Table Of Contents
Cisco IOS Commands for Access Points
accounting (ssid configuration mode)
authentication network-eap (ssid configuration mode)
authentication open (ssid configuration mode)
authentication shared (ssid configuration mode)
clear ip proxy-mobile subnet-map
dot11 dot11radio antenna-alignment
guest-mode (ssid configuration mode)
infrastructure-ssid (ssid configuration mode)
ip proxy-mobile (ssid configuration mode)
match (class-map configuration)
max-associations (ssid configuration mode)
show dot11 statistics client-traffic
show interfaces dot11radio aaa
show interfaces dot11radio statistics
show ip proxy-mobile aaa requests
show ip proxy-mobile registration
show ip proxy-mobile subnet-map
vlan (ssid configuration mode)
Cisco IOS Commands for Access Points
This chapter lists and describes Cisco IOS commands in Cisco IOS Release 12.2(8)JA that you use to configure and manage your access point and your wireless LAN. The commands are listed alphabetically. Refer to Appendix A, "List of Supported Cisco IOS Commands," for a complete list of IOS commands supported by the access point.
accounting (ssid configuration mode)
Use the accounting ssid configuration mode command to enable RADIUS accounting for the radio interface (for the specified SSID). Use the no form of the command to disable accounting.
[no] accounting list-name
Syntax Description
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Usage Guidelines
You create accounting lists using the aaa accounting command. These lists indirectly reference the server where the accounting information is stored.
Examples
This example shows how to enable RADIUS accounting and set the RADIUS server name:
AP(config-if-ssid)# accounting radius1This example shows how to disable RADIUS accounting:
AP(config-if-ssid)# no accountingRelated Commands
antenna
Use the antenna configuration interface command to configure the radio receive or transmit antenna settings. Use the no form of this command to reset the receive antenna to defaults.
[no] antenna {receive | transmit} {diversity | left | right}
Syntax Description
Defaults
The default antenna configuration is diversity.
Command Modes
Configuration interface
Command History
Examples
This example shows how to specify the right receive antenna option:
AP(config-if)# antenna receive rightThis example shows how to set the receive antenna option to defaults:
AP(config-if)# no antenna receiveRelated Commands
Configures the radio transmit antenna settings
show running-config
Displays the current access point operating configuration
authentication network-eap (ssid configuration mode)
Use the authentication network-eap ssid configuration mode command to configure the radio interface (for the specified SSID) to support network-EAP authentication with optional MAC address authentication. Use the no form of the command to disable network-eap authentication for the SSID.
[no] authentication
network-eap list-name
[mac-address list-name]Syntax Description
list-name
Specifies the list name for EAP authentication
mac-address list-name
Specifies the list name for MAC authentication
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Usage Guidelines
Use this command to authenticate clients using the network EAP method, with optional MAC address screening. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored.
Examples
This example shows how to set the authentication to open for devices on a specified address list:
AP(config-if-ssid)# authentication network-eap list1This example shows how to reset the authentication to default values:
AP(config-if-ssid)# no authentication network-eapRelated Commands
authentication open (ssid configuration mode)
Use the authentication open ssid configuration mode command to configure the radio interface (for the specified SSID) to support open authentication and optionally MAC address authentication or EAP authentication. Use the no form of the command to disable open authentication for the SSID.
[no] authentication open
[mac-address list-name [alternate] ]
[eap list-name]Syntax Description
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Usage Guidelines
Use this command to authenticate clients using the open method, with optional MAC address or EAP screenings. If you use the alternate keyword, the client must pass either the MAC address or EAP authentication. Otherwise, the client must pass both authentications. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored.
Examples
This example shows how to enable open authentication with MAC address restrictions:
AP(config-if-ssid)# authentication open mac-address mac-list1This example shows how to disable open authentication for the SSID:
AP(config-if-ssid)# no authentication openRelated Commands
Specifies shared key authentication
Specifies network EAP authentication
Specifies the SSID and enters the ssid configuration mode
authentication shared (ssid configuration mode)
Use the authentication shared ssid configuration mode command to configure the radio interface (for the specified SSID) to support shared authentication with optional MAC address authentication and EAP authentication. Use the no form of the command to disable shared authentication for the SSID.
[no] authentication shared
[mac-address list-name]
[eap list-name]Syntax Description
mac-address list-name
Specifies the list name for MAC authentication
eap list-name
Specifies the list name for EAP authentication
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Usage Guidelines
Use this command to authenticate clients using the shared method, with optional MAC address or EAP screenings. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored.
Examples
This example shows how to set the authentication to shared for devices on a MAC address list:
AP(config-if-ssid)# authentication shared mac-address mac-list1This example shows how to reset the authentication to default values:
AP(config-if-ssid)# no authentication sharedRelated Commands
beacon
Use the beacon configuration interface command to specify how often the beacon contains a Delivery Traffic Indicator Message (DTIM). Use the no form of this command to reset the beacon interval to defaults.
[no] beacon {period Kms | dtim-period count}
Syntax Description
Defaults
The default period is 100.
The default dtim-period is 2.
Command Modes
Configuration interface
Command History
Usage Guidelines
Clients normally wake up each time a beacon is sent to check for pending packets. Longer beacon periods let the client sleep longer and preserve power. Shorter beacon periods reduce the delay in receiving packets.
Controlling the DTIM period has a similar power-saving result. Increasing the DTIM period count lets clients sleep longer, but delays the delivery of multicast packets. Because multicast packets are buffered, large DTIM period counts can cause a buffer overflow.
Examples
This example shows how to specify a beacon period of 15 Kms (15.36 milliseconds):
AP(config-if)# beacon period 15This example shows how to set the beacon parameter to defaults:
AP(config-if)# no beaconRelated Commands
bridge-group port-protected
Use the bridge-group port-protected configuration interface command to enable protected port for public secure mode configuration. In IOS, there is no exchange of unicast, broadcast, or multicast traffic between protected ports.
bridge-group bridge-group
port-protectedSyntax Description
Defaults
This command has no defaults.
Command Modes
Configuration interface
Command History
Examples
This example shows how to enable protected port for bridge group 71:
AP(config-if)# bridge-group 71 port-protectedRelated Commands
broadcast-key
Use the broadcast-key configuration interface command to configure the time interval between rotations of the broadcast encryption key used for clients. Use the no form of the command to disable broadcast key rotation.
[no] broadcast-key
[vlan vlan-id]
[change secs]Syntax Description
vlan vlan-id
(Optional) Specifies the virtual LAN identification value
change secs
(Optional) Specifies the amount of time (in seconds) between the rotation of the broadcast encryption key
Defaults
The default change time is specified by the IEEE 802.11 dot1x EAP.
Command Modes
Configuration interface
Command History
Examples
This example shows how to configure vlan10 to support broadcast key encryption with a 5-minute key rotation interval:
AP(config-if)# broadcast-key vlan 10 change 300This example shows how to disable broadcast key rotation:
AP(config-if)# no broadcast-keychannel
Use the channel configuration interface command to set the radio channel frequency. Use the no form of this command to reset the channel frequency to defaults.
[no] channel {number | frequency | least-congested}
Syntax Description
number
Specifies a channel number. For a list of channels for the 2.4-GHz radio, see Table 2-1. For a list of channels for the 5-GHz radio, see Table 2-2.
Note
The valid numbers depend on the channels allowed in your regulatory region and are set during manufacturing.
frequency
Specifies the center frequency for the radio channel. For a list of center frequencies for the 2.4-GHz radio, see Table 2-1. For a list of center frequencies for the 5-GHz radio, see Table 2-2.
Note
least-congested
Enables or disables the scanning for a least busy radio channel to communicate with the client adapter
Note
Defaults
The default channel is least-congested.
Command Modes
Configuration interface
Command History
12.2(4)JA
This command was introduced.
12.2(8)JA
Parameters were added to support the 5-GHz radio.
Examples
This example shows how to set the access point radio to channel 10 with a center frequency of 2457.
AP(config-if)# channel 2457This example shows how to set the access point to scan for the least-congested radio channel.
AP(config-if)# channel least-congestedThis example shows how to set the beacon parameter to defaults:
AP(config-if)# no channelRelated Commands
show controllers dot11radio
Displays the radio controller information and status
class-map
Use the class-map global configuration command to create a class map to be used for matching packets to the class whose name you specify and to enter class-map configuration mode. Use the no form of this command to delete an existing class map and return to global configuration mode.
[no] class-map name
Syntax Description
Defaults
This command has no defaults, and there is not a default class map.
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to specify the name of the class for which you want to create or modify class-map match criteria and to enter class-map configuration mode. In this mode, you can enter one match command to configure the match criterion for this class.
The class-map command and its subcommands are used to define packet classification, marking, and aggregate policing as part of a globally named service policy applied on a per-interface basis.
After you are in quality of service (QoS) class-map configuration mode, these configuration commands are available:
•
•
•
•
•
Only one match criterion per class map is supported. For example, when defining a class map, only one match command can be issued.
Because only one match command per class map is supported, the match-all and match-any keywords function the same.
Only one access control list (ACL) can be configured in a class map. The ACL can have multiple access control entries (ACEs).
Examples
This example shows how to configure the class map called class1. class1 has one match criterion, which is an access list called 103.
AP(config)# access-list 103 permit any any dscp 10AP(config)# class-map class1AP(config-cmap)# match access-group 103AP(config-cmap)# exitThis example shows how to delete the class map class1:
AP(config)# no class-map class1You can verify your settings by entering the show class-map privileged EXEC command.
Related Commands
clear dot11 client
Use the clear dot11 client privileged EXEC command to deauthenticate a radio client with a specified media access control (MAC) address. The client must be directly associated with the access point, not a repeater.
clear dot11 client {mac-address}
Syntax Description
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to deauthenticate a specific radio client:
AP# clear dot11 client 0040.9645.2196You can verify that the client was deauthenticated by entering the following privileged EXEC command:
AP# show dot11 associations 0040.9645.2196Related Commands
Displays the radio association table or optionally displays association statistics or association information about repeaters or clients
clear dot11 hold-list
Use the clear dot11 hold-list privileged EXEC command to reset the MAC, LEAP, and EAP authentications hold list.
clear dot11 hold-list
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to clear the hold-off list of MAC authentications:
AP# clear dot11 hold-listclear dot11 statistics
Use the clear dot11 statistics privileged EXEC command to reset statistic information for a specific radio interface or for a particular client with a specified MAC address.
clear dot11 statistics
{interface | mac-address}Syntax Description
interface
Specifies a radio interface number
mac-address
Specifies a client MAC address (in xxxx.xxxx.xxxx format)
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to clear radio statistics for radio interface 0:
AP# clear dot11 statistics dot11radio 0This example shows how to clear radio statistics for the client radio with a MAC address of 0040.9631.81cf:
AP# clear dot11 statistics 0040.9631.81cfYou can verify that the radio interface statistics are reset by entering the following privileged EXEC command:
AP# show dot11 associations statisticsRelated Commands
Displays client traffic statistics
Displays radio interface information
Displays radio interface statistics
clear iapp rogue-ap-list
Use the clear iapp rogue-ap-list privileged EXEC command to clear the list of IAPP rogue access points.
clear iapp rogue-ap-list
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to clear the IAPP rogue access point list:
AP# clear iapp rogue-ap-listYou can verify that the rogue AP list was deleted by entering the show iapp rogue-ap-list privileged EXEC command.
Related Commands
clear iapp statistics
Use the clear iapp statistics privileged EXEC command to clear all the IAPP statistics.
clear iapp statistics
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to clear the IAPP statistics:
AP# clear iapp statisticsYou can verify that the IAPP statistics were cleared by entering the following privileged EXEC command:
AP# show iapp statisticsRelated Commands
clear ip proxy-mobile traffic
Use the clear ip proxy-mobile traffic privileged EXEC command to clear all the statistics related to proxy Mobile IP.
clear ip proxy-mobile traffic
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to clear the proxy-mobile statistics:
AP# clear ip proxy-mobile trafficYou can verify that traffic statistics are cleared by entering the show ip proxy-mobile traffic privileged EXEC command.
Related Commands
clear ip proxy-mobile subnet-map
Use the clear ip proxy-mobile subnet-map privileged EXEC command to clear the proxy Mobile IP subnet map table and obtain a new table from the AAP. On an AAP, this command immediately synchronizes its tables with the other AAPs.
clear ip proxy-mobile subnet-map
This command has no arguments or keywords.
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to clear the proxy Mobile IP subnet map:
AP# clear ip proxy-mobile subnet-mapYou can verify that information was deleted by entering the show ip proxy-mobile subnet-map privileged EXEC command.
Related Commands
Displays the subnet map table
Displays information about proxy Mobile IP
Displays proxy Mobile IP statistics, the subnet map table, and all the security associations
debug dot11
Use the debug dot11 privileged EXEC command to begin debugging of radio functions. Use the no form of this command to stop the debug operation.
[no] debug dot11
{events | packets | forwarding | mgmt | network-map | syslog | virtual-interface}Syntax Description
Defaults
Debugging is not enabled.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to begin debugging of all radio-related events:
AP# debug dot11 eventsThis example shows how to begin debugging of radio packets:
AP# debug dot11 packetsThis example shows how to begin debugging of the radio system log:
AP# debug dot11 syslogThis example shows how to stop debugging of all radio related events:
AP# no debug dot11 eventsRelated Commands
show debugging
Displays all debug settings and the debug packet headers
Displays configuration and status information for the radio interface
debug dot11 aaa
Use the debug dot11 aaa privileged EXEC command to begin debugging of dot11 authentication, authorization, and accounting (AAA) operations. Use the no form of this command to stop the debug operation.
[no] debug dot11 aaa
{accounting | dispatcher |
dot1x {all | broadcast-key | process} | rxdata | state-machine | txdata} | mac-authen}Syntax Description
Defaults
Debugging is not enabled.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to begin debugging of dot11 AAA accounting packets:
AP# debug dot11 aaa accountingThis example shows how to begin debugging of all dot1x AAA packets:
AP# debug dot11 aaa dot1x allRelated Commands
show debugging
Displays all debug settings
Optionally displays all radio clients
debug dot11 dot11radio
Use the debug dot11 dot11radio privileged EXEC command to turn on radio debug options. These options include run RF monitor mode and trace frames received or transmitted on the radio interface. Use the no form of this command to stop the debug operation.
[no] debug dot11 dot11radio interface-number {dump | flash |
monitor {ack | address | beacon | crc | lines | plcp | print | probe | store} |
trace {lines | off | print | store}}Syntax Description
Defaults
Debugging is not enabled.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to begin dumping of driver event packets to the logging buffer:
AP# debug dot11 dot11radio 0 dumpThis example shows how to begin debugging of the radio firmware:
AP# debug dot11 dot11radio 0 flashThis example shows how to begin monitoring of all 801.11 radio packets:
AP# debug dot11 dot11radio 0 monitorThis example shows how to stop monitoring of all radio packets:
AP# no debug dot11 dot11radio 0 monitorRelated Commands
show debugging
Displays all debug settings and the debug packet headers
Displays configuration and status information for the radio interface
Displays radio interface statistics
debug iapp
Use the debug iapp privileged EXEC command to begin debugging of IAPP operations. Use the no form of this command to stop the debug operation.
[no] debug iapp
{packets | event | error}Syntax Description
packets
Displays IAPP packets sent and received by the access point. Link test packets are not displayed
event
Displays significant IAPP events
error
Displays IAPP software and protocol errors
Defaults
This command has no default setting.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to begin debugging of IAPP packets:
AP# debug iapp packetThis example shows how to begin debugging of IAPP events:
AP# debug iapp eventsThis example shows how to begin debugging of IAPP errors:
AP# debug iapp errorsRelated Commands
debug ip proxy-mobile
Use the debug ip proxy-mobile privileged EXEC command to begin debugging of proxy Mobile IP activities. If a component is not specified in the command, debugging of all components is activated. Use the no form of this command to stop the debug operation and return to the default configuration.
[no] debug ip proxy-mobile
[subnet-map] [agent-disc] [registration]Syntax Description
Defaults
Debugging is not enabled.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to begin debugging of all proxy-mobile activities:
AP# debug ip proxy-mobileThis example shows how to begin debugging of registration events:AP# debug ip proxy-mobile registrationThis example shows how to stop debugging of registration events:
AP# no debug ip proxy-mobile registrationYou can check debugging information by entering the show debugging privileged EXEC command.
Related Commands
dot11 dot11radio antenna-alignment
Use the dot11 dot11radio antenna-alignment privileged EXEC command to activate the antenna-alignment tool for an radio interface. Use this tool to test and align the access point antenna with another remote antenna.
dot11 dot11radio interface-number antenna-alignment [timeout]
Syntax Description
interface-number
Specifies the radio interface number (The 2.4-GHz radio is radio 0, and the 5-GHz radio is radio 1.)
timeout
Specifies the duration of the alignment test, in seconds
Defaults
The default alignment timeout is 5 seconds.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
During the antenna alignment test, the radio disassociates from its parent, probes adjacent access points, and records the MAC address and signal strength of responses it receives. After the timeout, the radio reassociates with its parent. Clients connected to the access point through its parent lose their connection for the duration of the test; clients connected to a repeater maintain their connection and can abort the test using the escape sequence (Ctrl key and ^ key).
You display the last 10 results using the show dot11 antenna-alignment command, which lists the MAC address and signal level for the access points that responded to the probe.
Examples
This example shows how to start the antenna-alignment test for radio interface 0:
AP# dot11 dot11radio 0 antenna-alignmentRelated Commands
dot11 dot11radio linktest
Use the dot11 dot11radio linktest privileged EXEC command to test a radio link between the access point and a client device.
dot11 dot11radio interface-number linktest
[target mac-address]
[count packet-number]
[interval sec]
[packet-size size]
[rate value]Syntax Description
Defaults
The default target for a root access point is the first client. The default target for a repeater is its parent access point.
The default count specifies that test runs once.
The default interval is 5 seconds.
The default packet-size is 512 bytes.
The default rate is the automatic rate-shifting algorithm.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The link test verifies the radio link between the access point and a client device by sending the client a series of special packets, which the client returns to the access point. The client adds information to the packets that quantify how well it received the request. Results are displayed as a table of packet statistics, quality, and signal-level information.
If you specify an interval, the test repeats continuously separated by the specified number of seconds. To abort the test, type the escape sequence (Ctrl key and ^ key). Without an interval, the test runs once.
Examples
This example shows how to initiate a radio link test to send 10 packets to client MAC address 0040963181CF on radio interface 0:
AP# dot11 dot11radio 0 linktest target 0040.9631.81CF count 10This example shows how to initiate a radio link test to send 100 packets of 500 bytes to client MAC address 0040963181CF on radio interface 0:
AP# dot11 dot11radio 0 linktest target 0040.9631.81CF packet-size 500 count 100Related Commands
Displays the radio statistics
Displays the radio association table
Displays the radio network map
dot11 dot11radio meter
Use the dot11 dot11radio meter privileged EXEC command to measure the performance of packet forwarding. To display the results, use the show dot11 statistics metered-traffic command.
dot11 dot11radio interface-number meter
Syntax Description
interface-number
Specifies the radio interface number. The 2.4-GHz radio is radio 0. The 5-GHz radio is radio 1.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to activate the meter tool for radio interface 0:
AP# dot11 dot11radio 0 meterRelated Commands
dot11 extension aironet
Use the dot11 extension aironet configuration interface command to enable or disable Cisco Aironet extensions to the IEEE 802.11b standard. Use the no form of this command to disable the Cisco Aironet extensions.
[no] dot11 extension aironet
Syntax Description
This command has no arguments or keywords.
Defaults
Cisco Aironet extensions are disabled by default.
Command Modes
Configuration interface
Command History
Usage Guidelines
The Cisco Aironet extensions help clients choose the best access point. You must enable these extensions to use advanced features such as Cisco MIC and key hashing. Disable these extensions for non-Cisco clients that misinterpret the extensions.
Examples
This example shows how to enable Cisco Aironet extensions for the radio interface:
AP(config-if)# dot11 extension aironetThis example shows how to disable Cisco Aironet extensions for the radio interface:
AP(config-if)# no dot11 extension aironetRelated Commands
dot11 holdoff-time
Use the dot11 holdoff-time configuration interface command to specify the hold-off time for MAC address authentication. Use the no form of the command to reset the parameter to defaults.
[no] dot11 holdoff-time seconds
Syntax Description
Defaults
The default holdoff-time is 0 (disabled).
Command Modes
Configuration interface
Command History
Examples
This example shows how to specify a 2-minute hold-off time.
AP(config-if)# dot11 holdoff-time 120This example shows how reset the hold-off time to defaults.
AP(config-if)# dot11 no holdoff-timeRelated Commands
show running-config
Displays information on the current running access point configuration
dot11 igmp snooping-helper
Use the dot11 igmp snooping-helper global configuration command to begin sending IGMP Query requests when a new client associates with the access point. Use the no form of this command to disable the IGMP Query requests.
[no] dot11 igmp snooping-helper
Syntax Description
This command has no arguments or keywords.
Defaults
IGMP Query requests are disabled.
Command Modes
Global configuration
Command History
Examples
This example shows how to enable IGMP Query requests:
AP(config)# dot11 igmp snooping-helperThis example shows how to stop or disable the IGMP Query requests:
AP(config)# no dot11 igmp snooping-helper
dot11 network-map
Use the dot11 network-map global configuration command to enable the radio network map feature. When enabled, the access point broadcasts a IAPP GenInfo Request every collection interval. This request solicits information from all Cisco access points in the same Layer 2 domain. Upon receiving a GetInfo Request, the access point sends a unicast IAPP GenInfo Response back to the requester. The access point uses these IAPP GenInfo Responses to build a network-map.
dot11 network-map [collect-interval]
Syntax Description
Defaults
The default collect interval is 5 seconds.
Command Modes
Global configuration
Command History
Examples
This example shows how to generate a radio network map with a collection interval of 30 seconds:
AP(config)# dot11 network-map 30You can verify the network map by using the show dot11 network-map EXEC command.
Related Commands
dot11 phone
Use the dot11 phone global configuration command to enable or disable IEEE 802.11 compliance phone support. Use the no form of this command to disable the IEEE 802.11 phone.
[no] dot11 phone
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Global configuration
Command History
Usage Guidelines
Enabling IEEE 802.11 compliance phone support adds information to the access point beacons and probe responses. This information helps some 802.11 phones make intelligent choices about the access point to which they should associate. Some phones do not associate with an access point without this additional information.
Examples
This example shows how to enable IEEE 802.11 phone support:
AP(config)# dot11 phoneThis example shows how to stop or disable the IEEE 802.11 phone support:
AP(config)# no dot11 phone
dot1x client-timeout
Use the dot1x client-timeout configuration interface command to configure the IEEE 802.1x (dot1x) client timeout value.
dot1x client-timeout 1-65555
Syntax Description
Defaults
The default timeout is 10 seconds.
Command Modes
Configuration interface
Command History
Examples
This example shows how to configure a 2-minute dot1x client timeout value:
AP(config-if)# dot1x client-timeout 120Related Commands
dot1x reauth-period
Use the dot1x reauth-period configuration interface command to configure the dot1x client- reauthentication period. The no form of the command disables reauthentication.
[no] dot1x reauth-period {1-65555 | server}
Syntax Description
Defaults
The default is disabled.
Command Modes
Configuration interface
Command History
Examples
This example shows how to configure a 2-minute dot1x client-reauthentication period:
AP(config-if)# dot1x reauth-period 120Related Commands
encryption key
Use the encryption key configuration interface command to define a WEP key used for data encryption on the wireless LAN or on a specific virtual LAN (VLAN). Use the no form of the command to remove a specific encryption key.
[no] encryption
[vlan vlan-id ]
key 1-4
size {40bit | 128Bit}
encryption-key
[transmit-key]Syntax Description
Defaults
This command has no defaults.
Command Modes
Configuration interface
Command History
Examples
This example shows how to configure a 40-bit encryption key with a value of 11aa33bb55 as
WEP key 1 used on VLAN number 1:AP(config-if)# encryption vlan 1 key 1 size 40bit 11aa33bb55 transmit-keyThis example shows how to remove WEP key 1 on VLAN 1:
AP(config-if)# no encryption vlan 1 key 1Related Commands
encryption mode wep
Use the encryption mode wep configuration interface command to enable a specific encryption type that is used to communicate on the wireless LAN or on a specific VLAN. When encryption is enabled, all client devices on the wireless LAN or on a VLAN must support the specified encryption methods to communicate with the access point. Use the no form of the command to disable the encryption features on a specific VLAN.
[no] encryption [vlan vlan-id ] mode wep
{mandatory | optional}
{key-hash | mic [key-hash] }Syntax Description
Defaults
This command has no defaults.
Command Modes
Configuration interface
Command History
Examples
This example shows how to specify that encryption key hashing must be used on VLAN number 1:
AP(config-if)# encryption vlan 1 mode wep mandatory key-hashThis example shows how to disable mandatory encryption on VLAN 1:
AP(config-if)# no encryption vlan 1 mode wep mandatoryRelated Commands
fragment-threshold
Use the fragment-threshold configuration interface command to set the size at which packets are fragmented. Use the no form of the command to reset the parameter to defaults.
[no] fragment-threshold 256-2346
Syntax Description
Defaults
The default threshold is 2346 bytes
Command Modes
Configuration interface
Command History
Examples
This example shows how to set the packet fragment threshold size to 1800 bytes:
AP(config-if)# fragment-threshold 1800This example shows how to reset the packet fragment threshold size to defaults:
AP(config-if)# no fragment-thresholdRelated Commands
guest-mode (ssid configuration mode)
Use the guest-mode ssid configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.
[no] guest-mode
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Usage Guidelines
The access point can have one guest-mode SSID or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.
Examples
This example shows how to set the wireless LAN for the specified SSID into guest mode:
AP(config-if-ssid)# guest-modeThis example shows how to reset the guest-mode parameter to default values:
AP(config-if-ssid)# no guest-modeRelated Commands
Specifies the SSID and enters the ssid configuration mode
show running-config
Displays the current access point operating configuration
iapp standby mac-address
Use the iapp standby mac-address global configuration command to configure an access point to be in standby mode and specify the active access point's MAC address. Use the no form of this command to disable the access point standby mode.
[no] iapp standby mac-address mac-address
Syntax Description
Defaults
This command has no default setting.
Command Modes
Global configuration
Command History
Examples
This example shows how to place the access point in standby mode and indicate the MAC address of the active access point:
AP(config)# iapp standby mac-address 0040.9631.81cfThis example shows how to stop or disable the standby mode:
AP(config)# no iapp standby mac-address 0040.9631.81cf
Related CommandsYou can verify your settings by entering the show class-map privileged EXEC command.
Configures the polling interval in standby mode
Configures the polling timeout value in standby mode
iapp standby poll-frequency
Use the iapp standby poll-frequency global configuration command to configure the standby mode polling interval. Use the no form of this command to clear the access point standby mode poll frequency.
[no] iapp standby poll-frequency sec [mac-address]
Syntax Description
sec
Specifies the standby mode poll frequency in seconds
mac-address
Specifies the MAC address of an access point
Defaults
This command has no defaults.
Command Modes
Global configuration
Command History
Examples
This example shows how to specify the standby mode poll frequency of 5 minutes:
AP(config)# iapp standby poll-frequency 300This example shows how to stop or disable the standby mode:
AP(config)# no iapp standby mac-address 0040.9631.81cf
Related CommandsYou can verify your settings by entering the show class-map privileged EXEC command.
Places the access point into standby mode and identifies the MAC address of the active access point
Specifies the access point standby mode polling timeout value
iapp standby timeout
Use the iapp standby timeout global configuration command to configure the standby mode polling timeout value. Use the no form of this command to clear the standby mode polling timeout value.
[no] iapp standby timeout sec
Syntax Description
Defaults
This command has no defaults.
Command Modes
Global configuration
Command History
Examples
This example shows how to specify the standby mode polling timeout of 1 minute:
AP(config)# iapp standby timeout 60This example shows how to clear the standby mode timeout value:
AP(config)# no iapp standby timeout
Related CommandsYou can verify your settings by entering the show class-map privileged EXEC command.
Places the access point into standby mode and identifies the MAC address of the active access point
Specifies the standby mode polling interval
infrastructure-client
Use the infrastructure-client configuration interface command to configure a virtual interface for a workgroup bridge client. Use the no form of the command to disable the workgroup bridge client virtual interface.
[no] infrastructure-client
Syntax Description
This command has no arguments or keywords.
Defaults
The default is infrastructure client disabled.
Command Modes
Configuration interface
Command History
Usage Guidelines
Enable the infrastructure client feature to increase the reliability of multicast messages to workgroup bridges. When enabled, the access point sends directed packets containing the multicasts, which are retried if necessary, to the associated workgroup bridge. Enable only when necessary because it can greatly increase the load on the radio cell.
Examples
This example shows how to configure a virtual interface for a workgroup bridge client.
AP(config-if)# infrastructure-clientThis example shows how to specify that a workgroup bridge client virtual interface is not supported.
AP(config-if)# no infrastructure-clientRelated Commands
show running-config
Displays information on the current running access point configuration
infrastructure-ssid (ssid configuration mode)
Use the infrastructure-ssid command in ssid configuration mode to reserve this SSID for infrastructure associations, such as those from one access point to another. Use the no form of the command to revert to a normal non-infrastructure SSID.
[no] infrastructure-ssid
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Usage Guidelines
This command controls the SSID that access points use when associating with one another. A root access point only allows a repeater access point to associate using this SSID. A repeater access point uses this SSID to associate with its parent. Configure authentication types and VLANs for an SSID to control the security of the access points.
Examples
This example shows how to reserve the specified SSID for infrastructure associations on the wireless LAN:
AP(config-if-ssid)# infrastructure-ssidThis example shows how to restore the SSID to non-infrastructure associations:
AP(config-if-ssid)# no infrastructure-ssidRelated Commands
interface dot11radio
Use the interface dot11radio global configuration command to place access point into the radio configuration mode.
interface dot11radio interface-number
Syntax Description
interface-number
Specifies the radio interface number (The 2.4-GHz radio is radio 0, and the 5-GHz radio is radio 1.)
Defaults
The default radio interface number is 0.
Command Modes
Global configuration
Command History
Examples
This example shows how to place the access point into the radio configuration mode:
AP# interface dot11radio 0Related Commands
ip proxy-mobile
Use the ip proxy-mobile configuration interface command to enable the access point to participate in proxy Mobile IP operations. Use the no form of this command to disable proxy Mobile IP operations on the access point.
[no] ip proxy-mobile
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Configuration interface
Command History
Examples
This example shows how to enable the proxy Mobile IP interface on the access point.
AP(config-if)# ip proxy-mobileThis example shows how to disable proxy Mobile IP operations on the access point.
AP(config-if)# no ip proxy-mobileRelated Commands
ip proxy-mobile (ssid configuration mode)
Use the ip proxy-mobile ssid configuration mode command to configure the radio interface (for the specified SSID) to support proxy Mobile IP. Use the no form of the command to reset the parameter to the default value.
[no] ip proxy-mobile
Syntax Description
This command has no arguments or keywords.
Defaults
No proxy Mobile IP support is the default setting.
Command Modes
SSID configuration interface
Command History
Examples
This example shows how to enable proxy Mobile IP support on the wireless LAN for the specified SSID:
AP(config-if-ssid)# ip proxy-mobileThis example shows how to disable proxy Mobile IP support:
AP(config-if-ssid)# no ip proxy-mobileRelated Commands
ip proxy-mobile aap
Use the ip proxy-mobile aap global configuration command to specify the IP addresses for the primary and secondary AAPs. Use the no form of this command to clear the primary AAP and secondary AAP addresses.
[no] ip proxy-mobile aap address
[ address2 address3]Syntax Description
address
Specifies the primary AAP IP address
address2
(Optional) Specifies the secondary AAP IP address
address3
(Optional) Specifies a second secondary AAP IP address
Defaults
AAP address information is not defined by default.
Command Modes
Global configuration
Command History
Examples
This example shows how to specify the IP addresses for proxy Mobile IP primary and secondary AAPs:
AP(config)# ip proxy-mobile aap 10.10.9.21 10.10.9.22 10.10.9.23This example shows how to clear out the IP addresses for the proxy Mobile IP AAPs:
AP(config)# no ip proxy-mobile aap
Related CommandsYou can verify your settings by entering the show class-map privileged EXEC command.
Enables and disables proxy Mobile IP and removes the configuration information when disabled
Displays proxy Mobile IP information
ip proxy-mobile enable
Use the ip proxy-mobile enable global configuration command to enable or disable proxy Mobile IP. Use the no form of this command to disable proxy Mobile IP and remove all associated CLIs.
[no] ip proxy-mobile enable
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled by default.
Command Modes
Global configuration
Command History
Examples
This example shows how to enable proxy Mobile IP:
AP(config)# ip proxy-mobile enableThis example shows how to disable proxy Mobile IP and remove all associated CLIs:
AP(config)# no ip proxy-mobile enable
Related CommandsYou can verify your settings by entering the show class-map privileged EXEC command.
ip proxy-mobile pause
Use the ip proxy-mobile pause global configuration command to enable or disable proxy Mobile IP without removing all associated CLIs. Use the no form of this command to re-enable proxy Mobile IP.
[no] ip proxy-mobile pause
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Global configuration
Command History
Examples
This example shows how to disable proxy Mobile IP without removing the configuration:
AP(config)# ip proxy-mobile pauseThis example shows how to re-enable proxy Mobile IP:
AP(config)# no ip proxy-mobile pause
Related CommandsYou can verify your settings by entering the show class-map privileged EXEC command.
ip proxy-mobile secure
Use the ip proxy-mobile secure global configuration command to specify the proxy Mobile IP security association information for a range of IP addresses. Use the no form of this command to reset the parameters to default values.
[no] ip proxy-mobile secure
node address-start address-end
spi spi
key {hex | ascii} stringSyntax Description
Defaults
The default key setting is ASCII.
Command Modes
Global configuration
Command History
Examples
This example shows how to configure proxy Mobile IP security association information for an IP address range of 10.9.1.20 to 10.9.1.60 with an ASCII key of 123456789abcd:
AP(config)# ip proxy-mobile secure 10.9.1.20 10.9.1.60 spi 100 key ascii 123456789abcdThis example shows how to reset the proxy Mobile IP security association information to defaults:
AP(config)# no ip proxy-mobile secure
Related Commands
Enables and disables proxy Mobile IP and removes the configuration information when disabled
Displays proxy Mobile IP information
l2-filter bridge-group-acl
Use the l2-filter bridge-group-acl configuration interface command to apply a Layer 2 ACL filter to the bridge group incoming and outgoing packets between the access point and the host (upper layer). Use the no form of the command to disable the Layer 2 ACL filter
[no] l2-filter bridge-group-acl
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Configuration interface
Command History
Examples
This example shows how to apply a Layer 2 ACL filter to the bridge group packets:
AP(config-if)# l2-filter bridge-group-aclThis example shows how to activate a Layer 2 ACL filter:AP(config-if)# no l2-filter bridge-group-aclRelated Commands
led flash
Use the led flash privileged EXEC command to start or stop the blinking of the LED indicators on the access point for a specified number of seconds. Without arguments, this command blinks the LEDs continuously.
led flash [seconds | disable]
Syntax Description
seconds
Specifies the number of seconds (1 to 3600) that the LEDs blink
disable
Stops the blinking of the LEDs
Defaults
The default is continuous blinking of the LEDs.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to blink the access point LEDs for 30 seconds:
AP# led flash 30This example shows how to stop the blinking of the access point LEDs:AP# led flash disableRelated Commands
logging buffered
Use the logging buffered global configuration command to begin logging of messages to an internal buffer. Use the no form of this command to stop logging messages.
[no] logging buffered [size] [severity]
Syntax Description
Defaults
This command has no defaults.
Command Modes
Global configuration
Command History
Examples
This example shows how to begin logging severity 3 messages to an internal 5000-byte buffer:
AP(config)# logging buffered 5000 3This example shows how to stop the message logging:
AP(config)# no logging buffered
Related Commands
show logging
Displays recent logging event headers or complete events
clear logging
Clears logging status count and the trace buffer
match (class-map configuration)
Use the match class-map configuration command to define the match criteria to classify traffic. Use the no form of this command to remove the match criteria.
[no] match {access-group acl-index-or-name |
ip [dscp dscp-list | precedence precedence-list] |
vlan vlan-id}Syntax Description
Note
Defaults
This command has no defaults.
Command Modes
Class-map configuration
Command History
Usage Guidelines
Use the class-map global configuration command to enter the class-map configuration mode. The match command in the class-map configuration mode is used to specify which fields in the incoming packets are examined to classify the packets. Only the IP access group or the MAC access group matching to the Ether Type/Len are supported.
You can use the match ip dscp dscp-list command only in a policy map that is attached to an egress interface.
Only one match command per class map is supported.
For the match ip dscp dscp-list or the match ip precedence ip-precedence-list command, you can enter a mnemonic name for a commonly used value. For example, you can enter the match ip dscp af11 command, which is the same as entering the match ip dscp 10 command. You can enter the match ip precedence critical command, which is the same as entering the match ip precedence 5 command. For a list of supported mnemonics, enter the match ip dscp ? or the match ip precedence ? command to see the command-line help strings.
Examples
This example shows how to create a class map called class2, which matches all the incoming traffic with DSCP values of 10, 11, and 12:
AP(config)# class-map class2AP(config-cmap)# match ip dscp 10 11 12AP(config-cmap)# exitThis example shows how to create a class map called class3, which matches all the incoming traffic with IP-precedence values of 5, 6, and 7:
AP(config)# class-map class3AP(config-cmap)# match ip precedence 5 6 7AP(config-cmap)# exitThis example shows how to delete the IP-precedence match criteria and to classify traffic by vlan:
AP(config)# class-map class2AP(config-cmap)# match ip precedence 5 6 7AP(config-cmap)# no match ip precedenceAP(config-cmap)# match vlan 2AP(config-cmap)# exitYou can verify your settings by entering the show class-map privileged EXEC command.
Related Commands
Creates a class map to be used for matching packets to the class whose name you specify
show class-map
Displays quality of service (QoS) class maps
max-associations (ssid configuration mode)
Use the max-associations ssid configuration mode command to configure the maximun number of associations supported by the radio interface (for the specified SSID). Use the no form of the command to reset the parameter to the default value.
[no] max-associations value
Syntax Description
Defaults
This default maximum is 255.
Command Modes
SSID configuration interface
Command History
Examples
This example shows how to set the maximum number of associations to 5 on the wireless LAN for the specified SSID:
AP(config-if-ssid)# max-associations 5This example shows how to reset the maximum number of associations to the default value:
AP(config-if-ssid)# no max-associationsRelated Commands
packet retries
Use the packet retries configuration interface command to specify the maximum number of attempts to send a packet. Use the no form of the command to reset the parameter to defaults.
[no] packet retries 1-128
Syntax Description
Defaults
The default number of retries is 32.
Command Modes
Configuration interface
Command History
Examples
This example shows how to specify 15 as the maximum number of retries.
AP(config-if)# packet retries 15This example shows how reset the packet retries to defaults.
AP(config-if)# no packet retriesRelated Commands
parent
Use the parent configuration interface command to add a parent to a list of valid parent access points. Use the no form of the command to remove a parent from the list.
[no] parent 1-4 mac-address
Syntax Description
1-4
Specifies the parent root access point number (1 to 4)
mac-address
Specifies the MAC address (in xxxx.xxxx.xxxx format) of a parent access point
Defaults
Repeater access point operation is disabled by default.
Command Modes
Configuration interface
Command History
Usage Guidelines
The parent command adds a parent to the list of valid parent access points. Use this command multiple times to define up to four valid parents. A repeater access point operates best when configured to associate with specific root access points that are connected to the wired LAN.
Examples
This example shows how to set up repeater operation with the parent 1 access point:
AP(config-if)# parent 1 0040.9631.81cfThis example shows how to set up repeater operation with the parent 2 access point:
AP(config-if)# parent 2 0040.9631.81daThis example shows how to remove a parent from the parent list:
AP(config-if)# no parentRelated Commands
parent timeout
Use the parent timeout configuration interface command to define the amount of time to associate with a parent access point. Use the no form of the command to disable the timeout.
[no] parent timeout sec
Syntax Description
sec
Specifies the amount of time the access point attempts to associate with the specified parent access point (0 to 65535 seconds)
Defaults
Parent timeout is disabled by default.
Command Modes
Configuration interface
Command History
Usage Guidelines
The parent timeout defines how long the access point attempts to associate with a parent in the parent list. After the timeout, another acceptable parent is used. You set up the parent list using the parent command. With the timeout disabled, the parent must come from the parent list.
Examples
This example shows how to set up repeater operation with the parent 1 access point with a timeout of 60 seconds:
AP(config-if)# parent timeout 60This example shows how to disable repeater operation:
AP(config-if)# no parentRelated Commands
payload-encapsulation
Use the payload-encapsulation configuration interface command to specify the Ethernet encapsulation type used to format Ethernet data packets that are not formatted using IEEE 802.3 headers. Data packets that are not IEEE 802.3 packets must be reformatted using IEEE 802.1H or RFC1042. Use the no form of the command to reset the parameter to defaults.
[no] payload-encapsulation
{snap | dot1h}Syntax Description
snap
(Optional) Specifies the RFC1042 encapsulation
dot1h
(Optional) Specifies the IEEE 802.1H encapsulation
Defaults
The default payload encapsulation is snap.
Command Modes
Configuration interface
Command History
Examples
This example shows how to specify the use of IEEE 802.1H encapsulation:
AP(config-if)# payload-encapsulation dot1hThis example shows how to reset the parameter to defaults:
AP(config-if)# no payload-encapsulationRelated Commands
power client maximum
Use the power client maximum configuration interface command to configure the maximum power level clients should use for IEEE 802.11b radio transmissions to the access point. The power setting is transmitted to the client device during association with the access point. Use the no form of the command to not specify a power level.
2.4-GHz Radio (dot11radio0)
[no] power client
{1 | 5 | 20 | 30 | 50 | 100}5-GHz Radio (dot11radio1)
[no] power client
{5 | 10 | 20 | 40}Syntax Description
For the 2.4-GHz radio:
1, 5, 20, 30, 50, 100For the 5-GHz radio:
5, 10, 20, 40Specifies a specific power level in mW. Maximum power is regulated by the regulatory agency in the country of operation and is set during manufacture of the access point and client device.
For a list of maximum power levels allowed in each regulatory domain for the 2.4-GHz radio, see Table 2-3. For a list of maximum power levels allowed in each regulatory domain for the 5-GHz radio, see Table 2-4.
Defaults
The default is no power level specification during association with the client.
Command Modes
Configuration interface
Command History
Usage Guidelines
Use this command to specify the desired transmitter power level for clients. Lower power levels reduce the radio cell size and interference between cells. The client software chooses the actual transmit power level, choosing between the lower of the access point value and the locally configured value. The maximum transmit power is limited according to regulatory region.
Examples
This example shows how to specify a 20-mW power level for client devices associated to the access point radio:
AP(config-if)# power client 20This example shows how to disable power level requests:
AP(config-if)# no power clientRelated Commands
power local
Use the power local configuration interface command to configure the access point radio power level. Use the no form of the command to reset the parameter to defaults.
2.4-GHz Radio (dot11radio0)
[no] power local {1 | 5 | 20 | 30 | 50 | 100 | maximum}
5-GHz Radio (dot11radio1)
[no] power local {5 | 10 | 20 | 40 | maximum}
Syntax Description
For the 2.4-GHz radio:
1, 5, 20, 30, 50, 100, or maximumFor the 5-GHz radio:
5, 10, 20, 40, or maximumSpecifies access point power setting in mW. (Maximum power is regulated by the regulatory agency in the country of operation and is set during manufacture of the access point. Refer to Table 2-3.)
Defaults
The default local power level is maximum.
Command Modes
Configuration interface
Command History
12.2(4)JA
This command was introduced.
12.2(8)JA
Parameters were added to support the 5-GHz radio.
Usage Guidelines
Use this command to specify the local transmit power level. Lower power levels reduce the radio cell size and interference between cells. The maximum transmit power is limited by region.
Examples
This example shows how to specify a 20-mW transmit power level for one of the the access point radios:
AP(config-if)# power local 20This example shows how to reset power to defaults on one of the access point radios:
AP(config-if)# no power localRelated Commands
preamble-short
Use the preamble-short configuration interface command to enable short radio preambles. The radio preamble is a selection of data at the head of a packet that contains information that the access point and client devices need when sending and receiving packets. Use the no form of the command to change back to default values.
[no] preamble-short
Note
Syntax Description
This command has no arguments or keywords.
Defaults
The default is short radio preamble.
Command Modes
Configuration interface
Command History
Usage Guidelines
If short radio preambles are enabled, clients may request either short or long preambles and the access point formats packets accordingly. Otherwise, clients are told to use long preambles.
Examples
This example shows how to set the radio packet to use a short preamble.
AP(config-if)# preamble-shortThis example shows how to set the radio packet to use a long preamble.
AP(config-if)# no preamble-shortRelated Commands
rts
Use the rts configuration interface command to set the Request-To-Send (RTS) threshold and the number of retries. Use the no form of the command to reset the parameter to defaults.
[no] rts
{threshold 0-2347 | retries 1-128}Syntax Description
Defaults
The default threshold is 2330 bytes.
The default number of retries is 32.
Command Modes
Configuration interface
Command History
Examples
This example shows how to set the RTS threshold to 1400 bytes:
AP(config-if)# rts threshold 1400This example shows how to set the RTS retries count to 3:
AP(config-if)# rts retries 3This example shows how to reset the parameter to defaults:
AP(config-if)# no rtsRelated Commands
show controllers dot11radio
Use the show controllers dot11radio privileged EXEC command to display the radio controller status.
show controllers dot11radio interface-number
Syntax Description
interface-number
Specifies the radio interface number. The 2.4-GHz radio is radio 0. The 5-GHz radio is radio 1.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the radio controller status for radio interface 0:
AP# show controllers dot11radio 0Related Commands
show dot11 associations
Use the show dot11 associations privileged EXEC command to display the radio association table, radio association statistics, or to selectively display association information about all repeaters, all clients, a specific client, or basic service clients.
show dot11 associations
[client | repeater | statistics | H.H.H | bss-only | all-client]Syntax Description
Defaults
When parameters are not specified, this command displays the complete radio association table.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the radio association table:
AP# show dot11 associationsThis example shows how to display all client devices associated with the access point:
AP# show dot11 associations clientThis example shows how to display access point radio statistics:
AP# show dot11 associations statisticsRelated Commands
show dot11 network-map
Use the show dot11 network-map privileged EXEC command to display the radio network map. The radio network map contains information from Cisco access points in the same Layer 2 domain as this access point.
show dot11network-map
Syntax Description
This command has no arguments or keywords.
DefaultsDefaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command displays network map information only if you first enable the network map feature with the dot11 network map command.
Examples
This example shows how to display the radio network map:
AP# show dot11 network-mapRelated Commands
show dot11 statistics client-traffic
Use the show dot 11 statistics client-traffic privileged EXEC command to display the radio client traffic statistics.
show dot11 statistics client-traffic
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the radio client traffic statistics:
AP# show dot11 statistics client-trafficRelated Commands
Deauthenticates a client with a specified MAC address
Resets the statistics for a specified radio interface or client device
show iapp rogue-ap-list
Use the show iapp rogue-ap-list privileged EXEC command to display a list of rogue access points.
show iapp rogue-ap-list
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The list contains an entry for each access point that a client station reported as a possible rogue access point. Each list entry contains the following information:
Rogue AP—MAC address of the reported rogue access point
Count—The number of times the access point was reported
Last Rpt Src—The MAC address of the last client to report the rogue access point
R—The last reason code
Prev Rpt Src—The MAC address of any previous client that reported the rogue access point
R—The previous reason code
Last(Min)—The number of minutes since the last report
1st(Min)—The number of minutes since the access point was first reported as a possible rogue
Name—The name of a Cisco rogue access point
The following reason codes are displayed:
1—The rogue was not running 802.1x
2—Authentication with the rogue timed out
3—Bad user password
4—Authentication challenge failed
Examples
This example shows how to display the list of IAPP rogue access points:
AP# show iapp rogue-ap-listRelated Commands
show iapp standby-parms
Use the show iapp standby-parms privileged EXEC command to display IAPP standby parameters when a standby MAC address is configured. The information displayed includes the standby MAC address, the time-out value, and the poll-frequency value.
show iapp standby-parms
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the IAPP standby parameters:
AP# show iapp standby-parmsRelated Commands
show iapp statistics
Use the show iapp statistics privileged EXEC command to display the IAPP transmit and receive statistics.
show iapp statistics
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command displays IAPP transmit and receive packet counts and IAPP error counts. The operating mode for the access point is also displayed.
Examples
This example shows how to display the IAPP statistics:
AP# show iapp statisticsRelated Commands
show interfaces dot11radio
Use the show interfaces dot11radio privileged EXEC command to display the radio interface configuration and statistics.
show interfaces dot11radio interface-number
Syntax Description
interface-number
Specifies the radio interface number. The 2.4-GHz radio is radio 0. The 5-GHz radio is radio 1.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the radio interface configuration and statistics:
AP# show interfaces dot11radio 0Related Commands
Configures a specified radio interface
show running-config
Displays the access point run time configuration information
show interfaces dot11radio aaa
Use the show interfaces dot11radio aaa privileged EXEC command to display the radio interface information.
show interfaces dot11radio interface-number
aaa [timeout]Syntax Description
interface-number
Specifies the radio interface number. The 2.4-GHz radio is radio 0. The 5-GHz radio is radio 1.
timeout
Displays the AAA timeout value
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display AAA information for interface 0:
AP# show interfaces dot11radio 0 aaaRelated Commands
show interfaces dot11radio statistics
Use the show interfaces dot11radio statistics privileged EXEC command to display the radio interface statistics.
show interfaces dot11radio interface-number statistics
Syntax Description
interface-number
Specifies the radio interface number. The 2.4-GHz radio is radio 0. The 5-GHz radio is radio 1.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the radio interface statistics for interface 0:
AP# show interfaces dot11radio 0 statisticsRelated Commands
show ip proxy-mobile
Use the show ip proxy-mobile privileged EXEC command to display information about proxy Mobile IP functionality.
show ip proxy-mobile
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display information about proxy Mobile IP functionality:
AP# show ip proxy-mobileRelated Commands
show ip proxy-mobile aaa requests
Use the show ip proxy-mobile aaa requests privileged EXEC command to display information about mobile nodes that have pending proxy Mobile IP AAA requests.
show ip proxy-mobile aaa requests
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display information about mobile nodes that have pending proxy Mobile IP AAA requests:
AP# show ip proxy-mobile aaa requestsRelated Commands
Enables proxy Mobile IP on the access point
Displays information about proxy Mobile IP
Displays proxy Mobile IP statistics, the subnet map table, and all the security associations
show ip proxy-mobile agent
Use the show ip proxy-mobile agent privileged EXEC command to display information about the proxy Mobile IP agents discovered by the access point.
show ip proxy-mobile agent
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display all proxy Mobile IP agents discovered by the access point:
AP# show ip proxy-mobile agentRelated Commands
Enables proxy Mobile IP on the access point
Displays proxy Mobile IP statistics, the subnet map table, and all the security associations
show ip proxy-mobile detail
Use the show ip proxy-mobile detail privileged EXEC command to display proxy Mobile IP statistics, the subnet map, and all security associations.
show ip proxy-mobile detail
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the proxy Mobile IP statistics, the subnet map, and all security associations:
AP# show ip proxy-mobile detailRelated Commands
Enables proxy Mobile IP on the access point
Displays information about proxy Mobile IP
show ip proxy-mobile node
Use the show ip proxy-mobile node privileged EXEC command to display information about a specific proxy Mobile IP node or all proxy Mobile IP nodes on the access point.
show ip proxy-mobile node [address-start]
Syntax Description
Defaults
Displays all proxy Mobile IP nodes on the access point when an IP address is not specified.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display information about all proxy Mobile IP nodes on the access point:
AP# show ip proxy-mobile nodesRelated Commands
Enables proxy Mobile IP on the access point
Displays information about proxy Mobile IP
Displays proxy Mobile IP statistics, the subnet map table, and all the security associations
show ip proxy-mobile registration
Use the show ip proxy-mobile registration privileged EXEC command to display pending or accepted proxy Mobile IP registrations.
show ip proxy-mobile registration
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display pending or accepted proxy Mobile IP registrations:
AP# show ip proxy-mobile registrationsRelated Commands
Enables proxy Mobile IP on the access point
Displays information about proxy Mobile IP
Displays proxy Mobile IP statistics, the subnet map table, and all the security associations
show ip proxy-mobile subnet-map
Use the show ip proxy-mobile subnet-map privileged EXEC command to display the proxy Mobile IP subnet map table.
show ip proxy-mobile subnet-map
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the proxy Mobile IP subnet map table:
AP# show ip proxy-mobile subnet-mapRelated Commands
show ip proxy-mobile traffic
Use the show ip proxy-mobile traffic privileged EXEC command to display all the statistics related to proxy Mobile IP.
show ip proxy-mobile traffic
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display all the proxy Mobile IP statistics:
AP# show ip proxy-mobile trafficRelated Commands
Enables proxy Mobile IP on the access point
Displays information about proxy Mobile IP
show ip proxy-mobile visitor
Use the show ip proxy-mobile visitor privileged EXEC command to display the visiting proxy Mobile IP nodes.
show ip proxy-mobile visitor
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display about visiting proxy Mobile IP nodes:
AP# show ip proxy-mobile visitorRelated Commands
Enables proxy Mobile IP on the access point
Displays information about proxy Mobile IP
Displays proxy Mobile IP statistics, the subnet map table, and all the security associations
show led flash
Use the show led flash privileged EXEC command to display the LED flashing status.
show led flash
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no defaults.
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the LED flashing status:
AP# show led flashRelated Commands
speed
Use the speed configuration interface command to configure the data rates supported by the access point radios. An individual data rate can be set only to a basic or a non-basic setting, not both.
2.4-GHz Radio (dot11radio0)
speed
{ [1.0] [2.0] [5.5] [11.0 ]
[basic-1.0] [basic-2.0] [basic-5.5] [basic-11.0] |
range |
throughput }5-GHz Radio (dot11radio1)
speed
{ [6.0] [9.0] [12.0] [18.0 ] [24.0] [36.0] [48.0] [54.0 ]
[basic-6.0] [basic-9.0] [basic-12.0] [basic-18.0] [basic-24.0] [basic-36.0] [basic-48.0] [basic-54.0] |
range |
throughput |
default }Syntax Description
Defaults
On the 2.4-GHz radio, all data rates are set to basic by default. On the 5-GHz radio, data rates 6.0, 12.0 and 24.0 are set to basic by default, and the other data rates are supported.
Command Modes
Configuration interface
Command History
Examples
This example shows how to set the radio data rates for best throughput:
AP(config-if)# speed throughputThis example shows how to set the radio data rates support a low-speed client device while still supporting higher-speed client devices:
AP(config-if)# speed basic-1.0 2.0 5.5 11.0Related Commands
ssid
Use the ssid configuration interface command to specify the radio service set identifier (SSID) and to enter into the ssid configuration mode. Use the no form of the command to remove an SSID.
[no] ssid ssid-string
Syntax Description
ssid-string
Specifies the SSID name for the radio, expressed as a case-sensitive alphanumeric stirng from 1 to 32 characters.
Defaults
The factory default SSID is tsunami.
Command Modes
Configuration interface
Command History
Usage Guidelines
Use this command to specify a unique SSID for your wireless network. Several access points on a network, or subnetwork, can share a SSID. The no form of the command removes the SSID, which inhibits clients that use that SSID from associating with the access point.
Examples
This example shows how to set the radio SSID to Ivory-AP25:
AP(config-if)# ssid Ivory-AP25This example shows how to remove the SSID named Ivory-AP25 and all its configuration settings:
AP(config-if)# no ssid Ivory-AP25Related Commands
station-role
Use the station-role configuration interface command to set the role of the radio interface. Use the no form of the command to reset the parameter to the default value.
[no] station-role
{repeater | root [fallback {shutdown | repeater]}}Syntax Description
Defaults
Operates as a root access point by default.
Command Modes
Configuration interface
Command History
Examples
This example shows how to configure the access point for root operation and shutdown when Ethernet is not functional:
AP(config-if)# station-role root fallback shutdownThis example shows how to configure the access point for repeater operation:
AP(config-if)# station-role repeaterThis example shows how to reset the access point to root operation:
AP(config-if)# no station-roleRelated Commands
traffic-class
Use the traffic-class configuration interface mode command to configure the radio interface quality-of-service (QoS) traffic class parameters for each of the eight traffic types. Use the no form of the command to reset a specific traffic class to the default values.
[no] traffic-class 0-7
cw-min 0-10
cw-max 0-10
fixed-slot 0-20Syntax Description
Defaults
No traffic class support is provided by default.
Command Modes
Configuration interface
Command History
Usage Guidelines
Use this command to control the backoff parameters for each class of traffic. Backoff parameters control how the radio accesses the airwaves. The cw-min and cw-max arguments specify the collision window as a power of 2. For example, if the value is set to 3, the contention window is 0 to 7 backoff slots (2 to the power 3 minus 1). The fixed-slot arguments specify the number of backoff slots that are counted before the random backoff counter starts to count down.
Examples
This example shows how to configure traffic class 6 for contention windows and fixed slot backoff values. Each time the backoff for class 6 is started, the backoff logic waits a minimum of the 802.11 SIFS time plus 2 backoff slots. Then it begins counting down the 0 to 15 backoff slots in the contention window.
AP(config-if)# traffic-class 6 cw-min 4 cw-max 10 fixed-slot 2This example shows how to disable traffic class support:
AP(config-if)# no traffic-classvlan (ssid configuration mode)
Use the vlan ssid configuration mode command to configure the radio interface (for the specified SSID) to support a specific Ethernet virtual LAN (VLAN). Use the no form of the command to reset the parameter to the default value.
[no] vlan vlan-id
Syntax Description
Defaults
This command has no defaults.
Command Modes
SSID configuration interface
Command History
Examples
This example shows how to configure the VLAN that uses the radio SSID (wireless LAN):
AP(config-if-ssid)# vlan 2This example shows how to reset the VLAN parameter to default values:
AP(config-if-ssid)# no vlanRelated Commands
world-mode
Use the world-mode configuration interface mode command to enable access point world mode operation. Use the no form of the command to disable world mode operation.
[no] world-mode
Note
Syntax Description
This command has no arguments or keywords.
Defaults
World mode is disabled by default.
Command Modes
Configuration interface
Command History
Usage Guidelines
With world mode enabled, the access point advertises the local settings, such as allowed frequencies and transmitter power levels. Clients with this capability then passively detect and adopt the advertised world settings, and then actively scan for the best access point.
Examples
This example shows how to enable world mode operation:
AP(config-if)# world-modeThis example shows how to disable world mode operation:
AP(config-if)# no world-modeRelated Commands
