![]() |
Aironet 1100 Series Access Point Command Reference, 12.2(4)JA
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
New and Revised Cisco IOS Commands
![]() |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Table of ContentsNew and Revised Cisco IOS CommandsPrivileged Exec Commands clear dot11 client clear dot11 hold-list clear dot11 statistics clear iapp rogue-ap-list clear iapp statistics clear ip proxy-mobile traffic clear ip proxy-mobile subnet-map debug iapp debug ip proxy-mobile debug dot11 debug dot11 aaa debug dot11 dot11radio dot11 dot11radio antenna-alignment dot11 dot11radio linktest dot11 dot11radio meter led flash show controllers dot11radio show dot11 associations show dot11 network-map show dot11 statistics client-traffic show iapp rogue-ap-list show iapp standby-parms show iapp statistics show interfaces dot11radio show interfaces dot11radio aaa show interfaces dot11radio statistics show ip proxy-mobile show ip proxy-mobile aaa requests show ip proxy-mobile agent show ip proxy-mobile detail show ip proxy-mobile node show ip proxy-mobile registration show ip proxy-mobile subnet-map show ip proxy-mobile traffic show ip proxy-mobile visitor show led flash test dot11 dot11radio compliance Global Configuration Commands class-map dot11 holdoff-time dot11 igmp snooping-helper dot11 network-map dot11 phone iapp standby mac-address iapp standby poll-frequency iapp standby timeout interface dot11radio ip proxy-mobile aap ip proxy-mobile enable ip proxy-mobile pause ip proxy-mobile secure logging buffered match (class-map configuration) Configuration Interface Commands accounting (ssid configuration mode) antenna authentication network-eap (ssid configuration mode) authentication open (ssid configuration mode) authentication shared (ssid configuration mode) beacon bridge-group port-protected broadcast-key channel dot11 extension aironet dot1x client-timeout dot1x reauth-period encryption key encryption mode wep fragment-threshold guest-mode (ssid configuration mode) infrastructure-client infrastructure-ssid (ssid configuration mode) ip proxy-mobile ip proxy-mobile (ssid configuration mode) l2-filter bridge-group-acl max-associations (ssid configuration mode) packet retries parent parent timeout payload-encapsulation power client maximum power local preamble-short rts speed ssid station-role traffic-class vlan (ssid configuration mode) world-mode New and Revised Cisco IOS CommandsThis chapter contains new and revised IOS commands supported by the access point. This chapter contains the following topics: Privileged Exec CommandsThis section contains the new and revised Privileged Exec IOS commands supported by the Cisco Aironet 1100 Series Access Point. clear dot11 clientUse the clear dot11 client privileged EXEC command to deauthenticate a radio client with a specified media access control (MAC) address. The client must be directly associated with the access point, not a repeater.
Syntax Description Defaults Command Modes Command History Examples This example shows how to deauthenticate a specific radio client: You can verify that the client was deauthenticated by entering the following privileged EXEC command: Related Commands
clear dot11 hold-listUse the clear dot11 hold-list privileged EXEC command to reset the MAC, LEAP, and EAP authentications hold list.
Syntax Description This command has no arguments or keywords. Defaults This command has no default setting. Command Modes Command History Examples This example shows how to clear the hold-off list of MAC authentications: clear dot11 statisticsUse the clear dot11 statistics privileged EXEC command to reset statistic information for a specific radio interface or for a particular client with a specified MAC address.
Syntax Description Defaults This command has no default setting. Command Modes Command History Examples This example shows how to clear radio statistics for radio interface 0: This example shows how to clear radio statistics for the client radio with a MAC address of 0040.9631.81cf: You can verify that the radio interface statistics are reset by entering the following privileged EXEC command: Related Commands
clear iapp rogue-ap-listUse the clear iapp rogue-ap-list privileged EXEC command to clear the list of IAPP rogue access points.
Syntax Description This command has no arguments or keywords. Defaults This command has no default setting. Command Modes Command History Examples This example shows how to clear the IAPP rogue access point list: You can verify that the rogue AP list was deleted by entering the show iapp rogue-ap-list privileged EXEC command. Related Commands
clear iapp statisticsUse the clear iapp statistics privileged EXEC command to clear all the IAPP statistics.
Syntax Description This command has no arguments or keywords. Defaults This command has no default setting. Command Modes Command History Examples This example shows how to clear the IAPP statistics: You can verify that the iapp statistics were cleared by entering the following privileged EXEC command: Related Commands
clear ip proxy-mobile trafficUse the clear ip proxy-mobile traffic privileged EXEC command to clear all the statistics related to Proxy Mobile IP.
Syntax Description This command has no arguments or keywords. Defaults This command has no default setting. Command Modes Command History Examples This example shows how to clear the proxy-mobile statistics: You can verify that traffic statistics are cleared by entering the show ip proxy-mobile traffic privileged EXEC command. Related Commands
clear ip proxy-mobile subnet-mapUse the clear ip proxy-mobile subnet-map privileged EXEC command to clear the Proxy Mobile IP subnet map table and obtain a new table from the AAP. On an AAP, this command immediately synchronizes its tables with the other AAPs.
This command has no arguments or keywords. Defaults This command has no default setting. Command Modes Command History Examples This example shows how to clear the Proxy Mobile IP subnet map: You can verify that information was deleted by entering the show ip proxy-mobile subnet-map privileged EXEC command. Related Commands
debug iappUse the debug iapp privileged EXEC command to begin debugging of IAPP operations. Use the no form of this command to stop the debug operation.
Syntax Description Defaults This command has no default setting. Command Modes Command History Examples This example shows how to begin debugging of IAPP packets: This example shows how to begin debugging of IAPP events: This example shows how to begin debugging of IAPP errors: Related Commands debug ip proxy-mobileUse the debug ip proxy-mobile privileged EXEC command to begin debugging of Proxy Mobile IP activities. If a component is not specified in the command, debugging of all components is activated. Use the no form of this command to stop the debug operation and return to the default configuration.
Syntax Description
Defaults Command Modes Command History Examples This example shows how to begin debugging of all proxy-mobile activities: This example shows how to stop debugging of registration events: You can check debugging information by entering the show debugging privileged EXEC command. Related Commands debug dot11Use the debug dot11 privileged EXEC command to begin debugging of radio functions. The command options are configuration, event, radio driver, packet forwarding, access point management activities, Association Management Network Map, system log, and the virtual interface. Use the no form of this command to stop the debug operation.
Syntax Description
Defaults Command Modes Command History Examples This example shows how to begin debugging of all radio related events: This example shows how to begin debugging of radio packets: This example shows how to begin debugging of the radio system log: This example shows how to stop debugging of all radio related events: Related Commands debug dot11 aaaUse the debug dot11 aaa privileged EXEC command to begin debugging of dot11 authentication, authorization, and accounting (AAA) operations. Use the no form of this command to stop the debug operation.
Syntax Description Defaults Command Modes Command History Examples This example shows how to begin debugging of dot11 AAA accounting packets: This example shows how to begin debugging of all dot1x AAA packets: Related Commands
debug dot11 dot11radioUse the debug dot11 dot11radio privileged EXEC command to turn on radio debug options. These options include run RF monitor mode and trace frames received or transmitted on the radio interface. Use the no form of this command to stop the debug operation.
Syntax Description Defaults Command Modes Command History Examples This example shows how to begin dumping of driver event packets to the logging buffer: This example shows how to begin debugging of the radio firmware: This example shows how to begin monitoring of all 801.11 radio packets: This example shows how to stop monitoring of all radio packets: Related Commands dot11 dot11radio antenna-alignmentUse the dot11 dot11radio antenna-alignment privileged EXEC command to activate the antenna-alignment tool for an radio interface. Use this tool to test and align the access point antenna with another remote antenna.
Syntax Description Defaults The default alignment timeout is 5 seconds. Command Modes Command History Usage Guidelines During the antenna alignment test, the radio disassociates from its parent, probes adjacent access points, and records the MAC address and signal strength of responses it receives. After the timeout, the radio reassociates with its parent. Clients connected to the access point through its parent lose their connection for the duration of the test; clients connected to a repeater maintain their connection and can abort the test using the escape sequence (Ctrl key and ^ key). You display the last 10 results using the show dot11 antenna-alignment command, which lists the MAC address and signal level for the access points that responded to the probe. Examples This example shows how to start the antenna-alignment test for radio interface 0: Related Commands
dot11 dot11radio linktestUse the dot11 dot11radio linktest privileged EXEC command to test a radio link between the access point and a client device.
Syntax Description Defaults The default target for a root access point is the first client. The default target for a repeater is its parent access point. The default count specifies that test runs once. The default interval is 5 seconds. The default packet-size is 512 bytes. The default rate is the automatic rate-shifting algorithm. Command Modes Command History Usage Guidelines The link test verifies the radio link between the access point and a client device by sending the client a series of special packets, which the client returns to the access point. The client adds information to the packets that quantify how well it received the request. Results are displayed as a table of packet statistics, quality, and signal-level information. If you specify an interval, the test repeats continuously separated by the specified number of seconds. To abort the test, type the escape sequence (Ctrl key and ^ key). Without an interval, the test runs once. Examples This example shows how to initiate a radio link test to send 10 packets to client MAC address 0040963181CF on radio interface 0: This example shows how to initiate a radio link test to send 100 packets of 500 bytes to client MAC address 0040963181CF on radio interface 0: Related Commands
dot11 dot11radio meterUse the dot11 dot11radio meter privileged EXEC command to measure the performance of packet forwarding. To display the results, use the show dot11 statistics metered-traffic command.
Syntax Description Defaults Command Modes Command History Examples This example shows how to activate the meter tool for radio interface 0: Related Commands led flashUse the led flash privileged EXEC command to start or stop the flashing of the LED indicators on the access point for a specified number of seconds. Without arguments, this command flashes the LEDs continuously.
Syntax Description Defaults The default is continuous flashing or blinking of the LEDs. Command Modes Command History Examples This example shows how to flash or blink the access point LEDs for 30 seconds: Related Commands
show controllers dot11radioUse the show controllers dot11radio privileged EXEC command to display the radio controller status.
Syntax Description Defaults Command Modes Command History Examples This example shows how to display the radio controller status for radio interface 0: Related Commands show dot11 associationsUse the show dot11 associations privileged EXEC command to display the radio association table, radio association statistics, or to selectively display association information about all repeaters, all clients, a specific client, or basic service clients.
Syntax Description Defaults When parameters are not specified, this command displays the complete radio association table. Command Modes Command History Examples This example shows how to display the radio association table: This example shows how to display all client devices associated with the access point: This example shows how to display access point radio statistics: Related Commands
show dot11 network-mapUse the show dot11 network-map privileged EXEC command to display the radio network map. The radio network map contains information from Cisco access points in the same Layer 2 domain as this access point.
Syntax Description This command has no arguments or keywords. Defaults Defaults Command Modes Command History Usage Guidelines This command displays network map information only if you first enable the network map feature with the dot11 network map command. Examples This example shows how to display the radio network map: Related Commands
show dot11 statistics client-trafficUse the show dot 11 statistics client-traffic privileged EXEC command to display the radio client traffic statistics.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display the radio client traffic statistics: Related Commands show iapp rogue-ap-listUse the show iapp rogue-ap-list privileged EXEC command to display a list of rogue access points.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Usage Guidelines The list contains an entry for each access point that a client station reported as a possible rogue access point. Each list entry contains the following information: Rogue APMAC address of the reported rogue access point CountThe number of times the access point was reported Last Rpt SrcThe MAC address of the last client to report the rogue access point Prev Rpt SrcThe MAC address of any previous client that reported the rogue access point Last(Min)The number of minutes since the last report 1st(Min)The number of minutes since the access point was first reported as a possible rogue NameThe name of a Cisco rogue access point The following reason codes are displayed: 1The rogue was not running 802.1x 2Authentication with the rogue timed out 4Authentication challenge failed Examples This example shows how to display the list of IAPP rogue access points: Related Commands
show iapp standby-parmsUse the show iapp standby-parms privileged EXEC command to display IAPP standby parameters when a standby MAC address is configured. The information displayed includes the standby MAC address, the time-out value, and the poll-frequency value.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display the IAPP standby parameters: Related Commands show iapp statisticsUse the show iapp statistics privileged EXEC command to display the IAPP transmit and receive statistics.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Usage Guidelines This command displays IAPP transmit and receive packet counts and IAPP error counts. The operating mode for the access point is also displayed. Examples This example shows how to display the IAPP statistics: Related Commands
show interfaces dot11radioUse the show interfaces dot11radio privileged EXEC command to display the radio interface configuration and statistics.
Syntax Description Defaults Command Modes Command History Examples This example shows how to display the radio interface configuration and statistics: Related Commands show interfaces dot11radio aaaUse the show int dot11radio privileged EXEC command to display the radio interface information.
Syntax Description Defaults Command Modes Command History Examples This example shows how to display AAA information for interface 0: Related Commands
show interfaces dot11radio statisticsUse the show interfaces dot11radio statistics privileged EXEC command to display the radio interface statistics.
Syntax Description Defaults Command Modes Command History Examples This example shows how to display the radio interface statistics for interface 0: Related Commands
show ip proxy-mobileUse the show ip proxy-mobile privileged EXEC command to display information about Proxy Mobile IP functionality.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display information about Proxy Mobile IP functionality: Related Commands show ip proxy-mobile aaa requestsUse the show ip proxy-mobile aaa requests privileged EXEC command to display information about mobile nodes that have pending Proxy Mobile IP AAA requests.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display information about mobile nodes that have pending Proxy Mobile IP AAA requests: Related Commands
show ip proxy-mobile agentUse the show ip proxy-mobile agent privileged EXEC command to display information about the Proxy Mobile IP agents discovered by the access point.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display all Proxy Mobile IP agents discovered by the access point: Related Commands
show ip proxy-mobile detailUse the show ip proxy-mobile detail privileged EXEC command to display Proxy Mobile IP statistics, the subnet map, and all security associations.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display the Proxy Mobile IP statistics, the subnet map, and all security associations: Related Commands
show ip proxy-mobile nodeUse the show ip proxy-mobile node privileged EXEC command to display information about a specific Proxy Mobile IP node or all Proxy Mobile IP nodes on the access point.
Syntax Description Defaults Displays all Proxy Mobile IP nodes on the access point when an IP address is not specified. Command Modes Command History Examples This example shows how to display information about all Proxy Mobile IP nodes on the access point: Related Commands
show ip proxy-mobile registrationUse the show ip proxy-mobile registration privileged EXEC command to display pending or accepted Proxy Mobile IP registrations.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display pending or accepted Proxy Mobile IP registrations: Related Commands
show ip proxy-mobile subnet-mapUse the show ip proxy-mobile subnet-map privileged EXEC command to display the Proxy Mobile IP subnet map table.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display the Proxy Mobile IP subnet map table: Related Commands
show ip proxy-mobile trafficUse the show ip proxy-mobile traffic privileged EXEC command to display all the statistics related to Proxy Mobile IP.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display all the Proxy Mobile IP statistics: Related Commands
show ip proxy-mobile visitorUse the show ip proxy-mobile visitor privileged EXEC command to display the visiting Proxy Mobile IP nodes.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display about visiting Proxy Mobile IP nodes: Related Commands
show led flashUse the show led flash privileged EXEC command to display the LED flashing status.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to display the LED flashing status: Related Commands
test dot11 dot11radio complianceUse the test dot11 dot11radio compliance privileged EXEC command to run regulatory domain compliance tests on the radio.
Syntax Description Defaults This command has no defaults. If you change the settings, the new values become the defaults until the access point is restarted. Command Modes Command History Usage Guidelines The compliance test runs continuously and blocks all console inputs except the escape sequence. To stop the test, type the escape sequence (Ctrl key and ^ key). Examples This example shows how to initiate the radio compliance burst test on radio interface 0 and to use a bit rate of 11Mbps: Global Configuration CommandsThis section contains the new and revised IOS commands supported by the access point in global configuration mode. class-mapUse the class-map global configuration command to create a class map to be used for matching packets to the class whose name you specify and to enter class-map configuration mode. Use the no form of this command to delete an existing class map and return to global configuration mode.
Syntax Description Defaults This command has no defaults, and there is not a default class map. Command Modes Command History Usage Guidelines Use this command to specify the name of the class for which you want to create or modify class-map match criteria and to enter class-map configuration mode. In this mode, you can enter one match command to configure the match criterion for this class. The class-map command and its subcommands are used to define packet classification, marking, and aggregate policing as part of a globally named service policy applied on a per-interface basis. After you are in quality of service (QoS) class-map configuration mode, these configuration commands are available:
Only one match criterion per class map is supported. For example, when defining a class map, only one match command can be issued. Because only one match command per class map is supported, the match-all and match-any keywords function the same. Only one access control list (ACL) can be configured in a class map. The ACL can have multiple access control entries (ACEs). Examples This example shows how to configure the class map called class1. class1 has one match criterion, which is an access list called 103. This example shows how to delete the class map class1: You can verify your settings by entering the show class-map privileged EXEC command. Related Commands dot11 holdoff-timeUse the dit11 holdoff-time configuration interface command to specify the hold-off time for MAC address authentication. Use the no form of the command to reset the parameter to defaults.
Syntax Description Defaults The default holdoff-time is 0 (disabled). Command Modes Command History Examples This example shows how to specify a 2-minute hold-off time. This example shows how reset the hold-off time to defaults. Related Commands dot11 igmp snooping-helperUse the dot11 igmp snooping-helper global configuration command to begin sending IGMP Query requests when a new client associates with the access point. Use the no form of this command to disable the IGMP Query requests.
Syntax Description This command has no arguments or keywords. Defaults IGMP Query requests are disabled. Command Modes Command History Examples This example shows how to enable IGMP Query requests: This example shows how to stop or disable the IGMP Query requests: 1100-AP(config)# no dot11 igmp snooping-helper dot11 network-mapUse the dot11 network-map global configuration command to enable the radio network map feature. When enabled, the access point broadcasts a IAPP GenInfo Request every collection interval. This request solicits information from all Cisco access points in the same Layer 2 domain. Upon receiving a GetInfo Request, the access point sends a unicast IAPP GenInfo Response back to the requester. The access point uses these IAPP GenInfo Responses to build a network-map.
Syntax Description Defaults The default collect interval is 5 seconds. Command Modes Command History Examples This example shows how to generate a radio network map with a collection interval of 30 seconds: You can verify the network map by using the show dot11 network-map EXEC command. Related Commands
dot11 phoneUse the dot11 phone global configuration command to enable or disable IEEE 802.11compliance phone support. Use the no form of this command to disable the IEEE 802.11 phone.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Usage Guidelines Enabling IEEE 802.11 compliance phone support adds information to the access point beacons and probe responses. This information helps some 802.11 phones make intelligent choices about the access point to which they should associate. Some phones do not associate with an access point without this additional information. Examples This example shows how to enable IEEE 802.11 phone support: This example shows how to stop or disable the IEEE 802.11 phone support: 1100-AP(config)# no dot11 phone iapp standby mac-addressUse the iapp standby mac-address global configuration command to configure an access point to be in standby mode and specify the active access point's MAC address. Use the no form of this command to disable the access point standby mode.
Syntax Description Defaults This command has no default setting. Command Modes Command History Examples This example shows how to place the access point in standby mode and indicate the MAC address of the active access point: This example shows how to stop or disable the standby mode: 1100-AP(config)# no iapp standby mac-address 0040.9631.81cf Related Commands You can verify your settings by entering the show class-map privileged EXEC command.
iapp standby poll-frequencyUse the iapp standby poll-frequency global configuration command to configure the standby mode polling interval. Use the no form of this command to clear the access point standby mode poll frequency.
Syntax Description Defaults Command Modes Command History Examples This example shows how to specify the standby mode poll frequency of 5 minutes: This example shows how to stop or disable the standby mode: 1100-AP(config)# no iapp standby mac-address 0040.9631.81cf Related Commands You can verify your settings by entering the show class-map privileged EXEC command.
iapp standby timeoutUse the iapp standby timeout global configuration command to configure the standby mode polling timeout value. Use the no form of this command to clear the standby mode polling timeout value.
Syntax Description Defaults Command Modes Command History Examples This example shows how to specify the standby mode polling timeout of 1 minute: This example shows how to clear the standby mode timeout value: 1100-AP(config)# no iapp standby timeout Related Commands You can verify your settings by entering the show class-map privileged EXEC command.
interface dot11radioUse the interface dot11radio global configuration command to place access point into the radio configuration mode.
Syntax Description Defaults The default radio interface number is 0. Command Modes Command History Examples This example shows how to place the access point into the radio configuration mode: Related Commands
ip proxy-mobile aapUse the ip proxy-mobile aap global configuration command to specify the IP addresses for the primary and secondary AAPs. Use the no form of this command to clear the primary AAP and secondary AAP addresses.
Syntax Description Defaults AAP address information is not defined by default. Command Modes Command History Examples This example shows how to specify the IP addresses for Proxy Mobile IP primary and secondary AAPs: This example shows how to clear out the IP addresses for the Proxy Mobile IP AAPs: 1100-AP(config)# no ip proxy-mobile aap Related Commands You can verify your settings by entering the show class-map privileged EXEC command.
ip proxy-mobile enableUse the ip proxy-mobile enable global configuration command to enable or disable proxy-mofile IP. Use the no form of this command to disable Proxy Mobile IP and remove all associated CLIs.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to enable Proxy Mobile IP: This example shows how to disable Proxy Mobile IP and remove all associated CLIs: 1100-AP(config)# no ip proxy-mobile enable Related Commands You can verify your settings by entering the show class-map privileged EXEC command.
ip proxy-mobile pauseUse the ip proxy-mobile pause global configuration command to enable or disable proxy-mofile IP without removing all associated CLIs. Use the no form of this command to re-enable Proxy Mobile IP.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to disable Proxy Mobile IP without removing the configuration: This example shows how to re-enable Proxy Mobile IP: 1100-AP(config)# no ip proxy-mobile pause Related Commands You can verify your settings by entering the show class-map privileged EXEC command.
ip proxy-mobile secureUse the ip proxy-mobile secure global configuration command to specify the Proxy Mobile IP security association information for a range of IP addresses. Use the no form of this command to reset the parameters to default values.
Syntax Description
Defaults The default key setting is ASCII. Command Modes Command History Examples This example shows how to configure Proxy Mobile IP security association information for an IP address range of 10.9.1.20 to 10.9.1.60 with an ASCII key of 123456789abcd: This example shows how to reset the Proxy Mobile IP security association information to defaults: 1100-AP(config)# no ip proxy-mobile secure Related Commands
logging bufferedUse the logging buffered global configuration command to begin logging of messages to an internal buffer. Use the no form of this command to stop logging messages.
Syntax Description
Defaults Command Modes Command History Examples This example shows how to begin logging severity 3 messages to an internal 5000 byte buffer: This example shows how to stop the message logging: 1100-AP(config)# no logging buffered Related Commands
match (class-map configuration)Use the match class-map configuration command to define the match criteria to classify traffic. Use the no form of this command to remove the match criteria.
Syntax Description
Defaults Command Modes Command History Usage Guidelines Use the class-map global configuration command to enter the class-map configuration mode. The match command in the class-map configuration mode is used to specify which fields in the incoming packets are examined to classify the packets. Only the IP access group or the MAC access group matching to the Ether Type/Len are supported. You can use the match ip dscp dscp-list command only in a policy map that is attached to an egress interface. Only one match command per class map is supported. For the match ip dscp dscp-list or the match ip precedence ip-precedence-list command, you can enter a mnemonic name for a commonly used value. For example, you can enter the match ip dscp af11 command, which is the same as entering the match ip dscp 10 command. You can enter the match ip precedence critical command, which is the same as entering the match ip precedence 5 command. For a list of supported mnemonics, enter the match ip dscp ? or the match ip precedence ? command to see the command-line help strings. Examples This example shows how to create a class map called class2, which matches all the incoming traffic with DSCP values of 10, 11, and 12: This example shows how to create a class map called class3, which matches all the incoming traffic with IP-precedence values of 5, 6, and 7: This example shows how to delete the IP-precedence match criteria and to classify traffic by vlan: You can verify your settings by entering the show class-map privileged EXEC command. Related Commands
Configuration Interface CommandsThis section contains the new and revised IOS commands supported by the access point in configuration interface mode. accounting (ssid configuration mode)Use the accounting ssid configuration mode command to enable RADIUS accounting for the radio interface (for the specified SSID). Use the no form of the command to disable accounting.
Syntax Description Defaults Command Modes Command History Usage Guidelines You create accounting lists using the aaa accounting command. These lists indirectly reference the server where the accounting information is stored. Examples This example shows how to enable RADIUS accounting and set the RADIUS server name: This example shows how to disable RADIUS accounting: Related Commands
antennaUse the antenna configuration interface command to configure the radio receive or transmit antenna settings. Use the no form of this command to reset the receive antenna to defaults.
Syntax Description Defaults The default antennal configuration is diversity. Command Modes Command History Examples This example shows how to specify the right receive antenna option: This example shows how to set the receive antenna option to defaults: Related Commands
authentication network-eap (ssid configuration mode)Use the authentication network-eap ssid configuration mode command to configure the radio interface (for the specified SSID) to support network-EAP authentication with optional MAC address authentication. Use the no form of the command to disable network-eap authentication for the SSID.
Syntax Description Defaults Command Modes Command History Usage Guidelines Use this command to authenticate clients using the network EAP method, with optional MAC address screening. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored. Examples This example shows how to set the authentication to open for devices on a specified address list: This example shows how to reset the authentication to default values: Related Commands
authentication open (ssid configuration mode)Use the authentication open ssid configuration mode command to configure the radio interface (for the specified SSID) to support open authentication and optionally MAC address authentication or EAP authentication. Use the no form of the command to disable open authentication for the SSID.
Syntax Description Defaults Command Modes Command History Usage Guidelines Use this command to authenticate clients using the open method, with optional MAC address or EAP screenings. If you use the alternate keyword, the client must pass either the MAC address or EAP authentication. Otherwise, the client must pass both authentications. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored. Examples This example shows how to enable open authentication with MAC address restrictions: This example shows how to disable open authentication for the SSID: Related Commands
authentication shared (ssid configuration mode)Use the authentication shared ssid configuration mode command to configure the radio interface (for the specified SSID) to support shared authentication with optional MAC address authentication and EAP authentication. Use the no form of the command todisable shared authentication for the SSID.
Syntax Description Defaults Command Modes Command History Usage Guidelines Use this command to authenticate clients using the shared method, with optional MAC address or EAP screenings. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored. Examples This example shows how to set the authentication to shared for devices on a MAC address list: This example shows how to reset the authentication to default values: Related Commands
beaconUse the beacon configuration interface command to specify how often the beacon contains a Delivery Traffic Indicator Message (DTIM). Use the no form of this command to reset the beacon interval to defaults.
Syntax Description Defaults Command Modes Command History Usage Guidelines Clients normally wake up each time a beacon is sent to check for pending packets. Longer beacon periods let the client sleep longer and preserve power. Shorter beacon periods reduce the delay in receiving packets. Controlling the DTIM period has a similar power-saving result. Increasing the DTIM period count lets clients sleep longer, but delays the delivery of multicast packets. Because mulitcast packets are buffered, large DTIM period counts can cause a buffer overflow. Examples This example shows how to specify a beacon period of 15 Kms (15.36 ms): This example shows how to set the beacon parameter to defaults: Related Commands bridge-group port-protectedUse the bridge-group port-protected configuration interface command to enable protected port for public secure mode configuration. In IOS, there is no exchange of unicast, broadcast, or multicast traffic between protected ports.
Syntax Description Defaults Command Modes Command History Examples This example shows how to enable protected port for bridge group 71: Related Commands broadcast-keyUse the broadcast-key configuration interface command to configure the time interval between rotations of the broadcast encryption key used for clients. Use the no form of the command to disable broadcast key rotation.
Syntax Description
Defaults The default change time is specified by the IEEE 802.11 dot1x EAP. Command Modes Command History Examples This example shows how to configure vlan10 to support broadcast key encryption with a 5-minute key rotation interval: This example shows how to disable broadcast key rotation: channelUse the channel configuration interface command to set the radio channel frequency. Use the no form of this command to reset the channel frequency to defaults.
Syntax Description
Table 2-1 Center Frequencies for IEEE 802.11b Radios
Defaults The default channel is least-congested. Command Modes Command History Examples This example shows how to set the access point radio channel 10 with a center frequency of 2457. This example shows how to set the access point to scan for the least-congested radio channel. This example shows how to set the beacon parameter to defaults: Related Commands
dot11 extension aironetUse the dot11 extension aironet configuration interface command to enable or disable Cisco Aironet extensions to the IEEE 802.11b standard. Use the no form of this command to disable the Cisco Aironet extensions.
Syntax Description This command has no arguments or keywords. Defaults Cisco Aironet extensions are disabled by default. Command Modes Command History Usage Guidelines The Cisco Aironet extenstions help clients choose the best access point. You must enable these extensions to use advanced features such as Cisco MIC and key hashing. Disable these extensions for non-Cisco clients that misinterpret the extenstions. Examples This example shows how to enable Cisco Aironet extensions for the radio interface: This example shows how to disable Cisco Aironet extensions for the radio interface: Related Commands dot1x client-timeoutUse the dot1x client-timeout configuration interface command to configure the IEEE 802.1x (dot1x) client timeout value.
Syntax Description Defaults The default timeout is 10 seconds. Command Modes Command History Examples This example shows how to configure a 2-minute dot1x client timeout value: Related Commands
dot1x reauth-periodUse the dot1x reauth-period configuration interface command to configure the dot1x client- reauthentication period. The no form of the command disables reauthoration.
Syntax Description Defaults Command Modes Command History Examples This example shows how to configure a 2-minute dot1x client-reauthentication period: Related Commands
encryption keyUse the encryption key configuration interface command to define a WEP key used for data encryption on the wireless LAN or on a specific virtual LAN (VLAN). Use the no form of the command to remove a specific encryption key.
Syntax Description Defaults Command Modes Command History Examples This example shows how to configure a 40-bit encryption key with a value of Apple12@?* as This example shows how to remove WEP key 1 on VLAN 1: Related Commands encryption mode wepUse the encryption mode wep configuration interface command to enable a specific encryption type that is used to communicate on the wireless LAN or on a specific VLAN. When encryption is enabled, all client devices on the wireless LAN or on a VLAN must support the specified encryption methods to communicate with the access point. Use the no form of the command to disable the encryption features on a specific VLAN.
Syntax Description Defaults Command Modes Command History Examples This example shows how to specify that encryption key hashing must be used on VLAN number 1: This example shows how to disable mandatory encryption on VLAN 1: Related Commands fragment-thresholdUse the fragment-threshold configuration interface command to set the size at which packets are fragmented. Use the no form of the command to reset the parameter to defaults.
Syntax Description Defaults The default threshold is 2346 bytes Command Modes Command History Examples This example shows how to set the packet fragment threshold size to 1800 bytes: This example shows how to reset the packet fragment threshold size to defaults: Related Commands guest-mode (ssid configuration mode)Use the guest-mode ssid configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Usage Guidelines The access point can have one guest-mode SSID, or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate. Examples This example shows how to set the wireless LAN for the specified SSID into guest mode: This example shows how to reset the guest-mode parameter to default values: Related Commands
infrastructure-clientUse the infrastructure-client configuration interface command to configure a virtual interface for a workgroup bridge client. Use the no form of the command to disable the workgroup bridge client virtual interface.
Syntax Description This command has no arguments or keywords. Defaults The default is infrastructure client disabled. Command Modes Command History Usage Guidelines Enable the infrastructure client feature to increase the reliability of multicast messages to workgroup bridges. When enabled, the access point sends directed packets containing the multicasts, which are retried if necessary, to the associated workgroup bridge. Enable only when necessary because it can greatly increase the load on the radio cell. Examples This example shows how to configure a virtual interface for a workgroup bridge client. This example shows how to specify that a workgroup bridge client virtual interface is not supported. Related Commands infrastructure-ssid (ssid configuration mode)Use the infrastructure-ssid command in ssid configuration mode to reserve this SSID for infrastructure associations, such as those from one access point to another. Use the no form of the command to revert to a normal non-infrastructure SSID.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Usage Guidelines This command controls the SSID that access points use when associating with one another. A root access point only allows a repeater access point to associate using this SSID. A repeater access point uses this SSID to associate with its parent. Configure authentication types and VLANs for an SSID to control the security of the access points. Examples This example shows how to reserve the specified SSID for infrastructure associations on the wireless LAN: This example shows how to restore the SSID to non-infrastructure associations: Related Commands
ip proxy-mobileUse the ip proxy-mobile configuration interface command to enable the access point to participate in Proxy Mobile IP operations. Use the no form of this command to disable Proxy Mobile IP operations on the access point.
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to enable the Proxy Mobile IP interface on the access point. This example shows how to disable Proxy Mobile IP operations on the access point. Related Commands ip proxy-mobile (ssid configuration mode)Use the ip proxy-mobile ssid configuration mode command to configure the radio interface (for the specified SSID) to support Proxy Mobile IP. Use the no form of the command to reset the parameter to the default value.
Syntax Description This command has no arguments or keywords. Defaults No Proxy Mobile IP support is the default setting. Command Modes Command History Examples This example shows how to enable Proxy Mobile IP support on the wireless LAN for the specified SSID: This example shows how to disable Proxy Mobile IP support: Related Commands l2-filter bridge-group-aclUse the l2-filter bridge-group-acl configuration interface command to apply a layer-2 ACL filter to the bridge group incoming and outgoing packets between the access point and the host (upper layer). Use the no form of the command to disable the layer-2 ACL filter
Syntax Description This command has no arguments or keywords. Defaults Command Modes Command History Examples This example shows how to apply a Layer 2 ACL filter to the bridge group packets: Related Commands
max-associations (ssid configuration mode)Use the max-associations ssid configuration mode command to configure the maximun number of associations supported by the radio interface (for the specified SSID). Use the no form of the command to reset the parameter to the default value.
Syntax Description Defaults Command Modes Command History Examples This example shows how to set the maximum number of associations to 5 on the wireless LAN for the specified SSID: This example shows how to reset the maximum number of associations to the default value: Related Commands
packet retriesUse the packet retries configuration interface command to specify the maximum number of attempts to send a packet. Use the no form of the command to reset the parameter to defaults.
Syntax Description Defaults The default number of retries is 32. Command Modes Command History Examples This example shows how to specify 15 as the maximum number of retries. This example shows how reset the packet retries to defaults. Related Commands parentUse the parent configuration interface command to add a parent to a list of valid parent access points. Use the no form of the command to remove a parent from the list.
Syntax Description Defaults Repeater access point operation is disabled by default. Command Modes Command History Usage Guidelines The parent command adds a parent to the list of valid parent access points. Use this command multiple times to define up to four valid parents. A repeater access point operates best when configured to associate with specific root access points that are connected to the wired LAN. Examples This example shows how to set up repeater operation with the parent 1 access point: This example shows how to set up repeater operation with the parent 2 access point: This example shows how to remove a parent from the parent list: Related Commands
parent timeoutUse the parent timeout configuration interface command to define the amount of time to associate with a parent access point. Use the no form of the command to disable the timeout.
Syntax Description
Defaults Parent timeout is disabled by default. Command Modes Command History Usage Guidelines The parent timeout defines how long the access point attempts to associate with a parent in the parent list. After the timeout, another acceptable parent is used. You set up the parent list using the parent command. With the timeout disabled, the parent must come from the parent list. Examples This example shows how to set up repeater operation with the parent 1 access point with a timeout of 60 seconds: This example shows how to disable repeater operation: Related Commands
payload-encapsulationUse the payload-encapsulation configuration interface command to specify the Ethernet encapsulation type used to format Ethernet data packets that are not formatted using IEEE 802.3 headers. Data packets that are not IEEE 802.3 packets must be reformatted using IEEE 802.1H or RFC1042. Use the no form of the command to reset the parameter to defaults.
Syntax Description Defaults The default payload encapsulation is snap. Command Modes Command History Examples This example shows how to specify the use of IEEE 802.1H encapsulation: This example shows how to reset the parameter to defaults: Related Commands power client maximumUse the power client maximum configuration interface command to configure the maximum power level clients should use for IEEE 802.11b radio transmissions to the access point. The power setting is transmitted to the client device during association with the access point. Use the no form of the command to not specify a power level.
Syntax Description
Defaults The default is no power level specification during association with the client. Command Modes Command History Usage Guidelines Use this command to specify the desired transmitter power level for clients. Lower power levels reduce the radio cell size and interference between cells. The client software chooses the actual transmit power level, choosing between the lower of the access point value and the locally configured value. The maximum transmit power is limited your regulatory region. Examples This example shows how to specify a 50-mW power level: This example shows how to disable power level requests: Related Commands power localUse the power local configuration interface command to configure the access point radio power level. Use the no form of the command to reset the parameter to defaults.
Syntax Description
Defaults The default local power level is maximum. Command Modes Command History Usage Guidelines Use this command to specify the local transmit power level. Lower power levels reduce the radio cell size and interference between cells. The maximum transmit power is limited by region. Examples This example shows how to specify a 50-mW transmit power level for the access point: This example shows how to reset the access point power to defaults: Related Commands preamble-shortUse the preamble-short configuration interface command to enable short radio preambles. The radio preamble is a selection of data at the head of a packet that contains information that the access point and client devices need when sending and receiving packets. Use the no form of the command to change back to default values.
Syntax Description This command has no arguments or keywords. Defaults The default is short radio preamble. Command Modes Command History Usage Guidelines If short radio preambles are enabled, clients may request either short or long preambles and the access point formats packets accordingly. Otherwise, clients are told to use long preambles. Examples This example shows how to set the radio packet to use a short preamble. This example shows how to set the radio packet to use a long preamble. Related Commands rtsUse the rts configuration interface command to set the Request-To-Send (RTS) threshold and the number of retries. Use the no form of the command to reset the parameter to defaults.
Syntax Description Defaults The default threshold is 2330 bytes. The default number of retries is 32. Command Modes Command History Examples This example shows how to set the RTS threshold to 1400 bytes: This example shows how to set the RTS retries count to 3: This example shows how to reset the parameter to defaults: Related Commands speedUse the speed configuration interface command to configure the four data rates supported by the access point radio. An individual data rate can be set only to a basic or a non-basic setting, not both.
Syntax Description Defaults All data rates default to the basic settings. Command Modes Command History Examples This example shows how to set the radio data rates for best throughput: This example shows how to set the radio data rates support a low-speed client device while still supporting higher-speed client devices: Related Commands ssidUse the ssid configuration interface command to specify the radio service set identifier (SSID) and to enter into the ssid configuration mode. Use the no form of the command to remove an SSID.
Syntax Description
Defaults The factory default SSID is tsunami. Command Modes Command History Usage Guidelines Use this command to specify a unique SSID for your wireless network. Several access points on a network, or subnetwork, can share a SSID. The no form of the command removes the SSID, which inhibits clients that use that SSID from associating with the access point. Examples This example shows how to set the radio SSID to Ivory-AP25: This example shows how to remove the SSID named Ivory-AP25 and all its configuration settings: Related Commands station-roleUse the station-role configuration interface command to set the role of the radio interface. Use the no form of the command to reset the parameter to the default value.
Syntax Description Defaults Operates as a root access point by default. Command Modes Command History Examples This example shows how to configure the access point for root operation and shutdown when Ethernet is not functional: This example shows how to configure the access point for repeater operation: This example shows how to reset the access point to root operation: Related Commands traffic-classUse the traffic-class configuration interface mode command to configure the radio interface quality-of-service (QoS) traffic class parameters for each of the eight traffic types. Use the no form of the command to reset a specific traffic class to the default values.
Syntax Description
Defaults No traffic class support is provided by default. Command Modes Command History Usage Guidelines Use this command to control the backoff parameters for each class of traffic. Backoff parameters control how the radio accesses the airwaves. The cw-min and cw-max arguments specify the collision window as a power of 2. For example, if the value is set to 3, the contention window is 0 to 7 backoff slots (2 to the power 3 minus 1). The fixed-slot arguments specify the number of backoff slots that are counted before the random backoff counter starts to count down. Examples This example shows how to configure traffic class 6 for contention windows and fixed slot backoff values. Each time the backoff for class 6 is started, the backoff logic waits a minimum of the 802.11 SIFS time plus 2 backoff slots. Then it begins counting down the 0 to 15 backoff slots in the contention window. This example shows how to disable traffic class support: vlan (ssid configuration mode)Use the vlan ssid configuration mode command to configure the radio interface (for the specified SSID) to support a specific Ethernet virtual LAN (VLAN). Use the no form of the command to reset the parameter to the default value.
Syntax Description Defaults Command Modes Command History Examples This example shows how to configure the VLAN that uses the radio SSID (wireless LAN): This example shows how to reset the VLAN parameter to default values: Related Commands
world-modeUse the world-mode configuration interface mode command to enable access point world mode operation. Use the no form of the command to disable world mode operation.
Syntax Description This command has no arguments or keywords. Defaults World mode is disabled by default. Command Modes Command History Usage Guidelines With world mode enabled, the access point advertises the local settings, such as allowed frequencies and transmitter power levels. Clients with this capability then passively detect and adopt the advertised world settings, and then actively scan for the best access point. Examples This example shows how to enable world mode operation: This example shows how to disable world mode operation: Related Commands
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||