3com 3CRWX440095A Command Reference Manual

http://www.3Com.com/

Part No. 10015409 Rev. AA

Published August 2006

Wireless LAN Mobility System

Wireless LAN Switch and Controller

Command Reference

WX4400 3CRWX440095A

WX1200 3CRWX120695A

WXR100 3CRWXR10095A

WX2200 3CRWX220095A

3Com Corporation

350 Campus Drive

Marlborough, MA USA

01752-3064

in any form or by any means or used to make any derivative work (such as translation, transformation, or

adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time

to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either

implied or expressed, including, but not limited to, the implied warranties, terms or conditions of

merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or

changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license

agreement included with the product as a separate document, in the hard copy documentation, or on the

removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,

please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are

provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense.

Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or

as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are

provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights

only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.

You agree not to remove or deface any portion of any legend provided on any licensed program or

documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may

not be registered in other countries.

3Com is a registered trademark of 3Com Corporation. The 3Com logo is a trademark of 3Com Corporation.

Mobility Domain, Mobility Point, Mobility Profile, Mobility System, Mobility System Software, MP, MSS, and

SentrySweep are trademarks of Trapeze Networks, Inc.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, Windows XP,

and Windows NT are registered trademarks of Microsoft Corporation.

All other company and product names may be trademarks of the respective companies with which they are

associated.

ENVIRONMENTAL STATEMENT

It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we

are committed to:

Establishing environmental performance standards that comply with national legislation and regulations.

Conserving energy, materials and natural resources in all operations.

Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental

standards. Maximizing the recyclable and reusable content of all products.

Ensuring that all products can be recycled, reused and disposed of safely.

Ensuring that all products are labelled according to recognized environmental standards.

Improving our environmental record on a continual basis.

End of Life Statement

3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.

Regulated Materials Statement

3Com products do not contain any hazardous or ozone-depleting material.

Environmental Statement about the Documentation

The documentation for this product is printed on paper that comes from sustainable, managed forests; it is

fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and

the inks are vegetable-based with a low heavy-metal content.

CONTENTS

ABOUT THIS GUIDE

Conventions 21

Documentation 22

Documentation Comments 23

1 USING THE COMMAND-LINE INTERFACE

Overview 25

CLI Conventions 26

Command Prompts 26

Syntax Notation 26

Text Entry Conventions and Allowed Characters 27

MAC Address Notation 27

IP Address and Mask Notation 28

User Globs, MAC Address Globs, and VLAN Globs 28

Port Lists 30

Virtual LAN Identification 31

Command-Line Editing 31

Keyboard Shortcuts 31

History Buffer 32

Tabs 32

Single-Asterisk (*) Wildcard Character 32

Double-Asterisk (**) Wildcard Characters 32

Using CLI Help 33

Understanding Command Descriptions 34

2 ACCESS COMMANDS

Commands by Usage 35

disable 35

enable 36

quit 36

set enablepass 37

3 SYSTEM SERVICE COMMANDS

Commands by Usage 39

clear banner motd 40

clear history 41

clear prompt 41

clear system 42

display banner motd 43

display base-information 43

display license 44

display load 45

display system 45

help 48

history 49

quickstart 50

set auto-config 50

set banner motd 52

set confirm 53

set length 54

set license 55

set prompt 56

set system contact 57

set system countrycode 58

set system idle-timeout 62

set system ip-address 63

set system location 64

set system name 65

4 PORT COMMANDS

Commands by Usage 67

clear dap 68

clear port counters 69

clear port-group 69

clear port media-type 70

clear port name 70

clear port mirror 71

clear port preference 71

clear port type 72

display port counters 73

display port-group 74

display port mirror 75

display port poe 76

display port status 77

display port media-type 79

monitor port counters 80

reset port 85

set dap 85

set port 87

set port-group 88

set port media-type 89

set port mirror 90

set port name 91

set port negotiation 91

set port poe 92

set port speed 93

set port trap 94

set port type ap 95

set port type wired-auth 98

5 VLAN COMMANDS

Commands by usage 101

clear fdb 102

clear security 12-restrict 103

clear security 12-restrict counters 104

clear vlan 105

display fdb 106

display fdb agingtime 108

display fdb count 109

display roaming station 110

display roaming vlan 112

display security 12-restrict 113

display tunnel 114

display vlan config 115

set fdb 117

set fdb agingtime 118

set security l2-restrict 118

set vlan name 120

set vlan port 121

set vlan tunnel-affinity 122

6 QUALITY OF SERVICE COMMANDS

Commands by Usage 123

clear qos 124

set qos cos-to-dscp-map 125

set qos dscp-to-cos-map 126

display qos 127

display qos dscp-table 128

7 IP SERVICES COMMANDS

Commands by Usage 129

clear interface 131

clear ip alias 132

clear ip dns domain 133

clear ip dns server 133

clear ip route 134

clear ip telnet 135

clear ntp server 135

clear ntp update-interval 136

clear snmp community 137

clear snmp notify profile 137

clear snmp notify target 138

clear snmp usm 138

clear summertime 139

clear system ip-address 140

clear timezone 140

display arp 141

display dhcp-client 142

display dhcp-server 144

display interface 146

display ip alias 147

display ip dns 148

display ip https 149

display ip route 150

display ip telnet 152

display ntp 153

display snmp community 155

display snmp counters 156

display snmp notify profile 156

display snmp notify target 156

display snmp status 157

display snmp usm 158

display summertime 158

display timedate 159

display timezone 159

ping 160

set arp 162

set arp agingtime 163

set interface 164

set interface dhcp-client 165

set interface dhcp-server 166

set interface status 167

set ip alias 168

set ip dns 168

set ip dns domain 169

set ip dns server 170

set ip https server 171

set ip route 171

set ip snmp server 173

set ip ssh 174

set ip ssh server 175

set ip telnet 175

set ip telnet server 176

set ntp 177

set ntp server 178

set ntp update-interval 179

set snmp community 179

set snmp notify profile 181

set snmp notify target 185

SNMPv3 with Informs 185

SNMPv3 with Traps 187

SNMPv2c with Informs 187

SNMPv2c with Traps 188

SNMPv1 with Traps 188

set snmp protocol 190

set snmp security 191

set snmp usm 192

set summertime 195

set system ip-address 196

set timedate 197

set timezone 198

telnet 199

traceroute 201

8 AAA COMMANDS

Commands by Usage 205

clear accounting 207

clear authentication admin 208

clear authentication console 209

clear authentication dot1x 210

clear authentication last-resort 211

clear authentication mac 212

clear authentication proxy 213

clear authentication web 213

clear location policy 214

clear mac-user 215

clear mac-user attr 216

clear mac-user group 216

clear mac-usergroup 217

clear mac-usergroup attr 218

clear mobility-profile 219

clear user 219

clear user attr 220

clear user group 221

clear usergroup 221

clear usergroup attr 222

display aaa 223

display accounting statistics 226

display location policy 228

display mobility-profile 229

set accounting {admin | console} 229

set accounting {dot1x | mac | web | last-resort} 231

set authentication admin 233

set authentication console 235

set authentication dot1x 237

set authentication last-resort 240

set authentication mac 243

set authentication proxy 245

set authentication web 246

set location policy 248

set mac-user 252

set mac-user attr 253

set mac-usergroup attr 258

set mobility-profile 259

set mobility-profile mode 261

set user 262

set user attr 263

set user group 264

set usergroup 265

set web-portal 266

9 MOBILITY DOMAIN COMMANDS

Commands by Usage 269

clear mobility-domain 270

clear mobility-domain member 270

display mobility-domain config 271

display mobility-domain status 272

set mobility-domain member 273

set mobility-domain mode member seed-ip 274

set mobility-domain mode seed domain-name 275

10 NETWORK DOMAIN COMMANDS

Network Domain Commands by Usage 277

clear network-domain 278

clear network-domain mode 279

clear network-domain peer 280

clear network-domain seed-ip 281

display network-domain 282

set network-domain mode member seed-ip 284

set network-domain peer 285

set network-domain mode seed domain-name 286

11 MANAGED ACCESS POINT COMMANDS

MAP Access Point Commands by Usage 287

clear {ap | dap} radio 291

clear dap boot-configuration 293

clear radio-profile 293

clear service-profile 295

display {ap | dap} config 296

display {ap | dap} counters 300

display {ap | dap} qos-stats 306

display {ap | dap} etherstats 307

display {ap | dap} group 309

display {ap | dap} status 310

display auto-tune attributes 317

display auto-tune neighbors 319

display dap boot-configuration 321

display dap connection 322

display dap global 324

display dap unconfigured 325

display radio-profile 327

display service-profile 330

reset {ap | dap} 338

set dap auto 339

set dap auto persistent 341

set dap auto radiotype 342

set dap auto mode 342

set {ap | dap} bias 343

set {ap | dap} blink 345

set dap boot-ip 346

set dap boot-switch 347

set dap boot-vlan 349

set dap fingerprint 350

set {ap | dap} group 351

set {ap | dap} name 352

set {ap | dap} radio antennatype 353

set {ap | dap} radio auto-tune max-power 354

set {ap | dap} radio auto-tune max-retransmissions 356

set {ap | dap} radio channel 358

set {ap | dap} radio auto-tune min-client-rate 359

set {ap | dap} radio mode 360

set {ap | dap} radio radio-profile 362

set {ap | dap} radio tx-power 363

set dap security 364

set {ap | dap} upgrade-firmware 365

set radio-profile 11g-only 366

set radio-profile active-scan 366

set radio-profile auto-tune channel-config 367

set radio-profile auto-tune channel-holddown 368

set radio-profile auto-tune channel-interval 369

set radio-profile auto-tune power-backoff- timer 370

set radio-profile auto-tune power-config 371

set radio-profile auto-tune power-interval 372

set radio-profile beacon-interval 373

set radio-profile countermeasures 374

set radio-profile dtim-interval 375

set radio-profile frag-threshold 376

set radio-profile long-retry 377

set radio-profile max-rx-lifetime 378

set radio-profile max-tx-lifetime 379

set radio-profile mode 380

set radio-profile preamble-length 382

set radio-profile qos-mode 383

set radio-profile rts-threshold 384

set radio-profile service-profile 385

set radio-profile short-retry 391

set radio-profile wmm 391

set service-profile attr 391

set service-profile auth-dot1x 393

set service-profile auth-fallthru 394

set service-profile auth-psk 395

set service-profile beacon 396

set service-profile cac-mode 397

set service-profile cac-session 398

set service-profile cipher-ccmp 399

set service-profile cipher-tkip 400

set service-profile cipher-wep40 401

set service-profile cipher-wep104 402

set service-profile cos 403

set service-profile dhcp-restrict 404

set service-profile idle-client-probing 405

set service-profile long-retry-count 406

set service-profile no-broadcast 407

set service-profile proxy-arp 408

set service-profile psk-phrase 409

set service-profile psk-raw 410

set service-profile rsn-ie 411

set service-profile shared-key-auth 412

set service-profile short-retry-count 412

set service-profile soda agent-directory 413

set service-profile soda enforce-checks 414

set service-profile soda failure-page 415

set service-profile soda logout-page 416

set service-profile soda mode 418

set service-profile soda remediation-acl 419

set service-profile soda success-page 420

set service-profile ssid-name 421

set service-profile ssid-type 422

set service-profile tkip-mc-time 422

set service-profile static-cos 423

set service-profile transmit-rates 424

set service-profile user-idle-timeout 426

set service-profile web-portal-form 427

set service-profile web-portal-session-timeout 429

set service-profile wep active-multicast-index 430

set service-profile wep active-unicast-index 431

set service-profile wep key-index 432

set service-profile wpa-ie 433

12 STP COMMANDS

STP Commands by Usage 435

clear spantree portcost 436

clear spantree portpri 437

clear spantree portvlancost 437

clear spantree portvlanpri 438

clear spantree statistics 439

display spantree 440

display spantree backbonefast 443

display spantree blockedports 444

display spantree portfast 445

display spantree portvlancost 446

display spantree statistics 446

display spantree uplinkfast 452

set spantree 453

set spantree backbonefast 454

set spantree fwddelay 455

set spantree hello 455

set spantree maxage 456

set spantree portcost 457

set spantree portfast 458

set spantree portpri 459

set spantree portvlancost 460

set spantree portvlanpri 461

set spantree priority 462

set spantree uplinkfast 462

13 IGMP SNOOPING COMMANDS

Commands by usage 465

clear igmp statistics 466

display igmp 466

display igmp mrouter 470

display igmp querier 471

display igmp receiver-table 473

display igmp statistics 475

set igmp 477

set igmp lmqi 478

set igmp mrouter 479

set igmp mrsol 480

set igmp mrsol mrsi 480

set igmp oqi 481

set igmp proxy-report 482

set igmp qi 483

set igmp qri 484

set igmp querier 485

set igmp receiver 485

set igmp rv 486

14 SECURITY ACL COMMANDS

Security ACL Commands by Usage 489

clear security acl 490

clear security acl map 491

commit security acl 493

display security acl 494

display security acl editbuffer 495

display security acl hits 496

display security acl info 497

display security acl map 498

display security acl resource-usage 499

rollback security acl 503

set security acl 504

set security acl map 509

set security acl hit-sample-rate 511

15 CRYPTOGRAPHY COMMANDS

Commands by Usage 514

crypto ca-certificate 514

crypto certificate 516

crypto generate key 517

crypto generate request 518

crypto generate self-signed 520

crypto otp 522

crypto pkcs12 524

display crypto ca-certificate 525

display crypto certificate 526

display crypto key ssh 528

16 RADIUS AND SERVER GROUP COMMANDS

Commands by Usage 529

clear radius 530

clear radius client system-ip 531

clear radius proxy client 532

clear radius proxy port 532

clear radius server 533

clear server group 533

set radius 534

set radius client system-ip 536

set radius proxy client 537

set radius proxy port 538

set radius server 539

set server group 541

set server group load-balance 542

17 802.1X MANAGEMENT COMMANDS

Commands by Usage 545

clear dot1x bonded-period 546

clear dot1x max-req 547

clear dot1x port-control 547

clear dot1x quiet-period 548

clear dot1x reauth-max 549

clear dot1x reauth-period 549

clear dot1x timeout auth-server 550

clear dot1x timeout supplicant 550

clear dot1x tx-period 551

display dot1x 551

set dot1x authcontrol 554

set dot1x bonded-period 555

set dot1x key-tx 556

set dot1x max-req 557

set dot1x port-control 558

set dot1x quiet-period 559

set dot1x reauth 559

set dot1x reauth-max 560

set dot1x reauth-period 561

set dot1x timeout auth-server 561

set dot1x timeout supplicant 562

set dot1x tx-period 562

set dot1x wep-rekey 563

set dot1x wep-rekey-period 564

18 SESSION MANAGEMENT COMMANDS

Commands by Usage 565

clear sessions 565

clear sessions network 567

display sessions 568

display sessions network 571

19 RF DETECTION COMMANDS

Commands by Usage 579

clear rfdetect attack-list 580

clear rfdetect black-list 581

clear rfdetect ignore 581

clear rfdetect ssid-list 582

clear rfdetect vendor-list 583

display rfdetect attack-list 583

display rfdetect black-list 584

display rfdetect clients 585

display rfdetect countermeasures 587

display rfdetect counters 588

display rfdetect data 590

display rfdetect ignore 592

display rfdetect mobility-domain 592

display rfdetect ssid-list 597

display rfdetect vendor-list 597

display rfdetect visible 598

set rfdetect active-scan 600

set rfdetect attack-list 601

set rfdetect black-list 602

set rf detect countermeasures 602

set rfdetect countermeasures mac 603

set rfdetect ignore 604

set rfdetect log 605

set rfdetect signature 606

set rfdetect ssid-list 607

set rfdetect vendor-list 608

test rflink 609

20 FILE MANAGEMENT COMMANDS

Commands by Usage 611

backup 612

clear boot backup-configuration 614

clear boot config 614

copy 615

delete 617

dir 618

install soda agent 621

display boot 622

display config 623

display version 625

load config 627

md5 629

mkdir 629

reset system 631

restore 632

rmdir 633

save config 633

set boot backup-configuration 634

set boot configuration-file 635

set boot partition 636

uninstall soda agent 636

21 TRACE COMMANDS

Commands by Usage 639

clear log trace 640

clear trace 640

display trace 641

save trace 642

set trace authentication 642

set trace authorization 643

set trace dot1x 644

set trace sm 645

22 SNOOP COMMANDS

Commands by Usage 647

clear snoop 648

clear snoop map 648

set snoop 649

set snoop map 652

set snoop mode 653

display snoop 654

display snoop info 654

display snoop map 655

display snoop stats 656

23 SYSTEM LOG COMMANDS

Commands by Usage 659

clear log 659

display log buffer 660

display log config 662

display log trace 663

set log 664

set log mark 667

24 BOOT PROMPT COMMANDS

Boot Prompt Commands by Usage 669

autoboot 670

boot 671

change 673

create 674

delete 675

dhcp 676

diag 677

dir 677

display 678

fver 680

help 681

ls 682

next 683

reset 684

test 685

version 686

A OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS

Register Your Product to Gain Service Benefits 687

Solve Problems Online 687

Purchase Extended Warranty and Professional Services 688

Access Software Downloads 688

Contact Us 688

Telephone Technical Support and Repair 689

INDEX

Page is loading ...

3com 3CRWX440095A Command Reference Manual

This manual is also suitable for

3com 3CRWX440095A Command Reference Manual

Related papers

Other documents