User manual

ManualsBrandsMotorola ManualsCell Phone2.1

Motorola Solutions RFS7000GR Series RF Switch

CLI Reference Guide

Summary of content (713 pages)

PAGE 1
M Motorola Solutions RFS7000GR Series RF Switch CLI Reference Guide
PAGE 2
MOTOROLA, MOTO, MOTOROLA SOLUTIONS and the Stylized M Logo are trademarks or registered trademarks of Motorola Trademark Holdings, LLC and are used under license. All other trademarks are the property of their respective owners. © 2014 Motorola Solutions, Inc. All rights reserved.
PAGE 3
Table of Contents About This Guide Who Should Use this Guide ................................................................................................................................................ 1-13 How to Use this Guide ......................................................................................................................................................... 1-13 Conventions Used in this Guide .........................................................................................
PAGE 4
2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.7 2.1.8 2.1.9 2.1.10 2.1.11 2.1.12 2.1.13 2.1.14 2.1.15 2.1.16 2.1.17 2.1.18 2.1.19 2.1.20 2.1.21 2.1.22 2.1.23 2.1.24 2.1.25 2.1.26 2.1.27 2.1.28 2.1.29 2.1.30 2.1.31 2.1.32 2.1.33 2.1.34 2.1.35 2.1.36 2.1.37 2.1.38 2.1.39 2.1.40 2.1.41 2.1.42 2.1.43 2.1.44 2.1.45 2.1.46 2.1.47 2.1.48 2.1.49 2.1.50 2.1.51 2.1.52 2.1.53 2.1.54 2.1.55 2.1.56 aap-wlan-acl..................................................................................
PAGE 5
3 2.1.57 2.1.58 2.1.59 2.1.60 2.1.61 2.1.62 2.1.63 2.1.64 2.1.65 dhcp ..............................................................................................................................................................................2-96 file.................................................................................................................................................................................2-97 password-encryption........................................................
PAGE 6
4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.23 4.1.24 4.1.25 4.1.26 traceroute .....................................................................................................................................................................4-46 upgrade.........................................................................................................................................................................4-47 upgrade-abort .....................................
PAGE 7
5 5.1.43 5.1.44 5.1.45 5.1.46 5.1.47 5.1.48 5.1.49 traffic-shape .................................................................................................................................................................5-90 username......................................................................................................................................................................5-91 virtual-ip .........................................................................................
PAGE 8
6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 9.1.1 9.1.2 9.1.3 9.1.4 9.1.5 9.1.6 9.1.7 9.1.8 clrscr ...............................................................................................................................................................................9-2 end ..................................................................................................................................................................................9-3 exit ................
PAGE 9
7 12.1.8 ip .................................................................................................................................................................................12-10 12.1.9 mac .............................................................................................................................................................................12-12 12.1.10 management............................................................................................................
PAGE 10
8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 15.1.5 help ...............................................................................................................................................................................15-6 15.1.6 mark ..............................................................................................................................................................................15-7 15.1.7 no .................................................
PAGE 11
9 17.2 Configuring DHCP Server using CLI ................................................................................................................................ 17-34 17.2.1 Creating network pool................................................................................................................................................17-35 17.2.2 Creating host pool ...................................................................................................................................
PAGE 12
10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.9 ap-ip............................................................................................................................................................................20-15 20.1.10 ap-standby-attempts-threshold..................................................................................................................................20-16 20.1.11 ap-timeout ...........................................................
PAGE 13
11 21.1.4 end ................................................................................................................................................................................21-5 21.1.5 exit ................................................................................................................................................................................21-6 21.1.6 help ...............................................................................................................
PAGE 14
About This Guide This preface introduces the Motorola Solutions RFS7000GR Series RF Switch CLI Reference Guide and contains the following sections: • Who Should Use this Guide • How to Use this Guide • Conventions Used in this Guide • Motorola Solutions Service Information Who Should Use this Guide The Motorola Solutions RFS7000GR Series RF Switch CLI Reference Guide is intended for system administrators responsible for the implementing, configuring, and maintaining the RFS7000 using the switch comm
PAGE 15
14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 1 Quick Reference on How This Guide Is Organized (Continued) Chapter Jump to this section if you want to... Chapter 5, Global Configuration Commands Summarize the crypto-isakmp commands within the RFS7000 Switch CLI. Chapter 7, Crypto - group Instance Summarize the crypto-group commands within the RFS7000 Switch CLI. Chapter 8, Crypto - peer Instance Summarize the crypto-peer commands within the RFS7000 Switch CLI.
PAGE 16
15 Conventions Used in this Guide This section describes the following topics: • Annotated Symbols • Notational Conventions Annotated Symbols The following document conventions are used in this document: NOTE Indicates tips or special requirements. CAUTION ! Indicates conditions that can cause equipment damage or data loss. WARNING! Indicates a condition or procedure that could result in personal injury or equipment damage.
PAGE 17
16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 2 Notational Convention used in the document Convention Example Token Description Valid Inputs [] [key1|key2|key3] Infinite recursive (multiple tokens allowed, each can be used multiple times) key1 key1 key2 key3 key2 key3 . .<1-10> Simple infinite recursive 126 ? [key1|?key2] Selective keyword in infinite recursive.
PAGE 18
17 Motorola Solutions Service Information Use the Motorola Solutions Support Center as the primary contact for any technical problem, question, or support issue involving Motorola Solutions products. Motorola Solutions Support Center responds to calls by e-mail, telephone or fax within the time limits set forth in individual contractual agreements: Telephone (North America): 1-800-653-5350 Telephone (International): +1-631-738-6213 Fax: (631) 738-5410 E-mail: https://portal.motorolasolutions.
PAGE 19
18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Motorola Solutions, Inc. End-User License Agreement BY DOWNLOADING, INSTALLING, OR USING THE SOFTWARE DESCRIBED IN THIS DOCUMENT, YOU OR THE ENTITY OR COMPANY THAT YOU REPRESENT ("LICENSEE") ARE UNCONDITIONALLY CONSENTING TO BE BOUND BY AND ARE BECOMING A PARTY TO THIS LICENSE AGREEMENT ("AGREEMENT"). LICENSEE'S USE OR CONTINUED USE OF THE DOWNLOADED OR INSTALLED MATERIALS SHALL ALSO CONSTITUTE ASSENT TO THE TERMS OF THIS AGREEMENT.
PAGE 20
19 4. FEES; SUPPORT AND UPGRADES. Licensor may, at Licensor's sole option, provide support services related to the Software ("Support Services"). Nothing in this Agreement grants Licensee any right to receive any Support Services. Use of any Support Services provided is governed by the Licensor policies and programs described in the user manual, in "online" documentation, and/or in other Licensor-provided materials or support agreements.
PAGE 21
20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 9. INDEMNITY. Licensee agrees that Licensor shall have no liability whatsoever for any use Licensee makes of the Software. Licensee shall indemnify and hold harmless Licensor from any claims, damages, liabilities, costs and fees (including reasonable attorney fees) arising from Licensee's use of the Software as well as from Licensee's failure to comply with any term of this Agreement. 10. FAULT TOLERANCE.
PAGE 22
Introduction This chapter describes the commands used by the RFS7000 Series Command Line Interface (CLI). Access the CLI by running a terminal emulation program on a computer connected to the serial port at the front of the switch, or by using secure shell (ssh) to access the switch over the network. 1.1 Common Criteria Operational Requirements To run the product in the Common Criteria evaluated configuration, the following conditions must be met: 1.
PAGE 23
1-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 1.1.1 Configuration of MAC ACL For Common Criteria Operation To run the product in the Common Criteria evaluated configuration, the following assumptions shall be satisfied:If Table 1.1 Common Criteria Assumptions Name Assumption A.NO_EVIL Administrators shall be non-hostile, appropriately trained and follow all administrator guidance. A.
PAGE 24
Introduction 1-3 Creating DHCP Server Pool to IP Addresses on VLAN20 RFS7000(config)#ip dhcp pool vlan20pool RFS7000(config-dhcp)#address range 172.17.2.150 172.2.1.160 RFS7000(config-dhcp)#network 172.2.1.0/24 RFS7000(config-dhcp)#default-router 172.2.1.
PAGE 25
1-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ip domain-name motorola.
PAGE 26
Introduction 1-5 ip dhcp trust ! interface ge4 switchport mode trunk switchport trunk native vlan 1 switchport trunk allowed vlan none switchport trunk allowed vlan add 1,20, ip dhcp trust ! interface me1 ip address 10.1.1.100/24 ! interface vlan1 ip address 172.17.1.100/24 ! interface vlan10 no ip address ! interface vlan20 ip address 172.2.1.100/24 ! ip dhcp pool vlan20pool address range 172.17.2.150 address range 172.17.2.
PAGE 27
1-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide RFS7000(config-if)#exit Creating DHCP Server Pool to IP Addresses on VLAN20 RFS7000(config)#ip dhcp pool vlan20pool RFS7000(config-dhcp)#address range 172.17.2.150 172.2.1.160 RFS7000(config-dhcp)#network 172.2.1.0/24 RFS7000(config-dhcp)#default-router 172.2.1.
PAGE 28
Introduction 1-7 1.2 CLI Overview The CLI is used for configuring, monitoring, and maintaining Motorola Solutions devices. The CLI interface allows you to execute commands, whether using a serial console or using remote access methods. This chapter describes the basic features of the Motorola Solutions CLI and how to use them. Topics covered include an introduction to command modes, navigation and editing features, help features, and command history features.
PAGE 29
1-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 1.
PAGE 30
Introduction 1-9 Table 1.2 CLI Context Hierarchy for RFS7000 User Exec Mode Priv Exec Mode Global Configuration Mode terminal remote-login traceroute role upgrade rtls upgrade-abort service write show smtp-notification snmp-server spanning-tree timezone traffic-shape username virtual-ip vpn wireless wlan-acl zeroize 1.3 Getting Context Sensitive Help Enter a question mark (?) at the system prompt to display a list of commands available for each command mode.
PAGE 31
1-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 1.3 Getting Context Sensitive Help Commands Command Description (prompt)# command keyword ? Lists the next available syntax option for the command. NOTE The system prompt ma varies depending on which configuration mode you are in. When using context-sensitive help, the space (or lack of a space) before the question mark (?) is significant.
PAGE 32
Introduction 1-11 1.4 Using the no and default forms of Commands Almost every configuration command has a no form. In general, use the no form to disable a feature or function. Use the command without the no keyword to re enable a disabled feature or enable a feature disabled by default. 1.5 Setting the Administrator Inactivity Timeout To help prevent unauthorized access to the swtich, the adminstrator account will timeout and log off after 3 minutes of inactivity.
PAGE 33
1-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide In Table 1.4, bolded characters inside the Function Summary column indicate the relationship between the letter used and the function. Table 1.4 Key Combinations Used to Move Cursor Keystrokes Function Summary Function Details Left Arrow or Ctrl-B Back character Moves the cursor one character to the left.
PAGE 34
Introduction 1-13 RFS7000# configure When you use the command completion feature, the CLI displays the full command name. The command is not executed until you use the Return or Enter key. This way, the command can be modified if the full command was not what you intended by abbreviation. Enter a set of characters that could indicate more than one command to list commands that begin with that set of characters.
PAGE 35
1-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 1.7.6 Transposing Mistyped Characters If you have mistyped a command, it is possible to transpose the mistyped characters. To transpose characters, use the following keystroke: Table 1.7 Keystrokes Used to Transpose Mistyped Characters Keystrokes Purpose Ctrl-T Transposes the character to the left of the cursor with the character located at the cursor. 1.7.
PAGE 36
Common Commands This chapter describes the common CLI commands used in the USER EXEC and PRIV EXEC modes. The PRIV EXEC command set contains the commands available in USER EXEC mode. Some commands can be entered in either mode. Commands entered in either USER EXEC mode or PRIV EXEC mode are referred to as EXEC mode commands. If the user or privilege is not specified, the referenced command can be entered in either mode. 2.1 Common Commands Table 2.
PAGE 37
2-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.1 clrscr Common Commands Use this command to clear the screen and refresh the prompt (#).
PAGE 38
Common Commands 2-3 2.1.2 exit Common Commands Use this command to end the current mode and move to the previous mode.
PAGE 39
2-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.3 help Common Commands Use this command to access the advanced help feature. Use “?” at the command prompt to access the help topic. Two styles of help are provided: 1. Full help is available when ready to enter a command argument and describe each possible argument. There is a space between the command and ?, (for example 'show ?'). 2.
PAGE 40
Common Commands 2-5 wireless wlan-acl Wireless configuration commands wlan based acl RFS7000> RFS7000>show autoinstall ? | Output modifiers > Output redirection >> Output redirection appending RFS7000>show autoinstall status Autoinstall not initiated RFS7000>
PAGE 41
2-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.4 no Common Commands Use this command to negate a command or set its defaults.
PAGE 42
Common Commands 2-7 traffic-shape username virtual-ip vpn wlan-acl Traffic shaping Establish User Name Authentication Virtual IP vpn Remove an ACL from WLAN RFS7000(config)#no Example (Others) RFS7000(config)#no service advanced-vty RFS7000(config)# RFS7000(config)#no bridge 1 ageing-time RFS7000(config)# RFS7000(config)#no bridge multiple-spanning-tree enable bridge-forward RFS7000(config)#
PAGE 43
2-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.5 service Common Commands Use this command to service/debug the switch.
PAGE 44
Common Commands 2-9 limit [buffer] [128|128k|16k| 1k|256|2k|32|32k|4k|512| 64|64k|8k] <0-65535> Sets the diagnostic limit submodes/commands. Configure the buffer usage warning limit. The warning limit can be set to one of the following sizes: • buffer – Sets the buffer usage warning limit.
PAGE 45
2-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide limit [maxFDs] <0-32767> Configures the maximum number of file descriptors between 0 - 32767 limit [pkbuffers] <0-65535> Configures the packet buffer cache limit between 0 - 65535 limit [procRAM] <0.0-100.0> Sets the RAM space used by a process as a percentage of the total space. Set the RAM space between 0 - 100.0%. limit [ram] <0.0-25.0> Sets the free space for the RAM as a percent of the total space.
PAGE 46
Common Commands 2-11 show [diag] [hardware| led-status|limts| period|stats|top] Shows following diagnostic details: • hardware – System hardware configuration • led-status – LED state variables and current state • limits – Limit values • period – The period (ms) for the in service diagnostics • stats – Current diagnostics statistics • top – Top processes (sorted by memory usage) show [nsm] [virtual-ip] [config] Shows the NSM virtual IP configuration show [rtls] [location-history|stats] Shows following
PAGE 47
2-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service show [cli|command-history|diag|fw (flows) brief|info|memory|nsm| pm(history)[process-name|all]|process|radio-neighbor|reboot-history|rtls| securitymgr|smart-rf|startup-log|upgrade-history|watchdog|wireless] service show diag [hardware|led-status|limits|period|stats|top] service show ip (igmp) snooping [robustness-variable|vlan (<1-4094>|)] service show radio-neighbor mu service show rtls [grid (all|x)|location-histo
PAGE 48
Common Commands 2-13 Parameters (Priv Exec mode only) service (clear) all Clears all core, dump and panic files aplogs Clears all local AP log files (does not clear them off the AP) clitree Clears clitree.html file (created by the save-cli command) fw [flows] Clears established session flow details securitymgr [flows] [<0-349>|| all|ge|me1|sa|vlan]| Clears the securitymgr flows based on the option selected. • <0-349> – Clears a specified flow. Specify the flow index between 1 - 349.
PAGE 49
2-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide limit [buffer|fan| filesys| inodes| load|maxFDs| pkbuffers| procRAM|ram| routecache| temperature] Enables diagnostic limit commands • buffer [128|128k|16k|1k|256|2k|32|32k|4k|512|64|64k|8k] <0-65535> – Sets buffer usage warning limits • fan <1-3> low <1000-15000> – Sets the fan speed limit of the fan specified by the <1-3> parameter • <1000-1500> – Sets the fan speed limit between 1000 - 15000 • filesys (etc2|flash|var) – Sets
PAGE 50
Common Commands 2-15 service (encrypt) encrypt [secret] 2 Encrypts passwords with secret phrase, using SHA256-AES256 encryption • – Enter the encryption passphrase. service (firewall) firewall [disable] Disables firewall parameters service (ip) ip [igmp] [snooping] [robustness-variable <1-7>] Sets Internet Group Management Protocol (IGMP) snooping parameters.
PAGE 51
2-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service (show) show [cli| command-history| diag|fw| info|ip| memory|nsm| pm| process| radio-neighbor| reboot-history|rtls| securitymgr|smart-rf| startup-log| upgrade-history| watchdog| wireless] Displays the following running system information: • cli – Displays CLI tree of the current mode • command-history – Displays command (except show commands) history.
PAGE 52
Common Commands 2-17 • securitymgr [flows] [details|source] – Displays following security manager flow details: • details – Displays detail flow statistics • source – Displays source IP address • • • • startup-log – Displays start up log upgrade-history – Displays upgrade history watch – Displays watchdog status wireless – Displays following wireless details: • ap-history – Access port history • buffer-counters – Allocation counts for various buffers • enhanced-beacon-table – Enhanced beacon table for AP
PAGE 53
2-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service (wireless) wireless [ap-history| clear-ap-log <1-1024>| custom-cli |dot11i| enhanced-beacon-table| enhanced-probe-table| forward-eap-to-wired| free-packet-watermark| idle-radio-send-multicast| legacy-load-balance| map-radios <1-127>| radio-misc-cfg| rate-scale| request-ap-log <11024>| save-ap-log| snmp-trap-throttle| sync-radio-entries|vlan-cache] Configures Wireless parameters • ap-history (clear|enable) – Manages access port
PAGE 54
Common Commands 2-19 • radio-misc-cfg – Sets radio-specific misc configuration U16 for all radios • – The hexadecimal 0000-FFFF bit mask enabling/disabling various misc configurations • rate-scale – Enables wireless rate scaling (default) • request-ap-log <1-1024> – Requests AP logs. Set the AP index between 1 - 1024 • save-ap-log – Saves a debug/error sent by the access port • snmp-trap-throttle <1-20> – Limits the number of SNMP traps generated from the wireless table.
PAGE 55
2-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wireless (custom-cli) (sh-wi-radio) Customizes the output of the “show radio” command.
PAGE 56
Common Commands 2-21 wireless (enhanced-probe-table) Sets the following MU loactioning enhanced beacon table parameters: • enable – Enables enhanced beacon table for MU locationing • erase-report – Erases the enhanced beacon table for MU locationing report • max-mu <0-512> – Sets the maximum number of MUs in the enhanced beacon table report. Set a number between 0 - 512.
PAGE 57
2-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service (diag) diag [enable|limit|period] Use this parameter as a diagnostics tool.
PAGE 58
Common Commands 2-23 radius [restart|test] Enables the RADIUS server. Select one of the following two options: • restart – Restarts the RADIUS server with updated configuration • test [|] – Tests the RADIUS server account with user parameters. Select the RADIUS server to test by providing one of the following information: •
PAGE 59
2-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide RFS7000#service diag limit load 05 ? WORD percentage load from 0.0 to 100.
PAGE 60
Common Commands 2-25 2.1.6 show Common Commands This command displays the settings for the specified system component. There are a number of ways to invoke the show command: • Invoked without any arguments, show displays information about the current context. If the current context contains instances, then show command (usually) displays a list of these instances. • Invoked with the display parameter, it displays information about that component. Syntax show [display_parameter] Parameters Table 2.
PAGE 61
2-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 2.
PAGE 62
Common Commands 2-27 Table 2.
PAGE 63
2-28 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.7 aap-wlan-acl Show commands common to all modes Use this command to display WLAN based ACL.
PAGE 64
Common Commands 2-29 2.1.8 aap-wlan-acl-stats Show commands common to all modes Use this command to display IP filtering WLAN based statistics.
PAGE 65
2-30 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.9 access-banner Show commands common to all modes Use this command to display access banner. Syntax show access-banner Parameters None Example RFS7000(config)#show access-banner This Device is running in Common Criteria Mode Attention: This is a protected and private wireless system. No un-authorized access allowed You must have proper rights to access and manage this system from the authorized personnel.
PAGE 66
Common Commands 2-31 2.1.10 audit-log-filters Show commands common to all modes Use this command to display audit log filter rules.
PAGE 67
2-32 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.11 autoinstall Show commands common to all modes Use this command to display autoinstall configuration. Syntax show autoinstall {status} Parameters status Optional. Displays autoinstall status (whether initiated or not) Example RFS7000(config)#show autoinstall Warning: This will display secure information.
PAGE 68
Common Commands 2-33 2.1.12 commands Show commands common to all modes Use this command to view a list of show commands.
PAGE 69
2-34 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.13 crypto Show commands common to all modes Use this command to display encryption module configuration.
PAGE 70
Common Commands 2-35 Example RFS7000#show crypto pki trustpoints Trustpoint :default-trustpoint ----------------------------------------------Server certificate configured Subject Name: Common Name: Motorola Organizational Unit: EWLAN Organization: Enterprise Mobility Location: San Jose State: CA Country: US Issuer Name: Common Name: Motorola Organizational Unit: EWLAN Organization: Enterprise Mobility Location: San Jose State: CA Country: US Valid From: Aug 27 04:30:03 2011 GMT Valid Until: Aug 26 04:30:0
PAGE 71
2-36 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.14 crypto-error-log Show commands common to all modes Use this command to display crypto error log.
PAGE 72
Common Commands 2-37 2.1.15 crypto-log Show commands common to all modes Use this command to display crypto log.
PAGE 73
2-38 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.16 environment Show commands common to all modes Use this command to display environmental information. Syntax show environment Parameters None Example RFS7000(config)#show environment upwind of CPU CPU die left side by FPGA front right front left fan 1 fan 2 fan 3 RFS7000(config)# temperature temperature temperature temperature temperature temperature fan fan fan : : : : : : : : : 30.0 56.0 29.0 27.0 25.0 26.
PAGE 74
Common Commands 2-39 2.1.17 firewall Show commands common to all modes Use this command to display firewall configuration.
PAGE 75
2-40 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.18 history Show commands common to all modes Use this command to display session command history. Syntax show history Parameters None Example RRFS7000>show history Warning: This will display secure information.
PAGE 76
Common Commands 2-41 2.1.19 interfaces Show commands common to all modes Use this command to display interface status. Syntax show interfaces {|ge <1-4>|me1|sa <1-4>| switchport[|ge <1-4>|me1|sa <1-4>|vlan <1-4094>]|vlan <1-4094>} Parameters Optional. Displays a specified interface status. Specify the interface name to display status. ge <1-4> Optional. Displays GigabitEthernet interface status. Select the interface index between 1- 4. me1 Optional.
PAGE 77
2-42 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide RFS7000(config)#show interfaces sa 2 Interface sa2 Hardware Type AGGREGATE, Interface Mode Layer 2, address is 00-15-70-37-fc-91 index=2005, metric=1, mtu=0, (HAL-IF) <> Speed: Admin Auto, Operational Unknown, Maximum 1G Duplex: Admin Auto, Operational Unknown Active Medium: Unknown Switchport Settings: Mode: Access, Access Vlan: 1 input packets 0, bytes 0, dropped 0, multicast packets 0 input errors 0, length 0, overrun 0, CRC 0, fram
PAGE 78
Common Commands 2-43 2.1.20 ip Show commands common to all modes Use this command to view IP configuration details.
PAGE 79
2-44 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide show ip (arp) arp Displays Address Resolution Protocol (ARP) settings show ip (ddns) ddns [binding] Displays DNS address bindings show ip (dhcp) dhcp [binding {manual}| class {}| pool {}| sharednetwork] Displays following DHCP server configuration: • binding – DHCP address bindings • manual – Optional. Static DHCP address bindings • class – Displays DHCP server class configuration • – Optional.
PAGE 80
Common Commands 2-45 querier (vlan) [<1-4094>|] Optional. Displays IGMP querier settings • vlan – Identifies the VLAN to use • <1-4094> – Select a single VLAN between 1 - 4094. • – Specify a list (for example, 1,3,7) or range (for example, 3-7) of VLANs. valn [<1-4094>| ] Optional. Identifies the VLAN to use • <1-4094> – Select a single VLAN between 1 - 4094. • – Specify a list (for example, 1,3,7) or range (for example, 3-7) of VLANs.
PAGE 81
2-46 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide route {| |detail} Displays IP routing table • A.B.C.D – Optional. Displays the network in the IP routing table • A.B.C.D/M – Optional. IP prefix / (for example, 35.0.0.0/ 8) • detail – Optional. Displays IP routing table in detail show ip (routing) routing Displays IP routing status show ip (ssh) ssh Displays Secured Shell (SSH) server details Usage Guidelines 1.
PAGE 82
Common Commands 2-47 Standard IP access list 1 permit 172.16.10.10/24 rule-precedence 10 RFS7000(config)# RFS7000(config)#show ip dhcp binding manual IP MAC/Client-Id -------------RFS7000(config)# RFS7000(config)#show ip dhcp binding IP MAC/Client-Id Type Expiry Time ----------------- ----------RFS7000(config)# RFS7000#show ip dhcp pool ! ip dhcp pool pl! ip dhcp pool pool1 domain-name test.com bootfile 123 network 10.10.10.0/24 address range 10.10.10.2 10.10.10.30! ip dhcp pool poo110 next-server 1.1.1.
PAGE 83
2-48 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.21 ldap Show commands common to all modes Displays LightWeight Directory Access Protocol (LDAP) server configuration parameters. Syntax show ldap [configuration {primary|secondary}] Parameters ldap [configuration] Displays LDAP server configuration primary Optional. Displays primary LDAP server configuration secondary Optional.
PAGE 84
Common Commands 2-49 2.1.22 licenses Show commands common to all modes Use this command to view installed licenses.
PAGE 85
2-50 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.23 logging Show commands common to all modes Use this command to view logging configuration and buffer.
PAGE 86
Common Commands 2-51 2.1.24 mac Show commands common to all modes Use this command to display MAC access lists (ACLs) and access groups. Syntax show mac [access-group|access-list] show mac access-group [|all|ge <1-4>|me1|role |sa <1-4>| vlan <1-4094>] Parameters access-group [|all| ge <1-4>|me1| role | sa <1-4>|vlan <1-4094>] Displays MAC ACLs attached to an interface. Select one of the following options: • - Displays MAC ACLs attached to a specified interface.
PAGE 87
2-52 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.25 mac-address-table Show commands common to all modes Use this command to view MAC address table. Syntax show mac-address-table Parameters None Example RFS7000(config)#show mac-address-table Bridge VLAN Port Mac ------------ ---- ------------ -------------1 1 ge1 0002.b328.d155 1 1 ge1 0015.7038.064a 1 1 ge1 00a0.f868.d55d 1 1 ge1 0015.7037.
PAGE 88
Common Commands 2-53 2.1.26 mac-name Show commands common to all modes Use this command to view configured MAC names.
PAGE 89
2-54 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.27 management Show commands common to all modes Displays L3 management interface name.
PAGE 90
Common Commands 2-55 2.1.28 mobility Show commands common to all modes Use this cpmmand to view mobility parameters. Syntax show mobility [event-log|forwarding|global|mobile-unit|peer|statistics] show show show show show mobility mobility mobility mobility mobility event-log [mobile-unit|peer] forwarding {} mobile-unit {|detail} peer {
PAGE 91
2-56 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide RFS7000(config)#show mobility event-log mobile-unit Time Event Evt-Src-IP MU-Mac HS-IP CS-IP 09/14 19:17:52 IP-UPD-MU n/a 00-0f-3d-e9-a6-54 157.235.208.134 157.235.208.16 157.235.208.16 09/14 19:17:51 ADD-MU n/a 00-0f-3d-e9-a6-54 157.235.208.16 157.235.208.16 09/14 19:17:51 DEL-MU n/a 00-0f-3d-e9-a6-54 157.235.208.16 157.235.208.16 09/14 19:17:50 ADD-MU n/a 00-0f-3d-e9-a6-54 157.235.208.16 157.235.208.16 MU-IP 0.0.0.0 0.0.0.0 0.0.0.
PAGE 92
Common Commands 2-57 2.1.29 ntp Show commands common to all modes Use this command to view Network Time Protocol (NTP) configuration settings. Syntax show ntp [associations {detail}|status] Parameters ntp Displays NTP settings association (detail) Displays NTP associations • detail – Optional. Specify ‘detail’ to view detailed NTP associations.
PAGE 93
2-58 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.30 port Show commands common to all modes Use this command to display physical/aggregate port interface.
PAGE 94
Common Commands 2-59 2.1.
PAGE 95
2-60 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.32 privilege Show commands common to all modes Use this command to view current privilege levels.
PAGE 96
Common Commands 2-61 2.1.
PAGE 97
2-62 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.34 radius Show commands common to all modes Use this command to view RADIUS configuration details. Syntax show radius [configuration|eap|group|nas|proxy|rad-user|trust-point] show show show show show radius radius radius radius radius eap [configuration] group {} nas {
PAGE 98
Common Commands 2-63 2.1.35 redundancy Show commands common to all modes This command displays the switch’s IP address, number of active neighbors, group license, installed license, cluster AP adoption count, switch adoption count, hold time, discovery time, heartbeat interval, cluster id, switch mode etc. In a cluster, this command displays the redundancy runtime and configured information of the self-switch.
PAGE 99
2-64 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.36 role Show commands common to all modes Use this command to view configured role parameters. Syntax show role {|mobile-units} Parameters role Displays configured role parameters Optional. Displays configured role parameters for an existing role. Specify the existing role name. mobile-units Optional.
PAGE 100
Common Commands 2-65 2.1.37 rtls Show commands common to all modes Syntax2 show rtls [aeroscout|ekahau|filter|site|sole|tags|zone] show rtls [aeroscout|ekahau|filter {<1-100>}|site|sole {peers|probes}| tags {aeroscout|all|ekahau|g2|mobile-unit|rfid|zone}|zone {<1-48>|(detail}] Parameters aeroscout Displays AeroScout configurations ekahau Displays ekahau configurations filters <1-100> Displays RFID tag filters • <1-100> – Optional. Select the tag filter index between 1 - 100.
PAGE 101
2-66 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Recv msg count Sent msg count Tag report count Last msg recv time Last msg sent time RFS7000# : : : : : 0 0 0 -
PAGE 102
Common Commands 2-67 2.1.38 service-list Show commands common to all modes Use this command to display list of services.
PAGE 103
2-68 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.39 smtp-notification Show commands common to all modes Use this command to display SNMP engine parameters.
PAGE 104
Common Commands 2-69 2.1.40 snmp Show commands common to all modes Use this command to view Simple Network Management Protocol (SNMP) engine configuration. Syntax show snmp user [snmpmanager|snmpoperator|snmptrap] Parameters user Displays SNMP user information.
PAGE 105
2-70 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.41 snmp-server Show commands common to all modes Use this command to display SNMP engine parameters. Syntax show snmp-server {traps {wireless-statistics [mesh|mobile-unit|radio| wireless-switch|wlan]}} Parameters snmp-server Displays SNMP server status and version. To view SNMP server trap flags, select traps parameter. traps Optional. Displays trap enable flags wireless-statistics Optional.
PAGE 106
Common Commands 2-71 2.1.42 spanning-tree Show commands common to all modes Use this command to view spanning tree configuration. Syntax show spanning-tree mst {configuration|detail|instance} show spanning-tree mst {detail {interface [|ge <1-4>|me1|sa <1-4>| vlan <1-4094>]}} show spanning-tree mst {instance [<1-15>] {interface [|ge <1-4>|me1| sa <1-4>|vlan <1-4094>]}} Parameters mst (configuration) configuration Optional.
PAGE 107
2-72 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Example RFS7000>show spanning-tree mst configuration % % MSTP Configuration Information for bridge 1 : %-----------------------------------------------------% Format Id : 0 % Name : My Name % Revision Level : 0 % Digest : 0xAC36177F50283CD4B83821D8AB26DE62 %-----------------------------------------------------RFS7000> RFS7000>show spanning-tree mst detail interface ge 3 % Bridge up - Spanning Tree Enabled % CIST Root Path Cost 0 - CIST
PAGE 108
Common Commands 2-73 2.1.43 static-channel-group Show commands common to all modes Use this command to view static channel group membership.
PAGE 109
2-74 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.44 terminal Show commands common to all modes Use this command to view terminal configuration parameters.
PAGE 110
Common Commands 2-75 2.1.45 timezone Show commands common to all modes Use this command to display the timezone.
PAGE 111
2-76 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.46 traffic shape Show commands common to all modes Use this command to display traffic shaping. Syntax show traffic-shape [config|priority-map|statistics] show traffic-shape [config {class <1-4>}|priority-map|statistics {class <1-4>}] Parameters config {class <1-4>} Displays traffic shaping configuration for a specified traffic shaping class. • class <1-4> – Optional. Specifies the traffic shaping class number between 1 - 4.
PAGE 112
Common Commands 2-77 2.1.47 users Show commands common to all modes Use this command to view information about currently logged in users.
PAGE 113
2-78 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.48 version Show commands common to all modes Use this command to display software and hardware version. Syntax show version {verbose} Parameters verbose Optional. Displays software and hardware details Example RFS7000(config)#show version RFS7000 version 4.1.2.0-007GD Copyright (c) 2006-2011 Motorola Solutions, Inc. Booted from primary. Switch uptime is 6 days, 15 hours 39 minutes CPU is RMI XLR V0.
PAGE 114
Common Commands 2-79 2.1.49 virtual ip Show commands common to all modes Use this command to display IP redundancy features.
PAGE 115
2-80 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.
PAGE 116
Common Commands 2-81 show wireless non-preferred-ap-attempts-threshold show wireless qos-mapping {wired-to-wireless|wireless-to-wired} show wireless radio {<1-4096>|admission-control [voice] {<1-4096>}|all|beacon-table| config (<1-4096>|default-11a|default-11an|default-bg|default-bgn)| monitor-table|statistics (<1-4096>|long-interval|short-interval|voice)| unadopted|uptime|voice <1-4096>} show wireless radio-graoup <1-256> show wireless regulatory (country codes) show wireless self-heal-config {<1-4096>|al
PAGE 117
2-82 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wireless (ap-detection-config) ap-detection-config Displays detected AP configuration parameters wireless (ap-images) ap-images Lists the access port images on the wireless switch wireless (ap-radio-config) ap-radio-config Displays AP radio configurations wireless (ap-unadopted) ap-unadopted Lists unadopted access ports wireless (authorized-aps) authorized-aps Displays authorized APs seen by access port scans wireless (channe
PAGE 118
Common Commands 2-83 fwupdate-filelocation Displays file location wireless (fwupdate-name) fwupdate-filename Displays file name wireless (fwupdate-mode) fwupdate-mode Displays firmware upgrade mode wireless (fwupdate-serveraddress) fwupdate-serveraddress Displays SFTP server IP address wireless (fwupdateusername) fwupdate-username Displays login user name wireless (hotspot) hotspot Displays hotspot configuration wireless (hotspot-config) hotspot-config {<1-256>} Displays WLAN hotspot configura
PAGE 119
2-84 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide mesh [statistics] {<1-32>} Displays mesh related parameters • statistics {<1-32>} – Displays mesh statistics for a specified mesh • <1-32> {detail}– Optional. Select the mesh index between 1 - 32. • detail – Optional. Provides detailed statistics for the mesh specified by the <1-32> parameter.
PAGE 120
Common Commands 2-85 non-preferred-ap-attemptsthreshold Displays non-preferred AP threshold wireless (qos-mapping) qos-mapping {wired-to-wireless| wired-to-wired} Displays Quality of Service (QoS) mappings used for mapping WMM access categories and 802.1p / DSCP tags • wired-to-wireless – Optional. Displays mappings used when traffic is switched from wired to the wireless side • wireless-to-wired – Optional.
PAGE 121
2-86 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wireless (regulatory) regulatory Displays regulatory (allowed channel/power) information for a particular country • – Specify the two letter ISO-3166 country code. (Use the ‘show wireless country-code-list’ command to list supported country codes.) wireless (self-heal-config) self-heal-config {<1-4096>|all} Displays self healing configuration parameters • <1-4096> – Optional.
PAGE 122
Common Commands 2-87 wireless (unauthorized-aps) unauthorized-aps Displays unauthorized APs seen by access port or mobile unit scans wireless (wips) wips {configured-ap-def-essids| configured-bad-essids| fake-ap-flood| filter-list|suspicious-ap} Displays WIPS parameters based on the option selected • configured-ap-def-essids – Optional. Lists configured default ESSIDs • configured-bad-essids – Optional. Lists configured bad ESSIDs • fake-ap-flood [threshold] – Optional. Displays Fake-AP Flood threshold.
PAGE 123
2-88 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide RFS7000>show wireless ap-detection-config Rogue AP timeout : 300 seconds Authorized AP timeout : 300 seconds Ignored AP timeout : 300 seconds mu-assisted scan : disabled mu-assisted scan refresh : 1800 seconds configured authorized-aps : Index | Bss Mac | Ssid ------------------------------------------------------configured ignored-aps : Index | Bss Mac | Ssid ------------------------------------------------------AP7131 minimum adoptio
PAGE 124
Common Commands 2-89 RFS7000>show wireles hotspot-config WLAN: 1, status: disabled, description: WLAN1, ssid: 101 authentication-type: dot11i pre-shared key, encryption-type: none wlan not setup for hotspot WLAN: 2, status: disabled, description: WLAN2, ssid: 102 authentication-type: dot11i pre-shared key, encryption-type: none wlan not setup for hotspot WLAN: 3, status: disabled, description: WLAN3, ssid: 103 authentication-type: dot11i pre-shared key, encryption-type: none wlan not setup for hotspot WLAN
PAGE 125
2-90 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.51 wlan-acl Show commands common to all modes Use this command to view WLAN based ACLs. Syntax show wlan-acl [<1-256>|all] Parameters <1-256> Displays ACLs attached to the specified WLAN ID. Specify the WLAN ID between 1 - 256.
PAGE 126
Common Commands 2-91 2.1.52 access-list Show commands in PrivExec and Global Config modes This command lists all the access lists (numbered and named) configured on the switch. The numbered access list displays all numbered ACLs. The named access-list displays the details of the name ACL. Syntax Parametersshow access-list {<1-99>|<100-199>|<1300-1999>|<2000-2699>|} <1-99> Optional. Displays IP standard access list <100-199> Optional. Displays IP extended access list <1300-1999> Optional.
PAGE 127
2-92 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.53 aclstats Show commands in PrivExec and Global Config modes This command displays the statistics of all the access lists configured on the switch. Syntax show aclstats [access-list|vlan] show aclstats access-list {<1-99>|<100-199>|<1300-1999>|<2000-2699>|} show aclstats vlan <1-4094> Parameters access-list Displays configured access-list statistics • <1-99> – Optional.
PAGE 128
Common Commands 2-93 2.1.54 boot Show commands in PrivExec and Global Config modes Use this command to view boot configuration details. Syntax show boot Parameters None Example RFS7000#show boot Image ----Primary Secondary Build Date -------------------Sep 24 06:24:14 2011 Sep 24 06:24:14 2011 Current Boot Next Boot Software Fallback RFS7000# : Primary : Primary : Enabled Install Date -------------------unknown unknown Version -------------4.1.2.0-007GD 4.1.2.
PAGE 129
2-94 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.55 clock Show commands in PrivExec and Global Config modes Use this command to display the system clock.
PAGE 130
Common Commands 2-95 2.1.56 debugging Show commands in PrivExec and Global Config modes Use this command to view Multiple Spanning Tree Protocol (MSTP) information.
PAGE 131
2-96 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.57 dhcp Show commands in PrivExec and Global Config modes Use this command to display DHCP server configurations. Syntax show dhcp [config|status] Parameters config Displays DHCP server configuration status Displays whether the DHCP server is running or not Example RFS7000#show dhcp config service dhcp ! ip dhcp pool vlan63 default-router 192.168.157.2 network 192.168.63.0/24 address range 192.168.63.20 192.168.63.
PAGE 132
Common Commands 2-97 2.1.58 file Show commands in PrivExec and Global Config modes Use this command to display filesystem information.
PAGE 133
2-98 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.
PAGE 134
Common Commands 2-99 2.1.60 running-config Show commands in PrivExec and Global Config modes Displays the contents of the configuration file for the switch, including all configured MAC and IP access lists and access groups applied to an interface. Syntax show running-config {full|include-factory} Parameters full Optional. Displays full configuration include-factory Optional. Includes factory defaults Example RFS7000(config)#show running-config Warning: This will display secure information.
PAGE 135
2-100 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.
PAGE 136
Common Commands 2-101 2.1.62 sessions Show commands in PrivExec and Global Config modes Syntax show sessions Parameters None Example RFS7000(config)#show sessions SESSION USER LOCATION ** 1 cli 172.16.10.
PAGE 137
2-102 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.63 startup-config Show commands in PrivExec and Global Config modes Syntax show startup-config Parameters None Example RFS7000(config)#show startup-config Warning: This will display secure information.Do you want to proceed? (y/n): y ! ! configuration of RFS7000 version 4.1.4.0-010GD ! version 1.
PAGE 138
Common Commands 2-103 2.1.64 upgrade-status Show commands in PrivExec and Global Config modes Use this command to display last image upgrade status. Syntax show upgrade-status {detail} Parameters detail Optional.
PAGE 139
2-104 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 2.1.65 wlan-acl Show commands common to all modes Use this command to display WLAN based ACL. Syntax show wlan-acl [<1-256>|all] Parameters <1-256> Displays ACLs attached to a specified WLAN ID. Select the WLAN ID between 1 - 256.
PAGE 140
User Exec Commands Logging in to the switch places you within the USER EXEC command mode. Typically, a log-in requires a user name and a password. You have three attempts to enter a password correctly before a connection attempt is refused.The USER EXEC commands available at the user level are a subset of those available at the privileged level. In general, the user EXEC commands allow you to connect to remote devices, perform basic tests and list system information.
PAGE 141
3-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 3.1 User Exec Commands Summary Command traceroute Description Displays trace route to destination Ref.
PAGE 142
User Exec Commands 3-3 3.1.1 clear User Exec Commands Use this command to reset the command to previous configuration.
PAGE 143
3-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 3.1.2 cluster-cli User Exec Commands Use this command to cluster all the CLI pertaining to the context it appears. This feature is useful to configure each switch in the cluster by logging in to one switch. This eliminates administrator time and effort N-1 times (if there are N switches in the cluster). A new context called redundancy is created to support cluster-cli.
PAGE 144
User Exec Commands 3-5 3.1.3 disable User Exec Commands This command does not do anything in the User Exec mode. The disable command is used to exit the PRIV Exec mode. Enable the PRIV mode, then, use the disable command to exit the PRIV Exec mode.
PAGE 145
3-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 3.1.4 enable User Exec Commands Use this command to enter the PRIV mode.
PAGE 146
User Exec Commands 3-7 3.1.5 logout User Exec Commands Use this command instead of the exit command to exit the EXEC mode. Syntax logout Parameters None Example The RFS7000 Series Switch logs off on execution of this command.
PAGE 147
3-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 3.1.6 page User Exec Commands Use this command to toggle paging. Enabling this command displays the CLI output page by page, instead of running the entire output at once.
PAGE 148
User Exec Commands 3-9 3.1.7 ping User Exec Commands Use this command to send Internet Control Message Protocol’s (ICMP) echo packets to network hosts. Syntax ping [|] Parameters [| ] Pings destination address or hostname Example RFS7000>ping 192.168.235.200 PING 192.168.235.200 (192.168.235.200): 100 data bytes 128 bytes from 192.168.235.200: icmp_seq=0 ttl=128 time=3.8 ms 128 bytes from 192.168.235.200: icmp_seq=1 ttl=128 time=4.3 ms 128 bytes from 192.
PAGE 149
3-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 3.1.8 quit User Exec Commands Use this command to exit the current mode, and move back to the previous mode. Syntax quit Parameters None Example In the User Exec mode, the switch logs off upon execution of this command.
PAGE 150
User Exec Commands 3-11 3.1.9 show User Exec Commands Use this command to exit the current mode and go down to previous mode.
PAGE 151
3-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide protocol-list List of protocols radius Displays RADIUS configuration commands.
PAGE 152
User Exec Commands 3-13 port-channel privilege protocol-list radius redundancy role rtls service-list smtp-notification snmp snmp-server spanning-tree static-channel-group terminal timezone traffic-shape users version virtual-ip wireless wlan-acl Portchannel commands Show current privilege level List of protocols RADIUS configuration commands Configure redundancy group parameters Configure role parameters Real Time Locating System commands List of services Display SNMP engine parameters Display SNMP engin
PAGE 153
3-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 3.1.10 terminal User Exec Commands Use this command to set the length /number of lines displayed on the terminal window.
PAGE 154
User Exec Commands 3-15 3.1.11 traceroute User Exec Commands Use this command to trace the route to a destination. Syntax traceroute (|IP) Parameters Traces the route to a destination address or hostname. IP IP trace Example RFS7000>traceroute 192.168.235.200 traceroute to 192.168.235.200 (192.168.235.200), 30 hops max, 38 byte packets 1 * * * 2 * * * 3 * * * 4 * * * .................................... ....................................
PAGE 155
3-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 156
Privileged Exec Commands Most PRIV EXEC mode commands set operating parameters. The PRIV EXEC command set includes those commands contained in the USER EXEC mode. The PRIV EXEC mode also provides access to configuration modes using the configure command, and includes advanced testing commands. The PRIV EXEC mode prompt consists of the host name of the device, followed by a pound sign (#).
PAGE 157
4-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 4.1 Priv Exec Command Summary Command Description Ref.
PAGE 158
Privileged Exec Commands 4-3 4.1.1 acknowledge Priv Exec Commands Use this command to acknowledge alarms. Syntax acknowledge alarm-log [<1-65535>|all] Parameters alarm-log Acknowledges alarms <1-65535> Acknowledges a specified alarm. Select the alarm ID between 1 - 65535.
PAGE 159
4-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.2 archive Priv Exec Commands Use this command to manage archive files. Syntax archive tar [/table|/create|/xtract] archive tar /table [|] archive tar /create [|] archive tar /xtract [|]
Parameters tar Manipulates (creates, lists or extracts) a tar file • /table – Lists files in a tar file • /create – Creates a tar file • /xtract – Extracts files from a tar file Tar filename.
PAGE 160
Privileged Exec Commands 4-5 How to zip the folder flash:/log/? RFS7000#archive tar /create flash:/out.tar flash:/log/ tar: Removing leading '/' from member names flash/log/ flash/log/snmpd.log flash/log/messages.log flash/log/startup.
PAGE 161
4-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.3 change-passwd Priv Exec Commands Use this command to change the password of the logged in user. Syntax change-passwd Parameters None Usage Guidelines A password must be between 8 to 32 characters in length. For safety, the console does not display the user entered key words (refer example) for the old password and new password fields. Ensure the console displays the password successfully changed message.
PAGE 162
Privileged Exec Commands 4-7 4.1.4 clear Priv Exec Commands Use this command to reset the current context.
PAGE 163
4-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide clear (counters) counters [all|bridge|interface| firewall|igmp-snooping| router|thread] Clears counters • all – Clears all counters • bridge – Clears bridge counters • interface [|all|ge|me1|sa|vlan] – Clears interface counters • – Clears specified interface counters.
PAGE 164
Privileged Exec Commands 4-9 clear (ip) ip [dhcp|pmtu-discoveryblackhole-cache] Clears the IP Dynamic Host Configuration Protocol (DHCP) server settings • dhcp – Clears DHCP server configuration • bindings – Clears DHCP server address bindings based on the option selected • * – Clears all bindings • A.B.C.D – Clears specific bindings.
PAGE 165
4-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide clear (mobility) mobility [event-log| mobile-unit| peer-statistics] Clears mobility attributes • event-log – Clears all event logs based on the option selected • mobile-unit – CLears mobile unit event logs • peer – Clears peer event logs • mobile-unit – Clears a mobile unit • – Clears a specified mobile unit.
PAGE 166
Privileged Exec Commands 4-11 4.1.5 clock Priv Exec Commands Use this command to configure the software system clock.
PAGE 167
4-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.6 cluster-cli Priv Exec Commands Use this command to cluster all the CLI pertaining to the context it appears. This feature is useful to configure each switch in the cluster by logging in to one participating switch. This eliminates administrator time and effort, as one switch configuration can represent the entire cluster. A new context called redundancy is available to support the cluster-cli.
PAGE 168
Privileged Exec Commands 4-13 4.1.7 configure Priv Exec Commands Use this command to move into the global configuration mode. Syntax configure terminal Parameters terminal Configures from the terminal Example RFS7000#configure terminal Enter configuration commands, one per line. End with CNTL/Z.
PAGE 169
4-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.8 copy Priv Exec Commands Use this command to copy any file (config, log, txt...etc) to and from the switch. NOTE Copying a new config file onto an existing running-config file merges it with the existing running-config. Both, the existing running-config and the new config file are applied as the current running-config of the switch.
PAGE 170
Privileged Exec Commands 4-15 4.1.9 disable Priv Exec Commands Use this command to exit the Priv Exec mode and move to the User Exec mode.
PAGE 171
4-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.10 enable Priv Exec Commands Use this command to move from the User Exec mode to the Priv Exec mode. It turns on the privileged mode command. This command does not do anything in the Priv Exec mode.
PAGE 172
Privileged Exec Commands 4-17 4.1.11 erase Priv Exec Commands Use this command to erase a target filesystem.
PAGE 173
4-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.12 halt Priv Exec Commands Use this command to halt the switch. This command is similar to the reload command. The only difference is that halt command stops the switch and reload stops and restarts the switch.
PAGE 174
Privileged Exec Commands 4-19 4.1.13 keytransfer Priv Exec Commands Use this command to transfer keys for Secure File Transfer Protocol (SFTP). Syntax keytransfer host user Parameters keytransfer Transfers keys for the Secure File Transfer Protocol (SFTP) server. Public key must be transferred between RFS7000 and SFTP server via CLI before making a SFTP communication. host Sets the IP address of the SFTP server in the A.B.C.
PAGE 175
4-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.14 logout Priv Exec Commands Use this command to exit the EXEC mode. Syntax logout Parameters None Example RFS7000#logout Please press Enter to activate this console.
PAGE 176
Privileged Exec Commands 4-21 4.1.15 page Priv Exec Commands Use this command to toggle switch paging. Enabling this command displays the command output page by page, instead of running the entire output at once. Syntax page Parameters None Example RFS7000#page RFS7000#show running-config Warning: This will display secure information.Do you want to proceed? (y/n): y ! ! configuration of RFS7000 version 4.1.2.0-007GD ! version 1.
PAGE 177
4-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.16 ping Priv Exec Commands Use this command to send Internet Control Message Protocol’s (ICMP) echo packets to network hosts. Syntax ping [] Parameters Specify the destination address or hostname to ping Example RFS7000#ping 172.16.10.10 PING 172.16.10.10 (172.16.10.10): 100 data bytes 128 bytes from 172.16.10.10: icmp_seq=0 ttl=128 time=1.4 128 bytes from 172.16.10.10: icmp_seq=1 ttl=128 time=0.
PAGE 178
Privileged Exec Commands 4-23 4.1.17 pwd Priv Exec Commands Use this command to view the contents of the present working directory.
PAGE 179
4-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.18 quit Priv Exec Commands In the Priv Exec mode, use this command to quit current session, without saving changes, and shut down the switch. Syntax quit Parameters None Example RFS7000#quit RFS7000 version 1.0.0.0-016GR Login as 'cli' to access CLI.
PAGE 180
Privileged Exec Commands 4-25 4.1.19 reload Priv Exec Commands Use this command to halt the switch and perform a warm reboot.
PAGE 181
4-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.20 run Priv Exec Commands Use this command to execute a self test.
PAGE 182
Privileged Exec Commands 4-27 4.1.21 show Priv Exec Commands Use this command to show currently running system information.
PAGE 183
4-28 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide alarm-log {<1-65535>| acknowledged| all|count|new| severity-to-limit} Displays all alarms currently in the system. • <1-65535> – Optional. Displays details of specified alarm. Specify the alarm ID between 1 - 65535. • acknowledged – Optional. Displays acknowledged alarms currently in the system • all – Optional. Displays all alarms currently in the system • count – Displays count of alarms currently in the system • new – Optional.
PAGE 184
Privileged Exec Commands 4-29 crypto [ipsec|isakmp| key|map| pki] Displays encryption related commands • ipsec [sa|security-associaton|transformset] – Displays IPSEC policy details • sa – Displays IPsec security associations (SAs) • security-association (lifetime) – Displays lifetime SAs • transformset {} – Displays a specified transformset. The system displays all transformsets, if no transformset name is specified.
PAGE 185
4-30 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide firewall [config|dhcp|flow] Displays wireless firewall • config – Displays firewall configuration details • dhcp [snoop-table] – DHCP based firewalls • snoop-table – Displays snoop table entries • flow (timeouts) – Displays firewall flows • timeouts – Displays wireless firewall flow timeout configuration history Displays session command history interfaces {| ge <1-4>|me1| sa <1-4>|switchport| vlan <1-4094>} Displays interf
PAGE 186
Privileged Exec Commands 4-31 ip [access-group| access-list|arp|ddns| dhcp| dhcp-vendor-options| domain-name|dos| http|igmp|interface| name-server|nat|route| routing|ssh] Displays IP configuration • access-group [|all|ge <1-4>|me1|role | sa <1-4>|vlan <1-4094>] – Displays ACLs. attached to an interface • – The interface to display access-group information for.
PAGE 187
4-32 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • dhcp-vendor-options – Displays DHCP option 43 parameters received from the DHCP server • domain-name – Displays default domain for the DNS server • dos [config|stats] – Displays Denial of Service (DOS) configuration • config – Displays IP DOS configuration • stats – Displays IP DOS statistics • http [secure-server] – Displays HyperText Transfer Protocol Secure (HTTPS) status • secure-server – Displays if HHTPS server is running or no
PAGE 188
Privileged Exec Commands 4-33 • nat [interfaces|translations] – Displays Network Address Translations (NAT) configuration • interfaces – Displays NAT configuration on interfaces • translations {inside|outside|verbose} – Displays NAT translations. • Inside [destination|source] – Optional. Displays inside destination/source NAT translations • Outside [destination|source] – Optional. Displays outside destination/source NAT translations • verbose – Optional.
PAGE 189
4-34 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide mobility [event-log| forwarding|global| mobile-unit|peer| statistics] Displays following mobility parameters: • event-log [mobile-unit|peer] – Displays event logs • mobile – Displays station event logs • peer – Displays peer event logs • forwarding {} – Displays mobile units in the forwarding plane • – Optional.
PAGE 190
Privileged Exec Commands 4-35 radius [configuration|eap| group|nas|proxy| rad-user| trust-point] Displays RADIUS configuration commands • configuration – Displays RADIUS server configuration (status and data source) • eap [configuration] – Displays RADIUS Extensible Authentication Protocol (EAP) configuration. EAP-Transport Layer Security (EAP-TLS) is enabled by default • group {} – Displays RADIUS groups in the local database. To view a specific RADIUS group, specify the group name. • nas {
PAGE 191
4-36 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide rtls [aeroscout|ekahau| filter|site| sole|tags|zone] Displays following real time locating system (RTLS) parameters: • aeroscout – Displays AeroScout configurations • ekahau – Displays ekahau configurations • filter {<1-100>} – Displays Radio Frequency Identification (RFID) tag filters. To view a specific tag filter, select the tag index between 1 - 100.
PAGE 192
Privileged Exec Commands 4-37 snmp-server {traps} Displays SNMP server configuration • traps – Displays trap enable flags spanning-tree mst {configuration|detail| instance} Displays spanning tree information. • mst {configuration|detail|instance} – Displays MST information • configuration – Displays MST configuration information • detail interface [|ge <1-4>|me1|sa <1-4>|vlan <1-4094>] – Displays MST detailed information.
PAGE 193
4-38 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wireless [aap-version|ap| ap-containment| ap-detection-config| ap-images| ap-radio-config| ap-unadopted| authorized-aps| channel-power| client|config| country-code-list| default-ap|fw| fwupdate-filelocation| fwupdate-filename| fwupdate-mode| fwupdate-serveraddress| fwupdate-username| hotspot| hotspot-config| ignored-aps|known| mac-auth-local| mesh| mobile-unit| multicast-packet-limit| non-preferred-ap-attemptsthreshold|qos-mapping| rad
PAGE 194
Privileged Exec Commands 4-39 • config – Displays wireless LAN configuration • country-code-list – Lists the supported country names and the corresponding 2 letter ISO 3166 country codes • default-ap – Displays default access port information • fw [config] – Displays configurable firewall parameters • fwupdate-filelocation – Displays file location • fwupdate-filename – Displays file name • fwupdate-mode – Displays firmware upgrade mode • fwupdate-serveraddress – Displays SFTP server IP address • fwupdate-u
PAGE 195
4-40 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide show [wireless] [mobile-unit] • mobile-unit {<1-8192>||association-history| association-stats|probe-history|radio|roaming|statistics|voice|wlan} – Displays details of associated mobile units, based on the option selected • <1-8192> – Optional. Select the mobile unit index between 1 - 8192. • – Optional. Specify the mobile unit MAC address. • association-history {} – Optional.
PAGE 196
Privileged Exec Commands 4-41 show wireless • multicast-packet-limit – Displays multicast packet limit • non-preferred-ap-attempts-threshold – Displays non preferred ap attempts threshold • qos-mapping {wired-to-wireless|wireless-to-wired} – Displays Quality of Service (QoS) mappings used for mapping wireless priorities and 802.1p / DHCP tags • wired-to-wireless – Optional. Displays mappings used when traffic is switched from wired to wireless • wireless-to-wired – Optional.
PAGE 197
4-42 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide show wireless • self-healing-config {<1-4096>|all} – Displays following self-healing parameters: • <1-4096> – Displays self healing configuration for a specified radio. Select the radio index between 1 4096. • all – Displays self healing configuration for all configured radios • sensor {<1-48>|default-config} – Displays Wireless Intrusion Protection System (WIPS) configuration.
PAGE 198
Privileged Exec Commands 4-43 wlan-acl [<1-256>|all] Displays WLAN based ACLs • <1-256> – Displays ACLs attached to the specified WLAN ID • all – Displays ACLs attached to WLAN port Usage Guidelines Refer to show on page 2-25 for additional information.
PAGE 199
4-44 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wlan-acl RFS7000# wlan based acl
PAGE 200
Privileged Exec Commands 4-45 4.1.22 terminal Priv Exec Commands Use this command to configure terminal display settings.
PAGE 201
4-46 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.23 traceroute Priv Exec Commands Use this command to trace the route to a destination. Syntax traceroute [|ip ] Parameters Traces the route to a specified destination address or hostname ip IP trace. Traces the route to a specified destination address or hostname Example RFS7000#traceroute ip 172.16.10.10 traceroute to 172.16.10.10 (172.16.10.10), 30 hops max, 38 byte packets 1 172.16.10.10 (172.16.
PAGE 202
Privileged Exec Commands 4-47 4.1.24 upgrade Priv Exec Commands Use this command to upgrade the switch software image. Syntax upgrade URL {background} Parameters URL {background} Defines location of firmware image • background – Optional.
PAGE 203
4-48 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 4.1.25 upgrade-abort Priv Exec Commands Use this command to abort an ongoing upgrade process. Syntax upgrade-abort Parameters None Example RFS7000#upgrade-abort % Error: No upgrade in progress RFS7000#upgrade tftp://xxx.xxx.xxx.xxx:/img background RFS7000#Sep 08 16:01:38 2011: %KERN-4-WARNING: EXT3-fs warning: maximal mount count reached, running e2fsck is recommended.
PAGE 204
Privileged Exec Commands 4-49 4.1.26 write Priv Exec Commands Use this command to write the running configuration to memory or terminal. Syntax write [memory|terminal] Parameters memory Writes to non-volatile (NV) memory terminal Writes to the terminal Example RFS7000#write terminal ! ! configuration of RFS7000 version 1.0.0.0-016GR ! version 1.
PAGE 205
4-50 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 206
Global Configuration Commands The term global is used to indicate characteristics or features effecting the system as a whole. Use the Global configuration mode to configure the system globally, or enter specific configuration modes to configure specific elements (such as interfaces or protocols). Use the configure terminal command, under PRIV EXEC, to enter the global configuration mode.
PAGE 207
5-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Command Description Ref. bridge Configures bridge parameters page 5-20 clrscr Clears the display screen page 2-2 country-code Configures the country of operation.
PAGE 208
Global Configuration Commands 5-3 Command Description Ref. remote-login Configures remote login parameters page 5-64 role Configures role parameters page 5-65 rtls Configures Real Time Location System (RTLS) mode parameters page 5-66 service Service commands page 5-67 show Shows running system information. For more information see, show on page 2-25.
PAGE 209
5-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.1 aaa Global Configuration Commands Use this command to configure current Authentication, Authorization and Accounting (AAA) login settings.
PAGE 210
Global Configuration Commands 5-5 5.1.2 aap-wlan-acl Global Configuration Commands Use this command to apply an Access Control List (ACL) on WLAN for AAP. Syntax aap-wlan-acl <1-256> [<100-199>|] [in|out] Parameters aap-wlan-acl Applies an IP extended ACL on an independent WLAN for an AAP <1-256> [<100-199>|] Select an independent WLAN index between 1 - 256. • <100-199> – Select the IP extended ACL index between 100 - 199. • – Specify the ACL name (with permit or deny rules).
PAGE 211
5-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.3 access-banner Global Configuration Commands Use this command to customize the switch’s access banner. Syntax access-banner [] Parameters Enter a string with minimum 10 characters and maximum 250 characters.
PAGE 212
Global Configuration Commands 5-7 5.1.4 access-list Global Configuration Commands Use this command to add an Access Control List (ACL) entry. Use the access list command under global configuration to configure the access list mechanism for filtering frames by protocol type or vendor code. ACLs control access to the network through a set of rules. Each rule specifies an action taken when a packet matches it, within the given set of rules.
PAGE 213
5-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Parameters access-list Adds a Standard IP access control list entry [<1-99>|<1300-1999>] • [<1-99>|<1300-1999>] – Defines the access list number between 1 - 99 or [deny|permit| 1300 - 1999 mark [8021p <0-7>| • [deny|permit|mark] – Defines following ACL action types: dscp <0-63>| • deny – Specifies packets to reject tos <0-255>]] [| • permit – Specifies packets to forward.mark [8021p|dscp|tos] – host
PAGE 214
Global Configuration Commands 5-9 access-list [<100-199>|<2000-2699>] [deny|permit| mark [8021p <0-7>| dscp <0-63>| tos <0-255>]] [ip] [source/source-mask| host-source|any] [destination/destinationmask| host-destination|any] {log (rule-description| rule-precedence)} Adds an Extended IP access list entry using the ip keyword • [<100-199>|<2000-2699>] – For IP type of extended ACL, the ACL number must be between 100 - 199 • [deny|permit|mark] – Defines following ACL action types: • deny – Specifies packets
PAGE 215
5-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide access-list [<100-199>|<2000-2699>] [deny|permit| mark [8021p <0-7>| dscp <0-63>|tos <0-255>]] [icmp] [source/source-mask| host- source|any] [destination/destinationmask|host-destination| any] [] [] {log {rule-precedence| rule-precedence}} Adds an Extended IP access list entry using the icmp keyword • [<100-199>|<2000-2699>] – For ICMP extended ACLs, the ACL number must be between 2000-2699 • [deny|permit|mark] –
PAGE 216
Global Configuration Commands 5-11 access-list [<100-199>|<2000-2699>] [deny|permit| mark [8021p <0-7>| dscp <0-63>|tos <0-255>]] [tcp|udp] [source/source-mask| host-source|any] [destination/destinationmask|host-destination| any|eq <1-65535>| range <1-65535>] {(eq
PAGE 217
5-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide access-list [<100-199>|<2000-2699>] [deny|permit| mark [8021p <0-7>| dscp <0-63>| tos <0-255>]] [proto] [<1-254>| |eigrp|gre| igmp|igp|ospf|vrrp] [source/source-mask| host-source|any] [destination/destinationmask| host-destination|any] {log (rule-description| rule-precedence)} Adds an Extended IP access list entry using the proto keyword The following are common to the ‘deny’, ‘permit’, and ‘mark [8021p|dscp|tos]’ keywords: • [p
PAGE 218
Global Configuration Commands 5-13 Usage Guidelines Use an access list command under global configuration to create an access list. The switch supports port, router and WLAN ACLs. • When the access list is applied on an Ethernet port, it becomes a port ACL. • When the access list is applied on a VLAN interface, it becomes a router ACL. • When the access list is applied on a WLAN index, it becomes a WLAN ACL. A MAC access list, to allow an ARP, is mandatory for both port and WLAN ACLs.
PAGE 219
5-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.5 arp Global Configuration Commands Use this command to map an IP address to a MAC address recognized on the managed network. The Address Resolution Protocol (ARP) enables mapping of IP to MAC addresses. This conversion is possible in both directions. Syntax arp [|ge <1-4>|me1|sa <1-4>|vlan <1-4094>] [] [MAC-ADDRESS] Parameters The interface name ge <1-4> The GigabitEthernet interface.
PAGE 220
Global Configuration Commands 5-15 5.1.6 audit-log-filter Global Configuration Commands Use this command to add or delete audit event log filters. NOTE When no filters are set the default action is to permit any.
PAGE 221
5-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Example RFS7000(config)#audit-log-filter add 1 permit any any any any RFS7000(config)# RFS7000(config)#show audit-log-filters RULE-PRECEDENCE USER NAME SOURCE MAC-address 1 any any any RFS7000(config)# IP-address any ACTION permit RFS7000(config)#audit-log-filter delete 1 RFS7000(config)# RFS7000(config)#show audit-log-filters RULE-PRECEDENCE USERNAME SOURCE MAC-address RFS7000(config)# IP-address ACTION
PAGE 222
Global Configuration Commands 5-17 5.1.7 auth-timeout Global Configuration Commands Use this command to set the authentication timeout in minutes. Syntax auth-timeout <1-1440> Parameters <1-1440> Specify the authentication timeout between 1 - 1440 minutes.
PAGE 223
5-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.8 autoinstall Global Configuration Commands Use this command to configure autoinstall parameters. Syntax autoinstall [clear-config-history|cluster-config {}|config {}| image {|version }|reset-config|start] Parameters autoinstall Displays autoinstall configuration commands clear-config-history {} Autoinstalls clear configuration history setup (this allows or causes reversion of image upgrades etc.
PAGE 224
Global Configuration Commands 5-19 5.1.9 boot Global Configuration Commands This command reboots the switch with an image present in the mentioned partition (either the primary or secondary partition).
PAGE 225
5-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.10 bridge Global Configuration Commands Use this command to configure bridge-specific details.
PAGE 226
Global Configuration Commands 5-21 Example RFS7000(config)#bridge multiple-spanning-tree enable RFS7000(config) RFS7000(config)#show spanning-tree mst % Bridge up - Spanning Tree Enabled % CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768 % Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20 % 1: CIST Root Id 800000157037fdf3 % 1: CIST Reg Root Id 800000157037fdf3 % 1: CST Bridge Id 800000157037fdf3 % portfast bpdu-filter disabled % portfast bpdu-guard disabled % portfast errdisa
PAGE 227
5-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.11 country-code Global Configuration Commands Use this command to configure the country of operation. Syntax country-code Parameters None Usage Guidelines This command erases all existing radio configurations.
PAGE 228
Global Configuration Commands 5-23 5.1.12 crypto Global Configuration Commands Use this command to configure data encryption parameters. NOTE crypto isakmp(policy)Priority leads you to config-crypto-isakmp instance. For more details see Crypto ISAKMP Config Commands on page 6-1. crypto isakmp(client)configuration group default leads you to config-crypto-group instance. For more details see Crypto Group Config Commands on page 7-1. crypto isakmp(peer)IP Address leads you to config-crypto-peer instance.
PAGE 229
5-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Parameters crypto (ipsec) ipsec [security-association| transform-set] Configures IP Security (IPSec) policies • security-association – Sets the IPSec security association (SA) parameter • lifetime [kilobyte|seconds] – Sets IPSec SA lifetime (can be defined in either in kilobytes or seconds).This is an IPsec Phase 2 SA lifetime. • kilobytes – Volume-based key duration. Minimum is 500 KB and maximum is 204800 KB.
PAGE 230
Global Configuration Commands 5-25 isakmp [client|keepalive|key| peer|policy] Configures Internet Security Association and Key Management Protocol (ISAKMP) policy • [client] [configuration] [group] [default] – This leads to the config-crypto-group instance. For more details, seeCrypto Group Config Commands on page 7-1.
PAGE 231
5-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide map <1-1000> [ipsec-isakmp| ipsec-manual] {dynamic} Specifies a name for the new crypto map at the time of creation. For more details see Crypto Map Config Commands on page 10-1. • – Enter the crypto map name (should not exceed 32 characters in length). • <1-1000> – Specifies the crypto map entry sequence number between 1 1000 • ipsec-isakmp – Configures IPSec w/ISAKMP.
PAGE 232
Global Configuration Commands 5-27 WORD Trustpoint Name RFS7000(config)#crypto pki trustpoint Test RFS7000(config-trustpoint)#? Trustpoint Config commands: clrscr Clears the display screen company-name Company Name(Applicable only for request) email email end End current mode and change to EXEC mode exit End current mode and down to previous mode fqdn Domain Name Configuration help Description of the interactive help system ip-address Internet Protocol (IP) no Negate a command or set its defaults passwor
PAGE 233
5-28 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.13 do Global Configuration Commands Use this command to run commands from either the User Exec or Priv Exec mode. Syntax do (command of other mode) Parameters None Example RFS7000(config)#do ping 157.235.208.69 PING 157.235.208.69 (157.235.208.69): 100 128 bytes from 157.235.208.69: icmp_seq=0 128 bytes from 157.235.208.69: icmp_seq=1 128 bytes from 157.235.208.69: icmp_seq=2 128 bytes from 157.235.208.
PAGE 234
Global Configuration Commands 5-29 5.1.14 end Global Configuration Commands Use this command to end the current mode and change to the Exec mode. Syntax end Parameters None Example RFS7000(config)#end RFS7000#? Priv Exec commands: acknowledge Acknowledge alarms archive Manage archive files autoinstall autoinstall configuration command cd Change current directory ............................................ ............................................
PAGE 235
5-30 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.15 errdisable Global Configuration Commands Use this command to enable the timeout mechanism for the port. With errdisable enabled, the switch on detecting an error situation on the port, automatically shuts it down, and no traffic is sent or received on the port.
PAGE 236
Global Configuration Commands 5-31 5.1.16 firewall Global Configuration Commands Use this command to configure firewall parameters. Syntax firewall [802.2-encapsulation|clamp|dhcp-snoop-conflict-detection|dhcp-snoop-conflictlogging|enable|flow|virtual-defrag|vlan-stacking] firewall firewall firewall firewall firewall firewall firewall 802.
PAGE 237
5-32 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide virtual-defrag [enable| max-defrags-per-host| max-frags-per-dgram| min-1st-frag-length] Sets IPv4 virtual defragmentation parameters • enable – Enables IPv4 virtual defragmentation. Enabling of this option is recommended by Motorola Solutions.
PAGE 238
Global Configuration Commands 5-33 5.1.17 hostname Global Configuration Commands Use this command to define the system’s network name.
PAGE 239
5-34 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.18 interface Global Configuration Commands Use this command to configure a selected interface. This command is used to enter the interface configuration mode for the specified physical/ Switch Virtual Interface (SVI) interface. If the VLANx (SVI) interface does not exist, it is automatically created. NOTE The interface mode leads to the config-if instance. For additional information, see Interface Config commands on page 12-1.
PAGE 240
Global Configuration Commands 5-35 5.1.19 ip Global Configuration Commands Use this CLI command to configure a selected Internet Protocol (IP) component. NOTE Use an ip access-list extended command to move to the (config-ext-nacl) instance. For additional information, see Extended ACL Config Commands on page 14-1. Use an ip access-list standard command to move to the (config-std-nacl) instance. For additional information, see Standard ACL Config Commands on page 15-1.
PAGE 241
5-36 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ip nat [inside|outside] [destination|source] ip nat inside destination [static] [<1-65535>|] ip nat inside source [LIST [INTERFACE (|vlan <1-4094>)]| static ]ip route [|] ip routing ip ssh {port|rsa} ip ssh {port <1-65536>} ip ssh {rsa keypair-name ()} ip (access-list) access-list [extended|standard] Use the
PAGE 242
Global Configuration Commands 5-37 ip (dhcp) dhcp [bootp|class| excluded-address |option|ping|pool] Configures DHCP server parameters • bootp [ignore] – Defines the BOOTP specific configuration • ignore – Configures the DHCP server to ignore BOOTP requests • class – Defines the DHCP server class name, and enters the DHCP class configuration mode • – The DHCP class name • excluded-address – Prevents the DHCP server from assigning certain addresses • – Enter this v
PAGE 243
5-38 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ip (dos) dos [ascend| bcast-mcast-icmp| chargen|fraggle| ftp-bounce| invalid-ptotocol| option-route| router-advt|router-solicit| smurf|snork| tcp-intercept| twinge] Configures following Denial of Service (DoS) parameters: • ascend [log] – Enables ascend DoS check • bcas-mcas-icmp [log] – Detects broadcast/multicast ICMP traffic as DoS attacks • chargen [log] – Enables chargen DoS checks • fraggle [log] – Enables fraggle DoS checks • f
PAGE 244
Global Configuration Commands 5-39 ip (http-https) http (https) [inactivity-timeout <1-1440>| max-simultaneous-sessionsper-user <1-100>] Modifies applet session parameters • inactivity-timeout <1-1440> – Sets the interval with no activity after which the applet session timeouts • <1-1440> – Sets the applet timeout between 1 - 1440 minutes • max-simultaneous-sessions-per-user <1-100> – Sets the maximum number of applet sessions per user • <1-100> – Sets the maximum number of applet sessions per user betwee
PAGE 245
5-40 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ip (local) local pool default [low-ip-address ] {high-ip-address } Configures the range of IP addresses assigned to VPN client using modeconfig or IPSec with L2TP • pool [default] – Sets the pool tag as default • low-ip-address – Sets the lowest IP address in the range • high-ip-address – Optional.
PAGE 246
Global Configuration Commands 5-41 ip (nat) nat Configures following Network Address Translation (NAT) parameters: Syntax ip nat destination (static)|source interface • – Defines the interface as private (inside) or public (external). NAT translations refer to this keyword to identify translations applied to incoming packets on an interface.
PAGE 247
5-42 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ip (route) route Adds a static route entry in the routing table • – IP destination prefix. Adds a static route entry in the IP routing table • – Mask for the IP destination prefix.
PAGE 248
Global Configuration Commands 5-43 Follow the steps below to create a DHCP User Class: 1. Create a DHCP class named RFS7000DHCPclass. RFS7000 supports a maximum of 32 DHCP classes. RFS7000(config)#ip dhcp class RFS7000DHCPclass RFS7000(config-dhcpclass)# 2. Create a USER class named MC800. The privilege mode changes to (config-dhcpclass). RFS7000 supports a maximum of 8 Users classes per DHCP class. 3.
PAGE 249
5-44 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.20 license Global Configuration Commands Use this command to add a license to a feature. Syntax license Parameters Enter the feature name to add to the license. Enter the license key.
PAGE 250
Global Configuration Commands 5-45 5.1.21 line Global Configuration Commands Use this command to configure the terminal line. NOTE The line command moves to the (config-line) instance.
PAGE 251
5-46 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.22 local Global Configuration Commands Use this command to set the username and password for local user authentication. Syntax local username password [0 |2 |] Parameters username Enter local user name. The username can be a string of up to 64 characters. password Enter local user password. The password can be a string of 8 - 21 characters.
PAGE 252
Global Configuration Commands 5-47 5.1.23 logging Global Configuration Commands Use this command to modify message logging facilities. Syntax logging [aggregation-time|buffered|console|facility|host|monitor|on|snmp-set|syslog] logging aggregation-time <1-60> logging [buffered|console|monitor|syslog] {<0-7>|alerts|critical|debugging| emergencies|errors|informational|notifications|warnings} logging facility [local0|local1|local2|local3|local4|local5|local6|local7] logging host
PAGE 253
5-48 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide facility Syslog facility in which log messages are sent • local0 – Syslog facility local0 • local1 – Syslog facility local1 • local2 – Syslog facility local2 • local3 – Syslog facility local3 • local4 – Syslog facility local4 • local5 – Syslog facility local5 • local6 – Syslog facility local6 • local7 – Syslog facility local7 host Configures the remote host to receive log messages •
PAGE 254
Global Configuration Commands 5-49 5.1.24 mac Global Configuration Commands Use this command to configure MAC access lists. Syntax mac access-list [extended ()] Parameters access-list (extended ) Enter extended MAC ACL name. Usage Guidelines To delete a Standard/Extended or MAC ACL, use no access-list under the Global Config mode.
PAGE 255
5-50 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.25 mac-address-table Global Configuration Commands Use this command to configure MAC adress table.
PAGE 256
Global Configuration Commands 5-51 5.1.26 mac-name Global Configuration Commands Use this command to configure a MAC name for a specified MAC address. Syntax mac-name Parameters Specify the MAC address in the AA-BB-CC-DD-EE-FF format. Specify the name to be configured with the specified MAC address. Note: The name should confirm to the DNS naming convention.
PAGE 257
5-52 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.27 management Global Configuration Commands Use this command to set management interface properties.
PAGE 258
Global Configuration Commands 5-53 5.1.28 network-element-id Global Configuration Commands Use this command to set the system’s network element ID. Syntax network-element-id Parameters network-element-id Sets this system’s network element ID • – Specify the network element ID to set.
PAGE 259
5-54 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.29 ntp Global Configuration Commands Use this command to configure Network Time Protocol (NTP) parameters.
PAGE 260
Global Configuration Commands 5-55 Parameters ntp (acces-group) access-group [peer|query-only|serve| serve-only] Configures NTP access • peer – Provides full access • <1-99> – Standard IP access list • <100-199> – Extended IP access list • <1300-1999> – Standard IP access list (expanded range) • <2000-2699> – Extended IP access list (expanded range) • query-only – Allows only control queries • <1-99> – Standard IP access list • <100-199> – Extended IP access list • <1300-1999> – Standard IP access list (
PAGE 261
5-56 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ntp (autokey) autokey [client-only|host] Enables the NTP autokey authentication scheme • client-only – Configures the switch as a client to other trusted hosts in the autokey group • host – Configures the switch as a trusted host ntp (master) master {<1-15>} Acts as a NTP master clock • <1-15> – Optional.
PAGE 262
Global Configuration Commands 5-57 RFS7000(config)#ntp peer TestPeer autokey prefer version 3 RFS7000(config)# RFS7000(config)#ntp peer TestPeer key ? <1-65534> Peer key number RFS7000(config)#ntp peer TestPeer key 20 ? prefer Prefer this peer when possible version Configure NTP version RFS7000(config)#ntp peer TestPeer key 20 prefer ? version Configure NTP version
PAGE 263
5-58 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.30 prompt Global Configuration Commands Use this command to configure and set the system prompt.
PAGE 264
Global Configuration Commands 5-59 5.1.31 radius-server Global Configuration Commands Use this command to enter the RADIUS server mode. The system prompt changes from the default config mode to RADIUS server mode. NOTE radius-server local mode moves to the radius-server context. For more details see RADIUS Configuration Commands on page 19-1 Syntax radius-server radius-server radius-server radius-server radius-server radius-server [host|key|local|retransmit|timeout] host [A.B.C.
PAGE 265
5-60 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.32 ratelimit Global Configuration Commands Use this command to enable ratelimit logging.
PAGE 266
Global Configuration Commands 5-61 5.1.33 redundancy Global Configuration Commands Use this command to configure redundancy group parameters. Syntax redundancy [auto-revert|auto-revert-period|critical-resource-ip|dhcp-server| discovery-period|dynamic-ap-load-balance|enable|group-id|handle-stp| heartbeat-period|hold-period|interface-ip|manual-revert|member-ip|mode] redundancy auto-revert [enable] redundancy auto-revert-period <1-1800> redundancy critical-resource-ip
PAGE 267
5-62 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide dynamic-ap-loadbalance [enable| per-ap-mu-threshold| schedule-interval| schedule-start-time| trigger] Configures dynamic AP load balance parameters • enable – Enables dynamic AP load balancing • per-ap-mu-threshold <1-512> – Specifies per AP mobile unit threshold count between 1 - 512 • schedule-interval – Schedules dynamic AP load balance interval between 1 - 366 days • schedule-start-time – Schedules dynamic AP load balance start ti
PAGE 268
Global Configuration Commands 5-63 Example RFS7000(config)#redundancy discovery-period 20 RFS7000(config)# RFS7000(config)#redundancy handle-stp enable RFS7000(config)# RFS7000(config)#redundancy heartbeat-period 20 RFS7000(config)# RFS7000(config)#redundancy hold-period 25 RFS7000(config)# RFS7000(config)#redundancy mode primary RFS7000(config)#
PAGE 269
5-64 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.34 remote-login Global Configuration Commands Use this command to configure remote login parameters. Syntax remote-login [max-allowed-failure] <1-1024> Parameters max-allowed-failure <1-1024> Sets the maximum allowed login attempts failures before remote login is disabled • <1-1024> – Specify the number of failed login attempts between 1 -1024.
PAGE 270
Global Configuration Commands 5-65 5.1.35 role Global Configuration Commands Use this command to configure a role and its parameters. Syntax role [|assignment] role <1-10001> role assignment immediate enable Parameters <1-10001> Configures the role name • – Specify a role name to configure (should not exceed 20 characters). • <1-1001> – Set a role priority between 1 - 10001.
PAGE 271
5-66 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.36 rtls Global Configuration Commands Use this command to configure locationing mode parameter settings. This command will take you to the config-rtls mode.
PAGE 272
Global Configuration Commands 5-67 5.1.37 service Global Configuration Commands Use this command to retrieve system data (tables, log files, configuration, status and operation) for use in debugging and problem resolution.
PAGE 273
5-68 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide diag [enable|limit| period <100-30000>] Enables diagnostic service • enable – Enables service diagnostics • limit – Configures following diagnostic limits: • buffer [128|128k|16k|1k|256|2k|32|32k|4k|512|64|64k|8k] – Sets buffer usage warning limit in bytes • fan <1-3> – Sets the fans speed limit for the selected fan number • filesys [etc2|flash|var] – Sets file system freespace limit • inodes [etc2|flash|var] – Sets file system inode
PAGE 274
Global Configuration Commands 5-69 set [command-history| reboot-history| upgrade-history] Sets service parameters • command-history – Sets the command history size between 10 - 300 (default is 200) • reboot-history – Sets the reboot history size between 10 -100 (default is 50) • upgrade-history – Sets the upgrade history size between 10 -100 (default is 50) show cli Shows the CLI tree of the current mode terminal-length <0-512> Configures the system wide terminal length.
PAGE 275
5-70 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.38 show Global Configuration Commands Use this command to view running system information. Syntax show Parameters aap-wlan-acl [<1-256>|all] Displays WLAN based ACL • <1-256> – The WLAN ID. This displays the ACL attached to the WLAN ID specified by the <1-266> value.
PAGE 276
Global Configuration Commands 5-71 clock Displays the system clock commands Displays the command lists crypto [ipsec|isakmp|key| map|pki] Displays encryption configuration • ipsec [sa|security-associaton|transformset] – Displays IPSec policy details. • sa – Displays IPSec Security Association (SA) • Security-association (lifetime) – Displays SA lifetime • lifetime – Displays Security-association lifetime • transformset {} – Displays the specified transformset • – The transformset name.
PAGE 277
5-72 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide file [information|systems] Displays filesystem information • information – Displays specified file information • systems – Lists file systems firewall [config|dhcp|flow] Displays wireless firewall detailsconfig – Displays firewall configuration • dhcp (snoop-table)– DHCP basedsnoop-table – Displays snoop Table Entries • flow (timeouts) – Displays Firewall flow • timeouts – Displays wireless firewall flow timeout configuration
PAGE 278
Global Configuration Commands 5-73 ip [access-group| access-list|arp|ddns| dhcp| dhcp-vendor-options| domain-name|dos| http|igmp|interface| name-server|nat|route| routing|ssh] Displays the Internet Protocol (IP) configuration • access-group [|all|ge|me1|role|sa|vlan] – Displays ACLs. attached to an interface • – The interface to display access-group information for • all – Displays access-group information for all interfaces.
PAGE 279
5-74 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • dhcp-vendor-options – Displays DHCP option 43 parameters received from the DHCP server • domain-name – Displays default DNS domain status • dos – Displays following Denial of Service (DoS) settings: • config – Displays IP DoS configuration • stats – Displays IP DoS statistics • http [secure-server] – Displays HyperText Transfer Protocol (HTTP) secure server status (whether running or not), configuration status, and trustpoint details
PAGE 280
Global Configuration Commands 5-75 ldap [configuration] Displays the Lightweight Directory Access Protocol (LDAP) server configuration • configuration {primary|secondary} – Specifies LDAP configuration parameters • primary – Displays primary LDAP server configuration • secondary – Displays secondary LDAP server configuration licenses Displays installed licenses details logging Displays logging configuration and buffer data mac [access-group| access-list] Displays MAC access-list assignment details •
PAGE 281
5-76 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide password-encryption [status] Displays password encryption status (whether enabled or not) port [fw] [config] Displays physical/aggregate port interface configurationfw (config) – Displays firewalls • config – Displays configurable firewall parameters port-channel [load-balance] Displays port channel load balancing privilege Displays the current privilege level protocol-list Displays list of protocols Displays RADIUS configura
PAGE 282
Global Configuration Commands 5-77 rtls [aeroscout|ekahau|filter| site|sole|tags|zone] Displays information on Real Time Locating System (RTLS) commands • aeroscout – Displays aeroscout configurations • ekahau – Displays ekahau configurations • filter – Displays Radio Frequency Identification (RFID) tag filters • site – Displays site configurations • sole [peer|probe] – Displays SOLE configurations • peer – Displays SOLE peer information • probe – Displays probe information • tags – Displays tags/assets i
PAGE 283
5-78 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide spanning-tree [mstp] Displays spanning tree information • mst {configuration|detail|instance} – Displays MST information • configuration – Displays MST configuration information • detail – Displays detailed MST information • instance <1-15> – Displays information for the instance ID <1-15> startup-config Displays contents of startup configuration static-channel-group Displays static channel group membership terminal Displays ter
PAGE 284
Global Configuration Commands 5-79 wireless [aap-version|ap| ap-containment| ap-detection-config| ap-images| ap-radio-config| ap-adopted| authorized-aps| channel-power| config|country-code-list| default-ap|fw|hotspot| hotspot-config| ignored-aps|known| mac-auth-local|mesh| mobile-unit| Displays Wireless configuration commands • aap-version – Displays the minimum adaptive firmware version string • ap {|config} – Displays tadopted access-port status – List the MAC address of a single access-port
PAGE 285
5-80 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • known {ap} – Displays known AP parameters • ap [statistics] – Displays known AP statistics • statistics {<1-1024>} – Displays one or more adaptive AP for known AP statistics of the index value <1-1024> • mac-auth-local {<1-1000>} – Lists all mac-auth-local entries • <1-1000> – Displays the mac-auth-local entry specified by the <1-1000> value • mesh [statistics] – Displays mesh related parameters • statistics {<1-32>} – Displays stati
PAGE 286
Global Configuration Commands 5-81 wlan-acl [<1-256> |all Displays WLAN ACL details • <1-256> – Displays ACLs attached to the specified WLAN ID • all – Displays ACLs attached to WLAN port Usage Guidelines Refer to show on page 2-25 for details of show command.
PAGE 287
5-82 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service prompt crash-info ! username admin password 1 8e67bb26b358e2ed20fe552ed6fb832f397a507d username admin privilege superuser username operator password 1 fe96dd39756ac41b74283a9292652d366d73931f !! spanning-tree mst cisco-interoperability enable spanning-tree mst config name My Name.............................................................. ........................................................................... ............
PAGE 288
Global Configuration Commands 5-83 5.1.39 smtp-notification Global Configuration Commands Use this command to configure/modify the Simple Mail Transfer Protocol (SMTP) notification parameters.
PAGE 289
5-84 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Example RFS7000(config)#smtp-notification authenticate enable RFS7000(config)# RFS7000(config)#smtp-notification enable RFS7000(config)# RFS7000(config)#smtp-notification port 200 RFS7000(config)# RFS7000(config)#smtp-notification user tester1 RFS7000(config)# RFS7000(config)#show smtp-notification ---------------------------------------------------------------------Global enable flag for Trap SMTP-Notification Enabled ----------------
PAGE 290
Global Configuration Commands 5-85 5.1.40 snmp-server Global Configuration Commands Use this parameter to configure/modify SNMP engine parameters.
PAGE 291
5-86 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide RFS7000(config)#snmp-server sysname SNMPEngine1 SNMPEngine1(config)# SNMPEngine1(config)#show snmp-server Location: Contact: SysName: SNMPEngine1 SNMP v3: enabled SNMP host: num receivers = 0 SNMPEngine1(config)#
PAGE 292
Global Configuration Commands 5-87 5.1.41 spanning-tree Global Configuration Commands Use this command to configure the spanning-tree commands.
PAGE 293
5-88 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Usage Guidelines • max-age <6-40> – Max-age is the maximum time in seconds for which (if a bridge is the root bridge) a message is considered valid. This prevents the frames from looping indefinitely. The value must be greater than twice the value of the hello time plus one, but less than twice the value of the forward delay minus one. The allowable range for max-age is 6-40 seconds.
PAGE 294
Global Configuration Commands 5-89 5.1.42 timezone Global Configuration Commands Use this command to configure switch timezone settings. Syntax timezone Parameters TIMEZONE Press to navigate the list of files. This action displays a list of files containing timezone information.
PAGE 295
5-90 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.43 traffic-shape Global Configuration Commands Use this command to configure traffic shaping, also know as packet shaping, parameters. Enabling traffic shaping regulates network data transfer and ensures a certain level of network performance. The traffic-shape command allows you to delay the flow of packets with low priority.
PAGE 296
Global Configuration Commands 5-91 5.1.44 username Global Configuration Commands Use this CLI command to establish the user name authentication. Syntax username username username username {access|password|privilege} access [web|console|ssh] |1 |] privilege [crypto-officer|monitor|superuser|sysadmin|webadmin] Parameters Enter a name to authenticate the switch. The username must be between 1 - 28 characters.
PAGE 297
5-92 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.45 virtual-ip Global Configuration Commands Displays virtual IP configuration for the switch. Syntax virtual-ip [|advt-timeout|enable|garp-timeout|learning-timeout|priority|vmac] virtual-ip virtual-ip virtual-ip virtual-ip virtual-ip virtual-ip virtual-ip [vlan <1-4094>] advt-timeout <1-5> enable garp-timeout <30-600> learning-timeout <2-5> priority [<1-256>|auto] vmac Parameters
PAGE 298
Global Configuration Commands 5-93 Example RFS7000(config)#virtual-ip 1.2.3.4/24 vlan 11 RFS7000(config)# RFS7000(config)#show virtual-ip config Virtual-IP Status : Disabled Cluster Redundancy Status : Disabled Priority Selection Mode : Automatic Learning Timeout(sec) : 2 Advertisement Timeout(sec) : 1 Gratuitous ARP Timeout(sec) : 30 Virtual-IP Server Port : 51525 Switch IP : 0.0.0.
PAGE 299
5-94 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.46 vpn Global Configuration Commands Use this command to configure Virtual Private Network (VPN).
PAGE 300
Global Configuration Commands 5-95 5.1.47 wireless Global Configuration Commands Use this command to configure switch wireless parameters. This command leads moves to the config-wireless instance. For additional information, see Wireless Configuration Commands on page 20-1. Syntax wireless Parameters None Usage Guidelines The wireless command is used to enter the config-wireless instance. The prompt changes from the regular RFS7000(config)# to RFS7000(config-wireless)#.
PAGE 301
5-96 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.48 wlan-acl Global Configuration Commands Use this command to apply an ACL on a WLAN index. Syntax wlan-acl <1-256> [<1-99>|<100-199>|<1300-1999>|<2000-2699>|] [in|out] Parameters <1-256> [<1-99>|<100-199>| <1300-1999>| <2000-2699>|] Applies an ACL on the WLAN specified by the <1-256> parameter.
PAGE 302
Global Configuration Commands 5-97 Example The example below applies an ACL to WLAN index 200 in an inbound direction from the global config mode. RFS7000(config)#wlan-acl 200 150 in RFS7000(config)# NOTE A MAC access list entry to allow arp is mandatory to apply an IP based ACL to an interface. MAC ACL always takes precedence over IP based ACL’s. The example below applies an ACL to WLAN index 200 in an outbound direction from the global config mode.
PAGE 303
5-98 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 5.1.49 zeroize Global Configuration Commands Use this command for zeroization of critical security parameters. NOTE In RFS7000, key zeroisation function zeroises all Cryptographic Keys and Critical Security Parameters (CSP) by overwriting the storage area three times with an alternating pattern (i.e, three different patterns).
PAGE 304
Crypto - isakmp Instance The (config-crypto-isakmp) instance is used to configure Internet Security and Key Management Protocol (ISAKMP) policy. To instantiate the (config-crypto-isakmp) instance, use the following command: RFS7000(config)#crypto isakmp policy <1-10000> RFS7000(config-crypto-isakmp)# 6.1 Crypto ISAKMP Config Commands Table 6.1 summarizes the crypto-isakmp commands within the RFS7000 switch command line interface. Table 6.1 Crypto ISAKMP Command Summary Command Description Ref.
PAGE 305
6-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 6.1.1 authentication Crypto ISAKMP Config Commands Use this command to set pre-shared key as the authentication method for this protection suite.
PAGE 306
Crypto - isakmp Instance 6-3 6.1.2 clrscr Crypto ISAKMP Config Commands Use this command to clear the display screen.
PAGE 307
6-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 6.1.3 encryption Crypto ISAKMP Config Commands Use this command to configure the data encryption algorithm used with this protection suite.
PAGE 308
Crypto - isakmp Instance 6-5 6.1.4 end Crypto ISAKMP Config Commands Use this command to end and exit the (config-crypto-isakmp) mode and move to the PRIV EXEC mode. The prompt now changes to RFS7000#.
PAGE 309
6-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 6.1.5 exit Crypto ISAKMP Config Commands Use this command to exit the (config-crypto-isakmp) mode and move to the previous GLOBAL CONFIG mode. The prompt now changes to RFS7000(config)#.
PAGE 310
Crypto - isakmp Instance 6-7 6.1.6 hash Crypto ISAKMP Config Commands Use this command to configure the hash algorithm used to authenticate data transmitted over the Internet Key Exchange (IKE) Security Association (SA).
PAGE 311
6-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 6.1.7 help Crypto ISAKMP Config Commands Use this command to access the systems interactive help system. Syntax help Parameters None Example RFS7000(config-crypto-isakmp)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 312
Crypto - isakmp Instance 6-9 6.1.8 lifetime Crypto ISAKMP Config Commands Use this command to specify how long an IKE SA is valid before expiring. Syntax lifetime Parameters Specifies how many seconds an IKE SA lasts before it expires. This is an IPsec Phase 1 SA lifetime. Time stamp can be configured between 180 - 86400 seconds (default is 86400 seconds).
PAGE 313
6-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 6.1.9 no Crypto ISAKMP Config Commands Use the no command in the (config-crypto-isakmp) mode to negate or reset values to default settings.
PAGE 314
Crypto - isakmp Instance 6-11 6.1.10 service Crypto ISAKMP Config Commands Use this command to view the (config-crypto-isakmp) instance CLI configurations.
PAGE 315
6-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 6.1.11 show Crypto ISAKMP Config Commands Use this CLI command to view the current system information that is running on the RFS7000 switch. Syntax show Parameters ? Displays parameters for which the information can be viewed using show command.
PAGE 316
Crypto - isakmp Instance 6-13 traffic-shape upgrade-status users version virtual-ip wireless wlan-acl Display traffic shaping Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-crypto-isakmp)#
PAGE 317
6-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 318
Crypto - group Instance The (config-crypto-group) instance configures the default group properties of the ISAKMP client. To instantiate the config-crypto-group instance, use the following command: RFS7000(config)#crypto isakmp client configuration group default RFS7000(config-crypto-group)# 7.1 Crypto Group Config Commands Table 7.1 summarizes the config-crypto-group commands within the RFS7000 switch command line interface. Table 7.1 Crypto Group Command Summary Command Description Ref.
PAGE 319
7-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 7.1.1 clrscr Crypto Group Config Commands Use this command to clear the display screen.
PAGE 320
Crypto - group Instance 7-3 7.1.2 dns Crypto Group Config Commands Use this command to specify the DNS Server address(es) to assign to a client. Syntax dns Parameters Specify the first DNS server’s address in the A.B.C.D format. Example RFS7000(config-crypto-group)#dns-server 172.1.17.
PAGE 321
7-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 7.1.3 end Crypto Group Config Commands Use this command to end and exit from the (config-crypto-group) mode and move to the PRIV EXEC mode.The prompt now changes to RFS7000#.
PAGE 322
Crypto - group Instance 7-5 7.1.4 exit Crypto Group Config Commands Use this command to end the (config-crypto-group) mode and move to the previous GLOBAL CONFIG mode. The prompt now changes to RFS7000(config)#.
PAGE 323
7-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 7.1.5 help Crypto Group Config Commands Use this command to access the systems interactive help system. Syntax help Parameters None Example RFS7000(config-crypto-group)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 324
Crypto - group Instance 7-7 7.1.6 service Crypto Group Config Commands Use this command to invoke the service commands to troubleshoot or debug the (config-crypto-isakmp) instance configurations. Syntax service [show] [cli] Parameters show [cli] Displays CLI tree of current mode Example RFS7000(config-crypto-group)#service show cli Crypto Client Config mode: +-clrscr [clrscr] +-dns +-A.B.C.D [dns A.B.C.
PAGE 325
7-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 7.1.7 show Crypto Group Config Commands Use this command to view the current system information that is running on the RFS7000 switch.
PAGE 326
Crypto - group Instance 7-9 upgrade-status users version virtual-ip wireless wlan-acl Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-crypto-group)#
PAGE 327
7-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 7.1.8 wins Crypto Group Config Commands Use this command to specify the Windows Internet Naming Service (WINS) name servers to assign to a client. Syntax wins Parameters Specify the first WINS server’s IP address in the A.B.C.D format. Example RFS7000(config-crypto-group)#wins 128.2.11.
PAGE 328
Crypto - peer Instance The (config-crypto-peer) instance is used to configure ISAKMP peers. To instantiate the (config-crypto-peer) instance, use the following command: RFS7000(config)#crypto isakmp peer hostname [||] RFS7000(config)#crypto isakmp peer hostname RFS7000(config-crypto-peer)# 8.1 Crypto Peer Config Commands Table 8.1 summarizes the config-crypto-peer commands within the RFS7000 switch command line interface. Table 8.
PAGE 329
8-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 8.1.1 clrscr Crypto Peer Config Commands Use this command to clear the display screen.
PAGE 330
Crypto - peer Instance 8-3 8.1.2 end Crypto Peer Config Commands Use this command to end and exit the (config-crypto-peer) mode and move to the PRIV EXEC mode.The prompt now changes to RFS7000#.
PAGE 331
8-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 8.1.3 exit Crypto Peer Config Commands Use this command to end the (config-crypto-peer) mode and move to the previous mode (GLOBAL-CONFIG). The prompt now changes to RFS7000(config)#.
PAGE 332
Crypto - peer Instance 8-5 8.1.4 help Crypto Peer Config Commands Use this command to access the systems interactive help system. Syntax help Parameters None Example RFS7000(config-crypto-peer)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 333
8-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 8.1.5 no Crypto Peer Config Commands Use this command to negate a command or set its defaults. Syntax no Parameters Use the commands that you have configured under this instance.
PAGE 334
Crypto - peer Instance 8-7 8.1.6 service Crypto Peer Config Commands Use this command to invoke the service commands to troubleshoot or debug the (config-crypto-isakmp) instance configurations.
PAGE 335
8-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 8.1.7 set Crypto Peer Config Commands Use this command to configure the aggressive-mode attributes for this crypto peer. Syntax set aggressive-mode password [0 |2 |] Parameters aggressive-mode password [0 | 2 |] Configures aggressive mode attributes Configures tunnel password attributes • 0 – Password is specified UNENCRYPTED.
PAGE 336
Crypto - peer Instance 8-9 8.1.8 show Crypto Peer Config Commands Use this command to view the current system information that is running on the RFS7000 switch.
PAGE 337
8-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide upgrade-status users version virtual-ip wireless wlan-acl Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-crypto-peer)#
PAGE 338
Crypto - ipsec Instance Use the crypto ipsec transform-set command to define a transform configuration for securing data using esp-aes or esp-sha-hmac or other cipher modes. To instantiate the (config-crypto-ipsec) instance, use the following command: RFS7000(config)#crypto ipsec transform-set {esp-sha-hmac} RFS7000(config-crypto-ipsec)# The transform-set is assigned to a crypto map using the map’s set transform-set command.
PAGE 339
9-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 9.1.1 clrscr Crypto IPSec Config Commands Use this command to clear the display screen.
PAGE 340
Crypto - ipsec Instance 9-3 9.1.2 end Crypto IPSec Config Commands Use this command to end and exit the config-crypto-ipsec mode and move to the PRIV EXEC mode.The prompt now changes to RFS7000#.
PAGE 341
9-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 9.1.3 exit Crypto IPSec Config Commands Use this command to end the config-crypto-ipsec mode and move to the previousGLOBAL CONFIG mode. The prompt now changes to RFS7000(config)#.
PAGE 342
Crypto - ipsec Instance 9-5 9.1.4 help Crypto IPSec Config Commands Use this command to access the systems interactive help system. Syntax help Parameters None Example RFS7000(config-crypto-ipsec)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 343
9-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 9.1.5 mode Crypto IPSec Config Commands Use this command to configure the IPSec encapsulation (trasnport/tunnel) mode.
PAGE 344
Crypto - ipsec Instance 9-7 9.1.6 no Crypto IPSec Config Commands Use the no command in the config-crypto-ipsec mode to negate the mode command and revert to the default tunnel (datagram encapsulation) mode. Syntax no [mode] Parameters Use the commands that you have configured under this instance.
PAGE 345
9-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 9.1.7 service Crypto IPSec Config Commands Use this command to invoke the service commands to troubleshoot or debug the (config-crypto-isakmp) instance configurations.
PAGE 346
Crypto - ipsec Instance 9-9 9.1.8 show Crypto IPSec Config Commands Use this command to view the current system information that is running on the RFS7000 switch. Syntax show Parameters ? Displays parameters for which information can be viewed using the show command.
PAGE 347
9-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide upgrade-status users version virtual-ip wireless wlan-acl Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-crypto-ipsec)#
PAGE 348
Crypto - map Instance Use the crypto map command to define a crypto map. The config-crypto-map CLI commands define a Certificate Authority (CA) trustpoint. This is a separate instance by itself but belongs to the crypto pki trustpoint mode under the config instance. To instantiate the (config-crypto-map) instance, use the following command: RFS7000(config)#crypto map [ipsec-isakmp|ipsec-manual] {dynamic} RFS7000(config-crypto-map)# 10.
PAGE 349
10-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 10.1.1 clrscr Crypto Map Config Commands Use this command to clear the display screen.
PAGE 350
Crypto - map Instance 10-3 10.1.2 end Crypto Map Config Commands Use this command to end and exit the config-crypto-map mode and move to the PRIV EXEC mode.The prompt now changes to RFS7000#. Syntax end Parameters ExampleNone RFS7000(config-crypto-map)#end RFS7000#.
PAGE 351
10-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 10.1.3 exit Crypto Map Config Commands Use this command to end the config-crypto-map mode and move to the previous GLOBAL CONFIG mode. The prompt now changes to RFS7000(config)#.
PAGE 352
Crypto - map Instance 10-5 10.1.4 help Crypto Map Config Commands Use this command to access the systems interactive help system Syntax help Parameters None Example RFS7000(config-crypto-map)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 353
10-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 10.1.5 match Crypto Map Config Commands Use this command to assign an IP access list to a crypto map definition. The access list designates the IP packets encrypted by this crypto map. A crypto map entry is a single policy that describes how certain traffic is to be secured. There are two types of crypto map entries: ipsec-manual and ipsec-isakmp. Each entry is given an index used to sort the ordered list.
PAGE 354
Crypto - map Instance 10-7 10.1.6 no Crypto Map Config Commands Use the no command in the config-crypto-map mode to negate or revert the match and set commands. Syntax no [match|set] Parameters match Negates the match command.
PAGE 355
10-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 10.1.7 service Crypto Map Config Commands Use this command to invoke the service commands to troubleshoot or debug the (config-crypto-map) instance configurations.
PAGE 356
Crypto - map Instance 10-9 10.1.8 set Crypto Map Config Commands Use this command to set the various set parameters of the peer device. Syntax set set set set set set set set set set set [localid|mode|peer|pfs|remote-type|security-association|session-key|transform-set] localid [dn|hostname] mode [main] peer [
PAGE 357
10-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide security-association [level|lifetime] session-key [inbound|outbound] Defines the lifetime (in kilobytes and/or seconds) of the IPSec SAs created by this crypto map • level [perhost] – Specifies the security association granularity to the host level. This option requests for separate IPSec SAs for each source/ destination host pair. • lifetime [kilobytes|seconds] – Specifies the security association lifetime.
PAGE 358
Crypto - map Instance 10-11 RFS7000(config-crypto-map)#set session-key (inbound|outbound) esp cipher authenticator The inbound local SPI (security parameter index) must equal the outbound remote SPI. The outbound local SPI must equal the inbound remote SPI. The key values are the hexadecimal representations of the keys. They are not true ASCII strings. Therefore, a key of 3031323334353637 represents “01234567”.
PAGE 359
10-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 10.1.9 show Crypto Map Config Commands Use this command to view the current system information that is running on the switch. Syntax show Parameters ? Displays all the parameters for which the information can be viewed using the show command.
PAGE 360
Crypto - map Instance 10-13 upgrade-status users version virtual-ip wireless wlan-acl Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-crypto-map)#
PAGE 361
10-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 362
Crypto - trustpoint Instance Use the config-trustpoint commands to define a Certificate Authority (CA) trustpoint. This is a separate instance, but belongs to the crypto pki trustpoint mode under the config instance. To instantiate the crypto-trustpoint instance, use the following command: RFS7000(config)#crypto pki trustpoint RFS7000(config-trustpoint)# 11.1 Trustpoint Config commands Table 11.1 summarizes the config-crypto-trustpoint commands. Table 11.
PAGE 363
11-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.1 clrscr Trustpoint Config commands Use this command to clear the display screen.
PAGE 364
Crypto - trustpoint Instance 11-3 11.1.2 company-name Trustpoint Config commands Use this command to set the company name (applicable only by request) to a trustpoint. Syntax company-name Parameters Specify the company name (2 - 64 characters in length). Usage Guidelines The company name defined must be between 2 - 64 characters only.
PAGE 365
11-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.3 email Trustpoint Config commands Use this command to configure an e-mail address for this trustpoint. Syntax email Parameters Specify the e-mail address (2 - 64 characters in length). Usage Guidelines The e-mail address defined must be between of 2 - 64 characters only. Example RFS7000(config-trustpoint)#email abcTestemailID@motorolasolutions.
PAGE 366
Crypto - trustpoint Instance 11-5 11.1.4 end Trustpoint Config commands Use this command to end and exit the (config-trustpoint) mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#.
PAGE 367
11-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.5 exit Trustpoint Config commands Use this command to end the (config-trustpoint) mode and move to previous GLOBAL CONFIG mode.The prompt now changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 368
Crypto - trustpoint Instance 11-7 11.1.6 fqdn Trustpoint Config commands Use this command to configure the fully qualified domain name (fqdn) for this trustpoint. Syntax fqdn Specify the domain name (9 - 64 characters in length). Usage Guidelines The string length of the domain name must be between 9 - 64 characters. Example RFS7000(config-trustpoint)#fqdn RetailKing.
PAGE 369
11-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.7 help Trustpoint Config commands Use this command to access the system’s interactive help system. Syntax help Parameters None Example RFS7000(config-trustpoint)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 370
Crypto - trustpoint Instance 11-9 11.1.8 ip-address Trustpoint Config commands Use this command to configure an IP address for the trustpoint. Syntax ip-address Parameters Enter the the trustpoint’s IP address. Example RFS7000(config-trustpoint)#ip-address 157.200.200.
PAGE 371
11-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.9 no Trustpoint Config commands Use this command to negate a command or set defaults.
PAGE 372
Crypto - trustpoint Instance 11-11 11.1.10 password Trustpoint Config commands Use this command to set the challenge password, applicable only for trustpoint access requests. Syntax password [0 |2 |] Parameters 0 Password is specified as UNENCRYPTED. The password must be between 4 - 20 characters length. 2 Password is encrypted with a password-encryption secret. The string length of an encrypted password must be between 4 - 20 characters in length.
PAGE 373
11-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.11 rsakeypair Trustpoint Config commands Use this command to configure a RSA Keypair to associate with the trustpoint. Syntax rsakeypair Parameters Specify the RSA keypair identifier. Usage Guidelines Use RSA Key Pair support to configure the switch to have Rivest, Shamir, and Adelman (RSA) key pairs. The switch software can maintain a different key pair for each identity certificate.
PAGE 374
Crypto - trustpoint Instance 11-13 11.1.12 service Trustpoint Config commands Use this command to invoke service commands to troubleshoot or debug crypto pki trustpoint instance configurations.
PAGE 375
11-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.13 show Trustpoint Config commands Use this command to view current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command.
PAGE 376
Crypto - trustpoint Instance 11-15 upgrade-status users version virtual-ip wireless wlan-acl Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-trustpoint)# RFS7000(config)#show crypto pki trustpoints Trustpoint :TRUSTPOINT1 ----------------------------------------------Trustpoint :TestTrustpoint ----------------------------------------------Trustpoint
PAGE 377
11-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 11.1.14 subject-name Trustpoint Config commands Use this command to create a subject name to configure a trustpoint. A subject name is a collection of required parameters. Syntax subject-name [] [] [] [] [] Parameters WORD The subject name is a collection of required parameters to configure a trustpoint. It consists of the common_name, country, state, org name etc.
PAGE 378
Interface Instance Use the (config-if) instance to configure the following interfaces: FastEthernet (fe), GigaEhternet (ge), StaticAggregate interface (sa), and VLAN. To instantiate the (config-if) mode, use the following commands: RFS7000(config)#interface [|ge <1-4>|sa <1-4>|vlan <1-4094>] RFS7000(config-if)# 12.1 Interface Config commands Table 12.1 summarizes the config-if commands. Table 12.1 Interface Config Command Summary Command Description Ref.
PAGE 379
12-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 12.1 Interface Config Command Summary Command speed Description Configures the speed of a FastEthernet port (10/100) or a GigabitEthernet port (10/100/1000) Ref.
PAGE 380
Interface Instance 12-3 12.1.1 clrscr Interface Config commands Use this command to clear the screen.
PAGE 381
12-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.2 crypto Interface Config commands Use this command to assign a crypto map to a specified interface.
PAGE 382
Interface Instance 12-5 12.1.3 description Interface Config commands Use this command to create an interface specific description. Syntax description Parameters Enter a description for this interface.
PAGE 383
12-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.4 duplex Interface Config commands Use this command to specify the duplex mode of operation on the specified interface. NOTE • Duplexity can only be set for an Ethernet type interface. Enter the (config-if) instance using an ge/me parameter in an interface mode. • Duplex cannot be set until the speed is set to a non-auto value. Syntax duplex [auto|full|half] Parameters auto Sets the auto-negotiate mode of operation.
PAGE 384
Interface Instance 12-7 12.1.5 end Interface Config commands Use this command to exit the (config-if) mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#.
PAGE 385
12-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.6 exit Interface Config commands Use this command to end the (config-if) mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#.
PAGE 386
Interface Instance 12-9 12.1.7 help Interface Config commands Use this command to access the system’s interactive help system. Syntax help Parameters None Example RFS7000(config-if)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 387
12-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.8 ip Interface Config commands Use this command to configure an IP address for the assigned Ethernet, or VLAN. Syntax ip [access-group|address|arp|dhcp|helper-address|nat] ip ip ip ip ip ip ip access-group [<1-99>|<100-199>|<1300-1999>|<2000-2699>|] in address [|dhcp] address [] {secondary} arp [rate-limit <1-1000000>|trust] dhcp [trust] helper-address
PAGE 388
Interface Instance 12-11 Usage Guidelines IPv4 commands are not allowed on a L2 interface. Use the ip access-group command to attach an access list to an interface. Use the no ip access-group command to remove the access list from the interface. Use mac access-group to attach a MAC access list to an interface. Use the [no] ip [options] command to undo all the above IP based interface configurations. Example RFS7000(config-if)#ip access-group 110 in RFS7000(config-if)# RFS7000(config-if)#ip address 192.
PAGE 389
12-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.9 mac Interface Config commands Use this command to apply a MAC access list to a GigabitEthernet interface. NOTE Access list cannot be applied on a management interface (me1). Syntax mac [access-group ] (in) Parameters access-group Sets MAC access groups ACL • – Specify the MAC ACL name.
PAGE 390
Interface Instance 12-13 12.1.10 management Interface Config commands Use this command to configure the selected interface as the management interface. It can only be used on a VLANx interface. The tftp/ftp server, which provides the switch its config file at startup, must be accessible via this interface. VLAN 1 is the default management interface for the RFS7000 switch. Syntax management Parameters None Usage Guidelines Management privilege can be set only on a L3 interface.
PAGE 391
12-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.11 no Interface Config commands Use this command to negate a command or set defaults. Syntax no [crypto|description|duplex|ip|mac|port-channel|shutdown| spanning-tree|speed|static-channel-group|storm-control|switchport] Parameters The no command negates any command associated with it. Wherever required, use the same parameters associated with the command getting negated.
PAGE 392
Interface Instance 12-15 12.1.12 port-channel Interface Config commands Use this command to select the load-balance criteria of an aggregated port.
PAGE 393
12-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.13 service Interface Config commands Use this command to invoke service commands to troubleshoot or debug the (config-if) instance configurations.
PAGE 394
Interface Instance 12-17 12.1.14 show Interface Config commands Use this command to view current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command.
PAGE 395
12-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide upgrade-status users version virtual-ip wireless wlan-acl RFS7000(config-if)#show Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-if)#show boot Image ----Primary Secondary Build Date -------------------Sep 24 06:24:14 2011 Sep 24 06:24:14 2011 Current Boot Next Boot Software
PAGE 396
Interface Instance 12-19 12.1.15 shutdown Interface Config commands Use this command to shutdown/disable the selected interface. The interface is administratively enabled unless explicitly disabled using this command.
PAGE 397
12-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.16 spanning-tree Interface Config commands Use this command to configure spanning tree parameters.
PAGE 398
Interface Instance 12-21 mst [<0-15> (cost <1-200000000>| port-priority <0-240>)| port-ciscointeroperability (disable|enable)] Configures MST on a spanning tree • <0-15> – Specifies the instance ID • cost <1-200000000> – Configures the path cost for a port between 1 - 200000000 (lower path costs indicate higher chances of becoming root) • port-priority <0-240> – Configures the port priority for a bridge in increments of 16.
PAGE 399
12-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.17 speed Interface Config commands Use this command to specify the speed of a FastEthernet (10/100) or a GigabitEthernet port (10/100/1000). Syntax speed [010|100|1000|auto] Parameters 10 Forces 10 Mbps operation. The port runs at 10 Mbps. 100 Forces 100 Mbps operation.The port runs at 100 Mbps. 1000 Forces 1000 Mbps operation.The port runs at 1000 Mbps. auto Enables AUTO speed configuration.
PAGE 400
Interface Instance 12-23 12.1.18 static-channel-group Interface Config commands Use this command to add an interface to a static channel group. Syntax static-channel-group <1-4> Parameters <1-4> The static channel group to associate the link with Usage Guidelines This command aggregates individual Giga port’s into a single aggregate link to provide a larger bandwidth. The static channel group is used to provide additional bandwidth in multiples of 1Gbps on the switch.
PAGE 401
12-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.19 switchport Interface Config commands Use this command to set switching mode characteristics for the selected interface. The mode can be either access or trunk. NOTE A ge interface configured as a trunk with all VLAN's allowed looses its configuration and has only VLAN 1 set to allowed.
PAGE 402
Interface Instance 12-25 Usage Guidelines The interface ge1-ge4 can be configured either as trunk or in access mode. An interface configured as trunk allows packets from the given list of VLANs added to the trunk. Interfaces configured as access allow packets only from the native VLANs. Use [no] switchport (access|mode|trunk)to undo the above switchport configurations.
PAGE 403
12-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 12.1.20 storm-control Interface Config commands Use this command to configure storm control parameters.
PAGE 404
Spanning Tree-MST Instance Use the (config-mst) instance to configure the Multi Spanning Tree Protocol (MSTP). Use the command spanningtree mst configuration to instantiate this instance. 13.1 MST Config commands Table 13.1 summarizes the config-mst commands. Table 13.1 MSTP Config Command Summary Command Description Ref.
PAGE 405
13-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 13.1.1 clrscr MST Config commands Use this command to clear the display.
PAGE 406
Spanning Tree-MST Instance 13-3 13.1.2 end MST Config commands Use this command to end and exit from the (config-mst) mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#.
PAGE 407
13-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 13.1.3 exit MST Config commands Use this command to end the (config-mst) mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#.
PAGE 408
Spanning Tree-MST Instance 13-5 13.1.4 help MST Config commands Use this command to access the system’s interactive help system. Syntax help Parameters None Example RFS7000(config-mst)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 409
13-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 13.1.5 instance MST Config commands Use this command to associate VLAN(s) with an MST instance. Syntax instance <1-15> vlan Parameters <1-15> Defines the MST instance ID to which the VLAN is associated vlan Defines the VLAN ID for association with this MST instance Usage Guidelines Multiple Spanning Tree Protocol (MSTP) configuration is based on instances.
PAGE 410
Spanning Tree-MST Instance 13-7 13.1.6 name MST Config commands Use this command to set a name for the MST region. Syntax name [] Parameters Specify the MST region name.
PAGE 411
13-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 13.1.7 no MST Config commands Use this command to negate a command or set defaults.
PAGE 412
Spanning Tree-MST Instance 13-9 13.1.8 revision MST Config commands Use this command to configure the revision number of the MST bridge. Syntax revision <0-255> Parameters <0-255> Specify the revision number for configuration information between 0 - 255.
PAGE 413
13-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 13.1.9 service MST Config commands Use this command to invoke the service commands needed to troubleshoot or debug (config-if) instance configurations.
PAGE 414
Spanning Tree-MST Instance 13-11 13.1.10 show MST Config commands Use this command to view current system information.
PAGE 415
13-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide upgrade-status users version virtual-ip wireless wlan-acl RFS7000(config-mst)# Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-mst)#show wlan-acl all WLAN port: 102 Inbound IP Access List : 110 Inbound MAC Access List : Outbound IP Access List: Outbound MAC Access List : RFS700
PAGE 416
Extended ACL Instance Use the(config-ext-nacl) instance to configure ip access-list extended ACLs. Extended access lists are statements that deny or permit packets based on the specified source/destination IP address, port numbers, and upper layer protocols. Standard access lists deny/permit packets by source IP address only. The destination address and the port involved are not specified in the list. 14.1 Extended ACL Config Commands Table 14.1 summarizes the config-ext-nacl commands. Table 14.
PAGE 417
14-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 14.1.1 clrscr Extended ACL Config Commands Use this command to clear the display screen. Syntax clrscr Parameters None.
PAGE 418
Extended ACL Instance 14-3 14.1.2 deny Extended ACL Config Commands Use this command to specify packets to reject. Syntax deny [icmp|ip|proto|tcp|udp] deny ip [|host |any] [|host |any] {log} {(rule-description |rule-precedence <1-5000>)} deny icmp [|host |any] [|host
PAGE 419
14-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide deny (icmp) [| host |any] [| host |any] {log} {(rule-description | rule-precedence <1-500)} Use the deny icmp command to reject Internet Control Message Protocol (ICMP) packets.
PAGE 420
Extended ACL Instance 14-5 deny (proto) [<1-254>|| eigrp|gre|igmp| igp|ospf|vrrp] [| host |any] [| host |any] {log} {(rule-description | rule-precedence <1-5000>)} Use the deny proto command to reject packets other than IP, ICMP, TCP, and UDP. • <1-254> – Filters protocols using their Internet Assigned Numbers Authority (IANA) protocol number. Specify the protocol number between 1 - 254.
PAGE 421
14-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide deny (tcp|udp) [| host |any] [|host | any|eq <1-65535>| range ] [operator destination-port] {log} {rule-description | rule-precedence <1-5000>} Use the deny [tcp|udp] command to reject TCP or UDP packets. • – The IP address and mask of the source network or host in dotted decimal format. For example, 10.1.1.
PAGE 422
Extended ACL Instance 14-7 Usage Guidelines Use this command to deny traffic between network’s/host’s based on the protocol type selected in the access list configuration. The following protocol types are supported: • IP • ICMP • TCP • UDP The last ACE in the access list is an implicit deny statement. Whenever the interface receives the packet, its content is checked against the ACE’s in the ACL. It is allowed/denied based on the ACL configuration.
PAGE 423
14-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 14.1.3 end Extended ACL Config Commands SyntaxUse this command to end and exit the config-ext-nacl mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#. end Parameters None.
PAGE 424
Extended ACL Instance 14-9 14.1.4 exit Extended ACL Config Commands Use this command to end the config-ext-nacl mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 425
14-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 14.1.5 help Extended ACL Config Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-ext-nacl)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 426
Extended ACL Instance 14-11 14.1.6 mark Extended ACL Config Commands Use this command to mark specific packets. Syntax mark [8021p|dscp|tos] [icmp|ip|proto|tcp|udp] mark [8021p <0-7>|dscp <0-63>|tos <0-255>] [ip] [SOURCE-IP/MASK|host |any] [|host |any] {log} {rule-precedence access-list-entry precedence} mark [8021p <0-7>|dscp <0-63>|tos <0-255>] [icmp] [SOURCE-IP/MASK|host |any] [|host
PAGE 427
14-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide mark [8021p <0-7> | dscp <0-63>| tos <0-255>] IP [ip] [| host |any] | host |any] {log} {rule-description | rule-precedence <1-500>} Specifies IP as the protocol to match. • – The IP address and mask of the source network or host in dotted decimal format. For example, 10.1.1.10/24 indicates the first 24 bits of the source IP are used for matching.
PAGE 428
Extended ACL Instance 14-13 mark [8021p <0-7> | dscp <0-63>| tos <0-255>] icmp [icmp] [| host |any] | host |any] {| } {log} {rule-description | rule-precedence <1-500>} Specifies ICMP as the protocol to match. • – The IP address and mask of the source network or host in dotted decimal format. For example, 10.1.1.10/24 indicates the first 24 bits of the source IP are used for matching.
PAGE 429
14-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide mark [8021p <0-7> | dscp <0-63>| tos <0-255>] [tcp|udp] [tcp|udp] [| host |any] [| host | any|eq <1-65535>| range ] [operator destinationport] {log} {rule-description | rule-precedence <1-5000>} Specifies TCP or UDP as the protocol to match.
PAGE 430
Extended ACL Instance 14-15 mark [8021p <0-7> | dscp <0-63>| tos <0-255>] proto proto [<1-254>|| eigrp|gre|igmp|igp| ospf|vrrp] [| host |any] [| host |any] {log} {rule-description | rule-precedence <1-5000>} Specifies any protocol other than IP, ICMP, TCP, and UDP. • <1-254> – Specify the protocol number to match between 1 - 254. • – Specify the protocol name.
PAGE 431
14-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Usage Guidelines This command marks traffic between network’s/host’s based on the protocol type selected in the access list configuration. Use the mark option to specify the type of service (tos) and priority values. The tos value is marked in the IP header and the 802.1p priority value is marked in the dot1q frame.
PAGE 432
Extended ACL Instance 14-17 14.1.7 no Extended ACL Config Commands Use this command to negate a command or set its defaults. Syntax no [deny|mark|permit] This command negates all the syntax combinations used in deny, mark and permit commands to configure the Extended ACL. Parameters no deny Negates the deny packets rule entry in an IP extended ACL. no mark Negates the mark packets rule entry in an IP extended ACL. no permit Negates the permit packets rule entry in an IP extended ACL.
PAGE 433
14-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 14.1.8 permit Extended ACL Config Commands Use this command to permit specific packets. NOTE ACLs do not allow DHCP messages to flow by default. Configure an Access Control Entry (ACE) to allow DHCP messages to flow through. RFS7000(config-ext-nacl)#permit ip 192.168.1.0/24 192.168.2.0/24 RFS7000(config-ext-nacl)#permit ip any host 255.255.255.
PAGE 434
Extended ACL Instance 14-19 Parameterspermit [tcp|udp] [|host |any] [| host |any|eq <1-65535>|range ] {log} {(rule-description |rule-precedence <1-5000>)} permit (ip) [| host |any] [| host |any] {log} {(rule-description | rule-precedence <1-5000>)} Use the permit ip command to allow IP packets.
PAGE 435
14-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide permit (icmp) [| host |any] [| host |any] {log} {(rule-description | rule-precedence <1-500) Use the permit icmp command to allow ICMP packets. Define the network or host to permit as a source of packets, using one of the following options: • – The IP address and mask of the source network or host in dotted decimal format.
PAGE 436
Extended ACL Instance 14-21 permit [tcp|udp] [| host |any] [| host | any|eq <1-65535>| range ] [operator destination-port] {log} {rule-description | rule-precedence <1-5000>} Use the permit [tcp|udp] command to allow TCP or UDP packets. • – The IP address and mask of the source network or host in dotted decimal format. For example, 10.1.1.
PAGE 437
14-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide permit (proto) [<1-254>|| eigrp|gre|igmp| igp|ospf|vrrp] [| host |any] [| host |any] {log} {(rule-description | rule-precedence <1-5000>)} Use the permit proto command to allow packets other than IP, ICMP, TCP, and UDP. • <1-254> – Filters protocols using their Internet Assigned Numbers Authority (IANA) protocol number.
PAGE 438
Extended ACL Instance 14-23 Usage Guidelines Use this command to permit traffic between network’s/host’s based on the protocol type selected in the access list configuration. The following protocols are supported: • IP • ICMP • TCP • UDP The last ACE in the access list is an implicit deny statement. Whenever the interface receives the packet, its content is checked against all the ACE’s in the ACL. It is allowed based on the ACL configuration.
PAGE 439
14-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 14.1.9 service Extended ACL Config Commands Use this command to invoke service commands to troubleshoot or debug (config-if) instance configurations. Syntax service [show] [cli] Parameters show [cli] Shows CLI tree of current mode.
PAGE 440
Extended ACL Instance 14-25 14.1.10 show Extended ACL Config Commands Use this command to view the current system information. Syntax show Parameters ? Displays all the parameters for which the information can be viewed using the show command. Usage Guidelines The show access-list command displays all the access lists configured in the switch console. Provide the access list name or number to view the details of a particular ACL.
PAGE 441
14-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide snmp Display SNMP engine parameters snmp-server Display SNMP engine parameters spanning-tree Display spanning tree information startup-config Contents of startup configuration static-channel-group static channel group membership terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently log
PAGE 442
Standard ACL Instance Use the (config-std-nacl) instance to configure ip access-list standard ACLs. Standard ACLs allow filtering based on the source address only. 15.1 Standard ACL Config Commands Table 15.1 summarizes config-std-nacl commands. Table 15.1 Standard ACL Config Command Summary Command Description Ref. clrscr Clears the display screen. page 15-2 deny Specifies packets to reject. page 15-3 end Ends the current mode and changes to EXEC mode.
PAGE 443
15-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 15.1.1 clrscr Standard ACL Config Commands Use this command to clear the display screen. Syntax clrscr Parameters None.
PAGE 444
Standard ACL Instance 15-3 15.1.2 deny Standard ACL Config Commands Use this command to specify packets to reject. Syntax deny [|any|host ] {log (rule-precedence <1-500>)} deny [|any|host ] {rule-precedence <1-500>} Parameters The source IP address range to match. Rejects packets from the source specified by the parameter. any Specifies a source IP address and mask of value 0.0.0.0 and 255.255.255.255. host
PAGE 445
15-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 15.1.3 end Standard ACL Config Commands Use this command to exit the config-std-nacl mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 446
Standard ACL Instance 15-5 15.1.4 exit Standard ACL Config Commands Use this command to end the config-std-nacl mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 447
15-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 15.1.5 help Standard ACL Config Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-std-nacl)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 448
Standard ACL Instance 15-7 15.1.6 mark Standard ACL Config Commands Use this command to mark specific packets. Syntax mark [8021p <0-7>|dscp <0-63>|tos <0-255>] mark [8021p <0-7>|dscp <0-63>|tos <0-255>] [|any|host ] {log (rule-precedence <1-500>)} mark [8021p <0-7>|dscp <0-63>|tos <0-255>] [|any|host
PAGE 449
15-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 15.1.7 no Standard ACL Config Commands Use this command to negate a command or set its defaults. Syntax no [deny|mark|permit] Usage Guidelines no deny Negates the deny packets rule entry in a standard ACL no mark Negates the mark packets rule entry in a standard ACL. no permit Negates the permit packets rule entry in a standard ACL Use the no command to remove an access list control entry.
PAGE 450
Standard ACL Instance 15-9 15.1.8 permit Standard ACL Config Commands Use this command to permit specific packets. Syntax permit [|any|host ] {log (rule-precedence <1-500>)} Parameterspermit [|any|host ] {rule-precedence <1-500>} The source IP address range to match. Forwards packets from the source specified by the parameter. any Specifies a source IP address and mask of value 0.0.0.0 and 255.255.255.255. host
PAGE 451
15-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 15.1.9 service Standard ACL Config Commands Use this command to invoke service commands to troubleshoot or debug (config-if) instance configurations. Syntax service [show] [cli] Parameters show [cli] Shows CLI tree of current mode.
PAGE 452
Standard ACL Instance 15-11 15.1.10 show Standard ACL Config Commands Use this command to view current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command. Usage Guidelines The show access-list command displays all the access lists configured in the switch console. Provide the access list name or number to view the details of a particular ACL.
PAGE 453
15-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide startup-config static-channel-group terminal timezone traffic-shape upgrade-status users version virtual-ip wireless wlan-acl Contents of startup configuration static channel group membership Display terminal configuration parameters Display timezone Display traffic shaping Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configura
PAGE 454
Extended MAC ACL Instance Use the (config-ext-macl) instance to configure mac access-list extended ACLs associated with the switch. Use a decimal value representation of Ethertypes to implement permit/deny/mark packet. The command set for Extended MAC ACLs provides hexadecimal values for each of its listed ethertypes. The switch supports all ethertypes. Use the decimal equvilant of the ethertype listed in the CLI for any other ethertype. 16.1 MAC Extended ACL Config Commands Table 16.
PAGE 455
16-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 16.1.1 clrscr MAC Extended ACL Config Commands Use this command to clear the display screen. Syntax clrscr Parameters None.
PAGE 456
Extended MAC ACL Instance 16-3 16.1.2 deny MAC Extended ACL Config Commands Use this command to specify packets to reject. NOTE Use a decimal value representation of ethertypes to implement a permit/deny/mark designation for a packet. The command set for Extended MAC ACLs provides hexadecimal values for each listed ethertype. The switch supports all ethertypes. Use the decimal equvilant of the ethertype listed or for any other type of ethertype.
PAGE 457
16-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide type
PAGE 458
Extended MAC ACL Instance 16-5 Example The MAC AC (in the example below) denies traffic from any source MAC address to a particular host MAC address. RFS7000(config-ext-macl)#deny any host 00:01:ae:00:22:11 RFS7000(config-ext-macl)# The MAC ACL (in the example below) denies dot1q tagged traffic from VLAN interface 5. RFS7000(config-ext-macl)#deny any any vlan 5 type 8021q RFS7000(config-ext-macl)# The example below denies traffic between two hosts based on MAC addresses.
PAGE 459
16-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 16.1.3 end MAC Extended ACL Config Commands Use this command to exit from the config-ext-macl mode and change to PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 460
Extended MAC ACL Instance 16-7 16.1.4 exit MAC Extended ACL Config Commands Use this command to end the config-ext-macl mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 461
16-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 16.1.5 help MAC Extended ACL Config Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-ext-macl)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 462
Extended MAC ACL Instance 16-9 16.1.6 mark MAC Extended ACL Config Commands Use this command to specify a packet to mark. NOTE Use a decimal value representation of Ethertypes to implement permit/deny/ mark designations for a packet. The command set for an Extended MAC ACL provides hexadecimal values for each of its listed Ethertypes. The switch supports all Ethertypes. Use the decimal equvilant of the Ethertype listed in the CLI or for any other type of Ethertype.
PAGE 463
16-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide type
PAGE 464
Extended MAC ACL Instance 16-11 16.1.7 no MAC Extended ACL Config Commands Use this command to negate a command or set defaults. Syntax no [deny|mark|permit] This command negates all the syntax combinations used in RFS7000(config-ext-macl)#, mark and permit to configure the Extended ACL. Parameters no deny Negates the deny packets rule entry in an MAC extended ACL. no mark Negates the mark packets rule entry in an MAC extended ACL.
PAGE 465
16-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 16.1.8 permit MAC Extended ACL Config Commands Use this command to specify packets to forward. NOTE Use a decimal value representation of Ethertypes to implement permit/deny/mark designations for a packet. Extended MAC ACL’s provide hexadecimal values for each listed Ethertype. The switch supports all ethertypes. Use the decimal equvilant of the Ethertype listed in the CLI or for any other type of Ethertype.
PAGE 466
Extended MAC ACL Instance 16-13 type
PAGE 467
16-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide The last ACE in the access list is an implict deny statement. Whenever the interface receives the packet, its content is checked against all the ACEs in the ACL. It is allowed/denied based on the ACL configuration. Example The example below permits WISP based traffic from any source MAC address to any destination MAC address.
PAGE 468
Extended MAC ACL Instance 16-15 16.1.9 service MAC Extended ACL Config Commands Use this command to invoke service commands to troubleshoot or debug (config-if) instance configurations. Syntax service [show] [cli] Parameters show [cli] Shows CLI tree of current mode.
PAGE 469
16-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 16.1.10 show MAC Extended ACL Config Commands Use this command to view current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command. Usage Guidelines The show access-list command displays the access lists configured for the switch. Provide the access list name or number to view specific ACL details.
PAGE 470
Extended MAC ACL Instance 16-17 startup-config Contents of startup configuration static-channel-group static channel group membership terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl RFS7000(confi
PAGE 471
16-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 472
DHCP Instance Use the (config-dhcp)instance to configure the DHCP server address pool associated with the switch. Use ip dhcp pool (pool name) command to reach (config-dhcp) instance. 17.1 DHCP Config Commands Table 17.1 summarizes config-dhcp commands. Table 17.1 DHCP Server Config Command Summary Command Description Ref. address Configures the DHCP network pool address range. page 17-3 bootfile Assigns a boot file name. The bootfile name can contain letters, numbers, dots and hyphens.
PAGE 473
17-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 17.1 DHCP Server Config Command Summary Command Description Ref. netbios-name-server Configures NetBIOS (WINS) name servers. page 17-23 netbios-node-type Configures NetBIOS node type. page 17-24 network Configures a network number and mask for the DHCP Server. page 17-25 next-server Configures the next server in boot process. page 17-26 no Negates a command or sets defaults.
PAGE 474
DHCP Instance 17-3 17.1.1 address DHCP Config Commands Use this command to specify a range of addresses for DHCP network pool. Syntax address [range] [] {} Parameters range Configures the address range for the DHCP server. Specify the first IP address in the range. Optional. Specify the last IP address in the range. A maximum of 65535 addresses can be configured as the DHCP network pool.
PAGE 475
17-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.2 bootfile DHCP Config Commands Use this command to assign a bootfile name for the DHCP configuration on the network pool. Syntax bootfile Parameters bootfile Indicates the boot image for BOOTP clients. The file name can contain letters, numbers, dots and hyphens. Consecutive dots and hyphens are not permitted. Usage Guidelines Use the bootfile command to specify the boot image.
PAGE 476
DHCP Instance 17-5 17.1.3 class DHCP Config Commands Use this command to associate a DHCP class with a pool. This command is used in Step 4 in the usage guidelines provided below. The CLI prompt moves to a sub-instance(config-dhcp-class). The configuration mode changes from (config-dhcp)#class to (config-dhcp-class)#. Refer to config-dhcp-class on page 17-7 for (config-dhcp-class) command summary.
PAGE 477
17-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Example RFS7000(config-dhcp)#clas RFS7000DHCPclass RFS7000(config-dhcp-class)# RFS7000(config-dhcp-class)#? DHCP Server Class Config commands: address Configure DHCP Server include range clrscr Clears the display screen end End current mode and change to EXEC mode exit End current mode and down to previous mode help Description of the interactive help system no Negate a command or set its defaults service Service Commands show Show run
PAGE 478
DHCP Instance 17-7 17.1.3.1 config-dhcp-class class Use (config-dhcp)# class to enter the (config-dhcp-class)instance. Use this instance to set an address range for a DHCP user class in a DHCP server address pool.
PAGE 479
17-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 17.2 summarizes config-dhcp-class commands. address Table 17.2 Config- dhcp-class Command Summary Command Description Table 17.2 summarizes configdhcp-class commands. address Configures a range of IP addresses with this DHCP class. clrscr Clears the display screen. end Ends current mode and change to EXEC mode. exit Ends current mode and moves to the to previous mode. help Displays the interactive help system.
PAGE 480
DHCP Instance 17-9 no config-dhcp-class Use this command to negate a value or set its default value. Syntax no address Parameters Refer to Table 17.2 summarizes config-dhcp-class commands. address on page 17-8 for the parameters negated using the no cammand.
PAGE 481
17-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.4 client-identifier DHCP Config Commands Use this command to assign a name to the client-identifier. A client identifier is used to reserve an IP address for DHCP clients. Syntax client-identifier Parameters client-identifier Specifies the ASCII string.To prepend a null character, use \\0 at beginning. A single \ in the input is ignored.
PAGE 482
DHCP Instance 17-11 17.1.5 client-name DHCP Config Commands Use this command to a add client name for the DHCP clients. Syntax client-name Parameters client-name Use client-name to add a client name. The domain name must not be included.
PAGE 483
17-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.6 clrscr DHCP Config Commands Use this command to clear the screen. Syntax clrscr Parameters None.
PAGE 484
DHCP Instance 17-13 17.1.7 ddns DHCP Config Commands Use this command to configure dynamic DNS parameters like domain name, enabling multi-user class and IP address of the server. Syntax ddns [domainname|mutiple-user-class|server|ttl] ddns [domainname |multiple-user-class|server {}| ttl <1-864000>] Parameters domainname Sets domain name used for DDNS updates. multiple-user-class Enables multiple user class option. server {
PAGE 485
17-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.8 default-router DHCP Config Commands Use this command to configure the default router or gateway IP address for the network pool. To remove the default router list, use the no default-router command. Syntax default-router Parameters default-router Specifies the default router IP address for the network pool. • – The router's IP address.
PAGE 486
DHCP Instance 17-15 17.1.9 dns-server DHCP Config Commands Use this command to configure the DNS server’s IP address available to the DHCP clients connected to the pool. Use the no dns-server command to remove DNS server list. Syntax dns-server { .....} Parameters dns-server Configures the DNS server’s IP address. • – DNS server's IP address.
PAGE 487
17-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.10 domain-name DHCP Config Commands Use this command to configure the domain name for the network pool. Use the no domain-name command to remove the domain name. Syntax domain-name Parameters domain-name Configures the domain name for the network pool. Usage Guidelines The domain name cannot exceed 256 characters in length.
PAGE 488
DHCP Instance 17-17 17.1.11 end DHCP Config Commands Use this command to exit the config-dhcp mode and moves to the PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 489
17-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.12 exit DHCP Config Commands Use this command to end the config-dhcp mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 490
DHCP Instance 17-19 17.1.13 hardware-address DHCP Config Commands Use this command to reserve an IP address (manually) based on a DHCP client’s hardware address. Use the no hardware-address command to remove this from the DHCP pool. Syntax hardware-address [|] {ethernet|token-ring} Parameters hardware-address [XX-XX-XX-XX-XXXX|XX:XX:XX:XX:XX:XX] Configures the client’s hardware address, using one o fthe following formats:.
PAGE 491
17-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.14 help DHCP Config Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-dhcp)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 492
DHCP Instance 17-21 17.1.15 host DHCP Config Commands Use this command to configure a fixed IP address for the host in dotted decimal format. Use the no host command to remove the host from the DHCP pool. Syntax host Parameters host Configures the host’s fixed IP address. • – IP address in dotted decimal format.
PAGE 493
17-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.16 lease DHCP Config Commands Use this command to configure a valid lease time for the IP address used by all DHCP clients in the network pool. Syntax lease [<0-365>|infinite] lease [<0-365> <0-23> <0-59>] Parameters lease Sets the lease time for IP address. <0-365> <0-23> <0-59> Sets the lease time in days, hours and minutes. • <0-365> – Lease period in days.
PAGE 494
DHCP Instance 17-23 17.1.17 netbios-name-server DHCP Config Commands Use this command to configure the NetBIOS Name server’s IP address for the DHCP pool. Syntax netbios-name-server Parameters netbios-name-server Configures the NetBIOS (WINS) name servers. • – NetBIOS name server's IP address. Example RFS7000(config-dhcp)#netbios-name-server 2.2.2.
PAGE 495
17-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.18 netbios-node-type DHCP Config Commands Use this command to configure the NetBIOS node type.The node type determines how the NetBIOS Name server resolves NetBIOS names to IP addresses. Syntax netbios-node-type [b-node|h-node|m-node|p-node] Parameters netbios-node-type [b-node|h-node| m-node|p-node] NetBIOS (WINS) name servers. • b-node – Broadcast node. • h-node – Hybrid node. • m-node – Mixed node.
PAGE 496
DHCP Instance 17-25 17.1.19 network DHCP Config Commands Use this command to configure the network pool’s IP address. This maps the current DHCP pool with the specified network. Syntax Parametersnetwork [ |] network [ | ] Network number and mask. • – Network number in dotted decimal format. • – Network mask in dotted decimal format. • – Network number and mask.
PAGE 497
17-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.20 next-server DHCP Config Commands Use this command to configure the IP address of the Next server in the boot process. Syntax next-server Parameters next-server Defines the Next server in the boot process. • – Server's IP address. Example RFS7000(config-dhcp)#next-server 2.2.2.
PAGE 498
DHCP Instance 17-27 17.1.21 no DHCP Config Commands Use this command to negate a command or set defaults. Syntax no [address|bootfile|class|client-identifier|client-name|ddns|default-router| dns-server|domain-name|hardware-address|host|lease|netbios-name-server| netbios-node-type|network|next-server|option|unicast-enable|update] Parameters The no command negates any command associated with it. Wherever required, use the same parameters associated with the command getting negated.
PAGE 499
17-28 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.22 option DHCP Config Commands Use this command to define the raw DHCP option used in DHCP pools. Syntax option [|] Parameters option Configures the raw DHCP options. • – Name of the DHCP option. • – IP Value of the DHCP option. • – ASCII Value of DHCP option. Usage Guidelines Used to define non standard DHCP options option-code (0-254).
PAGE 500
DHCP Instance 17-29 17.1.23 service DHCP Config Commands Use this command to invoke service commands to troubleshoot or debug the (config-dhcp) instance configurations. Syntax service [show] [cli] Parameters show Shows running system information. cli Shows CLI tree of current mode.
PAGE 501
17-30 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.24 show DHCP Config Commands Use this command to view current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command.
PAGE 502
DHCP Instance 17-31 terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl RFS7000(config-dhcp)#show RFS7000(config-dhcp)#show dhc config ! ip dhcp pool WID lease 20 12 30 domain-name Engineering dns-se
PAGE 503
17-32 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.1.25 unicast-enable DHCP Config Commands Use this command to enable unicast for DHCP offer and DHCP acknowledgement. Parameters None. Example RFS7000(config-dhcp)#unicast-enable RFS7000(config-dhcp)# RFS7000(config-dhcp)#show dhcp config ! ip dhcp pool WID lease 20 12 30 domain-name Engineering dns-server 2.2.2.222 default-router 2.2.2.1 next-server 2.2.2.22 netbios-name-server 2.2.2.
PAGE 504
DHCP Instance 17-33 17.1.26 update DHCP Config Commands Use this command to control the usage of the DDNS service. Syntax update dns {override} Parameters update dns {override} Controls the usage of the DDNS service. • dns – Configures dynamic DNS. • override – Optional. Enables dynamic updates by an onboard DHCP server. Usage Guidelines A DHCP client cannot perform updates for RR’s A, TXT and PTR.
PAGE 505
17-34 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.2 Configuring DHCP Server using CLI DHCP configuration is conducted by creating pools and mapping them to L3 interfaces (SVI). A pool can be configured either as a network pool or host pool. A network pool includes ranges. When the network pool is mapped to a L3 interface, DHCP clients requesting IP from the interface get an IP from the included range. A host pool is used to assign static/fixed IP address to DHCP clients.
PAGE 506
DHCP Instance 17-35 17.2.1 Creating network pool RFS7000(config)#ip dhcp pool test RFS7000(config-dhcp)#network 192.168.0.0/24 RFS7000(config-dhcp)#address range 192.168.0.30 192.168.0.60 RFS7000(config-dhcp)#domain-name test.com RFS7000(config-dhcp)#dns-server 192.168.0.10 192.168.0.
PAGE 507
17-36 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 17.2.2 Creating host pool RFS7000(config)#ip dhcp pool hostpool RFS7000(config-dhcp)#client-name linuxbox RFS7000(config-dhcp)#host 192.168.0.
PAGE 508
DHCP Instance 17-37 17.2.3 Troubleshooting DHCP configuration DHCP Server configurations come into effect only after rebooting the DHCP Server. Execute the ip dhcp restart, at a global level, to restart the DHCP Server. The following steps help setup/troubleshoot DHCP related configuration issues: 1. To change the domain name for a pool from its existing name to example.com: RFS7000(config)#ip dhcp pool test RFS7000(config-dhcp)#domain-name example.com RFS7000(config-dhcp)#exit 2.
PAGE 509
17-38 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • host ( Eg host 192.168.0.1 ) • client-name ( Eg client-name "kaveri" ) • client-identifier ( Eg client-identifier "aabb:ccdd" ) • hardware-address ( Eg hardware-address aa:bb:cc:dd:ee:ff ) 11. A pool can be configured as the host pool or network pool, but not both. 12. A host pool can have either client-identifier or hardware-address configured, but not both. 13.
PAGE 510
DHCP Class Instance Use (config)#ip dhcp class to enter (config-dhcpclass)instance. Use this instance to configure the DHCP user class. The switch supports a maximum of 8 user classes per DHCP class. Also refer ip on page 5-35 and DHCP Instance on page 17-1 for other DHCP related configurations. 18.1 DHCP Server Class Config Commands Table 18.1 summarizes DHCP server class config commands. Table 18.1 DHCP server class config commands Command Description Ref.
PAGE 511
18-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 18.1.1 clrscr DHCP Server Class Config Commands Use this command to clear the display screen. Syntax clrscr Parameters None.
PAGE 512
DHCP Class Instance 18-3 18.1.2 end DHCP Server Class Config Commands Use this command to end and exit from the config-dhcpclass mode and change to the PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 513
18-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 18.1.3 exit DHCP Server Class Config Commands Use this command to end the config-dhcpclass mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 514
DHCP Class Instance 18-5 18.1.4 help DHCP Server Class Config Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-dhcpclass)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 515
18-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 18.1.5 multiple-user-class DHCP Server Class Config Commands Use this command to enable the multiple user class option. This specifies the client (MU) sends multiple user classes.
PAGE 516
DHCP Class Instance 18-7 18.1.6 no DHCP Server Class Config Commands Use this command to negate a command or set its defaults. Syntax no [multiple-user-class|option] Parameters multiple-user-class Disables the multiple user class option. option Removes the DHCP server options.
PAGE 517
18-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 18.1.7 option DHCP Server Class Config Commands Use this command to specify a value for DHCP user class options. This command is used in Step 2 in the usage guidelines provided below. Syntax option [user-class] [user class name] Parameters user-class [user classname] Creates a DHCP server user-class option. Usage Guidelines Follow the steps below to create a DHCP User Class: 1. Create a DHCP class named RFS7000DHCPclass.
PAGE 518
DHCP Class Instance 18-9 18.1.8 service DHCP Server Class Config Commands Use this command to invoke service commands to troubleshoot or debug (config-if) instance configurations. Syntax service [show] [cli] Parameters show (cli) Displays the CLI tree of current mode.
PAGE 519
18-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 18.1.9 show DHCP Server Class Config Commands Use this command to view the current system information. Syntax show show dhcp [config|status] show ip dhcp [binding|class|pool|sharednetwork] Parameters ? Displays all the parameters for which the information can be viewed using the show command.
PAGE 520
DHCP Class Instance 18-11 terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl RFS7000(config-dhcpclass)#show RFS7000(config-dhcpclass)#show ip dhcp binding IP MAC/Client-Id -------------10.10.10.
PAGE 521
18-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 522
RADIUS Server Instance The radius-server local command moves to the RADIUS server mode. The local (Onboard) RADIUS server configuration commands are listed under this mode. Use the (config-radsrv)instance to configure local RADIUS server parameters. 19.1 RADIUS Configuration Commands Table 19.1 summarizes the RADIUS Config commands. Table 19.1 RADIUS Config Command Summary Command Description Ref. authentication RADIUS authentication. page 19-3 ca Configures ca certificate parameters.
PAGE 523
19-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 19.1 RADIUS Config Command Summary Command Description Ref. server Configures server certificate parameters. page 19-36 service Service commands. page 19-37 show Shows running system information.
PAGE 524
RADIUS Server Instance 19-3 19.1.1 authentication RADIUS Configuration Commands Use this command to configure an authentication scheme used with the RADIUS server.
PAGE 525
19-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.2 ca RADIUS Configuration Commands Use this command to configure Certificate Authority (CA) parameters. Syntax ca trust-point Parameters trust-point Trustpoint configuration. • – Specify an existing trustpoint name. Usage Guidelines Configure the trustpoint used by the local RADIUS server. Use the crypto pki trustpoint command to create the trustpoint before using it.
PAGE 526
RADIUS Server Instance 19-5 19.1.3 clrscr RADIUS Configuration Commands Use this command to clear the screen. Syntax clrscr Parameters None.
PAGE 527
19-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.4 crl-check RADIUS Configuration Commands Use this command to enable a Certificate Revocation List (CRL) check. To enable the CRL check, ensure the crl list is loaded using the crypto pki import crl command. Syntax crl-check enable Parameters enable Enables CRL check. Usage Guidelines A CRL that is updated with a trustpoint contains index numbers of all the revoked certificates.
PAGE 528
RADIUS Server Instance 19-7 19.1.5 end RADIUS Configuration Commands Use this command to exit from the config-radsrv mode and move to the PRIV EXEC mode. The prompt now changes to RFS7000#. Syntax end Parameters None.
PAGE 529
19-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.6 exit RADIUS Configuration Commands Use this command to exit the config-radsrv mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 530
RADIUS Server Instance 19-9 19.1.7 group RADIUS Configuration Commands Use this command to configure RADIUS user groups. The CLI moves to a sub-instance config-radsrv-group, to create a new group. The prompt changes from RFS7000(config-radsrv)# to RFS7000(config-radsrv-group)#. Table 19.2 summarizes the RADIUS User Group commands within the (config-radsrv-group) sub-instance. Table 19.2 RADIUS User Group Configuration Command Summary Command Description Ref. clrscr Clears the display screen.
PAGE 531
19-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.1 clrscr group Use this command to clear the display screen. Syntax clrscr Parameters None.
PAGE 532
RADIUS Server Instance 19-11 19.1.7.2 end group Use this command to exit the config-radsrv-group mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 533
19-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.3 exit group Use this command to exit the config-radsrv-group mode and move to the previous mode (config-radsrv)). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 534
RADIUS Server Instance 19-13 19.1.7.4 group group Use this command to configure RADIUS user groups. This command creates a group within an existing RADIUS group. Syntax group Parameters Specify the RADIUS group name (cannot exceed 32 characters in length).
PAGE 535
19-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.5 guest-group group Use this command to manage a guest user linked with a hotspot. Additionally, create a guest-user and associate it with a guest-group. The guest-user and the policies of the guest-group are used for hotspot authentication. Syntax guest-group Parameters enable Enables this group as a guest group. Usage Guidelines Use this command to create a guest group.
PAGE 536
RADIUS Server Instance 19-15 19.1.7.6 help group Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-radsrv-group)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 537
19-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.7 no group Use this command to negate a command or set defaults. Syntax no [policy|rad-user|rate-limit] no policy [day|time|vlan|wlan [<1-256> {<1-256>}|all]] no rad-user [|all] no rate-limit [WIRED-TO-WIRELESS|WIRELESS-TO-WIRED] Parameters no (policy) policy Resets the RADIUS group access policy configuration. day Resets the access policy (daysof permitted access) for this group.
PAGE 538
RADIUS Server Instance 19-17 Example RFS7000(config-radsrv-group)#no policy day RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#no policy time RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#no policy vlan RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#no policy wlan 2 5 RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#no rad-user all RFS7000(config-radsrv-group)#
PAGE 539
19-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.8 policy group Use this command to configure authorization policies for a particular group, like day/time of access, WLAN’s allowed and to set a user based VLAN. NOTE User based VLAN is effective only if dynamic VLAN authorization is enabled on the WLAN.
PAGE 540
RADIUS Server Instance 19-19 Example RFS7000(config-radsrv-group)#policy day weekdays RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#policy time start 12 12 end 22 22 RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#policy vlan 20 RFS7000(config-radsrv-group)# RFS7000(config-radsrv-group)#policy wlan 20 21 22 23 RFS7000(config-radsrv-group)#
PAGE 541
19-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.9 rad-user group Use this command to add an existing RADIUS user to this group. If the RADIUS user is not available in the Onboard RADIUS server’s database, create a new RADIUS user using rad-user command from (config-radsrv) mode. For more details check19.1.14 rad-user on page 34. Syntax rad-user Parameters Specify an existing RADIUS user name.
PAGE 542
RADIUS Server Instance 19-21 19.1.7.10 rate-limit group Use this command to set rate limit for this group. Syntax rate-limit [wired-to-wireless|wireless-to-wired] <100-1000000> Parameters wired-to-wireless Configures the rate-limit in the down link direction - from network to wireless client. wireless-to-wired Configures the rate-limit in the up link direction - from wireless client to network.
PAGE 543
19-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.7.11 service group Use this command to invoke RADIUS service commands. This command is used to enable the RADIUS Server. A service RADIUS restart is executed only from the config mode. Syntax service [show] [cli] Parameters show [cli] Shows running system information.
PAGE 544
RADIUS Server Instance 19-23 19.1.7.12 show group Use this command to view the current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command. For additional information, refer to radius and show.
PAGE 545
19-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl RFS7000(config-radsrv-group)#show RFS7000(config)#show radius trust-point Trust-point Configured For Radius _________________
PAGE 546
RADIUS Server Instance 19-25 19.1.7.13 Example–Creating a Group The use of the (config-radsrv-group) sub-instance is explained below: 1. Create a group called Sales in the local RADIUS Server database. RFS7000(config-radsrv)#group sales 2. Check RADIUS user group configuration commands.
PAGE 547
19-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide LINE The secret(client shared secret), upto 32 characters RFS7000(config-radsrv)#nas 10.10.10.0/24 key 0 very-secret!! 8. Use (config-radsrv)#proxy to add a realm name. RFS7000(config-radsrv)#proxy realm mydomain.com server 10.10.1.10 port 1812 secret 0 testing 9. Save the changes and restart the RADIUS service.
PAGE 548
RADIUS Server Instance 19-27 19.1.8 help RADIUS Configuration Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-radsrv)#help? help Description of the interactive help system RFS7000(config-radsrv)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options.
PAGE 549
19-28 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.9 ldap-group-verification RADIUS Configuration Commands Use this command to enable/disable LDAP group verification feature.
PAGE 550
RADIUS Server Instance 19-29 19.1.10 ldap-server RADIUS Configuration Commands Use this command to configure the external LDAP server parameters. It uses the existing external database in form of an active directory with the onboard RADIUS server instead of a local database on the switch.
PAGE 551
19-30 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide group-filter Configures the group filters used by the LDAP server. The group filter is of size 255. Note: The group filter is typically used for security role-to-group assignments and specifies the property to look up groups in the directory service. group-membership Specifies the group member attribute sent to the LDAP server when authenticating users. The group member attribute is of size 63.
PAGE 552
RADIUS Server Instance 19-31 19.1.11 nas RADIUS Configuration Commands Use this command to configure the RADIUS clients. Syntax nas [] key [0 |2 |] Parameters Configures the RADIUS client’s IP address in the A.B.C.D/M format. key [0 | 2 |] RADIUS Client shared key. • 0 – Password is specified UNENCRYPTED. • 2 – Password is encrypted with password-encryption secret.
PAGE 553
19-32 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.12 no RADIUS Configuration Commands Use this command to negate a command or set its defaults. Syntax no [authentication|ca|crl-check|group|ldap-server|nas|proxy|rad-user|server] Parameters no authentication Removes RADIUS authentication. ca Removes ca certificate parameters. crl-check Disables CRL check. group Removes local RADIUS server group configuration. ldap-server Removes LDAP server parameters.
PAGE 554
RADIUS Server Instance 19-33 19.1.13 proxy RADIUS Configuration Commands Use this command to configure a proxy RADIUS server based on the realm/suffix. A user’s request is forwarded to the proxy RADIUS server if it cannot be authenticated by the local RADIUS resources. The proxy server checks the information in the user access request and either accepts or rejects it.
PAGE 555
19-34 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.14 rad-user RADIUS Configuration Commands Use this command to configure RADIUS user parameters.
PAGE 556
RADIUS Server Instance 19-35 rad-user (privilege) privilege [cryptp-officer| monitor|superuser| sysadmin|webadmin] Sets management user access privilege. The options are: • crypto-officer – Crypto officer and Network (wired/wireless) admin access • monitor – Monitor (read-only) access. • superuser – Superuser (root) access. • sysadmin – System (general system configuration) admin access. • webadmin – Web auth (hotspot) user admin access.
PAGE 557
19-36 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.15 server RADIUS Configuration Commands Use this command to configure the server certificate parameters used by the RADIUS server. The server certificate is a part of a trustpoint created crypto on page 5-23. Syntax server trust-point Parameters trust-point Trustpoint configuration. • – Specify an existing trustpoint name.
PAGE 558
RADIUS Server Instance 19-37 19.1.16 service RADIUS Configuration Commands Use this command to invoke service commands to troubleshoot or debug (config-radsrv) instance configurations. This command is also used to enable the RADIUS Server. Syntax service [show] [cli] Parameters show [cli] Shows running system information.
PAGE 559
19-38 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 19.1.17 show RADIUS Configuration Commands Use this command to view current system information. Syntax show Parameters ? Displays the parameters for which information can be viewed using the show command. Usage Guidelines To view the show command parameters of RADIUS, refer to radius on page 2-62.
PAGE 560
RADIUS Server Instance 19-39 snmp-server Display SNMP engine parameters spanning-tree Display spanning tree information startup-config Contents of startup configuration static-channel-group static channel group membership terminal Display terminal configuration parameters timezone Display timezone traffic-shape Display traffic shaping upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundanc
PAGE 561
19-40 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 562
Wireless Instance Use the (config-wireless) instance to configure the local RADIUS server parameters associated with the wireless controller. To navigate to this instance, use the following command in the Global Config mode: RFS7000(config)#wireless RFS7000(config-wireless)# 20.1 Wireless Configuration Commands Table 20.1 gives a summary of Wireless Configuration commands. Table 20.1 Wireless Configuration Command Summary Command Description Ref. aap Invokes Adaptive AP (AAP) related commands.
PAGE 563
20-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Table 20.1 Wireless Configuration Command Summary Command Description Ref. client Configures wireless clients. page 20-20 clrscr Clears the display screen. page 20-31 cluster-mastersupport Modifies cluster master support settings, required for cluster-level functioning. page 20-32 country-code Configures the country of operation.
PAGE 564
Wireless Instance 20-3 Table 20.1 Wireless Configuration Command Summary Command Description Ref. non-preferred-apattempts-threshold Reverts the number of attempts after which the switch adopts non preferred AP to default. page 20-54 proxy-arp Responds to ARP requests on behalf of mobile units. page 20-56 qos-mapping Maps QoS between wired and wireless domains. page 20-57 radio Invokes radio related commands. page 20-58 rate-limit Sets default rate limit per user.
PAGE 565
20-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.1 aap Wireless Configuration Commands Use this command to invoke Adaptive AP (AAP) related commands. Syntax aap [aap-version|auto-upgrade|config-apply|fwupdate|include-config] aap aap-version aap7131 aap auto-upgrade enable aap config-apply [def-delay <30-10000>|mesh-delay <3-10000>] aap fwupdate [<1-1024>||filename |ipaddress
PAGE 566
Wireless Instance 20-5 Upgrades APs based on the MAC address provided. You can provide a single MAC address, or a list of MAC indices (for example 1,2,3), or a range of MAC indices (for example, 1-7). Note: Use the show wireless ap command to view wireless AP indices. filename Specifies the image file name used for the upgrade. ipaddress Specifies the remote Secure File Transfer Protocol (SFTP) server’s IP address.
PAGE 567
20-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.2 admission-control Wireless Configuration Commands Use this command to enable admission control across all radios. Syntax admission-control voice [enable] Parameters voice [enable] Enables admission control for voice traffic.
PAGE 568
Wireless Instance 20-7 20.1.3 adopt-unconf-radio Wireless Configuration Commands Use this command to adopt a radio (even if not yet configured). The default template is used for configuration. Syntax adopt-unconf-radio [enable] Parameters enable Enables the adoption of unconfigured radios.
PAGE 569
20-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.4 adoption-pref-id Wireless Configuration Commands Use this command to configure the preference identifier for this switch. Radios configured with this identifier are likely to be adopted by this switch. Syntax adoption-pref-id <1-65535> Parameters <1-65535> Specify a preference ID between 1 - 65535.
PAGE 570
Wireless Instance 20-9 20.1.5 ap Wireless Configuration Commands Use this command to define the name and location of access ports. Syntax ap [<1-1024>||] ap [<1-1024>||][ABG-scan|aap-admin-passwd| aap-mgmt-vlan|aap-native-vlan-id|aap-native-vlan-tag|adoption-policy| country-code|lan-acl|location|name|radio-config] Parameters <1-1024> Specifies a single AP index. Use show wireless ap command to view the AP’s index value.
PAGE 571
20-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide [ABG-scan| aap-admin-passwd| aap-mgmt-vlan| aap-native-vlan-id| aap-native-vlan-tag| adoption-policy| country-code| lan-acl| location| name| radio-config] The following keywords are common to the <1-1024>, , and parameters: • ABG-scan [enable] – Configures ABG scan mode on the AP. • enables – Enables detector radios to perform ABG scan. • aap-admin-passwd – Configures the AAP admin password.
PAGE 572
Wireless Instance 20-11 20.1.6 ap-containment Wireless Configuration Commands Use this command to invoke rogue AP containment commands. Syntax ap-containment [add|enable|interval] ap-containment [add |enable|interval <20-5000>] Parameters add Adds a rogue BSS MAC to the rogue AP containment list. The maximum entries allowed is 256. • – Specify the MAC address in the AA-BB-CC-DD-EE-FF format. enable Enables protection against rogue access points.
PAGE 573
20-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.7 ap-detection Wireless Configuration Commands Use this command to configure access port detection.
PAGE 574
Wireless Instance 20-13 ap-detection (timeout) timeout [authorized|ignored| unauthorized] Sets the interval (in seconds) an access port remains in the list after it is no longer seen. Select one of the following options for timeout implementation: • authorized <1-65535> – Configures the timeout, in seconds, for authorized APs. • unauthorized <1-65535> – Configures the timeout, in seconds, for unauthorized APs. • ignored <1-65535> – Configures the timeout, in seconds, for ignored APs.
PAGE 575
20-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.8 ap-image Wireless Configuration Commands Configures the new AP image file location (file path). This path is used to upload the new AP image. Syntax ap-image [ap100|ap300-ids-sensor|ap300-wisp|ap300-wispe|ap4131|ap5131| ap650-wispe|ap7131|revert-ap4131] Parameters ap-image Specifies the interface to upload AP images.
PAGE 576
Wireless Instance 20-15 20.1.9 ap-ip Wireless Configuration Commands Use this command to modify the static IP address of access ports. Syntax ap-ip [|default-ap] ap-ip [static-ip|switch-ip] ap-ip static-ip ap-ip switch-ip [add |delete [<1-12>|]|set-default] ap-ip default-ap switch-ip [add |delete [<1-12>|
PAGE 577
20-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.10 ap-standby-attempts-threshold Wireless Configuration Commands Use this command to revert the number of attempts after which the standby switch adopts its default value 11. Syntax ap-standby-attempts-threshold <5-200> Parameters <5-200> Sets the number attempts between 5 - 200.
PAGE 578
Wireless Instance 20-17 20.1.11 ap-timeout Wireless Configuration Commands Use this command to modify the default inactivity timeout period for access port(s). Syntax ap-timeout <40-180> Parameters An access-port is identified by a single MAC address or by a list of indices. Use show wireless ap to view the AP’s adopted by the MU and their IP addresses. Note If multiple access-ports are specified, each gets a unique IP address.
PAGE 579
20-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.12 auto-select-channels Wireless Configuration Commands Use this command to specify a list from which channels can be picked. Syntax auto-select-channel [11a|11bg] [|add | remove ] Parameters 11a Specifies channel list for the 11a (5GHz) band. 11bg Specifies channel list for the 11bg (2.4 GHz) band. A comma separated list of channels.
PAGE 580
Wireless Instance 20-19 20.1.13 broadcast-tx-speed Wireless Configuration Commands Use this command to configure the rate at which broadcast and multicast traffic is transmitted between the switch and mobile units. Syntax broadcast-tx-speed [range|throughput] Parameters range Uses the lowest basic rate. Provides maximum range (this is the default setting). throughput Uses the highest basic rate. Provides maximum throughput.
PAGE 581
20-20 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.14 client Wireless Configuration Commands Use this command to configure a wireless client. This command creates an exclude/include list. You will enter the config-wireless-client-list instance, and the prompt changes to create-wireless-client-list# Syntax client [exclude-list|include-list] Parameters exclude-list Configures a wireless client exclude list.
PAGE 582
Wireless Instance 20-21 20.1.14.1 clrscr Config wireless client list commands summary Use this command to clear the screen. Syntax clrscr Parameters None.
PAGE 583
20-22 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.14.2 end Config wireless client list commands summary Use this command to end and exit the config-wireless-client-list mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 584
Wireless Instance 20-23 20.1.14.3 exit Config wireless client list commands summary Use this command to exit the config-wireless-client-list mode and move to the previous mode (CONFIGWIRELESS). The prompt changes to RFS7000(config-wireless)#. Syntax exit Parameters None.
PAGE 585
20-24 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.14.4 help Config wireless client list commands summary Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-wireless-client-list)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options.
PAGE 586
Wireless Instance 20-25 20.1.14.5 no Config wireless client list commands summary Use this command to negate or revert wireless client list commands. Syntax no [station|wlan] Parameters no station Removes MU’s MAC configuration. no WLAN Negates WLAN related command.
PAGE 587
20-26 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.14.6 service Config wireless client list commands summary Use this command to invoke service commands to troubleshoot or debug config-wireless-client-list instance configurations. Syntax service [show] [cli] Parameters show [cli] Shows the CLI tree of current mode.
PAGE 588
Wireless Instance 20-27 20.1.14.7 show Config wireless client list commands summary Use this command to view current system information.
PAGE 589
20-28 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide upgrade-status users version virtual-ip wireless wlan-acl Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-wireless-client-list)#
PAGE 590
Wireless Instance 20-29 20.1.14.8 station Config wireless client list commands summary Use this command to add MUs to the exclude/include wireless client list. Syntax station [|] Parameters Defines a name for this host station entry in the exclude/include list. The name should be between 1 -21 characters in length. Sets the host station’s MAC address. Provide the MAC address in one of the following formats: • AA;BB:CC:DD:EE:FF • AA-BB-CC-DD-EE-FF • AABB.
PAGE 591
20-30 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.14.9 wlan Config wireless client list commands summary Use this command to associate a WLAN with this exclude/include wireless client list. Syntax wlan [<1-256>|] Parameters <1-256> Provide a single WLAN’s index between 1 - 256. Provide a list of WLAN indices (for example, 1,3,7) or a range of WLAN indices (for example, 3- 7).
PAGE 592
Wireless Instance 20-31 20.1.15 clrscr Wireless Configuration Commands Use this command to clear the screen. Syntax clrscr Parameters None.
PAGE 593
20-32 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.16 cluster-master-support Wireless Configuration Commands Use this command to modify cluster master support settings, required for cluster-level functioning. Syntax cluster-master-support [enable] Parameters enable Enables cluster master support, a partial set of configuration will be synchronized with master Usage Guidelines Use the no cluster-master-support enable command to disable this feature.
PAGE 594
Wireless Instance 20-33 20.1.17 country-code Wireless Configuration Commands Use this command to configure the country of operation. This command erases the radio’s existing configuration. Syntax country-code Parameters Configures the two letter ISO-3166 country code. Usage Guidelines Use the show wireless country-code-list command to view the list of supported countries.
PAGE 595
20-34 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.18 debug Wireless Configuration Commands Use this command to initiate cellcontroller debugging functions. Syntax debug cc [access-port|all|alt|ap-containment|ap-detect|capwap|cluster| config|dot11|eap|ids|13-mob|loc-ap|loc-mu|media|mobile-unit| radio|radius|self-heal|smart|snmp|system|wips|wisp|wlan] {debug|err|info|warn} Parameters cc Displays cellcontroller debugging messages.
PAGE 596
Wireless Instance 20-35 wlan Displays WLAN logs debug Optional. Displays all messages (default) err Optional. Displays error and higher severity messages info Optional. Displays information and higher severity messages warn Optional.
PAGE 597
20-36 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.19 dhcp-one-portal-forward Wireless Configuration Commands Use this command to forward broadcast DHCP responses to one portal when the destination mobile-unit is known from the response contient.
PAGE 598
Wireless Instance 20-37 20.1.20 dhcp-sniff-state Wireless Configuration Commands Use this command to record mobile unit DHCP state information.
PAGE 599
20-38 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.21 dot11k Wireless Configuration Commands Use this command to invoke dot11k related commands. Syntax dot11k send-beacon-req [<1-8192>||mu ] {measurement-duration <100-1000>} Parameters send-beacon-req Triggers the sending of beacon requests. <1-8192> Specifies a single mobile unit index between 1 - 8192.
PAGE 600
Wireless Instance 20-39 20.1.22 end Wireless Configuration Commands Use this command to end and exit the config-wireless mode and move to the PRIV EXEC mode. The prompt changes to RFS7000#. Syntax end Parameters None.
PAGE 601
20-40 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.23 exit Wireless Configuration Commands Use this command to exit the config-wireless mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#. Syntax exit Parameters None.
PAGE 602
Wireless Instance 20-41 20.1.24 fix-broadcast-dhcp-rsp Wireless Configuration Commands Use this command to convert broadcast DHCP server responses to be unicast.
PAGE 603
20-42 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.25 hotspot Wireless Configuration Commands Use this command to revert hotspot related configuration. This command adds on or overwrites WLAN hotspot configuration. Syntax hotspot query <1-10> [mu-ip|ssid|switch-ip|switch-name|user-string ] Parameters query Configures query string to be appended to the redirection login URL. <1-10> Sets the query index.
PAGE 604
Wireless Instance 20-43 20.1.26 help Wireless Configuration Commands Use this command to access the system’s interactive help system. Syntax help Parameters None. Example RFS7000(config-wireless)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 605
20-44 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.27 load-balance Wireless Configuration Commands Use this command to set the user load balance mode. Syntax load-balance [by-count|by-throughput] Parameters by-count Sets load balance by user account.
PAGE 606
Wireless Instance 20-45 20.1.28 mac-auth-local Wireless Configuration Commands Use this command to configure the local MAC authentication list.
PAGE 607
20-46 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide mac-auth-local <1-1000> (deny) deny Denies association to mobile units that match this rule. • – The starting MAC address in AA-BB-CC-DD-EE-FF format. • – The ending MAC address in AA-BB-CC-DD-EE-FF format. • – Specifies a list (for example, 1,3,7) or range (for example, 3-7) of WLAN indices. • not-mapped – Specifies an unmapped row. • – Optional.
PAGE 608
Wireless Instance 20-47 20.1.29 manual-wlan-mapping Wireless Configuration Commands Use this command to manually map/un-map WLANs configured on a radio.
PAGE 609
20-48 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.30 mobile-unit Wireless Configuration Commands Use this command to configure mobile unit related parameters. Syntax mobile-unit [association-history|probe-history] mobile-unit association-history [clear|enable] mobile-unit probe-history [add <1-200> |enable] Parameters association-history [clear|enables] Configures a mobile unit’s association history logging parameters.
PAGE 610
Wireless Instance 20-49 20.1.31 mobility Wireless Configuration Commands Use this command to configure mobility parameters. Syntax mobility [enable|local-address|max-roam-period|peer] mobility local-address mobility max-roam-period <1-300> mobililty peer Parameters enable Enables mobility globally. local-address Sets the local address for mobility. • – Specify the IP address in the A.B.C.D format.
PAGE 611
20-50 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.32 multicast-packet-limit Wireless Configuration Commands Use this command to a configure multicast packet limit per second for a VLAN. Syntax multicast-packet-limit <0-128> [<1-4094>|] Parameters <0-128> Sets the multicast packet limit per second between 0 - 128.
PAGE 612
Wireless Instance 20-51 20.1.33 multicast-throttle-watermarks Wireless Configuration Commands Use this command to configure watermarks for handling bursts of broadcast/multicast frames. Syntax Parametersmulticast-throttle-watermarks [low <0-100>] [high <0-100>] low <0-100> Configures the low water-mark. If the percentage of free packets in the system is lower than this threshold, the incoming frame will be dropped. high <0-100> Configure the high water-mark.
PAGE 613
20-52 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.34 nas-id Wireless Configuration Commands Use this command to reset Network Access Server (NAS) ID. Syntax nas-id Parameters Specify the NAS ID (a string up to 256 characters in length).
PAGE 614
Wireless Instance 20-53 20.1.35 nas-port-id Wireless Configuration Commands Use this command to reset NAS port ID. Syntax nas-port-id Parameters Specify the NAS port ID (a string up to 256 characters).
PAGE 615
20-54 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.36 non-preferred-ap-attempts-threshold Wireless Configuration Commands Use this command to revert the number of attempts after which the switch adopts non preferred AP to its default value 0. Syntax non-preferred-ap-attempts-threshold <0-20> Parameters <0-20> Specify the number of attempts between 0 - 20.
PAGE 616
Wireless Instance 20-55 20.1.37 no Wireless Configuration Commands Use this command to negate a command or set its defaults.
PAGE 617
20-56 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.38 proxy-arp Wireless Configuration Commands Use this command to respond to ARP requests on behalf of mobile units. Syntax proxy-arp [enable] Parameters enable Enables support for proxy ARP.
PAGE 618
Wireless Instance 20-57 20.1.39 qos-mapping Wireless Configuration Commands Use this command to configure Quality of Service (QoS) mappings between wired and wireless domains.
PAGE 619
20-58 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.40 radio Wireless Configuration Commands Use this command to configure radio related settings.
PAGE 620
Wireless Instance 20-59 Parameters radio (<1-4096>) <1-4096> Defines a single radio index admission-control [voice] Configures the following admission control parameters for voice traffic: • max-mus <0-256> – The maximum mobile units to be admitted. Specify a value between 0 -256. • max-perc <0-100> – The maximum percentage of air time allocated to voice traffic. Specify a value between 0 - 100%. • max-roamed-mus <0-256> – The maximum roamed mobile units to be admitted. Specify a value between 0 - 256.
PAGE 621
20-60 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide ampdu [min-spacing| rx-limit|tx-enable|tx-limit] Configures the MAC protocol frames. • min-spacing – Specifies the spacing between received MPDUs. The values are as follows: • .25 microsec • .5 microsec • 0 microsec • 1 microsec • 2 microsec • 4 microsec • 8 microsec • rx-limit –Specifies the receive buffer limit.
PAGE 622
Wireless Instance 20-61 bridge-priority <0-65535> Sets the STP bridge priority value bss [<1-4>|add-wlans|auto] Maps wireless LANs to radio BSSID’s • <1-4> – Sets the BSS ID where a wireless LAN is mapped. • add-wlans – Adds new WLANs to existing radios (this is a partial change and other WLANs on the radio are left as is) • auto – Configures automatic assignment of BSS. If the user selects WLANs the system automatically assigns them to a BSS.
PAGE 623
20-62 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide client-bridge [bb-radio| bridge-select-mode| enable|mesh-timeout|ssid] Configures client bridge capability. • bb-radio <1-16> – Adds the preferred base bridge (bb) details. • <1-16> – The priority value of the connection. • – Specify the MAC address. • bridge-select-mode [auto|manual] – Configures the base bridge selection mode. • auto – Automatically selects base bridge.
PAGE 624
Wireless Instance 20-63 dtim-period <1-50> {bss <1-4>} Sets the Delivery Traffic Indication Message (DTIM) period (number of beacons between successive DTIMs) • <1-50> – Specify the DTIM period between 1 - 150. • bss <1-4> – Optional. Configures the BSS index between 1 - 4. enforce-spec-mgmt (enable) Enforces spectrum management checks on this radio. Only mobile units that advertise spectrum management are allowed to associate to this radio.
PAGE 625
20-64 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide rf-mode Configures radio speed based on 802.11 mode selected • a – a only mode • an – a and n modes • b – b only mode • bg – b and g modes • bgn – b, g and n modes • custom – custom • g – g only mode • n – n only mode rts-threshold <0-2346> Sets the Request to Send (RTS) threshold between0 - 2346 bytes. run-acs Runs auto channel selection (ACS) on this radio.
PAGE 626
Wireless Instance 20-65 speed Configures the basic and supported data rates •1 1-Mbps. • 11 11-Mbps • 12 12-Mbps • 18 18-Mbps •2 2-Mbps • 24 24-Mbps • 36 36-Mbps • 48 48-Mbps • 54 54-Mbps • 5.5 5.5-Mbps •6 6-Mbps •9 9-Mbps • basic1 basic 1-Mbps • basic11 basic 11-Mbps • basic11a rate set (6,12,24 Mbps) • basic11an rate set (6,12,24, MCS 0-7) • basic11b1 rate set (1 and 2 Mbps) • basic11b2 rate set (1,2,5.5,11 Mbps) • basic11bg rate set (1,2,5.5,11,6,12,24 Mbps) • basic11bgn rate set (1,2,5.
PAGE 627
20-66 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wmm [background| best-effort|video|voice] (aifsn <1-15>| burst <0-65535>| cw <0-15>) Sets 802.
PAGE 628
Wireless Instance 20-67 configure-8021X Configures the 802.1X username and password on adopted access port. • – Specify the user name. • – Specify the 802.1x password the access ports must use. • – Optional. Specify the access port MAC address. The system changes the username and password only on the access port with the specified MAC address. If not specified, the user name and password are sent to all currently adopted access ports.
PAGE 629
20-68 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.41 rate-limit Wireless Configuration Commands Use this command to set default rate limit per user.
PAGE 630
Wireless Instance 20-69 20.1.42 self-heal Wireless Configuration Commands Use this command to configure self healing parameters. Syntax self-heal [interference-avoidance|neighbor-recovery] self-heal interference-avoidance [enable|hold-time <30-65535>|retries <0.0-15.
PAGE 631
20-70 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.43 sensor Wireless Configuration Commands Use this command to configure WIPS server IP address, used to send default configuration to sensors when they are configured. Syntax sensor default-config [wips-server-ip [primary |secondary ]] Parameters default-config The default configuration sent to sensors when they are configured.
PAGE 632
Wireless Instance 20-71 20.1.44 service Wireless Configuration Commands Use this command to invoke service commands to troubleshoot or debug the (config-wireless) instance configuration.
PAGE 633
20-72 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service (show) show [cli|radio-neighbor| smart-rf|wireless] Shows current running system information. • cli – Shows the CLI tree of the current mode • radio-neighbor [mu ] –Shows neighboring radios for a station. • mu – Specify the MAC address of the MU in the AA-BB-CC-DD-EE-FF format. • smart-rf [debug-config|sensitivity] – Shows Smart-RF manangement commands.
PAGE 634
Wireless Instance 20-73 enhanced-beacon-table [config|report] Displays the following enhanced beacon tables for AP locationing: • config – Enhanced beacon table for AP locationing configuration parameters. • report – Enhanced beacon table for AP locationing report. enhanced-probe-table [config|report] Displays the following enhanced beacon tables for MU locationing: • config – Enhanced beacon table for MU locationing configuration parameters. • report – Enhanced beacon table for MU locationing report.
PAGE 635
20-74 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide replay [enable] Enables Smart-RF replay mode. rescue Forces radio rescue operation. • – A single radio’s MAC address, a single radio index, or a list of radio indices. restore Restores any recovering operation on given radio. • – A single radio’s MAC address, a single radio index, or a list of radio indices. save-to-file Saves Smart-RF records to smart.
PAGE 636
Wireless Instance 20-75 custom-cli [sh-wi-mobile-unit [ap-loan| ap-name|channel| dot11-type|ip| last-heard|mac| radio-bss|radio-desc| radio-id| ssid|state|username| vlan|wlan|wlan-id]| sh-wi-radio [adopt-info|ap-locn| ap-mac| ap-name|channel| dot11-type| mum-mu|power| pref-id|radio-bss| radio-desc|radio-id|state] Customizes the output of some summary Wireless CLI commands. • sh-wi-mobile-unit – Customizes the output of the show wireless mobile-unit command.
PAGE 637
20-76 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide dot11i enforce [pmkid-validation] Modifies dot11i service parameters. • enforce – Modifies enforcement of various dot11i validations. • pmkid-validation – Toggles PMKID validation in dot11i handshake message from client. enhanced-beacon-table [channel-set|enable| erase-report|max-ap| scan-interval|scan-time] Configures enhanced beacon table for AP locationing. • channel-set – Sets channel set for enhanced beacon table.
PAGE 638
Wireless Instance 20-77 idle-radio-send-multicast Forwards multicast packets to radios without associated MUs. [enable] • enable – Enables multicast forwarding legacy-load-balance Invokes legacy load balance algorithm with RFS7000 wireless controller. map-radios <1-127> Sets radio to CPU mapping constants. • <1-127> – Specify the radio to CPU mapping constant between 1 -127. radio-mic-cfg Sets the radio specific miscellaneous configuration – U16 for all radios.
PAGE 639
20-78 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.45 smart-rf Wireless Configuration Commands Use this command to configure Smart-RF management parameters, and move to the (config-wireless-smart-rf) instance. Syntax smart-rf Parameters None.
PAGE 640
Wireless Instance 20-79 20.1.46 show Wireless Configuration Commands Use this command to view current system information.
PAGE 641
20-80 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide upgrade-status Display last image upgrade status users Display information about currently logged in users version Display software & hardware version virtual-ip IP Redundancy Feature wireless Wireless configuration commands wlan-acl wlan based acl RFS7000(config-wireless)#
PAGE 642
Wireless Instance 20-81 20.1.47 smart-scan-channels Wireless Configuration Commands Use this command to revert smart scan channels to default. Syntax Parameterssmart-scan-channel [|add |remove ] Specifies a comma-separated list of channels. add Adds one or more channels to the existing channel list. remove Removes one or more channels from the existing channel list.
PAGE 643
20-82 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 20.1.48 test Wireless Configuration Commands Use this command to test neighbor report on air. Syntax test dot11k [make-bcn-rep|send-beacon-req|send-nbr-rep] test dot11k make-bcdn-rep [mu ] [neighbor ] test dot11k send-beacon-request [<1-8192>|MU |mu ] {measurement-duration <100-10000>} test dot11k send-nbr-rep [mu ] Parameters dot11k Invokes dot11k related commands.
PAGE 644
Wireless Instance 20-83 20.1.49 wips Wireless Configuration Commands Use this command to configure WIPS parameters.
PAGE 645
20-84 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide event [80211-replaycheck-failure| ad-hoc-advertisingauthorized-ssid | ad-hoc-networkviolation-authorizeddevice| ad-hoc-networkviolation-unauthorizeddevice|aggressivescanning|all| ap-defaultconfiguration| ap-ssid-broadcast-inbeacon|crackable-wepiv-key-used |decryptionfailures| dos-association-orauthentication-flood| dos-broadcastdeauthentication| dos-eapol-start-storm| dos-unicastdeauthentication-ordisassociation|eapflood|eap-nak-flood
PAGE 646
Wireless Instance 20-85 fuzzing-invalidmanagement-frame| fuzzing-invalidsequencenumber|identical-sourceand-destinationaddresses| impersonation-attackdetected|invalid-8021xframes| non-changing-wepiv|replay-injectionattack|transmittingdevice-using-invalidmac| unauthorized-apusing-authorized-ssid |unencrypted-stationtransmission-detected] • eap-flood eap-flood [enable [authorized|ignored|unauthorized]| filter-ageout <1-86400>|threshold [mu|radio]] – Monitors EAP flood events.
PAGE 647
20-86 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • transmitting-device-using-invalid-mac [enable [authorized|ignored| unauthorized]|filter-ageout <1-86400>|threshold [mu|radio]] – Monitors Transmitting Device Using Invalid MAC events. • unauthorized-ap-using-authorized-ssid [enable [authorized|ignored| unauthorized]|filter-ageout <1-86400>|threshold [mu|radio]] – Monitors unauthorized AP using authorized SSID events.
PAGE 648
Wireless Instance 20-87 20.1.50 wlan Wireless Configuration Commands Use this command to configure Wireless LAN parameters. Syntax wlan [<1-256>|] [80211-extensions|802.
PAGE 649
20-88 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide wlan [<1-256>|] radius accounting timeout <1-300> [retransmit <1-100>] wlan wlan wlan wlan [0 wlan [<1-256>|] radius [<1-256>|] radius [<1-256>|] radius [<1-256>|] radius |2 |]] [<1-256>|] radius authentication-protocol [chap|pap] mobile-unit [time-out <1-300>] [retransmit <1-100>] server [primary|secondary|timeout] server [primary|secondary] [
PAGE 650
Wireless Instance 20-89 acl (exceed-rate) (mu-denied-traffic) <0-1000000> (disassociate) Configures the actions taken based on ACL configuration (including packet drop). • exceed-rate – Sets the actions taken when a rate is exceeded. • mu-denied-traffic – The action is to deny traffic from the MU. • <0-1000000> – Allowed rate threshold of disallowed MU traffic in packets/sec • add-vlan [<1-4094>|] {limit <0-8192>} disassociate – Optional. Enables/disables disassociate.
PAGE 651
20-90 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide dot11i [handshake|key| key-rotation|ey-rotationinterval| opp-pmk-caching| pmk-caching| preauthentication| second-key] Modifies related parameters. • handshake [timeout <100-5000>] [retransmit <1-10>] – Uses a AES handshake to configure timeout and retransmission parameters. • timeout <100-5000> – The timeout (in milliseconds) between retries. • retransmit <1-10> – The number of retransmission attempts.
PAGE 652
Wireless Instance 20-91 hotspot [allow-eap|allow-list| cache-ageout| connection-mode| ntf-logout-port|query| redirect-to-hostname| simultaneous-users| webpage| webpage-location] Modifies hotspot related parameters • allow-eap – Allows EAP authentication in addition to Web-based login. • allow-list <1-32> – Modifies hotspot allow-list parameters. Users who have not yet authenticated are allowed access to these IP addresses. Typically this would be the external Web page IP addresses.
PAGE 653
20-92 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • webpage (external|internal) (failure|login|welcome) – Modifies hotspot page parameters. • external – Modifies a hotspot’s external page. • internal – Modifies hotspot’s internal page. • failure – Users are redirected to this Web page if they fail authentication. • login – Users are prompted for their username and password within this Web page.
PAGE 654
Wireless Instance 20-93 qos [classification| mcast-with-dot11i| mcast1|mcast2| prioritize-voice| rate-limit|svp| weight|wmm] Sets Quality of Service (QoS) parameters. • classification [low|normal|video|voice|wmm] – Specifies how traffic on this WLAN is classified (relative prioritization on the access port). The options are: • low – Traffic on this WLAN is treated as low priority (background). • normal – Traffic on this WLAN is treated as normal priority (best-effort).
PAGE 655
20-94 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • aifsn <2-15> – Arbitration Inter Frame Spacing Number (AIFSN) is the wait time (in milliseconds) between data frames derived using AIFSN and the slot-time. •<2-15> – The AIFSN spacing number. • cw <0-15> <0-15> – Contention Window (CW) parameters. MU’s pick a number between 0 and the minimum contention window to wait before retrying transmissions.
PAGE 656
Wireless Instance 20-95 radius [accounting| authentication-protocol| dscp| dynamic-authorization| dynamic-vlanassignment| mac-auth-format| mobile-unit| reauth| server] Configures RADIUS/802.1X related parameters for the selected WLAN. • accounting [mode|server|timeout] – Configures RADIUS accounting parameters. • mode [start-interim-stop|start-stop|stop-only] – Sets the WLAN’s accounting mode.
PAGE 657
20-96 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide • dynamic-authorization [enable] – Configures support for RADIUS dynamic authorization extensions (such as Disconnect Message) and Change-of-Authorization, as described in RFC 3576. • enable – Enables support for RADIUS dynamic authorization. • dynamic-vlan-assignment – Assigns users to RADIUS server specified VLANs, instead of only those VLANs mapped to this WLAN. • enable – Enables dynamic/RADIUS-assigned VLAN assignment.
PAGE 658
Wireless Instance 20-97 • timeout <1-300> – Configures the time, in seconds, the wireless controller waits for a response from the RADIUS server before retrying. • retransmit <1-100> – Configures the number of retries before the wireless controller gives up and disassociates the mobile unit. Note: The RFS7000(config-wireless)# radius server timeout<*> retransmit<*> should be less than what is defined for an MU’s timeout and retries.
PAGE 659
20-98 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide vlan [<1-4094>|] Sets the VLAN assignment of this WLAN. This command starts a new VLAN assignment for given WLAN index. All prior VLAN settings will be erased. • [<1-4094>|] – Configures the VLAN range list. It can be either a single index or a list (for example, 1,3,7) or range (for example, 3-7) of indices • limit <0-8192> – Optional. Sets user limits on VLANs for this WLAN between 0 - 8192.
PAGE 660
Wireless Instance 20-99 20.1.51 wlan-bw-allocation Wireless Configuration Commands Use this command to enable WLAN bandwidth allocation on all radios. Syntax wlan-bw-allocation [enable] Parameters enable Enables WLAN bandwidth allocation on all radios.
PAGE 661
20-100 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 662
RTLS Instance Use the (config-rtls) instance to configure Real Time Location System (RTLS) parameters. To navigate to this instance, use the command RFSwitch(config)#rtls RFSwitch(config-rtls)# 21.1 RTLS Config Commands Table 21.1 This table summarizes config-rtls commands: Table 21.1 RTLS Configuration Commands summary Command Description Ref. aeroscout Configures AeroScout parameters. page 21-2 ap Configures AP-specific RTLS parameters. page 21-3 clrscr Clears the display window.
PAGE 663
21-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 21.1.1 aeroscout RTLS Config Commands Use this command to configure support for AeroScout RTLS engine. Syntax aeroscout [enable|multicast-listen-addr ] Parameters enable Enables and configures external AeroScout RTLS engine. multicast-listen-addr Configures multicast MAC address to which AeroScout tags packets are destined.
PAGE 664
RTLS Instance 21-3 21.1.2 ap RTLS Config Commands Use this command to configures AP coordinates. Syntax ap coordinates [x <0-9000>] [y <0-9000>] [z <0-180>] Parameters coordinates x <0-9000> y <0-9000> z <0-180> Select a single zone index for configuration • – Configures access port MAC address.
PAGE 665
21-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 21.1.3 clrscr RTLS Config Commands Use this command to clear the display screen.
PAGE 666
RTLS Instance 21-5 21.1.4 end RTLS Config Commands Use this command to exit the (config-rtls) mode and move to the PRIV EXEC mode.
PAGE 667
21-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 21.1.5 exit RTLS Config Commands Use this command to end the (config-rtls) mode and move to the previous mode (GLOBAL-CONFIG).
PAGE 668
RTLS Instance 21-7 21.1.6 help RTLS Config Commands Use this command to display the interactive help system for the RTLS instance. Syntax help Parameters None Example RFSwitch(config-rtls)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 669
21-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 21.1.7 ekahau RTLS Config Commands Use this command to enable and configure the external ekahau location engine. Syntax ekahau [enable|engine|multicast-listen-addr] ekahau engine [ip ] [port <1000-9000>] ekahau multicast-listen-addr Parameters enable Enables and configures external ekahau RTLS engine. engine ip
PAGE 670
RTLS Instance 21-9 21.1.8 no RTLS Config Commands Use this command to negate an RTLS command or set its defaults. Syntax no [aeroscout|ekahau|service|site|switch|ap] Parameters no aeroscout [enable| multicast-listen-addr] Negates AeroScout configuration. • enable – Disables the SOLE adapter. • multicast-listen-addr– Removes configured multicast listening address. no ekahau [enable|engine| multicast-listen-addr] Negates ekahau configuration. • enable – Disables aeroscout external engine.
PAGE 671
21-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Example RFSwitch(config-rtls)#no aeroscout enable RFSwitch RFSwitch(config-rtls)#no ekahau enable RFSwitch(config-rtls)# RFSwitch(config-rtls)#no ekahau engine RFSwitch(config-rtls)# RFSwitch(config-rtls)#no service inventory 1 zone 1 RFSwitch(config-rtls)#
PAGE 672
RTLS Instance 21-11 21.1.9 service RTLS Config Commands Use this command to troubleshoot or debug the (config-rtls) instance configurations.
PAGE 673
21-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide service filter <1-100> [action| length <1-128>| mask|memory-bank| name|offset <0-32>] Configures following Radio Frequency Identification (RFID) tag filter parameters: • <1-100> [action|length|mask|memory-bank|name|offset] – Specify the RFID tag filter’s index between 1 - 100. • action [allow|deny] – Configures the action for this tag filter. • allow – Allows RFID tags matching the filter (default).
PAGE 674
RTLS Instance 21-13 21.1.10 show RTLS Config Commands Use this command to display current system information. Syntax show Parameters ? Suffix ? to the parameter to view its options and their related configuration details. Usage Guidelines Use ? at the end of each option until the final configuration is displayed.
PAGE 675
21-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide startup-config static-channel-group terminal timezone traffic-shape upgrade-status users version virtual-ip wireless wlan-acl Contents of startup configuration static channel group membership Display terminal configuration parameters Display timezone Display traffic shaping Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configura
PAGE 676
RTLS Instance 21-15 21.1.11 site RTLS Config Commands Use this command to configure RTLS site dimensions. Syntax site [description|dimension|name|scale] site description site dimension [unit [feet|meters]|x <1-9000> y <1-9000>] {z <0-180>} site name site scale [<1-90>|auto] Parameters description Configures the site description. • – Enter the site’s description. dimension [unit [feet|meters]| x y [ {z } Configures the site dimensions.
PAGE 677
21-16 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide Usage Guidelines Use [no] site [description |dimension|name]to rollback the configurations made using the site command Example RFSwitch(config-rtls)#site description "Motorola RMZ Ecospace, India, 5th Floor" RFSwitch(config-rtls)# RFSwitch(config-rtls)#site name "BLR-RMZ Ecospace" RFSwitch(config-rtls)#
PAGE 678
RTLS Instance 21-17 21.1.12 sole RTLS Config Commands Use this command to configure Smart Opportunistic Location Engine (SOLE) parameters. This command leads you to the (config-rtls-sole)# sub-instance. Note sole command instantiates (config-rtls-sole) sub-instance. For more information, see Sole Instance on page 23-1.
PAGE 679
21-18 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 21.1.13 switch RTLS Config Commands Use this command to configure the switch’s geographical location. Syntax switch [coordinates|geo-coordinates] switch coordinates [x <0-65535>] [y <0-65535>] {z <0-65535>} switch geo-coordinates [longitude <-180.00-80.00>] [latitude <-90.00-90.
PAGE 680
Role Instance Use the (config-role) instance to configure Role related configuration commands. To navigate to the config-role instance, use the following commands: RFSwitch(config)#role RFSwitch(config-role)# 22.1 Role Config Commands Table 22.1The following table summarizes config-role commands: Table 22.1 Command Role Command Summary Command Description Ref.
PAGE 681
22--2 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.1 ap-location Role Config Commands Sets the AP location configuration • This requires the location engine to be enabled on the RF Switch with a site, appropriate zones defined and AP co-ordinates defined. The role based firewall has to know which zone the MU is located when it associates for the ap-parameter option to work. • The ‘ap-location’ parameter defines the zone or zones you wish to match.
PAGE 682
Role Instance 22.1.
PAGE 683
22--4 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.
PAGE 684
Role Instance 22.1.
PAGE 685
22--6 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.
PAGE 686
Role Instance 22.1.
PAGE 687
22--8 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.
PAGE 688
Role Instance 22.1.8 mu-mac Role Config Commands Configures the MU MAC addresses for role based firewall Syntax mu-mac [|/|any] Parameters The address of the MU that is allowed. MAC address can be in the format AA:BB:CC:DD:EE:FF or AA-BB-CC-DD-EE-FF or AABB.CCDD.EEFF. / The address and mask combination for the mu to be allowed. and should be in the format AA:BB:CC:DD:EE:FF or AA-BB-CC-DD-EE-FF or AABB.CCDD.EEFF.
PAGE 689
22--10 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.
PAGE 690
Role Instance 22.1.
PAGE 691
22--12 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.11 end Role Config Commands Exits the current mode and moves to the PRIV EXEC mode.
PAGE 692
Role Instance 22.1.12 exit Role Config Commands Ends the current mode and moves to the previous mode (GLOBAL-CONFIG).
PAGE 693
22--14 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.13 help Role Config Commands Displays the system’s interactive help in HTML format Syntax help Parameters None Example RFSwitch(config-role)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 694
Role Instance 22.1.14 service Role Config Commands Invokes service commands to troubleshoot or debug (config-role) instance configurations Syntax service show cli Parameters None Example RFSwitch(config-role#service show cli DHCP Server Config mode: +-address +-range +-A.B.C.D [address range A.B.C.D ( A.B.C.D |)] +-A.B.C.D [address range A.B.C.D ( A.B.C.
PAGE 695
22--16 Motorola Solutions RFS7000GR Series RFSwitch, CLI Reference Guide 22.1.
PAGE 696
Sole Instance Use the (config-sole) instance to configure SOLE related configuration commands. To navigate to this instance, ues the following commands: RFS7000(config)#rtls RFS7000(config-rtls)#sole RFS7000(config-rtls-sole)# 23.1 Sole Config Commands Table 23.1 summarizes config-sole commands: Table 23.1 SOLE Config Command Summary Command Description Ref. aap-rssi-updateinterval Configures AAP probe packet interval. page 23-2 clrscr Clears the display screen.
PAGE 697
23-2 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 23.1.1 aap-rssi-update-interval Sole Config Commands Use this command to configure AAP probe packet interval. Syntax aap-rssi-update-interval <5-3600> Parameters <5-3600> Specify the interval between 5 - 3600 seconds.
PAGE 698
Sole Instance 23-3 23.1.2 clrscr Sole Config Commands Use this command to clear the Display screen.
PAGE 699
23-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 23.1.3 end Sole Config Commands Use this command to end the (config-rtls-sole) mode and move to the PRIV EXEC mode.
PAGE 700
Sole Instance 23-5 23.1.4 exit Sole Config Commands Use this command to end (config-rtls-sole) mode and move to the previous mode (GLOBAL-CONFIG). The prompt changes to RFS7000(config)#.
PAGE 701
23-6 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 23.1.5 help Sole Config Commands Use this command to display the interactive help system for SOLE instance. Syntax help Parameters None Example RFS7000(config-rtls-sole)#help CLI provides advanced help feature. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1.
PAGE 702
Sole Instance 23-7 23.1.6 locate Sole Config Commands Use this command to invoke location commands. Syntax locate [aeroscout|ekahau|mobile-unit] locate aeroscout [enable|interval <5-3600>] locate ekahau [enable|interval <5-3600>] locate mobile-unit [ [enable]|enable|interval <5-3600>] Parameters aeroscout [enable| interval <5-3600>] Locates AeroScout tags. • enable – Starts locating AeroScout tags. • interval <5-3600> – Configures the interval at which tag locating is performed.
PAGE 703
23-8 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 23.1.7 mobile-unit Sole Config Commands Use this command to configure amobile unit’s power level. Syntax mobile-unit [power-level <1-100>] Example power-level <1-100> Specifies the mobile unit’s power level between 1 - 100 dBm.
PAGE 704
Sole Instance 23-9 23.1.8 no Sole Config Commands Use this commnad to negate a SOLE command or set its defaults. Syntax no [aap-rssi-update-interval|locate|mobile-unit|redundancy|rssi-filter] Parameters no aap-rssi-updateinterval Negates AAP probe packet interval configurations.
PAGE 705
23-10 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 23.1.9 redundancy Sole Config Commands Use this command to enable SOLE redundancy.
PAGE 706
Sole Instance 23-11 23.1.10 rssi-filter Sole Config Commands Use this command to filter rssi values below this threshold. Syntax rssi-filter <-100-0> Parameters <-100-0> Specify the RSSI filter value between -100 - 0 dbm.
PAGE 707
23-12 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide 23.1.11 service Sole Config Commands Use this commnad to invoke service commands to troubleshoot or debug (config-sole) instance configurations.
PAGE 708
Sole Instance 23-13 23.1.12 show Sole Config Commands Use this command to display current system information.
PAGE 709
23-14 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide timezone traffic-shape upgrade-status users version virtual-ip wireless wlan-acl Display timezone Display traffic shaping Display last image upgrade status Display information about currently logged in users Display software & hardware version IP Redundancy Feature Wireless configuration commands wlan based acl RFS7000(config-rtls-sole)#
PAGE 710
Appendix A - Customer Support Motorola Solutions Enterprise Mobility Support Center If you have a problem with your equipment, contact Enterprise Mobility support at https://portal.motorolasolutions.
PAGE 711
A-2 Motorola RFS7000GR Series RF Switch, CLI Reference Guide
PAGE 712
PAGE 713
MOTOROLA Solutions INC. 1301 E. ALGONQUIN ROAD SCHAUMBURG, IL 60196-1078, U.S.A. http://www.motorolasolutions.com MOTOROLA, MOTO, MOTOROLA Solutions and the Stylized M logo are trademarks or registered trademarks of Motorola Trademark Holdings, LLC and are used under license. All other trademarks are a properties of their owners. ©2014 Motorola Solutions, Inc. All rights reserved.