-
User Guide for the CiscoWorks WLSE and WLSE Express, 2.11
-
Index
-
Preface
-
Getting Started
-
Using the Wizard for WDS Deployment
-
Fault Monitoring
-
Managing Devices
-
Using IOS Templates
-
Using Non-IOS Templates
-
Using WLSM Templates
-
Using Wizard Templates
-
Managing Device Configuration
-
Managing Device Firmware
-
Using Reports
-
Configuring the WLAN Radio Environment
-
Using the Radio Manager
-
Managing Your WLAN Radio Environment by Sites
-
Using the Intrusion Detection System
-
Managing the WLSE System
-
Managing the WLSE System via the CLI
-
Using the Internal AAA Server
-
Using the CLI
-
Naming Guidelines
-
Glossary
-
Table Of Contents
Command Line Interface (CLI) Commands
Command Description Conventions
Command Line Interface (CLI) Commands
This appendix summarizes the WLSE's command line interface (CLI) commands.
Note
When you use CLI commands to make a configuration change, the system configuration is updated immediately.
This appendix contains the following sections:
•
Using the CLI
You can use the CLI by:
•
•
Note
You can log in to the CLI by using the admin username and password or any user that has CLI privileges. For more information on logging in and out of the CLI, see Logging In and Out via CLI.
CLI Conventions
The command-line interface (CLI) uses the following conventions:
•
•
•
Note
Command Privileges
Access to CLI commands is controlled by your user account privilege level. Users with privilege level 15 can use all commands. Users with privilege level 0 can use only a subset of the commands. Most commands require privilege level 15.
Checking Command Syntax
The user interface provides several types of responses to incorrect command entries:
•
•
•
In addition, some commands have command-specific error messages that notify you that a command is valid but cannot run correctly.
Command History Feature
The CLI provides a command history feature. To display previously entered commands, press the up arrow key. After pressing the up arrow key, you can press the down arrow key to display the commands in reverse order. To run a command, press the Enter key while the command is displayed on the command line. You can also edit commands before pressing the Enter key.
Note
Help for CLI Commands
For a list of all commands and their syntax, type help and press Enter.
For help on a specific command, use either of the following methods:
•
•
The help provides command usage information and syntax.
Command Description Conventions
Command descriptions in this document and in the CLI help system use the following conventions:
•
•
•
•
•
Command Summary
Table A-1 lists the CLI commands.
Table A-1 Command Summary
aaa-server commands
These commands are for the internal AAA server, which is available on the WLSE Express only. For information on these commands, see "Using the Internal AAA Server (WLSE Express Only)."
0
Shows the hardware type.
15
Enables remote authentication of WLSE users.
15
Backs up WLSE database configuration.
15
Sets backup file location for all backup and restore operations.
15
Enables or disables Cisco Discovery Protocol (CDP).
0
Clears terminal settings for the shell.
clearbackuphosts
15
Clears the stored key for using SCP for backups.
15
Purges log files from /var partition.
15
Sets system date and time.
debug
15
Enables debugging mode for CLI commands.
15
Displays current storage usage.
diagnostic-info
15
Gathers diagnostic information.
15
Displays TCP/IP packet content and dumps packet content to a file.
dumptech
15
For diagnostics.
151
Erases configuration in flash memory and reloads the WLSE.
0
Logs user out.
15
Implements port filtering.
N/A2
Checks and repairs file system.
15
Displays IP address of a known domain name.
15
Changes system host name.
15
Controls access via HTTP and HTTPS
15
Imports host files or maps IP addresses to host names.
15
Configures repository for installing software updates and installs software updates.
15
Configures Ethernet interfaces.
15
Defines default domain name.
15
Specifies address of name servers.
15
Lists all current backups at the configured site.
15
Debugs and tests email settings.
15
Lists size of or deletes mail log, send queue, or user queue.
15
Forwards email to specified server.
15
Generates Certificate Signed Request (CSR) for HTTPS.
15
Translates device name to IP address or IP address to device name.
15
Allows system clock to be synchronized by a time server.
0
Sends ICMP echo_request packets for diagnosing basic network connectivity.
15
Shows running processes
15
Turns redundancy on or off, performs software upgrade on redundant cluster.
15
Reinitializes database.
151
Reboots WLSE.
15
Manages local repository for installing software updates.
15
Restores backed up configuration from the configured location.
15
Adds a route.
15
Manages WLSE services.
setup
15
Configure network parameters of WLSE Express
15
Displays type of authentication used for secure CLI access.
15
Displays type of authentication used for secure HTTP access.
15
Displays current backup/restore location.
show backuplog
15
Displays contents of backup log.
15
Displays messages logged during last system boot.
15
Displays nearest neighbor on the network.
15
Displays Cisco Discovery Protocol (CDP) configuration.
show clock
15
Displays current UTC date and time.
15
Displays configuration.
15
Displays daemons log.
15
Displays daemon manager log.
15
Displays domain name
15
Displays host file.
15
Shows HTTP and HTTP access control information.
15
Displays imported host files.
15
Displays software updates and images available on configured repository and logs of installations.
0
Displays information about network interface.
15
Displays IP chains for selected interface.
15
Displays mail log.
15
Displays SMTP mail server.
0
Displays information about processes running on WLSE.
15
Displays information about redundancy status and configuration.
15
Displays status or access log of configured repository.
15
Displays routes currently configured.
15
Displays secure log information.
15
Displays SNMP configuration.
15
Displays type of SSH enabled.
15
Displays syslog information.
15
Displays information for Cisco's Technical Assistance Center.
15
Displays Telnet status.
show time
15
Displays Tomcat log.
0
Displays information about current software installed on WLSE.
15
Displays Web access log.
15
Displays Web error log.
15
Displays Web SSL log.
15
Shuts down WLSE in preparation for powering it off.
15
Configures SNMP agent.
15
Connects to an external host by using SSH.
ssh-server accept
15
Controls SSH access.
15
Enables Secure Shell (SSH) 1, SSH 2, or both SSH 1 and SSH 2.
15
Tars log files.
15
Telnets to an external host.
15
Configures Telnet access.
tftpserver
15
Allows the TFTP server to be used for general purposes (WLSE Express only).
0
Displays route to specified host and identifies faulty gateways.
15
Creates new user account or changes account properties.
15
Changes session timeout for the Web interface.
wslseconfig
Do not use this command. This command is for internal use only.
1 This command is also available in the maintenance image.
2 This command is available only in the maintenance image.
3 This command is also available in the maintenance image.
CLI Command Details
This section provides an alphabetical listing of all CLI commands, along with options, examples, and usage guidelines.
Note
aaa-server
The aaa-server CLI commands are available on the WLSE Express only. For information on these CLI commands, see "Using the Internal AAA Server (WLSE Express Only)."
apptyp
This command shows the type of WLSE hardware.
apptyp
Example
This command shows that the WLSE is an 1130-series platform:
# apptyp1130auth
Use the following command to enable secure authentication through a remote authentication server.
auth { cli | http } { local | tacacs secret server1 [ server2 ] | radius secret server1 [ server2 ] | nt domain pdc [ bdc ] }
Syntax Description
cli
Enables authentication when using the CLI.
http
Enables authentication when using HTTP.
local
Enables local authentication.
tacacs
Enables authentication using TACACS+ (Terminal Access Controller Access Control System).
Note
radius
Enables authentication using RADIUS (Remote Dial-In User Service).
nt
Enables authentication from a Windows NT domain controller.
secret
Shared secret code of server.
server1
IP address or device name of server from which authentication will occur.
server2
IP address or device name of optional secondary server from which authentication could occur
domain
NT domain name.
pdc
Name of the Primary Domain Controller (PDC) and Backup Domain Controller (BDC) for the NT domain.
Use the WINS name (simple hostname), not an IP address or fully qualified domain name.
bdc
Example
This command enables secure remote authentication from a remote server, using TACACS.
auth http tacacs tr5e43 209.165.200.224Related Commands and Other Topics
Using an Authentication Module
backup
Use the following command to back up the WLSE.
backup [ test ]
Syntax Description
Usage Guidelines
The backup command backs up the WLSE configuration to the location specified by the backupconfig command.
Example
A typical backup proceeds as follows:
1.
2.
admin@sj-wlse:backup testtest OKThe backup test command creates a small file called test.tar at the target location under a sub-directory of BACKUP (the default directory created by the backup process). If the backup test does not return OK, the backup command will fail.
3.
admin@sj-wlse:backupbackupfile: sj-wlse_02142004_222801.taraasj-wlse_02142004_222801.infadmin@sj-wlseThe backup process creates a .taraa file and .inf file named for the WLSE hostname and the date and time of the backup.
4.
Related Commands
backupconfig
Use the backupconfig command to specify the location for all backup and restore operations. To delete the backup configuration, use the no backupconfig command.
backupconfig hostname username password { FTP | SCP } [ directory ]
no backupconfig
Syntax Description
Usage Guidelines
If you are using SCP for file transfer, the WLSE stores a shared key for the remote host. If the key changes on the remote host, files cannot be transferred. To clear the key and allow the WLSE to use the new key, use the clearbackuphosts command.
Example
The following command causes all backup and restore operations to use the host with IP address 209.165.200.224, username user1, and password pass:
backupconfig 209.165.200.224 user1 passThe following command clears all backup and restore configuration information:
no backupconfigRelated Commands
cdp
Use the cdp command to configure the Cisco Discovery Protocol (CDP). Allows the WLSE to recognize, and be recognized by, other Cisco devices.
cdp run { [ interface ] | timer seconds | holdtime seconds }
no cdp { run [ interface ] | timer | holdtime }
Syntax Description
Usage Guidelines
After you use the no cdp command, the timer and holdtime values are set to their default values.
Example
This command sets the CDP packet's retransmission time at 10 seconds:
cdp timer 10This command sets the CDP packet's retransmission to its default time.
no cdp timerRelated Commands
clear
This command clears the terminal settings for the shell.
clear
clearbackuphosts
This command clears the stored key when using SCP for backups.
Syntax
clearbackuphosts
Usage Guidelines
When you use SCP to transfer backup files to a remote host, the WLSE stores keys to identify the remote hosts. If the key on a remote host changes, the backup files cannot be transferred. This command clears the stored keys and allows the WLSE to store a new key.
Related Commands
clearvar
This command deletes old log files from the /var partition.
clearvar
Usage Guidelines
Caution
clock set
To set the system date and time, use the following command. See the following usage guidelines before using this command.
clock set { hh:mm:ss month day year }
Syntax Description
Usage Guidelines
When setting the system time, set the time to UTC.
When resetting the time, you must stop and restart WLSE services. Otherwise, scheduled configuration and firmware jobs will not run properly.
To reset the time:
Step 1
services stopStep 2
Step 3
services startIf you configure the system to use Network Time Protocol (NTP), you do not need to set the system clock manually using the clock command.When setting the clock, enter the current time in Coordinated Universal Time (UTC).
For more information about the system time, see the Understanding WLSE Time Displays.
Example
This command sets the date and time:
clock set 16:00:00 dec 11 2001Tue Dec 11 16:00:00 UTC 2001Related Commands
debug
This command enables or disables debugging mode, which displays detailed information when parsing CLI commands.
Syntax
debug
Example
When debug is enabled, the output of the df command is:
admin@wlse1:dfDEBUG:linePtr=---df---DEBUG:execStrPtr=---/opt/appliance/enable/df ---DEBUG:Command /opt/appliance/enable/dfToken: /opt/appliance/enable/dfToken: (null)DEBUG: progArgV /opt/appliance/enable/dfDEBUG: progArgV (null)Filesystem Size Used Avail Use% Mounted on/dev/hda12 298M 111M 187M 38% //dev/hda1 53M 14M 36M 27% /boot/dev/hda7 2.7G 1.3M 2.5G 1% /extra/dev/hda11 596M 33M 564M 6% /home/dev/hda6 2.8G 278M 2.5G 10% /optnone 1.5G 0 1.4G 0% /dev/shm/dev/hda5 1.9G 33M 1.8G 2% /tftpboot/dev/hda9 596M 33M 563M 6% /tmp/dev/hda10 571M 254M 288M 47% /usr/dev/hda13 27G 502M 26G 2% /varDEBUG:Error returned from command: 19DEBUG:arg 0:/opt/appliance/enable/dfDEBUG:/opt/appliance/enable/dfdf
To display the current storage usage on the WLSE, use the following command.
df
Usage Guidelines
This command is intended as a debugging tool for problems with full partitions.
Example
The following command displays the current storage usage on the WLSE:
dfFilesystem Size Used Avail Use% Mounted on/dev/sda12 151M 59M 92M 39% //dev/sda1 49M 2.8M 44M 6% /boot/dev/sda7 985M 24M 911M 3% /extra/dev/sda8 601M 32M 569M 5% /home/dev/sda6 1001M 136M 865M 14% /opt/dev/sda13 9.7G 32M 9.7G 0% /tftpboot/dev/sda9 601M 32M 569M 5% /tmp/dev/sda10 591M 212M 350M 38% /usr/dev/sda5 2.9G 450M 2.5G 15% /varRelated Commands
diagnostic-info
Gathers diagnostic information and places the information in the diagnostic-info.log file.
Syntax Description
diagnostic-info
Usage Guidelines
You can view and download the diagnostic-info.log file by selecting Admin > Appliance > View Log File.
dumptcp
The following command displays TCP/IP network protocol packet content.
dumptcp proto { snmp snmp-trap ip icmp tcp udp | port port }
[ interface eth[ernet]0 ... 5] [ host host [ host2 host2 ]]
[ packets packets ] [ log ]Syntax Description
Usage Guidelines
You can either specify a protocol by name or specify a port; you must specify one or the other. Optionally, you can specify the interface and specify one or two hosts to observe.
The command allows you to continuously observe the packets. Enter Ctrl C to terminate the command.
Examples
The following command listens displays the SNMP packets in the interface:
dumptcp proto snmp interface eth0The following command listens to packets from port 161 only with abc.com as either the source or destination host:
dumptcp port 161 host abc.comThe following command limits the capture to 1000 packets:
dumptcp proto tcp packets 1000Related Commands
dumptech
This command is for diagnostic purposes. It calls the diagnostic-info and tarlog commands and sends the output via SCP (secure copy) to a user on a remote host. The output is saved in the dumptech.tgz file in the specified directory. The dumptech.tgz file can also be downloaded from Admin > Appliance > Status > View Log Files.
This command is useful for getting the files to an FTP server in case the Web interface is not accessible.
dumptech username remote-host remote-directory
Syntax
username
Name of the user on the remote host.
remote-host
Name or IP address of the remote host.
remote-directory
Name of the directory in which to save the log file.
Usage Guidelines and Examples
The correct usage of the dumptech command and the output displayed during the transfer process is shown in the following examples.
In the first case, the user has a valid SCP server setup and can access the file from the specified directory on the FTP server or from the WLSE Web interface.
dumptech userA hostA /users/userAcmd=/opt/appliance/scripts/dumptech.sh userA@hostA:/users/userAThe authenticity of host 'hostA (209.165.200.11)' can't be established.RSA key fingerprint is 8b:b0:41:00:d5:e4:7a:66:d3:b3:c2:47:f9:1b:7c.38.Are you sure you want to continue connecting (yes/no)? yesWarning:Permanently added 'hostA (209.165.200.11)' (RSA) to the list of known hosts.userA@hostA's password: passworddumptech.tgz 100% |***********************| 691 KB 00:01If you do not have an SCP server or do not know whether your FTP server supports SCP, you can enter non-existent parameters, as shown in the following example. In this case, you can access the file from the WLSE Web interface.
dumptech nouser nowhere /nodirectorycmd=/opt/appliance/scripts/dumptech.sh nouser@nowhere:/nodirectoryssh: nowhere: Name or service not knownlost connectionRelated Commands
erase config
To erase the configuration in flash memory and reload the WLSE with its default settings, use the following command.
erase config
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
When you enter the command, you are prompted for confirmation. Enter yes to confirm, or press Enter to accept the default response no.
Caution
When the system reboots, you must reconfigure it. For information, see the relevant Installation and Configuration Guide for your WLSE.
The results of running this command are:
•
•
Example
This command erases the system configuration:
erase configThis will erase your configuration, return device to factory defaults, and reload the deviceDo you want to continue?[no]:yesexit
To log out of the CLI command interface, use the following command:
exit
Syntax Description
This command has no arguments or keywords.
Example
The following command logs you out of the system:
exitfirewall
The following command allows you to configure port access for each interface. The provides flexibility in securing the WLSE. The WLSE can be configured for secure or public network environments. The no form disables the firewall on the interface.
firewall eth[ernet]0-5 { [ public | private ] |
[ icmp | telnet | ssh | snmp | https | 1741 | tftp | REPOSITORY ] }no firewall eth[ernet]0-5
Syntax Description
Usage Guidelines
To configure an Ethernet port for secured public access, use the public option.
To configure an Ethernet port for local access, via a LAN or VLAN, use the private option.
To disable ICMP, Telnet, SSH, SNMP, HTTPS, or to deny connections to the SSL HTTP port or the HTTP 1741 port, use the corresponding option.
Example
The following is an example of a secure Ethernet port configuration:
•
firewall eth0 public ssh 1741•
firewall eth0 privateAn on-site user has full access to the WLSE, but an external user can only access it using a secure connection.
Related commands
gethostbyname
Use the following command to display the IP address of a known hostname.
gethostbyname host
Syntax Description
host Domain name of host.
Example
This command displays the IP address of example.com
gethostbyname example.com209.165.200.224help
This command displays help for all of the CLI commands.
hostname
To change the system host name, use the following command.
hostname name
Syntax Description
New hostname for the WLSE. The name is case-sensitive and may be from 1 to 24 alphanumeric characters (A-Z, a-z, 0-9), the minus sign (-), and the period (.).
Example
The following example changes the hostname to sandbox:
hostname sandboxhttp-server
This command controls:
•
•
http-server accept ip_address [ netmask ] | port { 80 | 1741 }
no http-server accept ip_address [ netmask ]
http-server port { 80 | 1741 }
Syntax Description
Usage Guidelines
You can add one address per command line.
The no form of the command removes HTTP/HTTPS access one address at a time. The no form of the command must exactly match the rule it is deleting.
In a redundant cluster of WLSEs, if you are using an HTTP/HTTPS access list, you must enter a command on each WLSE to allow access by the other WLSE in the cluster.
Example
To accept HTTP and HTTPS connections from the host 192.168.12.12 with the netmask 255.255.255.0:
http-server accept 192.168.12.12 255.255.255.0To use port 80 for HTTP access instead of the default port 1741:
http-server port 80Related Commands
import
Use this command to add a single host for IP address mapping or import a UNIX-style hosts file from a remote FTP server.
import host hostname ipaddress
no import host hostname ipaddress
import hosts ftp-host username password pathname
no import hosts
Syntax Description
Usage Guidelines
To import a single host:
import hosts hostname ipaddress
To import host files from an external, FTP- accessible server:
import hosts ftp-host username password path
To remove an individual IP address from the imported host file:
no import host hostname ipaddress
To remove an imported host file:
no import hosts
Example
The following command imports host files from the FTP- accessible server ftpserver_1. Ftpserver_1 has the username admin, the password pass, and the path /ftpserver_1/hosts.
import hosts ftpserver_1 admin pass /ftpserver_1/hostsThe following command deletes the hosts imported in the example above:
no import hostsRelated Commands
install
Use this interactive command to install software updates on the WLSE.
install configure { URL URL | default | save }
install update package
install list [ all | full | page | updates ]
install current
install help
Caution
Syntax Description
Usage Guidelines
The install command is designed as an interactive command, although you can use it in non-interactive mode. For example, to list the images on the repository in interactive mode:
wlse-1130: installinstall: list allTo exit from interactive mode, type exit.
To list the images on the repository in non-interactive mode:
wlse-1130: install list allExamples
The following command configures the WLSE to use port 9851 on the system with IP address 209.165.200.22, as the repository:
wlse-1130: installInstall URL not configuredinstall: configure URL http://209.165.200.224:9851The following command installs the update package named WLSE-2.0:
install: update WLSE-2.0The following command lists all software updates in the repository:
install: list allName Version Requires Type SummaryWLSE-2.7.1 2.7.1 WLSE-2.7 UPDATE Wireless LAN Solution ...WLSE-2.7u 2.7 WLSE-2.0 UPDATE Wireless LAN Solution ...WLSE-2.5FCS 2.5 WLSE-2.0 UPDATE Wireless LAN Solution ...WLSE-2.0.2 2.0.2 WLSE-2.0 UPDATE Wireless LAN Solution ...WLSE-2.0 2.0 COMPLETE Wireless LAN Solution ...The following command lists all the packages and patches currently installed on the WLSE:
wlse-1130:install currentURL=http://209.165.200.224:9851Initializing install: SuccessName Version Requires Type SummaryWLSE-2.7.1 2.7.1 WLSE-2.7 UPDATE WLSE 2.7.1 UpgradeWLSE-2.7u 2.7 WLSE-2.0 UPDATE WLSE 2.7 UpgradeWLSE-2.5a 2.5a WLSE-2.5FCS UPDATE Wireless Lan Solution ...WLSE-2.5FCS 2.5 WLSE-2.0 UPDATE WLSE 2.5FCS UpgradeWLSE-2.0.2 2.0.2 WLSE-2.0 UPDATE WLSE 2.0.2 UpgradeWLSE-2.0a 2.0a WLSE-2.0 UPDATE Wireless Lan Solution ...WLSE-2.0 2.0 COMPLETE WLSE Solution EngineRelated Commands
interface
To configure an Ethernet interface, use the following command.
interface eth[ernet][0-5] [ up | down ]
interface eth[ernet][0-5] dhcp
interface eth[ernet][0-5] ipaddress netmask [ default-gateway address ]
[ up | down ] [ auto | speed [10 | 100 | 1000] duplex [ half | full ]
[ mtu 46-1500 ]Syntax Description
Usage Guidelines
When you enter the interface command, the interface that you specify is enabled by default. If you want to disable an enabled interface or leave a disabled interface disabled, you must specify the down option.
If the interface is down when you change the IP address or hostname, append up to the command line. If the interface is up, append down to the command line. For example:
interface eth0 209.165.201.8 255.255.255.224 default-gateway 209.165.201.1 upExample
The following command disables the Ethernet 1 interface:
interface eth0 downThe following command sets the Ethernet 0 IP address, netmask, and gateway IP address:
interface eth0 209.165.200.224 255.255.255.224 default-gateway 209.165.201.31 upRelated Commands
ip domain-name
To define a default domain name, use the following command. To remove the default domain name, use the no form of the command.
A default domain name allows the system to resolve any unqualified host names. Any IP hostname that does not contain a domain name will have the configured domain name appended to it. If you are using a DNS server, this appended name is resolved by the DNS server, and then added to the host table.
ip domain-name name
no ip domain-name name
Syntax Description
Example
This command defines the default domain name to be cisco.com:
ip domain-name cisco.comThis command removes the default domain name abc.com:
no ip domain-name abc.comRelated Commands
ip name-server
To specify the addresses of up to three name servers for name and address resolution, use the following command. To remove a name server, use the no form of the command.
ip name-server ip-address
no ip name-server ip-address
Syntax Description
Usage Guidelines
Use the ip name-server command to point the WLSE to a specific DNS server. You may configure up to three servers. If you attempt to configure a fourth name server, the following error message appears:
# Name-server table is full.The WLSE must be able to contact a functional DNS server to operate correctly. If it does not, in most cases it will not correctly process requests from management applications that use it. If the system cannot obtain DNS services from the network, Telnet connections to the system will fail or Telnet interaction with the system will become extremely slow.
Example
This command assigns a name server for the system to use for name-to-address resolution:
ip name-server 209.165.200.224This command disables the name server; the system will not use it for name-to-address resolution:
no ip name-server 209.165.200.224Related Commands
listbackup
Use the following command to list all available backups at the defined location. Backup names are created by using the WLSE hostname and the backup date and time.
listbackup
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
You must first define the backup location by using the backupconfig command.
Example
The following command lists all current backups at the configured site:
listbackupex1_06042001_170640: Hostname: ex1 Date: 06042001 time: 1700ex1_06052001_124543: Hostname: ex1 Date: 06052001 time: 1243ex1_06052001_155148: Hostname: ex1 Date: 06052001 time: 1558ex1_06202001_145704: Hostname: ex1 Date: 06202001 time: 1454Related Commands
Use this command to send and receive mail and to debug and test email settings.
mail [ to user@host [ debug ] ]
Syntax Description
To read email, enter the command with no arguments. To send email, enter the command with the following arguments:
to
Sends email to the expressed recipient.
user@host
Recipient of the email.
debug
Debug email problems.
Usage Guidelines
When sending a message, enter a period on a line by itself to terminate the message body.
When listing the mail queue, enter exit to return to the CLI command prompt.
Example
The following command sends an email message:
mail to operator@sj_wlseSubject: testThis is a test mail.Cc:
Note
The following command debugs email problems:
admin@magellan.com:mail to operator@cisco.com DEBUGSubject: testingtesting.Cc:operator@cisco.com... Connecting to inbound.cisco.com. via esmtp...220 inbound.cisco.com ESMTP Sendmail 8.12.11/8.11.2; Mon, 19 Jul 2004 13:24:00 -0700 (PDT)>>> EHLO magellan.cisco.com250-inbound.cisco.com Hellomagellan.cisco.com [192.168.65.120], pleased to meet you250-ENHANCEDSTATUSCODES250-PIPELINING250-EXPN250-VERB250-8BITMIME250-SIZE250-DSN250-ETRN250-DELIVERBY250 HELP>>> MAIL From:<admin@magellan.cisco.com> SIZE=45250 2.1.0 <admin@magellan.cisco.com>... Sender ok>>> RCPT To:<operator@cisco.com>250 2.1.5 <operator@cisco.com>... Recipient ok>>> DATA354 Enter mail, end with "." on a line by itself>>> .250 2.0.0 i6JKO0im006330 Message accepted for deliveryoperator@cisco.com... Sent (i6JKO0im006330 Message accepted for delivery)Closing connection to inbound.cisco.com.>>> QUIT221 2.0.0 inbound.cisco.com closing connectionadmin@magellan.com:Related Commands
mailcntrl
This command displays the size of the email log, send queue, or user queue or deletes the email log, send queues, or user queues.
mailcntrl list { logsize | sendqueusize | userqueuesize }
mailcntrl clear { log | sendqueue | userqueue }
Syntax Description
Example
The following command clears the WLSE's email log.
mailcntrl clear logRelated Commands
mailroute
To forward email to a specified SMTP server, use the following command to specify the server. If no server is specified, the WLSE will use DNS to determine the correct email server in your local domain. To stop forwarding mail to the SMTP server, use the no mailroute command to remove the defined mail server information.
mailroute { hostname | ip-address }
no mailroute
Syntax Description
Example
The following command forwards email to a server with the hostname mailserver:
mailroute mailserverRelated Commands
mkcert
Use this command to generate or regenerate the SSL self-signed certificate for enabling secure socket layer protocol (SSL). SSL provides a secure HTTPS connection between Web clients and the WLSE.
When you initially set up the WLSE, a private key, a self-signed certificate, and a certificate signing request (CSR) are generated.
This command enables SSL.
The unsigned certificate expires in one year; use the procedure described below to obtain and install a permanent certificate from a certificate authority.
Note
Syntax Description
mkcert
Usage Guidelines
When you run mkcert, the following prompts are displayed. For some fields, there is a default name. If you enter a period (.), the field will be left blank.
After generating the certificate, view it in the Web interface (Administration > Security > SSL (HTTPS). Copy everything between the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines and send it to a certificate authority (such as Verisign). Use the authority's procedure for sending the certificate.
When you receive the signed certificate:
Step 1
Step 2
Step 3
Step 4
Step 5
services stopservices start
nslookup
To translate a device name to its IP address or an IP address to its device name, use the following command.
nslookup { dns-name | ip-address }
Syntax Description
Example
The following command translates the device name hostname to its IP address:
nslookup hostnameServer: dns.ex1.comAddress: 209.165.200.224Name: ex1.comAddress: 209.165.201.0ntp server
To configure the Network Time Protocol (NTP) and allow the system clock to be synchronized by a time server, use the following command. To disable this function, use the no form of this command.
ntp server ip-address
no ntp server ip-address
Syntax Description
Usage Guidelines
Use the ntp server command to synchronize the system clock with the specified NTP server. If you configure multiple NTP servers, the system will synchronize with the first working NTP server it finds. There is no limit to the number of NTP servers that you can configure.
The ntp server command validates the NTP server that you specify. The possible results are:
•
# 19 Jan 00:43:48 ntpdate[1437]: step time server 209.165.200.224 offset 999.257304•
# 19 Jan 00:43:40 ntpdate[1431]: no server suitable for synchronization foundIn this case, remove the NTP server by using the no form of the command, then configure a valid NTP server.
•
# 19 Jan 00:43:58 ntpdate[1265]: Can't adjust the time of day: Invalid argument.In this case, the ntp server command is entered into the system configuration, but NTP will not function. Follow these steps to remove the command and configure NTP correctly:
Step 1
no ntp server ip-addresswhere ip-address is the IP address of the NTP server.
Step 2
Step 3
ntp server ip-address
Example
This command configures the system to use an NTP server:
ntp server 209.165.201.0This command configures the system to stop using the NTP server:
no ntp server 209.165.201.0Related Commands
ping
To send ICMP echo_request packets for diagnosing basic network connectivity, use the following command.
ping [ -n ] [ -c count ] [ -i wait ] [ -s packetsize ] { hostname | ip-address }
Syntax Description
Usage Guidelines
To use this command with the hostname argument, DNS must be configured on the system.
To force the time-out of a nonresponsive host or to eliminate a loop cycle, press Ctrl-c.
Example
This command sends 4 echo packets to the host otherhost with a wait time of 5 seconds between each packet:
ping -c 4 -i 5 209.165.200.224PING 209.165.200.224 (209.165.200.224) from 209.165.201.0 : 56(84) bytes of data.64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=0 ttl=246 time=16.3 ms64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=1 ttl=246 time=2.0 ms64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=2 ttl=246 time=2.1 ms64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=3 ttl=246 time=2.1 msRelated Commands
ps
This command shows running processes.
ps [ help ] [ info ] [ options ]
Syntax Description
This is a standard Linux command.
help
Displays the Linux manual page.
info
Preprends addiitonal information about /proc and socket status.
options
Use Unix98, BSD, and GNU options that are displayed when use the help option.
Usage Guidelines
The output of the ps command is sent to the procps_last.log file. You can view or download this file from the Web interface: Admin > Status > View Log File.
redundancy
To turn redundancy on or off, use the following command:
redundancy { on | off }
redundancy status
redundancy config
redundancy upgrade package_name
Syntax Description
Examples
This command upgrades a WLSE from an upgrade image that is in the local repository:
redundancy upgrade WLSE-2.11uUsage Guidelines
When you run redundancy on, the current redundancy settings are validated. Error messages are displayed if any parameters are not configured, and errors must be corrected before you can turn on redundancy mode. To correct validation errors, use the Web interface. For more information, see Managing WLSE Redundancy.
The validation failure messages are:
Notification email is not specifiedAdmin Password not setFailed to decrypt admin passwordPrimary IP not specifiedSecondary IP not specifiedSync interval not specified or invalidCheck interval not specified or invalidInvalid HTTP port specified. Must be 1741 or 80HTTP port not setVirtual IP not specifiedThe upgrade option will be used in the next release to upgrade a redundant cluster after downloading the image to the local WLSE repository via the Software Image Management (SWIM) option of CiscoWorks RME. This command looks for the specified software image in the local repository on either the active or standby WLSE. It is preferable to run the command from the active node. By using this method of upgrading, downtime is minimized because one node is running while the other is being upgraded.
Related commands
reinitdb
To reinitialize the database, use the following command. This command erases all information in the database, stops and restarts system services, and reboots the WLSE.
reinitdb
Note
Usage Guidelines
After the database is reinitialized, the WLSE reboots.
Syntax Description
This command has no arguments or keywords.
Example
This command reinitializes the database:
reinitdbRelated Command
reload
To reboot the WLSE, use the following command.
reload [ force ]
Syntax Description
The force option causes a reload without asking for confirmation.
Usage Guidelines
You will be prompted to verify the reload. Enter yes to confirm or no to cancel the reload.
Caution
Example
This command reboots the system:
reloadRelated Commands
repository
This command manages the local repository, from which the WLSE downloads its software updates. You can add, delete, or list software packages in the repository; specify the location from the local repository downloads images, and control the status of the repository.
repository add package [ rate Kbytes/second ]
repository delete [ package | all ]
repository list { local | remote } [ detail ] [ page ]
repository source URL
repository server [ stop | start | status ]
Syntax Description
add package
Transfers a software update image named package from a remote server to the local repository.
rate
Rate of transfer of the image in Kbytes/second.
delete
Deletes a package from local repository.
all
Deletes all packages from local repository.
list
List software images and packages in configured local or remote repository.
local
Lists software updates and packages in local repository.
remote
Lists software updates and packages in remote repository.
detail
Includes details of software updates and images displayed.
page
Displays first page of command output. To display more:
•
•
Press q or Q to exit paged output and return to the command prompt.
source URL
Configure WLSE to serve as repository and to download software updates and images from external server whose IP address is URL (restricted to the FTP protocol). This command only configures the WLSE to be a repository. To configure the WLSE to install software updates and images from this repository, see install.
server
Start, stop, or display status of the WLSE's local repository.
stop
Stop local repository.
start
Start local repository.
status
Display status of local repository.
Usage Guidelines
You will be prompted to enter a username and password if they are needed to access the remote server.
Examples
The following command transfers the update EX_2.0 from an update server to the local repository:
repository add ex_2.0The following command deletes the update EX_2.0 from the local repository:
repository delete EX_2.0The following command lists the software updates and images available on the configured local repository, with details and one page at a time:
repository list local detail pageThe following command configures the WLSE to be a repository, and to download software updates and images from http:// 209.165.200.224:
repository source ftp://209.165.200.224The following command stops the local repository:
repository server stopRelated Commands
restore
Use the following command to restore a backed up configuration of the WLSE.
restore -n backup_name
Syntax Description
Usage Guidelines
The restore command shuts down services on the WLSE, restores the data, and then reboots the WLSE.
Backups are restored from the location that you specified. To specify the backup location, use the backupconfig command.
You can restore configuration data from one WLSE to another; for example, if you want to replace one WLSE with another. For more information see the backup procedures in Backing Up and Restoring Data.
Example
The following command restores the backup called backup1 from the configured backup location:
restore backup1Releated Commands
route
To add a route through a gateway device, use the route command. To delete a route, use the no version of the command.
route network-address netmask gateway-address
no route network-address netmask gateway-address
Syntax Description
network-address
IP address of the network.
netmask
Value of the network netmask.
gateway-address
IP address of router or gateway.
Example
The following command adds a route:
route 209.165.201.0 255.255.255.224 209.165.200.224The following command deletes the above route:
no route 209.165.201.0 255.255.255.224 209.165.200.224services
To list, start, or stop the management services running on the system, use the following command.
services { status | start | stop }
Syntax Description
status
Displays the management services status.
start
Starts the management services.
stop
Stops the management services.
Usage Guidelines
Management services are the software installed on the system by network management applications. Use this command to stop and restart the management services if the system is not responding correctly to a management application. This should cause the services to reset and function properly again.
Example
This command stops management services:
services stopThis command starts management services:
services startThis command shows services status:
# services statusProcess= WirelessSvcMgrState = Program started - No mgt msgs receivedPid = 1567RC = 0Signo = 0Start = 09/28/04 21:56:11Stop = Not applicableCore = Not applicableInfo = Application started by administrator request.Process= WLSEjobvmState = Program started - No mgt msgs receivedPid = 1573RC = 0Signo = 0Start = 09/28/04 21:56:11Stop = Not applicableCore = Not applicableInfo = Application started by administrator request....Related Commands
setup
Use this command to configure the WLSE Express if you are not using DHCP.
setup
Usage Guidelines
For details on using the setup command, see the WLSE Installation and Configuration Guides on Cisco.com.
show auth-cli
Use this command to display the type of authentication used for secure CLI access.
show auth-cli
Syntax Description
This command has no arguments or keywords.
Example
This command and response shows that local authentication is being used for the CLI:
show auth-clilocalRelated Commands
show auth-http
Use this command to display the type of authentication used for secure HTTP access.
show auth-http
Syntax Description
This command has no arguments or keywords.
Example
This command and response shows that the WLSE's local authentication is being used for the CLI:
show auth-httpRelated Commands
show backupconfig
The following command displays the current backup and restore configuration.
show backupconfig
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
If the backup location is not set, the host and username fields display NONE.
Example
The following command displays the current backup and restore configuration:
show backupconfigHostname: 209.165.201.0Username: user1Related Commands
show backuplog
The following command displays the contents of the backup log.
show backuplog
show bootlog
This command displays the messages logged during the last system boot.
show bootlog [ page ]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
This command displays the messages logged during the last system boot:
show bootlog pageLinux/UID32 version 2.2.16-13bipsec.uid32 (gcc version egcs1Console: colour VGA+ 80x25Calibrating delay loop... 1133.77 BogoMIPSstart low memory: 0xc0001000 i386_endbase: 0xc009f000addresses range:: 0xc0f00000 0xc1000000start memory: c04f8000 end_memory: d0000000Memory: 257688k/262144k available (988k kernel code, 416k reserved, 2992k data,)Dentry hash table entries: 262144 (order 9, 2048k)Buffer cache hash table entries: 262144 (order 8, 1024k)Page cache hash table entries: 65536 (order 6, 256k)vmdump: setting dump_execute() as dump_function_ptr ...VFS: Diskquotas version dquot_6.4.0 initializedCPU: Intel Pentium III (Coppermine) stepping 06Checking 386/387 coupling... OK, FPU using exception 16 error reporting.Checking 'hlt' instruction... OK.POSIX conformance testing by UNIFIXmtrr: v1.35a (19990819) Richard Gooch (rgooch@atnf.csiro.au):Related Commands
show cdp neighbor
Use this command to display the nearest neighbor on the network.
show cdp neighbor
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
CDP neighbor information is usually broadcasted at 3- to 5-minute intervals, so there may be a delay in displaying neighbor information.
Example
This command shows the nearest neighbor on the network.
show cdp neighborcdp neighbor device: Switchdevice type: cisco WS-C2924-XLport: FastEthernet0/12address: 209.165.201.0show cdp run
Use this command to display the Cisco Discovery Protocol (CDP) configuration.
show cdp run
Syntax Description
This command has no arguments or keywords.
Example
The following command displays the CDP configuration:
show cdp runCDP protocol is enabled ...broadcasting interval is every 60 seconds.time-to-live of cdp packets is 180 seconds.CDP is enabled on port eth0.Related Commands
show clock
To display the system date and time in Coordinated Universal Time (UTC), use the following command.
show clock
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
For more information about the system time, see Understanding WLSE Time Displays.
Example
This command displays the system date and time:
show clock12:43:47 Jun 20 2001Related Commands
show config
To display network configuration and user information, use the following command. Only the users who have CLI access are shown. Users with Web interface access only are not listed.
show config
Syntax Description
This command has no arguments or keywords.
Example
his command displays the system configuration, including any users who have CLI access:
show confighostname ex1interface ethernet0 209.165.201.0 255.255.255.224 default-gateway 209.165.202.128interface ethernet1 upip domain-name cisco.comip name-server 209.165.202.158ntp server 209.165.202.108username admin epassword ************* privilege 15username jpx111 epassword ************* privilege 15firewall ethernet0 NONEsnmp-server configuration:RW community string: privateRO community string: publicsysLocation: your site informationsysContact: your contact informationtelnet disabledCLI auth: localHTTP auth: localshow daemonslog
To display the daemons log, use the following command.
show daemonslog [ page | include matchstring1 [ matchstring2 ]]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the daemons log, one page at a time:
show daemonslog page[dmgrDbg] getenv(PX_DBG)=NULL[dmgrDbg] getenv(PX_MY_DEBUG)=NULL[dmgrDbg] getenv(PX_MY_TRACE)=NULL[dmgrDbg] getenv(PX_DBG_LEVEL)=NULL[dmgrDbg][Tue Sep 28 21:55:30 2004]##### INFO ##### re-evaluate DbgLevel=0x0++>>it(1) = 80782f0 <WirelessSvcMgr>++>>it(1) = 8077f10 <WLSEjobvm>++>>it(1) = 8077e00 <WLSEFaults>++>>it(1) = 8077c00 <WebServer>++>>it(1) = 8077d00 <Tomcat>++>>it(1) = 8077ab0 <Snmptrapd>++>>it(1) = 8077960 <ExcepReporter>++>>it(1) = 8077850 <CDPbrdcast>++>>it(1) = 80776e0 <PerfMon>:show dmgtdlog
To display the daemon manager log, use the following command.
show dmgtdlog [ page | include matchstring1 [ matchstring2 ]]
Syntax Description
Usage Guidelines
When uisng paged output:
•
•
•
Example
The following command displays the daemon manager log, one page at a time:
show dmgtdlog page/var/adm/CSCOets/log/dmgtd.logDec 20 13:42:56 ex dmgt[712]: #3001:TYPE=INFO:Using port: tcp/42340.Dec 20 13:42:56 ex dmgt[714]: #3007:TYPE=INFO:Started application(HSECollector) "/bin/nice -n 19 /opt/CSCOets/bin/collector" pid=715.Dec 20 13:42:56 ex dmgt[714]: #3007:TYPE=INFO:Started application(HSEA:show domain-name
To display the WLSE's current domain name, use the following command. This command uses DNS to perform a reverse DNS lookup.
show domain-name
Syntax Description
This command has no arguments or keywords.
Example
This command displays the system domain name:
show domain-namecisco.comRelated Commands
show hosts
This command displays the WLSE's host file.
show hosts [ page ]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the host file one page at a time:
show hosts page127.0.0.1 localhost localhost.localdomain192.19.28.169 wlse-2.cisco.com(END)Related Commands
show http-server
This command displays HTTP and HTTPS access control information.
show http-server
Syntax Description
This command has no arguments or keywords.
Related Commands
show import hosts
Displays the imported host file.
show import hosts
Syntax Description
Example
This command displays the imported host file that was imported from the host ftpserver_1:
show import ftpserver_1Related Commands
show install
Displays the names of software updates available on the configured repository or installation log files.
show install
show install logs [ detail ] [ page ]
Syntax Description
detail
Displays names and descriptions of software updates and images on the configured repository.
page
Displays first page of command output.
Usage Guidelines
After running the show install logs command, you must press q to exit to the CLI prompt.
When using paged output:
•
•
•
Example
The following command displays the names of the software updates installed on the WLSE:
admin@wlse:show install logs page2NAME=WLSE-2.11(END)The following command displays names and descriptions of software installed on the WLSE:
admin@wlse:show install logs detail page3+++++++++++++++++++++++++++++++++++++++++++++++INFO: System related content of "hwdata"===============================================/usr/X11R6/lib/X11/Cards/usr/share/doc/hwdata-0.14.1/usr/share/doc/hwdata-0.14.1/COPYING/usr/share/doc/hwdata-0.14.1/LICENSE/usr/share/hwdata/usr/share/hwdata/CardMonitorCombos/usr/share/hwdata/Cards/usr/share/hwdata/MonitorsDB/usr/share/hwdata/pci.ids/usr/share/hwdata/pcitable:Related Commands
show interfaces
To display information about the system network interfaces, use the following command.
show interfaces
Syntax Description
This command has no arguments or keywords.
Example
This command displays information about system network interfaces:
show interfaceseth0 Link encap:Ethernet HWaddr 00:02:B3:35:FD:CCinet addr:209.165.200.224 Bcast:209.165.201.0 Mask:255.255.255.224UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1RX packets:80309 errors:0 dropped:0 overruns:0 frame:0TX packets:22451 errors:0 dropped:0 overruns:0 carrier:0collisions:0 txqueuelen:100Interrupt:5 Base address:0xef00 Memory:d0c7e000-d0c7ec40RX bytes:116826221 (111.4 Mb) TX bytes:59923827 (57.1 Mb)Interrupt:5 Base address:0xef00 Memory:febfb000-febfb038Speed: 100Mb/sDuplex: Fulllo Link encap:Local Loopbackinet addr:127.0.0.1 Mask:255.0.0.0UP LOOPBACK RUNNING MTU:16436 Metric:1RX packets:28836 errors:0 dropped:0 overruns:0 frame:0TX packets:28836 errors:0 dropped:0 overruns:0 carrier:0collisions:0 txqueuelen:0RX bytes:13419821 (12.7 Mb) TX bytes:13419821 (12.7 Mb)Related Commands
show ipchains
This command displays the IP chains for the selected interface.
show ipchains eth[ 0-5 ]
Syntax Description
eth[ 0-5 ]
Interface to be displayed. Acceptable values are eth0-eth5. On the WLSE 1130, eth0 corresponds to port labeled A on the back panel, and eth1 corresponds to port labeled B.
Example
The following command displays the IP chains for the ethernet 0 interface:
show ipchains eth0Chain ineth0 (1 references):target prot opt source destination portsACCEPT tcp -y--l- anywhere ex.help any -> teltACCEPT tcp ------ anywhere ex.help any -> teltACCEPT tcp ------ anywhere ex.help any -> 3345ACCEPT tcp -y--l- anywhere ex.help any -> sshRelated Commands
show maillog
To display the mail log, use the following command.
show maillog [ page | include matchstring1 [ matchstring2 ]]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the collector log, one page at a time:
show maillog page/var/log/maillogDec 21 04:02:06 ex sendmail[11643]: EAA11643: from=root, size=307, class=0, pri=30307, nrcpts=1, msgid=<200112210402.EAA11643@ex.help>, relay=root@localhostDec 21 04:02:06 ex sendmail[11660]: EAA11643: SYSERR(root): Cannot exec /usr/bin/procmail: No such file or directoryDec 21 04:02:06 ex sendmail[11643]: EAA11643: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=local, stat=Operating system error:Related Commands
show mailroute
Use the following command to show the current mail route.
show mailroute
Syntax Description
This command has no arguments or keywords.
Related Commands
show proc[ess]
To display active process statistics, use the following command.
show proc [ page ]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the active process statistics one page at a time:
show proc pagePID ELAPSED SZ STARTED TTY COMMAND1 22:29:10 277 Thu Dec 20 13:42:29 2001 ? init2 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kflushd3 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kupdate4 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kpiod5 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kswapd6 22:29:03 0 Thu Dec 20 13:42:36 2001 ? kreiserfsd85 22:29:00 0 Thu Dec 20 13:42:39 2001 ? kreiserfsd86 22:29:00 0 Thu Dec 20 13:42:39 2001 ? kreiserfsd87 22:28:59 0 Thu Dec 20 13:42:40 2001 ? kreiserfsd88 22:28:59 0 Thu Dec 20 13:42:40 2001 ? kreiserfsd89 22:28:59 0 Thu Dec 20 13:42:40 2001 ? kreiserfsd208 22:28:57 290 Thu Dec 20 13:42:42 2001 ? watchdog322 22:28:51 342 Thu Dec 20 13:42:48 2001 ? idled510 22:28:51 290 Thu Dec 20 13:42:48 2001 ? syslogd519 22:28:50 361 Thu Dec 20 13:42:49 2001 ? klogd637 22:28:48 327 Thu Dec 20 13:42:51 2001 ? crond651 22:28:48 286 Thu Dec 20 13:42:51 2001 ? inetd17076 18:23 364 Fri Dec 21 11:53:16 2001 ? \_ in.telnetd17077 18:23 575 Fri Dec 21 11:53:16 2001 0 | \_ login:show redundancy
Use this command to display the current redundancy configuration or status.
show redundancy { config | status }
Usage Guidelines
Although redundancy settings can be displayed with this CLI command, redundancy parameters can only be configured in the Web interface. After you configure redundancy in the Web interface, you can turn it on or off with the redundancy command.
Syntax Description
config
Shows settings of redundancy parameters and whether the WLSE is in redundancy mode.
status
Shows whether WLSE is in redundancy mode.
Example
This command shows an example of the current settings of the redundancy parameters:
show redundancy configRedundancy Status: Not ConfiguredHTTP Port: 1741Notification Email:Virtual IP eth0:This Node IP: 172.20.114.31Other Node IP:Minutes between sync: 30Seconds between check of other node: 60The following command output shows that the WLSE is not in redundancy mode:
show redundancy statusnot configuredRelated Commands
show repository
Use this command to display the status or access log of a configured repository.
show repository { status | access-log } [ page ]
Syntax Description
status
Displays the status of the local repository
access-log
Displays the access-log of the local repository
page
Displays first page of command output.
Usage Guidelines
When using paged output:
•
•
•
Example
This command displays the status of the configured repository:
show repository statusRepository Source: 171.69.212.146:9851 repository is running.Related Commands
show route
To display the routes that are currently configured, use the following command.
show route
Syntax Description
This command has no arguments or keywords.
Example
This command displays the currently configured routes:
show routeDestination Gateway Genmask Flags Metric Ref Use Iface209.165.200.224 0.0.0.0 255.255.255.224 UH 0 0 0 eth0209.165.200.225 0.0.0.0 255.255.255.224 U 0 0 0 eth0209.165.200.254 0.0.0.0 255.255.255.224 U 0 0 0 lo209.165.202.128 0.0.0.0 255.255.255.224 UG 0 0 0 eth0Related Commands
show securitylog
To display security log information, use the following command.
show securitylog [ page | include matchstring1 [ matchstring2 ]]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the security log, one page at a time:
show securitylog page/var/log/secureDec 20 13:45:23 ex in.tftpd[1381]: connect from 209.165.200.224Dec 20 13:45:27 ex in.tftpd[1383]: connect from 209.165.200.224Dec 20 13:45:31 ex in.tftpd[1385]: connect from 209.165.200.224Dec 20 13:45:35 ex in.tftpd[1387]: connect from 209.165.200.224Dec 20 13:45:39 ex in.tftpd[1389]: connect from 209.165.200.224Dec 20 13:45:44 ex in.tftpd[1391]: connect from 209.165.200.224Dec 20 13:45:48 ex in.tftpd[1393]: connect from 209.165.200.224Dec 20 13:45:52 ex in.tftpd[1395]: connect from 209.165.200.224Dec 20 13:45:56 ex in.tftpd[1397]: connect from 209.165.200.224Dec 20 13:46:00 ex in.tftpd[1399]: connect from 209.165.200.224Dec 20 13:46:04 ex in.tftpd[1412]: connect from 209.165.200.224Dec 20 13:46:27 ex in.tftpd[1424]: connect from 209.165.200.224Dec 20 13:46:31 ex in.tftpd[1426]: connect from 209.165.200.224Dec 20 13:46:35 ex in.tftpd[1428]: connect from 209.165.200.224:show snmp-server
The following command displays the SNMP configuration:
show snmp-server
Syntax Description
This command has no arguments or keywords.
Example
The following command displays the WLSE's SNMP configuration:
show snmp-serverRW community string: privateRO community string: publicsysLocation: your site informationsysContact: your contact informationtrap-forwarding is disabledRelated Commands
show ssh-server
This command displays SSH access control information.
show ssh-server
Syntax Description
This command has no arguments or keywords.
Related Commands
show ssh-version
The following command displays the type of SSH that is enabled:
show ssh-version
Syntax Description
This command has no arguments or keywords.
Example
This command displays the type of SSH that is enabled:
show ssh-versionSSH1, SSH2Related Commands
show syslog
To display syslog information, use the following command.
show syslog [ page ] [ include matchstring1 [ matchstring2 ]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
To filter command output to include only the records that contain a specified string(s) of characters, use the include option with one or two character strings to search for.
If you include two strings, the command outputs only those records that contain both character strings.
Example
This command displays syslog information:
show syslogJun 20 16:04:23 ex syslogd 1.3-3: restart.Jun 20 16:04:23 ex syslog: syslogd startup succeededJun 20 16:04:23 ex kernel: klogd 1.3-3, log source = /proc/kmsg start.Jun 20 16:04:23 ex kernel: Inspecting /boot/System.map-2.2.16-13bipse2Jun 20 16:04:23 ex syslog: klogd startup succeeded:Related Command
show tech
Use the following command to display information necessary for Cisco's Technical Assistance Center to assist you:
show tech [ page ]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
show tech page/bin/cat: /var/log/secure: Permission deniedCopyright (c) 1999-2000 by Cisco Systems, Inc.Build Version (166) Mon Jun 11 16:56:23 PDT 2001Linux/UID32 version 2.2.16-13bipsec.uid32 (gcc version egcs1Uptime: 0 days 18 hours 35 mins2 Ethernet interfaceshostname exinterface ethernet0 209.165.200.224 255.255.255.224 default-gateway 209.165.202.128ip name-server 209.165.201.0username admin epassword ************* privilege 15eth0 Link encap:Ethernet HWaddr 00:02:B3:35:FD:CCinet addr:209.165.200.224 Bcast:209.165.201.31 Mask:255.255.255.224:show telnetenable
To display the WLSE's Telnet status, use the following command.
show telnetenable
Syntax Description
This command has no arguments or keywords.
Example
The following command shows whether Telnet is enabled or disabled:
show telnetenabletelnet enable for: ALLRelated Commands
show time
The command displays time zone configuration and NTP server (if any).
show tomcatlog
To display the Tomcat log, use the following command.
show tomcatlog [ page ] [ include matchstring1 [ matchstring2 ]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the tomcat log, one page at a time:
show tomcatlog page/var/adm/CSCOets/log/tomcat.log2001-12-20 01:43:06 - ContextManager: Adding context Ctx( /examples )2001-12-20 01:43:06 - ContextManager: Adding context Ctx( /admin )Starting tomcat. Check logs/tomcat.log for error messages2001-12-20 01:43:06 - ContextManager: Adding context Ctx( )getUIProperties(): unhandled error could be a bad ui.propertiesjava.lang.NullPointerExceptionat java.io.Reader.<init>(Reader.java:68)at java.io.InputStreamReader.<init>(InputStreamReader.java:96):show version
To display information about the current software, hardware type, and some details about the hardware, use the following command.
show version
Syntax Description
This command has no arguments or keywords.
Example
The command displays information about software and hardware and limits on the number of access points that can be managed; for example:
show version(C) Copyright 2005 by Cisco Systems Inc.WLSE 1030 Release 2.11FCS Mon Mar 7 12:59:06 UTC 2005Device Limit = 100Build Version (66) Tue Mar 8 06:47:27 UTC 2005Uptime: 0 days 1 hour 34 minsLinux version 2.4.28-5_WLSE (root@app20.cisco.com) (gcc version 2.96 20000731 (Red Hat Linux 7.3 2.96-113)) #1 Mon Jan 31 16:16:56 PST 20051030VIA CPU at 1000.058 Mhz with 1025592K bytes of memory.1 Ethernet interfaces18.464Gb on diskshow webaccesslog
To display the Web access log, use the following command.
show webaccesslog [ page ] [ include matchstring1 [ matchstring2 ]
Syntax Description
Usage Guidelines
To display more:
•
•
•
Example
The following command displays the Web access log, one page at a time:
show webaccesslog page/var/adm/CSCOets/log/access_log209.165.200.224 - - [21/Dec/2001:10:38:54 +0000] "GET / HTTP/1.0" 302 276 "-" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"209.165.200.224 - - [21/Dec/2001:10:38:54 +0000] "GET /perl/login-form.cgi HTTP/1.0" 200 2268 "-" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"209.165.200.224 - - [21/Dec/2001:10:38:55 +0000] "GET /icons/hse.gif HTTP/1.0" 200 5554 "http://209.165.201.0:1741/perl/login-form.cgi" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"209.165.200.224 - - [21/Dec/2001:10:38:55 +0000] "GET /icons/left_top.gif HTTP/1.0" 200 324 "http://209.165.201.0:1741/perl/login-form.cgi" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)":show weberrorlog
To display the Web error log, use the following command.
show weberrorlog [ page ] [ include matchstring1 [ matchstring2 ]]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the Web error log, one page at a time:
show weberrorlog page/var/adm/CSCOets/log/error_log[Thu Dec 20 13:43:00 2001] [error] (22)Invalid argument: <Perl>: Invalid command 'secret', perhaps mis-spelled or defined by a module not included in the server configuration[Thu Dec 20 13:43:00 2001] [error] (22)Invalid argument: <Perl>: Invalid command 'line', perhaps mis-spelled or defined by a module not included in the server configuration[Thu Dec 20 13:43:00 2001] [error] (22)Invalid argument: <Perl>::show websslaccesslog
To display the Web SSL log, use the following command.
show websslaccesslog [ page | include matchstring1 [ matchstring2 ]]
Syntax Description
Usage Guidelines
When using paged output:
•
•
•
Example
The following command displays the Web SSL log, one page at a time:
show websslaccesslog pageshutdown
To shut down the system in preparation for powering it off, use the following command.
shutdown
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
All processes running on the WLSE will stop, and the WLSE will not respond until you power it off and back on.
You are prompted to verify the shutdown. Enter yes to continue, or no to cancel the shutdown.
Caution
Example
This command shuts down the system:
shutdownRelated Commands
snmp-server
To configure the simple network management protocol (SNMP) community string, contact information, and location information, use the following command. Use the no forms to delete the community string, location information, or contact information.
snmp-server { community community-name [ RO | RW ] |
location sysLocation-info | contact sysContact-info }no snmp-server community community-name
no snmp-server contact
no snmp-server location
Syntax Description
Example
This command sets the SNMP contact string:
snmp-server contact Dial System Operator at Beeper # 27345Related Commands
ssh host
To use SSH to connect to an external host, use the following command.
ssh host [ -l username ]
Syntax Description
Example
Enter the following command to connect to an external host using SSH:
ssh 209.165.200.224ssh-server accept
This command controls access to the WLSE via SSH. The default behavior is to accept all connections. If you specify an IP address, connections will be accepted from matching addresses only. Use the no form to remove SSH access control for the specified IP address.
ssh-server accept ip_address [ netmask ]
no ssh-server accept ip_address [ netmask ]
Syntax Description
Usage Guidelines
The no form of the command must match exactly the rule it is deleting.
Related Commands
ssh-version
Use this command to enable Secure Shell (SSH) 1 or SSH 2, or both.
ssh-version { ssh1 | ssh2 | both }
Syntax Description
Example
This command enables ssh1:
ssh-version ssh1Related Commands
tarlog
This command creates two archives of system log files.
tarlog
Usage Guidelines
When you run the tarlog command, system log files are archived to var_logs.tgz and logs.tgz.
These files can only be accessed from the web interface:
1.
2.
3.
4.
telnet
To Telnet to an external host, use the following command.
telnet { hostname | ip-address } [ portnumber ]
Syntax Description
Hostname of the external host.
IP address of the external host.
portnumber of the external host.
Example
Enter the following command to telnet to port 9851 of a system with the IP address 209.165.200.224:
telnet 209.165.200.224 9851Related Commands
telnetenable
To control Telnet access to the WLSE, use the following command. The default is disabled.
telnetenable { status | disable | enable [ ip-address [ ip-address ... ] | domain ]] }
Syntax Description
Usage Guidelines
To enable Telnet access to the system for all IP source addresses, use the telnetenable enable command alone. To enable only specific IP addresses, use the telnetenable enable command followed by the IP addresses.
Example
This command enables Telnet for all IP source addresses:
telnetenable enableRelated Commands
tftpserver
This command allows you to use the WLSE's TFTP server for general purposes. This command is available only on the WLSE Express.
tftpserver [ list | create file | delete file | rename file1 file2 |
upload URL ]Syntax Description
traceroute
To display the network route to a specified host and identify faulty gateways, use the following command.
traceroute [ -f first_ttl ] [ -m max_ttl ] [ -w waittime ] -n host [ packetlength ]
Syntax Description
Usage Guidelines
This command displays a list of the hosts that receive probe packets as they travel to the destination host. Hosts are displayed in the order in which the receiving hosts receive the packets. Asterisks (*) appear as the entry for hosts that do not respond correctly to probing.
Example
This command displays the network route to the host otherhost with a packet time-to-live value of 2, a wait time of 5 seconds, and 50-byte packets:
traceroute -m 20 -w 10 cisco.com 50traceroute to example.com (209.165.200.224), 20 hops max, 50 byte packets1 ex1.com (209.165.200.225) 0.981 ms 0.919 ms 0.926 ms2 ex2.com (209.165.200.254) 1.528 ms 0.747 ms 0.661 ms3 ex3.com (209.165.200.255) 0.887 ms 0.770 ms 0.744 ms4 ex4.com (209.165.201.0) 0.932 ms 0.789 ms 0.679 ms5 ex5.com (209.165.201.1) 1.066 ms 1.052 ms 0.983 ms6 ex6.com (209.165.201.30) 1.472 ms 1.247 ms 1.847 ms7 ex7.com(209.165.201.31) 1.738 ms 1.424 ms 1.658 ms8 ex8.com (209.165.202.128) 3.728 ms 2.429 ms 2.804 ms9 ex9.com (209.165.202.129) 6.283 ms 5.499 ms 3.285 ms10 ex10.com (209.165.202.158) 9.926 ms 73.463 ms 3.895 ms11 ex11.com (209.165.202.159) 70.967 ms * 47.106 msRelated Commands
username
Use this command to create a new user account or change account properties. Use the no form of the command to remove a user account.
username name [ password | epassword ] password [ privilege { 0 | 15 }]
no username name
Syntax Description
Usage Guidelines
The default privilege level is 0 if you do not use the privilege option.
For information on the allowable characters in user names and passwords, see "Naming Guidelines."
Users that you create by using this command do not automatically have the HTTP access that is required for using the WLSE's web interface. To provide such users with HTTP access:
Step 1
Step 2
Step 3
a.
b.
For more information about managing users, see Managing GUI Users.
Example
This command creates a user account named user1 with password password1 and privilege level 15:
username user1 password password1 privilege 15This command removes the user account:
no username user1webtimeout
This command sets the timeout period for the Web interface. After the timeout expires, you are logged out. The default is 30 minutes (1800 seconds).
webtimeout [ status | time seconds | default ]
Syntax Description
status
Shows the current web session timeout setting.
time seconds
Sets the web session timeout period.
default
Resets web session timeout to the default 30 minutes (1800 seconds).
Example
webtimeout time 3600 secondsMaintenance Image Commands
This section describes the commands that are available when the system is booted from the maintenance image. For more information about the maintenance image, seeUsing the Maintenance Image.
erase config
This command is identical to the level-15 erase config command. For a description, see erase config.
fsck
To check and repair the filesystem, use the following command.
fsck
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command might prompt you for confirmation before making certain repairs.
Example
The following command checks and repairs the filesystem:
fsckreload
This command is identical to the level 15 reload command. For a description, see reload.
