Aironet 1100 Series Access Point Command Reference, 12.2(4)JA
New and Revised Cisco IOS Commands

Table of Contents

New and Revised Cisco IOS Commands
Privileged Exec Commands
clear dot11 client
clear dot11 hold-list
clear dot11 statistics
clear iapp rogue-ap-list
clear iapp statistics
clear ip proxy-mobile traffic
clear ip proxy-mobile subnet-map
debug iapp
debug ip proxy-mobile
debug dot11
debug dot11 aaa
debug dot11 dot11radio
dot11 dot11radio antenna-alignment
dot11 dot11radio linktest
dot11 dot11radio meter
led flash
show controllers dot11radio
show dot11 associations
show dot11 network-map
show dot11 statistics client-traffic
show iapp rogue-ap-list
show iapp standby-parms
show iapp statistics
show interfaces dot11radio
show interfaces dot11radio aaa
show interfaces dot11radio statistics
show ip proxy-mobile
show ip proxy-mobile aaa requests
show ip proxy-mobile agent
show ip proxy-mobile detail
show ip proxy-mobile node
show ip proxy-mobile registration
show ip proxy-mobile subnet-map
show ip proxy-mobile traffic
show ip proxy-mobile visitor
show led flash
test dot11 dot11radio compliance
Global Configuration Commands
class-map
dot11 holdoff-time
dot11 igmp snooping-helper
dot11 network-map
dot11 phone
iapp standby mac-address
iapp standby poll-frequency
iapp standby timeout
interface dot11radio
ip proxy-mobile aap
ip proxy-mobile enable
ip proxy-mobile pause
ip proxy-mobile secure
logging buffered
match (class-map configuration)
Configuration Interface Commands
accounting (ssid configuration mode)
antenna
authentication network-eap (ssid configuration mode)
authentication open (ssid configuration mode)
authentication shared (ssid configuration mode)
beacon
bridge-group port-protected
broadcast-key
channel
dot11 extension aironet
dot1x client-timeout
dot1x reauth-period
encryption key
encryption mode wep
fragment-threshold
guest-mode (ssid configuration mode)
infrastructure-client
infrastructure-ssid (ssid configuration mode)
ip proxy-mobile
ip proxy-mobile (ssid configuration mode)
l2-filter bridge-group-acl
max-associations (ssid configuration mode)
packet retries
parent
parent timeout
payload-encapsulation
power client maximum
power local
preamble-short
rts
speed
ssid
station-role
traffic-class
vlan (ssid configuration mode)
world-mode

New and Revised Cisco IOS Commands


This chapter contains new and revised IOS commands supported by the access point. This chapter contains the following topics:

Privileged Exec Commands

This section contains the new and revised Privileged Exec IOS commands supported by the Cisco Aironet 1100 Series Access Point.

clear dot11 client

Use the clear dot11 client privileged EXEC command to deauthenticate a radio client with a specified media access control (MAC) address. The client must be directly associated with the access point, not a repeater.

clear dot11 client {mac-address}

Syntax Description

mac-address

Specifies a radio client MAC address (in xxxx.xxxx.xxxx format)

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to deauthenticate a specific radio client:

1100-AP# clear dot11 client 0040.9645.2196

You can verify that the client was deauthenticated by entering the following privileged EXEC command:

1100-AP# show dot11 associations 0040.9645.2196

Related Commands

Command Description

show dot11 associations

Displays the radio association table or optionally displays association statistics or association information about repeaters or clients

clear dot11 hold-list

Use the clear dot11 hold-list privileged EXEC command to reset the MAC, LEAP, and EAP authentications hold list.

clear dot11 hold-list

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to clear the hold-off list of MAC authentications:

1100-AP# clear dot11 hold-list

clear dot11 statistics

Use the clear dot11 statistics privileged EXEC command to reset statistic information for a specific radio interface or for a particular client with a specified MAC address.

clear dot11 statistics
{interface | mac-address}

Syntax Description

interface

Specifies a radio interface number

mac-address

Specifies a client MAC address (in xxxx.xxxx.xxxx format)

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to clear radio statistics for radio interface 0:

1100-AP# clear dot11 statistics dot11radio 0

This example shows how to clear radio statistics for the client radio with a MAC address of 0040.9631.81cf:

1100-AP# clear dot11 statistics 0040.9631.81cf

You can verify that the radio interface statistics are reset by entering the following privileged EXEC command:

1100-AP# show dot11 associations statistics

Related Commands

Command Description

show dot11 statistics client-traffic

Displays client traffic statistics

show interfaces dot11radio

Displays radio interface information

show interfaces dot11radio statistics

Displays radio interface statistics

clear iapp rogue-ap-list

Use the clear iapp rogue-ap-list privileged EXEC command to clear the list of IAPP rogue access points.

clear iapp rogue-ap-list

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to clear the IAPP rogue access point list:

1100-AP# clear iapp rogue-ap-list

You can verify that the rogue AP list was deleted by entering the show iapp rogue-ap-list privileged EXEC command.

Related Commands

Command Description

show iapp rogue-ap-list

Displays the IAPP rogue access point list

clear iapp statistics

Use the clear iapp statistics privileged EXEC command to clear all the IAPP statistics.

clear iapp statistics

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to clear the IAPP statistics:

1100-AP# clear iapp statistics

You can verify that the iapp statistics were cleared by entering the following privileged EXEC command:

1100-AP# show iapp statistics

Related Commands

Command Description

show iapp statistics

Displays the IAPP transmit and receive statistics

clear ip proxy-mobile traffic

Use the clear ip proxy-mobile traffic privileged EXEC command to clear all the statistics related to Proxy Mobile IP.

clear ip proxy-mobile traffic

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to clear the proxy-mobile statistics:

1100-AP# clear ip proxy-mobile traffic

You can verify that traffic statistics are cleared by entering the show ip proxy-mobile traffic privileged EXEC command.

Related Commands

Command Description

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile traffic

Displays Proxy Mobile IP statistics

clear ip proxy-mobile subnet-map

Use the clear ip proxy-mobile subnet-map privileged EXEC command to clear the Proxy Mobile IP subnet map table and obtain a new table from the AAP. On an AAP, this command immediately synchronizes its tables with the other AAPs.

clear ip proxy-mobile subnet-map

This command has no arguments or keywords.

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to clear the Proxy Mobile IP subnet map:

1100-AP# clear ip proxy-mobile subnet-map

You can verify that information was deleted by entering the show ip proxy-mobile subnet-map privileged EXEC command.

Related Commands

Command Description

show ip proxy-mobile subnet-map

Displays the subnet map table

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

debug iapp

Use the debug iapp privileged EXEC command to begin debugging of IAPP operations. Use the no form of this command to stop the debug operation.

[no] debug iapp
{packets | event | error}

Syntax Description

packet

Displays IAPP packets sent and received by the access point. Link test packets are not displayed

event

Displays significant IAPP events

error

Displays IAPP software and protocol errors

Defaults

This command has no default setting.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to begin debugging of IAPP packets:

1100-AP# debug iapp packet

This example shows how to begin debugging of IAPP events:

1100-AP# debug iapp events

This example shows how to begin debugging of IAPP errors:

1100-AP# debug iapp errors

Related Commands

Command Description

show debugging

Displays all debug settings

debug ip proxy-mobile

Use the debug ip proxy-mobile privileged EXEC command to begin debugging of Proxy Mobile IP activities. If a component is not specified in the command, debugging of all components is activated. Use the no form of this command to stop the debug operation and return to the default configuration.

[no] debug ip proxy-mobile
[subnet-map] [agent-disc] [registration]

Syntax Description

Command Description

subnet-map

(Optional) Activates debugging of subnet mapping

agent-disc

(Optional) Activates debugging of agent discovery

registration

(Optional) Activates debugging of registration events

Defaults

Debugging is not enabled.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was first introduced.

Examples

This example shows how to begin debugging of all proxy-mobile activities:

1100-AP# debug ip proxy-mobile
This example shows how to begin debugging of registration events:
1100-AP# debug ip proxy-mobile registration

This example shows how to stop debugging of registration events:

1100-AP# no debug ip proxy-mobile registration

You can check debugging information by entering the show debugging privileged EXEC command.

Related Commands

Command Description

show debugging

Displays all debug settings and the debug packet headers

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile aaa requests

Displays information about MN that have pending Proxy Mobile IP AAA requests

show ip proxy-mobile agent

Displays information about the discovered agents

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile node

Displays information about a specific node or about all the nodes on the access point

show ip proxy-mobile registration

Displays information about the pending and accepted registrations

show ip proxy-mobile subnet-map

Displays the subnet map table

show ip proxy-mobile traffic

Displays Proxy Mobile IP statistics

show ip proxy-mobile visitor

Displays visiting Proxy Mobile IP nodes

debug dot11

Use the debug dot11 privileged EXEC command to begin debugging of radio functions. The command options are configuration, event, radio driver, packet forwarding, access point management activities, Association Management Network Map, system log, and the virtual interface. Use the no form of this command to stop the debug operation.

[no] debug dot11
{events | packets | forwarding | mgmt | network-map | syslog | virtual-interface}

Syntax Description

events

Activates debugging of all radio related events

packets

Activates debugging of radio packets received and transmitted

forwarding

Activates debugging of radio forwarded packets

mgmt

Activates debugging of radio access point management activity

network-map

Activates debugging of radio association management network map

syslog

Activates debugging of radio system log

virtual-interface

Activates debugging of radio virtual interfaces

Defaults

Debugging is not enabled.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to begin debugging of all radio related events:

1100-AP# debug dot11 events

This example shows how to begin debugging of radio packets:

1100-AP# debug dot11 packets

This example shows how to begin debugging of the radio system log:

1100-AP# debug dot11 syslog

This example shows how to stop debugging of all radio related events:

1100-AP# no debug dot11 events

Related Commands

Command Description

show debugging

Displays all debug settings and the debug packet headers

show interfaces dot11radio

Displays configuration and status information for the radio interface

debug dot11 aaa

Use the debug dot11 aaa privileged EXEC command to begin debugging of dot11 authentication, authorization, and accounting (AAA) operations. Use the no form of this command to stop the debug operation.

[no] debug dot11 aaa
{accounting | dispatcher |
dot1x
{all | broadcast-key | process} | rxdata | state-machine | txdata} | mac-authen}

Syntax Description

accounting

Activates debugging of 802.11 AAA accounting packets

dispatcher

Activates debugging of 802.11 AAA dispatcher (interface between Association & Manager) packets

mac-authen

Activates debugging of 802.11 AAAMAC authentication packets

all

Activates debugging of all IEEE 802.1x AAA packets

broadcast-key

Activates debugging of IEEE 802.1x AAA broadcast-key change packets

process

Activates debugging of IEEE 802.1x AAA process packets

rxdata

Activates debugging of IEEE 802.1x AAA receive packets from clients

state-machine

Activates debugging of IEEE the 802.1x AAA state machine

txdata

Activates debugging of IEEE 802.1x AAA transmit packets to clients

Defaults

Debugging is not enabled.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to begin debugging of dot11 AAA accounting packets:

1100-AP# debug dot11 aaa accounting

This example shows how to begin debugging of all dot1x AAA packets:

1100-AP# debug dot11 aaa dot1x all

Related Commands

Command Description

show debugging

Displays all debug settings

show interfaces dot11radio aaa

Optionally displays all radio clients

debug dot11 dot11radio

Use the debug dot11 dot11radio privileged EXEC command to turn on radio debug options. These options include run RF monitor mode and trace frames received or transmitted on the radio interface. Use the no form of this command to stop the debug operation.

[no] debug dot11 dot11radio interface-number {dump | flash |
monitor {ack | address | beacon | crc | lines | plcp | print | probe | store} |
trace {lines | off | print | store}}

Syntax Description

interface-number

Specifies a radio interface number. The number ranges from 0 to XXX

dump

Enables driver event dumping

flash

Enables flash radio firmware debugging

monitor

Enables RF monitor mode

ack

Displays ACK packets

address

Displays packets to or from the specified IP address

beacon

Displays beacon packets

crc

Displays packets with CRC errors

lines

Specifies a print line count

plcp

Displays plcp packets

print

Enables RF monitor printing mode

probe

Displays probe packets

store

Enables RF monitor storage mode

trace

Enables trace mode

lines

Specifies a trace print line count

off

Turns tracing off

print

Enables trace printing

store

Enables trace storage mode

Defaults

Debugging is not enabled.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to begin dumping of driver event packets to the logging buffer:

1100-AP# debug dot11 dot11radio 0 dump

This example shows how to begin debugging of the radio firmware:

1100-AP# debug dot11 dot11radio 0 flash

This example shows how to begin monitoring of all 801.11 radio packets:

1100-AP# debug dot11 dot11radio 0 monitor

This example shows how to stop monitoring of all radio packets:

1100-AP# no debug dot11 dot11radio 0 monitor

Related Commands

Command Description

show debugging

Displays all debug settings and the debug packet headers

show interfaces dot11radio

Displays configuration and status information for the radio interface

show interfaces dot11radio statistics

Displays radio interface statistics

dot11 dot11radio antenna-alignment

Use the dot11 dot11radio antenna-alignment privileged EXEC command to activate the antenna-alignment tool for an radio interface. Use this tool to test and align the access point antenna with another remote antenna.

dot11 dot11radio interface-number antenna-alignment [timeout]

Syntax Description

interface-number

Specifies the radio interface number

timeout

Specifies the duration of the alignment test, in seconds

Defaults

The default alignment timeout is 5 seconds.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

During the antenna alignment test, the radio disassociates from its parent, probes adjacent access points, and records the MAC address and signal strength of responses it receives. After the timeout, the radio reassociates with its parent. Clients connected to the access point through its parent lose their connection for the duration of the test; clients connected to a repeater maintain their connection and can abort the test using the escape sequence (Ctrl key and ^ key).

You display the last 10 results using the show dot11 antenna-alignment command, which lists the MAC address and signal level for the access points that responded to the probe.

Examples

This example shows how to start the antenna-alignment test for radio interface 0:

1100-AP# dot11 dot11radio 0 antenna-alignment

Related Commands

Command Description

show dot11 associations

Displays the radio association table

show dot11 network-map

Displays the radio network-map

dot11 dot11radio linktest

Use the dot11 dot11radio linktest privileged EXEC command to test a radio link between the access point and a client device.

dot11 dot11radio interface-number linktest
[target mac-address]
[
count packet-number]
[interval sec]
[
packet-size size]
[
rate value]

Syntax Description

interface-number

Specifies the radio interface number

target mac-address

(Optional) Specifies the MAC address (in xxxx.xxxx.xxxx format) of the client device

count packet-number

(Optional) Specifies the number of packets (1 to 9999) to send to the client device

interval sec

(Optional) Specifies the time interval between tests (from 1 to 10000 seconds)

packet-size size

(Optional) Specifies the size of each packet (from 1 to 1400 bytes)

rate value

(Optional) Specifies a specific link test data rate (1, 2, 5, or 11 Mbps)

Defaults

The default target for a root access point is the first client. The default target for a repeater is its parent access point.

The default count specifies that test runs once.

The default interval is 5 seconds.

The default packet-size is 512 bytes.

The default rate is the automatic rate-shifting algorithm.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The link test verifies the radio link between the access point and a client device by sending the client a series of special packets, which the client returns to the access point. The client adds information to the packets that quantify how well it received the request. Results are displayed as a table of packet statistics, quality, and signal-level information.

If you specify an interval, the test repeats continuously separated by the specified number of seconds. To abort the test, type the escape sequence (Ctrl key and ^ key). Without an interval, the test runs once.

Examples

This example shows how to initiate a radio link test to send 10 packets to client MAC address 0040963181CF on radio interface 0:

1100-AP# dot11 dot11radio 0 linktest target 0040.9631.81CF count 10

This example shows how to initiate a radio link test to send 100 packets of 500 bytes to client MAC address 0040963181CF on radio interface 0:

1100-AP# dot11 dot11radio 0 linktest target 0040.9631.81CF packet-size 500 count 100

Related Commands

Command Description

show interfaces dot11radio statistics

Displays the radio statistics

show dot11 associations

Displays the radio association table

show dot11 network-map

Displays the radio network map

dot11 dot11radio meter

Use the dot11 dot11radio meter privileged EXEC command to measure the performance of packet forwarding. To display the results, use the show dot11 statistics metered-traffic command.

dot11 dot11radio interface-number meter

Syntax Description

interface-number

Specifies the radio interface number

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to activate the meter tool for radio interface 0:

1100-AP# dot11 dot11radio 0 meter

Related Commands

Command Description

show dot11 statistics metered-traffic

Displays packet forwarding performance



led flash

Use the led flash privileged EXEC command to start or stop the flashing of the LED indicators on the access point for a specified number of seconds. Without arguments, this command flashes the LEDs continuously.

led flash [seconds | disable]

Syntax Description

seconds

Specifies the number of seconds (1 to 3600) that the LEDs blink

disable

Stops the blinking of the LEDs

Defaults

The default is continuous flashing or blinking of the LEDs.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to flash or blink the access point LEDs for 30 seconds:

1100-AP# led flash 30
This example shows how to stop the blinking of the access point LEDs:
1100-AP# led flash disable

Related Commands

Command Description

show led flash

Displays the flashing status of the LEDs

show controllers dot11radio

Use the show controllers dot11radio privileged EXEC command to display the radio controller status.

show controllers dot11radio interface-number

Syntax Description

interface-number

Specifies the radio interface number

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the radio controller status for radio interface 0:

1100-AP# show controllers dot11radio 0

Related Commands

Command Description

show interfaces dot11radio

Displays configuration and status information for the radio interface

show dot11 associations

Use the show dot11 associations privileged EXEC command to display the radio association table, radio association statistics, or to selectively display association information about all repeaters, all clients, a specific client, or basic service clients.

show dot11 associations
[client | repeater | statistics | mac-address | bss-only | all-client]

Syntax Description

client

(Option) Displays all client devices associated with the access point

repeater

(Option) Displays all repeater devices associated with the access point

statistics

(Option) Displays access point association statistics for the radio interface

mac-address

(Option) Displays details about the client device with the specified MAC address (in xxxx.xxxx.xxxx format)

bss-only

(Option) Displays only the basic service set clients that are directly associated with the access point

all-client

(Option) Displays the status of all clients associated with the access point

Defaults

When parameters are not specified, this command displays the complete radio association table.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the radio association table:

1100-AP# show dot11 associations

This example shows how to display all client devices associated with the access point:

1100-AP# show dot11 associations client

This example shows how to display access point radio statistics:

1100-AP# show dot11 associations statistics

Related Commands

Command Description

clear dot11 client

Deauthenticates a client with a specified MAC address

clear dot11 statistics

Resets the statistics for a specified radio interface or client device

dot11 dot11radio linktest

Starts a link test between the access point and a client device

show dot11 network-map

Use the show dot11 network-map privileged EXEC command to display the radio network map. The radio network map contains information from Cisco access points in the same Layer 2 domain as this access point.

show dot11network-map

Syntax Description

This command has no arguments or keywords.

Defaults Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

This command displays network map information only if you first enable the network map feature with the dot11 network map command.

Examples

This example shows how to display the radio network map:

1100-AP# show dot11 network-map

Related Commands

Command Description

dot11 network-map

Enables the network map feature

show dot11 statistics client-traffic

Use the show dot 11 statistics client-traffic privileged EXEC command to display the radio client traffic statistics.

show dot11 statistics client-traffic

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the radio client traffic statistics:

1100-AP# show dot11 statistics client-traffic

Related Commands

Command Description

clear dot11 client

Deauthenticates a client with a specified MAC address

clear dot11 statistics

Resets the statistics for a specified radio interface or client device

show iapp rogue-ap-list

Use the show iapp rogue-ap-list privileged EXEC command to display a list of rogue access points.

show iapp rogue-ap-list

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The list contains an entry for each access point that a client station reported as a possible rogue access point. Each list entry contains the following information:

Rogue AP—MAC address of the reported rogue access point

Count—The number of times the access point was reported

Last Rpt Src—The MAC address of the last client to report the rogue access point

R—The last reason code

Prev Rpt Src—The MAC address of any previous client that reported the rogue access point

R—The previous reason code

Last(Min)—The number of minutes since the last report

1st(Min)—The number of minutes since the access point was first reported as a possible rogue

Name—The name of a Cisco rogue access point

The following reason codes are displayed:

1—The rogue was not running 802.1x

2—Authentication with the rogue timed out

3—Bad user password

4—Authentication challenge failed

Examples

This example shows how to display the list of IAPP rogue access points:

1100-AP# show iapp rogue-ap-list

Related Commands

Command Description

clear iapp rogue-ap-list

Clears the rogue access point list

show iapp standby-parms

Use the show iapp standby-parms privileged EXEC command to display IAPP standby parameters when a standby MAC address is configured. The information displayed includes the standby MAC address, the time-out value, and the poll-frequency value.

show iapp standby-parms

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the IAPP standby parameters:

1100-AP# show iapp standby-parms

Related Commands

Command Description

iapp standby mac-address

Configures an access point with a specified MAC address as the standby

iapp standby poll-frequency

Configures the standby access point polling interval

iapp standby timeout

Configures the standby access point polling time-out value

show iapp statistics

Use the show iapp statistics privileged EXEC command to display the IAPP transmit and receive statistics.

show iapp statistics

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

This command displays IAPP transmit and receive packet counts and IAPP error counts. The operating mode for the access point is also displayed.

Examples

This example shows how to display the IAPP statistics:

1100-AP# show iapp statistics

Related Commands

Command Description

clear iapp statistics

Clears the IAPP transmit and receive statistics

show interfaces dot11radio

Use the show interfaces dot11radio privileged EXEC command to display the radio interface configuration and statistics.

show interfaces dot11radio interface-number

Syntax Description

interface-number

Specifies the radio interface number

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the radio interface configuration and statistics:

1100-AP# show interfaces dot11radio 0

Related Commands

Command Description

interface dot11radio

Configures a specified radio interface

show running-config

Displays the access point run time configuration information

show interfaces dot11radio aaa

Use the show int dot11radio privileged EXEC command to display the radio interface information.

show interfaces dot11radio interface-number
aaa [timeout]

Syntax Description

interface-number

Specifies the radio interface number

timeout

Displays the AAA timeout value

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display AAA information for interface 0:

1100-AP# show interfaces dot11radio 0 aaa

Related Commands

Command Description

debug dot11 aaa

Debug radio AAA operations

show dot11 associations

Displays radio association information

show interfaces dot11radio statistics

Use the show interfaces dot11radio statistics privileged EXEC command to display the radio interface statistics.

show interfaces dot11radio interface-number statistics

Syntax Description

interface-number

Specifies the radio interface number

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the radio interface statistics for interface 0:

1100-AP# show interfaces dot11radio 0 statistics

Related Commands

Command Description

clear dot11 statistics

Resets the statistics for a specified radio interface

interface dot11radio

Configures a specified radio interface

show running-config

Displays the access point run time configuration information

show interfaces dot11radio

Displays configuration and statistics for a specified radio interface

show ip proxy-mobile

Use the show ip proxy-mobile privileged EXEC command to display information about Proxy Mobile IP functionality.

show ip proxy-mobile

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display information about Proxy Mobile IP functionality:

1100-AP# show ip proxy-mobile

Related Commands

Command Description

clear ip proxy-mobile subnet-map

Clears the Proxy Mobile IP subnet map and obtains a new table from the AAP

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile aaa requests

Displays information about mobile node that have pending Proxy Mobile IP AAA requests

show ip proxy-mobile agent

Displays information about the discovered Proxy Mobile IP agents

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile node

Displays information about a specific Proxy Mobile IP node or about all the nodes on the access point

show ip proxy-mobile registration

Displays information about the pending and accepted Proxy Mobile IP registrations

show ip proxy-mobile subnet-map

Displays the Proxy Mobile IP subnet map table

show ip proxy-mobile traffic

Displays the IP statistics for Proxy Mobile IP

show ip proxy-mobile visitor

Displays visiting Proxy Mobile IP nodes

show ip proxy-mobile aaa requests

Use the show ip proxy-mobile aaa requests privileged EXEC command to display information about mobile nodes that have pending Proxy Mobile IP AAA requests.

show ip proxy-mobile aaa requests

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display information about mobile nodes that have pending Proxy Mobile IP AAA requests:

1100-AP# show ip proxy-mobile aaa requests

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile agent

Use the show ip proxy-mobile agent privileged EXEC command to display information about the Proxy Mobile IP agents discovered by the access point.

show ip proxy-mobile agent

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display all Proxy Mobile IP agents discovered by the access point:

1100-AP# show ip proxy-mobile agent

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile detail

Use the show ip proxy-mobile detail privileged EXEC command to display Proxy Mobile IP statistics, the subnet map, and all security associations.

show ip proxy-mobile detail

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the Proxy Mobile IP statistics, the subnet map, and all security associations:

1100-AP# show ip proxy-mobile detail

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile node

Use the show ip proxy-mobile node privileged EXEC command to display information about a specific Proxy Mobile IP node or all Proxy Mobile IP nodes on the access point.

show ip proxy-mobile node [address-start]

Syntax Description

address-start

(Optional) Specifies the IP address for a specific Proxy Mobile IP node

Defaults

Displays all Proxy Mobile IP nodes on the access point when an IP address is not specified.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display information about all Proxy Mobile IP nodes on the access point:

1100-AP# show ip proxy-mobile nodes

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile registration

Use the show ip proxy-mobile registration privileged EXEC command to display pending or accepted Proxy Mobile IP registrations.

show ip proxy-mobile registration

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display pending or accepted Proxy Mobile IP registrations:

1100-AP# show ip proxy-mobile registrations

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile subnet-map

Use the show ip proxy-mobile subnet-map privileged EXEC command to display the Proxy Mobile IP subnet map table.

show ip proxy-mobile subnet-map

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the Proxy Mobile IP subnet map table:

1100-AP# show ip proxy-mobile subnet-map

Related Commands

Command Description

clear ip proxy-mobile subnet-map

Clears the Proxy Mobile IP subnet map and obtains a new table from the AAP

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile traffic

Use the show ip proxy-mobile traffic privileged EXEC command to display all the statistics related to Proxy Mobile IP.

show ip proxy-mobile traffic

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display all the Proxy Mobile IP statistics:

1100-AP# show ip proxy-mobile traffic

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile visitor

Use the show ip proxy-mobile visitor privileged EXEC command to display the visiting Proxy Mobile IP nodes.

show ip proxy-mobile visitor

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display about visiting Proxy Mobile IP nodes:

1100-AP# show ip proxy-mobile visitor

Related Commands

Command Description

ip proxy-mobile

Enables Proxy Mobile IP on the access point

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show led flash

Use the show led flash privileged EXEC command to display the LED flashing status.

show led flash

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to display the LED flashing status:

1100-AP# show led flash

Related Commands

Command Description

led flash

Enables or disables LED flashing

test dot11 dot11radio compliance

Use the test dot11 dot11radio compliance privileged EXEC command to run regulatory domain compliance tests on the radio.

test dot11 dot11radio interface-number compliance
{cw | one-continuous | zero-continuous | receive-only | burst}
[
frequency level]
[
power level]
[
bit-rate speed]
[
antenna {left | right}]

Syntax Description

interface-number

Specifies the radio interface number

cw

Transmits an unmodulated signal

one-continuous

Transmits a modulated signal of all ones (1)

zero-continuous

Transmits a modulated signal of all zeroes (0)

receive-only

Sets the radio to receive-only mode

burst

Transmits bursts of modulated data

frequency level

(Optional) Sets the operating center frequency. Valid options are 2417, 2422, 2427, 2432, 2437, 2442, 2447, 2452, 2457, and 2462

power level

(Optional) Sets the power level in mW. Valid options are 1, 5, 20, 30, 50, and 100

bit-rate speed

(Optional) Sets the data rate in Mbps. Valid options are 1, 2, 5, and 11

antenna

(Optional) Sets the operating antenna. Valid options are right and left

Defaults

This command has no defaults. If you change the settings, the new values become the defaults until the access point is restarted.

Command Modes

Privileged EXEC

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The compliance test runs continuously and blocks all console inputs except the escape sequence. To stop the test, type the escape sequence (Ctrl key and ^ key).

Examples

This example shows how to initiate the radio compliance burst test on radio interface 0 and to use a bit rate of 11Mbps:

1100-AP# test dot11 dot11radio 0 compliance burst bit-rate 11

Global Configuration Commands

This section contains the new and revised IOS commands supported by the access point in global configuration mode.

class-map

Use the class-map global configuration command to create a class map to be used for matching packets to the class whose name you specify and to enter class-map configuration mode. Use the no form of this command to delete an existing class map and return to global configuration mode.

[no] class-map name

Syntax Description

name

Specifies the name of the class map

Defaults

This command has no defaults, and there is not a default class map.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to specify the name of the class for which you want to create or modify class-map match criteria and to enter class-map configuration mode. In this mode, you can enter one match command to configure the match criterion for this class.

The class-map command and its subcommands are used to define packet classification, marking, and aggregate policing as part of a globally named service policy applied on a per-interface basis.

After you are in quality of service (QoS) class-map configuration mode, these configuration commands are available:

  • description: describes the class map (up to 200 characters). The show class-map privileged EXEC command displays the description and the name of the class-map.
  • exit: exits from QoS class-map configuration mode.
  • match: configures classification criteria. For more information, see the match (class-map configuration) command.
  • no: removes a match statement from a class map.
  • rename: renames the current class map. If you rename a class map with a name already in use, the message A class-map with this name already exists is displayed.

Only one match criterion per class map is supported. For example, when defining a class map, only one match command can be issued.

Because only one match command per class map is supported, the match-all and match-any keywords function the same.

Only one access control list (ACL) can be configured in a class map. The ACL can have multiple access control entries (ACEs).

Examples

This example shows how to configure the class map called class1. class1 has one match criterion, which is an access list called 103.

1100-AP(config)# access-list 103 permit any any dscp 10
1100-AP(config)# class-map class1
1100-AP(config-cmap)# match access-group 103
1100-AP(config-cmap)# exit

This example shows how to delete the class map class1:

1100-AP(config)# no class-map class1

You can verify your settings by entering the show class-map privileged EXEC command.

Related Commands

Command Description

match (class-map configuration)

Defines the match criteria ACLs, IP precedence, or IP Differentiated Services Code Point (DSCP) values) to classify traffic

policy-map

Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy

show class-map

Displays QoS class maps

dot11 holdoff-time

Use the dit11 holdoff-time configuration interface command to specify the hold-off time for MAC address authentication. Use the no form of the command to reset the parameter to defaults.

[no] dot11 holdoff-time seconds

Syntax Description

seconds

Specifies the hold-off time in seconds (1-65555)

Defaults

The default holdoff-time is 0 (disabled).

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify a 2-minute hold-off time.

1100-AP(config-if)# dot11 holdoff-time 120

This example shows how reset the hold-off time to defaults.

1100-AP(config-if)# dot11 no holdoff-time

Related Commands

Command Description

show running-config

Displays information on the current running access point configuration

dot11 igmp snooping-helper

Use the dot11 igmp snooping-helper global configuration command to begin sending IGMP Query requests when a new client associates with the access point. Use the no form of this command to disable the IGMP Query requests.

[no] dot11 igmp snooping-helper

Syntax Description

This command has no arguments or keywords.

Defaults

IGMP Query requests are disabled.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to enable IGMP Query requests:

1100-AP(config)# dot11 igmp snooping-helper

This example shows how to stop or disable the IGMP Query requests:

1100-AP(config)# no dot11 igmp snooping-helper

dot11 network-map

Use the dot11 network-map global configuration command to enable the radio network map feature. When enabled, the access point broadcasts a IAPP GenInfo Request every collection interval. This request solicits information from all Cisco access points in the same Layer 2 domain. Upon receiving a GetInfo Request, the access point sends a unicast IAPP GenInfo Response back to the requester. The access point uses these IAPP GenInfo Responses to build a network-map.

dot11 network-map [collect-interval]

Syntax Description

collect-interval

Specifies the time interval between IAPP GenInfo Requests (1 to 60 seconds)

Defaults

The default collect interval is 5 seconds.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to generate a radio network map with a collection interval of 30 seconds:

1100-AP(config)# dot11 network-map 30

You can verify the network map by using the show dot11 network-map EXEC command.

Related Commands

Command Description

show dot11 network-map

Displays the radio network map

dot11 phone

Use the dot11 phone global configuration command to enable or disable IEEE 802.11compliance phone support. Use the no form of this command to disable the IEEE 802.11 phone.

[no] dot11 phone

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Enabling IEEE 802.11 compliance phone support adds information to the access point beacons and probe responses. This information helps some 802.11 phones make intelligent choices about the access point to which they should associate. Some phones do not associate with an access point without this additional information.

Examples

This example shows how to enable IEEE 802.11 phone support:

1100-AP(config)# dot11 phone

This example shows how to stop or disable the IEEE 802.11 phone support:

1100-AP(config)# no dot11 phone

iapp standby mac-address

Use the iapp standby mac-address global configuration command to configure an access point to be in standby mode and specify the active access point's MAC address. Use the no form of this command to disable the access point standby mode.

[no] iapp standby mac-address mac-address

Syntax Description

mac-address

Specifies the MAC address (in xxxx.xxxx.xxxx format) of the active access point

Defaults

This command has no default setting.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to place the access point in standby mode and indicate the MAC address of the active access point:

1100-AP(config)# iapp standby mac-address 0040.9631.81cf

This example shows how to stop or disable the standby mode:

1100-AP(config)# no iapp standby mac-address 0040.9631.81cf

Related Commands You can verify your settings by entering the show class-map privileged EXEC command.

Command Description

iapp standby poll-frequency

Configures the polling interval in standby mode

iapp standby timeout

Configures the polling timeout value in standby mode

iapp standby poll-frequency

Use the iapp standby poll-frequency global configuration command to configure the standby mode polling interval. Use the no form of this command to clear the access point standby mode poll frequency.

[no] iapp standby poll-frequency sec

Syntax Description

sec

Specifies the standby mode poll frequency in seconds

mac-address

Specifies the MAC address of an access point

Defaults

This command has no defaults.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify the standby mode poll frequency of 5 minutes:

1100-AP(config)# iapp standby poll-frequency 300

This example shows how to stop or disable the standby mode:

1100-AP(config)# no iapp standby mac-address 0040.9631.81cf

Related Commands You can verify your settings by entering the show class-map privileged EXEC command.

Command Description

iapp standby mac-address

Places the access point into standby mode and identifies the MAC address of the active active point

iapp standby timeout

Specifies the access point standby mode polling timeout value

iapp standby timeout

Use the iapp standby timeout global configuration command to configure the standby mode polling timeout value. Use the no form of this command to clear the standby mode polling timeout value.

[no] iapp standby timeout sec

Syntax Description

sec

Specifies the standby mode polling timeout in seconds

Defaults

This command has no defaults.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify the standby mode polling timeout of 1 minute:

1100-AP(config)# iapp standby timeout 60

This example shows how to clear the standby mode timeout value:

1100-AP(config)# no iapp standby timeout

Related Commands You can verify your settings by entering the show class-map privileged EXEC command.

Command Description

iapp standby mac-address

Places the access point into standby mode and identifies the MAC address of the active active point

iapp standby poll-frequency

Specifies the standby mode polling interval

interface dot11radio

Use the interface dot11radio global configuration command to place access point into the radio configuration mode.

interface dot11radio interface-number

Syntax Description

interface-number

Specifies the radio interface number

Defaults

The default radio interface number is 0.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to place the access point into the radio configuration mode:

1100-AP# interface dot11radio 2

Related Commands

Command Description

show interfaces dot11radio

Displays the radio interface configuration and statistics

ip proxy-mobile aap

Use the ip proxy-mobile aap global configuration command to specify the IP addresses for the primary and secondary AAPs. Use the no form of this command to clear the primary AAP and secondary AAP addresses.

[no] ip proxy-mobile aap address
[ address2 address3]

Syntax Description

aap address

Specifies the primary AAP IP address

address2

(Optional) Specifies the secondary AAP IP address

address3

(Optional) Specifies a second secondary AAP IP address

Defaults

AAP address information is not defined by default.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify the IP addresses for Proxy Mobile IP primary and secondary AAPs:

1100-AP(config)# ip proxy-mobile aap 10.10.9.21 10.10.9.22 10.10.9.23

This example shows how to clear out the IP addresses for the Proxy Mobile IP AAPs:

1100-AP(config)# no ip proxy-mobile aap

Related Commands You can verify your settings by entering the show class-map privileged EXEC command.

Command Description

ip proxy-mobile enable

Enables and disables Proxy Mobile IP. Removes the configuration information when disabled

show ip proxy-mobile

Displays Proxy Mobile IP information

ip proxy-mobile enable

Use the ip proxy-mobile enable global configuration command to enable or disable proxy-mofile IP. Use the no form of this command to disable Proxy Mobile IP and remove all associated CLIs.

[no] ip proxy-mobile enable

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled by default.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to enable Proxy Mobile IP:

1100-AP(config)# ip proxy-mobile enable

This example shows how to disable Proxy Mobile IP and remove all associated CLIs:

1100-AP(config)# no ip proxy-mobile enable

Related Commands You can verify your settings by entering the show class-map privileged EXEC command.

Command Description

ip proxy-mobile pause

Disables Proxy Mobile IP without removing the configuration

ip proxy-mobile aap

Specifies the IP addresses for the primary and secondary AAP servers for Proxy Mobile IP

ip proxy-mobile secure

Specifies the Proxy Mobile IP security association information

show ip proxy-mobile

Displays Proxy Mobile IP information

ip proxy-mobile pause

Use the ip proxy-mobile pause global configuration command to enable or disable proxy-mofile IP without removing all associated CLIs. Use the no form of this command to re-enable Proxy Mobile IP.

[no] ip proxy-mobile pause

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to disable Proxy Mobile IP without removing the configuration:

1100-AP(config)# ip proxy-mobile pause

This example shows how to re-enable Proxy Mobile IP:

1100-AP(config)# no ip proxy-mobile pause

Related Commands You can verify your settings by entering the show class-map privileged EXEC command.

Command Description

show ip proxy-mobile

Displays Proxy Mobile IP information

ip proxy-mobile secure

Use the ip proxy-mobile secure global configuration command to specify the Proxy Mobile IP security association information for a range of IP addresses. Use the no form of this command to reset the parameters to default values.

[no] ip proxy-mobile secure
node address-start address-end
spi spi
key {hex | ascii} string

Syntax Description

node address-start address-end

Specifies a range of IP addresses from address-start (beginning of range) to address-end (end of range)

spi spi

Specifies the security parameter index

key hex string

Specifies a hexidecimal key value

key ascii string

Specifies an ASCII key value

Defaults

The default key setting is ASCII.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure Proxy Mobile IP security association information for an IP address range of 10.9.1.20 to 10.9.1.60 with an ASCII key of 123456789abcd:

1100-AP(config)# ip proxy-mobile secure 10.9.1.20 10.9.1.60 spi 100 key ascii 123456789abcd

This example shows how to reset the Proxy Mobile IP security association information to defaults:

1100-AP(config)# no ip proxy-mobile secure

Related Commands

Command Description

ip proxy-mobile enable

Enables and disables Proxy Mobile IP. Removes the configuration information when disabled

show ip proxy-mobile

Displays Proxy Mobile IP information

logging buffered

Use the logging buffered global configuration command to begin logging of messages to an internal buffer. Use the no form of this command to stop logging messages.

[no] logging buffered [size] [severity]

Syntax Description

size

Specifies the size of the internal buffer (4096-2147483647 bytes)

severity

Specifies the message severity to log (1-7)

Severity 1: alerts

Severity 2: critical

Severity 3: errors

Severity 4: warnings

Severity 5: notifications

Severity 6: informational

Severity 7: debugging

Defaults

This command has no defaults.

Command Modes

Global configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to begin logging severity 3 messages to an internal 5000 byte buffer:

1100-AP(config)# logging buffered 5000 3

This example shows how to stop the message logging:

1100-AP(config)# no logging buffered

Related Commands

Command Description

show logging

Displays recent logging event headers or complete events

clear logging

Clears logging status count and the trace buffer

match (class-map configuration)

Use the match class-map configuration command to define the match criteria to classify traffic. Use the no form of this command to remove the match criteria.

[no] match {access-group acl-index-or-name |
ip [dscp dscp-list | precedence precedence-list] |
vlan vlan-id}

Syntax Description

access-group acl-index-or-name

Specifies the number or name of an IP standard or extended access control list (ACL) or MAC ACL. For an IP standard ACL, the ACL index ranges are 1 to 99 and 1300 to 1999. For an IP extended ACL, the ACL index ranges are100 to 199 and 2000 to 2699.

ip dscp dscp-list

Specifies a list of up to eight IP Differentiated Services Code Point (DSCP) values to match against incoming packets. Separate each value with a space. The range is 0 to 63.

ip precedence ip-precedence-list

Specifies a list of up to eight IP-precedence values to match against incoming packets. Separate each value with a space. The range is 0 to 7.

vlan vlan-id

Specifies the virtual LAN identification number. Valid IDs are from 1 to 4095; do not enter leading zeros.


Note   Though visible in the command-line help strings, the any, class-map, destination-address, input-interface, mpls, not, protocol, and source-address keywords are not supported.

Defaults

This command has no defaults.

Command Modes

Class-map configuration

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use the class-map global configuration command to enter the class-map configuration mode. The match command in the class-map configuration mode is used to specify which fields in the incoming packets are examined to classify the packets. Only the IP access group or the MAC access group matching to the Ether Type/Len are supported.

You can use the match ip dscp dscp-list command only in a policy map that is attached to an egress interface.

Only one match command per class map is supported.

For the match ip dscp dscp-list or the match ip precedence ip-precedence-list command, you can enter a mnemonic name for a commonly used value. For example, you can enter the match ip dscp af11 command, which is the same as entering the match ip dscp 10 command. You can enter the match ip precedence critical command, which is the same as entering the match ip precedence 5 command. For a list of supported mnemonics, enter the match ip dscp ? or the match ip precedence ? command to see the command-line help strings.

Examples

This example shows how to create a class map called class2, which matches all the incoming traffic with DSCP values of 10, 11, and 12:

1100-AP(config)# class-map class2
1100-AP(config-cmap)# match ip dscp 10 11 12
1100-AP(config-cmap)# exit

This example shows how to create a class map called class3, which matches all the incoming traffic with IP-precedence values of 5, 6, and 7:

1100-AP(config)# class-map class3
1100-AP(config-cmap)# match ip precedence 5 6 7
1100-AP(config-cmap)# exit

This example shows how to delete the IP-precedence match criteria and to classify traffic by vlan:

1100-AP(config)# class-map class2
1100-AP(config-cmap)# match ip precedence 5 6 7
1100-AP(config-cmap)# no match ip precedence
1100-AP(config-cmap)# match vlan 2
1100-AP(config-cmap)# exit

You can verify your settings by entering the show class-map privileged EXEC command.

Related Commands

Command Description

class-map

Creates a class map to be used for matching packets to the class whose name you specify

show class-map

Displays quality of service (QoS) class maps

Configuration Interface Commands

This section contains the new and revised IOS commands supported by the access point in configuration interface mode.

accounting (ssid configuration mode)

Use the accounting ssid configuration mode command to enable RADIUS accounting for the radio interface (for the specified SSID). Use the no form of the command to disable accounting.

[no] accounting list-name

Syntax Description

accounting list-name

Specifies the name of an accounting list.

Defaults

This command has no defaults.

Command Modes

SSID Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

You create accounting lists using the aaa accounting command. These lists indirectly reference the server where the accounting information is stored.

Examples

This example shows how to enable RADIUS accounting and set the RADIUS server name:

1100-AP(config-if-ssid)# accounting radius1

This example shows how to disable RADIUS accounting:

1100-AP(config-if-ssid)# no accounting

Related Commands

Command Description

ssid

Specifies the SSID and enters the ssid configuration mode

antenna

Use the antenna configuration interface command to configure the radio receive or transmit antenna settings. Use the no form of this command to reset the receive antenna to defaults.

[no] antenna {receive | transmit} {diversity | left | right}

Syntax Description

diversity

Specifies the antenna with the best signal

left

Specifies the left antenna

right

Specifies the right antenna

Defaults

The default antennal configuration is diversity.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify the right receive antenna option:

1100-AP(config-if)# antenna receive right

This example shows how to set the receive antenna option to defaults:

1100-AP(config-if)# no antenna receive

Related Commands

Command Description

authentication open (ssid configuration mode)

Configures the radio transmit antenna settings

show running-config

Displays the current access point operating configuration

authentication network-eap (ssid configuration mode)

Use the authentication network-eap ssid configuration mode command to configure the radio interface (for the specified SSID) to support network-EAP authentication with optional MAC address authentication. Use the no form of the command to disable network-eap authentication for the SSID.

[no] authentication
network-eap list-name
[mac-address list-name]

Syntax Description

network-eap list-name

Specifies the list name for EAP authentication

mac-address list-name

Specifies the list name for MAC authentication

Defaults

This command has no defaults.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to authenticate clients using the network EAP method, with optional MAC address screening. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored.

Examples

This example shows how to set the authentication to open for devices on a specified address list:

1100-AP(config-if-ssid)# authentication network-eap list1

This example shows how to reset the authentication to default values:

1100-AP(config-if-ssid)# no authentication network-eap

Related Commands

Command Description

authentication open (ssid configuration mode)

Specifies open authentication

authentication shared (ssid configuration mode)

Specifies shared-key authentication

ssid

Specifies the SSID and enters the ssid configuration mode

show running-config

Displays the current access point operating configuration

authentication open (ssid configuration mode)

Use the authentication open ssid configuration mode command to configure the radio interface (for the specified SSID) to support open authentication and optionally MAC address authentication or EAP authentication. Use the no form of the command to disable open authentication for the SSID.

[no] authentication open
[mac-address list-name [alternate] ]
[eap list-name]

Syntax Description

mac-address list-name

Specifies the list name for MAC authentication

alternate

Specifies the use of either EAP authentication or MAC address authentication

eap list-name

Specifies the list name for EAP authentication

Defaults

This command has no defaults.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to authenticate clients using the open method, with optional MAC address or EAP screenings. If you use the alternate keyword, the client must pass either the MAC address or EAP authentication. Otherwise, the client must pass both authentications. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored.

Examples

This example shows how to enable open authentication with MAC address restrictions:

1100-AP(config-if-ssid)# authentication open mac-address mac-list1

This example shows how to disable open authentication for the SSID:

1100-AP(config-if-ssid)# no authentication open

Related Commands

Command Description

authentication shared (ssid configuration mode)

Specifies shared key authentication

authentication network-eap (ssid configuration mode)

Specifies network EAP authentication

ssid

Specifies the SSID and enters the ssid configuration mode

authentication shared (ssid configuration mode)

Use the authentication shared ssid configuration mode command to configure the radio interface (for the specified SSID) to support shared authentication with optional MAC address authentication and EAP authentication. Use the no form of the command todisable shared authentication for the SSID.

[no] authentication shared
[mac-address list-name]
[eap list-name]

Syntax Description

mac-address list-name

Specifies the list name for MAC authentication

eap list-name

Specifies the list name for EAP authentication

Defaults

This command has no defaults.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to authenticate clients using the shared method, with optional MAC address or EAP screenings. You define list names for MAC addresses and EAP using the aaa authentication login command. These lists define the authentication methods activated when a user logs in and indirectly identify the location where the authentication information is stored.

Examples

This example shows how to set the authentication to shared for devices on a MAC address list:

1100-AP(config-if-ssid)# authentication shared mac-address mac-list1

This example shows how to reset the authentication to default values:

1100-AP(config-if-ssid)# no authentication shared

Related Commands

Command Description

authentication open (ssid configuration mode)

Specifies open authentication

authentication network-eap (ssid configuration mode)

Specifies network EAP authentication

ssid

Specifies the SSID and enters the ssid configuration mode

show running-config

Displays the current access point operating configuration

beacon

Use the beacon configuration interface command to specify how often the beacon contains a Delivery Traffic Indicator Message (DTIM). Use the no form of this command to reset the beacon interval to defaults.

[no] beacon {period Kms | dtim-period count}

Syntax Description

period Kms

Specifies the beacon time in Kilomicroseconds (Kms). Kms is a unit of measurement in software terms. K = 1024, m = 10-6, and s = seconds,
so Kms = 0.001024 seconds, 1.024 milliseconds, or 1024 microseconds.

dtim-period count

Specifies the number of DTIM beacon periods to wait before delivering multicast packets.

Defaults

The default period is 100.

The default dtim-period is 2

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Clients normally wake up each time a beacon is sent to check for pending packets. Longer beacon periods let the client sleep longer and preserve power. Shorter beacon periods reduce the delay in receiving packets.

Controlling the DTIM period has a similar power-saving result. Increasing the DTIM period count lets clients sleep longer, but delays the delivery of multicast packets. Because mulitcast packets are buffered, large DTIM period counts can cause a buffer overflow.

Examples

This example shows how to specify a beacon period of 15 Kms (15.36 ms):

1100-AP(config-if)# beacon period 15

This example shows how to set the beacon parameter to defaults:

1100-AP(config-if)# no beacon

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

bridge-group port-protected

Use the bridge-group port-protected configuration interface command to enable protected port for public secure mode configuration. In IOS, there is no exchange of unicast, broadcast, or multicast traffic between protected ports.

bridge-group bridge-group
port-protected

Syntax Description

bridge-group

Specifies the bridge group for port protection

Defaults

This command has no defaults.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to enable protected port for bridge group 71:

1100-AP(config-if)# bridge-group 71 port-protected

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

broadcast-key

Use the broadcast-key configuration interface command to configure the time interval between rotations of the broadcast encryption key used for clients. Use the no form of the command to disable broadcast key rotation.

[no] broadcast-key
[vlan vlan-id]
[change secs]

Syntax Description

vlan vlan-id

(Optional) Specifies the virtual LAN identification value

change secs

(Optional) Specifies the amount of time (in seconds) between the rotoation of the broadcast encryption key

Defaults

The default change time is specified by the IEEE 802.11 dot1x EAP.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure vlan10 to support broadcast key encryption with a 5-minute key rotation interval:

1100-AP(config-if)# broadcast-key vlan 10 change 300

This example shows how to disable broadcast key rotation:

1100-AP(config-if)# no broadcast-key

channel

Use the channel configuration interface command to set the radio channel frequency. Use the no form of this command to reset the channel frequency to defaults.

[no] channel {number | frequency | least-congested}

Syntax Description

number

Specifies a channel number (see Table 2-1).

Note The valid numbers depend on the channels allowed in your regulatory region and are set during manufacturing.

frequency

Specifies the center frequency for the radio channel. Center frequency options are available in your regulatory region (See Table 2-1).

Note The valid frequencies depend on the channels allowed in your regulatory region and are set during manufacturing.

least-congested

Enables or disables the scanning for a least busy radio channel to communicate with the client adapter

Table 2-1   Center Frequencies for IEEE 802.11b Radios

Channel Identifier Center Frequency (MHz) Regulatory Domains
Americas
(-A)
EMEA
(-E)
Japan
(-J)
Israel
(-I)
China
(-C)

1

2412

X

X

X

-

X

2

2417

X

X

X

-

X

3

2422

X

X

X

X

X

4

2427

X

X

X

X

X

5

2432

X

X

X

X

X

6

2437

X

X

X

X

X

7

2442

X

X

X

X

X

8

2447

X

X

X

X

X

9

2452

X

X

X

X

X

10

2457

X

X

X

-

X

11

2462

X

X

X

-

X

12

2467

-

X

X

-

-

13

2472

-

X

X

-

-

14

2484

-

-

X

-

-

Defaults

The default channel is least-congested.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to set the access point radio channel 10 with a center frequency of 2457.

1100-AP(config-if)# channel 2457

This example shows how to set the access point to scan for the least-congested radio channel.

1100-AP(config-if)# channel least-congested

This example shows how to set the beacon parameter to defaults:

1100-AP(config-if)# no channel

Related Commands

Command Description

show controllers dot11radio

Displays the radio controller information and status

dot11 extension aironet

Use the dot11 extension aironet configuration interface command to enable or disable Cisco Aironet extensions to the IEEE 802.11b standard. Use the no form of this command to disable the Cisco Aironet extensions.

[no] dot11 extension aironet

Syntax Description

This command has no arguments or keywords.

Defaults

Cisco Aironet extensions are disabled by default.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The Cisco Aironet extenstions help clients choose the best access point. You must enable these extensions to use advanced features such as Cisco MIC and key hashing. Disable these extensions for non-Cisco clients that misinterpret the extenstions.

Examples

This example shows how to enable Cisco Aironet extensions for the radio interface:

1100-AP(config-if)# dot11 externsion aironet

This example shows how to disable Cisco Aironet extensions for the radio interface:

1100-AP(config-if)# no dot11 extension aironet

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

dot1x client-timeout

Use the dot1x client-timeout configuration interface command to configure the IEEE 802.1x (dot1x) client timeout value.

dot1x client-timeout 1-65555

Syntax Description

1-65555

Specifies a number of seconds (1 to 65555)

Defaults

The default timeout is 10 seconds.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure a 2-minute dot1x client timeout value:

1100-AP(config-if)# dot1x client-timeout 120

Related Commands

Command Description

show interfaces dot11radio aaa

Displays radio AAA timeout values

dot1x reauth-period

Use the dot1x reauth-period configuration interface command to configure the dot1x client- reauthentication period. The no form of the command disables reauthoration.

[no] dot1x reauth-period {1-65555 | server}

Syntax Description

1-65555

Specifies a number of seconds (1 to 65555)

server

Specifies server reauthentication

Defaults

The default is disabled.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure a 2-minute dot1x client-reauthentication period:

1100-AP(config-if)# dot1x reauth-period 120

Related Commands

Command Description

show interfaces dot11radio aaa

Displays radio AAA timeout values

encryption key

Use the encryption key configuration interface command to define a WEP key used for data encryption on the wireless LAN or on a specific virtual LAN (VLAN). Use the no form of the command to remove a specific encryption key.

[no] encryption
[vlan vlan-id ]
key 1-4
size {40bit | 128Bit}
encryption-key
[transmit-key]

Syntax Description

vlan vlan-id

Specifies the VLAN number (1 to 4095)

key 1-4

Specifies the number of the key (1 to 4) that is being configured. (A total of four encryption keys can be configured for each VLAN.)

40bit

Specifies a 40-bit encryption key

128bit

Specifies a 128-bit encryption key

encryption-key

Specifies the value of the encryption key:

  • A 40-bit encryption key requires 10 (hexadecimal) digits.
  • A 128-bit encryption key requires 26 (hexadecimal) digits.

transmit-key

Specifies the key for encrypting transmit data from the access point

Defaults

This command has no defaults.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure a 40-bit encryption key with a value of Apple12@?* as
WEP key 1 used on VLAN number 1:

1100-AP(config-if)# encryption vlan 1 key 1 size 40bit 11aa33bb55 transmit-key

This example shows how to remove WEP key 1 on VLAN 1:

1100-AP(config-if)# no encryption vlan 1 key 1

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

encryption mode wep

Use the encryption mode wep configuration interface command to enable a specific encryption type that is used to communicate on the wireless LAN or on a specific VLAN. When encryption is enabled, all client devices on the wireless LAN or on a VLAN must support the specified encryption methods to communicate with the access point. Use the no form of the command to disable the encryption features on a specific VLAN.

[no] encryption [vlan vlan-id ] mode wep
{manditory | optional}
{key-hash | mic [key-hash] }

Syntax Description

vlan-id

(Optional) Specifies the VLAN number

mandatory

Specifies that encryption is mandatory for the client to communicate with the access point

optional

Specifies that client devices can communicate with the access point with or without using encryption

key-hash

(Optional) Specifies that encryption key hashing is required for client devices to communicate with the access point

mic

(Optional) Specifies that encryption with message integrity check (MIC) is required for client devices to communicate with the access point

Defaults

This command has no defaults.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify that encryption key hashing must be used on VLAN number 1:

1100-AP(config-if)# encryption vlan 1 mode wep mandatory key-hash

This example shows how to disable mandatory encryption on VLAN 1:

1100-AP(config-if)# no encryption vlan 1 mode wep mandatory

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

fragment-threshold

Use the fragment-threshold configuration interface command to set the size at which packets are fragmented. Use the no form of the command to reset the parameter to defaults.

[no] fragment-threshold 256-2346

Syntax Description

256-2346

Specifies the packet fragment threshold size (256 to 2346 bytes)

Defaults

The default threshold is 2346 bytes

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to set the packet fragment threshold size to 1800 bytes:

1100-AP(config-if)# fragment-threshold 1800

This example shows how to reset the packet fragment threshold size to defaults:

1100-AP(config-if)# no fragment-threshold

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

guest-mode (ssid configuration mode)

Use the guest-mode ssid configuration mode command to configure the radio interface (for the specified SSID) to support guest mode. Use the no form of the command to disable the guest mode.

[no] guest-mode

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defauts.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The access point can have one guest-mode SSID, or none at all. The guest-mode SSID is used in beacon frames and response frames to probe requests that specify the empty or wildcard SSID. If no guest-mode SSID exists, the beacon contains no SSID and probe requests with the wildcard SSID are ignored. Disabling the guest mode makes the networks slightly more secure. Enabling the guest mode helps clients that passively scan (do not transmit) associate with the access point. It also allows clients configured without a SSID to associate.

Examples

This example shows how to set the wireless LAN for the specified SSID into guest mode:

1100-AP(config-if-ssid)# guest-mode

This example shows how to reset the guest-mode parameter to default values:

1100-AP(config-if-ssid)# no guest-mode

Related Commands

Command Description

ssid

Specifies the SSID and enters the ssid configuration mode

show running-config

Displays the current access point operating configuration

infrastructure-client

Use the infrastructure-client configuration interface command to configure a virtual interface for a workgroup bridge client. Use the no form of the command to disable the workgroup bridge client virtual interface.

[no] infrastructure-client

Syntax Description

This command has no arguments or keywords.

Defaults

The default is infrastructure client disabled.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Enable the infrastructure client feature to increase the reliability of multicast messages to workgroup bridges. When enabled, the access point sends directed packets containing the multicasts, which are retried if necessary, to the associated workgroup bridge. Enable only when necessary because it can greatly increase the load on the radio cell.

Examples

This example shows how to configure a virtual interface for a workgroup bridge client.

1100-AP(config-if)# infrastructure-client

This example shows how to specify that a workgroup bridge client virtual interface is not supported.

1100-AP(config-if)# no infrastructure-client

Related Commands

Command Description

show running-config

Displays information on the current running access point configuration

infrastructure-ssid (ssid configuration mode)

Use the infrastructure-ssid command in ssid configuration mode to reserve this SSID for infrastructure associations, such as those from one access point to another. Use the no form of the command to revert to a normal non-infrastructure SSID.

[no] infrastructure-ssid

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

This command controls the SSID that access points use when associating with one another. A root access point only allows a repeater access point to associate using this SSID. A repeater access point uses this SSID to associate with its parent. Configure authentication types and VLANs for an SSID to control the security of the access points.

Examples

This example shows how to reserve the specified SSID for infrastructure associations on the wireless LAN:

1100-AP(config-if-ssid)# infrastructure-ssid

This example shows how to restore the SSID to non-infrastructure associations:

1100-AP(config-if-ssid)# no infrastructure-ssid

Related Commands

Command Description

ssid

Specifies the SSID and enters the ssid configuration mode

ip proxy-mobile

Use the ip proxy-mobile configuration interface command to enable the access point to participate in Proxy Mobile IP operations. Use the no form of this command to disable Proxy Mobile IP operations on the access point.

[no] ip proxy-mobile

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to enable the Proxy Mobile IP interface on the access point.

1100-AP(config-if)# ip proxy-mobile

This example shows how to disable Proxy Mobile IP operations on the access point.

1100-AP(config-if)# no ip proxy-mobile

Related Commands

Command Description

clear ip proxy-mobile subnet-map

Clears the Proxy Mobile IP subnet map and obtains a new table from the AAP

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile aaa requests

Displays information about mobile nodes that have pending Proxy Mobile IP AAA requests

show ip proxy-mobile agent

Displays information about the discovered Proxy Mobile IP agents

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile node

Displays information about a specific Proxy Mobile IP node or about all the nodes on the access point

show ip proxy-mobile registration

Displays information about the pending and accepted Proxy Mobile IP registrations

show ip proxy-mobile subnet-map

Displays the Proxy Mobile IP subnet map table

show ip proxy-mobile traffic

Displays the Proxy Mobile IP statistics

show ip proxy-mobile visitor

Displays visiting Proxy Mobile IP nodes

clear ip proxy-mobile subnet-map

Clears the Proxy Mobile IP subnet map and obtains a new table from the AAP

ip proxy-mobile (ssid configuration mode)

Use the ip proxy-mobile ssid configuration mode command to configure the radio interface (for the specified SSID) to support Proxy Mobile IP. Use the no form of the command to reset the parameter to the default value.

[no] ip proxy-mobile

Syntax Description

This command has no arguments or keywords.

Defaults

No Proxy Mobile IP support is the default setting.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to enable Proxy Mobile IP support on the wireless LAN for the specified SSID:

1100-AP(config-if-ssid)# ip proxy-mobile

This example shows how to disable Proxy Mobile IP support:

1100-AP(config-if-ssid)# no ip proxy-mobile

Related Commands

Command Description

clear ip proxy-mobile subnet-map

Clears the Proxy Mobile IP subnet map and obtains a new table from the AAP

show ip proxy-mobile

Displays information about Proxy Mobile IP

show ip proxy-mobile aaa requests

Displays information about mobile nodes that have pending Proxy Mobile IP AAA requests

show ip proxy-mobile agent

Displays information about the discovered Proxy Mobile IP agents

show ip proxy-mobile detail

Displays Proxy Mobile IP statistics, the subnet map table, and all the security associations

show ip proxy-mobile node

Displays information about a specific Proxy Mobile IP node or about all the nodes on the access point

show ip proxy-mobile registration

Displays information about the pending and accepted Proxy Mobile IP registrations

show ip proxy-mobile subnet-map

Displays the Proxy Mobile IP subnet map table

show ip proxy-mobile traffic

Displays the Proxy Mobile IP statistics

show ip proxy-mobile visitor

Displays visiting Proxy Mobile IP nodes

ssid

Specifies the SSID and enters the ssid configuration mode

l2-filter bridge-group-acl

Use the l2-filter bridge-group-acl configuration interface command to apply a layer-2 ACL filter to the bridge group incoming and outgoing packets between the access point and the host (upper layer). Use the no form of the command to disable the layer-2 ACL filter

[no] l2-filter bridge-group-acl

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no defaults.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to apply a Layer 2 ACL filter to the bridge group packets:

1100-AP(config-if)# l2-filter bridge-group-acl
This example shows how to activate a layer-2 ACL filter:
1100-AP(config-if)# no l2-filter bridge-group-acl

Related Commands

Command Description

bridge-group port-protected

Enables protected port for public secure mode configuration

show bridge

Displays information on the bridge group or classes of entries in the bridge forwarding database

show bridge group

Displays information about configured bridge groups

max-associations (ssid configuration mode)

Use the max-associations ssid configuration mode command to configure the maximun number of associations supported by the radio interface (for the specified SSID). Use the no form of the command to reset the parameter to the default value.

[no] max-associations value

Syntax Description

value

Specifies the maximum number (1 to 255) of associations supported

Defaults

This default maximum is 255.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to set the maximum number of associations to 5 on the wireless LAN for the specified SSID:

1100-AP(config-if-ssid)# max-associations 5

This example shows how to reset the maximum number of associations to the default value:

1100-AP(config-if-ssid)# no max-associations

Related Commands

Command Description

ssid

Specifies the SSID and enters the ssid configuration mode

packet retries

Use the packet retries configuration interface command to specify the maximum number of attempts to send a packet. Use the no form of the command to reset the parameter to defaults.

[no] packet retries 1-128

Syntax Description

1-128

Specifies the maximum number of retries (1-128)

Defaults

The default number of retries is 32.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify 15 as the maximum number of retries.

1100-AP(config-if)# packet retries 15

This example shows how reset the packet retries to defaults.

1100-AP(config-if)# no packet retries

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

parent

Use the parent configuration interface command to add a parent to a list of valid parent access points. Use the no form of the command to remove a parent from the list.

[no] parent 1-4 mac-address

Syntax Description

1-4

Specifies the parent root access point number (1 to 4)

mac-address

Specifies the MAC address (in xxxx.xxxx.xxxx format) of a parent access point

Defaults

Repeater access point operation is disabled by default.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The parent command adds a parent to the list of valid parent access points. Use this command multiple times to define up to four valid parents. A repeater access point operates best when configured to associate with specific root access points that are connected to the wired LAN.

Examples

This example shows how to set up repeater operation with the parent 1 access point:

1100-AP(config-if)# parent 1 0040.9631.81cf

This example shows how to set up repeater operation with the parent 2 access point:

1100-AP(config-if)# parent 2 0040.9631.81da

This example shows how to remove a parent from the parent list:

1100-AP(config-if)# no parent

Related Commands

Command Description

parent timeout

Sets the parent association timeout

parent timeout

Use the parent timeout configuration interface command to define the amount of time to associate with a parent access point. Use the no form of the command to disable the timeout.

[no] parent timeout sec

Syntax Description

timeout sec

Specifies the amount of time the access point attempts to associate with the specified parent access point (0 - 65535 seconds)

Defaults

Parent timeout is disabled by default.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

The parent timeout defines how long the access point attempts to associate with a parent in the parent list. After the timeout, another acceptable parent is used. You set up the parent list using the parent command. With the timeout disabled, the parent must come from the parent list.

Examples

This example shows how to set up repeater operation with the parent 1 access point with a timeout of 60 seconds:

1100-AP(config-if)# parent timeout 60

This example shows how to disable repeater operation:

1100-AP(config-if)# no parent

Related Commands

Command Description

parent

Specify valid parent access points

payload-encapsulation

Use the payload-encapsulation configuration interface command to specify the Ethernet encapsulation type used to format Ethernet data packets that are not formatted using IEEE 802.3 headers. Data packets that are not IEEE 802.3 packets must be reformatted using IEEE 802.1H or RFC1042. Use the no form of the command to reset the parameter to defaults.

[no] payload-encapsulation
{snap | dot1h}

Syntax Description

snap

(Optional) Specifies the RFC1042 encapsulation

dot1h

(Optional) Specifies the IEEE 802.1H encapsulation

Defaults

The default payload encapsulation is snap.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to specify the use of IEEE 802.1H encapsulation:

1100-AP(config-if)# payload-encapsulation dot1h

This example shows how to reset the parameter to defaults:

1100-AP(config-if)# no payload-encapsulation

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

power client maximum

Use the power client maximum configuration interface command to configure the maximum power level clients should use for IEEE 802.11b radio transmissions to the access point. The power setting is transmitted to the client device during association with the access point. Use the no form of the command to not specify a power level.

[no] power client
{1 | 5 | 20 | 30 | 50 | 100}

Syntax Description

1, 5, 20, 30, 50, 100

Specifies a specific power level in mW. Maximum power is regulated by the regulatory agency in the country of operation and is set during manufacture of the access point and client device. Refer to Table 2-2.

Table 2-2   Maximum Power Levels for IEEE 801.11b Radio

Regulatory Domain Maximum Power Level (mW)

Americas (-A) (4W EIRP maximum)

100

EMEA (-E) (100 mW EIRP maximum)

50

Japan (-J) (10 mW/MHz EIRP maximum)

30

Israel (-I) (100 mW EIRP maximum)

50

Defaults

The default is no power level specification during association with the client.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to specify the desired transmitter power level for clients. Lower power levels reduce the radio cell size and interference between cells. The client software chooses the actual transmit power level, choosing between the lower of the access point value and the locally configured value. The maximum transmit power is limited your regulatory region.

Examples

This example shows how to specify a 50-mW power level:

1100-AP(config-if)# power client 50

This example shows how to disable power level requests:

1100-AP(config-if)# no power client

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

power local

Use the power local configuration interface command to configure the access point radio power level. Use the no form of the command to reset the parameter to defaults.

[no] power local {1 | 5 | 20 | 30 | 50 | 100 | maximum}

Syntax Description

1, 5, 20, 30, 50, 100, or maximum

Specifies access point power setting in mW. (Maximum power is regulated by the regulatory agency in the country of operation and is set during manufacture of the access point. Refer to Table 2-2.)

Defaults

The default local power level is maximum.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to specify the local transmit power level. Lower power levels reduce the radio cell size and interference between cells. The maximum transmit power is limited by region.

Examples

This example shows how to specify a 50-mW transmit power level for the access point:

1100-AP(config-if)# power local 50

This example shows how to reset the access point power to defaults:

1100-AP(config-if)# no power local

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

preamble-short

Use the preamble-short configuration interface command to enable short radio preambles. The radio preamble is a selection of data at the head of a packet that contains information that the access point and client devices need when sending and receiving packets. Use the no form of the command to change back to default values.

[no] preamble-short

Syntax Description

This command has no arguments or keywords.

Defaults

The default is short radio preamble.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

If short radio preambles are enabled, clients may request either short or long preambles and the access point formats packets accordingly. Otherwise, clients are told to use long preambles.

Examples

This example shows how to set the radio packet to use a short preamble.

1100-AP(config-if)# preamble-short

This example shows how to set the radio packet to use a long preamble.

1100-AP(config-if)# no preamble-short

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

rts

Use the rts configuration interface command to set the Request-To-Send (RTS) threshold and the number of retries. Use the no form of the command to reset the parameter to defaults.

[no] rts
{threshold 0-2347 | retries 1-128}

Syntax Description

threshold 0-2347

Specifies the packet size, in bytes, above which the access point negotiates an RTS/CTS before sending out the packet (0 to 2347 bytes).

retries 1-128

Specifies the number of times the access point issues an RTS before stopping the attempt to send the packet over the radio.

Defaults

The default threshold is 2330 bytes.

The default number of retries is 32.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to set the RTS threshold to 1400 bytes:

1100-AP(config-if)# rts threshold 1400

This example shows how to set the RTS retries count to 3:

1100-AP(config-if)# rts retries 3

This example shows how to reset the parameter to defaults:

1100-AP(config-if)# no rts

Related Commands

Command Description

show running-config

Displays the current access point operating configuration

speed

Use the speed configuration interface command to configure the four data rates supported by the access point radio. An individual data rate can be set only to a basic or a non-basic setting, not both.

speed
{ [1.0] [2.0] [5.5] [11.0 ]
[
basic-1.0] [basic-2.0] [basic-5.5] [basic-11.0] |
range |
throughput}

Syntax Description

[ 1.0 ] [ 2.0 ] [ 5.5 ] [ 11.0 ]

(Optional) Sets the access point to allow packets to use the non-basic settings (1.0, 2.0, 5.5, or 11.0 Mbps). The access point transmits only unicast packets at these rates; multicast packets are sent at one of the data rates set to a basic setting.

Note At least one of the access point's data rates must be set to a basic setting.

[ basic-1.0 ] [ basic-2.0 ]
[ basic-5.5 ] [ basic-11.0 ]

(Optional) Sets the access point to require the use of the specified data rates for all packets, both unicast and multicast. At least one of the access point's data rates must be set to a basic setting.

Note The client must support the basic rate you select or it cannot associate with the access point.

range

(Optional) Sets the data rate for best radio range. This selection configures the 1.0 data rate to the basic setting and the other data rates to the non-basic settings.

throughput

(Optional) Sets the data rate for best throughput and configures all four data rates to the basic settings.

Defaults

All data rates default to the basic settings.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to set the radio data rates for best throughput:

1100-AP(config-if)# speed throughput

This example shows how to set the radio data rates support a low-speed client device while still supporting higher-speed client devices:

1100-AP(config-if)# speed basic-1.0 2.0 5.5 11.0

Related Commands

Command Description

show running-config

Displays the current access point operation configuration

ssid

Use the ssid configuration interface command to specify the radio service set identifier (SSID) and to enter into the ssid configuration mode. Use the no form of the command to remove an SSID.

[no] ssid ssid-string

Syntax Description

ssid-string

Specifies the SSID name for the radio, expressed as a case-sensitive alphanumeric stirng from 1 to 32 characters.

Defaults

The factory default SSID is tsunami.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced

Usage Guidelines

Use this command to specify a unique SSID for your wireless network. Several access points on a network, or subnetwork, can share a SSID. The no form of the command removes the SSID, which inhibits clients that use that SSID from associating with the access point.

Examples

This example shows how to set the radio SSID to Ivory-AP25:

1100-AP(config-if)# ssid Ivory-AP25

This example shows how to remove the SSID named Ivory-AP25 and all its configuration settings:

1100-AP(config-if)# no ssid Ivory-AP25

Related Commands

Command Description

authentication open (ssid configuration mode)

Configures the radio interface (for the specified SSID) to support open authentication

authentication shared (ssid configuration mode)

Configures the radio interface (for the specified SSID) to support shared authentication

authentication network-eap (ssid configuration mode)

Configures the radio interface (for the specified SSID) to support network-EAP authentication

guest-mode (ssid configuration mode)

Configures the radio interface (for the specified SSID) to support guest mode

ip proxy-mobile (ssid configuration mode)

Configures the radio interface (for the specified SSID) to support Proxy Mobile IP

max-associations (ssid configuration mode)

Configures the maximun number of associations supported by the radio interface (for the specified SSID)

show running-config

Displays the current access point operating configuration

vlan (ssid configuration mode)

Configures the radio interface (for the specified SSID) to support a specific Ethernet virtual LAN (VLAN)

station-role

Use the station-role configuration interface command to set the role of the radio interface. Use the no form of the command to reset the parameter to the default value.

[no] station-role
{repeater | root [fallback {shutdown | repeater]}}

Syntax Description

repeater

Specifies that the access point is configured for repeater operation. Repeater operation indicates the access point is not connected to a wired LAN and must associate to a root access point that is connected to the wired LAN.

root

Specifies that the access point is configured for root mode operation and connected to a wired LAN. This parameter also specifies that the access point should attempt to continue access point operation when the primary Ethernet interface is not functional.

fallback shutdown

(Optional) Specifies that the access point should shutdown when the primary Ethernet interface is not functional.

fallback repeater

(Optional) Specifies that the access point should operate in repeater mode when the primary Ethernet interface is not functional.

Defaults

Operates as a root access point by default.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure the access point for root operation and shutdown when Ethernet is not functional:

1100-AP(config-if)# station-role root fallback shutdown

This example shows how to configure the access point for repeater operation:

1100-AP(config-if)# station-role repeater

This example shows how to reset the access point to root operation:

1100-AP(config-if)# no station-role

Related Commands

Command Description

show running-config

Displays the current access point operating configuraion

traffic-class

Use the traffic-class configuration interface mode command to configure the radio interface quality-of-service (QoS) traffic class parameters for each of the eight traffic types. Use the no form of the command to reset a specific traffic class to the default values.

[no] traffic-class 0-7
cw-min 0-10
cw-max 0-10
fixed-slot 0-20

Syntax Description

traffic-class 0-7

Specifies the traffic class number (0 to 7)

cw-min 0-10

Specifies the minimum value (0 to 10) for the contention window

cw-max 0-10

Specifies the maximum value (0 to 10) for the contention window

fixed-slot 0-20

Specifies the fixed slot backoff interval value (0 to 20)

Defaults

No traffic class support is provided by default.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

Use this command to control the backoff parameters for each class of traffic. Backoff parameters control how the radio accesses the airwaves. The cw-min and cw-max arguments specify the collision window as a power of 2. For example, if the value is set to 3, the contention window is 0 to 7 backoff slots (2 to the power 3 minus 1). The fixed-slot arguments specify the number of backoff slots that are counted before the random backoff counter starts to count down.

Examples

This example shows how to configure traffic class 6 for contention windows and fixed slot backoff values. Each time the backoff for class 6 is started, the backoff logic waits a minimum of the 802.11 SIFS time plus 2 backoff slots. Then it begins counting down the 0 to 15 backoff slots in the contention window.

1100-AP(config-if)# traffic-class 6 cw-min 4 cw-max 10 fixed-slot 2

This example shows how to disable traffic class support:

1100-AP(config-if)# no traffic-class

vlan (ssid configuration mode)

Use the vlan ssid configuration mode command to configure the radio interface (for the specified SSID) to support a specific Ethernet virtual LAN (VLAN). Use the no form of the command to reset the parameter to the default value.

[no] vlan vlan-id

Syntax Description

vlan vlan-id

Specifies the virtual Ethernet LAN identification number for the SSID

Defaults

This command has no defaults.

Command Modes

SSID configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Examples

This example shows how to configure the VLAN that uses the radio SSID (wireless LAN):

1100-AP(config-if-ssid)# vlan 2

This example shows how to reset the VLAN parameter to default values:

1100-AP(config-if-ssid)# no vlan

Related Commands

Command Description

ssid

Specifies the SSID and enters the ssid configuration mode

world-mode

Use the world-mode configuration interface mode command to enable access point world mode operation. Use the no form of the command to disable world mode operation.

[no] world-mode

Syntax Description

This command has no arguments or keywords.

Defaults

World mode is disabled by default.

Command Modes

Configuration interface

Command History

Release Modification

12.2(4)JA

This command was introduced.

Usage Guidelines

With world mode enabled, the access point advertises the local settings, such as allowed frequencies and transmitter power levels. Clients with this capability then passively detect and adopt the advertised world settings, and then actively scan for the best access point.

Examples

This example shows how to enable world mode operation:

1100-AP(config-if)# world-mode

This example shows how to disable world mode operation:

1100-AP(config-if)# no world-mode

Related Commands

Command Description

show running-config

Displays the current access point operating configuration