Cisco Wireless LAN Controller Command Reference, Release 8.0

Cisco Wireless LAN Controller Command Reference, Release 8.0First Published: January 22, 2014

Last Modified: October 23, 2014

Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000 800 553-NETS (6387)Fax: 408 527-0883

Text Part Number: OL-31334-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITEDWARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITHTHE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain versionof the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California.

NOTWITHSTANDINGANYOTHERWARRANTYHEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS"WITH ALL FAULTS.CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OFMERCHANTABILITY, FITNESS FORA PARTICULAR PURPOSEANDNONINFRINGEMENTORARISING FROMACOURSEOFDEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUTLIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERSHAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, networktopology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentionaland coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnershiprelationship between Cisco and any other company. (1110R)

2014 Cisco Systems, Inc. All rights reserved.

C O N T E N T S

P r e f a c e Preface li

Audience li

Document Organization li

Document Conventions li

Related Documentation liv

Obtaining Documentation and Submitting a Service Request liv

C H A P T E R 1 Using the Command-Line Interface 1

CLI Command Keyboard Shortcuts 1

Using the Interactive Help Feature 2

Using the help Command 3

Using the ? command 3

Using the partial? command 4

Using the partial command 4

Using the command ? 5

command keyword ? 6

P A R T I System Management Commands 7

C H A P T E R 2 CLI Commands 9

show Commands 9

show 802.11 cu-metrics 10

show advanced 802.11 l2roam 11

show advanced send-disassoc-on-handoff 12

show advanced sip-preferred-call-no 13

show advanced sip-snooping-ports 14

show arp kernel 15

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 iii

show arp switch 16

show avc applications 17

show avc engine 18

show avc profile 19

show avc protocol-pack 20

show avc statistics application 21

show avc statistics client 23

show avc statistics guest-lan 25

show avc statistics remote-lan 27

show avc statistics top-apps 29

show avc statistics wlan 31

show boot 33

show band-select 34

show buffers 35

show cac voice stats 37

show cac voice summary 38

show cac video stats 39

show cac video summary 41

show cdp 42

show certificate compatibility 43

show certificate lsc 44

show certificate ssc 45

show certificate summary 46

show client calls 47

show client roam-history 48

show client summary 49

show client summary guest-lan 51

show client tsm 52

show client username 54

show client voice-diag 55

show coredump summary 56

show cpu 57

show custom-web 58

show database summary 59

show dhcp 60

Cisco Wireless LAN Controller Command Reference, Release 8.0iv OL-31334-01

Contents

show dtls connections 61

show dhcp proxy 62

show dhcp timeout 63

show flow exporter 64

show flow monitor summary 65

show guest-lan 66

show invalid-config 67

show inventory 68

show license all 69

show license capacity 71

show license detail 72

show license expiring 73

show license evaluation 74

show license feature 75

show license file 76

show license handle 77

show license image-level 78

show license in-use 79

show license permanent 80

show license status 81

show license statistics 82

show license summary 83

show license udi 84

show load-balancing 85

show local-auth certificates 86

show logging 87

show loginsession 89

show mesh cac 90

show mdns ap summary 92

show mdns domain-name-ip summary 93

show mdns profile 95

show mdns service 97

show mgmtuser 99

show mobility group member 100

show netuser 101

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 v

Contents

show netuser guest-roles 102

show network 103

show network summary 104

show network multicast mgid detail 106

show network multicast mgid summary 107

show nmsp notify-interval summary 108

show nmsp statistics 109

show nmsp status 111

show nmsp subscription 112

show ntp-keys 113

show qos 114

show queue-info 115

show reset 117

show route kernel 118

show route summary 119

show run-config 120

show run-config startup-commands 121

show sessions 122

show snmpcommunity 123

show snmpengineID 124

show snmptrap 125

show snmpv3user 126

show snmpversion 127

show switchconfig 128

show sysinfo 129

show system iostat 130

show system top 131

show tech-support 135

show time 136

show trapflags 138

show traplog 140

show queue-info 141

show rfid client 143

show rfid config 144

show rfid detail 145

Cisco Wireless LAN Controller Command Reference, Release 8.0vi OL-31334-01

Contents

show rfid summary 146

config Commands 146

config 802.11h channelswitch 147

config 802.11h powerconstraint 148

config 802.11h setchannel 149

config 802.11 11nsupport 150

config 802.11 11nsupport a-mpdu tx priority 151

config 802.11 11nsupport a-mpdu tx scheduler 153

config 802.11 11nsupport antenna 154

config 802.11 11nsupport guard-interval 155

config 802.11 11nsupport mcs tx 156

config 802.11 11nsupport rifs 158

config 802.11 beacon period 159

config 802.11 cac defaults 160

config 802.11 cac video acm 162

config 802.11 cac video cac-method 164

config 802.11 cac video load-based 166

config 802.11 cac video max-bandwidth 168

config 802.11 cac media-stream 170

config 802.11 cac multimedia 172

config 802.11 cac video roam-bandwidth 174

config 802.11 cac video sip 176

config 802.11 cac video tspec-inactivity-timeout 178

config 802.11 cac voice acm 180

config 802.11 cac voice max-bandwidth 181

config 802.11 cac voice roam-bandwidth 183

config 802.11 cac voice tspec-inactivity-timeout 185

config 802.11 cac voice load-based 187

config 802.11 cac voice max-calls 189

config 802.11 cac voice sip bandwidth 191

config 802.11 cac voice sip codec 193

config 802.11 cac voice stream-size 195

config 802.11 disable 197

config 802.11 dtpc 198

config 802.11 enable 199

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 vii

Contents

config 802.11 exp-bwreq 200

config 802.11 fragmentation 201

config 802.11 l2roam rf-params 202

config 802.11 max-clients 204

config 802.11 multicast data-rate 205

config 802.11 rate 206

config 802.11 rssi-check 207

config 802.11 rssi-threshold 208

config 802.11 tsm 209

config advanced 802.11 7920VSIEConfig 210

config advanced 802.11 edca-parameters 211

config advanced fastpath fastcache 213

config advanced fastpath pkt-capture 214

config advanced sip-preferred-call-no 215

config advanced sip-snooping-ports 216

config avc profile create 217

config avc profile delete 218

config avc profile rule 219

config band-select cycle-count 221

config band-select cycle-threshold 222

config band-select expire 223

config band-select client-rssi 224

config boot 225

config cdp 226

config certificate 227

config certificate lsc 228

config certificate ssc 230

config certificate use-device-certificate webadmin 232

config coredump 233

config coredump ftp 234

config coredump username 235

config custom-web ext-webauth-mode 236

config custom-web ext-webauth-url 237

config custom-web ext-webserver 238

config custom-web logout-popup 239

Cisco Wireless LAN Controller Command Reference, Release 8.0viii OL-31334-01

Contents

config custom-web radiusauth 240

config custom-web redirectUrl 241

config custom-web sleep-client 242

config custom-web webauth-type 243

config custom-web weblogo 244

config custom-web webmessage 245

config custom-web webtitle 246

config dhcp 247

config dhcp proxy 250

config dhcp timeout 251

config flow 252

config guest-lan 254

config guest-lan custom-web ext-webauth-url 255

config guest-lan custom-web global disable 256

config guest-lan custom-web login_page 257

config guest-lan custom-web webauth-type 258

config guest-lan ingress-interface 259

config guest-lan interface 260

config guest-lan mobility anchor 261

config guest-lan nac 262

config guest-lan security 263

config license boot 264

config load-balancing 266

config location 268

config logging buffered 270

config logging console 271

config logging debug 272

config logging fileinfo 273

config logging procinfo 274

config logging traceinfo 275

config logging syslog host 276

config logging syslog facility 279

config logging syslog level 281

config loginsession close 282

config mdns ap 283

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 ix

Contents

config mdns profile 285

config mdns query interval 287

config mdns service 289

config mdns snooping 292

config mdns policy enable 294

config mdns policy service-group create | delete 295

config mdns policy service-group parameters 296

config mdns policy service-group user-name 297

config mdns policy service-group user-role 298

config memory monitor errors 299

config memory monitor leaks 300

config mgmtuser add 302

config mgmtuser delete 303

config mgmtuser description 304

config mgmtuser password 305

config mgmtuser telnet 306

config mobility group member 307

config netuser add 309

config netuser delete 311

config netuser description 312

config netuser guest-lan-id 313

config netuser guest-role apply 314

config netuser guest-role create 315

config netuser guest-role delete 316

config netuser guest-role qos data-rate average-data-rate 317

config netuser guest-role qos data-rate average-realtime-rate 318

config netuser guest-role qos data-rate burst-data-rate 319

config netuser guest-role qos data-rate burst-realtime-rate 320

config netuser lifetime 321

config netuser maxUserLogin 322

config netuser password 323

config netuser wlan-id 324

config network 802.3-bridging 325

config network allow-old-bridge-aps 326

config network ap-discovery 327

Cisco Wireless LAN Controller Command Reference, Release 8.0x OL-31334-01

Contents

config network ap-fallback 328

config network ap-priority 329

config network apple-talk 330

config network arptimeout 331

config network bridging-shared-secret 332

config network broadcast 333

config network fast-ssid-change 334

config network ip-mac-binding 335

config network link local bridging 336

config network master-base 337

config network mgmt-via-wireless 338

config network multicast global 339

config network multicast igmp query interval 340

config network multicast igmp snooping 341

config network multicast igmp timeout 342

config network multicast l2mcast 343

config network multicast mld 344

config network multicast mode multicast 345

config network multicast mode unicast 346

config network oeap-600 dual-rlan-ports 347

config network oeap-600 local-network 348

config network otap-mode 349

config network rf-network-name 350

config network secureweb 351

config network secureweb cipher-option 352

config network ssh 354

config network telnet 355

config network usertimeout 356

config network web-auth captive-bypass 357

config network web-auth cmcc-support 358

config network web-auth port 359

config network web-auth proxy-redirect 360

config network web-auth secureweb 361

config network web-auth https-redirect 362

config network webcolor 363

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xi

Contents

config network webmode 364

config network web-auth 365

config network zero-config 366

config nmsp notify-interval measurement 367

config paging 368

config passwd-cleartext 369

config prompt 370

config qos average-data-rate 371

config qos average-realtime-rate 373

config qos burst-data-rate 375

config qos burst-realtime-rate 377

config qos description 379

config qos max-rf-usage 380

config qos dot1p-tag 381

config qos priority 382

config qos protocol-type 384

config qos queue_length 385

config rfid auto-timeout 386

config rfid status 387

config rfid timeout 388

config service timestamps 389

config sessions maxsessions 390

config sessions timeout 391

config switchconfig boot-break 392

config switchconfig fips-prerequisite 393

config switchconfig strong-pwd 394

config switchconfig flowcontrol 397

config switchconfig mode 398

config switchconfig secret-obfuscation 399

config sysname 400

config snmp community accessmode 401

config snmp community create 402

config snmp community delete 403

config snmp community ipaddr 404

config snmp community mode 405

Cisco Wireless LAN Controller Command Reference, Release 8.0xii OL-31334-01

Contents

config snmp engineID 406

config snmp syscontact 407

config snmp syslocation 408

config snmp trapreceiver create 409

config snmp trapreceiver delete 410

config snmp trapreceiver mode 411

config snmp v3user create 412

config snmp v3user delete 414

config snmp version 415

config time manual 416

config time ntp 417

config time timezone 420

config time timezone location 421

config trapflags 802.11-Security 424

config trapflags aaa 425

config trapflags adjchannel-rogueap 426

config trapflags ap 428

config trapflags authentication 429

config trapflags client 430

config trapflags client max-warning-threshold 431

config trapflags configsave 433

config trapflags IPsec 434

config trapflags linkmode 435

config trapflags mesh 436

config trapflags multiusers 437

config trapflags rfid 438

config trapflags rogueap 440

config trapflags rrm-params 441

config trapflags rrm-profile 442

config trapflags stpmode 443

config trapflags strong-pwdcheck 444

config trapflags wps 445

save config 446

Timeout Commands 446


Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xiii

Contents


config advanced timers 451

config dhcp timeout 454

config ldap 455

config remote-lan session-timeout 458

config network usertimeout 459

config radius acct retransmit-timeout 460

config radius auth mgmt-retransmit-timeout 461

config radius auth retransmit-timeout 462


config rogue ap timeout 464

config tacacs athr mgmt-server-timeout 466

config tacacs auth mgmt-server-timeout 467

config rfid auto-timeout 468

config rfid timeout 469

config wlan session-timeout 470

config wlan usertimeout 471

config wlan security wpa akm ft 472

config wlan security ft 473

Clearing Configurations, Log files, and Other Actions 473

clear acl counters 474

clear ap config 475

clear ap eventlog 476

clear ap join stats 477

clear arp 478

clear avc statistics 479

clear client tsm 481

clear config 482

clear ext-webauth-url 483

clear location rfid 484

clear location statistics rfid 485

clear locp statistics 486

clear login-banner 487

clear lwapp private-config 488

clear mdns service-database 489

Cisco Wireless LAN Controller Command Reference, Release 8.0xiv OL-31334-01

Contents

clear nmsp statistics 491

clear radius acct statistics 492

clear session 493

clear tacacs auth statistics 494

clear redirect-url 495

clear stats ap wlan 496

clear stats local-auth 497

clear stats mobility 498

clear stats port 499

clear stats radius 500

clear stats switch 502

clear stats tacacs 503

clear transfer 504

clear traplog 505

clear webimage 506

clear webmessage 507

clear webtitle 508

Resetting the System Reboot Time 508

reset system at 509

reset system in 510

reset system cancel 511

reset system notify-time 512

reset peer-system 513

Uploading and Downloading Files and Configurations 513

transfer download certpasswor 514

transfer download datatype 515

transfer download filename 517

transfer download mode 518

transfer download password 519

transfer download path 520

transfer download port 521

transfer download serverip 522

transfer download start 523

transfer download tftpPktTimeout 524

transfer download tftpMaxRetries 525

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xv

Contents

transfer download username 526

transfer encrypt 527

transfer upload datatype 528

transfer upload filename 530

transfer upload mode 531

transfer upload pac 532

transfer upload password 533

transfer upload path 534

transfer upload peer-start 535

transfer upload port 536

transfer upload serverip 537

transfer upload start 538

transfer upload username 539

Installing and Modifying Licenses on Cisco 5500 Series Controllers 539

license clear 540

license comment 541

license install 542

license modify priority 543

license revoke 545

license save 546

Right to Use Licensing Commands 546

license activate ap-count eval 547

license activate feature 548

license add ap-count 549

license add feature 550

license deactivate ap-count eval 551

license deactivate feature 552

license delete ap-count 553

license delete feature 554

Troubleshooting the Controller Settings 554

debug arp 555

debug avc 556

debug cac 557

debug cdp 558

debug crypto 559

Cisco Wireless LAN Controller Command Reference, Release 8.0xvi OL-31334-01

Contents

debug dhcp 560

debug dhcp service-port 561

debug disable-all 562

debug fastpath 563

debug l2age 568

debug mac 569

debug mdns all 570

debug mdns detail 571

debug mdns error 572

debug mdns message 573

debug mdns ha 574

debug memory 575

debug nmsp 576

debug ntp 577

debug packet error 578

debug packet logging 579

debug poe 582

debug rbcp 583

debug rfid 584

debug snmp 585

debug transfer 586

debug voice-diag 587

show debug 588

show eventlog 590

show memory monitor 591

show run-config 592

show process 593

show tech-support 594

config memory monitor errors 595

config memory monitor leaks 596

config msglog level critical 598

config msglog level error 599

config msglog level security 600

config msglog level verbose 601

config msglog level warning 602

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xvii

Contents

ping 603

P A R T I I Ports and Interfaces Commands 605


show Commands 607

show advanced sip-snooping-ports 608

show interface summary 609

show interface detailed 610

show interface group 612

show lag eth-port-hash 614

show lag ip-port-hash 615

show lag summary 616

show port 617

show serial 619

show spanningtree port 620

show spanningtree switch 621

show stats port 622

show stats switch 624

config Commands 625

config interface acl 626

config interface address 627

config interface address redundancy-management 629

config interface ap-manager 630

config interface create 631

config interface delete 632

config interface dhcp 633

config interface dhcp 635

config interface address 636

config interface guest-lan 638

config interface hostname 639

config interface nasid 640

config interface nat-address 641

config interface port 642

config interface quarantine vlan 643

Cisco Wireless LAN Controller Command Reference, Release 8.0xviii OL-31334-01

Contents

config interface vlan 644

config interface group mdns-profile 645

config interface mdns-profile 647

config lag 649

config macfilter add/delete 650

config macfilter description 652

config macfilter interface 653

config macfilter ip-address 654

config macfilter mac-delimiter 655

config macfilter radius-compat 656

config macfilter wlan-id 657

config port adminmode 658

config port autoneg 659

config port linktrap 660

config port multicast appliance 661

config port power 662

config route add 663

config route delete 664

config serial baudrate 665

config serial timeout 666

config spanningtree port mode 667

config spanningtree port pathcost 668

config spanningtree port priority 669

config spanningtree switch bridgepriority 670

config spanningtree switch forwarddelay 671

config spanningtree switch hellotime 672

config spanningtree switch maxage 673

config spanningtree switch mode 674

clear Commands 674

clear stats port 675

P A R T I I I VideoStream Commands 677


show Commands 679

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xix

Contents

show 802.11 680

show 802.11 media-stream 682

show media-stream client 683

show media-stream group detail 684

show media-stream group summary 685

config Commands 685

config 802.11 cac video acm 686

config 802.11 cac video cac-method 688

config 802.11 cac video load-based 690

config 802.11 cac video max-bandwidth 692

config 802.11 cac media-stream 694

config 802.11 cac multimedia 696

config 802.11 cac video roam-bandwidth 698

config 802.11 cac video sip 700


config 802.11 cac voice acm 704

config 802.11 cac voice max-bandwidth 705

config 802.11 cac voice roam-bandwidth 707


config 802.11 cac voice load-based 711

config 802.11 cac voice max-calls 713

config 802.11 cac voice sip bandwidth 715

config 802.11 cac voice sip codec 717

config 802.11 cac voice stream-size 719


config 802.11 media-stream multicast-direct 723

config 802.11 media-stream video-redirect 725

config media-stream multicast-direct 726

config media-stream message 727

config media-stream add 729

config media-stream admit 731

config media-stream deny 732

config media-stream delete 733

config wlan media-stream 734

Cisco Wireless LAN Controller Command Reference, Release 8.0xx OL-31334-01

Contents

P A R T I V Security Commands 735


show Commands 738

show 802.11 739

show aaa auth 741

show acl 742

show acl detailed 744

show acl summary 745

show advanced eap 746

show client detail 747

show database summary 751

show exclusionlist 752

show ike 753

show IPsec 754

show ipv6 acl 756

show ipv6 summary 757

show l2tp 758

show ldap 759

show ldap statistics 760

show ldap summary 761

show local-auth certificates 762

show local-auth config 763

show local-auth statistics 765

show nac statistics 767

show nac summary 768

show netuser 769

show netuser guest-roles 770

show network 771


show ntp-keys 774

show policy 775

show profiling policy summary 777

show radius acct detailed 779

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxi

Contents

show radius acct statistics 780

show radius auth detailed 781

show radius auth statistics 782

show radius avp-list 783

show radius summary 784

show rules 785

show switchconfig 786

show rogue adhoc custom summary 787

show rogue adhoc detailed 788

show rogue adhoc friendly summary 790

show rogue adhoc malicious summary 791

show rogue adhoc unclassified summary 792

show rogue adhoc summary 793

show rogue ap custom summary 794

show rogue ap clients 796

show rogue ap detailed 798

show rogue ap summary 800

show rogue ap friendly summary 803

show rogue ap malicious summary 805

show rogue ap unclassified summary 807

show rogue auto-contain 808

show rogue client detailed 809

show rogue client summary 810

show rogue ignore-list 811

show rogue rule detailed 813

show rogue rule summary 815

show tacacs acct statistics 816

show tacacs athr statistics 817

show tacacs auth statistics 818

show tacacs summary 819

show wps ap-authentication summary 820

show wps cids-sensor 821

show wps mfp 822

show wps shun-list 824

show wps signature detail 825

Cisco Wireless LAN Controller Command Reference, Release 8.0xxii OL-31334-01

Contents

show wps signature events 826

show wps signature summary 828

show wps summary 830

show wps wips statistics 832

show wps wips summary 833

config Commands 834

config 802.11b preamble 835

config aaa auth 836

config aaa auth mgmt 837

config acl apply 838

config acl counter 839

config acl create 840

config acl cpu 841

config acl delete 842

config acl layer2 843

config acl rule 845

config acl url-domain 847

config auth-list add 848

config auth-list ap-policy 849

config auth-list delete 850

config advanced eap 851

config advanced timers auth-timeout 853

config advanced timers eap-timeout 854

config advanced timers eap-identity-request-delay 855

config cts sxp 856

config database size 858

config dhcp opt-82 format 859

config dhcp opt-82 remote-id 860

config exclusionlist 862

config ldap 863

config local-auth active-timeout 866

config local-auth eap-profile 867

config local-auth method fast 870

config local-auth user-credentials 872

config ipv6 acl 873

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxiii

Contents

config netuser add 876

config netuser delete 878

config netuser description 879


config network web-auth captive-bypass 881

config network web-auth port 882

config network web-auth proxy-redirect 883

config network web-auth secureweb 884

config network webmode 885

config network web-auth 886

config policy 887

config radius acct 890

config radius acct ipsec authentication 893

config radius acct ipsec disable 894

config radius acct ipsec enable 895

config radius acct ipsec encryption 896

config radius acct ipsec ike 897

config radius acct mac-delimiter 898

config radius acct network 899

config radius acct realm 900

config radius acct retransmit-timeout 901

config radius auth 902

config radius auth IPsec authentication 904

config radius auth ipsec disable 905

config radius auth ipsec encryption 906

config radius auth ipsec ike 907

config radius auth keywrap 909

config radius auth mac-delimiter 910

config radius auth management 911

config radius auth mgmt-retransmit-timeout 912

config radius auth network 913

config radius auth realm 914


config radius auth rfc3576 916


Cisco Wireless LAN Controller Command Reference, Release 8.0xxiv OL-31334-01

Contents

config radius aggressive-failover disabled 918

config radius backward compatibility 919

config radius callStationIdCase 920

config radius callStationIdType 921

config radius dns 923

config radius fallback-test 925

config rogue adhoc 927

config rogue ap classify 930

config rogue ap friendly 932

config rogue ap rldp 934

config rogue ap ssid 936

config rogue ap timeout 938

config rogue auto-contain level 940

config rogue ap valid-client 942

config rogue client 944

config rogue containment 946

config rogue detection 947

config rogue detection client-threshold 949

config rogue detection min-rssi 950

config rogue detection monitor-ap 951

config rogue detection report-interval 953

config rogue detection security-level 954

config rogue detection transient-rogue-interval 955

config rogue rule 956

config rogue rule condition ap 960

config switchconfig fips-prerequisite 962

config switchconfig ucapl 963

config switchconfig wlancc 964

config tacacs acct 965

config tacacs athr 967

config tacacs athr mgmt-server-timeout 969

config tacacs auth 970

config tacacs auth mgmt-server-timeout 972

config tacacs dns 973

config wlan radius_server realm 975

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxv

Contents

config wlan security eap-params 976

config wps ap-authentication 978

config wps auto-immune 979

config wps cids-sensor 980

config wps client-exclusion 982

config wps mfp 984

config wps shun-list re-sync 985

config wps signature 986

config wps signature frequency 988

config wps signature interval 989

config wps signature mac-frequency 990

config wps signature quiet-time 991

config wps signature reset 992

clear Commands 993

clear acl counters 994

clear radius acct statistics 995

clear tacacs auth statistics 996

clear stats local-auth 997

clear stats radius 998

clear stats tacacs 1000

debug Commands 1001

debug 11w-pmf 1002

debug aaa 1003

debug aaa events 1004

debug aaa local-auth 1005

debug bcast 1007

debug cckm 1008

debug client 1009

debug cts sxp 1010

debug dns 1011

debug dot1x 1012

debug dtls 1013

debug nac 1014

debug policy 1015

debug pm 1016

Cisco Wireless LAN Controller Command Reference, Release 8.0xxvi OL-31334-01

Contents

debug web-auth 1018

debug wips 1019

debug wps sig 1020

debug wps mfp 1021

P A R T V WLAN Commands 1023


show Commands 1025

show advanced hotspot 1026

show avc statistics wlan 1027

show call-control ap 1029

show call-control client 1033

show client ccx client-capability 1034

show client ccx frame-data 1035

show client ccx last-response-status 1036

show client ccx last-test-status 1037

show client ccx log-response 1038

show client ccx manufacturer-info 1040

show client ccx operating-parameters 1041

show client ccx profiles 1042

show client ccx results 1044

show client ccx rm 1045

show client ccx stats-report 1047

show client detail 1048

show client location-calibration summary 1050

show client probing 1051

show client roam-history 1052

show client summary 1053

show client wlan 1055

show dhcp 1056

show dhcp proxy 1057

show dhcp timeout 1058

show guest-lan 1059

show ipv6 acl 1060

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxvii

Contents

show ipv6 acl detailed 1061

show ipv6 acl cpu 1062

show ipv6 neighbor-binding 1063

show ipv6 ra-guard 1067

show ipv6 route summary 1068

show ipv6 summary 1069

show macfilter 1070


show pmk-cache 1073

show remote-lan 1074

show rf-profile summary 1076

show rf-profile details 1077

show wlan 1078

config Commands 1082

config 802.11 dtpc 1083

config advanced hotspot 1084

config auto-configure voice 1086

config client ccx clear-reports 1089

config client ccx clear-results 1090

config client ccx default-gw-ping 1091

config client ccx dhcp-test 1092

config client ccx dns-ping 1093

config client ccx dns-resolve 1094

config client ccx get-client-capability 1095

config client ccx get-manufacturer-info 1096

config client ccx get-operating-parameters 1097

config client ccx get-profiles 1098

config client ccx log-request 1099

config client ccx send-message 1101

config client ccx stats-request 1104

config client ccx test-abort 1105

config client ccx test-association 1106

config client ccx test-dot1x 1107

config client ccx test-profile 1108

config client deauthenticate 1109

Cisco Wireless LAN Controller Command Reference, Release 8.0xxviii OL-31334-01

Contents

config ipv6 disable 1110

config ipv6 enable 1111

config ipv6 acl 1112

config ipv6 capwap 1115

config ipv6 interface 1117

config ipv6 multicast 1119

config ipv6 neighbor-binding 1120

config ipv6 na-mcast-fwd 1122

config ipv6 ns-mcast-fwd 1123

config ipv6 ra-guard 1124

config ipv6 route 1125

config remote-lan 1126

config remote-lan aaa-override 1127

config remote-lan acl 1128

config remote-lan create 1129

config remote-lan custom-web 1130

config remote-lan delete 1132

config remote-lan dhcp_server 1133

config remote-lan exclusionlist 1134

config remote-lan interface 1135

config remote-lan ldap 1136

config remote-lan mac-filtering 1137

config remote-lan max-associated-clients 1138

config remote-lan radius_server 1139

config remote-lan security 1141

config remote-lan session-timeout 1142

config remote-lan webauth-exclude 1143

config rf-profile band-select 1144

config rf-profile channel 1146

config rf-profile client-trap-threshold 1147

config rf-profile create 1148

config rf-profile coverage 1149

config rf-profile data-rates 1151

config rf-profile delete 1152

config rf-profile description 1153

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxix

Contents

config rf-profile load-balancing 1154

config rf-profile max-clients 1155

config rf-profile multicast data-rate 1156

config rf-profile out-of-box 1157

config rf-profile rx-sop threshold 1158

config rf-profile trap-threshold 1159

config rf-profile tx-power-control-thresh-v1 1160

config rf-profile tx-power-control-thresh-v2 1161

config rf-profile tx-power-max 1162

config rf-profile tx-power-min 1163

config watchlist add 1164

config watchlist delete 1165

config watchlist disable 1166

config watchlist enable 1167

config wlan 1168

config wlan 7920-support 1170

config wlan 802.11e 1171

config wlan aaa-override 1172

config wlan acl 1173

config wlan assisted-roaming 1174

config wlan avc 1175

config wlan apgroup 1176

config wlan apgroup qinq 1183

config wlan band-select allow 1185

config wlan broadcast-ssid 1186

config wlan call-snoop 1187

config wlan chd 1188

config wlan ccx aironet-ie 1189

config wlan channel-scan defer-priority 1190

config wlan channel-scan defer-time 1191

config wlan custom-web 1192

config wlan dhcp_server 1194

config wlan diag-channel 1195

config wlan dtim 1196

config wlan exclusionlist 1197

Cisco Wireless LAN Controller Command Reference, Release 8.0xxx OL-31334-01

Contents

config wlan flow 1198

config wlan flexconnect ap-auth 1199

config wlan flexconnect central-assoc 1200

config wlan flexconnect learn-ipaddr 1201

config wlan flexconnect local-switching 1202

config wlan flexconnect vlan-central-switching 1204

config wlan hotspot 1205

config wlan hotspot dot11u 1206

config wlan hotspot dot11u 3gpp-info 1207

config wlan hotspot dot11u auth-type 1208

config wlan hotspot dot11u disable 1209

config wlan hotspot dot11u domain 1210

config wlan hotspot dot11u enable 1211

config wlan hotspot dot11u hessid 1212

config wlan hotspot dot11u ipaddr-type 1213

config wlan hotspot dot11u nai-realm 1214

config wlan hotspot dot11u network-type 1217

config wlan hotspot dot11u roam-oi 1218

config wlan hotspot hs2 1219

config wlan hotspot msap 1222

config wlan interface 1223

config wlan ipv6 acl 1224

config wlan kts-cac 1225

config wlan layer2 acl 1226

config wlan learn-ipaddr-cswlan 1227

config wlan ldap 1228

config wlan load-balance 1229

config wlan mac-filtering 1230

config wlan max-associated-clients 1231

config wlan max-radio-clients 1232

config wlan mdns 1233

config wlan media-stream 1234

config wlan mfp 1235

config wlan mobility anchor 1236

config wlan mobility foreign-map 1237

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxxi

Contents

config wlan multicast buffer 1238

config wlan multicast interface 1239

config wlan nac 1240

config wlan override-rate-limit 1241

config wlan passive-client 1243

config wlan peer-blocking 1244

config wlan pmipv6 default-realm 1245

config wlan pmipv6 mobility-type 1246

config wlan pmipv6 profile_name 1247

config wlan policy 1248

config wlan profile 1249

config wlan profiling 1250

config wlan qos 1252

config wlan radio 1253

config wlan radius_server acct 1254

config wlan radius_server acct interim-update 1255

config wlan radius_server auth 1256

config wlan radius_server acct interim-update 1257

config wlan radius_server overwrite-interface 1258

config wlan roamed-voice-client re-anchor 1259

config wlan security 802.1X 1260

config wlan security ckip 1262

config wlan security cond-web-redir 1264

config wlan security eap-passthru 1265

config wlan security ft 1266

config wlan security ft over-the-ds 1267

config wlan security IPsec disable 1268

config wlan security IPsec enable 1269

config wlan security IPsec authentication 1270

config wlan security IPsec encryption 1271

config wlan security IPsec config 1272

config wlan security IPsec ike authentication 1273

config wlan security IPsec ike dh-group 1274

config wlan security IPsec ike lifetime 1275

config wlan security IPsec ike phase1 1276

Cisco Wireless LAN Controller Command Reference, Release 8.0xxxii OL-31334-01

Contents

config wlan security IPsec ike contivity 1277

config wlan security passthru 1278

config wlan security pmf 1279

config wlan security splash-page-web-redir 1281

config wlan security static-wep-key authentication 1282

config wlan security static-wep-key disable 1283

config wlan security static-wep-key enable 1284

config wlan security static-wep-key encryption 1285

config wlan security tkip 1286

config wlan security web-auth 1287

config wlan security web-passthrough acl 1289

config wlan security web-passthrough disable 1290

config wlan security web-passthrough email-input 1291

config wlan security web-passthrough enable 1292

config wlan security wpa akm 802.1x 1293

config wlan security wpa akm cckm 1294

config wlan security wpa akm ft 1295

config wlan security wpa akm pmf 1296

config wlan security wpa akm psk 1297

config wlan security wpa disable 1298

config wlan security wpa enable 1299

config wlan security wpa ciphers 1300

config wlan security wpa gtk-random 1301

config wlan security wpa wpa1 disable 1302

config wlan security wpa wpa1 enable 1303

config wlan security wpa wpa2 disable 1304

config wlan security wpa wpa2 enable 1305

config wlan security wpa wpa2 cache 1306

config wlan security wpa wpa2 cache sticky 1307

config wlan security wpa wpa2 ciphers 1308

config wlan sip-cac disassoc-client 1309

config wlan sip-cac send-486busy 1310

config wlan ssid 1311

config wlan static-ip tunneling 1312

config wlan session-timeout 1313

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxxiii

Contents

config wlan uapsd compliant client enable 1314

config wlan uapsd compliant-client disable 1315

config wlan user-idle-threshold 1316

config wlan usertimeout 1317

config wlan webauth-exclude 1318

config wlan wmm 1319

clear Commands 1319

clear ipv6 neighbor-binding 1320

debug Commands 1320

debug 11w-pmf 1322

debug call-control 1323

debug ccxdiag 1324

debug ccxrm 1325

debug ccxs69 1326

debug client 1327

debug dhcp 1328

debug dhcp service-port 1329

debug ft 1330

debug hotspot 1331

debug ipv6 1332

debug profiling 1334

debug wcp 1335

test Commands 1335

test pmk-cache delete 1336

P A R T V I Lightweight Access Point Commands 1337


show Commands 1339

show advanced backup-controller 1340

show advanced max-1x-sessions 1341

show advanced probe 1342

show advanced rate 1343

show advanced timers 1344

show ap auto-rf 1345

Cisco Wireless LAN Controller Command Reference, Release 8.0xxxiv OL-31334-01

Contents

show ap ccx rm 1347

show ap cdp 1348

show ap channel 1350

show ap config 1351

show ap config general 1357

show ap config global 1359

show ap core-dump 1360

show ap crash-file 1361

show ap data-plane 1362

show ap dtls-cipher-suite 1363

show ap ethernet tag 1364

show ap eventlog 1365

show ap image 1366

show ap inventory 1367

show ap join stats detailed 1368

show ap join stats summary 1369

show ap join stats summary all 1370

show ap led-state 1371

show ap led-flash 1372

show ap link-encryption 1373

show ap max-count summary 1374

show ap monitor-mode summary 1375

show ap packet-dump status 1376

show ap prefer-mode stats 1377

show ap retransmit 1378

show ap stats 1379

show ap summary 1382

show ap tcp-mss-adjust 1383

show ap wlan 1384

show auth-list 1385

show client ap 1386

show boot 1387

show call-control ap 1388

show country 1392

show country channels 1393

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxxv

Contents

show country supported 1394

show dtls connections 1396

show known ap 1397

show ipv6 ra-guard 1398

show msglog 1399


show redundancy summary 1402

show redundancy latency 1403

show redundancy interfaces 1404

show redundancy mobilitymac 1405

show redundancy peer-route summary 1406

show redundancy statistics 1407

show redundancy timers 1408

show watchlist 1409

capwap ap Commands 1410

capwap ap controller ip address 1411

capwap ap dot1x 1412

capwap ap hostname 1413

capwap ap ip address 1414

capwap ap ip default-gateway 1415

capwap ap log-server 1416

capwap ap mode 1417

capwap ap primary-base 1418

capwap ap primed-timer 1419

capwap ap secondary-base 1420

capwap ap tertiary-base 1421

lwapp ap controller ip address 1422


config 802.11-a antenna extAntGain 1423

config 802.11-a channel ap 1424

config 802.11-a txpower ap 1425

config 802.11 antenna diversity 1426

config 802.11 antenna extAntGain 1427

config 802.11 antenna mode 1428

config 802.11 antenna selection 1429

Cisco Wireless LAN Controller Command Reference, Release 8.0xxxvi OL-31334-01

Contents

config 802.11 beamforming 1430

config 802.11 disable 1432

config advanced 802.11 profile clients 1433

config advanced 802.11 profile customize 1434

config advanced 802.11 profile foreign 1435

config advanced 802.11 profile noise 1436

config advanced 802.11 profile throughput 1437

config advanced 802.11 profile utilization 1438

config advanced backup-controller primary 1439

config advanced backup-controller secondary 1440

config advanced client-handoff 1441

config advanced dot11-padding 1442

config advanced assoc-limit 1443

config advanced max-1x-sessions 1444

config advanced rate 1445

config advanced probe backoff 1446

config advanced probe filter 1447

config advanced probe limit 1448

config advanced timers 1449

config ap 1452

config ap autoconvert 1453

config ap bhrate 1454

config ap bridgegroupname 1455

config ap bridging 1456

config ap cdp 1457

config ap core-dump 1459

config ap crash-file clear-all 1460

config ap crash-file delete 1461

config ap crash-file get-crash-file 1462

config ap crash-file get-radio-core-dump 1463

config ap 802.1Xuser 1464

config ap 802.1Xuser delete 1465

config ap 802.1Xuser disable 1466

config ap dtls-cipher-suite 1467

config ap ethernet duplex 1468

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxxvii

Contents

config ap ethernet tag 1469

config ap group-name 1470

config ap hotspot 1471

config ap image predownload 1478

config ap image swap 1479

config ap led-state 1480

config ap link-encryption 1482

config ap link-latency 1483

config ap location 1484

config ap logging syslog level 1485

config ap max-count 1487

config ap mgmtuser add 1488

config ap mgmtuser delete 1490

config ap mode 1491

config ap monitor-mode 1493

config ap name 1494

config ap packet-dump 1495

config ap port 1498

config ap power injector 1499

config ap power pre-standard 1500

config ap preferred-mode 1501

config ap primary-base 1502

config ap priority 1504

config ap reporting-period 1505

config ap reset 1506

config ap retransmit interval 1507

config ap retransmit count 1508

config ap role 1509

config ap rst-button 1510

config ap secondary-base 1511

config ap sniff 1513

config ap ssh 1515

config ap static-ip 1516

config ap stats-timer 1518

config ap syslog host global 1519

Cisco Wireless LAN Controller Command Reference, Release 8.0xxxviii OL-31334-01

Contents

config ap syslog host specific 1520

config ap tcp-mss-adjust 1521

config ap telnet 1523

config ap tertiary-base 1524

config ap tftp-downgrade 1526

config ap username 1527

config ap venue 1528

config ap wlan 1532

config country 1533

config ipv6 ra-guard 1534

config known ap 1535

config network allow-old-bridge-aps 1536

config network ap-discovery 1537

config network ap-fallback 1538

config network ap-priority 1539

config network apple-talk 1540


config network master-base 1542

config network oeap-600 dual-rlan-ports 1543

config network oeap-600 local-network 1544

config network otap-mode 1545

config network zero-config 1546

config redundancy interface address peer-service-port 1547

config redundancy mobilitymac 1548

config redundancy mode 1549

config redundancy peer-route 1550

config redundancy timer keep-alive-timer 1551

config redundancy timer peer-search-timer 1552

config redundancy unit 1553

redundancy force-switchover 1554

config slot 1555

config wgb vlan 1556

clear Commands 1556

clear ap config 1557

clear ap eventlog 1558

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xxxix

Contents

clear ap join stats 1559

clear ap tsm 1560

clear lwapp private-config 1561

debug Commands 1561

debug ap 1562

debug ap enable 1563

debug ap packet-dump 1564

debug ap show stats 1565

debug ap show stats video 1567

debug capwap 1568

debug group 1569

debug lwapp console cli 1570

debug rfac 1571

debug rmgr 1572

debug rsyncmgr 1573

debug service ap-monitor 1574

transfer upload peer-start 1575

Resetting the System Reboot Time 1575

reset system at 1576

reset system in 1577

reset system cancel 1578

reset system notify-time 1579

reset peer-system 1580

test Commands 1580

test ap 1581

test capwap 1582

P A R T V I I Mesh Access Point Commands 1585


show mesh Commands 1588

show mesh ap 1589

show mesh astools stats 1590

show mesh backhaul 1591

show mesh cac 1592

Cisco Wireless LAN Controller Command Reference, Release 8.0xl OL-31334-01

Contents

show mesh client-access 1594

show mesh config 1595

show mesh convergence 1596

show mesh env 1597

show mesh neigh 1598

show mesh path 1601

show mesh per-stats 1602

show mesh public-safety 1603

show mesh queue-stats 1604

show mesh security-stats 1605

show mesh stats 1607

config mesh Commands 1608

config mesh astools 1609

config mesh backhaul rate-adapt 1610

config mesh backhaul slot 1611

config mesh battery-state 1612

config mesh alarm 1613

config mesh client-access 1615

config mesh convergence 1617

config mesh ethernet-bridging vlan-transparent 1618

config mesh full-sector-dfs 1619

config mesh linkdata 1620

config mesh linktest 1623

config mesh lsc 1626

config mesh multicast 1627

config mesh parent preferred 1629

config mesh public-safety 1630

config mesh radius-server 1631

config mesh range 1632

config mesh secondary-backhaul 1633

config mesh security 1634

config mesh slot-bias 1635

config lsc mesh 1636

debug Commands 1636

debug mesh security 1637

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xli

Contents

debug mesh convergence 1638

P A R T V I I I Radio Resource Management Commands 1639


show Commands 1641

show 802.11 extended 1642

show advanced 802.11 channel 1643

show advanced 802.11 coverage 1644

show advanced 802.11 group 1645

show advanced 802.11 l2roam 1646

show advanced 802.11 logging 1647

show advanced 802.11 monitor 1648

show advanced 802.11 optimized roaming 1649

show advanced 802.11 profile 1650

show advanced 802.11 receiver 1651

show advanced 802.11 summary 1652

show advanced 802.11 txpower 1653

show advanced dot11-padding 1654

show client ccx rm 1655

show client location-calibration summary 1657

show wps ap-authentication summary 1658


config 802.11-a 1659

config 802.11-a antenna extAntGain 1660

config 802.11-a channel ap 1661

config 802.11-a txpower ap 1662

config 802.11-abgn 1663

config 802.11a 11acsupport 1664

config 802.11b 11gSupport 1665

config 802.11b preamble 1666

config 802.11h channelswitch 1667

config 802.11h powerconstraint 1668

config 802.11h setchannel 1669

config 802.11 11nsupport 1670

Cisco Wireless LAN Controller Command Reference, Release 8.0xlii OL-31334-01

Contents

config 802.11 11nsupport a-mpdu tx priority 1671

config 802.11 11nsupport a-mpdu tx scheduler 1673

config 802.11 11nsupport antenna 1674

config 802.11 11nsupport guard-interval 1675

config 802.11 11nsupport mcs tx 1676

config 802.11 11nsupport rifs 1678

config 802.11 antenna diversity 1679

config 802.11 antenna extAntGain 1680

config 802.11 antenna mode 1681

config 802.11 antenna selection 1682

config 802.11 channel 1683

config 802.11 channel ap 1685

config 802.11 chan_width 1686

config 802.11 rx-sop threshold 1688

config 802.11 txPower 1690

config advanced 802.11 7920VSIEConfig 1692

config advanced 802.11 channel add 1693

config advanced 802.11 channel cleanair-event 1694

config advanced 802.11 channel dca anchor-time 1695

config advanced 802.11 channel dca chan-width-11n 1696

config advanced 802.11 channel dca interval 1698

config advanced 802.11 channel dca min-metric 1699

config advanced 802.11 channel dca sensitivity 1700

config advanced 802.11 channel foreign 1702

config advanced 802.11 channel load 1703

config advanced 802.11 channel noise 1704

config advanced 802.11 channel outdoor-ap-dca 1705

config advanced 802.11 channel pda-prop 1706

config advanced 802.11 channel update 1707

config advanced 802.11 coverage 1708

config advanced 802.11 coverage exception global 1710

config advanced 802.11 coverage fail-rate 1712

config advanced 802.11 coverage level global 1714

config advanced 802.11 coverage packet-count 1716

config advanced 802.11 coverage rssi-threshold 1718

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xliii

Contents


config advanced 802.11 factory 1722

config advanced 802.11 group-member 1723

config advanced 802.11 group-mode 1724

config advanced 802.11 logging channel 1725

config advanced 802.11 logging coverage 1726

config advanced 802.11 logging foreign 1727

config advanced 802.11 logging load 1728

config advanced 802.11 logging noise 1729

config advanced 802.11 logging performance 1730

config advanced 802.11 logging txpower 1731

config advanced 802.11 monitor channel-list 1732

config advanced 802.11 monitor coverage 1733

config advanced 802.11 monitor load 1734

config advanced 802.11 monitor mode 1735

config advanced 802.11 monitor ndp-type 1736

config advanced 802.11 monitor noise 1737

config advanced 802.11 monitor signal 1738

config advanced 802.11 optimized roaming 1739

config advanced 802.11 profile foreign 1741

config advanced 802.11 profile noise 1742

config advanced 802.11 profile throughput 1743

config advanced 802.11 profile utilization 1744

config advanced 802.11 receiver 1745

config advanced 802.11 tpc-version 1746

config advanced 802.11 tpcv1-thresh 1747

config advanced 802.11 tpcv2-intense 1748

config advanced 802.11 tpcv2-per-chan 1749

config advanced 802.11 tpcv2-thresh 1750

config advanced 802.11 txpower-update 1751

config advanced dot11-padding 1752

config client location-calibration 1753

config network rf-network-name 1754

Configuring 802.11k and Assisted Roaming 1754

config assisted-roaming 1755

Cisco Wireless LAN Controller Command Reference, Release 8.0xliv OL-31334-01

Contents

config wlan assisted-roaming 1756

show assisted-roaming 1757

debug 11k 1758

debug Commands 1758

debug airewave-director 1760

debug dot11 1762

P A R T I X CleanAir Commands 1765

C H A P T E R 1 0 CLI Commands 1767

show Commands 1767

show 802.11 cleanair 1768

show 802.11 cleanair air-quality summary 1770

show 802.11 cleanair air-quality worst 1771

show 802.11 cleanair device ap 1772

show 802.11 cleanair device type 1773

show advanced 802.11 channel 1775

show ap auto-rf 1776


config 802.11 cleanair 1778

config 802.11 cleanair device 1780

config 802.11 cleanair alarm 1782

config advanced 802.11 channel cleanair-event 1784

config advanced 802.11 channel pda-prop 1785

config advanced 802.11 channel update 1786

test Commands 1786

test cleanair show 1787

P A R T X FlexConnect Commands 1789


show Commands 1791

show capwap reap association 1792

show capwap reap status 1793

show flexconnect acl detailed 1794

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xlv

Contents

show flexconnect acl summary 1795

show flexconnect group detail 1796

show flexconnect group summary 1797

show flexconnect office-extend 1798


config ap autoconvert 1799

config ap flexconnect bridge 1800

config ap flexconnect central-dhcp 1801

config ap flexconnect local-split 1803

config ap flexconnect policy 1804

config ap flexconnect radius auth set 1805

config ap flexconnect vlan 1806

config ap flexconnect vlan add 1807

config ap flexconnect vlan native 1808

config ap flexconnect vlan wlan 1809

config ap flexconnect web-auth 1810

config ap flexconnect web-policy acl 1811

config ap flexconnect wlan 1812

config flexconnect acl 1813

config flexconnect acl rule 1814

config flexconnect arp-cache 1816

config flexconnect fallback-radio-shut 1817

config flexconnect group 1818

config flexconnect group vlan 1824

config flexconnect group flexgroup dhcp overridden-interface enable 1825

config flexconnect group web-auth 1826

config flexconnect group web-policy 1827

config flexconnect join min-latency 1828

config flexconnect office-extend 1829

config wlan flexconnect ap-auth 1831

config wlan flexconnect learn-ipaddr 1832

config wlan flexconnect local-switching 1833

config wlan flexconnect vlan-central-switching 1835

Integrated Management Module Commands in Cisco Flex 7500 Series Controllers 1835

imm address 1836

Cisco Wireless LAN Controller Command Reference, Release 8.0xlvi OL-31334-01

Contents

imm dhcp 1837

imm mode 1838

imm restart 1839

imm summary 1840

imm username 1841

debug Commands 1841

debug capwap reap 1842

debug dot11 mgmt interface 1843

debug dot11 mgmt msg 1844

debug dot11 mgmt ssid 1845

debug dot11 mgmt state-machine 1846

debug dot11 mgmt station 1847

debug flexconnect aaa 1848

debug flexconnect acl 1849

debug flexconnect cckm 1850

debug flexconnect group 1851

debug pem 1852

P A R T X I Mobility Commands 1853


show Commands 1855

show advanced client-handoff 1856

show l2tp 1857

show logging 1858

show mobility anchor 1860

show mobility ap-list 1861

show mobility foreign-map 1862

show mobility group member 1863

show mobility oracle 1864

show mobility statistics 1866

show mobility summary 1867

show pmipv6 domain 1869

show pmipv6 mag bindings 1870

show pmipv6 mag globals 1871

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xlvii

Contents

show pmipv6 mag stats 1872

show pmipv6 profile summary 1874


config mobility dscp 1875

config mobility group anchor 1876

config mobility group domain 1877

config mobility group keepalive count 1878

config mobility group keepalive interval 1879

config mobility group member 1880

config mobility group multicast-address 1882

config mobility multicast-mode 1883

config mobility new-architecture 1884

config mobility oracle 1885

config mobility switchPeerGroup 1886

config mobility secure-mode 1887

config mobility statistics reset 1888

config pmipv6 domain 1889

config pmipv6 add profile 1890

config pmipv6 delete 1892

config pmipv6 mag apn 1893

config pmipv6 mag binding init-retx-time 1894

config pmipv6 mag binding lifetime 1895

config pmipv6 mag binding max-retx-time 1896

config pmipv6 mag binding maximum 1897

config pmipv6 mag binding refresh-time 1898

config pmipv6 mag bri delay 1899

config pmipv6 mag bri retries 1900

config pmipv6 mag lma 1901

config pmipv6 mag replay-protection 1902

config wlan mobility anchor 1903

config wlan mobility foreign-map 1904

config wlan pmipv6 default-realm 1905

config wlan pmipv6 mobility-type 1906

config wlan pmipv6 profile_name 1907

clear, debug and ping Commands 1907

Cisco Wireless LAN Controller Command Reference, Release 8.0xlviii OL-31334-01

Contents

clear stats mobility 1908

cping 1909

debug dot11 1910

debug client 1912

debug fmchs 1913

debug mobility 1914

eping 1916

mping 1917

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 xlix

Contents

Cisco Wireless LAN Controller Command Reference, Release 8.0l OL-31334-01

Contents

Preface

This preface describes the audience, organization, and conventions of the Cisco Wireless LAN ControllerCommand Reference Guide. It also provides information on how to obtain other documentation. This chapterincludes the following sections:

Audience, page li

Document Organization, page li

Document Conventions, page li

Related Documentation, page liv

Obtaining Documentation and Submitting a Service Request, page liv

AudienceThis publication is for experienced network administrators who configure and maintain Cisco wireless LANcontrollers and Cisco lightweight access points.

Document OrganizationThis document is organized into the following chapters:

DescriptionChapter

Describes how to use the command-line interface (CLI) on the controller.Overview

Provides detailed information about the CLI commands for the controller.CLI Commands

Document ConventionsThis document uses the following conventions:

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 li

IndicationConvention

Commands and keywords and user-entered text appear in bold font.bold font

Document titles, new or emphasized terms, and arguments for which you supplyvalues are in italic font.

italic font

Elements in square brackets are optional.[ ]

Required alternative keywords are grouped in braces and separated by verticalbars.

{x | y | z }

Optional alternative keywords are grouped in brackets and separated by verticalbars.

[ x | y | z ]

A nonquoted set of characters. Do not use quotation marks around the string orthe string will include the quotation marks.

string

Terminal sessions and information the system displays appear in courier font.courier font

Nonprinting characters such as passwords are in angle brackets.

Default responses to system prompts are in square brackets.[]

An exclamation point (!) or a pound sign (#) at the beginning of a line of codeindicates a comment line.

!, #

Means reader take note. Notes contain helpful suggestions or references to material not covered in themanual.

Note

Means the following information will help you solve a problem.Tip

Means reader be careful. In this situation, you might perform an action that could result in equipmentdamage or loss of data.

Caution

This warning symbol means danger. You are in a situation that could cause bodily injury. Before youwork on any equipment, be aware of the hazards involved with electrical circuitry and be familiar withstandard practices for preventing accidents. (To see translations of the warnings that appear in thispublication, refer to the appendix "Translated Safety Warnings.")

Warning

Cisco Wireless LAN Controller Command Reference, Release 8.0lii OL-31334-01

PrefaceDocument Conventions

DescriptionWarning Title

Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie dielichamelijk letsel kan veroorzaken. Voordat u aan enige apparatuur gaat werken,dient u zich bewust te zijn van de bij elektrische schakelingen betrokken risico'sen dient u op de hoogte te zijn van standaard maatregelen om ongelukken tevoorkomen. (Voor vertalingen van de waarschuwingen die in deze publicatieverschijnen, kunt u het aanhangsel "Translated Safety Warnings" (Vertalingenvan veiligheidsvoorschriften) raadplegen.)

Waarschuwing

Tm varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaaruumiinvammaan. Ennen kuin tyskentelet minkn laitteiston parissa, ota selvshkkytkentihin liittyvist vaaroista ja tavanomaisista onnettomuuksienehkisykeinoista. (Tss julkaisussa esiintyvien varoitusten knnkset lydtliitteest "Translated Safety Warnings" (knnetyt turvallisuutta koskevatvaroitukset).)

Varoitus

Ce symbole d'avertissement indique un danger. Vous vous trouvez dans unesituation pouvant entraner des blessures. Avant d'accder cet quipement,soyez conscient des dangers poss par les circuits lectriques et familiarisez-vousavec les procdures courantes de prvention des accidents. Pour obtenir lestraductions des mises en garde figurant dans cette publication, veuillez consulterl'annexe intitule Translated SafetyWarnings (Traduction des avis de scurit).

Attention

Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, diezu einer Krperverletzung fhren knnte. Bevor Siemit der Arbeit an irgendeinemGert beginnen, seien Sie sich der mit elektrischen Stromkreisen verbundenenGefahren und der Standardpraktiken zur Vermeidung von Unfllen bewut.(bersetzungen der in dieser Verffentlichung enthaltenenWarnhinweise findenSie im Anhang mit dem Titel "Translated Safety Warnings" (bersetzung derWarnhinweise).)

Warnung

Questo simbolo di avvertenza indica un pericolo. Si in una situazione che pucausare infortuni. Prima di lavorare su qualsiasi apparecchiatura, occorreconoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratichestandard per la prevenzione di incidenti. La traduzione delle avvertenze riportatein questa pubblicazione si trova nell'appendice, "Translated Safety Warnings"(Traduzione delle avvertenze di sicurezza).

Avvertenza

Dette varselsymbolet betyr fare. Du befinner deg i en situasjon som kan fre tilpersonskade. Fr du utfrer arbeid p utstyr, m du vre oppmerksom p defaremomentene som elektriske kretser innebrer, samt gjre deg kjent med vanligpraksis nr det gjelder unng ulykker. (Hvis du vil se oversettelser av deadvarslene som finnes i denne publikasjonen, kan du se i vedlegget "TranslatedSafety Warnings" [Oversatte sikkerhetsadvarsler].)

Advarsel

Este smbolo de aviso indica perigo. Encontra-se numa situao que lhe podercausar danos fisicos. Antes de comear a trabalhar com qualquer equipamento,familiarize-se com os perigos relacionados com circuitos elctricos, e comquaisquer prticas comuns que possam prevenir possveis acidentes. (Para veras tradues dos avisos que constam desta publicao, consulte o apndice"Translated Safety Warnings" - "Tradues dos Avisos de Segurana").

Aviso

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 liii

PrefaceDocument Conventions

DescriptionWarning Title

Este smbolo de aviso significa peligro. Existe riesgo para su integridad fsica.Antes de manipular cualquier equipo, considerar los riesgos que entraa lacorriente elctrica y familiarizarse con los procedimientos estndar de prevencinde accidentes. (Para ver traducciones de las advertencias que aparecen en estapublicacin, consultar el apndice titulado "Translated Safety Warnings.")

Advertencia!

Denna varningssymbol signalerar fara. Du befinner dig i en situation som kanleda till personskada. Innan du utfr arbete p ngon utrustning mste du varamedveten om farorna med elkretsar och knna till vanligt frfarande fr attfrebygga skador. (Se frklaringar av de varningar som frekommer i dennapublikation i appendix "Translated Safety Warnings" [versattaskerhetsvarningar].)

Varning

Related DocumentationThese documents provide complete information about the Cisco Unified Wireless Network solution:

Cisco Wireless LAN Controller Configuration Guide

Cisco Wireless LAN Controller System Message Guide

Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points

Obtaining Documentation and Submitting a Service RequestFor information about obtaining documentation, submitting a service request, and gathering additionalinformation, see the monthlyWhat's New in Cisco Product Documentation, which also lists all new and revisedCisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to theWhat's New in Cisco Product Documentation as an RSS feed and set content to be delivereddirectly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently supportsRSS Version 2.0.

Cisco Wireless LAN Controller Command Reference, Release 8.0liv OL-31334-01

PrefaceRelated Documentation

Using the Command-Line Interface

This chapter contains the following topics:

CLI Command Keyboard Shortcuts, page 1

Using the Interactive Help Feature, page 2

CLI Command Keyboard ShortcutsThe table below lists the CLI keyboard shortcuts to help you enter and edit command lines on the controller.

Table 1: CLI Command Keyboard Shortcuts

Keyboard ShortcutDescriptionAction

Esc IThe word at the cursor to lowercase.Change

Esc uThe word at the cursor to uppercase.

Ctrl-h, Delete, or BackspaceA character to the left of the cursor.Delete

Ctrl-uAll characters from the cursor to the beginning of theline.

Ctrl-kAll characters from the cursor to the end of the line.

Esc dAll characters from the cursor to the end of the word.

Ctrl-w or Esc BackspaceThe word to the left of the cursor.

q, Q, or Ctrl-CExit from MORE output.Display MOREoutput

SpacebarNext additional screen. The default is one screen. Todisplay more than one screen, enter a number beforepressing the Spacebar key.

Cisco Wireless LAN Controller Command Reference, Release 8.0 OL-31334-01 1

Keyboard ShortcutDescriptionAction

EnterNext line. The default is one line. To display more thanone line, enter the number before pressing the Enterkey.

Ctrl-mEnter an Enter or Return key character.

Ctrl-t or TabExpand the command or abbreviation.

Ctrl-b or Left ArrowOne character to the left (back).Move the cursor

Ctrl-f or Right ArrowOne character to the right (forward).

Esc bOne word to the left (back), to the beginning of thecurrent or previous word.

Esc fOne word to the right (forward), to the end of thecurrent or next word.

Ctrl-aTo the beginning of the line.

Ctrl-eTo the end of the line.

Ctrl-l or Ctrl-rRedraw the screen at the prompt.

Ctrl-zReturn to the EXEC mode from any configuration mode

exit commandReturn to the previous mode or exit from the CLI from Exec mode.

Ctrl-tTranspose a character at the cursor with a character to the left of the cursor.

Using the Interactive Help FeatureThe question mark (?) character allows you to get the following type of help about the command at thecommand line. The table below lists the interactive help feature list.

Table 2: Interactive Help Feature List

Command

Provides a brief description of the Help feature in any command mode.help

Lists all commands available for a particular command mode.? at the commandprompt

Provides a list of commands that begin with the character string.partial command?

Cisco Wireless LAN Controller Command Reference, Release 8.02 OL-31334-01

Using the Command-Line InterfaceUsing the Interactive Help Feature

Command

Completes a partial command name.partialcommand

Lists the keywords, arguments, or both associated with a command.command ?

Lists the arguments that are associated with the keyword.command keyword ?

Using the help Command

Before You Begin

To look up keyboard commands, use the help command at the root level.

help

Help may be requested at any point in a command by entering a question mark ?. If nothing matches, thehelp list will be empty and you must back up until entering a ? shows the available options. Two types ofhelp are available:

1 Full help is available when you are ready to enter a command argument (for example show ?) and describeseach possible argument.

2 Partial help is provided when an abbreviated argument is entered and you want to know what argumentsmatch the input (for example show pr?).

Example:

> helpHELP:Special keys:DEL, BS... delete previous characterCtrl-A .... go to beginning of lineCtrl-E .... go to end of lineCtrl-F .... go forward one characterCtrl-B .... go backward one characterCtrl-D .... delete current characterCtrl-U, X. delete to beginning of lineCtrl-K .... delete to end of lineCtrl-W .... delete previous wordCtrl-T .... transpose previous characterCtrl-P .... go to previous line in history bufferCtrl-N .... go to next line in history bufferCtrl-Z .... return to root command promptTab, command-line completionExit .... go to next lower command prompt? .... list choices

Using the ? command

Before You Begin

To display all of the commands in your current level of the command tree, or to display more informationabout a particular command, use the ? command.


Using the Command-Line InterfaceUsing the help Command

command name ?

When you enter a command information request, put a space between the command name and ?.

Examples This command shows you all the commands and levels available from the root level.

> ?clear Clear selected configuration elements.config Configure switch options and settings.debug Manages system debug options.help Helplinktest Perform a link test to a specified MAC address.logout Exit this session. Any unsaved changes are lost.ping Send ICMP echo packets to a specified IP address.reset Reset options.save Save switch configurations.show Display switch options and settings.transfer Transfer a file to or from the switch.

Using the partial? command

Before You Begin

To provide a list of commands that begin with the character string, use the partial command ?.

partial command?

There should be no space between the command and the question mark.

This example shows how to provide a command that begin with the character string ad:

> controller> config>ad?

The command that matches with the string ad is as follows:

advanced

Using the partial command

Before You Begin

To completes a partial command name, use the partial command command.

partial command

There should be no space between the command and .

This example shows how to complete a partial command name that begin with the character string ad:

Controller >config>cert certificate


Using the Command-Line InterfaceUsing the partial? command

Using the command ?

Examples To list the keywords, arguments, or both associated with the command, use the command ?.command-name ?

There should be a space between the command and the question mark.

This example shows how to list the arguments and keyword for the command acl:

Controller >config acl ?

Information similar to the following appears:

apply Applies the ACL to the data path.counter Start/Stop the ACL Counters.create Create a new ACL.delete Delete an ACL.rule Configure rules in the ACL.cpu Configure the CPU Acl Information


Using the Command-Line InterfaceUsing the command ?

command keyword ?To list the arguments that are associated with the keyword, use the command keyword ?:

command keyword ?

There should be space between the keyword and the question mark.

This example shows how to display the arguments associated with the keyword cpu:

Controller >config acl cpu ?

Information similar to the following appears:

none None - Disable the CPU ACL - Name of the CPU ACL


Using the Command-Line Interfacecommand keyword ?

P A R T ISystem Management Commands CLI Commands, page 9

CLI Commands

The Cisco Wireless LAN solution command-line interface (CLI) enables operators to connect an ASCIIconsole to the Cisco wireless LAN controller and configure the controller and its associated access points.

show Commands, page 9

config Commands, page 146

Timeout Commands, page 446

Clearing Configurations, Log files, and Other Actions, page 473

Resetting the System Reboot Time, page 508

Uploading and Downloading Files and Configurations, page 513

Installing and Modifying Licenses on Cisco 5500 Series Controllers, page 539

Right to Use Licensing Commands, page 546

Troubleshooting the Controller Settings, page 554

show CommandsThis section lists the show commands that you can use to display information about the controller settingsand user accounts.


show 802.11 cu-metricsTo display access point channel utilization metrics, use the show 802.11 cu-metrics command.

show 802.11{a | b} cu-metrics cisco_ap

Syntax Description Specifies the 802.11a network.a

Specifies the 802.11b/g network.b

Access point name.cisco_ap

Command Default None

Command History ModificationRelease

This command was introduced in a release earlier than Release 7.6.7.6

Examples The following is a sample output of the show 802.11a cu-metrics command:

(Cisco Controller) > show 802.11a cu-metrics AP1AP Interface Mac: 30:37:a6:c8:8a:50Measurement Duration: 90secTimestamp Thu Jan 27 09:08:48 2011Channel Utilization stats================Picc (50th Percentile)...................... 0Pib (50th Percentile)....................... 76Picc (90th Percentile)...................... 0Pib (90th Percentile)....................... 77

Timestamp Thu Jan 27 09:34:34 2011


show Commands

show advanced 802.11 l2roamTo display 802.11a or 802.11b/g Layer 2 client roaming information, use the show advanced 802.11 l2roamcommand.

show advanced 802.11{a | b} l2roam {rf-param | statistics} mac_address}

Syntax Description Specifies the 802.11a network.a

Specifies the 802.11b/g network.b

Specifies the Layer 2 frequency parameters.rf-param

Specifies the Layer 2 client roaming statistics.statistics

MAC address of the client.mac_address




Examples The following is a sample output of the show advanced 802.11b l2roam rf-param command:

(Cisco Controller) > show advanced 802.11b l2roam rf-param

L2Roam 802.11bg RF Parameters.....................Config Mode.................................. DefaultMinimum RSSI................................. -85Roam Hysteresis.............................. 2Scan Threshold............................... -72Transition time.............................. 5


show Commands

show advanced send-disassoc-on-handoffTo display whether the WLAN controller disassociates clients after a handoff, use the show advancedsend-disassoc-on-handoff command.

show advanced send-disassoc-on-handoff

Syntax Description This command has no arguments or keywords.




Examples The following is a sample output of the show advanced send-disassoc-on-handoff command:

(Cisco Controller) > show advanced send-disassoc-on-handoffSend Disassociate on Handoff..................... Disabled


show Commands

show advanced sip-preferred-call-noTo display the list of preferred call numbers, use the show advanced sip-preferred-call-no command.

show advanced sip-preferred-call-no





Examples The following is a sample output of the show advanced sip-preferred-call-no command:

(Cisco Controller) > show advanced sip-preferred-call-noPreferred Call Numbers ListCall Index Preferred Call No----------- ------------------1 9112 1003 1014 1025 1036 104


show Commands

show advanced sip-snooping-portsTo display the port range for call snooping, use the show advanced sip-snooping-ports command.

show advanced sip-snooping-ports





Examples The following is a sample output of the show advanced sip-snooping-ports command:

(Cisco Controller) > show advanced sip-snooping-portsSIP Call Snoop Ports: 1000 - 2000


show Commands

show arp kernelTo display the kernel Address Resolution Protocol (ARP) cache information, use the show arp kernelcommand.

show arp kernel





Examples The following is a sample output of the show arp kernel command:

(Cisco Controller) > show arp kernelIP address HW type Flags HW address Mask Device192.0.2.1 0x1 0x2 00:1A:6C:2A:09:C2 * dtl0192.0.2.8 0x1 0x6 00:1E:E5:E6:DB:56 * dtl0


show Commands

show arp switchTo display the Cisco wireless LAN controller MAC addresses, IP addresses, and port types, use the show arpswitch command.

show arp switch




Examples The following is a sample output of the show arp switch command:

(Cisco Controller) > show arp switchMAC Address IP Address Port VLAN Type------------------- ---------------- ------------ ---- -------------------xx:xx:xx:xx:xx:xx xxx.xxx.xxx.xxx service port 1xx:xx:xx:xx:xx:xx xxx.xxx.xxx.xxx service portxx:xx:xx:xx:xx:xx xxx.xxx.xxx.xxx service port


show Commands

show avc applicationsTo display all the supported Application Visibility and Control (AVC) applications, use the show avcapplications command.

show avc applications




This command was introduced.7.4

Usage Guidelines AVC uses the Network-Base

Documents

Cisco Wireless LAN Controller Command Reference, Release 8.0