-
Installation and Configuration Guide for the CiscoWorks Wireless LAN Solution Engine, 2.0
-
Index
-
Cisco 90-Day Limited Hardware Warranty Terms
-
Preface
-
Product Overview
-
Installing a CiscoWorks 1130 Wireless LAN Solution Engine
-
Configuring the Wireless LAN Solution Engine
-
Administering the Wireless LAN Solution Engine
-
Troubleshooting
-
Using CLI Commands
-
Specifications for the CiscoWorks 1130 Wireless LAN Solution Engine
-
Feedback
Table Of Contents
Command Description Conventions
Using CLI Commands
This appendix summarizes the command line interface (CLI) commands for WLSE 2.0.
Note
When you use CLI commands to make a configuration change, the system configuration is updated immediately.
This appendix contains the following sections:
•
Using the CLI
There are two methods for using the CLI:
•
–
–
•
Note
CLI Conventions
The command-line interface (CLI) uses the following conventions:
•
•
•
Do not confuse the WLSE's CLI with the IOS CLI. Though they are similar, they are not identical.
Command Privileges
Access to CLI commands is controlled by your user account privilege level. Users with privilege level 15 can use all commands. Users with privilege level 0 can use only a subset of the commands. The command descriptions in this appendix are organized by privilege level.
When booted from the maintenance image, the WLSE has a limited set of commands.
Checking Command Syntax
The user interface provides several types of responses to incorrect command entries:
•
•
•
In addition, some commands have command-specific error messages that notify you that a command is valid, but that it cannot run correctly.
Command History Feature
The CLI provides a command history feature. To display previously entered commands, press the up arrow key. After pressing the up arrow key, you can press the down arrow key to display the commands in reverse order. To run a command, press the Enter key while the command is displayed on the command line. You can also edit commands before pressing the Enter key.
Help for CLI Commands
You can obtain help using the following methods:
•
•
–
–
The help contains command usage information and syntax.
Command Description Conventions
Command descriptions in this document and in the CLI help system use the following conventions:
•
•
•
•
•
Command Summary
Table B-1 summarizes all commands available on the WLSE. For full descriptions of commands, see the following sections:
Table B-1 Command Summary
auth
15
Enables secure remote authentication.
15
Backs up WLSE configuration.
15
Sets the backup file location for all backup and restore operations.
15
Enables or disables the Cisco Discovery Protocol (CDP).
15
Sets the system date and time.
15
Displays the current storage usage on the WLSE.
15
Displays TCP/IP packet content.
151
Erases the configuration in flash memory and reloads the device.
0
Logs user out of the WLSE.
15
Displays IP address of a known domain name.
N/A2
Checks and repairs the file system.
15
Implements port filtering on the WLSE.
15
Changes the system host name.
15
Imports host files or maps IP addresses to host names.
15
Configures the repository for installing software updates on the WLSE.
15
Lists software updates and images currently available on the repository.
15
Installs software updates and images from the repository.
15
Configures Ethernet interfaces.
15
Defines the default domain name.
15
Specifies the address of name servers for name and address resolution.
15
Lists all current backups at the configured site.
15
Debugs and tests email settings.
15
Deletes the mail log, send queue, or user queue.
15
Lists the size of the mail log, user queue, or send queue.
15
Forwards email to a specified server.
15
Generates a Certificate Signed Request (CSR) for HTTPS.
15
Translates a device name to its IP address or an IP address to its device name.
15
Allows the system clock to be synchronized by a time server.
0
Sends ICMP echo_request packets for diagnosing basic network connectivity.
151
Reboots the system.
15
Reinitializes the database.
15
Configures the WLSE to be a repository server.
15
Transfers software updates and images from a remote server to the WLSE's local repository.
15
Deletes software updates and images on the local repository.
15
Lists software updates and images on the local or remote repository.
15
Starts, stops, or displays the status of the WLSE's local repository.
15
Restores backed up configuration from the configured location.
15
Adds a route.
15
Lists, starts, or stops management services.
15
Displays the WLSE's ANI log.
15
Displays the type of authentication used for secure CLI access.
15
Displays the type of authentication used for secure HTTP access.
15
Displays the current backup and restore configuration.
0
Displays the messages logged during the last system boot.
15
Displays the WLSE's nearest neighbor on the network.
15
Displays the Cisco Discovery Protocol (CDP) configuration.
0
Displays system time in Coordinated Universal Time (UTC).
15
Displays the WLSE's collector log.
15
Displays WLSE configuration.
15
Displays WLSE's daemons log.
15
Displays WLSE's daemon manager log.
0
Displays WLSE's domain name
15
Displays WLSE's Web access log.
15
Displays WLSE's Web error log.
15
Displays WLSE's Web SSL log.
15
Displays imported host files.
15
Displays software updates and images available on the configured repository.
0
Displays information about the WLSE's network interface .
15
Displays IP chains for the selected interface.
15
Displays WLSE's host file.
15
Displays WLSE's mail log.
0
Displays information about processes running on the system.
15
Displays the status or the access log of a configured repository.
15
Displays the routes currently configured.
15
Displays WLSE's secure log information.
15
Displays WLSE's SNMP configuration.
15
Displays type of SSH enabled.
15
Displays syslog information.
15
Displays information necessary for Cisco's Technical Assistance Center to assist you.
15
Displays WLSE's Telnet status.
15
Displays WLSE's Tomcat log.
0
Displays information about current software installed on WLSE.
15
Shuts down system in preparation for powering it off.
15
Configures an SNMP agent.
15
Connects to an external host by using SSH.
15
Enables Secure Shell (SSH) 1, SSH 2, or both SSH 1 and SSH 2.
15
Telnets to an external host.
15
Configures Telnet access.
0
Displays route to a specified host and identifies faulty gateways.
15
Creates new user account or changes account properties.
webtimeout
15
Changes the session timeout for the Web interface.
1 This command is also available in the maintenance image.
2 This command is available only in the maintenance image.
Privilege Level 0 Commands
This section describes the privilege level 0 commands.
exit
To log out of the system, use the following command:
exit
Syntax Description
This command has no arguments or keywords.
Example
The following command logs you out of the system:
exitping
To send ICMP echo_request packets for diagnosing basic network connectivity, use the following command.
ping [ -c count ] [ -i wait ] [ -s packetsize ] [ -n ] { hostname | ip-address }
Syntax Description
c Sets the number of echo packets to send.
count Number of echo packets to send.
i Sets the amount of time to wait between sending each packet.
wait Amount of time to wait between sending each packet, in seconds. The default is 1.
s Sets the size of each echo packet.
packetsize The size of each echo packet, in bytes. The default is 56.
hostname Host name of system to ping.
ip-address IP address of system to ping.
n Disables reverse DNS lookup.
Usage Guidelines
To use this command with the hostname argument, DNS must be configured on the system.
To force the time-out of a nonresponsive host or to eliminate a loop cycle, press Ctrl-c.
Example
This command sends 4 echo packets to the host otherhost with a wait time of 5 seconds between each packet:
ping -c 4 -i 5 209.165.200.224PING 209.165.200.224 (209.165.200.224) from 209.165.201.0 : 56(84) bytes of data.64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=0 ttl=246 time=16.3 ms64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=1 ttl=246 time=2.0 ms64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=2 ttl=246 time=2.1 ms64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=3 ttl=246 time=2.1 msshow clock
To display the system date and time in Coordinated Universal Time (UTC), use the following command.
show clock
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
For more information about the system time, see Setting WLSE Date and Time.
Example
This command displays the system date and time:
show clock12:43:47 Jun 20 2001Related Commands
clock
ntp server
show domain-name
To display the system domain name, use the following ommand.
show domain-name
Syntax Description
This command has no arguments or keywords.
Example
This command displays the system domain name:
show domain-namecisco.comshow interfaces
To display information about the system network interface, use the following command.
show interfaces
Syntax Description
This command has no arguments or keywords.
Example
This command displays information about system network interfaces:
show interfaceseth0 Link encap:Ethernet HWaddr 00:02:B3:35:FD:CCinet addr:209.165.200.224 Bcast:209.165.201.0 Mask:255.255.255.224UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1RX packets:80309 errors:0 dropped:0 overruns:0 frame:0TX packets:22451 errors:0 dropped:0 overruns:0 carrier:0collisions:0 txqueuelen:100Interrupt:5 Base address:0xef00 Memory:d0c7e000-d0c7ec40Related Commands
interface
show process
To display information about processes running on the system (including the status of the database), use the following command.
show process [ page ]
Note
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
Example
This command displays information about processes running on the system:
show process pagePID PPID ELAPSED SZ STARTED TTY COMMAND1 0 4-20:04:35 277 Fri Jun 15 16:54:03 2001 ? init2 1 4-20:04:35 0 Fri Jun 15 16:54:03 2001 ? kflushd3 1 4-20:04:35 0 Fri Jun 15 16:54:03 2001 ? kupdate4 1 4-20:04:35 0 Fri Jun 15 16:54:03 2001 ? kpiod5 1 4-20:04:35 0 Fri Jun 15 16:54:03 2001 ? kswapd6 1 4-20:04:28 0 Fri Jun 15 16:54:10 2001 ? kreiserfsd81 1 4-20:04:25 0 Fri Jun 15 16:54:13 2001 ? kreiserfsd82 1 4-20:04:25 0 Fri Jun 15 16:54:13 2001 ? kreiserfsd83 1 4-20:04:25 0 Fri Jun 15 16:54:13 2001 ? kreiserfsd84 1 4-20:04:25 0 Fri Jun 15 16:54:13 2001 ? kreiserfsd85 1 4-20:04:24 0 Fri Jun 15 16:54:14 2001 ? kreiserfsd199 1 4-20:04:23 290 Fri Jun 15 16:54:15 2001 ? watchdog213 1 4-20:04:23 342 Fri Jun 15 16:54:15 2001 ? idled402 1 4-20:04:17 290 Fri Jun 15 16:54:21 2001 ? syslogd411 1 4-20:04:17 360 Fri Jun 15 16:54:21 2001 ? klogd517 1 4-20:04:15 327 Fri Jun 15 16:54:23 2001 ? crond531 1 4-20:04:15 286 Fri Jun 15 16:54:23 2001 ? inetd540 1 4-20:04:14 585 Fri Jun 15 16:54:24 2001 ? sshd585 1 4-20:04:09 842 Fri Jun 15 16:54:29 2001 ? dmgtd.lnx-----------more-----------show version
To display information about the current software on the system, use the following command.
show version
Syntax Description
This command has no arguments or keywords.
Example
This command displays the current software on the system:
show versionCopyright (c) 1999-2000 by Cisco Systems, Inc.Build Version (166) Mon Jun 11 16:56:23 PDT 2001Uptime: 4 days 20 hours 6 minsLinux/UID32 version 2.2.16-13bipsec.uid32 (gcc version egcs1traceroute
To display the network route to a specified host and identify faulty gateways, use the following command.
traceroute [ -f first_ttl ] [ -m max_ttl ] [ -w waittime ] host [ packetlength ]
Syntax Description
-f (Optional) Sets the time-to-live used in the first outgoing probe packet.
first_ttl Time-to-live value of the first outgoing probe packet. The default is 1 hop.
-m (Optional) Sets the maximum time-to-live (maximum number of hops) used in outgoing probe packets.
max_ttl Maximum time-to-live for outgoing probe packets. The default is 30 hops.
-w (Optional) Sets the time to wait for a response to a probe, in seconds.
waittime Time to wait for a response to a probe, in seconds. The default is 5.
host Name or IP address of host to which to connect.
packetlength (Optional) The length of the packet to send, in bytes. The default and minimum value is 40.
Usage Guidelines
The command displays a list of the hosts that receive probe packets as they travel to the destination host, in the order that the receiving hosts receive the packets. Asterisks (*) appear as the list entry for hosts that do not respond to probing correctly.
Example
This command displays the network route to the host otherhost with a packet time-to-live value of 2, a wait time of 5 seconds, and 50-byte packets:
traceroute -m 20 -w 10 cisco.com 50traceroute to example.com (209.165.200.224), 20 hops max, 50 byte packets1 ex1.com (209.165.200.225) 0.981 ms 0.919 ms 0.926 ms2 ex2.com (209.165.200.254) 1.528 ms 0.747 ms 0.661 ms3 ex3.com (209.165.200.255) 0.887 ms 0.770 ms 0.744 ms4 ex4.com (209.165.201.0) 0.932 ms 0.789 ms 0.679 ms5 ex5.com (209.165.201.1) 1.066 ms 1.052 ms 0.983 ms6 ex6.com (209.165.201.30) 1.472 ms 1.247 ms 1.847 ms7 ex7.com(209.165.201.31) 1.738 ms 1.424 ms 1.658 ms8 ex8.com (209.165.202.128) 3.728 ms 2.429 ms 2.804 ms9 ex9.com (209.165.202.129) 6.283 ms 5.499 ms 3.285 ms10 ex10.com (209.165.202.158) 9.926 ms 73.463 ms 3.895 ms11 ex11.com (209.165.202.159) 70.967 ms * 47.106 msRelated Commands
ping
Privilege Level 15 Commands
This section describes the privilege level 15 commands. Only users with privilege level 15 can run these commands.
auth
Use the following command to enable secure remote authentication.
auth { cli | http } { local | tacacs secret server1 [server2] | radius secret server1 [ server2 ] | nt domain pdc [ bdc ] }
Syntax Description
cli Enables authentication using the Command Line Interface (CLI).
http Enables authentication using Hypertext Transfer Protocol (HTTP).
local Enables local authentication.
tacacs Enables authentication using the Terminal Access Controller Access Control System (TACACS).
radius Enables authentication using Remote Dial-In User Service (RADIUS).
nt Enables authentication from an NT domain controller.
secret Shared secret code of server.
server1 IP address or device name of server from which authentication will occur.
server2 IP address or device name of optional secondary server from which authentication could occur
domain NT domain name.
pdc Name of the Primary Domain Controller (PDC).
bdc Name of the Backup Domain Controller (BDC).
Example
This command enables secure remote authentication from a remote server, using TACACS.
auth http tacacs tr5e43 209.165.200.224backup
Use the following command to back up the WLSE.
backup [test]
Syntax Description
test Tests the configured backup hostname, username, password, and directory.
Usage Guidelines
To configure the backup location, use the backupconfig command.
Example
The following command backs up the WLSE:
backupRelated Commands
backupconfig
listbackup
restore
show backupconfig
backupconfig
Use the following command to specify the host for all backup and restore operations. To clear the backup and restore configuration information, use the no backupconfig command.
backupconfig { hostname } { username } { password } [ directory ]
no backupconfig
Syntax Description
hostname Host name or IP address of the host system.
username Username of host system.
password Password of the host system.
directory Path to specific backup directory, if different from user's default directory.
Example
The following command will configure the backup and restore operations to backup to and restore from host 209.165.200.224, set the username to user1, and set the password to pass:
backupconfig 209.165.200.224 user1 passThe following command clears all backup and restore configuration information:
no backupconfigRelated Commands
backup
listbackup
restore
show backupconfig
cdp
Use the following command to configure the Cisco Discovery Protocol (CDP). CDP allows a Cisco device to recognize, and be recognized by, other Cisco devices.
cdp { run [ port ] | timer seconds | holdtime seconds }
no cdp { run [ port ] | timer | holdtime }
Syntax Description
run Start CDP; starts the WLSE sending out signals to other devices.
timer Set CDP packets retransmission time; sets the amount of time, in seconds, that CDP signals are sent.
holdtime Set CDP packet information hold time; sets the amount of time a device will recognize another device without receiving a signal. For example, if your system's holdtime is set to 30 seconds, and another device that has already been recognized by yours does not send a signal within that 30 seconds, your system will cease to recognize it.
port Ethernet port on which CDP will be enabled. Acceptable values are eth0-5. The default Ethernet port is port 0. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.
seconds Amount of time, in seconds, that the system takes to either transmit the CDP packet information or to hold another system's CDP packet information.
Usage Guidelines
If you are using the no cdp command, the timer and holdtime values are set to their default values.
Example
This command sets the CDP packet's retransmission time at 10 seconds.
cdp timer 10This command sets the CDP packet's retransmission to its default time.
no cdp timerclock
To set the system date and time, use the following command. Read the usage guidelines before using this command.
clock {set hh:mm:ss month day year}
Syntax Description
set Sets the system clock.
hh:mm:ss Current time (for example, 13:32:00).
month Current month. You can enter full month names or abbreviations that include at least the first 3 characters of the month name (for example, jan, feb, mar).
day Day of the month (for example, 1 to 31).
year Current year (for example, 2000).
Usage Guidelines
When resetting the time, you must stop and restart WLSE services. Otherwise, scheduled configuration and firmware jobs will not run properly. To reset the time:
Step 1
services stopStep 2
Step 3
services startTo set the date and time, use the set option.
If you configure the system to use Network Time Protocol (NTP), you do not need to set the system clock manually using the clock command.When setting the clock, enter the current time in Coordinated Universal Time (UTC).
For more information about the system time, see Setting WLSE Date and Time.
Example
This command sets the date and time:
clock set 16:00:00 dec 11 2001Tue Dec 11 16:00:00 UTC 2001Related Commands
ntp server
show clock
df
To display the current storage usage on the WLSE, use the following command.
df
Usage Guidelines
This command in primarily intended as a debugging tool for problems with full partitions.
Example
The following command displays the current storage usage on the WLSE:
dfFilesystem Size Used Avail Use% Mounted on/dev/sda12 151M 59M 92M 39% //dev/sda1 49M 2.8M 44M 6% /boot/dev/sda7 985M 24M 911M 3% /extra/dev/sda8 601M 32M 569M 5% /home/dev/sda6 1001M 136M 865M 14% /opt/dev/sda13 9.7G 32M 9.7G 0% /tftpboot/dev/sda9 601M 32M 569M 5% /tmp/dev/sda10 591M 212M 350M 38% /usr/dev/sda5 2.9G 450M 2.5G 15% /vardumptcp
This command displays TCP/IP network protocol packet content.
dumptcp proto { snmp snmp-trap ip icmp tcp udp | port port }
[ interface eth[ernet]0-5] [ host host [ host2 host2 ]]Syntax Description
proto Name of protocol. Enter snmp, snmp-trap, ip, icmp, tcp, or udp to specify the protocol for which you want to view the packet content. You must specify either a protocol or a port.
port Use the port number to specify the protocol to observe, instead of specifying the protocol name. You must specify either a protocol or a port.
port The port number.
interface eth[0-5] The interface to observe; eth0 corresponds to Ethernet port 0, and eth1 corresponds to Ethernet port 1. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.
host, host2 The host(s) to observe.
host The host name(s).
Usage Guidelines
You can either specify a protocol by name or specify a port; you must specify one or the other. Optionally, you can specify the interface and specify one or two hosts to observe.
The command allows you to continuously observe the packets. Enter Ctrl C to terminate the command.
Examples
The following command listens displays the SNMP packets in the interface:
dumptcp proto snmp interface eth1The following command listens to packets from port 161 only with abc.com as either the source or destination host:
dumptcp port 161 host abc.comerase config
To erase the configuration in flash memory and reload the device, use the following command.
erase config
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
When you enter the command, you are prompted for confirmation. Enter yes to confirm, or press Enter to accept the default response no.
Caution
When the system reboots, you must reconfigure it with the setup program. For information about using the setup program, see Using the Setup Program.
Example
This command erases the system configuration:
erase configThis will erase your configuration, return device to factory defaults, and reload the deviceDo you want to continue?[no]:yesfirewall
This command implements port filtering on the WLSE.
firewall eth [0-5] [public | private | none ] | [icmp telnet ssh snmp
https 1741 repository tftp traceroute ]Syntax Description
eth [0-5] Port to be configured. Acceptable values are eth0-eth5; eth0 corresponds to Ethernet port 0, and eth1 corresponds to Ethernet port 1. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.
public Denies access via ICMP, Telnet, SNMP, and the HTTP 1741 port.
none Disables the firewall on an interface.
private Denies no access.
icmp Denies Internet Control Message Protocol (ICMP) ping messages.
telnet Denies incoming Telnet connections.
ssh Denies incoming SSH connections.
snmp Denies incoming SNMP requests.
https Denies all connections to the SSL HTTP port.
1741 Denies all connections to the HTTP 1741 port.
repository Disables the local software repository from access from the network.
traceroute Prevents the WLSE from responding to traceroute commands.
tftp Disables TFTP access.
Usage Guidelines
To configure an Ethernet port for secured public access, use the public option.
To configure an Ethernet port for local access, via a LAN or VLAN, use the private option.
To disable ICMP, Telnet, SSH, SNMP, HTTPS, or to deny connections to the SSL HTTP port or the HTTP 1741 port, use the corresponding option.
Example
The following is an example of a secure Ethernet port configuration:
•
firewall eth0 public ssh 1741•
firewall eth1 privateAn on-site user has full access to the WLSE, but an external user can only access it using a secure connection.
gethostbyname
Use the following command to display the IP address of a known domain name.
gethostbyname host
Syntax Description
host Domain name of host.
Example
This command displays the IP address of example.com
gethostbyname example.com209.165.200.224hostname
To change the system host name, use the following command.
hostname name
Syntax Description
name New hostname for the WLSE. The name is case-sensitive and may be from 1 to 24 alphanumeric characters (A-Z, a-z, 0-9) plus the minus sign (-).
Example
The following example changes the hostname to sandbox:
hostname sandboximport
To import host files, or to map IP addresses to hostnames, use the following command:
import {host hostname ipaddress} | {hosts ftp-host username password path}
no import {host hostname ipaddress} | {hosts}
Syntax Description
host Maps one IP address to a hostname.
hostname Hostname to map IP address to.
hosts Imports host files from an FTP-accessible host.
ipaddress IP address to map Hostname to.
password Password used to access an FTP-accessible host.
path Path to an FTP-accessible host.
ftp-host IP address of an FTP-accessible host.
username username use to access an FTP-accessible host.
Usage Guidelines
To map a single hostname to an IP address:
import host hostname ipaddress
To import host files from an external, FTP-accessible server:
import hosts ftp-host username password path
To remove an individual IP address from a host file:
no import host hostname ipaddress
To remove an imported host file:
no import hosts
Example
This command imports host files from the FTP- accessible server ftpserver_1. Ftpserver_1 has the username admin, the password pass, and the path /ftpserver_1/hosts.
import hosts ftpserver_1 admin pass /ftpserver_1/hostsThis command deletes the hosts imported in the example above:
no import hostsinstall configure
To define the repository that the WLSE uses to install software updates and images, use the following command. A repository is a remote or local server from where a system can download software updates and images. Only HTTP is supported.
install configure {URL URL Value | default | save}
Syntax Description
URL Sets the URL of the repository.
URL Value The URL of the repository. The URL should take the form of http://host:port/path (the path is not a requirement).
default Configures the Wireless LAN Solution Engine to be its own repository. The URL is http://localhost:9851.
save Saves the current configuration in the install.ini file.
Example
The following command configures the WLSE to use http://209.165.200.22, with port 9851, as a repository:
install configure URL http://209.165.200.224:9851Related Commands
install update
install list
install list
To list software updates and images currently available on the configured repository, use the following command. A repository is a remote or local server from where a system can receive software.
install list [all | full | page | updates]
Syntax Description
all Displays all software updates and images on a configured repository. This command displays the name, the version, the requirements, the type, and a summary of the software.
full Displays only the complete images on a configured repository.This command displays the name, the version, the requirements, the type, and a summary of the image.
page Displays only the names of all software updates and images on a configured repository. All other information is omitted.
updates Displays only the updates on a configured repository. This command displays the name, the version, the requirements, the type, and a summary of the update.
Example
Enter the following command to display a list of all available software updates and images on a configured repository:
install list allName Version Requires Type SummaryEX-1.02 1.02 HSE-1.0 UPDATE Hosting Solution...EX-1.1aR 1.1aR HSE-1.1 UPDATE Hosting Solution...EX-1.1a 1.1a HSE-1.1 UPDATE Hosting Solution...EX-1.0a 1.0a HSE-1.0 UPDATE Hosting Solution...EX-1.0aR 1.0aR HSE-1.0 UPDATE Hosting Solution...EX-1.0-ROB 1.0 HSE-1.0 COMPLETE Hosting Solution...EX-1.0 1.0 HSE-1.0 COMPLETE Hosting Solution...Related Commands
install configure
install update
install update
To install a software update or image, use the following command.
install update package name
Syntax Description
Package Name Name of the software update or image to be installed. To see the names of software updates and images available for installation, use the install list command. For more information, see install list.
Example
The following command installs the update EX-2.0:
install update EX-2.0Related Commands
install configure
install list
interface
To configure an Ethernet interface, use the following command.
interface eth[ernet][0-5] {[ up | down ] | ipaddress netmask
[ default-gateway address ] [ up | down ] }
[ auto | speed [10 | 100 | 1000]] duplex [half | full]Syntax Description
eth[0-5] Name of the interface port to be configured. Acceptable values are eth0-eth5;eth0 corresponds to Ethernet port 0, and eth1 corresponds to Ethernet port 1. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.
up Enables the interface (the default).
If you include the ipaddress parameter and want to enable the interface in the same command, either enter the up parameter after ipaddress and its required parameters, or do not specify the up or down parameters (up is the default).
down Disables the interface.
If you include the ipaddress parameter and want to disable the interface in the same command, enter the down parameter after ipaddress and its required parameters.
ipaddress The IP address of the interface.
netmask The netmask of the interface IP address.
default-gateway The IP address of the default gateway that connects the WLSE to the network.
address The default gateway IP address.
up See the preceding description of up.
down See the preceding description of down.
auto Allow the interface speed to be set automatically.
speed Set the interface speed to 10, 100, or 1000 megabits.
duplex half | full Set interface to half- or full-duplex mode.
Default
When you enter the interface command, the interface that you specify is enabled by default. If you want to disable an enabled interface or leave a disabled interface disabled, you must specify the down option.
Usage Guidelines
If you change the IP address or hostname, follow these steps to make sure that applications can connect to the WLSE:
Step 1
# services stop# services startStep 2
Step 3
Example
This command disables the Ethernet 1 interface:
interface eth1 downThis command sets the Ethernet 0 IP address, netmask, and gateway IP address:
interface eth0 209.165.200.224 255.255.255.224 default-gateway 209.165.201.31 upip domain-name
To define a default domain name, use the following command. To remove the default domain name, use the no form of the command. A default domain name allows the system to resolve any unqualified host names. Any IP hostname that does not contain a domain name will have the configured domain name appended to it. If you are using a DNS server, this appended name is resolved by the DNS server, and then added to the host table.
ip domain-name name
no ip domain-name name
Syntax Description
name Domain name (for example, cisco.com).
Example
This command defines the default domain name cisco.com:
ip domain-name cisco.comThis command removes the default domain name:
no ip domain-nameRelated Commands
ip name-server
ip name-server
To specify the addresses of up to three name servers for name and address resolution, use the following command. To remove a name server, use the no form of the command.
ip name-server ip-address
no ip name-server ip-address
Syntax Description
ip-address Name server IP address (maximum of 3).
Usage Guidelines
Use the ip name-server command to point the system to a specific DNS server. You may configure up to three servers.
If you attempt to configure a fourth name server, the following error message appears:
# Name-server table is full.The system must be able to contact a functional DNS server to operate correctly. If it does not, in most cases it will not correctly process requests from management applications that use it. If the system cannot obtain DNS services from the network, Telnet connections to the system will fail or Telnet interaction with the system will become extremely slow.
Example
This command assigns a name server for the system to use for name-to-address resolution:
ip name-server 209.165.200.224This command disables the name server; the system will not use it for name-to-address resolution:
no ip name-server 209.165.200.224Related Commands
ip domain-name
listbackup
Use the following command to list all current backups at the configured site.
listbackup
Syntax Description
This command has no arguments or keywords.
Example
The following command lists all current backups at the configured site:
listbackupex1_06042001_170640: Hostname: ex1 Date: 06042001 time: 1700ex1_06052001_124543: Hostname: ex1 Date: 06052001 time: 1243ex1_06052001_155148: Hostname: ex1 Date: 06052001 time: 1558ex1_06202001_145704: Hostname: ex1 Date: 06202001 time: 1454Related Commands
backup
backupconfig
restore
show backupconfig
To debug and test email settings, use the following command.
mail [ to user@host [ debug ]]
Syntax Description
to user@host Sends email to the specified recipient.
debug Debugs any email problems.
Entering the mail command with no arguments allows you to read email.
Example
The following command sends an email message:
mail to operator@sj_wlseSubject: testThis is a test mail.Cc:
Note
mailcntrl clear
To delete the mail log, send queue, or user queue, use the following command.
mailcntrl clear {log | sendqueue | userqueue}
Syntax Description
log Clears the WLSE's email log.
sendqueue Clears the WLSE's send queue.
userqueue Clears the WLSE's user queue.
Example
The following command clears the WLSE's email log.
mailcntrl clear logRelated Commands
mailcntrl list
mailcntrl list
To list the size of the mail log, user queue, or the send queue, use the following command.
mailcntrl list {logsize | sendqueuesize | userqueuesize}
Syntax Description
logsize Size of the mail log.
sendqueuesize Size of the sendqueue.
userqueuesize Size of the userqueue.
Example
The following command displays the size of the WLSE's email log.
mailcntrl list logsizeMail log files total size: 4.0kRelated Commands
mailcntrl clear
mailroute
To forward email to a specified SMTP server, use the following command to specify the server. If no server is specified, the WLSE will use DNS to resolve the correct email server in your local domain. To stop forwarding mail to the SMTP server, use the no mailroute command to remove the mail server information.
mailroute {hostname | ip-address}
no mailroute
Syntax Description
hostname Host name of an email server.
ip-address IP address of an email server.
Example
The following command forwards email to a server with the hostname mailserver:
mailroute mailservermkcert
Use this command to generate a Certificate Signed Request (CSR) for enabling secure socket layer protocol (SSL), which provides a secure HTTPS connection between Web clients and the WLSE.
When you initially set up the WLSE, a private key, a self-signed certificate, and a certificate signing request (CSR) are generated. This set up procedure enables SSL.
The unsigned certificate expires in one year; use the mkcert command or the Web interface to otain a permanent, signed certificate.
Note
Syntax Description
mkcert Creates a CSR.
Usage Guidelines
When you run mkcert, the following prompts are displayed. For some fields, there is a default name. If you enter a period (.), the field will be left blank.
After generating the certificate, view it in the Web interface (Administration > Security > SSL (HTTPS). Copy everything between the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines and send it to a certificate authority (such as Verisign). Use the authority's procedure for sending the certificate.
When you receive the signed certificate:
Step 1
Step 2
Step 3
Step 4
services stopservices start
nslookup
To translate a device name to its IP address or an IP address to its device name, use the following command.
nslookup {dns-name | ip-address}
Syntax Description
dns-name Device name of a host on the network.
ip-address IP address of a host on the network.
Example
The following command translates the device name hostname to its IP address:
nslookup hostnameServer: dns.ex1.comAddress: 209.165.200.224Name: ex1.comAddress: 209.165.201.0ntp server
To configure the Network Time Protocol (NTP) and allow the system clock to be synchronized by a time server, use the following command. To disable this function, use the no form of this command.
ntp server ip-address
no ntp server ip-address
Syntax Description
ip-address IP address of the NTP time server providing clock synchronization.
Usage Guidelines
Use the ntp server command to synchronize the system clock with the specified NTP server. If you configure multiple NTP servers, the system will synchronize with the first working NTP server it finds. There is no limit to the number of NTP servers that you can configure.
The ntp server command validates the NTP server that you specify. The possible results are:
•
# 19 Jan 00:43:48 ntpdate[1437]: step time server 209.165.200.224 offset 999.257304•
# 19 Jan 00:43:40 ntpdate[1431]: no server suitable for synchronization foundIn this case, remove the NTP server by using the no form of the command, then configure a valid NTP server.
•
# 19 Jan 00:43:58 ntpdate[1265]: Can't adjust the time of day: Invalid argument.In this case, the ntp server command is entered into the system configuration, but NTP will not function. Follow these steps to remove the command and configure NTP correctly:
Step 1
no ntp server ip-addresswhere ip-address is the IP address of the NTP server.
Step 2
Step 3
ntp server ip-address
Example
This command configures the system to use an NTP server:
ntp server 209.165.201.0This command configures the system to stop using the NTP server:
no ntp server 209.165.201.0Related Commands
clock
reload
To reboot the system, use the following command.
reload
Usage Guidelines
You are prompted to verify the reload. Enter yes to confirm or no to cancel the reload.
Caution
Example
This command reboots the system:
reloadRelated Commands
shutdown
reinitdb
To reinitialize the database, use the following command.
reinitdb
Note
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command erases all information contained within the database and stops and restarts system services.
Example
This command reinitializes the database:
reinitdbRelated Command
services
repository
To configure the WLSE to be a repository server, use the following command. A repository is a remote or local server from where a system can receive software updates and images.
repository source URL
Syntax Description
source Sets the location from where the local repository downloads software updates and images.
URL The IP address of an external server containing software updates and images.
Usage Guidelines
The repository command allows the WLSE to be a repository both for itself and for external systems.
The repository command only configures the WLSE to be a repository. To configure the WLSE to install software updates and images from this repository, see install configure.
Example
To configure the WLSE to be a repository, and to download software updates and images from http:// 209.165.200.224, enter the following command:
repository source ftp://209.165.200.224Related Commands
repository add
repository delete
repository list
repository server
repository add
To transfer software updates and images from a remote server to the WLSE's local repository, use the following command.
repository add package
Syntax Description
package Name of the software update or image to be transferred.
Usage Guidelines
You will be prompted to enter a username and password if they are needed to access the remote server.
Example
To transfer the update EX_2.0 from an update server to the local repository, enter the following command:
repository add ex_2.0Related Commands
repository
repository delete
repository list
repository server
repository delete
To delete software updates and images on the WLSE's local repository, use the following command. A repository is a remote or local server from where a system can receive software updates and images.
repository delete [package | all]
Syntax Description
all Deletes all software updates and images in the local repository.
package Name of the software update or image to be deleted.
Example
The following command deletes the update EX_2.0 from the local repository:
repository delete EX_2.0Related Commands
repository
repository add
repository list
repository server
repository list
To list software updates and images on the configured local or remote repository, use the following command.
repository list { local | remote } [ detail ] [ page ]
Syntax Description
local Lists software updates and packages on the local repository.
remote Lists software updates and packages on a remote repository.
detail Includes details of the software updates and images displayed.
page Displays the software updates and packages on page at a time.
Example
To list the software updates and images available on the configured local repository, with details and one page at a time, enter the following command:
repository list local detail pageRelated Commands
repository
repository add
repository delete
repository server
repository server
To start, stop, or view the status of the WLSE's local repository, use the following command. A repository is a remote or local server from where a system can receive software updates and images.
repository server [stop | start | status]
Syntax Description
stop Stops the local repository.
start Starts the local repository.
Status Displays the status of the local repository.
Example
The following command stops the local repository:
repository server stopRelated Commands
repository
repository add
repository delete
repository list
restore
Use the following command to restore a backed up configuration of the WLSE.
restore restore_name
Syntax Description
restore_name Name of backup to be used to restore the WLSE.
Usage Guidelines
After you restore a backup, all current domains, roles, users, and discovery configuration information will be erased.
You can restore configuration data from one WLSE to another; for example, if you want to replace one WLSE with another. For more information see, Installing a Replacement WLSE and Copying Configuration Data from One WLSE to Another.
Example
The following command will restore a backed up configuration:
restore backup1Releated Commands
backup
backupconfig
listbackup
show backupconfig
route
To add a route through a gateway device, use the following command. To delete a route, use the no version of the command.
route { network address } netmask { network netmask }
gateway { gateway address }no route { network address } netmask { network netmask }
Syntax Description
netmask Sets value of the network netmask.
gateway Sets the IP address of the router or gateway.
network address IP address of the network.
network netmask Value of the network netmask.
gateway address IP address of router or gateway.
Example
The following command adds a route:
route 209.165.201.0 netmask 255.255.255.224 gateway 209.165.200.224The following command deletes the above route:
no route 209.165.201.0 netmask 255.255.255.224services
To list, start, or stop the management services running on the system, use the following command.
services [ status | start | stop ]
Syntax Description
status Displays the management services status.
start Starts the management services.
stop Stops the management services.
Usage Guidelines
Management services are the software installed on the system by network management applications. Use this command to stop and restart the management services if the system is not responding correctly to a management application. This should cause the services to reset and function properly again.
Example
This command stops management services:
services stopThis command starts management services:
services startThis command shows services status:
# services statusProcess= HSECollectorState = Running but busy flag setPid = 588RC = 0Signo = 0Start = 06/15/01 16:54:32Stop = Not applicableCore = Not applicableInfo = HSECollector started.Process= HSEANIServerState = Running but busy flag setPid = 589RC = 0Signo = 0Start = 06/15/01 16:54:32-----------more-----------Related Commands
show process
show anilog
To display the WLSE's ANI log, use the following command.
show anilog [ page ] | include MatchString1 [ MatchString2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the WLSE's ANI log, one page at a time:
show anilog page/var/adm/CSCOets/log/ani.logSNMPThrPool: Instantiated ex.lib.snmp.lib.timer.DynamicThreadPool, min=15, max=48, maxIdleSecs=2402001/12/20 13:43:12 main ani MESSAGE DBConnection: Created new Database connection [hashCode = 45981573]2001/12/20 13:43:38 main ani MESSAGE ServletServiceModule: Moxie Servlet Engineis ready to receive requests2001/12/20 15:43:39 HSEStatusPoll ani MESSAGE DBConnection: Created new Databaseconnection [hashCode = 85057415]2001/12/20 17:43:39 HSEStatusPoll ani MESSAGE DBConnection: Created new Databaseconnection [hashCode = 396959623]2001/12/20 19:43:39 HSEStatusPoll ani MESSAGE DBConnection: Created new Database--More--show auth-cli
To display the type of authentication used for secure CLI access, use the following command.
show auth-cli
Syntax Description
This command has no arguments or keywords.
Example
This command and response shows that the WLSE's local authentication is being used for the CLI:
show auth-clilocalshow auth-http
To display the type of authentication used for secure HTTP access, use the following command.
show auth-http
Syntax Description
This command has no arguments or keywords.
Example
This command and response shows that the WLSE's local authentication is being used for the CLI:
show auth-httplocalshow backupconfig
The following command displays the current backup and restore configuration.
show backupconfigSyntax Description
This command has no arguments or keywords.
Usage Guidelines
If the backup configuration has not been set, the host and username fields display NONE.
Example
The following command displays the current backup and restore configuration:
show backupconfigHostname: 209.165.201.0Username: user1Related Commands
backup
backupconfig
listbackup
restore
show bootlog
To display the messages logged during the last system boot, use the show bootlog command.
show bootlog [ page ]
Syntax Description
page Displays command output one screen at a time. Press the return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
Example
This command displays the messages logged during the last system boot:
show bootlog pageLinux/UID32 version 2.2.16-13bipsec.uid32 (gcc version egcs1Console: colour VGA+ 80x25Calibrating delay loop... 1133.77 BogoMIPSstart low memory: 0xc0001000 i386_endbase: 0xc009f000addresses range:: 0xc0f00000 0xc1000000start memory: c04f8000 end_memory: d0000000Memory: 257688k/262144k available (988k kernel code, 416k reserved, 2992k data,)Dentry hash table entries: 262144 (order 9, 2048k)Buffer cache hash table entries: 262144 (order 8, 1024k)Page cache hash table entries: 65536 (order 6, 256k)vmdump: setting dump_execute() as dump_function_ptr ...VFS: Diskquotas version dquot_6.4.0 initializedCPU: Intel Pentium III (Coppermine) stepping 06Checking 386/387 coupling... OK, FPU using exception 16 error reporting.Checking 'hlt' instruction... OK.POSIX conformance testing by UNIFIXmtrr: v1.35a (19990819) Richard Gooch (rgooch@atnf.csiro.au)PCI: PCI BIOS revision 2.10 entry at 0xfda95PCI: Using configuration type 1-----------more-----------Related Commands
reload
clock
show cdp neighbor
To display the WLSE's nearest neighbor on the network, use the following command.
show cdp neighbor
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
CDP neighbor information is usually broadcasted at 3- to 5-minute intervals, so there may be a delay in displaying neighbor information.
Example
This command shows the nearest neighbor on the network.
show cdp neighborcdp neighbor device: Switchdevice type: cisco WS-C2924-XLport: FastEthernet0/12address: 209.165.201.0show cdp run
To display the Cisco Discovery Protocol (CDP) configuration, use the following command.
show cdp run
Syntax Description
This command has no arguments or keywords.
Example
This command displays the CDP configuration:
show cdp runCDP protocol is enabled ...broadcasting interval is every 60 seconds.time-to-live of cdp packets is 180 seconds.CDP is enabled on port eth0.show collectorlog
To display the WLSE's collector log, use the following command.
show collectorlog [page] | include matchstring1 [matchstring2]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the WLSE's collector log, one page at a time:
show collectorlog page/var/adm/CSCOets/log/collector.log2001/12/20 13:43:18 main HSECollector MESSAGE CollectorMain: Waiting for database to be ready2001/12/20 13:43:21 main HSECollector MESSAGE CollectorMain: Database is readySNMPThrPool: Instantiated ex.lib.snmp.lib.timer.DynamicThreadPool, min=15, max=48, maxIdleSecs=02001/12/20 13:43:29 main HSECollector MESSAGE ServletServiceModule: Moxie Servlet Engine is ready to receive requests2001/12/20 13:43:30 PeriodicSchedulerRun:FaultCleanup HSECollector MESSAGE CollectorDBUtils: DB.TableCleanupCommand=[VACUUM ]2001/12/20 13:43:30 PeriodicSchedulerRun:FaultCleanup HSECollector MESSAGE CollectorDBUtils: DB.TableUpdateStatsCommand=[VACUUM ANALYZE ]2001/12/21 10:39:52 Moxie Servlet Engine:Pooled Thread:1 HSECollector MESSAGE ServletContextAdaptor: Collector: initshow config
To display the system configuration, use the following command.
show config
Syntax Description
This command has no arguments or keywords.
Example
This command displays the system configuration:
show confighostname ex1interface ethernet0 209.165.201.0 255.255.255.224 default-gateway 209.165.202.128interface ethernet1 downinterface ethernet2 downinterface ethernet3 downinterface ethernet4 downinterface ethernet5 downip domain-name embu-docip name-server 209.165.202.158username admin epassword ************* privilege 15show daemonslog
To display the WLSE's daemons log, use the following command.
show daemonslog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the WLSE's daemons log, one page at a time:
show daemonslog page/var/adm/CSCOets/log/daemons.log[dmgrDbg] getenv(PX_DBG)=NULL[dmgrDbg] getenv(PX_MY_DEBUG)=NULL[dmgrDbg] getenv(PX_MY_TRACE)=NULL[dmgrDbg] getenv(PX_DBG_LEVEL)=NULL[dmgrDbg][Thu Dec 20 13:42:53 2001]##### INFO ##### re-evaluate DbgLevel=0x0++>>it(1) = 8077978 <HSECollector>++>>it(1) = 8077898 <HSEANIServer>++>>it(1) = 8077428 <PostgreSQL>++>>it(1) = 8077228 <WebServer>++>>it(1) = 8077328 <Tomcat>++>>it(1) = 80770d8 <ExcepReporter>++>>it(1) = 8076fc8 <CDPbrdcast>++>>it(1) = 8076e58 <PerfMon>#!/bin/sh -v#!/bin/sh -vif [ "$NMSROOT" = "" ]; thenNMSROOT=/opt/CSCOetsexport NMSROOTficd $NMSROOT--More--show dmgtdlog
To display the WLSE's daemon manager log, use the following command.
show dmgtdlog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the daemon manager log, one page at a time:
show dmgtdlog page/var/adm/CSCOets/log/dmgtd.logDec 20 13:42:56 ex dmgt[712]: #3001:TYPE=INFO:Using port: tcp/42340.Dec 20 13:42:56 ex dmgt[714]: #3007:TYPE=INFO:Started application(HSECollector) "/bin/nice -n 19 /opt/CSCOets/bin/collector" pid=715.Dec 20 13:42:56 ex dmgt[714]: #3007:TYPE=INFO:Started application(HSEA--More--show webaccesslog
To display the WLSE's Web access log, use the following command.
show webaccesslog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the Web access log, one page at a time:
show webaccesslog page/var/adm/CSCOets/log/access_log209.165.200.224 - - [21/Dec/2001:10:38:54 +0000] "GET / HTTP/1.0" 302 276 "-" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"209.165.200.224 - - [21/Dec/2001:10:38:54 +0000] "GET /perl/login-form.cgi HTTP/1.0" 200 2268 "-" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"209.165.200.224 - - [21/Dec/2001:10:38:55 +0000] "GET /icons/hse.gif HTTP/1.0" 2005554 "http://209.165.201.0:1741/perl/login-form.cgi" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"209.165.200.224 - - [21/Dec/2001:10:38:55 +0000] "GET /icons/left_top.gif HTTP/1.0" 200 324 "http://209.165.201.0:1741/perl/login-form.cgi" "Mozilla/4.76 [en]C-CCK-MCD (Windows NT 5.0; U)"--More--show weberrorlog
To display the WLSE's Web error log, use the following command.
show weberrorlog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the Web error log, one page at a time:
show weberrorlog page/var/adm/CSCOets/log/error_log[Thu Dec 20 13:43:00 2001] [error] (22)Invalid argument: <Perl>: Invalid command'secret', perhaps mis-spelled or defined by a module not included in the serverconfiguration[Thu Dec 20 13:43:00 2001] [error] (22)Invalid argument: <Perl>: Invalid command'line', perhaps mis-spelled or defined by a module not included in the server configuration[Thu Dec 20 13:43:00 2001] [error] (22)Invalid argument: <Perl>:show websslaccesslog
To display the WLSE's Web SSL log, use the following command.
show websslaccesslog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the Web SSL log, one page at a time:
show websslaccesslog pageshow import
To display an imported host file, use the following command.
show import hosts
Syntax Description
hosts Name of server that host files were imported from.
Example
This command displays the imported host file.
show import ftpserver_1show install logs
This command displays the software updates and images available on the configured repository.
show install logs [ short | long ] [ page ]
Syntax Description
short Displays only the names of software updates and images on the configured repository
long Displays the names and descriptions of software updates and images on the configured repository.
page Displays command output one screen at a time.
Example
The following command displays the software updates and images available on the configured browser, one screen at a time:
show install updates page2NAME=EX-2.0ashow ipchains
This command displays the IP chains for the selected interface.
show ipchains eth[ 0-5 ]
Syntax Description
eth[ 0-5 ] Name of the interface port to be configured. Acceptable values are eth0-eth5; eth0 corresponds to Ethernet port 0, and eth1 corresponds to Ethernet port 1. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.
Example
The following command displays the IP chains for the ethernet 0 interface:
show ipchains eth0Chain ineth0 (1 references):target prot opt source destination portsACCEPT tcp -y--l- anywhere ex.help any -> teltACCEPT tcp ------ anywhere ex.help any -> teltACCEPT tcp ------ anywhere ex.help any -> 3345ACCEPT tcp -y--l- anywhere ex.help any -> sshshow hosts
The following command displays the WLSE's host file.
show hosts [ page ]
Syntax Description
page Displays command output one screen at a time.
Example
The following command displays the host file one page at a time:
show hosts pageshow maillog
To display the WLSE's mail log, use the following command.
show maillog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the collector log, one page at a time:
show maillog page/var/log/maillogDec 21 04:02:06 ex sendmail[11643]: EAA11643: from=root, size=307, class=0, pri=30307, nrcpts=1, msgid=<200112210402.EAA11643@ex.help>, relay=root@localhostDec 21 04:02:06 ex sendmail[11660]: EAA11643: SYSERR(root): Cannot exec /usr/bin/procmail: No such file or directoryDec 21 04:02:06 ex sendmail[11643]: EAA11643: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=local, stat=Operating system errorshow proc
To display the WLSE's active process statistics, use the following command.
show proc [ page ]
Syntax Description
page Displays command output one screen at a time.
Example
The following command displays the active process statistics one page at a time:
show proc pagePID ELAPSED SZ STARTED TTY COMMAND1 22:29:10 277 Thu Dec 20 13:42:29 2001 ? init2 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kflushd3 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kupdate4 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kpiod5 22:29:10 0 Thu Dec 20 13:42:29 2001 ? kswapd6 22:29:03 0 Thu Dec 20 13:42:36 2001 ? kreiserfsd85 22:29:00 0 Thu Dec 20 13:42:39 2001 ? kreiserfsd86 22:29:00 0 Thu Dec 20 13:42:39 2001 ? kreiserfsd87 22:28:59 0 Thu Dec 20 13:42:40 2001 ? kreiserfsd88 22:28:59 0 Thu Dec 20 13:42:40 2001 ? kreiserfsd89 22:28:59 0 Thu Dec 20 13:42:40 2001 ? kreiserfsd208 22:28:57 290 Thu Dec 20 13:42:42 2001 ? watchdog322 22:28:51 342 Thu Dec 20 13:42:48 2001 ? idled510 22:28:51 290 Thu Dec 20 13:42:48 2001 ? syslogd519 22:28:50 361 Thu Dec 20 13:42:49 2001 ? klogd637 22:28:48 327 Thu Dec 20 13:42:51 2001 ? crond651 22:28:48 286 Thu Dec 20 13:42:51 2001 ? inetd17076 18:23 364 Fri Dec 21 11:53:16 2001 ? \_ in.telnetd17077 18:23 575 Fri Dec 21 11:53:16 2001 0 | \_ login-----------more-----------show repository
To display the status or the access log of a configured repository, use the following command.
show repository {[ status | access-log ]} [ page ]
Syntax Description
status Displays the status of the local repository
access-log Displays the access-log of the local repository
page Displays command output one screen at a time.
Example
This command displays the status of the configured repository:
show repository statusRepository Source: 171.69.212.146:9851 repository is running.show route
To display the routes currently configured, use the following command.
show route
Syntax Description
This command has no arguments or keywords.
Example
This command displays the currently configured routes
show routeDestination Gateway Genmask Flags Metric Ref Use Iface209.165.200.224 0.0.0.0 255.255.255.224 UH 0 0 0 eth0209.165.200.225 0.0.0.0 255.255.255.224 U 0 0 0 eth0209.165.200.254 0.0.0.0 255.255.255.224 U 0 0 0 lo209.165.202.128 0.0.0.0 255.255.255.224 UG 0 0 0 eth0show securitylog
To display the WLSE's security log information, use the following command.
show securitylog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the security log, one page at a time:
show securitylog page/var/log/secureDec 20 13:45:23 ex in.tftpd[1381]: connect from 209.165.200.224Dec 20 13:45:27 ex in.tftpd[1383]: connect from 209.165.200.224Dec 20 13:45:31 ex in.tftpd[1385]: connect from 209.165.200.224Dec 20 13:45:35 ex in.tftpd[1387]: connect from 209.165.200.224Dec 20 13:45:39 ex in.tftpd[1389]: connect from 209.165.200.224Dec 20 13:45:44 ex in.tftpd[1391]: connect from 209.165.200.224Dec 20 13:45:48 ex in.tftpd[1393]: connect from 209.165.200.224Dec 20 13:45:52 ex in.tftpd[1395]: connect from 209.165.200.224Dec 20 13:45:56 ex in.tftpd[1397]: connect from 209.165.200.224Dec 20 13:46:00 ex in.tftpd[1399]: connect from 209.165.200.224Dec 20 13:46:04 ex in.tftpd[1412]: connect from 209.165.200.224Dec 20 13:46:27 ex in.tftpd[1424]: connect from 209.165.200.224Dec 20 13:46:31 ex in.tftpd[1426]: connect from 209.165.200.224Dec 20 13:46:35 ex in.tftpd[1428]: connect from 209.165.200.224Dec 20 13:46:39 ex in.tftpd[1430]: connect from 209.165.200.224Dec 20 13:46:43 ex in.tftpd[1432]: connect from 209.165.200.224Dec 20 13:46:47 ex in.tftpd[1434]: connect from 209.165.200.224--More--show snmp-server
The following command displays the WLSE's SNMP configuration:
show snmp-server
Syntax Description
This command has no arguments or keywords.
Example
The following command displays the WLSE's SNMP configuration:
show snmp-serverRW community string: privateRO community string: publicsysLocation: your site informationsysContact: your contact informationtrap-forwarding is disabledshow ssh-version
The following command displays the type of SSH that is enabled:
show ssh-version
Syntax Description
This command has no arguments or keywords.
Example
This command displays the type of SSH that is enabled:
show ssh-versionSSH1, SSH2show syslog
To display syslog information, use the following command.
show syslog [ page ] [ include matchstring1 [ matchstring2 ]]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Usage Guidelines
To filter command output to include only the records that contain the specified string(s) of characters, use the include option with one or two character strings to search for.
If you include two strings, the command outputs only those records that contain both character strings.
Example
This command displays syslog information:
show syslogJun 20 16:04:23 ex syslogd 1.3-3: restart.Jun 20 16:04:23 ex syslog: syslogd startup succeededJun 20 16:04:23 ex kernel: klogd 1.3-3, log source = /proc/kmsg start.Jun 20 16:04:23 ex kernel: Inspecting /boot/System.map-2.2.16-13bipse2Jun 20 16:04:23 ex syslog: klogd startup succeeded-----------more-----------Related Command
interface
show tech
Use the following command to display information necessary for Cisco's Technical Assistance Center to assist you:
show tech [ page ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
Example
This command displays system information necessary for Cisco's Technical Assistance Center to assist you.
show tech page/bin/cat: /var/log/secure: Permission deniedCopyright (c) 1999-2000 by Cisco Systems, Inc.Build Version (166) Mon Jun 11 16:56:23 PDT 2001Linux/UID32 version 2.2.16-13bipsec.uid32 (gcc version egcs1Uptime: 0 days 18 hours 35 mins2 Ethernet interfaceshostname exinterface ethernet0 209.165.200.224 255.255.255.224 default-gateway 209.165.202.128ip name-server 209.165.201.0username admin epassword ************* privilege 15eth0 Link encap:Ethernet HWaddr 00:02:B3:35:FD:CCinet addr:209.165.200.224 Bcast:209.165.201.31 Mask:255.255.255.224-----------more-----------show telnetenable
To display the WLSE's Telnet status, use the following command.
show telnetenable
Syntax Description
This command has no arguments or keywords.
Example
The following command shows whether Telnet is enabled or disabled:
show telnetenabletelnet enable for: ALLshow tomcatlog
To display the WLSE's Tomcat log, use the following command.
show tomcatlog [ page ] | include matchstring1 [ matchstring2 ]
Syntax Description
page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.
include Filters the command output to display only the records that contain the specified string of characters.
matchstring1 String of characters to search for in the command output.
matchstring2 (Optional) Another string of characters to search for in the command output.
Example
The following command displays the tomcat log, one page at a time:
show tomcatlog page/var/adm/CSCOets/log/tomcat.log2001-12-20 01:43:06 - ContextManager: Adding context Ctx( /examples )2001-12-20 01:43:06 - ContextManager: Adding context Ctx( /admin )Starting tomcat. Check logs/tomcat.log for error messages2001-12-20 01:43:06 - ContextManager: Adding context Ctx( )getUIProperties(): unhandled error could be a bad ui.propertiesjava.lang.NullPointerExceptionat java.io.Reader.<init>(Reader.java:68)at java.io.InputStreamReader.<init>(InputStreamReader.java:96)--More--shutdown
To shut down the system in preparation for powering it off, use the following command.
shutdown
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
All processes running on the WLSE will stop, and it will not respond until you power it off and back on.
You are prompted to verify the shutdown. Enter yes to continue, or no to cancel the shutdown.
Caution
Example
This command shuts down the system:
shutdownRelated Commands
reload
snmp-server
To configure an simple network management protocol (SNMP) agent, use the following command.
snmp-server { community community-name [ RO | RW ] | location sysLocation-info | contact sysContact-info }
no snmp-server { community community-name | location | contact }
Syntax Description
community sets the community strings that permit access to the SNMP.
community-name the community name string.
RO read only.
RW read / write .
location sets the system location string.
sysLocation-info the location string.
contact sets the contact string.
sysContact-info the contact string.
Example
This command sets an SNMP contact string:
snmp-server contact Dial System Operator at Beeper # 27345ssh
To use SSH to connect to an external host, use the following command.
ssh [ options ] host [ command ]
Syntax Description
options Standard SSH options. For a list of these options, enter the ssh command without any arguments.
host Name or IP address of host to which to connect.
command Command for the external host to execute.
Example
Enter the following command to connect to an external host using SSH:
ssh 209.165.200.224ssh-version
Use the following command to enable Secure Shell (SSH) 1, SSH 2, or both SSH 1 and SSH 2.
ssh-version { ssh1 | ssh2 | both }
Syntax Description
ssh1 Enables SSH 1
ssh2 Enables SSH 2
both Enables both SSH 1 and SSH2
Example
This command enables ssh1:
ssh-version ssh1telnet
To Telnet to an external host, use the following command.
telnet { hostname | ip-address } [ portnumber ]
Syntax Description
hostname Hostname of the external device.
ip-address IP address of the external device.
portnumber portnumber of the external device.
Example
Enter the following command to telnet to port 9851 of a system with the IP address 209.165.200.224:
telnet 209.165.200.224 9851telnetenable
To configure Telnet access, use the following command.
telnetenable { enable [ ip-addresses | domains ] | disable | status }
Syntax Description
enable Enables Telnet access to the system.
disable Disables Telnet access to the system.
status Displays current access status.
ip-addresses IP addresses of systems allowed Telnet access. If this argument is used, no other machines will be allowed access. Multiple IP address are allowed.
domains Domains of systems allowed Telnet access. If this argument is used, machines with domains other than the specified domain will be denied Telnet access. Multiple domains are allowed.
Default
The default is disable.
Usage Guidelines
To enable Telnet access to the system for all IP source addresses, use the telnetenable enable command alone. To enable specific IP addresses, use the telnetenable enable command followed by the IP addresses.
Example
This command enables Telnet for all IP source addresses:
telnetenable enableusername
To create a new user account or change an account's properties, use the following command. Use the no form of the command to remove a user account.
username name password password [ privilege { 0 | 15 }]
no username name
Syntax Description
name Name of the user account to create or remove. The user name can be up to 32 characters in length.
password Specifies a password for the account. Passwords can be from 5 to 8 characters in length.
password The password for the account.
privilege (Optional) Specifies the account privilege level.
0 Gives the account level 0 privileges. This is the default.
15 Gives the account level 15 privileges.
Usage Guidelines
Use the no form of the command to remove a user account. The default privilege level is 0 if you do not provide the privilege option.
For the allowable characters in the user name and password, see the naming guidelines appendix in the Web interface online help or in the User Guide for the CiscoWorks Wireless LAN Solution Engine.
Users that you create by using this command do not automatically have the HTTP access that is required for using the WLSE's web interface. To provide such users with HTTP access:
Step 1
Step 2
Step 3
a.
b.
For more information about managing users, see online help or the User Guide for the Wireless LAN Solution Engine.
Example
This command creates a user account named user1 with password password1 and privilege level 15:
username user1 password password1 privilege 15This command removes the user account:
no username user1webtimeout
Sets the timeout period for the Web interface. After the timeout expires, you are logged out. The default is 30 minutes (1800 seconds).
webtimeout [ status | time seconds | default ]
Syntax Description
status Shows the current web session timeout setting.
time seconds Sets the web session timeout period.
default Resets the web session timeout to the default 30 minutes (1800 seconds).
Example
webtimeout time 3600 secondsMaintenance Image Commands
This section describes the commands that are available when the system is booted from the maintenance image. For more information about the maintenance image, refer to the Installation and Configuration Guide for the Wireless LAN Solution Engine.
erase config
This command is identical to the level-15 erase config command. For a description, see erase config.
fsck
To check and repair the filesystem, use the following command.
fsck
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command might prompt you for confirmation before making certain repairs.
Example
The following command checks and repairs the filesystem:
fsckreload
This command is identical to the level 15 reload command. For a description, see reload.
