displays voice message counters for each call using either the SCCP or SIP protocol. Syntax Parameter Description bssid Filter records based on BSSID of a voice client. cip Filter records based on a client’s IP address.
Command History Version Description ArubaOS 3.3.1 Command introduced. Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show voice real-time-analysis show voice real-time-analysis [sta ] Description Displays the call quality parameters based on the call quality analysis on the RTP media streams for voice calls. Syntax Parameter Description sta View the detailed Real Time Call Quality analysis report for a voice client based on the MAC address. You can also view the average call quality values for all the clients without passing the MAC address.
show voice real-time-analysis-config show voice real-time-analysis-config Description Displays the status of Real Time Call Quality Analysis configuration. Syntax No parameters. Example The output of this command shows the status of Real Time Call Quality Analysis configuration on a controller. (host) #show voice real-time-config Configure Real-Time Analysis ---------------------------Parameter --------Real-Time Analysis of voice calls Value ----Enabled Command History Version Description ArubaOS 6.
show voice rtcp-inactivity show voice rtcp-inactivity Description Displays the status of RTCP protocol. Syntax No parameters. Example The output of this command shows the status of RTCP protocol. (host) #show voice rtcp-inactivity Voice rtcp-inactivity:disable Command History Version Description ArubaOS 3.3.1 Command introduced.
show voice sip show voice sip Description Displays the SIP settings on the controller. Syntax No parameters. Example The output of this command shows the SIP settings on a controller. (host) #show voice sip SIP settings ------------s Parameter --------Session Timer Session Expiry Dialplan Profile Value ----Enabled 300 sec N/A Command History Version Description ArubaOS 6.0 Command introduced.
show voice sip-midcall-req-timeout show voice sip-midcall-req-timeout Description Displays the status of the SIP mid-call request timeout configuration on the controller. Syntax No parameters. Example The output of this command shows the status of the SIP mid-call request timeout configuration on a controller. (host) #show voice sip-midcall-req-timeouts Voice sip-midcall-req-timeout:disable Command History Version Description ArubaOS 6.0 Command introduced.
show voice statistics show voice statistics [ cac | sip-dialplan-hits | tspec-enforcement ] Description Displays the CAC, UDP SIP dial plan hits, and TSPEC enforced voice statistics. Syntax Parameter Description cac Displays the dropped SIP Invites and SIP Status Code for both server and the client side. Note: This filter supports only the SIP protocol and will work only if CAC is enabled for the parameters. sip-dialplan-hits Displays the statistics of SIP dialplan hits.
show voice trace show voice trace [ sccp {count | ip | mac } ] [ sip {count | ip | mac } ] Description Displays the signalling message trace details for all clients. Syntax Parameter Description count View the specified number of the latest SIP or SCCP voice client messages. Specify an integer value. ip Specify the IP address of a client to display its SIP or SCCP voice client messages.
Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config or Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show vpdn l2tp configuration show vpdn l2tp configuration Description Displays the VPN L2TP tunnel configuration. Syntax No parameters. Example The output of this command shows the L2TP tunnel configuration. (host) # show vpdn l2tp configuration Enabled Hello timeout: 30 seconds DNS primary server: 10.16.15.1 DNS secondary server: 10.16.14.1 WINS primary server: 0.0.0.0 WINS secondary server: 0.0.0.0 PPP client authentication methods: PAP IP LOCAL POOLS: vpnpool: 10.16.15.150 - 10.16.15.
show vpdn pptp configuration show vpdn pptp configuration Description Displays the PPTP configuration on the controller. Syntax No parameters. Example The output of this command shows the L2TP tunnel configuration. (host) # show vpdn pptp configuration Enabled Hello timeout: 30 seconds DNS primary server: 10.15.1.1 DNS secondary server: 10.15.1.200 WINS primary server: 0.0.0.0 WINS secondary server: 0.0.0.
show vpdn pptp local pool show vpdn pptp local pool Description Displays the IP address pool for VPN users using Point-to-Point Tunneling Protocol. Syntax No parameters. Example The output of this command shows the all IP address pools for VPN users. (host) # show vpdn pptp local pool IP addresses used in pool localgroup 0 IPs used - 11 IPs free - 11 IPs configured Command History This command was available in ArubaOS 3.
show vpn-dialer show vpn-dialer Description Displays the VPN dialer configuration for users using VPN dialers. Syntax No parameters. Example The output of this command shows the VPN dialer configuration for remote Users.
show vrrp show vrrp Description Displays the list of all VRRP configuration on the controller. To view a specific VRRP configuration, specify the VRID number. Syntax No parameters. Example The output of this command shows the VRRP configuration enabled in one of the floors of the building. (host) # show vrrp Virtual Router 2: Description Floor-1 Settings Admin State DOWN, VR State INIT IP Address 10.15.1.
show web-server show web-server Description Displays the configuration of the controller’s web server. Syntax No parameters. Example The output of this command shows the web-server configuration.
show whitelist-db cpsec show whitelist-db cpsec [mac-address ] Description Display the campus AP whitelist for campus APs using the control plane security feature. Syntax Parameter Description mac-address MAC address of the campus AP you want to enter into the cpsec whitelist database. Usage Guidelines Use this command to display the contents of the control plane security whitelist.
Parameter Description l l l l l approved-ready-for-cert: AP is valid, but is waiting to receive a certificate. certified-factory-cert: AP has an approved factory-installed certificate certified-controller-cert: AP has an approved certificate from the controller. certified-hold-factory-cert: An AP is put in this state when the controller thinks the AP has been certified with a factory certificate yet the AP requests to be certified again.
show whitelist-db cpsec-local-switch-list show whitelist-db cpsec-local-switch-list [mac-address ] Description Display the list of local controllers with APs using the control plane security feature. Syntax Parameter Description mac-address MAC address of the local controller whose data you want to view.
Parameter Description master controller. Remote Sequence Number The number of times that the master controller has received and acknowledged a campus AP whitelist change from the local controller in the whitelist. In the example above, the master controller received and acknowledged a single campus AP whitelist change from the local controller with the MAC address 00:0b:86:51:a5:4c.
show whitelist-db cpsec-master-switch-list show cpsec-master-ctlr-list-db cpsec show whitelist-db cpsec-master-switch-list [mac-address ] Description Display the master switch list whitelist on local controllers with APs using the control plane security feature. Syntax Parameter Description mac-address MAC address of the master controller.
Parameter Description Number AP whitelist change from the master controller in the whitelist. In the example above, the local controller received and acknowledged three campus AP whitelist updates from the master controller. Null Update Count The number of times the controller has checked its control plane security whitelist and found nothing to synchronize with the master controller.
show whitelist-db cpsec-seq show whitelist-db cpsec-seq Description Display the current sequence number for the master or local controller whitelists. Syntax No Parameters Usage Guidelines The current sequence number in the Sequence Number Details table shows the number of changes to the campus AP whitelist made on this controller. Each controller compares its campus AP whitelist against whitelists on other controllers every two minutes.
Related Commands Command Description Mode whitelist-db cpsec add mac-address Configure the campus AP whitelist for the control plane security feature. Config mode Command History This command was introduced in ArubaOS 5.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show whitelist-db cpsec-status show whitelist-db cpsec-status Description Display aggregate status information APs in the campus AP whitelist. Syntax No parameters.
Related Commands Command Description Mode show whitelist-db cpsec Display the campus AP whitelist for campus APs using the control plane security feature. Config mode Command History This command was introduced in ArubaOS 5.0. Command Information Platforms Licensing Command Mode All platforms Base operating system. Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
show wlan bcn-rpt-req-profile show wlan bcn-rpt-req-profile Description Shows configuration and other information about the parameters for the Beacon Report Request frames. Syntax Parameter Description Name of a WLAN advertisement profile. Usage Guidelines Issue this command without the parameter to display the entire Beacon Report Request profile list, including profile status and the number of references to each profile.
Parameter Description Interface Specifies the Radio interface for transmitting the Beacon Report Request frame. It can have a value of either 0 or 1. Regulatory Class Specifies the Regulatory Class field in the Beacon Report Request frame. Channel Specifies the Channel field in the Beacon Report Request frame. Randomization Interval Specifies the Randomization Interval field in the Beacon Report Request frame.
show wlan dot11k-profile show wlan dot11k-profile [] Description Show a list of all 802.11k profiles, or display detailed configuration information for a specific 802.11k profile. Syntax Parameter Description Name of an 802.11k profile. Usage Guidelines Issue this command without the parameter to display the 802.11k profile list, including profile status and the number of references to each profile.
Parameter Description Advertise 802.11K Capability Shows if the profile has enabled or disabled the 802.11K feature. Forcefully disassociate on-hook voice clients If enabled, the AP may forcefully disassociate clients that reach the maximum CAC peak capacity or call handoff reservation.
show wlan edca-parameters-profile show wlan edca-parameters-profile ap|station [] Description Display an Enhanced Distributed Channel Access (EDCA) profile for APs or for clients (stations). EDCA profiles are specific either to APs or clients. Syntax Parameter Description Name of a EDCA Parameters profile.
Parameter Description AC Name of an Access channel queue (Best-effort, Background, Video or Voice). ECWmin The exponential (n) value of the minimum contention window size, as expressed by 2n-1. A value of 4 computes to 24-1 = 15. ECWmax The exponential (n) value of the maximum contention window size, as expressed by 2n-1. A value of 4 computes to 24-1 = 15. AIFSN Arbitrary inter-frame space number. TXOP Transmission opportunity, in units of 32 microseconds.
Parameter Description Enable Handover Trigger feature Shows if the handoff trigger feature is enabled of disabled. If enabled, the controller will initiate the handover of a voice client (for example: dual mode handsets) roaming at the edge of Wi-Fi coverage to an alternate carrier or connection. The handover trigger is initiated if the Wi-Fi signal strength reported by the voice client (received from all APs) is equal to or less than the threshold value.
show wlan ht-ssid-profile show wlan ht-ssid-profile [] Description Show a list of all High-throughput SSID profiles, or display detailed configuration information for a specific Highthroughput SSID profile. Syntax Parameter Description Name of a High-throughput SSID profile. Usage Guidelines Issue this command without the parameter to display the entire High-throughput SSID profile list, including profile status and the number of references to each profile.
Supported MCS set 0-23 . The output of this command includes the following data columns: Parameter Description 40 MHz channel usage Shows if the profile enables or disables the use of 40 MHz channels. BA AMSDU Enable Shows of the AP has enabled or disabled the ability to receive AMSDU in BA negotiation. High throughput enable (SSID) Shows if the profile enables or disables high-throughput (802.11n) features. Legacy stations Allow or disallow associations from legacy (non-HT) stations.
Command History Version Description ArubaOS 3.3 Command introduced ArubaOS 3.3.1 The Legacy Stations parameter was introduced ArubaOS 3.3.2 De-aggregation of MAC Service Data Units (A-MSDUs) was introduced ArubaOS 6.1 The following parameters were introduced: l Short guard interval in 20 MHz mode l Low-density Parity Check l Maximum number of spatial streams usable for STBC reception l Maximum number of spatial streams usable for STBC transmission The allow weak encryption parameter was deprecated.
show wlan ssid-profile show wlan ssid-profile [] Description Show a list of all SSID profiles, or display detailed configuration information for a specific SSID profile. Syntax Parameter Description Name of an SSID profile. Usage Guidelines Issue this command without the parameter to display the entire SSID profile list, including profile status and the number of references to each profile.
802.11a Transmit Rates 802.11g Basic Rates 802.
Parameter Description 802.11a Basic Rates List of supported 802.11a rates, in Mbps, that are advertised in beacon frames and probe responses. 802.11a Transmit Rates Set of 802.11a rates at which the AP is allowed to send data. 802.11g Basic Rates List of supported 802.11b/g rates, in Mbps, that are advertised in beacon frames and probe responses. 802.11g Transmit Rates Set of 802.11b/g rates at which the AP is allowed to send data.
Parameter Description Disable Probe Retry Shows if the profile enables or disables battery MAC level retries for probe response frames. Battery Boost If enabled, this feature converts multicast traffic to unicast before delivery to the client, thus allowing you to set a longer DTIM interval. WEP Key 1 Displays the Static WEP key associated with this key index. WEP Key 2 Displays the Static WEP key associated with this key index.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master or local controllers. 1370 | show wlan ssid-profile Dell PowerConnect W-Series ArubaOS 6.
show wlan traffic-management-profile show wlan traffic-management-profile [] Description Show a list of all traffic management profiles, or display detailed configuration information for a specific traffic management profile. Syntax Parameter Description Name of a Traffic Management profile. Usage Guidelines Issue this command without the parameter to display the entire Traffic Management profile list, including profile status and the number of references to each profile.
Parameter Description Report interval Number of minutes between bandwidth usage reports. Station Shaping Policy Shows which of three possible Station Shaping policies is configured on the profile. l default-access: Traffic shaping is disabled, and client performance is dependent on MAC contention resolution. This is the default traffic shaping setting. l fair-access: Each client gets the same airtime, regardless of client capability and capacity.
Examples (host) #show wlan tsm-req-profile default TSM Report Request Profile "default" -----------------------------------Parameter Value ------------Request Mode for TSM Report Request normal Number of repetitions 65535 Duration Mandatory Enabled Randomization Interval 0 Measurement Duration 25 Traffic ID 96 Bin 0 Range 200 The output of this command includes the following information: Parameter Description Request mode for TSM Report Request Shows the request mode for the Transmit Stream/Category Me
show wlan virtual-ap show wlan virtual-ap [] Description Show a list of all Virtual AP profiles, or display detailed configuration information for a specific Virtual AP profile. Syntax Parameter Description Name of a Virtual AP profile Usage Guidelines Issue this command without the parameter to display the entire Virtual AP profile list, including profile status and the number of references to each profile.
Dynamic Multicast Optimization (DMO) Drop Broadcast and Multicast Convert Broadcast ARP requests to unicast Authentication Failure Blacklist Time Blacklist Time Deny inter user traffic Deny time range DoS Prevention HA Discovery on-association Mobile IP Preserve Client VLAN Remote-AP Operation Station Blacklisting Strict Compliance VLAN Mobility FDB Update on Assoc WMM Traffic Management Profile Threshold Disabled Enabled 3600 sec 3600 sec Disabled N/A Disabled Disabled Enabled Disabled standard Enabled D
Parameter Description phones. Steering Mode Band steering supports three different band steering modes. l Force-5GHz: When the AP is configured in force-5GHz band steering mode, the AP will try to force 5Ghz-capable APs to use that radio band. l Prefer-5GHz (Default): If you configure the AP to use prefer-5GHz band steering mode, the AP will try to steer the client to 5G band (if the client is 5G capable) but will let the client connect on the 2.4G band if the client persists in 2.
Parameter Description the AP. This does not affect third-party APs. HA Discovery on-association If enabled, home agent discovery is triggered on client association instead of home agent discovery based on traffic from client. Mobility on association can speed up roaming and improve connectivity for clients that do not send many uplink packets to trigger mobility (VoIP clients).
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config mode on master or local controllers. 1378 | show wlan virtual-ap Dell PowerConnect W-Series ArubaOS 6.
show wlan voip-cac-profile show wlan voip-cac-profile [] Description Show a list of all VoIP Call Admission Control profiles, or display detailed configuration information for a specific VoIP Call Admission Control profile.
Parameter Description VoIP Call Admission Control Shows if the profile enables or disables WiFi VoIP Call Admission Control features. VoIP Bandwidth based CAC Shows the desired call admission control (CAC) Mechanism: Disable - CAC is based on Call Counts l Enable - CAC should be based on Bandwidth. l VoIP Call Capacity Number of simultaneous calls that can be handled by one radio. VoIP Bandwidth Capacity (kbps) The maximum bandwidth that can be handled by one radio, in kbps.
show wms ap show wms ap {}|list|{stats [mon-mac bssid } Description Display information for APs currently monitored by the ArubaOS Wireless Management System (WMS). Syntax Parameter Description Enter the AP’s BSSID number in hexadecimal format (XX:XX:XX:XX:XX:XX). list Show the AP Tree table for all APs. stats Show the AP Statistics table for all APs. mon-mac Show the AP Tree table for an AP with the specified MAC address.
Column Description BSSID Basic Service Set Identifier for the AP. This is usually the AP’s MAC address. SSID The Service Set Identifier that identifies a wireless network. Channel Channel used by the AP’s radio. Type A WMS AP type can be one of the following: soft-ap: an Dell Access Point (AP). l air-monitor: An Dell Air Monitor (AM).
00:0b:86:c1:af:20 00:0b:86:c1:be:56 00:0b:86:c1:be:56 00:0b:86:c2:0a:98 00:0b:86:c2:1c:08 00:0b:86:c2:1c:38 00:0b:86:c2:3e:a9 00:0b:86:c4:0f:3c 00:0b:86:c4:4d:06 00:1a:1e:c0:88:82 00:1a:1e:c0:88:82 00:1a:1e:c0:88:88 00:0b:86:9a:f2:08 00:0b:86:9b:e5:60 00:0b:86:9b:e5:68 00:0b:86:a0:a9:80 00:0b:86:a1:c0:80 00:0b:86:a1:c3:80 00:0b:86:a3:ea:90 00:0b:86:c0:f3:d0 00:0b:86:c4:d0:70 00:1a:1e:88:88:30 00:1a:1e:88:88:20 00:1a:1e:88:88:90 12 12 12 48 42 42 48 48 48 18 18 36 1560559 1683013 1580152 1608023 1587097 1
show wms channel show wms channel stats Description Display per-channel statistics for monitored APs. Syntax No parameters. Example This example shows per-channel statistics for monitored APs.
Column Description Channel 802.11 radio channel. NumAP Number of other APs seen on the specified channel. NumSta Number stations seen on the specified channel. TotalPkt Number of received packets. TotalByte Number of received bytes. Noise Current noise level. The output of this command includes the following information: Command History This command was introduced in ArubaOS 3.
show wms client show wms client |{list}|{probe }|{stats [mon-mac mac ]} Description Display a list of client information for the clients that can be seen by monitoring APs. Syntax Parameter Description Show statistics for a client with the specified MAC address, including the BSSID of the AP to which that client is currently associated, and the MAC addresses of other monitoring APs that can see that client. list Show statistics for all monitored clients.
Column Description MAC MAC address of the client Type Station type (valid, interfering, or disabled rogue client ) Status If up, the client is active. If down (or no information is shown) the client is inactive. ageout An ageout time is the time, in minutes, that the client must remain unseen by any probes before it is eliminated from the database. If this column displays a -1, the client has not yet aged out.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 1388 | show wms client Dell PowerConnect W-Series ArubaOS 6.
show wms counters show wms counters [debug|event] Description Show WMS event and debug counters. If you omit the optional debug and events parameters, the show wms counters command will display wms debug and events counters in a single table. Syntax Parameter Description debug Show show debug counters only events Show events counters only. If you omit the debug and events parameters, the show wms counters will display debug and events counters in a single table.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 1390 | show wms counters Dell PowerConnect W-Series ArubaOS 6.
show wms monitor-summary show wms channel stats Description Display the numbers of different AP and client types monitored over the last 5 minutes, 1 hour, and since the controller was last reset. Syntax No parameters. Usage Guidelines The WLAN management system (WMS) on the controller monitors wireless traffic to detect any new AP or wireless client station that tries to connect to the network.
Release Release entries were removed from the show command output, and the suspectedrogue, Manually Contained APs and Manually Contained Clients output entries were introduced. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 1392 | show wms monitor-summary Dell PowerConnect W-Series ArubaOS 6.
show wms probe show wms probe Description Display detailed information for a list of WMS probes. Syntax No parameters. Example This example shows the Probe List table for WMS probes. The output below has been split into two tables to better fit in this document. In the actual command-line interface, this information appears in a single, long table.
Column Description Updates Number of updates the AP or AM sent to the WMS database since the controller was last reset. Reqs/Fails Number of database update requests that have not yet been added into the database. and the number of failed database requests. Stats Total number of statistics updates sent to the database. Type A WMS AP type can be one of the following: l soft-ap: an Dell Access Point (AP). l air-monitor: An Dell Air Monitor (AM).
show wms rogue-ap show wms rogue-ap Description Display statistics for APs classified as rogues APs. Syntax Parameter Description MAC address of a rogue AP. Example The output of this command shows statistics for a suspected Rogue AP, including how it was classified as a suspected rogue.
Column Description SSID The rogue AP’s Extended service set identifier. Channel Channel used by a radio on the rogue AP. Type Indicates if the AP is an Dell AP, a Cisco AP, or an AP from any other manufacturer (generic AP). RAP Type Type of rogue AP, l Suspect-unsecure: AP has not been confirmed as a rogue AP. l unsecure: AP has been confirmed as a rogue AP Status Shows if the AP is active (up) or inactive (down). Match Type Describes how the AP was classified as a rogue.
Column Description The confidence level is capped at 100%. If your controller reboots, your suspected-rogue APs are not checked against any new rules that were configured after the reboot. Without this restriction, all the mechanisms that classified your APs as suspected-rogue may trigger again causing the confidence level to surpass their cap of 100%. You can explicitly mark an AP as “interfering” to trigger all new rules to match against it. l Command History Release Modification ArubaOS 3.
show wms routers show wms routers Description Show Learned Router Mac Information for WMS APs. Syntax Parameter Description MAC address of a probe that can see the router. Usage Guidelines This command displays the MAC addresses of devices that have been determined to be routers by the listed APs. This output of this command will be blank if there is not any broadcast/multicast activity in an AP's subnet.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show wms rules show wms rules config state summary Description Display the internal state and matching information of rules created using the ids ap-classification-rule change command. Syntax Parameter Description config Display the following information for each AP classification rule.
AP Classification Rules Summary ------------------------------Parameter Value ------------Num Rules 2 Num Active-Rules 0 Num SSID-to-match 0 Num SSID-to-exclude 0 Num SNR-bounds 0 Num Probe-Count-bounds 0 Command History This command was introduced in ArubaOS 6.1 Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
show wms system show wms system Description Show the WMS system configuration and system state. Syntax No parameters. Example This example shows the WMS System Configuration and System State tables.
Column Description Current Threshold Current number of table entries. Total AP Count Total number of statistics entries for monitored APs in the AP table. Total STA Count Total number of statistics entries for monitored stations in the Station table. MAX RB-tree Count Maximum number of entries allowed in the statistics. Total Tree Count Total number of entries currently in the statistics tree.
show wms wired-mac show wms wired-mac gw-mac [] monitored-ap-wm prop-eth-mac reg-ap-oui summary system-gw-mac system-wired-mac wireless-device} Description Display a summary table of Wireless Management System (wms) wired MAC information. This command can display a list of APs aware of a specific gateway MAC address, or list the wired MAC addresses known to a single AP. Syntax Column Description gw-mac Show Gateway Wired Mac Information Collected from the APs.
Column Description wireless-device Show Routers or potential wireless devices information, including the MAC address of the device, and the MAC address of the AP or controller that saw the device. Example This example shows the wired MAC summary.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 1406 | show wms wired-mac Dell PowerConnect W-Series ArubaOS 6.
show ip interface brief show ip interface brief Description View IP-related information on all interfaces in summary format. Syntax No parameters. Example (host) #show ip interface brief Interface vlan 1 vlan 2 loopback mgmt IP Address 172.16.0.254 10.4.62.9 unassigned unassigned / / / / / IP Netmask 255.255.255.0 255.255.255.0 unassigned unassigned Admin up up up down Protocol up up up down The following table details the columns and content in the show command.
shutdown shutdown all Description This command disables all interfaces on the controller. Usage Guidelines This command stops all traffic through the physical ports on the controller. The console port remains active. Use this command only when you have physical access to the controller, so that you can continue to manage using the console port. To shut down an individual interface, tunnel, or VLAN, use the shutdown option within the interface command. To restore the ports, use the no shutdown command.
snmp-server snmp-server community enable trap engine-id host version {1 udp-port }|2c|{3 } [inform] [interval ] [retrycount ] [udp-port ]} inform queue-length source stats trap enable|disable|{source } user [auth-prot {md5|sha} ] [priv-prot {AES|DES} ] Description This command configures SNMP parameters. Syntax Parameter Description Range Default community Sets the read-only community string.
Parameter Description Range Default The port number to which notification messages are sent. — 162 Configures an SNMPv3 user profile for the specified username. — — auth-prot Authentication protocol for the user, either HMAC-MD5-98 Digest Authentication Protocol (MD5) or HMAC-SHA-98 Digest Authentication Protocol (SHA), and the password for use with the designated protocol.
spanning-tree (Global Configuration) spanning-tree [forward-time | hello-time | max-age | priority | vlan range NOTE: RSTP is backward compatible with STP and is enabled by default. For ease of use, this command uses the spanning tree keyword. Description This command is the global configuration for the Rapid Spanning Tree Protocol (RSTP) and Per VLAN Spanning Tree (PVST+). See spanning-tree (Configuration Interface) for details on the RSTP (config-if) command.
spanning-tree forward-time 3 The following command sets the time the root bridge waits to transmit BPDUs to 4 seconds: spanning-tree hello-time 4 The following command sets the time the root bridge waits to receive a hello packet to 30 seconds: spanning-tree max-age 30 The following command sets the bridge priority to 10, making it more likely to become the root bridge: spanning-tree priority 10 The follow command sets a spanning-tree VLAN range spanning-tree vlan range 2-8,11 Command History Release
spanning-tree mode spanning-tree mode | Description Set the spanning tree mode to either Rapid Spanning Tree (802.1w) or PVST+ (Per VLAN Spanning Tree). Syntax Parameter Description rapid Set the spanning tree mode to RSTP (Rapid Spanning Tree Protocol). rapid-pvst Set the spanning tree mode to PVST+ (Per VLAN Spanning Tree protocol) Usage Guidelines Once the spanning tree mode is set, you can configure RSTP or PVST+. Command History Release Modification ArubaOS 6.
spanning-tree (Configuration Interface) spanning-tree cost point-to-point port-priority portfast vlan cost port-priority vlan range NOTE: RSTP is backward compatible with STP and is enabled by default. For clarity, this RSTP command uses the spanning tree keyword. Description Dell’s RSTP implementation interoperates with both PVST (Per VLAN Spanning Tree 802.1D) and Rapid-PVST (802.1w) implementation on industry-standard router/switches.
l Gigabitethernet IEEE 802.3—gigabitethernet l Port Channel ID—port-channel In addition to port state changes, RSTP introduces port roles for all the interfaces. RSTP (802.1w) Port Role Description Root The port that receives the best BPDU on a bridge. Designated The port can send the best BPDU on the segment to which it is connected. Alternate The port offers an alternate path, in the direction of root bridge, to that provided by bridge’s root port.
spanning-tree vlan range (PVST+) spanning-tree vlan range [forward-time | hello-time | max-age | priority ] Description Configure PVST+ on a range of VLANs. Syntax Parameter Description Range Default Enter a string representing the VLAN range -- -- forward-time Specifies the time, in seconds, the VLANs spends in the listening and learning state before transition to the forward state.
Command Information Platforms Licensing Command Mode All Platforms Base operating system Configuration Mode (config) Dell PowerConnect W-Series ArubaOS 6.
ssh ssh disable_dsa | mgmt-auth {public-key [username/password] | username/password [public-key]} Description This command configures SSH access to the controller. Syntax Parameter Description Default disable_dsa Disables DSA authentication for SSH. Only RSA authentication is used. — mgmt-auth Configures authentication method for the management user. You can specify username/password only, public key only, or both username/password and public key.
stm add-blacklist-client kick-off-sta purge-blacklist-clients remove-blacklist-client Description This command is used to manually disconnect a client from an AP or control the blacklisting of clients. Syntax Parameter Description add-blacklist-client MAC address of the client to be added to the denial of service list.
Command Information 1420 | stm Platforms Licensing Command Mode All platforms Base operating system Enable mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
support support Description This command, which should be used only in conjunction with Dell customer support, is for controller debugging purposes only. Syntax No parameters. Usage Guidelines This command is used by Dell customer support for debugging the controller. Do not use this command without the guidance of Dell customer support. Example The following command allows Dell customer support to debug the controller: (host) #support Command History Version Modification ArubaOS 2.
syscontact syscontact Description This command configures the name of the system contact for the controller. Syntax Parameter Description syscontact An alphanumeric string that specifies the name of the system contact. Usage Guidelines Use this command to enter the name of the person who acts as the system contact or administrator for the controller. You can use a combination of numbers, letters, characters, and spaces to create the name.
syslocation syslocation Description This command configures the name of the system location for the controller. Syntax Parameter Description syslocation An alphanumeric string that specifies the name of the system location. Usage Guidelines Use this command to indicate the location of the controller. You can use a combination of numbers, letters, characters, and spaces to create the name. To include a space in the name, use quotation marks to enclose the text string.
tar tar clean {crash|flash|logs}| crash | flash | logs [tech-support] Description This command archives a directory. Syntax Parameter Description clean Removes a tar file crash Removes crash.tar flash Removes flash.tar.gz logs Removes logs.tar crash Archives the crash directory to crash.tar. A crash directory must exist. flash Archives and compresses the /flash directory to flash.tar.gz. logs Archives the logs directory to log.tar. Optionally, technical support information can be included.
telnet telnet {cli|soe} Description Enable telnet to the controller or to an AP through the controller. Syntax Parameter Description Default cli Enable telnet using the CLI. Disabled soe Enable telnet using Serial over Ethernet (SoE). Disabled Usage Guidelines Use the cli option to enable telnet to the controller. Use the soe option to enable telnet using the SoE protocol. This allows you to remotely manage an AP directly connected to the controller.
threshold threshold controlpath-cpu controlpath-memory datapath-cpu no-of-APs no-of-locals total-tunnel-capacity user-capacity no ... Description This command configures controller capacity thresholds which, when exceeded, will trigger alerts. Syntax Parameter Description controlpath-cpu Set an alert threshold for controlpath CPU capacity.
Parameter Description user-capacity Set an alert threshold for the controller’s user capacity. The parameter is the percentage of the total resource capacity that must be exceeded before the alert is sent. The default threshold for this parameter is 80%. Usage Guidelines The controller will send a wlsxThresholdExceeded SNMP trap and a syslog error message when the controller has exceeded a set percentage of the total capacity for that resource.
time-range time-range absolute [end ]|[start ] time-range periodic Daily to Friday to Monday to Saturday to Sunday to Thursday to Tuesday to Wednesday to Weekday to Weekend to no ... Description This command configures time ranges. Syntax Parameter Description Name of this time range.
tracepath tracepath Description Traces the path of an IPv6 host. Syntax Parameter Description The IPv6 global address of the host. Usage Guidelines Use this command to identify points of failure in your IPv6 network. Example The following command traces the path of the specified IPv6 host. (host) #tracepath 2005:d81f:f9f0:1001::14 Command History The command was introduced in ArubaOS 6.1.
traceroute traceroute Description Trace the route to the specified IP address. Syntax Parameter Description The destination IP address. Usage Guidelines Use this command to identify points of failure in your network. Example The following command traces the route to the device identified by the IP address 10.1.2.3. (host) (config) #traceroute 10.1.2.3 Command History The command was introduced in ArubaOS 2.0.
trusted trusted all Description This command makes all physical interfaces on the controller trusted ports. Syntax Parameter Description all Makes all ports on the controller trusted. Usage Guidelines Trusted ports are typically connected to internal controlled networks. Untrusted ports connect to third-party APs, public areas, or any other network to which the controller should provide access control. When APs are attached directly to the controller, set the connecting port to be trusted.
tunnel-loop-prevention tunnel-loop-prevention Description This command prevents prevent forwarding loops between tunneled nodes on the controller. NOTE: The tunneled node loop prevention function appears on the WebUI as the “Enable Wired Access Concentrator Loop Prevention” option. It is located on the Configuration > Advanced Services > Wired Access > Wired Access Concentration Configuration pane Syntax No parameters. Usage Guidelines To prevent broadcast traffic being flooded on the tunneled nodes.
tunnel-node-mtu tunnel-node-mtu Description This command configures the MTU of a tunneled node. Syntax Parameter Description tnode-mtu Value of the MTU for the tunneled nodes Range - 1024 to 9216 Usage Guidelines A Dell controller can operate as a Wi-Fi controller, terminating GRE tunnels from tunneled node switches. As a Wi-Fi controller, the controller does not perform full Wi-Fi switching functions.
tunneled-node-address tunneled-node-address Description This command configures the IP address of a tunneled node server. Syntax Parameter Description tunneled-nodeaddress IP address of the controller. This is the loopback or IP address of the controller acting as a tunneled node controller. Usage Guidelines An Dellcontroller can operate as a Wi-Fi controller, terminating GRE tunnels from tunneled node switches.
uplink crypto-local uplink {cellular priority }|disable|enable|{wired priority }|{wired vlan } Description Manage and configure the uplink network connection on the W-600 seriescontrollers. Syntax Parameter Description Range cellular priority Set the priority of the cellular uplink. By default, the cellular uplink is a lower priority than the wired uplink; making the wired link the primary link and the cellular link the secondary or backup link.
usb-printer usb-printer [printer alias ] Description This command allows you to provide an alias to USB printers connected to W-650 series controllers. Syntax Parameter Description printer Enter the default printer name. To get the default printer name use the show networkprinter status command. alias Enter a new alias name for the printer.
usb reclassify crypto-local usb reclassify
Description Disconnect and reclassify an USB device. Syntax Parameter Description USB device address from the show usb command. Usage Guidelines There's no way to power off an USB port on the W-600 series controller, but you can re-initialize the device using the usb reclassify command. This command removes the modem from the USB device list, then detects it via the USB table. Command History Introduced in ArubaOS 3.4.user-role user-role access-list {eth|mac|session} [ap-group ] [position ] bw-contract [per-user] {downstream|upstream} captive-portal dialer max-sessions no ... pool {l2tp|pptp} reauthentication-interval session-acl [ap-group ] [position ]a stateful-ntlm vlan {VLAN ID|VLAN name} wispr Description This command configures a user role.
Parameter Description Range Default dialer If VPN is used as an access method, name of the VPN dialer configured with the vpn-dialer command. The user can login using captive portal and download the dialer. The dialer is a Windows application that configures the VPN client. — — max-sessions Maximum number of datapath sessions per user in this role. 0-65535 65535 no Negates any configured parameter.
Command History Version Modification ArubaOS 3.0 Command introduced ArubaOS 3.4.1 The stateful-ntlm and wispr parameters were introduced. ArubaOS 6.1 The ipv6 session-acl parameter was removed. The session-acl parameter is common for both IPv4 and IPv6 ACLs. Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license. Config mode on master controllers 1440 | user-role Dell PowerConnect W-Series ArubaOS 6.
valid-network-oui-profile valid-network-oui-profile no oui Description This command allows you to add a new OUI to the controller Syntax Parameter Description Range Default no Negates any configured parameter. — — oui The new OUI to be added. Use the aa:bb:cc format to input the new OUI. — — Usage Guidelines This command adds a new OUI to the controller. The new OUI must be entered in a aa:bb:cc format. Example The following command adds a new OUI to the controller.
vlan-bwcontract-explist vlan-bwcontract-explist mac Description Use this command to add entries to or remove entries from the MAC exception list for bandwidth contracts on broadcast/multicast traffic. Syntax Parameter Description MAC address of a protocol that should be added to or removed from the exception list for bandwidth contracts. Usage Guidelines Bandwidth contracts on a VLAN can limit broadcast and multicast traffic. ArubaOS version 6.
vlan-name vlan-name [pool|assignment {even|hash}] Description This command creates a named VLAN on the controller. It can be added to a pool and given an assignment type. Syntax Parameter Description Range 1–32 characters [pool] Sets the named VLAN to be a pool. — assignment Sets the assignment type. This determines how a VLAN assignment is handled by the controller. — even Sets the assignment type as even.
Command History Version Modification ArubaOS 3.0 Command introduced. ArubaOS 3.4 The pool parameter was introduced. ArubaOS 6.2 The assignment type parameter was introduced along with the even and hash options. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 1444 | vlan-name Dell PowerConnect W-Series ArubaOS 6.
vlan vlan [] |[ ]|[range ]|[wired aaa-profile ] Description This command creates a VLAN ID or a range of VLAN IDs on the controller. Syntax Parameter Description Range Default Identification number for the VLAN. 2-4094 1 Description of a VLAN ID. 1-32 characters; cannot begin with a numeric character VLAN000x, where x is the ID number. (Optional) Identification name of the VLAN.
Example The following command creates VLAN ID 27 with the description myvlan on the controller. (host) (config) #vlan 27 myvlan The following command associates the VLAN IDs 5, 12 and 100 with VLAN guestvlan on the controller. vlan guestvlan 5,12,100 The following command creates VLAN IDs 200-300, 302, 303-400.
voice dialplan-profile voice dialplan-profile clone dialplan { } no... Description This command allows you to create a dial plan profile and configure dial plans to the profile. Syntax Parameter Description Name of this instance of the dial plan profile. clone Name of the existing dial plan profile from which parameter values are copied. dialplan Configures a dialplan with the sequence, pattern, and action specified for the profile.
Command History Version Description ArubaOS 6.0 Command introduced. Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config mode on master controller 1448 | voice dialplan-profile Dell PowerConnect W-Series ArubaOS 6.
voice logging voice logging client mac no ... Description This command allows you to enable logging for a voice client. Syntax Parameter Description client mac MAC address of the voice client to be enabled for voice logging. Usage Guidelines You can enable voice logging for a specific voice client based on the MAC address of the client to troubleshoot any voice issues.
voice real-time-config voice real-time-config config-enable no... Description This command enables the controller to analyze the call quality of the voice calls based on the RTP media streams. Syntax Parameter Description Default config-enable Enables the controller to analyze the call quality of the voice calls based on the RTP media streams.
voice rtcp-inactivity voice rtcp-inactivity {enable | disable} Description This command enables or diables the RTCP inactivity timer. Syntax Parameter Description enable Enables the RTCP inactivity timer. disable Disables the RTCP inactivity timer. Usage Guidelines You can enable the RTCP inactivity timer to clear a voip session if an on-hold client moves out of the coverage area.
voice sip voice sip dialplan-profile no... session-expiry session-timer Description This command allows you to enable SIP session timer and associate a dial plan profile to the SIP ALG. Syntax Parameter Description Default dial-plan profile Name of the existing Dial plan profile to be associated to the SIP ALG. _ session-expiry Timeout value in seconds for the session timer. The range is 240 - 1200 seconds.
Command Information Platforms Licensing Command Mode All platforms This command requires the PEFNG license Config mode on master controller Dell PowerConnect W-Series ArubaOS 6.
voice sip-midcall-req-timeout voice sip-midcall-req-timeout {enable | disable} Description This command enables or diables the SIP mid-call request timer. Syntax Parameter Description enable Enables the SIP mid-call request timer. disable Disables the timer. Usage Guidelines You can enable the SIP mid-call request timer on the controller to clear the voip session if there is no response to a SIP mid-call request.
voice test voice test force_send_delts sta tid Description This command allows a user to manually send Delete Traffic Stream (DELTS) management frames. Syntax Parameter Description The MAC address of the client station to which the DELTS are sent The traffic stream id. The valid range for this parameter is 0 to 7. If the traffic stream ID is not specified and there are multiple live traffic streams, multiple DELTS will be sent out to the station.
vpdn group l2tp vpdn group l2tp client configuration {dns|wins} [] disable|enable l2tp tunnel hello no ... ppp authentication {CACHE-SECURID|CHAP|EAP|MSCHAP|MSCHAPv2|PAP} ppp securid cache Description This command configures an L2TP/IPsec VPN connection. Syntax Parameter Description Range Default client configuration Configures parameters for the remote clients. — — dns Configures a primary and optional secondary DNS server.
Usage Guidelines L2TP/IPsec relies on the PPP connection process to perform user authentication and protocol configuration. You specify the protocol used for PPP authentication and whether SecureID tokens are cached on the controller. Client addresses are assigned from a pool configured with the ip local pool command. Example The following command configures virtual private dial-in networking: (host) (coinfig) #vpdn group l2tp ppp authentication PAP client configuration dns 10.1.1.
vpdn group pptp vpdn group pptp client configuration {dns|wins} [] disable|enable no ... ppp authentication {MSCHAP|MSCHAPv2} pptp echo Description This command configures a PPTP VPN connection. Syntax Parameter Description Range Default client configuration Configures parameters for the remote clients. — — dns Configures a primary and optional secondary DNS server. — — wins Configures a primary and optional secondary WINS server.
Command History The command was introduced in ArubaOS 3.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
vpn-dialer vpn-dialer enable dnetclear|l2tp|pptp|securid_newpinmode|wirednowifi ike {authentication {pre-share |rsa-sig}|encryption {3des|des}| group {1|2}|hash {md5|sha}|lifetime []} ipsec {encryption {esp-3des|esp-des}|hash {esp-md5-hmac|esp-sha-hmac}| lifetime []|pfs {group1|group2}} no {enable...|ipsec...|ppp...} ppp authentication {cache-securid|chap|mschap|mschapv2|pap} Description This command configures the VPN dialer.
Parameter Description Range Default ipsec Configures IPsec. This configuration must match the IPsec parameters configured with the crypto dynamicmap and crypto ipsec commands on the controller. — — encryption Specifies the encryption type for IPsec, either DES or 3DES. esp-3des | esp-des esp-3des hash Specifies the hash algorithm used by IPsec, either MD5 or SHA. esp-md5hmac | espsha- hmac esp-shahmac lifetime Specifies how long an IPsec security association lasts, in seconds.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 1462 | vpn-dialer Dell PowerConnect W-Series ArubaOS 6.
vrrp vrrp advertise authentication description ip address no... preempt priority shutdown tracking interface {fastethernet /|gigabitethernet /} {sub } tracking master-up-time add tracking vlan {sub } tracking vrrp-master-state add vlan Description This command configures the Virtual Router Redundancy Protocol (VRRP).
Parameter Description Range Default same IP address on each member of the redundant pair. This IP address will be redundant - it will be active on the VRRP master, and will become active on the VRRP backup in the event that the VRRP master fails. The IP address must be unique; the IP address cannot be the loopback address of the controller. Only IPv4 address formats are supported. 1464 | vrrp no Negates all configured VRRP parameters.
Parameter Description Range Default up again, the value is restored to the previous priority level. The combined priority and tracking vales cannot exceed 255. If the priority value exceeds 255, the controller displays an error message. tracking master-up-time duration Monitors how long the controller has been master for the VRRP instance. 0-1440 minutes — tracking master-up-time add Instructs the controller to add the specified value to the existing priority level.
To change the existing password or description, enter the command with a different string. The new password or description takes affect immediately. To unconfigure the existing password or description, enter ““ at the prompt. If you update the password on one controller, you must update the password on the redundant member pair. Interface Tracking You can track multiple VRRP instances to prevent asymmetric routing and dynamically change the VRRP master to adapt to changes in the network.
If VLAN 20 goes down, VRRP 20 automatically fails over, VRRP 10 and VRRP 30 would drop their priority to 95, causing a failover to the backup controller. Once VLAN 20 comes back up, the primary controller restores the VRRP priority to 105 for all VRRP IDs and resumes the master VRRP role. Command History Version Modification ArubaOS 1.0 Command introduced ArubaOS 3.3 The tracking interface and tracking vlan parameters were introduced. ArubaOS 3.3.
web-server web-server captive-portal-cert ciphers {high|low|medium} mgmt-auth [certificate] [username/password] no ... ssl-protocol [sslv2] [sslv3] [tlsvl] session-timeout switch-cert web-max-clients Description This command configures the controller’s web server. Syntax Parameter Description Range Default captive-portal-cert Name of the server certificate associated with captive portal.
Usage Guidelines There is a default server certificate installed in the controller, however this certificate does not guarantee security in production networks. Best practices are to replace the default certificate with a custom certificate issued for your site by a trusted Certificate Authority (CA).
whitelist-db cpsec add whitelist-db cpsec add mac-address state {approved-ready-for-cert|certified-factory-cert} cert-type {switch-cert|factorycert} [description ] Description Add an AP entry to the campus AP whitelist. Syntax Parameter Description mac-address MAC address of the AP you want to enter into the cpsec whitelist database.
Command History Version Modification ArubaOS 5.0 Command introduced ArubaOS 6.0 The controller-cert parameter was modified to switch-cert. Command Information Platforms Licensing Command Mode All platforms Base operating system. Config mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
whitelist-db cpsec delete whitelist-db cpsec delete mac-address Description Remove an individual AP entry to the campus AP whitelist. Syntax Parameter Description mac-address MAC address of the AP you want to remove from the campus AP whitelist. Usage Guidelines Use this command to remove an individual whitelist entries for an AP that has been either removed from the network, or is no longer a candidate for automatic certificate provisioning.
whitelist-db cpsec-local-switch-list whitelist-db cpsec-local-switch-list del mac-address purge Description Delete a local controller from the local switch whitelist. Syntax Parameter Description del mac-address Remove a single controller from the local switch whitelist.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 1474 | whitelist-db cpsec-local-switch-list Dell PowerConnect W-Series ArubaOS 6.
whitelist-db cpsec-master-switch-list whitelist-db cpsec-master-switch-list del mac-address purge Description Delete a master controller from the master switch whitelist. Syntax Parameter Description del mac-address Remove a single master controller from the master switch whitelist.
Command Information Platforms Licensing Command Mode All platforms Base operating system. Config mode on local controllers 1476 | whitelist-db cpsec-master-switch-list Dell PowerConnect W-Series ArubaOS 6.
whitelist-db cpsec modify whitelist-db cpsec modify mac-address cert-type switch-cert|factory-cert description mode disable|enable revoke-text state approved-ready-for-cert|certified-factory-cert Description Modify an existing entry in the campus AP whitelist. Syntax Parameter Description mac-address MAC address of the AP you want to enter into the cpsec whitelist database. cert-type Identify the type of certificate to be used by the AP.
Command History Version Modification ArubaOS 5.0 Command introduced ArubaOS 6.0 The controller-cert parameter was modified to switch-cert. Command Information Platforms Licensing Command Mode All platforms Base operating system. Config mode on master or local controllers 1478 | whitelist-db cpsec modify Dell PowerConnect W-Series ArubaOS 6.
whitelist-db cpsec purge whitelist-db cpsec purge Description Clear the campus AP whitelist. Syntax No parameters. Usage Guidelines Use this command to clear all entries in the entire campus AP whitelist. If your network includes both master and local controllers, then each campus AP whitelist is synchronized across all controllers. If you purge the entire campus AP whitelist on one controller, that action will clear the campus AP whitelist on every controller in the network.
whitelist-db cpsec revoke whitelist-db cpsec revoke mac-address revoke-text Description Revoke a certificate from an AP in the campus AP whitelist. Syntax Parameter Description mac-address MAC address of the AP you want to remove from the cpsec whitelist database. revoke-text A brief description why the AP’s certificate was revoked, up to 64 alphanumeric characters.
whoami whoami Description This command displays information about the current user logged into the controller. Syntax No parameters. Usage Guidelines Example The following command displays information about the user logged into the controller: (host) #whoami Command History This command was available in ArubaOS 1.0.
Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters. — “default” channel This option is used to set the Channel field in the Beacon Report Request frame.
Parameter Description Range Default request-info This option is used to indicate the contents of the Request Information IE that could be present in the Beacon Report Request frame. The Request Information IE is present for all Measurement Modes except the 'Beacon Table' mode. It consists of a list of Element IDs that should be included by the client in the response frame. Any valid element ID in the x/y/z format. For example, 0/21/22.
wlan client-wlan-profile wlan client-wlan-profile auth-as-computer auth-as-guest clone eap-cert eap-cert-connect-only-to eap-peap eap-peap-connect-only-to eap-type enable-8021x ieap-cert-connect-only inner-eap inner-eap-type no non-broadcasting-connection range-connect ssid-profile Description You can push WLAN profiles to users computers that use the Microsoft Windows Wireless Zero Config (WZC) service to configure and maintain their wireless networks.
Parameter Description Default ieap-certconnect-only Command separated list of servers inner-eap Enter the inner EAP type.
wlan dot11k-profile wlan dotllk ap-chan-rpt-11a ap-chan-rpt-11bg bcn-measurement-mode {active|beacon-table|passive} bcn-req-chan-11a bcn-req-chan-11bg bcn-req-time clone dot11k-enable force-disassoc handover-trigger-profile lm-req-time no ... rrm-ie-profile tsm-req-profile tsm-req-time Description Configure a 802.11k radio profile. Syntax Parameter Description Default Name of this instance of the profile. The name must be 1-63 characters.
Parameter Description Default set in the Measurement Report Mode field. Enables passive beacon measurement mode. In this mode, the client sets a measurement duration timer, and, at the end of the measurement duration, compiles all received beacons or probe response with the requested SSID and BSSID into a measurement report. NOTE: If a station doesn't support passive measurement mode, it returns a Beacon Measurement Report with the Incapable bit set in the Measurement Report Mode field.
Parameter Description Default tsm-req-time This option configures the time duration between two consecutive transmit stream measurement requests sent to a dot11K client. By default, the transmit stream measurement requests are sent to a dot11K client every 90 seconds. However, you can use the tsm-req time option to specify a different time interval. This permits values in the range from 10 seconds to 200 seconds. 90 seconds Usage Guidelines In a 802.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
wlan edca-parameters-profile wlan wlan edca-parameters-profile {ap|station} {background | best-effort | video | voice} [acm][aifsn ] [ecw-max [ecw-min ] [txop ] [clone Description This command configures an enhanced distributed channel access (EDCA) profile for APs or for clients (stations). Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters.
Access Category ecw-min ecw-max aifsn txop acm best-effort 4 6 3 0 No background 4 10 7 0 No video 3 4 1 94 No voice 2 3 1 47 No The following are the default values configured for clients: Access Category ecw-min ecw-max aifsn txop acm best-effort 4 10 3 0 No background 4 10 7 0 No video 3 4 2 94 No voice 2 3 2 47 No Example The following command configures an EDCA profile for APs: (host) (config) #wlan edca-parameters-profile ap edca1 best-effor
wlan handover-trigger-profile wlan handover-trigger-profile clone handover-threshold handover-trigger no Description Configure a handover trigger profile to ensure QoS for voice calls. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters. — "default" clone Creates a copy of the Handover Trigger Profile specified as the .
Command Information Platforms Licensing Command Mode All platforms Base operating system Configuration mode on master or local controllers Dell PowerConnect W-Series ArubaOS 6.
wlan ht-ssid-profile wlan ht-ssid-profile 40MHz-enable ba-amsdu-enable clone high-throughput-enable ldpc legacy-stations max-rx-a-mpdu-size {8191|16383|32767|65535} max-tx-a-mpdu-size min-mpdu-start-spacing {0|.25|.5|1|2|4|8|16} mpdu-agg no...
Parameter Description Range Default 8191/16383/32767/65535 65535 allowed to associate. This setting has no effect on a BSS in which HT support is not available. max-rx-a-mpdusize Controls the maximum size, in bytes, of an Aggregated-MAC Packet Data Unit (A-MPDU) that can be received on this highthroughput SSID. 8191 Maximum size of 8191 bytes. 16383 Maximum size of 16383 bytes. 32767 Maximum size of 32767 bytes. 65535 Maximum size of 65535 bytes.
Parameter Description Range Default MCS 0-7. Higher MCS values are not supported. (Supported on the W-AP90 series, W-AP130 series, W-AP68, W-AP175 series and W-AP105 only. The configured value will be adjusted based on AP capabilities.) NOTE: If transmit beamforming is enabled, STBC will be disabled for disabled for beamformed frames. stbc-tx-streams Controls the maximum number of spatial streams usable for STBC transmission. 0 disables STBC transmission, 1 uses STBC for MCS 0-7.
Command History Version Description ArubaOS 3.3 Command introduced ArubaOS 3.3.1 The legacy-stations parameter was introduced ArubaOS 3.3.2 De-aggregation of MAC Service Data Units (A-MSDUs) was introduced. ArubaOS 6.1 The short-guard-intvl-20Mhz, ldpc, stbc-rx-streams and stbc-rx-streams parameters were introduced. The allow-weak-encryption parameter was deprecated. Command Information Platforms Licensing All platforms, but operates with IEEE 802.
wlan rrm-ie-profile wlan rrm-ie-profile bss-aac-ie clone country-ie enabled-capabilities-ie no pwr-constraint-ie qbss-load-ie quiet-ie tpc-report-ie Description Configure an radio resource management RRM IE profile to define the information elements advertised by an AP with 802.11k support enabled.
(host) (config) #wlan rrm-ie-profile default (host) (Handover Trigger Profile) #no country-ie Related commands wlan dot11k-profile dot11k-enable Command History Version Description ArubaOS 6.2 Command introduced Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers Dell PowerConnect W-Series ArubaOS 6.
wlan ssid-profile wlan ssid-profile 902il-compatibility-mode a-basic-rates a-beacon-rate a-tx-rates advertise-ap-name advertise-location ageout battery-boost clone deny-bcast disable-probe-retry dtim-period eapol-rate-opt edca-parameters-profile {ap|station} enforce-user-vlan essid g-basic-rates g-beacon-rate g-tx-rates hide-ssid ht-ssid-profile local-probe-req-thresh max-clients
Syntax Description Range Default Name of this instance of the profile. The name must be 1-63 characters. — “default” 902il-compatibilitymode (For clients using NTT DoCoMo 902iL phones only) When enabled, the controller does not drop packets from the client if a small or old initialization vector value is received. (When TKIP or AES is used for encryption and TSPEC is enabled, the phone resets the value of the initialization vector after add/delete TSPEC.
Description Range Default to search for all available SSIDs, this option controls whether or not the system responds for this SSID. When enabled, no response is sent and clients have to know the SSID in order to associate to the SSID. When disabled, a probe response frame is sent for this SSID. disable-probe-retry Enable or disable battery MAC level retries for probe response frames. By default this parameter is enabled, which mean that MAC level retries for probe response frames is disabled.
Description Range Default frames. Note that hiding the SSID does very little to increase security. ht-ssid-profile Name of high-throughput SSID profile to use for configuring high-throughput support. See "wlan htssid-profile" on page 1494. — “default” local-probe-req-thresh APs will not respond to client probe requests if the SNR value in the probe request is less than the specified threshold value. 0-100 0 max-clients Maximum number of wireless clients for the AP.
Description Range Default wpa-psk-tkip WPA with TKIP encryption using a preshared key. — — wpa-tkip WPA with TKIP encryption and dynamic keys using 802.1x. — — wpa2-aes WPA2 with AES encryption and dynamic keys using 802.1x. — — wpa2-psk-aes WPA2 with AES encryption using a preshared key. — — wpa2-psk-tkip WPA2 with TKIP encryption using a preshared key. — — wpa2-tkip WPA2 with TKIP encryption and dynamic keys using 802.1x.
Description Range Default short-preamble Enables or disables short preamble for 802.11b/g radios. Network performance may be higher when short preamble is enabled. In mixed radio environments, some 802.11b wireless client stations may experience difficulty associating with the AP using short preamble. To use only long preamble, disable short preamble. Legacy client devices that use only long preamble generally can be updated to support short preamble.
Default WMM mappings exist for all SSIDs. After you customize an WMM mapping and apply it to the SSID, the controller overwrites the default mapping values and uses the user-configured values. Suite-B cryptography The opmode parameters for Suite-B encryption, wpa2-aes-gcm-128 , require the ACR license. Note, however, that not all controllers support Suite-B encryption. The table below describes the controller support for Suite-B encryption in ArubaOS.
opmode wpa2-aes Command History Release Modification ArubaOS 3.0 Command introduced ArubaOS 3.2 The wmm-ts-min-inact-int parameter was introduced. The wpa2-preauth parameter was removed, ArubaOS 3.3 Support for the high-throughput IEEE 802.11n standard was introduced including the htssid-profile parameter and various rate changes. ArubaOS 3.3.1 Support for configurable WMM AC mapping was introduced including the wmm-bedscp, wmm-bk-dscp, wmm-vi-dscp, and wmm-vo-dscp parameters. ArubaOS 3.
wlan traffic-management-profile wlan traffic-management-profile bw-alloc virtual-ap share clone no ... report-interval shaping-policy default-access|fair-access|preferred-access Description This command configures a traffic management profile. Syntax Parameter Description Range Default Name of this instance of the profile. The name must be 1-63 characters.
Parameter Description l Range Default bandwidth allocation value for an individual virtual AP. preferred-access: High-throughput (802.11n) clients do not get penalized because of slower 802.11a/g or 802.11b transmissions that take more air time due to lower rates. Similarly, faster 802.11a/g clients get more access than 802.11b clients. Usage Guidelines The traffic management profile allows you to allocate bandwidth to SSIDs.
traffic-id Description This command configures a TSM Report Request Profile. Syntax Default Parameter Description Range Name of this instance of the profile. The name must be 1-63 characters. — “default” bin0-range This value is used to set the 'Bin 0 Range' field in the Transmit Stream/Category Measurement Request frame. Bin 0 Range indicates the delay range of the first bin (Bin 0) of the Transmit Delay Histogram, expressed in units of TUs.
Parameter Description Range Default to 0. A Randomization Interval of 0 in a measurement request indicates that no random delay is to be used. request-mode {normal | triggered} This parameter is used to determine the request mode for the Transmit Stream/Category Measurement Request frame. There are two options for this field: l normal l triggered — normal traffic-id The parameter is used to set the Traffic Identifier field in the Transmit Stream/Category Measurement Request frame.
wlan virtual-ap wlan virtual-ap aaa-profile allowed-band ... auth-failure-blacklist-time band-steering blacklist blacklist-time broadcast-filter all|arp clone deny-inter-user-traffic deny-time-range dos-prevention dot11k-profile dynamic-mcast-optimization dynamic-mcast-optimization-threshold fdb-update-on-assoc forward-mode {tunnel|bridge|split-tunnel|decrypt-tunnel} ha-disc-onassoc mobile-ip no ...
Parameter Description Range Default band-steering ARM’s band steering feature can encourage or require dual-band capable clients to stay on the 5GHz band on dual-band APs. This frees up resources on the 2.4GHz band for single band clients like VoIP phones. Band steering reduces co-channel interference and increases available bandwidth for dualband clients, because there are more channels on the 5GHz band than on the 2.4GHz band. Dual-band 802.
Parameter Description Range Default If enabled, all broadcast ARP requests are converted to unicast and sent directly to the client. You can check the status of this option using the show ap active and the show datapath tunnel command. If enabled, the output will display the letter a in the flags column. Do not enable this option for virtual APs configured in bridge forwarding mode. This configuration parameter is only intended for use for virual APs in tunnel mode.
Parameter Description Range Default controller with a PEFNG license. dynamic-mcast-optimizationthreshold Maximum number of high-throughput stations in a multicast group beyond which dynamic multicast optimization stops. 2-255 stations 6 stations fdb-update-on-assoc This parameter enables seamless failover for silent clients, allowing them to re-associate. If you select this option, the controller will generate a Layer 2 update on behalf of client to update forwarding tables in bridge devices.
Parameter Description Range Default This mode allows a network to utilize the encryption/decryption capacity the AP while reducing the demand for processing resources on the controller. APs in decrypttunnel forwarding mode also manage all 802.11 association requests and responses, and process all 802.11e and 802.11k action frames. NOTE: Virtual APs in bridge or split-tunnel mode using static WEP should use key slots 2-4 on the controller. Key slot 1 should only be used with Virtual APs in tunnel mode.
Parameter Description Range Default Use persistent and standard for 802.1x, tunneled, and split-tunneled SSIDs. ssid-profile Name of the SSID profile that applies to this virtual AP. — “default” steering-mode Band steering supports three different band steering modes. l Force-5GHz: When the AP is configured in force-5GHz band steering mode, the AP will try to force 5Ghz-capable APs to use that radio band.
Usage Guidelines Wireless LAN profiles configure WLANs in the form of virtual AP profiles. A virtual AP profile contains an SSID profile which defines the WLAN and an AAA profile which defines the authentication for the WLAN. You can configure and apply multiple instances of virtual AP profiles to an AP group or to an individual AP. A named VLAN can be deleted although it is configured in a virtual AP profile. If this occurs the virtual AP profiles becomes invalid.
Release Modification ArubaOS 6.0 The steering-mode balance-bands|force-5ghz| prefer-5ghz parameters were introduced. ArubaOS 6.1 l l l ArubaOS 6.2 The deny inter user traffic and Disable conversion multicast RA packets to unicast parameters were introduced. The multi-association parameter was deprecated. The Multicast Optimization for Video and Multicast Optimization Threshold parameter were renamed to Dynamic Multicast Optimization (DMO) and Dynamic Multicast Optimization (DMO) Threshold.
wlan voip-cac-profile wlan voip-cac-profile bandwidth-cac bandwidth-capacity call-admission-control call-capacity call-handoff-reservation clone disconnect-extra-call no ... send-sip-100-trying send-sip-status-code client|server wmm_tspec_enforcement wmm_tspec_enforcement_period Description This command configures a Voice over IP (VoIP) call admission control (CAC) profile.
Parameter Description Range Default no Negates any configured parameter. — — send-sip-100trying Enables sending of SIP 100 - trying messages to a call originator to indicate that the call is proceeding. This is useful when the SIP invite may be redirected through a number of servers before reaching the controller. — enabled send-sip-status-code client|server Use this parameter with the client or server options to drop a SIP Invite and send status code back to the client or server.
Version Change ArubaOS 3.4.1 License requirements changed in ArubaOS 3.4.1, so the command required the PEF license instead of the Voice Services Module license required in earlier versions. ArubaOS 5.0 The supported range for the call-capacity parameter changed from 0-8000 to 2-8000. Command Information Platforms Licensing Command Mode All platforms PEFNG license Config mode on master controllers 1522 | wlan voip-cac-profile Dell PowerConnect W-Series ArubaOS 6.
wms-local system wms-local system [max-rbtree-entries | max-system-wm | max-threshold | system-wm-update-interval ] Description This command sets the local configuration parameters to control the size of the Wired MAC table and APs and Stations. Syntax Parameter Description max-rbtree-entries Set the max threshold for the total number of AP and Station RBTree entries. max-system-wm Set the max number of system wired MAC table entries learned at the controller.
Command Information Platforms Licensing Command Mode All platforms Base operating system Config mode on master controllers 1524 | wms-local system Dell PowerConnect W-Series ArubaOS 6.
wms ap wms ap mode {interfering|manually-contained|neighbor|rogue|suspected-rogue|valid} Description This command allows you to classify an AP into one of several categories. Syntax Parameter Description BSSID of the AP. mode Classify the AP into one of the following categories. interfering An AP seen in the RF environment but is not connected to the wired network. manuallycontained Manually enable denial of service from this AP neighbor An neighboring AP whose BSSID is known.
Command Information Platforms Licensing Command Mode All platforms Base operating system Enable mode on master controllers 1526 | wms ap Dell PowerConnect W-Series ArubaOS 6.
wms clean-db wms clean-db Description This command deletes the WMS database. Syntax Parameter Description clean-db Cleans the WMS database. Usage Guidelines This command deletes all entries from the WMS database. Do not use this command unless instructed to do so by an Dell representative. Example The following command cleans the WMS database: (host) #wms clean-db WMS Database will be deleted. Do you want to proceed with this action [y/n]: Command History This command was introduced in ArubaOS 3.0.
wms client wms client mode {manually-contain|interfering|valid} Description This command allows you to classify a wireless client into one of several categories. Syntax Parameter Description client MAC address of the client. mode Classify the client into one of the following categories: manually-contain Manualy enable denial of service to this client.
Dell PowerConnect W-Series ArubaOS 6.
wms export-class wms export-class Description This command exports classification information into a file. Syntax Parameter Description Name of the file into which you want to export classification information Usage Guidelines This command writes classification data into comma separated values (CSV) files—one for APs and one for clients. You can import these files into the Dell Mobility Manager system.
wms export-db wms export-db Description This command exports the WMS database to a specified file. Syntax Parameter Description Name of the file into which you want to export the database. The filename plus any extensions must be no longer than 32 characters and may contain only keyboard characters. Usage Guidelines The file is exported as an ASCII text file. If you have configured the controller for operation with DellMMS, this command will fail and an error will be returned.
wms import-db wms import-db Description This command imports the specified file into the WMS database. Syntax Parameter Description Name of the file into which you want to import into the database. The filename plus any extensions must be no longer than 32 characters and may contain only keyboard characters. Usage Guidelines The imported file replaces the WMS database.
wms reinit-db wms reinit-db Description This command reinitializes the WMS database to its factory defaults. Syntax No parameters. Usage Guidelines When you use this command, there is no automatic backup of the current database. If an MMS server is configured on the controller (See "mobility-manager" on page 444), this command will fail and return an error. Example The following command reinitializes the WMS database: (host) #wms reinit-db WMS Database will be re-initialized.
write write {erase [all] | memory | terminal} Description This command saves the running configuration to memory or displays the running configuration on the screen. This command can also be used to erase the running configuration and return the controller to factory defaults. Syntax Parameter Description erase Erases the running system configuration file. Rebooting the controller resets it to the factory default configuration.
Example The following command saves your changes so they are retained after a reboot: (host) #write memory The following command deletes the running configuration and databases and returns the controller to the factory default settings: (host) #write erase Command History This command was introduced in ArubaOS 1.0. Command Information Platforms Licensing Command Mode All platforms Base operating system Enable and Config modes Dell PowerConnect W-Series ArubaOS 6.
0510956-01 | March 2013 1536
Appendix A: Command Modes The ArubaOS command-line interface offers different levels of user access by differentiating between different command modes. When you first log in to the CLI, you start your session in User mode, which provides only limited access for basic operational testing. You must enter an additional password to access Enable mode, which allows you to issue show commands run certain management functions. Configuration commands can only be issued in Config mode.
authentication inservice ipv6 query-user test-server user Authentication Bring authentication server into service Internet Protocol Version 6 Query User Test authentication server User commands Config Mode To move from enable mode to config mode, enter the command config terminal. Users in config mode may return to enable mode at any time by entering the command exit.
