Network Router User Manual
Table Of Contents
- About This Document
- Introduction
- Common Commands
- In this chapter
- Common commands
- show
- autoinstall
- banner
- commands
- crypto
- environment
- history
- interfaces
- ip
- ldap
- licenses
- logging
- mac
- mac-address-table
- management
- mobility
- ntp
- port-channel
- power
- privilege
- radius
- redundancy dynamic-ap-load-balance
- redundancy group
- redundancy history
- redundancy members
- rtls
- smtp-notification
- snmp
- snmp-server
- spanning-tree
- static-channel-group
- terminal
- timezone
- traffic-shape
- users
- version
- wireless
- (config-wireless) Executable Mode
- wlan-acl
- access-list
- aclstats
- alarm-log
- boot
- clock
- debugging
- dhcp
- file
- ftp
- password-encryption
- running-config
- securitymgr
- sessions
- startup-config
- upgrade-status
- mac-name
- firewall
- role
- virtual-IP
- wwan
- aap-wlan-acl
- aap-wlan-acl-stats
- protocol-list
- service-list
- User Exec Commands
- Privileged Exec Commands
- Global Configuration Commands
- In this chapter
- Global Configuration commands
- aaa
- access-list
- autoinstall
- banner
- boot
- bridge
- country-code
- crypto
- do
- end
- errdisable
- ftp
- hostname
- interface
- ip
- license
- line
- local
- logging
- mac
- mac-address-table
- mac-name
- management
- ntp
- prompt
- radius-server
- ratelimit
- redundancy
- role
- rtls
- service
- smtp-notification
- snmp-server
- spanning-tree
- timezone
- traffic-shape
- username
- vpn
- wireless
- wlan-acl
- network-element-id
- firewall
- virtual-ip
- wwan
- aap-wlan-acl
- arp
- power
- aap-ipfilter-list
- whitelist
- Crypto-isakmp Instance
- Crypto-group Instance
- Crypto-peer Instance
- Crypto-ipsec Instance
- Crypto-map Instance
- Crypto-trustpoint Instance
- Interface Instance
- Spanning tree-mst Instance
- Extended ACL Instance
- Standard ACL Instance
- Extended MAC ACL Instance
- DHCP Server Instance
- DHCP Class Instance
- Radius Server Instance
- Wireless Instance
- In this chapter
- Wireless configuration commands
- aap
- admission-control
- adopt-unconf-radio
- adoption-pref-id
- ap
- ap-containment
- ap-detection
- ap-image
- ap-ip
- ap-standby-attempts-threshold
- ap-timeout
- ap-udp-port
- auto-select-channels
- broadcast-tx-speed
- client
- clrscr
- cluster-master-support
- convert-ap
- country-code
- debug
- dhcp-one-portal-forward
- dhcp-sniff-state
- dot11-shared-key-auth
- end
- exit
- fix-broadcast-dhcp-rsp
- help
- hotspot
- load-balance
- mac-auth-local
- manual-wlan-mapping
- wireless-client
- mobility
- multicast-packet-limit
- multicast-throttle-watermark
- nas-id
- nas-port-id
- no
- proxy-arp
- qos-mapping
- radio
- rate-limit
- secure-wispe-default-secret
- self-heal
- sensor
- service
- show
- smart-rf
- smart-scan-channels
- wlan
- wlan-bw-allocation
- dot11k
- wips
- non-preferred-ap-attempts-threshold
- test
- RTLS Instance
- ESPI Instance
- RFID Instance
- SOLE Instance
- Smart RF Instance
- Role Instance
- AAP IP Filtering

Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide 695
53-1001931-01
Wireless configuration commands
20
• server [primary|secondary] [<IP> {acct-port <port>}|
radius-key [0 <key>|2 <key>|<key>]] – Sets the primary or
secondary RADIUS server for the selected WLAN.
• primary – Sets primary RADIUS server information
• secondary – Sets secondary RADIUS server information.
• <IP> – Sets the IP address of the RADIUS server.
• acct-port <port> – Sets the optional radius server
accounting port. Default is 1813.
• radius-key [0 <key>|2 <key>|<key>] – Sets the
radius-key for the RADIUS server.
• 0 <key> – The key is sent unencrypted.
• 2 <key> – The key is sent encrypted with the
password-encryption secret.
• <key> – The shared key.
• timeout <1-300> retransmit <1-100> – Sets the time
the controller waits for a response from the RADIUS
server before retrying. This is a global setting for both
the primary and secondary servers.
• retransmit <1-100> – Number of retries before the
wireless controller will give up and disassociate
wireless client
• <1-100> – Retry count
• reauth <30-65535> – Enable periodic reauthentication of all
associated wireless-clients.
• <30-65535> – The reauthentication interval in
seconds.
secure-beacon Does not include the SSID of this WLAN in beacon frames
set-vlan-user-limit
[<1-4094>|<vlan-list>]
<0-8192>
Sets user limits on VLANs for this WLAN
• [<1-4094>|VLAN] – VLAN range list. It can be either a single
index, a list (1,3,7) or a range (3-7) of indices
• [<0-8192>] – Sets the VLAN index. The limit is
<0-8192>
smart-scan-channels
[<channel-list>|
add <channel-list>|
remove <channel-list>]
Specifies a list of channels to brocade clients to perform a
smart-scan. The following are the options set:
• <channel-list> – A comma separated list of channels to scan.
Can also contain a single channel number.
• add <channel-list> – Adds the specified channel(s) to the
smart-scan list.
• remove <channel-list> – Removes the specified channel(s)
from the smart-scan list.
ssid <ssid> Enter the SSID of this WLAN. <ssid> can be up to 32 characters.
storm-control
[bcast|mcast|ucast]
rate-limit <rate>
Enables packet dropping in case of flooding attack.
• bcast – broadcast packets
• mcast – multicast packets
• ucast – unicast packets
• rate-limit <rate>– Enables rate limiting if the rate exceeds
the value set by <rate> (1-1000000 packets/second).
syslog accounting server
<IP> {port <1-65535>}
Syslog Accounting
• accounting – Modifies accounting parameters
• server <IP> – Modifies the Syslog accounting server IP
Address.
• port <1-65535> – Optional. Defines the Syslog server port.
The default port number is 514 .