Document Outline

• About This Guide
  • Conventions
  • Documentation
  • Documentation Comments
• Using the Command-Line Interface
  • Overview
  • CLI Conventions
    • Command Prompts
    • Syntax Notation
    • Text Entry Conventions and Allowed Characters
    • MAC Address Notation
    • IP Address and Mask Notation
      • Subnet Masks
      • Wildcard Masks
    • User Globs, MAC Address Globs, and VLAN Globs
      • User Globs
      • MAC Address Globs
      • VLAN Globs
      • Matching Order for Globs
    • Port Lists
    • Virtual LAN Identification
  • Command-Line Editing
    • Keyboard Shortcuts
    • History Buffer
    • Tabs
    • Single-Asterisk (*) Wildcard Character
    • Double-Asterisk (**) Wildcard Characters
  • Using CLI Help
  • Understanding Command Descriptions
• Access Commands
  • Commands by Usage
  • disable
  • enable
  • quit
  • set enablepass
• System Service Commands
  • Commands by Usage
  • clear banner motd
  • clear history
  • clear prompt
  • clear system
  • display banner motd
  • display base-information
  • display license
  • display load
  • display system
  • help
  • history
  • quickstart
  • set auto-config
  • set banner motd
  • set confirm
  • set length
  • set license
  • set prompt
  • set system contact
  • set system countrycode
  • set system idle-timeout
  • set system ip-address
  • set system location
  • set system name
• Port Commands
  • Commands by Usage
  • clear dap
  • clear port counters
  • clear port-group
  • clear port media-type
  • clear port name
  • clear port preference
  • clear port type
  • display port counters
  • display port-group
  • display port poe
  • display port preference
  • display port status
  • display port media-type
  • monitor port counters
  • reset port
  • set dap
  • set port
  • set port-group
  • set port media-type
  • set port name
  • set port negotiation
  • set port poe
  • set port preference
  • set port speed
  • set port trap
  • set port type ap
  • set port type wired-auth
• VLAN Commands
  • Commands by usage
  • clear fdb
  • clear security 12-restrict
  • clear security 12-restrict counters
  • clear vlan
  • display fdb
  • display fdb agingtime
  • display fdb count
  • display roaming station
  • display roaming vlan
  • display security 12-restrict
  • display tunnel
  • display vlan config
  • set fdb
  • set fdb agingtime
  • set security l2-restrict
  • set vlan name
  • set vlan port
  • set vlan tunnel-affinity
• Quality of Service Commands
  • Commands by Usage
  • clear qos
  • set qos cos-to-dscp-map
  • set qos dscp-to-cos-map
  • display qos
  • display qos dscp-table
• IP Services Commands
  • Commands by Usage
  • clear interface
  • clear ip alias
  • clear ip dns domain
  • clear ip dns server
  • clear ip route
  • clear ip telnet
  • clear ntp server
  • clear ntp update-interval
  • clear snmp community
  • clear snmp notify profile
  • clear snmp notify target
  • clear snmp usm
  • clear summertime
  • clear system ip-address
  • clear timezone
  • display arp
  • display dhcp-client
  • display dhcp-server
  • display interface
  • display ip alias
  • display ip dns
  • display ip https
  • display ip route
  • display ip telnet
  • display ntp
  • display snmp community
  • display snmp counters
  • display snmp notify profile
  • display snmp notify target
  • display snmp status
  • display snmp usm
  • display summertime
  • display timedate
  • display timezone
  • ping
  • set arp
  • set arp agingtime
  • set interface
  • set interface dhcp-client
  • set interface dhcp-server
  • set interface status
  • set ip alias
  • set ip dns
  • set ip dns domain
  • set ip dns server
  • set ip https server
  • set ip route
  • set ip snmp server
  • set ip ssh
  • set ip ssh server
  • set ip telnet
  • set ip telnet server
  • set ntp
  • set ntp server
  • set ntp update-interval
  • set snmp community
  • set snmp notify profile
  • set snmp notify target
    • SNMPv3 with Informs
    • SNMPv3 with Traps
    • SNMPv2c with Informs
    • SNMPv2c with Traps
    • SNMPv1 with Traps
  • set snmp protocol
  • set snmp security
  • set snmp usm
  • set summertime
  • set system ip-address
  • set timedate
  • set timezone
  • telnet
  • traceroute
• AAA Commands
  • Commands by Usage
  • clear accounting
  • clear authentication admin
  • clear authentication console
  • clear authentication dot1x
  • clear authentication last-resort
  • clear authentication mac
  • clear authentication proxy
  • clear authentication web
  • clear location policy
  • clear mac-user
  • clear mac-user attr
  • clear mac-user group
  • clear mac-usergroup
  • clear mac-usergroup attr
  • clear mobility-profile
  • clear user
  • clear user attr
  • clear user group
  • clear usergroup
  • clear usergroup attr
  • display aaa
  • display accounting statistics
  • display location policy
  • display mobility-profile
  • set accounting {admin | console}
  • set accounting {dot1x | mac | web | last-resort}
  • set authentication admin
  • set authentication console
  • set authentication dot1x
  • set authentication last-resort
  • set authentication mac
  • set authentication proxy
  • set authentication web
  • set location policy
  • set mac-user
  • set mac-user attr
  • set mac-usergroup attr
  • set mobility-profile
  • set mobility-profile mode
  • set user
  • set user attr
  • set user group
  • set usergroup
  • set web-portal
• Mobility Domain Commands
  • Commands by Usage
  • clear mobility-domain
  • clear mobility-domain member
  • display mobility-domain config
  • display mobility-domain status
  • set mobility-domain member
  • set mobility-domain mode member seed-ip
  • set mobility-domain mode seed domain-name
• Network Domain Commands
  • Network Domain Commands by Usage
  • clear network-domain
  • clear network-domain mode
  • clear network-domain peer
  • clear network-domain seed-ip
  • display network-domain
  • set network-domain mode member seed-ip
  • set network-domain peer
  • set network-domain mode seed domain-name
• Managed Access Point Commands
  • MAP Access Point Commands by Usage
  • clear {ap | dap} radio
  • clear radio-profile
  • clear service-profile
  • display {ap | dap} config
  • display {ap | dap} counters
  • display {ap | dap} qos-stats
  • display {ap | dap} etherstats
  • display {ap | dap} group
  • display {ap | dap} status
  • display auto-tune attributes
  • display auto-tune neighbors
  • display dap connection
  • display dap global
  • display dap unconfigured
  • display radio-profile
  • display service-profile
  • reset {ap | dap}
  • set dap auto
  • set dap auto radiotype
  • set dap auto mode
  • set {ap | dap} bias
  • set {ap | dap} blink
  • set dap fingerprint
  • set {ap | dap} group
  • set {ap | dap} name
  • set {ap | dap} radio antennatype
  • set {ap | dap} radio auto-tune max-power
  • set {ap | dap} radio auto-tune max- retransmissions
  • set {ap | dap} radio channel
  • set {ap | dap} radio auto-tune min-client-rate
  • set {ap | dap} radio mode
  • set {ap | dap} radio radio-profile
  • set {ap | dap} radio tx-power
  • set dap security
  • set {ap | dap} upgrade-firmware
  • set radio-profile 11g-only
  • set radio-profile active-scan
  • set radio-profile auto-tune channel-config
  • set radio-profile auto-tune channel-holddown
  • set radio-profile auto-tune channel-interval
  • set radio-profile auto-tune power-backoff- timer
  • set radio-profile auto-tune power-config
  • set radio-profile auto-tune power-interval
  • set radio-profile beacon-interval
  • set radio-profile countermeasures
  • set radio-profile dtim-interval
  • set radio-profile frag-threshold
  • set radio-profile long-retry
  • set radio-profile max-rx-lifetime
  • set radio-profile max-tx-lifetime
  • set radio-profile mode
  • set radio-profile preamble-length
  • set radio-profile rts-threshold
  • set radio-profile service-profile
  • set radio-profile short-retry
  • set radio-profile wmm
  • set service-profile attr
  • set service-profile auth-dot1x
  • set service-profile auth-fallthru
  • set service-profile auth-psk
  • set service-profile beacon
  • set service-profile cipher-ccmp
  • set service-profile cipher-tkip
  • set service-profile cipher-wep104
  • set service-profile cipher-wep40
  • set service-profile psk-phrase
  • set service-profile psk-raw
  • set service-profile rsn-ie
  • set service-profile shared-key-auth
  • set service-profile ssid-name
  • set service-profile ssid-type
  • set service-profile tkip-mc-time
  • set service-profile web-portal-form
  • set service-profile wep active-multicast- index
  • set service-profile wep active-unicast- index
  • set service-profile wep key-index
  • set service-profile wpa-ie
• STP Commands
  • STP Commands by Usage
  • clear spantree portcost
  • clear spantree portpri
  • clear spantree portvlancost
  • clear spantree portvlanpri
  • clear spantree statistics
  • display spantree
  • display spantree backbonefast
  • display spantree blockedports
  • display spantree portfast
  • display spantree portvlancost
  • display spantree statistics
  • display spantree uplinkfast
  • set spantree
  • set spantree backbonefast
  • set spantree fwddelay
  • set spantree hello
  • set spantree maxage
  • set spantree portcost
  • set spantree portfast
  • set spantree portpri
  • set spantree portvlancost
  • set spantree portvlanpri
  • set spantree priority
  • set spantree uplinkfast
• IGMP Snooping Commands
  • Commands by usage
  • clear igmp statistics
  • display igmp
  • display igmp mrouter
  • display igmp querier
  • display igmp receiver-table
  • display igmp statistics
  • set igmp
  • set igmp lmqi
  • set igmp mrouter
  • set igmp mrsol
  • set igmp mrsol mrsi
  • set igmp oqi
  • set igmp proxy-report
  • set igmp qi
  • set igmp qri
  • set igmp querier
  • set igmp receiver
  • set igmp rv
• Security ACL Commands
  • Security ACL Commands by Usage
  • clear security acl
  • clear security acl map
  • commit security acl
  • display security acl
  • display security acl hits
  • display security acl info
  • display security acl map
  • display security acl resource-usage
  • rollback security acl
  • set security acl
  • set security acl map
  • set security acl hit-sample-rate
• Cryptography Commands
  • Commands by Usage
  • crypto ca-certificate
  • crypto certificate
  • crypto generate key
  • crypto generate request
  • crypto generate self-signed
  • crypto otp
  • crypto pkcs12
  • display crypto ca-certificate
  • display crypto certificate
  • display crypto key ssh
• RADIUS and Server Group Commands
  • Commands by Usage
  • clear radius
  • clear radius client system-ip
  • clear radius proxy client
  • clear radius proxy port
  • clear radius server
  • clear server group
  • set radius
  • set radius client system-ip
  • set radius proxy client
  • set radius proxy port
  • set radius server
  • set server group
  • set server group load-balance
• 802.1X Management Commands
  • Commands by Usage
  • clear dot1x bonded-period
  • clear dot1x max-req
  • clear dot1x port-control
  • clear dot1x quiet-period
  • clear dot1x reauth-max
  • clear dot1x reauth-period
  • clear dot1x timeout auth-server
  • clear dot1x timeout supplicant
  • clear dot1x tx-period
  • display dot1x
  • set dot1x authcontrol
  • set dot1x bonded-period
  • set dot1x key-tx
  • set dot1x max-req
  • set dot1x port-control
  • set dot1x quiet-period
  • set dot1x reauth
  • set dot1x reauth-max
  • set dot1x reauth-period
  • set dot1x timeout auth-server
  • set dot1x timeout supplicant
  • set dot1x tx-period
  • set dot1x wep-rekey
  • set dot1x wep-rekey-period
• Session Management Commands
  • Commands by Usage
  • clear sessions
  • clear sessions network
  • display sessions
  • display sessions network
• RF Detection Commands
  • Commands by Usage
  • clear rfdetect attack-list
  • clear rfdetect black-list
  • clear rfdetect ignore
  • clear rfdetect ssid-list
  • clear rfdetect vendor-list
  • display rfdetect attack-list
  • display rfdetect black-list
  • display rfdetect clients
  • display rfdetect countermeasures
  • display rfdetect counters
  • display rfdetect data
  • display rfdetect ignore
  • display rfdetect mobility-domain
  • display rfdetect ssid-list
  • display rfdetect vendor-list
  • display rfdetect visible
  • set rfdetect active-scan
  • set rfdetect attack-list
  • set rfdetect black-list
  • set rf detect countermeasures
  • set rfdetect countermeasures mac
  • set rfdetect ignore
  • set rfdetect log
  • set rfdetect signature
  • set rfdetect ssid-list
  • set rfdetect vendor-list
• File Management Commands
  • Commands by Usage
  • backup
  • clear boot backup-configuration
  • clear boot config
  • copy
  • delete
  • dir
  • display boot
  • display config
  • display version
  • load config
  • md5
  • mkdir
  • reset system
  • restore
  • rmdir
  • save config
  • set boot backup-configuration
  • set boot configuration-file
  • set boot partition
• Trace Commands
  • Commands by Usage
  • clear log trace
  • clear trace
  • display trace
  • save trace
  • set trace authentication
  • set trace authorization
  • set trace dot1x
  • set trace sm
• Snoop Commands
  • Commands by Usage
  • clear snoop
  • clear snoop map
  • set snoop
  • set snoop map
  • set snoop mode
  • display snoop
  • display snoop info
  • display snoop map
  • display snoop stats
• System Log Commands
  • Commands by Usage
  • clear log
  • display log buffer
  • display log config
  • display log trace
  • set log
  • set log mark
• Boot Prompt Commands
  • Boot Prompt Commands by Usage
  • autoboot
  • boot
  • change
  • create
  • delete
  • dhcp
  • diag
  • dir
  • display
  • fver
  • help
  • ls
  • next
  • reset
  • test
  • version
• Obtaining Support for your Product
  • Register Your Product
  • Purchase Value-Added Services
  • Troubleshoot Online
  • Access Software Downloads
  • Telephone Technical Support and Repair
  • Contact Us
• Index