Siemens SCALANCE W720 Configuration Manual Download Page 399

Page: 399 / 432

Security and authentication

10.3 Management Access Control List

SCALANCE W760/W720 to IEEE 802.11n Command Line Interface
Configuration Manual, 11/2014, C79000-G8976-C351-03

399

10.3

Management Access Control List

This section describes the commands relevant for working with the management access

control list.

10.3.1

show authorized-managers

Description

This command shows the information about the configuration of the authorized managers.

Requirement

You are in the User EXEC mode or in the Privileged EXEC mode.
The command prompt is as follows:

cli>

cli#

Syntax

Call up the command with the following parameters:

show authorized-managers[ip-source<ip-address>]

The parameters have the following meaning:

Parameter

Description

Range of values / note

ip-source

Keyword for the network or host ad-

dress

ip-address

Value for an IP address

specify a valid IP address

For information on identifiers of addresses and interfaces, refer to the section "Interface

identifiers and addresses (Page 23)".

Result

The information about the configuration of the authorized managers is displayed.

Summary of Contents for SCALANCE W720

Page 1: ... ___________________ ___________________ ___________________ SIMATIC NET Industrial Wireless LAN SCALANCE W760 W720 to IEEE 802 11n Command Line Interface Configuration Manual 11 2014 C79000 G8976 C351 03 Introduction 1 Description 2 Configuration 3 Functions specific to SCALANCE 4 System time 5 Network structures 6 Network protocols 7 Load control 8 Layer 3 functions 9 Security and authentication...

Page 2: ...e operated only by personnel qualified for the specific task in accordance with the relevant documentation in particular its warning notices and safety instructions Qualified personnel are those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the following WARNING...

Page 3: ...t 27 2 6 5 Help functions and supported input 28 2 6 5 1 help 28 2 6 5 2 The command 29 2 6 5 3 Completion of command entries 30 2 6 5 4 Abbreviated notation of commands 30 2 6 5 5 Reusing the last used commands 31 2 6 5 6 show history 31 3 Configuration 33 3 1 System 33 3 1 1 show commands 33 3 1 1 1 show cli console timeout 33 3 1 1 2 show coordinates 34 3 1 1 3 show device information 34 3 1 1 ...

Page 4: ...on mode 57 3 1 10 1 alias 57 3 1 10 2 no alias 58 3 1 10 3 duplex 58 3 1 10 4 no duplex 59 3 1 10 5 lldp 60 3 1 10 6 no lldp 61 3 1 10 7 mtu 62 3 1 10 8 shutdown 63 3 1 10 9 no shutdown 64 3 2 Load and Save 65 3 2 1 show loadsave files 65 3 2 2 show loadsave tftp 66 3 2 3 Commands in the global configuration mode 66 3 2 3 1 loadsave 66 3 2 4 Commands in the LOADSAVE configuration mode 67 3 2 4 1 d...

Page 5: ...number Client 90 4 3 iPCF 91 4 3 1 show wlan ipcf 91 4 3 2 WLAN Interface Configuration mode 92 4 3 2 1 wlan ipcf 92 4 3 2 2 no wlan ipcf 93 4 4 iPCF MC 94 4 4 1 show wlan ipcf mc 94 4 4 2 Commands in the WLAN configuration mode 95 4 4 2 1 wlan ipcf mc 95 4 4 2 2 no wlan ipcf mc 96 4 4 2 3 wlan ipcf mc cycle time access point 97 4 4 2 4 wlan ipcf mc mgmt scan period client 98 5 System time 99 5 1 ...

Page 6: ...lan client list access point 124 6 1 1 10 show wlan client list vap access point 125 6 1 1 11 show wlan data rates access point 125 6 1 1 12 show wlan device 126 6 1 1 13 show wlan overlap ap list access point 127 6 1 1 14 show wlan overview 128 6 1 1 15 show wlan statistics 130 6 1 1 16 show wlan ssid table client 131 6 1 1 17 show wlan vap access point 131 6 1 1 18 show wlan wds access point 132...

Page 7: ...ess point 165 6 1 5 28 wlan data rate 11abg defaults access point 166 6 1 5 29 wlan data rate 11n defaults Access Point 167 6 1 5 30 wlan dfs 168 6 1 5 31 no wlan dfs 169 6 1 5 32 wlan dtim access point 169 6 1 5 33 wlan ssid table edit client 170 6 1 5 34 wlan force roaming eth down access point 171 6 1 5 35 no wlan force roaming eth down access point 172 6 1 5 36 wlan fragmentation threshold 173...

Page 8: ...ridge mode 205 6 2 2 6 mgmt vlan 206 6 2 3 Commands in the interface configuration mode 207 6 2 3 1 switchport acceptable frame type 207 6 2 3 2 switchport access vlan 208 6 2 3 3 no switchport access vlan 209 6 2 3 4 switchport ingress filter 210 6 2 3 5 no switchport ingress filter 210 6 2 3 6 switchport priority default 211 6 2 3 7 no switchport priority default 212 6 2 3 8 switchport pvid 212 ...

Page 9: ...3 4 2 no spanning tree 244 6 3 4 3 spanning tree auto edge 245 6 3 4 4 no spanning tree auto edge 246 6 3 4 5 spanning tree bdpufilter 246 6 3 4 6 spanning tree bpdu receive 247 6 3 4 7 spanning tree bpdu transmit 248 6 3 4 8 spanning tree mst 249 6 3 4 9 no spanning tree mst 250 6 3 4 10 spanning tree mst hello time 251 6 3 4 11 no spanning tree mst hello time 252 6 3 5 Commands in the MSTP confi...

Page 10: ...est 280 7 2 4 3 ip dhcp client mode 280 7 3 DHCP server 281 7 3 1 show ip dhcp server pools 281 7 3 2 show ip dhcp server bindings 282 7 3 3 Commands in the global configuration mode 283 7 3 3 1 ip dhcp server 283 7 3 3 2 no ip dhcp server 284 7 3 3 3 ip dhcp server icmp probe 285 7 3 3 4 no ip dhcp server icmp probe 286 7 3 3 5 ip dhcp server pool 287 7 3 3 6 no ip dhcp server pool 288 7 3 4 Comm...

Page 11: ...y 318 7 4 2 13 no snmp notify 319 7 4 2 14 snmp targetaddr 320 7 4 2 15 no snmp targetaddr 321 7 4 2 16 snmp targetparams 322 7 4 2 17 no snmp targetparams 324 7 4 2 18 snmp v1 v2 readonly 324 7 4 2 19 no snmp v1 v2 readonly 325 7 4 2 20 snmp user 326 7 4 2 21 no snmp user 327 7 4 2 22 snmp view 328 7 4 2 23 no snmp view 329 7 5 SMTP client 330 7 5 1 show events smtp server 330 7 5 2 show events s...

Page 12: ...t 356 9 1 3 7 no nat timeout client 358 10 Security and authentication 359 10 1 User rights management 359 10 1 1 whoami 359 10 1 2 show users 360 10 2 WLAN 360 10 2 1 show wlan security 361 10 2 2 show wlan security ap radius authenticator Access Point 361 10 2 3 show wlan security keys 362 10 2 4 Commands in the WLAN configuration mode 363 10 2 4 1 wlan security ap radius authenticator 363 10 2 ...

Page 13: ...s Point 393 10 2 6 7 vap security wpa psk passphrase access point 394 10 2 6 8 vap communication with own vap access point 395 10 2 6 9 no vap communication with own vap access point 396 10 2 6 10 vap communication with ethernet access point 397 10 2 6 11 no vap communication with ethernet access point 398 10 3 Management Access Control List 399 10 3 1 show authorized managers 399 10 3 2 Commands ...

Page 14: ...ation Manual 11 2014 C79000 G8976 C351 03 11 1 14 8 link 420 11 1 14 9 no link 421 11 1 14 10 send test mail 422 11 2 Syslog client 423 11 2 1 show events syslogserver 423 11 2 2 Commands in the Events configuration mode 423 11 2 2 1 syslogserver 424 11 2 2 2 no syslogserver 425 Index 427 ...

Page 15: ...anual you are currently reading the following documentation is also available from SIMATIC NET on the topic of Industrial Wireless LANs Configuration Manual SCALANCE W760 W720 Web Based Management This Configuration Manual is intended to provide you with the information you require to commission and operate devices correctly It explains how to configure the devices and how to integrate them in a W...

Page 16: ... for your IWLAN application For a flexible combination and installation of the individual IWLAN components both indoors and outdoors a wide ranging selection of compatible coaxial accessories are available The system manual also covers connecting cables as well as a variety of plug in connectors lightning protectors a power splitter and an attenuator SIMATIC NET manuals You will find SIMATIC NET m...

Page 17: ...t in a holistic industrial security concept With this in mind our products undergo continuous development We therefore recommend that you keep yourself informed with respect to our product updates Please find further information and newsletters on this subject at http support automation siemens com To ensure the secure operation of a plant or machine it is also necessary to take suitable preventiv...

Page 18: ...Introduction 1 1 Security information SCALANCE W760 W720 to IEEE 802 11n Command Line Interface 18 Configuration Manual 11 2014 C79000 G8976 C351 03 ...

Page 19: ... 7 Starting the CLI in a Windows console Follow the steps outlined below to start the Command Line Interface in a Windows console 1 Open a Windows console and type in the command telnet followed by the IP address of the device you are configuring C telnet IP address 2 Enter your login and password As an alternative you can also enter the command telnet followed by the IP address of the device you ...

Page 20: ... EXEC mode This mode is active after you log in as user in a console window In this mode you can use show commands to display the current values of configuration parameters You are logged out with the exit command It is not possible to modify parameters in this mode To be able to modify configuration parameters you need to change to the Privileged EXEC mode Privileged EXEC mode In this mode you ca...

Page 21: ...n the command prompt User Exec mode CLI Privileged Exec mode and configuration modes CLI The selected interface when the CLI is in an Interface Configuration mode In the Interface Configuration mode the parameters are configured for one specific interface The command prompt is displayed in the form CLI config if where the placeholder is replaced by the identifier of the Interface You select the In...

Page 22: ... in combinations to describe mandatory and optional entries There is a general description of some of these combinations below Character combinations Meaning Parameter Instead of the expression in parentheses enter a permitted value Unit a b Instead of the expression in parentheses enter a value from the range a to b The unit to be used is specified before the brackets and is also replaced by the ...

Page 23: ...ort number separated by a slash The interfaces permanently installed in the device are identified with module 0 Examples Fast Ethernet interface fa 0 1 WLAN1 interface wlan 0 1 Addressing logical interfaces This notation also applies to other commands that address a logical interface VAP WDS Enter the command interface Specify the interface type interface type After a space enter the interface ide...

Page 24: ...1 RJ 45 vap X 1 Y 1 vapX 0 Y W761 1 RJ 45 vap X 1 Y 1 vapX 0 Y wds X 1 Y 1 wdsX 0 Y Identification of the interfaces in the command prompt of the Interface Configuration mode To configure the interface use the command interface in the global configuration mode Since you configure precisely one of the existing interfaces in the Interface Configuration mode the command prompt shows not only the mode...

Page 25: ...rk part of an IP address The notation is normally decimal in keeping with the IP address Alternative notation for network masks In contrast to the notation described above network masks can also be represented as a number of 1 bits The mask of the decimal representation 255 255 0 0 is then written as 16 The syntax is then for example ipaddress 16 Note that there must be a space before and after th...

Page 26: ... prompt is displayed Syntax Call the command without parameters clear screen Result The screen is cleared The command prompt is displayed 2 6 2 do Description With this command you can execute the commands from the Privileged EXEC mode in any mode Syntax Call up the command with the following parameters do command To do this you replace command with the command from the Privileged EXEC mode that y...

Page 27: ... Requirement You are in a configuration mode Syntax Call the command without parameters end Result You are in the Privileged EXEC mode The command prompt is as follows cli 2 6 4 exit Description With this command you close the current mode You are then at the next higher level in the user modes If you are in Privileged EXEC Modus or in User EXEC Modus mode you will be logged out Syntax Call the co...

Page 28: ...ist of most recently used commands Display of the list of most recently used commands show history 2 6 5 1 help Description With this command you display the help entry for a command or the command list Syntax Call up help with the following parameters help command Here you replace command with the command for which you require help If the command for which you require help consists of several wor...

Page 29: ...rk to obtain a list of all permitted commands in the current mode For this command you do not need to press the enter key The command executes immediately after you type the character Result The mode specific as well as the global commands are displayed Note Incomplete command names If you have specified an incomplete command when calling the help function a list of all commands that start with th...

Page 30: ...e command is unambiguous If you enter a character string that cannot be completed to form a command an error message is displayed The command is not unique Ambiguous Command The command is unknown Invalid Command The command is incomplete Incomplete command If the entry is not yet complete enter further characters With you obtain a list of the possible commands Repeat this if necessary until the c...

Page 31: ...the commands most recently used using the arrow up and arrow down keys If the command you are looking for is displayed you can edit the command line as required and execute the command with the enter key Further notes You display the list of commands last used with the show history command This function is available in every mode See also show history Page 31 2 6 5 6 show history Description This ...

Page 32: ...CLI commands SCALANCE W760 W720 to IEEE 802 11n Command Line Interface 32 Configuration Manual 11 2014 C79000 G8976 C351 03 Syntax Call the command without parameters show history Result The list of used commands is displayed ...

Page 33: ...em properties can be displayed and configured 3 1 1 show commands This section describes commands with which you display various settings 3 1 1 1 show cli console timeout Description This command shows the global configuration for the timeout of the CLI console Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the comma...

Page 34: ...e or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show coordinates Result The system coordinates are displayed 3 1 1 3 show device information Description This command shows information about the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Cal...

Page 35: ...nge This indicates whether or not the current configuration has been saved Login Authentication mode This indicates whether the authentication is made locally or on the RADIUS server 3 1 1 4 show im Description This command shows information on device specific vendor and maintenance data such as the article number serial number version numbers etc Requirement You are in the User EXEC mode or in th...

Page 36: ...he parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface description Shows the description of the interface status Shows the status of the interface vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 For information on iden...

Page 37: ...nterface type interface id vlan vlan id 1 4094 counters The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 For information on identifiers of addresses and interfaces...

Page 38: ... command with the following parameters show interface mtu Vlan vlan id 1 4094 interface type interface id The parameters have the following meaning Parameter Description Range of values Vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For informati...

Page 39: ...094 interface type interface id loopback The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface loopback Loopback For information on identifiers of addresses and interfa...

Page 40: ...e The command prompt is as follows cli or cli Syntax Call the command without parameters show pnio Result The current PROFINET IO configuration is displayed 3 1 1 10 show lldp neighbors Description This command shows the current content of the neighborhood table Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the comm...

Page 41: ... interface type interface id The parameters have the following meaning Parameter Description Values port Keyword for a port channel interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of interfaces and addresses refer to the section Interface identifiers and addresses Page 23 Result The information...

Page 42: ...ption Version Date 3 1 2 clear counters Description With this command you reset the counters of an interface Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up the command with the following parameters clear counters interface type interface id The parameters have the following meaning Parameter Description Range of values note interface type Type o...

Page 43: ...the interface are reset Further notes You can display the statistical information of the interfaces with the show interfaces counters command 3 1 3 configure terminal Description With this command you change to the Global configuration mode Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters configure terminal Result You a...

Page 44: ...ou are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up the command with the following parameters clear line vty line number 2 9 all forceful clear The parameters have the following meaning Parameter Description Range of values note line number Number of the connection that will be terminated 2 9 all terminates all connections forceful clear closes a session that is ...

Page 45: ... User EXEC mode Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters disable Result You are in the User EXEC mode The command prompt is as follows cli 3 1 6 enable Description With this command you change to the Privileged EXEC mode Requirement You are in the User EXEC mode The command prompt is as follows cli Syntax Call t...

Page 46: ... you are connected to the device via telnet the session is closed Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters logout Result The CLI session is ended and the Windows Login prompt is displayed 3 1 8 ping Description With this command you request a response from a device in the network ...

Page 47: ...ferred byte Keyword for the size of the packets in bytes 0 2080 count Keyword for the number of packets to be requested packet_count Number of packets 1 10 timeout Response wait time If this time expires the request is reported as timed out seconds Time to the timeout in seconds 1 100 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page...

Page 48: ...nt sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 3 1 9 1 coordinates height Description With this command you enter a height coordinate Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters coordinates height meter The par...

Page 49: ... command with the following parameters coordinates latitude latitude The parameter has the following meaning Parameter Description Range of values note latitude Input box for the latitude coordinate max 32 characters To use spaces in the entry enter the latitude coordinate in quotes coordinates latitude 123 456 Result The latitude coordinate is created 3 1 9 3 coordinates longitude Description Wit...

Page 50: ... to the Interface Configuration mode There you can edit the settings for one interface You select the interface with the parameters of this command If you specify a logical interface that does not exist it will be created The name of the selected interface is displayed in the command prompt Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call...

Page 51: ...te the numbering of the interface For the value ranges for the VLAN logical interface refer to the upper table You can only call up interfaces that you created with the vlan command The ranges of values from the physical interfaces depend on the hardware configuration Further notes You exit the Interface Configuration mode with the end or exit command You delete a logical interface with the no int...

Page 52: ...guration of the interfaces with the show interfaces command 3 1 9 6 cli console timeout Description With this command you enable the automatic logout and you configure the timeout setting for the CLI Note No automatic logout from the CLI If the connection is not terminated after the set time check the setting of the keepalive function on the Telnet client If the set interval is shorter than the co...

Page 53: ...atic logout is enabled Further notes You disable automatic logout with the no cli console timeout command You display the current timeout setting with the show cli console timeout command 3 1 9 7 no cli console timeout Description With this command you disable the automatic logout Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the comma...

Page 54: ...t is as follows cli config Syntax Call up the command with the following parameters system contact string The parameter has the following meaning Parameter Description Range of values note string Input box for contact information max 255 characters Result The contact information is created in the system 3 1 9 9 system location Description With this command you enter the location information for th...

Page 55: ...he location information max 255 characters Result The location information is created in the system 3 1 9 10 system name Description This command you enter a name for the system Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters system name string The parameter has the following meaning Parameter...

Page 56: ... up the command with the following parameters username user admin password passwd The parameters have the following meaning Parameter Description user the password for the user is changed admin the password for the administrator is changed password Keyword for a password passwd Value for the password Note Length of the password The password must be at least 6 characters long Result The password is...

Page 57: ...nterface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mode 3 1 10 1 alias Description With this command you assign a name to an interface The name only provides information and has no effect on the configuration Requirement You are in the Interface Configurati...

Page 58: ...t no alias Result The name of the interface is removed Further notes You configure the name of the interface with the alias command 3 1 10 3 duplex Description Certain interfaces can be operated in full duplex mode or half duplex mode The options here depend on the connected device Optical connections for example are always operated in full duplex mode since they have a fiber for each transmission...

Page 59: ... Interface will be operated in half duplex mode Result The duplex mode of the interface is configured Further notes You can reset the duplex mode of the Interface to the default value with the no duplex command 3 1 10 4 no duplex Description With this command you reset the duplex mode of an interface to the default value The default value is full Requirement You are in the Interface configuration ...

Page 60: ...arameters lldp transmit receive The parameters have the following meaning Parameters Description transmit the sending of LLDP packets is enabled receive the receipt of LLDP packets is enabled At system start or when using the restart command with the option memoryor factory the following defaults apply Sending and receipt of LLDP packets are enabled Note Enabling both options When you call this co...

Page 61: ...ll up the command with the following parameters no lldp transmit receive The parameters have the following meaning Parameters Description transmit the sending of LLDP packets is enabled receive the receipt of LLDP packets is disabled Note Disabling both options When you call this command you can only select one option If you want to disable both options call up the command again Result The setting...

Page 62: ...nd with the following parameters mtu frame size 64 1500 The parameter has the following meaning Parameter Description Range of values frame size Size of the MTU in bytes 64 1500 At system start or when using the restart command with the option memoryor factory the following defaults apply The size of the MTU is configured to 1536 bytes Result The setting for the size of the MTU is configured Furth...

Page 63: ...parameters shutdown complete Result The Interface is shut down Note If you use this command in the Interface Configuration mode for a VLAN input prompt CLI config if vlan management access to the device is no longer possible This relates to configuration using CLI WBM and SNMP Access is only possible again after resetting the device to the factory settings with the Reset button Further notes You a...

Page 64: ...u shut down an interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no shutdown Result The Interface is activated Further notes You activate the interface with the shutdown complete command You can display the status of this function and other information with the show interfacescommand ...

Page 65: ...f a previous version the configuration data can be lost In this case the device starts up with the factory configuration settings after the firmware has been installed 3 2 1 show loadsave files Description This command shows the current Load Save file information Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the com...

Page 66: ...P server for Load Save is displayed 3 2 3 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global co...

Page 67: ...call up in the LOADSAVE configuration mode In the Global Configuration mode enter the loadsave command to change to this mode You display the valid file types for the commands in the LOADSAVE Configuration mode with the global command show loadsave tftp If you exit the LOADSAVE configuration mode with the exitcommand you return to the Global Configuration mode If you exit the LOADSAVE configuratio...

Page 68: ...this command you assign a name to a file type The file type decides the type that is affected by the tftp load or tftp save action The name decides the file to be copied to or from the TFTP server Requirement You are in the LOADSAVE configuration mode The command prompt is as follows cli config loadsave Syntax Call up the command with the following parameters tftp filename showfiles filetype filet...

Page 69: ...ilable files Requirement The name of the file is specified You are in the LOADSAVE Configuration mode The command prompt is cli config loadsave Syntax Call up the command with the following parameters tftp load showfiles filetype filetype The parameters have the following meaning Parameter Description Range of values note showfiles Shows the available files filetype Keyword for a file type to be l...

Page 70: ...config loadsave Syntax Call up the command with the following parameters tftp save showfiles filetype filetype The parameters have the following meaning Parameter Description Range of values note showfiles Shows the available files filetype Keyword for a file type to be loaded filetype Name of the file type max 100 characters Result The file types are displayed or the file is copied Further notes ...

Page 71: ...Pv4 address port Keyword for the port of the server via which the TFTP connection runs tcp port Number of the port 1 65535 For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The settings for the access to the selected TFTP server are configured 3 2 4 6 password Description With this command you activate and configure t...

Page 72: ...file type follows that will be loaded filetype Name of the file type max 100 characters pw Keyword for the password password Password Enter the password for the user certificate Result The password for the user certificate is configured and activated Further notes You disable the password with the no password command 3 2 4 7 no password Description With this command you disable the password for th...

Page 73: ...o password showfiles filetype filetype The parameters have the following meaning Parameter Description Values showfiles Shows the available files filetype Shows that the file type follows that will be loaded filetype Name of the file type max 100 characters Result The password for the user certificate is disabled Further notes You enable the password for the user certificate with the password comm...

Page 74: ...restart the device Select one of the following configuration settings Device restart with the current configuration Device restart with the factory configuration settings with the exception of the following parameters IP addresses Subnet mask IP address of the default gateway DHCP client ID DHCP System name System location System contact User names and passwords Mode of the device Device restart w...

Page 75: ...system to the factory configuration settings and restarts the system The parameters listed above are unaffected by a reset factory Resets the system to the factory configuration settings and restarts the system Result The device is restarted with the selected settings 3 4 Configuration Save Restore This section describes commands for displaying saving and restoring configuration settings 3 4 1 sho...

Page 76: ...gs of the Span ning Tree Protocol vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface Shows that an interface description follows interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface ssh Shows the configuration settings of the Secure Shell protocol ssl Shows the configuration settings of the S...

Page 77: ... information on identifiers of interfaces and addresses refer to the section Interface identifiers and addresses Page 23 If you call up the command without parameters only the active operational settings of all modules and all interfaces that do not match the preset values are displayed Result The selected configuration settings of the device are displayed 3 4 2 write startup config Description Wi...

Page 78: ...o change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 3 4 3 1 auto save Description The CLI can save changes to the configuration automatically If you first want to test changes made to the con...

Page 79: ...ration in the Trial mode with the write startup config command You disable the function with the no auto save command You can display the status of this function and other information with the show device informationcommand 3 4 3 2 no auto save Description With this command you disable the auto save function Requirement You are in the Global Configuration mode The command prompt is as follows cli ...

Page 80: ...ed or disabled Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show sinema Result The setting of the SINEMA configuration interface is displayed 3 5 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privil...

Page 81: ...without parameter assignment sinema Result The SINEMA configuration interface is enabled Further notes You disable the SINEMA configuration interface with the no sinema command You display the setting whether the SINEMA configuration interface is enabled or disabled with the command show sinema 3 5 2 2 no sinema Description With this command you disable the SINEMA configuration interface Requireme...

Page 82: ...tion Manual 11 2014 C79000 G8976 C351 03 Result The SINEMA configuration interface is disabled Further notes You enable the SINEMA configuration interface with the sinema command You display the setting whether the SINEMA configuration interface is enabled or disabled with the command show sinema ...

Page 83: ...0AB0 US version 4 1 WBM On the device you can limit the time available for access with Web Based Management If no entry is made for a specific time the WBM session is closed This section describes commands relevant for the configuration of this feature 4 1 1 show web session timeout Description This command shows the timeout setting for the WBM Requirement You are in the User EXEC mode or in the P...

Page 84: ...e then in the Privileged EXEC mode again 4 1 2 1 web session timeout Description With this command you enable the automatic logoff and you configure the timeout setting for the WBM Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters web session timeout seconds 60 3600 The parameter has the followi...

Page 85: ... command without parameters no web session timeout Result Automatic logoff is disabled Further notes You enable automatic logoff with the web session timeout command You display the current timeout setting with the show web session timeout command 4 2 Signal recorder This section describes the commands relevant for working with the signal recorder 4 2 1 show wlan signal recorder Client Description...

Page 86: ...ection Interface identifiers and addresses Page 23 Result The status of the signal recorder and the recording are displayed If the recording has started the configured interval and the current number of recorded measured values are displayed If the recording has stopped the configured interval and the number of recorded measured values are displayed 4 2 2 wlan signal recorder start sample_number C...

Page 87: ...easured values 1 60000 sample_number This parameter specifies how many measured values will be recorded 1 20000 For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The recording is configured and will be started The measured values are logged in files If these files already exist they will be overwritten If the set tota...

Page 88: ...User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax The WLAN interface is enabled Call up the command with the following parameters wlan signal recorder wlan 0 X stop The parameter has the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and inte...

Page 89: ...rface is enabled You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters wlan signal recorder wlan 0 X ms 100 60000 display The parameter has the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface ms The interval in milliseconds ms...

Page 90: ...p The values are stored every 10 minutes The file contains all values since the start of the recording Note This command is only available in the client mode Requirement The WLAN interface is enabled You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters wlan signal recorder wlan 0 X ms 100 6...

Page 91: ... working in the CLI becomes slower Further notes You stop the recording early with the wlan signal recorder wlan 0 X stop command You display the status of the signal recorder and the recording with the show wlan signal recorder wlan 0 X command 4 3 iPCF This section describes the commands relevant for working with the iPCF function industrial Point Coordination Function Note The commands are only...

Page 92: ... Interface identifiers and addresses Page 23 Result The iPCF settings are displayed 4 3 2 WLAN Interface Configuration mode This section describes commands that you can call up in the WLAN Interface Configuration mode Depending on the Interface selected various command sets are available In the Global Configuration mode enter the interface wlan 0 X command to change to this mode If you exit the WL...

Page 93: ...l the command without parameters wlan ipcf Result The iPCF mode is enabled Further notes You disable the iPCF mode with the no wlan ipcf command You display the setting with the show wlan ipcf command 4 3 2 2 no wlan ipcf Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you dis...

Page 94: ...he show wlan ipcf command 4 4 iPCF MC This section describes the commands relevant for working with the iPCF MC function industrial Point Coordination Function Management Channel Note The commands are only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AA0 US version 4 4 1 show wlan ipcf mc Note The command is only available with the following ...

Page 95: ...an call up in the WLAN configuration mode In the Global Configuration mode enter the wlan command to change to this mode Commands relating to other topics that can be called in the WLAN configuration mode can be found in the relevant sections If you exit the WLAN configuration mode with the exitcommand you return to the Global configuration mode If you exit the WLAN Configuration mode with the end...

Page 96: ... is enabled Further notes You disable iPCF MC with the no wlan ipcf mc command You display the setting with the show wlan ipcf mc command 4 4 2 2 no wlan ipcf mc Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you disable iPCF MC on this device Requirement You are in the WLAN ...

Page 97: ...ollowing device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you configure the cycle time for iPCF MC Requirement You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan ipcf mc cycle time ms 32 512 The parameter has the following meaning Pa...

Page 98: ...tion With this command you the time for the background scan interval as a multiple of the update time Requirement The device is in client mode You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan ipcf mc mgmt scan period num of cycles 1 10 The parameter has the following meaning Parameter Description V...

Page 99: ...s commands relevant for the configuration of the system time 5 1 1 The show commands This section describes commands with which you display various settings 5 1 1 1 show time Description This command shows the settings of the system clock Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters s...

Page 100: ...g time are displayed 5 1 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mod...

Page 101: ...em time is obtained from an SNTP server SINEC The system time is obtained using the SIMATIC time protocol Result The method of obtaining the system time is configured Further notes You display the settings for the system clock with the show time command 5 1 2 2 time set Description With this command you set the system clock Requirement You are in the Global Configuration mode The command prompt is...

Page 102: ... february march april may june july august septem ber october november decem ber year Year 2000 2035 Result The system time is set Further notes You display the settings for the system clock with the show time command 5 1 2 3 time dst date Description With this command you configure the start and end of daylight saving time Requirement You are in the Global Configuration mode The command prompt is...

Page 103: ...h DD Day hh Hour end Keyword for the end of daylight saving time MMDDhh Time for the end of daylight saving time Time in the format MM Month DD Day hh Hour Result The entry for the start and end of daylight saving time was created 5 1 2 4 time dst recurring Description With this command you configure the start and end of daylight saving time with a generic description Requirement You are in the Gl...

Page 104: ... march april may june july august septem ber october november decem ber hour Hour 0 23 end Keyword for the end of daylight saving time Result The entry for the start and end of daylight saving time was created 5 1 2 5 no time dst Description With this command you delete the entry for the start and end of daylight saving time with the specified name If you do not specify a name as the parameter all...

Page 105: ... the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ntp info Result The current NTP settings are displayed 5 2 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to chan...

Page 106: ...You are now in the NTP configuration mode The command prompt is as follows cli config ntp Further notes You exit the NTP configuration mode with the end or exit command 5 2 3 Commands in the NTP configuration mode This section describes commands that you can call up in the NTP configuration mode In the Global configuration mode enter the ntp command to change to this mode If you exit the NTP confi...

Page 107: ...ing Parameter Description Range of values note ipv4 Keyword for an IPv4 address ip_addr Value for the IPv4 address of the time server Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN 100 Domain name Fully Qualified Domain Name Maximum of 100 characters port UDP port of the time server 123 1025 36564 Default 123 poll Keyword for the time after which the time of day is requested a...

Page 108: ... Call the command without parameter assignment no ntp server For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The connection to a server is deleted on the NTP client Further notes You configure the connection to a server with the ntp server command 5 2 3 3 ntp time diff Description With this command you configure the...

Page 109: ... Number of minutes difference Enter the number of hours and number of minutes with two digits each Default No time difference Result The time difference between the device and the NTP server is configured 5 3 SNTP client This section describes commands relevant for configuration of the SNTP client 5 3 1 show sntp broadcast mode status Description This command shows the current configuration of the...

Page 110: ...You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show sntp status Result The settings of SNTP are displayed 5 3 3 show sntp unicast mode status Description This command shows the current configuration of the unicast mode of SNTP Requirement You are in the User EXEC mode or in the Privileged EXEC mode...

Page 111: ...ing to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 5 3 4 1 sntp Description With this command you change to the SNTP configuration mode Requirement You are in the Global configuration mode The command prompt is as follows cli ...

Page 112: ...5 3 5 1 sntp time diff Description With this command you configure the time difference of the system time relative to the UTC time Requirement The SNTP server must have started up You are in the SNTP Configuration mode The command prompt is cli config sntp Syntax Call up the command with the following parameters sntp time diff hh mm The parameter has the following meaning Parameter Description Tim...

Page 113: ... config sntp Syntax Call up the command with the following parameters sntp unicast server ipv4 ucast_addr fqdn name FQDN 100 port 1025 36564 poll seconds 16 16284 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Value for an IPv4 unicast address Enter a valid IPv4 unicast ad dress fqdn name Keyword for a domain name FQDN...

Page 114: ...mode The command prompt is as follows cli config sntp Syntax Call up the command with the following parameters no sntp unicast server ipv4 ucast_addr fqdn name FQDN 100 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Value for an IPv4 unicast address Enter a valid IPv4 unicast address fqdn name Keyword for a domain name...

Page 115: ...h the following parameters sntp client addressing mode unicast broadcast The parameters have the following meaning Parameter Description Range of values note unicast configures the SNTP client in unicast mode Default unicast enabled broadcast configures the SNTP client in broad cast mode Result The addressing mode of the SNTP client is configured Further notes You display this setting and other in...

Page 116: ...System time 5 3 SNTP client SCALANCE W760 W720 to IEEE 802 11n Command Line Interface 116 Configuration Manual 11 2014 C79000 G8976 C351 03 ...

Page 117: ...ients 6 1 1 The show commands This section describes commands with which you display various settings 6 1 1 1 show wlan advanced Description This command shows information about the send characteristics of the device for example the beacon rate fragmentation Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the comma...

Page 118: ...you have selected channels explicitly for wireless communication this information is also displayed Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan allowed channels wlan 0 X The parameter has the following meaning Parameter Description Values or range of values wl...

Page 119: ...n antennas wlan 0 X The parameter has the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The antenna settings of the relevant WLAN interface are displayed 6 1 1 4 show wlan ap access point Description T...

Page 120: ...s Page 23 Result The following settings of the access point are displayed Channel Alternative channel HT channel width 6 1 1 5 show wlan advanced 11n Description The command shows the 802 11n configuration Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan advanced 1...

Page 121: ... is only available in the client mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan available ap list wlan 0 X connected The parameters have the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface con...

Page 122: ...nd with the following parameters show wlan basic wlan 0 X The parameter has the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The following WLAN settings are displayed Admin status whether the interfac...

Page 123: ...EC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan client wlan 0 X The parameter has the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifi...

Page 124: ...d EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan client list wlan 0 X mac macaddr sys sysname AID The parameter has the following meaning Parameter Description Values or range of val ues wlan 0 X WLAN interface Enter a valid interface mac Keyword for the MAC address of the client macaddr MAC address aa bb cc dd ee ff sys Key...

Page 125: ...rompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan client list vap vapX 0 Y AID The parameter has the following meaning Parameter Description Values or range of values vapX 0 Y VAP interface Enter a valid interface AID Connection ID of the client For information on identifiers of addresses and interfaces refer to the section Interface identifiers and ...

Page 126: ...interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The configured data transmission speeds for the corresponding WLAN interface are displayed in the form of a table The display of the tables depends on the selected frequency band and the transmission standard 6 1 1 12 show wlan device Description This command...

Page 127: ...ent channels at 2 4 GHz If entries exist here the maximum data throughput of the access point will be restricted Note This command is available only in access point mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan overlap ap list wlan 0 X The parameter has the...

Page 128: ...G8976 C351 03 Result The access points are displayed 6 1 1 14 show wlan overview Description The command shows configuration of the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show wlan overview ...

Page 129: ...uration of the device is displayed The content depends on the operating mode that is set Access point Radio WLAN mode Configured Channel Alternative DFS channel Operative channel HT channel width Status Radio Port MAC Address SSID Status Client Radio WLAN mode MAC Mode MAC Address Operative channel Connected BSSID Connected SSID HT Channel Width Mhz Status ...

Page 130: ... off were counted per VAP interface how many requesting frames for logging on or logging off were counted per VAP interface Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan statistics wlan 0 X The parameter has the following meaning Parameter Description Values or ...

Page 131: ...he command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan ssid table wlan 0 X The parameter has the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The...

Page 132: ...scription Values or range of values vapX 0 Y VAP interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The following settings of the VAP are displayed Admin status SSID Broadcast SSID WDS only WDS ID 6 1 1 18 show wlan wds access point Description This command shows the configuration of t...

Page 133: ... addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The following WDS settings are displayed Admin status Connection over Partner ID type Partner MAC Partner WDS ID 6 1 1 19 show wlan wds list access point Description This command shows the WDS partners connected to the WLAN interface Note This command is available only in access point mode Requirement...

Page 134: ...sses Page 23 Result The WDS partners of the WLAN interface are displayed 6 1 1 20 show wlan ip mapping Description This command shows the table for the IP mapping The table contains the assignment of MAC address and IP address of the devices for which the client makes WLAN access possible Note This page is only available for clients or access points in client mode Requirement You are in the User E...

Page 135: ...sult The WLAN statistics are reset Further notes You display the WLAN statistics tables with the show wlan statistics command 6 1 3 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in ...

Page 136: ...ows cli config wlan Further notes You exit the particular WLAN Configuration mode with the end or exit command 6 1 4 Commands in the WLAN configuration mode This section describes commands that you can call up in the WLAN configuration mode In the Global Configuration mode enter the wlan command to change to this mode Commands relating to other topics that can be called in the WLAN configuration m...

Page 137: ...e following parameters device mode ap client The parameters have the following meaning Parameters Description ap Mode Access Point mode default setting client Mode Client mode Result The mode of the device is specified Note If you change the operating mode the device needs to be restarted Before the device restarts a prompt for confirmation is displayed If you confirm the prompt the device starts ...

Page 138: ...all up the command with the following parameters commit mode auto manual The parameters have the following meaning Parameters Description auto Each change to the WLAN settings is automatically applied and is immediately effec tive manual The changes are accepted but are still not active The changes only take effect when you confirm the changes with the commit wlan settings command Result The commi...

Page 139: ...device Requirement Manual is set in Commit mode You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call the command without parameter assignment commit wlan settings Result The changes are confirmed and effective See also commit mode Page 138 6 1 4 4 country Description With this command you specify the country in which the device will be used Requiremen...

Page 140: ... re quired country Result The country is specified for the device Further notes You display the setting with the show wlan device command See also show wlan device Page 126 6 1 5 Commands in the WLAN Interface configuration mode This section describes commands that you can call up in the WLAN Interface Configuration mode Depending on the Interface selected various command sets are available In the...

Page 141: ...meaning Parameters Description all All permitted channels are entered in the list none Access point All channels except for the following channels are deleted Operative channel Alternative DFS channel If Auto is set for the channel the list is deleted and the first valid channel of the selected frequency band is applied Client The list is deleted and the first valid channel of the selected frequen...

Page 142: ... in the list are overwritten Result The list of permitted channels has been created Further notes You display the list of valid channels with the show wlan allowed channels wlan 0 X command The Allowed channels only function is activated by the wlan allowed channels only command See also wlan allowed channels only Page 142 6 1 5 2 wlan allowed channels only Description With this command you enable...

Page 143: ...age 143 6 1 5 3 no wlan allowed channels only Description With this command you disable the Use allowed channels only function This is the default setting Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan allowed channels only Result The function is disab...

Page 144: ...You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan alternative channel show channels number 0 auto The parameters have the following meaning Parameters Description Values range of values show channels Lists all available channels number Number of the alternative chan...

Page 145: ...quirement The IEEE 802 11n transmission standard is enabled You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan ampdu Result The sending of AMPDU data packets is enabled Further notes You display the setting with the show wlan advanced 11n wlan 0 X command You disable the...

Page 146: ...erface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan ampdu Result The sending of AMPDU data packets is disabled Further notes You display the setting with the show wlan advanced 11n wlan 0 X command You enable the function with the wlan ampdu command default setting See also wlan ampdu P...

Page 147: ...r has the following meaning Parameters Description Values or range of values bytes Size of the AMPDU data packet in bytes 1024 65535 Default 50000 Result The size for the AMPDU data packets is specified Further notes You display the setting with the show wlan advanced 11n wlan 0 X command 6 1 5 8 wlan ampdu frames limit Description With this command you specify the number of individual data packet...

Page 148: ...and 6 1 5 9 wlan antenna additional attenuation Description With this command you specify the additional attenuation caused for example by an additional splitter Using the show wlan basic command check whether or not the current WLAN settings violate the permitted transmit power restrictions TX Power Check of the selected country Requirement You are in the Interface Configuration mode of the WLAN ...

Page 149: ...scription With this command you configure the cable length between the device and the external antenna Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan antenna cable length index 1 meter 0 30 The parameters have the following meaning Parameter Descripti...

Page 150: ...llows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan antenna gain 2 4GHz index 1 dBi 0 30 The parameters have the following meaning Parameter Description Values or range of values index Antenna connector 1 gain value Antenna gain in decibels isotropic dBi 0 30 0 antenna is not connected Result The antenna gain is specified Further notes You show the set antenn...

Page 151: ... have the following meaning Parameter Description Values or range of values index Slot no of the interface 1 gain value Antenna gain in decibels iso tropic dBi 0 30 0 antenna is not connected Result The antenna gain is specified Further notes You show the set antenna gain with the show wlan antennas wlan 0 X command 6 1 5 13 wlan antenna type Description With this command you specify which antenna...

Page 152: ...nna indexes available on the on the device with the wlan antenna type show types command Result The antenna type is specified 6 1 5 14 wlan any ssid Client Description With this command you enable the Any SSID function This setting is activated as default In client mode the access point attempts to connect to the network with the best transmission quality and that has suitable security settings Th...

Page 153: ...age 188 6 1 5 15 no wlan any ssid client Description With this command you disable the Any ssid function The client attempts to connect to the access point from the SSID list that provides the best transmission quality and on which the Broadcast SSID option is disabled Note This command is only available in the client mode Requirement An active SSID is available You are in the Interface configurat...

Page 154: ...ecify the Interval at which the client scans for further access points Note This command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan background scan interval ms 300 60000 The parameter has the following meaning ...

Page 155: ...i config if wlan 0 X Syntax Call up the command with the following parameters wlan background scan mode disable idle always The parameters have the following meaning Parameters Description disable As long as the client is connected it does not scan for any other access points idle If there is no data traffic for a certain time the device scans for a different access point always Continuous scannin...

Page 156: ... existence Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan beacon interval ms 40 1000 The parameter has the following meaning Parameters Description Values or range of values ms Length of the int...

Page 157: ...ration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan channel show channels number 0 auto The parameters have the following meaning Parameters Description Values range of values show channels Lists the available channels number Channel number If you want the access point to search for a free channel i...

Page 158: ...meters wlan client mac mode auto manual own l2t The parameters have the following meaning Parameters Description auto The client automatically adopts the source MAC address of the first frame that it receives over the Ethernet interface This parameter is set as default manual Enter the MAC address with the wlan client manual mac command own The client uses the MAC address of the Ethernet interface...

Page 159: ...dress is assigned to the client manually You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan client mac address mac address The parameter has the following meaning Parameters Description Values or range of values mac address MAC address of the client aa aa aa aa aa aa...

Page 160: ... point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X The transmission standard IEEE 802 11a b g n is set Syntax Call the command without parameter assignment wlan data rates 11abg selected only Result The function is enabled Further notes You display the setting with the show wlan data rates command You di...

Page 161: ...ndard IEEE 802 11a b g n is set Syntax Call the command without parameter assignment no wlan data rates 11abg selected only Result The function is disabled The data transmission speed is adapted automatically Further notes You display the setting with the show wlan data rates command You enable the function with the wlan data rates 11abg selected only command You configure the transmission standar...

Page 162: ...setting with the show wlan data rates command You disable the function with the no wlan data rates 11n selected only command You configure the data transmission speeds with the wlan data rate 11n command You configure the transmission standard with the wlan mode command 6 1 5 25 no wlan data rates 11n selected only access point Description With this command you enable disable the automatic selecti...

Page 163: ... 11abg selected only command You configure the transmission standard with the wlan mode command 6 1 5 26 wlan data rate 11abg access point Description With this command you assign data transmission speeds to the required WLAN interface The access point will then use only the selected data transmission speeds for communication with the clients Note This command is available only in access point mod...

Page 164: ... speeds are assigned to the WLAN inter face none Only the first available data transmission speed is assigned to the WLAN interface The other data transmission rates are deselected basic The data transmission speed entered in the rate parameter is de clared as Basic The basic parameter can only be called in conjunction with the pa rameters add del all and none Note You need to assign at least one ...

Page 165: ...standard IEEE 802 11n or IEEE 802 11n only is set The Use selected data rates only function is enabled Syntax Call up the command with the following parameters wlan data rate 11n show MCS indexes add del index all none The parameters have the following meaning Parameters Description show MCS indexes Shows a list of the available data transmission speeds MCS indexes add The MCS index is assigned to...

Page 166: ...with the wlan mode command 6 1 5 28 wlan data rate 11abg defaults access point Description You can reset the selection to the default setting with this command Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X The transmission standard IEEE 802 11a b g n is s...

Page 167: ...tting with this command Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X The transmission standard IEEE 802 11a b g n is set The Use selected data rates only function is enabled Syntax Call the command without parameter assignment wlan data rate 11n defaults...

Page 168: ...y switches to an alternative channel Requirement Frequency band 5 GHz is used In client mode a mixed frequency band mode is possible 2 4 5 GHz You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan dfs Result The DFS function is enabled Further notes You display the setting ...

Page 169: ...ignment no wlan dfs Result The DFS function is enabled Further notes You display the setting with the show wlan basic wlan 0 X command You enable the function with the wlan dfs command See also wlan dfs Page 168 6 1 5 32 wlan dtim access point Description With this command you configure the DTIM interval The DTIM interval 1 15 specifies the number of beacons to be sent before the access point send...

Page 170: ...es 1 15 DTIM interval after which the collected pack ets are sent to the client 1 15 Default 1 Result The DTIM interval is configured Further notes You display the setting with the show wlan advanced wlan 0 X command 6 1 5 33 wlan ssid table edit client Description With this command you change or delete an entry in the SSID list Note This command is only available in the client mode Requirement Yo...

Page 171: ...lt The corresponding index entry in the SSID list is changed or deleted Further notes You display the list with the show wlan ssid table wlan 0 X command You delete an SSID entry with the wlan ssid table edit index 1 4 delete command 6 1 5 34 wlan force roaming eth down access point Description If the wired Ethernet interface is no longer available cable break connector removed a client connected ...

Page 172: ...ce roaming eth down access point Description With this command you disable roaming if the connection aborts on the Ethernet interface This setting is activated as default Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parame...

Page 173: ... Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan fragmentation threshold bytes 256 2346 The parameter has the following meaning Parameters Description Values or range of values bytes Packet size in bytes 256 2346 Default 2346 Result The packet size is specified Further notes You...

Page 174: ...ollowing meaning Parameter Description Default setting 2 4 Frequency band 2 4 GHz WLAN1 2 4 GHz 5 Frequency band 5 2 4 9 5 6 5 8 GHz Result The frequency band for the WLAN interface is specified Further notes You display the setting with the show wlan basic wlan 0 X command 6 1 5 38 wlan frequency band client Description With this command you specify the frequency band for the WLAN interface Note ...

Page 175: ...GHz 5 Frequency band 5 2 4 9 5 6 5 8 GHz Result The frequency band for the WLAN interface is specified Further notes You display the setting with the show wlan basic wlan 0 X command 6 1 5 39 wlan guard interval access point Description With this command you specify the send pause that must be kept to between two transferred OFDM symbols Note This command is available only in access point mode Req...

Page 176: ... and the send pause set Further notes You display the setting with the show wlan advanced 11n wlan 0 X command 6 1 5 40 wlan ht channel width access point Description With this command you specify the channel bandwidth With IEEE 802 11n data can be transferred via two directly neighboring channels channel bonding The two 20 MHz channels are put together to form one channel with 40 MHz channel band...

Page 177: ...hannel bandwidth 40 MHz and frequency band 2 4 GHz If the access point detects another access point on the configured channel or on neighboring channels the access point changes the channel bandwidth from 40 MHz to 20 MHz If you set a free channel on the access point the access point uses the channel bandwidth 40 MHz Result The channel bandwidth is set Further notes You display the setting with th...

Page 178: ...and you specify the transmit power of the device It may be necessary to reduce the transmit power when using antennas to avoid exceeding the maximum legal transmit power Reducing the transmit power effectively reduces cell size Note The maximum possible transmit power varies depending on the channel and data rate For more detailed information on transmit power refer to the documentation Characteri...

Page 179: ...es or range of values dBm Transmit power in decibel milliwatts dBm 5 20 Default 20 Result The transmit power is specified Further notes You display the setting with the show wlan basic wlan 0 X command 6 1 5 43 wlan mode access point Description With this command you specify the transmission standard Note This command is available only in access point mode Requirement You are in the Interface Conf...

Page 180: ...IEEE 802 11g 2 4 GHz Is downwards compatible with IEEE 802 11b n IEEE 802 11n 2 4 GHz 5 GHz Is downwards compatible with IEEE 802 11a and IEEE 802 11g n only IEEE 802 11n 2 4 GHz 5 GHz Is not downwards compatible with IEEE 802 11a and IEEE 802 11g Depending on the current configuration some settings are not possible In this case a message to this effect is displayed Result The transmission standar...

Page 181: ...ansmis sion standard for 2 4 GHz Use the parameter if the client operates in dual frequency mode 5 Optional You can use the parameter in conjunction with auto and n This only takes into account the transmis sion standard for 5 GHz Use the parameter if the client operates in dual frequency mode mode Value corresponding to a specific transmission standard auto The transmission standard is detected a...

Page 182: ...n outdoor mode the selection of country dependent channels and the transmit power for operation are restricted for outdoor use Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan outdoor Result The outdoor mode is enabled Further notes You display the setting ...

Page 183: ...e of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan outdoor Result The indoor mode is enabled or the outdoor mode is disabled Further notes You display the setting with the show wlan basic wlan 0 X command You enable the outdoor mode with the wlan outdoor command See also wlan outdoor Page 182 6 1 5 47 wlan ov...

Page 184: ...ter has the following meaning Parameters Description Values or range of values min Time in minutes min 1 7200 Default 120 Result The aging time is specified Further notes You display the setting with the show wlan advanced wlan 0 X command 6 1 5 48 wlan roaming threshold client Description With this command you specify the threshold after which the client roams to the new access point Note This co...

Page 185: ...ifference in field strength is high change to the AP with the stronger sig nal Result The threshold is specified Further notes You display the setting with the show wlan client wlan 0 X command 6 1 5 49 wlan rts cts threshold Description With this command you specify the packet size starting at which RTS CTS Request To Send Clear To Send will be used Requirement You are in the Interface Configurat...

Page 186: ...the Global Configuration mode enter the interface vapX 0 Y command to change to this mode If you exit the VAP Interface Configuration mode with the exit command you return to the Global Configuration mode If you exit the VAP Interface Configuration mode with the end command you return to the Privileged EXEC mode 6 1 6 1 vap wds id access point Description With this command you set the WDS ID for t...

Page 187: ...of 32 characters long Result The WDS ID for the VAP interface is set Note WDS IDs longer than 32 characters are truncated at 32 characters Further notes You display the setting with the show wlan vap vap X 0 Y command 6 1 6 2 vap ssid access point Description With this command you configure the SSID for the relevant VAP interface Note This command is available only in access point mode Requirement...

Page 188: ...es vap ssid H a l l o Result The SSID for the VAP interface is configured Further notes You display the setting with the show wlan vap vap X 0 Y command 6 1 6 3 vap broadcast ssid access point Description With this command you enable the Broadcast SSID function The SSID is sent in the frame of the access point and is visible for other devices This means that clients on which the Any SSID option is...

Page 189: ... the frame of the access point This means that the SSID is not visible for other devices Only stations that know the SSID of the access point and that are configured with it can connect to the access point The Any SSID option must be disabled on these clients Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The co...

Page 190: ... WDS Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment vap wds only Result You have specified who the VAP interface connects to Further notes You display the setting with the show wlan vap vap X 0 Y command ...

Page 191: ... as default Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment no vap wds only Result You have specified who the VAP interface connects to Further notes You display the setting with the show wlan vap vap X 0 ...

Page 192: ...mmand you return to the Privileged EXEC mode 6 1 7 1 wds partner id type access point Description With this command you specify whether the WDS partner is detected by the access point by the MAC address or the WDS ID Note This command is available only in access point mode Requirement You are in the Interface Configuration mode for the WDS interface The command prompt is as follows cli config if w...

Page 193: ...his command you enter the MAC address of the WDS partner Note This command is available only in access point mode Requirement You are in the Interface Configuration mode for the WDS interface The command prompt is as follows cli config if wdsX 0 Y Syntax Call up the command with the following parameters wds partner mac mac address The parameter has the following meaning Parameters Description mac ...

Page 194: ...mand is available only in access point mode Requirement You are in the Interface Configuration mode for the WDS interface The command prompt is as follows cli config if wdsX 0 Y Syntax Call up the command with the following parameters wds partner wds id wds id The parameter has the following meaning Parameters Description wds id WDS ID of the WDS partner Result The WDS ID is specified Further note...

Page 195: ...n the Interface Configuration mode for the WDS interface The command prompt is as follows cli config if wdsX 0 Y Syntax Call up the command with the following parameters wds conncection over vapX 0 Y The parameter has the following meaning Parameter Description Values or range of values wdsX 0 Y Interface Enter a valid interface For information on identifiers of addresses and interfaces refer to t...

Page 196: ...ou are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up the command with the following parameters show dot1d mac address table address aa bb cc dd ee ff interface interface type interface id The parameters have the following meaning Parameter Description Values address Keyword for a MAC address aa bb cc dd ee ff MAC address interface Keyword for a an interface descri...

Page 197: ...a aa aa interface interface type interface id The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN or VLAN range vlan range Number of the addressed VLAN or VLAN range 1 4094 address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a val...

Page 198: ...t vlan vlan id 1 4094 The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN vlan id Number of the addressed VLAN 1 4094 If you do not select any parameter from the parameter list the total number of entries is displayed for all VLANs Result The number of MAC addresses for the selected VLAN is displayed 6 2 1 4 show mac address table dynamic un...

Page 199: ... for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 If you do not select any parameter from the parameter list the...

Page 200: ...n range Number of the addressed VLAN or VLAN range 1 4094 summary Shows a summary of the VLANs If you do not select any parameter from the parameter list the entries of all available interfaces are displayed Result The information for the selected VLAN is displayed 6 2 1 6 show vlan device info Description This command shows all the global information that is valid for all VLANs Requirement You ar...

Page 201: ...ith the following parameters show vlan learning params vlan vlan range The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN or VLAN range vlan range Number of the addressed VLAN or VLAN range 1 4094 If you do not select any parameter from the parameter list the entries of all available interfaces are displayed Result The settings for the auto...

Page 202: ... all available interfaces are displayed Result The information about the ports is displayed 6 2 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can ...

Page 203: ... address table aging time command You disable the Aging function with the no mac address table aging command 6 2 2 2 no mac address table aging Description With this command you disable the Aging function Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no mac address table aging Result The Aging function is...

Page 204: ...Ns Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters vlan vlan id 1 4094 The parameter has the following meaning Parameter Description Range of values vlan id Number of the addressed VLAN 1 4094 Do not enter any leading zeros with the number of the VLAN Result The VLAN is created You are now in ...

Page 205: ...scription Range of values note vlan id Number of the addressed VLAN 2 4094 The VLAN with number 1 cannot be deleted Result The VLAN is deleted Further notes With the vlan command you create a VLAN on the device You can display information about the VLAN with the show vlan command 6 2 2 5 base bridge mode Description With this command you configure whether or not the device is configured as a bridg...

Page 206: ...r a virtual bridged LAN Result The device mode is configured Further notes You display the status of this function and other information with the show vlan device info command 6 2 2 6 mgmt vlan Description With this command you change the agent VLAN ID You can only use VLANs that have already been configured Note Changing the agent VLAN ID If the configuration PC is connected directly to the devic...

Page 207: ... up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return ...

Page 208: ... factory the following defaults apply The function is configured for all Result The setting is enabled Further notes You can display the status of this function and other information with the show vlan port config command 6 2 3 2 switchport access vlan Description With this command you assign an VLAN to an interface and configure the port VLAN identifier PVID for it Requirement You are in the Inte...

Page 209: ...ort config command 6 2 3 3 no switchport access vlan Description With this command you reset the setting for the port VLAN identifier PVID for an interface to the default value The default value is 1 Requirement You are in the interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport access vlan Result The setting is reset ...

Page 210: ...ilter Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters switchport ingress filter Result The ingress filter is activated Further notes You disable the filter with the no switchport ingress filter command You can display the status of the ingress filter and other settings with the show vlan port config c...

Page 211: ...ilter and other settings with the show vlan port config command 6 2 3 6 switchport priority default Description With this command you configure the priority default for the interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters switchport priority default 0 7 The parameter has the fol...

Page 212: ...alue is 0 Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport priority default Result The setting is reset to the default value Further notes You configure the priority default with the switchport priority default command You display this setting and other information with the show vlan port...

Page 213: ...he addressed VLAN 1 4094 Result The PVID is configured Further notes You can reset the setting to the default with the no switchport pvid command You configure the VLAN ID with the switchport access vlan command You display the setting and other information with the show vlan port config command 6 2 3 9 no switchport pvid Description With this command you reset the setting for the port VLAN identi...

Page 214: ... that you can call up in the VLAN Configuration mode In the Global Configuration mode enter the vlan command to change to this mode When doing this you need to replace the placeholders with the relevant VLAN ID Commands relating to other topics that can be called in the VLAN Configuration mode can be found in the relevant sections If you exit the VLAN Configuration mode with the exit command you r...

Page 215: ...ame that will be assigned to the VLAN max 32 characters Result The VLAN is assigned a name Further notes You delete name assignment for a VLAN with the no name command 6 2 4 2 no name Description With this command you delete the name assignment for a VLAN Requirement You are in the VLAN configuration mode The command prompt is as follows cli config vlan Syntax Call the command without parameters n...

Page 216: ...ctions Untagged ports These ports transfer data packets without a VLAN marking Forbidden ports These ports are not used for communication in a VLAN The tagged and untagged ports specified with this command are used for outgoing data traffic Requirement You are in the VLAN Configuration mode The command prompt is as follows cli config vlan Syntax Call up the command with the following parameters po...

Page 217: ...ord for interfaces or ports that transfer data packets without VLAN marking all Specifies that all interfaces or ports are set to untagged forbidden Keyword for forbidden interfaces or ports name Keyword for the name assignment vlan name Name of the VLAN max 32 characters Result The settings are enabled Further notes You display details of the function with the show vlan command You reset the sett...

Page 218: ...lues interface type Type or speed of the interface Enter a valid interface a b 0 c Port no of the interface untagged Keyword for interfaces or ports that transfer data packets without VLAN marking all Specifies that all interfaces or ports are set to untagged forbidden Keyword for forbidden interfaces or ports name Keyword for the name assignment vlan name Name of the VLAN max 32 characters For in...

Page 219: ... you should take particular care because a bad configuration of this function can have serious negative affects on the network 6 3 1 The show commands 6 3 1 1 show spanning tree Description This command shows the settings of the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with...

Page 220: ...nterface show spanning tree root show spanning tree mst 6 3 1 2 show spanning tree active Description This command shows the settings for the active ports of the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show spanning tree active detail The para...

Page 221: ...time id max age protocol priority detail The parameters have the following meaning Parameter Description address Shows the MAC address of the bridge forward time Shows the time that the bridge is in the listening mode when changing from the blocking mode to the learning mode hello time Shows the time after which the bridge sends configuration frames BPDUs id Shows the ID of the bridge max age Show...

Page 222: ...i Syntax Call the command without parameters show spanning tree detail Result The detailed settings for the spanning tree function are displayed 6 3 1 5 show spanning tree interface Description This command shows the settings of the ports for the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call u...

Page 223: ...Shows whether spanning tree re stricted role is enabled restricted tcn Shows whether spanning tree re stricted tcn is enabled state Shows the status of the interface stats Shows the counters of the various BPDU transmissions detail Shows detailed information about the spanning tree settings of the interface For information on identifiers of addresses and interfaces refer to the section Interface i...

Page 224: ...st configuration Description This command shows various settings for an instance of the Multiple Spanning Tree Protocol Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show spanning tree mst configuration Result The settings of an instance of the Multiple Spanning Tree protocol are displ...

Page 225: ...e the following meaning Parameter Description Range of values instance id Number of the instance or range of instances whose settings are displayed 1 64 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface stats Shows the number of incoming and outgoing packets for each path of the interface hello time Shows the intervals at whic...

Page 226: ...rd time id max age port priority detail The parameters have the following meaning Parameter Description address Shows the MAC address of the root bridge cost Shows the costs of the connection to the root bridge forward time Shows the time that the bridge is in the listening mode when changing from the blocking mode to the learning mode id Shows the ID of the root bridge max age Shows the maximum a...

Page 227: ...ers are reset 6 3 3 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with ...

Page 228: ...ion is enabled You disable the spanning tree function with the no spanning tree command You can display the status of this function and other information with the show spanning tree detail command You can display information about active ports with the show spanning tree active command 6 3 3 2 no spanning tree Description With this command you disable the spanning tree function Requirement You are...

Page 229: ... With this command you configure the compatibility version of the protocol that will be used by the spanning tree function Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters spanning tree compatibility stp rst mst The parameters have the following meaning Parameter Description Range of values not...

Page 230: ... active command 6 3 3 4 no spanning tree compatibility Description With this command you reset the compatibility version of the protocol of the spanning tree function to the default value The default value is MST Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no spanning tree compatibility Result The compa...

Page 231: ...i config Syntax Call the command without parameters spanning tree l2t auto edge Result The automatic detection is enabled Further notes You disable the automatic detection with the no spanning tree l2t auto edge command You can display the status of this function with the show spanning tree l2t edgecommand 6 3 3 6 no spanning tree l2t auto edge Description With this command you disable automatic d...

Page 232: ... tree l2t edge Description With this command you specify that an end device can be located at a layer 2 tunnel port Otherwise a reconfiguration of the network will be triggered whenever a link to this port is modified The L2T clients should be interconnected Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters s...

Page 233: ...g Syntax Call the command without parameters no spanning tree l2t edge Result The setting is disabled Further notes The automatic discovery of a bridge on the interface is disabled with the spanning tree l2t edge command You can display the status of this function with the show spanning tree l2t edgecommand 6 3 3 9 spanning tree mst configuration Description With this command you change to the MST...

Page 234: ... the end or exit command 6 3 3 10 spanning tree mst instance id root Description With this command you specify whether the device is a root bridge primary or a substitute root bridge secondary Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters spanning tree mst instance id instance id 1 64 root p...

Page 235: ...condary takes over the task of the root bridge without delay The priority is set to the value 28672 Result The function of the device is specified Further notes You disable the root bridge with the no spanning tree mst instance id root command You display this setting and other information with the commands that start with show spanning tree 6 3 3 11 no spanning tree mst instance id root Descripti...

Page 236: ...es hops that a path can run through in an MST Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters spanning tree mst max hops value 6 40 The parameter has the following meaning Parameter Description Range of values note value Maximum number of hops that a path can run through in an MST 6 40 Default...

Page 237: ...ree mst max hops Result The setting for the maximum number of nodes is reset to the default value Further notes You can configure the setting for the maximum number of nodes with the spanning tree mst max hops command You display this setting and other information with the show spanning tree mst configuration command 6 3 3 14 spanning tree priority Description With this command you configure the p...

Page 238: ...ity Keyword for the priority value Value for the priority 0 61440 Default 32768 You can only change the value for the priority in the steps of 4096 Result The priority of the device is configured Further notes You can reset the setting to the default with the no spanning tree priority command You display this setting and other information with the commands that start with show spanning tree 6 3 3 ...

Page 239: ...the spanning tree priority command You display this setting and other information with the commands that start with show spanning tree 6 3 3 16 Time settings for the Spanning Tree protocol spanning tree Description With this command you configure the various time settings of the spanning tree function With the forward time option you configure the time after which a port changes its spanning tree ...

Page 240: ... Default 15 hello time Keyword for the time after which the bridge sends its configu ration BPDUs seconds Time after which they are sent 1 2 Default 2 max age Keyword for the time after which the information of the BPDUs becomes invalid seconds Maximum age of the BPDUs in seconds 6 40 Default 20 Note Dependencies when setting the timing If you specify the time settings for spanning tree you need t...

Page 241: ...s follows cli config Syntax Call up the command with the following parameters no spanning tree forward time hello time max age The parameters have the following meaning Parameters Description forward time Time after which a port changes its spanning tree status from Blocking to Forwarding hello time Time after which the bridge sends its configuration BPDUs max age Time after which the information ...

Page 242: ...eged EXEC mode 6 3 4 1 spanning tree Description With this command you configure the various properties of the spanning tree function With the cost option you configure the port costs used to calculate the lowest cost path With the disable option you disable the interface for the spanning tree function With the link type option you configure the connection status of the following network segment T...

Page 243: ... path costs is not enabled 200000 for physical interfaces 199999 for port channels disable disables the interface for spanning tree Default The spanning tree function is enabled on the interface link type Connection status of the following network segment point to point shared Default point to point The connection is configured as full duplex shared in all other cases portfast Enables the PortFast...

Page 244: ...calculation of the path costs is not enabled 200000 for physical interfaces 199999 for port channels disable The spanning tree function is enabled on the interface link type point to point The connection is configured as full duplex shared in all other cases portfast disabled port priority 128 Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Sy...

Page 245: ...nd several times Result The selected setting was reset to the default value Further notes You configure the setting with the spanning tree command properties You display these settings and other information with the commands that start with show spanning tree 6 3 4 3 spanning tree auto edge Description With this command you enable automatic discovery of a bridge connected to the interface Requirem...

Page 246: ...the interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no spanning tree auto edge Result The automatic discovery of a bridge on the interface is disabled Further notes The automatic discovery of a bridge on the interface is disabled with the spanning tree auto edge command 6 3 4 5 spanning tree...

Page 247: ...s is ena bled for the port Result The BPDU transmit status is configured 6 3 4 6 spanning tree bpdu receive Description With this command you enable or disable the BPDU receive status at the port Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters spanning tree bpdu receive enabled disabled ...

Page 248: ...the port Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters spanning tree bpdu transmit enabled disabled The parameters have the following meaning Parameter Description Range of values note enabled BPDU packets are transmitted at the port Default enabled disabled BPDU packets are not transm...

Page 249: ...ode The command prompt is as follows cli config if Syntax Call up the command with the following parameters spanning tree mst instance id 1 64 cost 0 200000000 port priority 0 240 disable The parameters have the following meaning Parameter Description Range of values note instance id Number of the addressed instance 1 64 cost Costs of the port for calculating the lowest cost path 0 200000000 Defau...

Page 250: ... default values are as follows Parameter Default value cost 200000 for physical interfaces 199999 for port channels port priority 128 disable The Multiple Spanning Tree function is enabled on the interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters no spanning tree mst instance id 1...

Page 251: ...se settings and other information with the commands that start with show spanning tree 6 3 4 10 spanning tree mst hello time Description With this command you configure the Hello time after which the bridge sends its configuration frames BPDUs A change to this value applies to all MST instances active on this interface Requirement You are in the Interface Configuration mode The command prompt is a...

Page 252: ...nning tree mst hello time Description With this command you reset the hello time after which the bridge sends its configuration BPDUs to the default value The default value is 2 seconds Requirement You are in the interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no spanning tree mst hello time Result The setting for the hello tim...

Page 253: ...ivileged EXEC mode Requirements for changing to this mode MSTP is enabled Base bridge mode 802 1Q VLAN Bridge Compatibility mode MSTP 6 3 5 1 instance Description With this command you assign a range of VLANs to an MST instance Requirement You are in the MSTP configuration mode The command prompt is as follows cli config mst Syntax Call up the command with the following parameters instance instanc...

Page 254: ... an MST instance or delete the MST instance Requirement You are in the MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call up the command with the following parameters no instance instance id 1 64 vlan vlan range The parameters have the following meaning Parameter Description Range of values note instance id Number of the MST instance 1 64 vlan Keyword for a VLAN co...

Page 255: ...r the MST region Requirement You are in the MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call up the command with the following parameters name region name The parameter has the following meaning Parameter Description Range of values note region name Name of the MST region max 32 characters The default value of the name is the MAC address of the device Result The ...

Page 256: ... in the MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call the command without parameters no name Result The name is reset to the default value Further notes You configure the name of the MST region with the name command You display this setting and other information with the show spanning tree mst configuration command 6 3 5 5 revision Description With this comman...

Page 257: ...The MST region is assigned a revision number Further notes You delete a revision number with the no revision command You display this setting and other information with the show spanning tree mst configuration command 6 3 5 6 no revision Description With this command you reset the revision number of the MST region to the default value The default value is 0 Requirement You are in the MSTP Configur...

Page 258: ... 11n Command Line Interface 258 Configuration Manual 11 2014 C79000 G8976 C351 03 Further notes You assign a revision number to the MST region with the revision command You display this setting and other information with the show spanning tree mst configuration command ...

Page 259: ...and shows an overview of the DCP forwarding behavior on one or all interfaces Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show dcp forwarding port interface type interface id The parameters have the following meaning Parameter Description Range of values note port Keywo...

Page 260: ...ons are displayed Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show dcp server Result The overview of the status of the DCP function and access rights is displayed 7 1 1 3 show ip route Description This command shows the routes currently being used Requirement You are in the User EXEC...

Page 261: ...an address range using the subnet mask 8 16 or 24 connected Shows the direct connections static Shows the static connections Result The routing table is displayed 7 1 1 4 show ip telnet Description This command shows the admin status and the port number of the Telnet server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax C...

Page 262: ...llows cli or cli Syntax Call the command without parameters show ip dns Result Information on the DNS client is displayed 7 1 1 6 show ip dns cache Description This command shows the content of the DNS cache The DNS cache buffers replies of the DNS server for a brief time This allows other queries for the same name to be replied to directly without sending another query to the DNS server Requireme...

Page 263: ...Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip dns name server Result The table with the information about the DNS servers is displayed 7 1 1 8 show ip dns statistics Description This command shows DNS statistics It provides information about the type and number of queries to the DNS server Requirement You are in the User EXEC mo...

Page 264: ...topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 7 1 2 1 telnet server Description With this command you enable the Telnet server Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Cal...

Page 265: ...mmand without parameters no telnet server Result The Telnet server is disabled Further notes You enable the Telnet server with the telnet server command 7 1 2 3 ip echo reply Description To check the availability of a network node packets of the Internet Control Message Protocol ICMP can be sent to it These packets of type 8 request the recipient to send a packet back to the sender echo reply With...

Page 266: ...ing of this function and other information with the show ip informationcommand 7 1 2 4 no ip echo reply Description With this command you disable the ICMP echo reply messages Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no ip echo reply Result ICMP echo reply messages are disabled Further notes You chang...

Page 267: ...h the following parameters ip route gateway The parameter has the following meaning Parameter Description Range of values gateway Specifies the IP address of the gateway enter a valid IP address Result The entry is configured Further notes You delete an entry from the IP routing table with the no ip route command You display the IP routing table with the show ip route command 7 1 2 6 no ip route D...

Page 268: ...om the IP routing table with the ip route command You display the IP routing table with the show ip route command 7 1 2 7 dcp server Description With this command you configure the read and write permissions for the DCP server and enable it Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters dcp s...

Page 269: ...er is enabled Further notes You disable the DCP server with the no dcp server command 7 1 2 8 no dcp server Description With this command you disable the DCP server Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no dcp server Result The DCP server is disabled Further notes You enable and configure the DCP ...

Page 270: ...lobal configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ip domain lookup Result The DNS client of the device is enabled and when necessary sends queries to the DNS server 7 1 2 10 no ip domain lookup Description This command disables the DNS client of the device Requirement You are in the Global configuration mode The command prompt is as fol...

Page 271: ...st Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters ip name server ipv4 ucast_addr index id 1 3 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for IPv4 ucast_addr IP address of the DNS server Enter a valid IP address index Keyword for the index...

Page 272: ...is as follows cli config Syntax Call up the command with the following parameters no ip name server index id 1 3 The parameters have the following meaning Parameter Description Range of values note index Keyword for the index id Index of the DNS server 1 3 Result The specified entries for the DNS servers were deleted 7 1 2 13 ip domain used server Description This command specifies which DNS serve...

Page 273: ...the interface configuration mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant secti...

Page 274: ...ber of 1 bits 0 32 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result The IP address is assigned to the VLAN interface Note Effectiveness of the command The command is effective immediately If you configure the interface via which you access the device the connection will be lost Further notes You delete the settings with th...

Page 275: ...sses Page 23 Result The assignment of the IP address to a VLAN interface is deleted and DHCP is disabled Note Effectiveness of the command The command is effective immediately If you configure the interface via which you access the device you can lose the connection Further notes You configure the setting with the ip address command You display this setting and other information with the show ip i...

Page 276: ...erface command 7 1 3 4 dcp forwarding Description With this command you configure the forwarding behavior of the interface for DCP frames Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters dcp forwarding block forward The parameters have the following meaning Parameter Description block DCP...

Page 277: ...ters of the DHCP client Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip dhcp client stats Result The counters are displayed 7 2 2 show ip dhcp client Description With this command you display the configuration settings of the DHCP client Requirement You are in the User EXEC mode ...

Page 278: ...nterface id The parameters have the following meaning Parameter Description Range of values vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and a...

Page 279: ...ommand and are then in the Privileged EXEC mode again 7 2 4 1 ip dhcp config file request Description If the DHCP config file request option is set the device requests the TFTP address and the name of a configuration file from the DHCP server If the device is restarted following the completed download the configuration settings are read from this file With this command you enable the DHCP config f...

Page 280: ... command without parameters no ip dhcp config file request Result The DHCP config file request option is disabled Further notes You enable the DHCP config file request option with the ip dhcp config file request command 7 2 4 3 ip dhcp client mode Description With this command you configure the type of identifier with which the DHCP client logs on with its DHCP server Requirement You are in the Gl...

Page 281: ... the DHCP client is configured 7 3 DHCP server This section describes commands relevant for configuring the DHCP server Requirement The connected devices are configured so that they obtain the IPv4 address from a DHCP server 7 3 1 show ip dhcp server pools Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version De...

Page 282: ...upported Result The configuration of the DHCP server and the DHCP options is displayed 7 3 2 show ip dhcp server bindings Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description This command shows the current assignments of IPv4 addresses of the DHCP server Requirement You are in the User EXEC mode or ...

Page 283: ...ections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 7 3 3 1 ip dhcp server Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you enable the DHCP server on the device Note To avoid conflicts with IPv4 addresse...

Page 284: ... only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you disable the DHCP server on the device Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment no ip dhcp server Result The DHCP server is disabled Fur...

Page 285: ...tion With this command you enable the Probe address with ICMP Echo before offer function The DHCP server checks whether or not the IPv4 address has already been assigned If no reply is received the DHCP server can assign the IPv4 address Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment ip dhcp serv...

Page 286: ...22 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you disable the Probe address with ICMP Echo before offer function Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment no ip dhcp server icmp probe Result The function is disabled Further notes You enabl...

Page 287: ...the DHCPPOOL configuration mode 2 If you call the command ip dhcp server pool with the parameter show interface options you call a variant of the command With this variant you assign an interface to the IPv4 address band and change to the DHCPPOOL configuration mode If the ID of the address IPv4 address band does not yet exist it will be created You then configure the other settings in the DHCPPOO...

Page 288: ... no ip dhcp server pool command 7 3 3 6 no ip dhcp server pool Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you delete the required IPv4 address band Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command ...

Page 289: ...e If you exit the DHCPPOOL Configuration mode with the exit command you return to the Global Configuration mode If you exit the DHCPPOOL Configuration mode with the end command you return to the Privileged EXEC mode 7 3 4 1 lease time Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this co...

Page 290: ... the assigned IPv4 address in seconds 60 31536000 Result The time is configured Further notes You display the setting with the show ip dhcp server pools command 7 3 4 2 network Note The command is only available with the following device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you configure the IPv4 address band from which the D...

Page 291: ...CP options 1 3 6 66 and 67 are created automatically With the exception of option 1 the options can be deleted Further notes You display the setting with the show ip dhcp server pools command You assign an IP address to an interface with the set interface command You configure the DHCP option 67 with the option value string command You configure the DHCP options 3 6 and 66 with the option command ...

Page 292: ... TFTP server name ip adress list IPv4 address or IPv4 address list Enter an IPv4 address With the excep tion of DHCP option 3 you can specify several IPv4 addresses separated by commas int ip Uses IPv4 address of the interface that is assigned to the IPv4 address band Result The DHCP option is created Further notes You display the setting with the show ip dhcp server pools command You disable the ...

Page 293: ...ptions are the DHCP options 1 3 66 and 67 You configure the DHCP options 3 6 and 66 with the command option IP address and the DHCP option 67 with the command option value string Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call up the command with the following parameters option option code value hex dhcp param The paramete...

Page 294: ...0AA0 and 6GK5722 1FC00 0AB0 US version The IPv4 address band is not enabled Description With this command you configure the DHCP option 67 and the name of the boot file as DHCP parameter The DHCP option 67 is created automatically when the IPv4 address band is created Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call up the ...

Page 295: ... command 7 3 4 6 no option Note The command is only available when the following requirements are met SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version The IPv4 address band is not enabled Description With this command you delete the DHCP option with the specified number Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config...

Page 296: ...ing device SCALANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you specify that this IPv4 address band will be used Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call the command without parameter assignment pool enable Result The setting is enabled Note If the IPv4 ad...

Page 297: ...0 0AA0 and 6GK5722 1FC00 0AB0 US version Description With this command you specify that this IPv4 address band will not be used Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call the command without parameter assignment no pool enable Result The setting is disabled Further notes You display the setting with the show ip dhcp s...

Page 298: ...mand with the following parameters set interface vlan vlan id 1 4094 interface type interface id The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information o...

Page 299: ...sible Requirement The assignment has not yet been created You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call up the command with the following parameters static lease mac mac address ip address The parameters have the following meaning Parameter Description Range of values note mac address Unicast MAC address Specify the MAC address aa b...

Page 300: ...t enabled Description With this command you delete the assignment of an IPv4 address to a MAC address Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call up the command with the following parameters no static lease mac mac address The parameter has the following meaning Parameter Description Range of values note mac address Un...

Page 301: ...gs 7 4 1 1 show snmp Description This command shows the status information of SNMP Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp Result The status information is displayed 7 4 1 2 show snmp community Description This command shows the details of the configured of SNMP communi...

Page 302: ... This command shows the SNMP identification number of the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp engineID Result The SNMP identification number of the device is displayed 7 4 1 4 show snmp filter Description This command shows the configured SNMP filters Require...

Page 303: ...is command shows the configured SNMP groups Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp group Result The configured SNMP groups are displayed 7 4 1 6 show snmp group access Description This command shows the rights of the configured SNMP groups Requirement You are in the Us...

Page 304: ... command shows the statistics of the Inform Messages Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp inform statistics Result The statistics of the Inform Messages are displayed 7 4 1 8 show snmp notif Description With this command you display the configured SNMP notification t...

Page 305: ...command shows the configured SNMP target addresses Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp targetaddr Result The configured SNMP target addresses are displayed 7 4 1 10 show snmp targetparam Description This command shows the configured SNMP target parameters Requiremen...

Page 306: ...ption This command shows the settings for the SNMP user Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp user Result The settings for the SNMP user are displayed 7 4 1 12 show snmp viewtree Description This command shows the settings for the SNMP tree views Requirement You are i...

Page 307: ...re terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 7 4 2 1 snmpagent Description With this command you enable the SNMP agent function Requirement You are in the Global c...

Page 308: ...figuration mode The command prompt is as follows cli config Syntax Call the command without parameters no snmpagent Result The SNMP agent function is disabled Further notes You enable the SNMP agent function with the snmpagent command 7 4 2 3 snmp agent version Description With this command you configure whether all SNMP queries or only SNMPv3 queries are processed Requirement You are in the Globa...

Page 309: ...setting is configured 7 4 2 4 snmp access Description With this command you configure the access to an SNMP group Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters snmp access GroupName v1 v2c v3 auth noauth priv read ReadView none write WriteView none notify NotifyView none volatile nonvolatile...

Page 310: ...e type specifies whether the settings remain following a restart volatile volatile The settings are lost after a restart nonvolatile non volatile The settings are retained after a restart The keywords need to be specified If optional parameters are not specified when configuring a group the default value will be used Result The settings for access to an SNMP group are configured Further notes You ...

Page 311: ... parameters have the following meaning Parameter Description Range of values note GroupName Name of the group to which access is deleted max 32 characters Version Selects the version of the protocol used v1 v2c v3 Authentication Selects the authentication method auth noauth priv Result The access to an SNMP group is deleted Further notes You configure the setting with the snmp access command You d...

Page 312: ...parameters have the following meaning Parameter Description Range of values note CommunityIndex Index of the community max 32 characters name Keyword for the name of the communi ty CommunityName Name of the community max 32 characters security Keyword for the security name SecurityName Security name max 32 characters context Keyword for the context name Name Context name max 32 characters Storage ...

Page 313: ...e details of an SNMP community Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp community index CommunityIndex The parameters have the following meaning Parameter Description Range of values note CommunityIndex Name of the community max 32 characters Result The details of an SNMP commun...

Page 314: ...le name Name of the filter profile max 32 characters OIDTree Object ID Path information of the MIB tree mask Keyword for the OID mask OIDMask Mask that filters access to the elements of the MIB tree A series of 0 and 1 separated by dots in keeping with the path infor mation of the MIB tree Specifies whether the filtered elements are used or excluded included excluded specifies whether the settings...

Page 315: ...ou delete a filter Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp filterprofile profile name OIDTree The parameters have the following meaning Parameters Description Range of values profile name Name of the filter profile max 32 characters OIDTree Object ID Path information of the MIB...

Page 316: ...note GroupName Name of the group max 32 characters user Keyword for the user name UserName Name of the user max 32 characters security model specifies which security settings will be used v1 v2c v3 Storage type specifies whether the settings remain following a restart volatile volatile The settings are lost after a restart nonvolatile non volatile The settings are retained after a restart If optio...

Page 317: ...up GroupName user UserName security model v1 v2c v3 The parameters have the following meaning Parameter Description Range of values note GroupName Name of the group max 32 characters user Keyword for the user name UserName Name of the user max 32 characters security model Specifies which security settings are used for sending v1 v2c v3 Result The details of the group are deleted Further notes You ...

Page 318: ...ype Trap Inform volatile nonvolatile The parameters have the following meaning Parameter Description Range of values note NotifyName Name of the SNMP notification max 32 characters tag Keyword for a target key TagName Name of the target key max 32 characters Type Type of the SNMP notification Trap generates a trap Inform generates a log entry or sends an entry to the log server Storage type specif...

Page 319: ...e details of the SNMP notifications Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp notify NotifyName The parameters have the following meaning Parameter Description Range of values note NotifyName Name of the notification max 32 characters Result The details of the SNMP notifications ...

Page 320: ...none volatile nonvolatile port integer 1 65535 Parameter Description Range of values TargetAddressName Name of the target address max 32 characters param Keyword for the parameter name ParamName Name of the parameter max 32 characters ipv4 Keyword for an IP address ip address Value for an IPv4 unicast address Enter a valid IPv4 unicast address fqdn name Keyword for a domain name FQDN 100 Domain na...

Page 321: ...on addresses and interfaces refer to the section Addresses and interface names If optional parameters are not specified when configuring the default values apply Result The SNMP target address is configured Further notes You delete the SNMP target address with the no snmp targetaddr command You display the SNMP target address with the show snmp targetaddr command You configure the SNMP target para...

Page 322: ... command You display the SNMP target address with the show snmp targetaddr command 7 4 2 16 snmp targetparams Description With this command you configure the SNMP target parameters Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters snmp targetparams ParamName user UserName security model v1 v2c v...

Page 323: ...3 Storage type specifies whether the settings remain following a restart volatile volatile The settings are lost after a restart nonvolatile non volatile The settings are retained after a restart Keywords need to be specified If optional parameters are not specified when configuring the default values apply Result The SNMP target parameters are configured Further notes You delete the SNMP target p...

Page 324: ...meters no snmp targetparams ParamName The parameter has the following meaning Parameter Description Range of values note ParamName Name of the SNMP parameter max 32 characters Result The SNMP target parameters are deleted Further notes You change the SNMP target parameters with the snmp targetparams command You display settings of this function with the show targetparam command 7 4 2 18 snmp v1 v2...

Page 325: ...for SNMPv1 and SNMPv2 PDUs with the no snmp v1 v2 readonly command 7 4 2 19 no snmp v1 v2 readonly Description With this command you enable write access for SNMPv1 and SNMPv2 PDUs Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no snmp v1 v2 readonly Result Write access for SNMPv1 and SNMPv2 PDUs is enabled...

Page 326: ...ues note UserName Name of the user max 32 characters auth specifies that authentication takes place and which algorithm is used md5 Message Digest 5 sha Secure Hash Algorithm Default No authentication passwd Password for authentication max 32 characters priv DES specifies that there is encryption Default no encryption passwd Value for the password of the encryp tion max 32 characters Storage type ...

Page 327: ...nd you delete the details of an SNMP user Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp user UserName The parameter has the following meaning Parameter Description Range of values note UserName Name of the user max 32 characters Result The details of the SNMP user are deleted Further...

Page 328: ...ng meaning Parameter Description Range of values note ViewName Name of the SNMP view max 32 characters OIDTree Object ID Path information of the MIB tree mask Keyword for the OID mask OIDMask Mask that filters access to the ele ments of the MIB tree A series of 0 and 1 separated by dots in keeping with the path information of the MIB tree View type Specifies whether the filtered elements are used ...

Page 329: ...ess command 7 4 2 23 no snmp view Description With this command you delete an SNMP view Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp view ViewName OIDTree The parameters have the following meaning Parameter Description Range of values note ViewName Name of the view max 32 characters...

Page 330: ...vers Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events smtp server Result The configured SMTP servers are displayed 7 5 2 show events sender email Description This command shows the configured e mail sender address Requirement You are in the User EXEC mode or in the Privileged ...

Page 331: ...thout parameters show events smtp port Result The configured SMTP port is displayed 7 5 4 Commands in the Events configuration mode This section describes commands that you can call up in the EVENTS configuration mode In the Global configuration mode enter the events command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in...

Page 332: ...FQDN 100 receiver mail address The parameters have the following meaning Parameter Description Note on the range if values ipv4 Keyword for an IP address ucast_addr Value for an IPv4 unicast address Enter a valid IPv4 unicast ad dress fqdn name Keyword for a domain name FQDN 100 Domain name Fully Qualified Domain Name Maximum of 100 characters receiver mail address Name of the recipient max 100 ch...

Page 333: ...arameters no smtp server ipv4 ucast_addr fqdn name FQDN 100 The parameter has the following meaning Parameter Description Range of values ipv4 Keyword for an IPv4 address ucast_addr Value for an IPv4 address Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN 100 Domain name Fully Qualified Domain Name Maximum of 100 characters For information on names of addresses and interfaces r...

Page 334: ...ing parameters sender mail address mail address The parameter has the following meaning Parameter Description Range of values note mail address Email name of the sender max 100 characters Result The e mail name of the sender is configured Further notes You reset the e mail name of the sender with the no sender mail address You display the setting with the show events sender email command 7 5 4 4 n...

Page 335: ...nder email command 7 5 4 5 smtp port Description With this command you configure an SMTP port Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters smtp port smtp port 1 65535 The parameter has the following meaning Parameter Description Range of values note smtp port Value for the SMTP port ...

Page 336: ... you reset the SMTP port to the default The default value is 25 Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call the command without parameters no smtp port Result The SMTP port is reset to the default value Further notes You configure the setting with the smtp port command You display the setting with the show smtp port command ...

Page 337: ...nd prompt is as follows cli or cli Syntax Call the command without parameters show ip http server status Result The status of the HTTP server is displayed 7 6 2 Commands in the Global Configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other ...

Page 338: ...ollows cli config Syntax Call the command without parameters ip http As default the function is enabled Result HTTP is enabled on the device Further notes You can display the setting of this function and other information with the show ip http server statuscommand You deactivate HTTP on the device with the no ip http command 7 6 2 2 no ip http Description With this command you disable HTTP on the ...

Page 339: ... http server statuscommand You enable HTTP with the ip http command 7 7 HTTPS server This section describes commands of the Hypertext Transfer Protocol Secure HTTPS 7 7 1 show ip http secure server status Description This command shows the status of the HTTPS server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the ...

Page 340: ...ode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ssl server cert Result The SSL server certificate is displayed 7 8 ARP This section describes commands of the Address Resolution Protocol ARP 7 8 1 show ip arp Description With this command you display the IP ARP table Requirement You are in the User EXEC mode or in the Pr...

Page 341: ...ype Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface ip address Shows the IP addresses of the entries in the ARP table mac address Shows the MAC addresses of the en tries in the ARP table summary Shows a summary of the entries in the ARP table information Displays information on the ARP con figuration For information on names of addresses a...

Page 342: ...yed 7 9 2 Commands in the Global Configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or...

Page 343: ...nabled on the device Further notes You disable the SSH protocol with the no ssh server command 7 9 2 2 no ssh server Description With this command you disable the SSH protocol on the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no ssh server Result The SSH protocol is disabled on the device Furthe...

Page 344: ...Network protocols 7 9 SSH server SCALANCE W760 W720 to IEEE 802 11n Command Line Interface 344 Configuration Manual 11 2014 C79000 G8976 C351 03 ...

Page 345: ...ries is configured in a MAC address list 8 1 1 show mac address table aging time Description To ensure that the address entries are up to date MAC addresses are only kept in the address table for a specified time This command shows the time after which the MAC addresses are removed from the address table Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is...

Page 346: ...n the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and ar...

Page 347: ...1000000 The parameter has the following meaning Parameters Description Range of values seconds Life of the entry in seconds 10 1000000 At system start or when using the restart command with the option memoryor factory the following defaults apply The function is configured to 300 seconds Result The value of the aging of a dynamically learned entry is configured Further notes You can reset the sett...

Page 348: ...Load control 8 1 Dynamic MAC aging SCALANCE W760 W720 to IEEE 802 11n Command Line Interface 348 Configuration Manual 11 2014 C79000 G8976 C351 03 ...

Page 349: ...ANCE W722 1 RJ 45 MLFB 6GK5722 1FC00 0AA0 and 6GK5722 1FC00 0AA0 US version 9 1 1 show nat client Description This command shows the NAT configuration and the translation list Note This command is only available in the client mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show nat ...

Page 350: ...ileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 9 1 2 1 nat client Description With this command you change to the NAT Configuration...

Page 351: ...iguration mode In the Global Configuration mode enter the nat command to change to this mode If you exit the NAT Configuration mode with the exit command you return to the Global Configuration mode If you exit the NAT Configuration mode with the end command you return to the Privileged EXEC mode 9 1 3 1 nat client Description With this command you configure the translation list for communication f...

Page 352: ...l network enter a valid IPv4 address localportfrom Start port of the local port range enter the start port localportto End port of the local port range enter the end port enable Enables the NAT rule disable Disables the NAT rule Note Global port If the port is already occupied by a local service for example Telnet a warning is displayed In this case avoid using TCP port 23 Telnet port 22 SSH ports...

Page 353: ...to The parameters have the following meaning Parameter Description Values tcp Assignment of TCP for the follow ing global port udp Assignment of UDP for the follow ing global port globalportfrom Start port of the global port range enter the start port globalportto End port of the global port range enter the end port localip IPv4 address of the node in the local network enter a valid IPv4 address l...

Page 354: ...ode The command prompt is as follows cli config nat Syntax Call up the command with the following parameters nat local ip address ip address subnet mask prefix length 0 32 The parameters have the following meaning Parameters Description Values ip address Address of the Ethernet interface enter a valid IP address subnet mask Subnet mask of the local Ethernet enter a valid subnet mask prefix length ...

Page 355: ... parameters nat interface interface type interface id The parameters have the following meaning Parameter Description Values interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 Result NAT is activated for t...

Page 356: ...n mode The command prompt is as follows cli config nat Syntax Call the command without parameters no nat interface Result NAT is disabled Further notes You enable NAT with the nat interface command See also show nat client Page 349 9 1 3 6 nat timeout client Description With this command you configure the time period for the TCP UDP connection If no data exchange takes place the TCP UDP connection...

Page 357: ...he command with the following parameters nat tcp udp timeout seconds The parameters have the following meaning Parameters Description Values tcp TCP connection udp UDP connection seconds Period of time in seconds 1 4294967295 Result The period of time is configured Further notes You show the NAT configuration and the translation list with the show nat command You delete the period of time with the...

Page 358: ... in the NAT Configuration mode The command prompt is as follows cli config nat Syntax Call up the command with the following parameters no nat tcp udp timeout The parameters have the following meaning Parameters Description Values tcp TCP connection udp UDP connection Result The time period for the TCP UDP connection was set to the default setting Further notes You show the NAT configuration and t...

Page 359: ... User rights management This section describes commands for access as administrator and the configuration of the authentication methods 10 1 1 whoami Description This command shows the user name of the logged in user Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters whoami Result The user ...

Page 360: ...mpt is as follows cli Syntax Call the command without parameters show users Result The logged in users are displayed 10 2 WLAN This section describes commands for configuring and managing wireless LANs WLANs Some commands are available only in the access point or in the client mode In these cases the titles have the term access point or client added to them Example wlan mode wlan mode access point...

Page 361: ...parameters show wlan security wlan 0 X vapX 0 Y The parameters have the following meaning Parameter Description Values or range of values wlan 0 X WLAN interface Only available in client mode Enter a valid interface vapX 0 Y VAP interface Only available in Access Point mode Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers...

Page 362: ...radius authenticator address Page 365 wlan security ap radius authenticator max retransmit Page 366 wlan security ap radius authenticator port number Page 367 wlan security ap radius authenticator primary Page 368 no wlan security ap radius authenticator primary Page 369 wlan security ap radius authenticator reauth interval Page 370 wlan security ap radius authenticator reauth mode Page 371 wlan s...

Page 363: ...de This section describes commands that you can call up in the WLAN configuration mode In the Global Configuration mode enter the wlan command to change to this mode Commands relating to other topics that can be called in the WLAN configuration mode can be found in the relevant sections If you exit the WLAN configuration mode with the exitcommand you return to the Global configuration mode If you ...

Page 364: ...s enabled Further notes You disable the RADIUS server with the no wlan security ap radius authenticator command You display the setting with the show wlan security ap radius authenticator command See also no wlan security ap radius authenticator Page 364 show wlan security ap radius authenticator Access Point Page 361 10 2 4 2 no wlan security ap radius authenticator Description With this command ...

Page 365: ...ed Further notes You disable the RADIUS server with the wlan security ap radius authenticator command You display the setting with the show wlan security ap radius authenticator command See also wlan security ap radius authenticator Page 363 show wlan security ap radius authenticator Access Point Page 361 10 2 4 3 wlan security ap radius authenticator address Description With this command you conf...

Page 366: ...s Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters Result The RADIUS server is enabled Further notes You display the setting with the show wlan security ap radius authenticator command See also show wlan security ap radius authenticator Access Point Page 361 10 2 4 4 wlan security ap radius authenticator max retra...

Page 367: ... 254 Number of connection attempts 1 5 Result The maximum number of attempts to establish a connection is configured Further notes You display the setting with the show wlan security ap radius authenticator command See also show wlan security ap radius authenticator Access Point Page 361 10 2 4 5 wlan security ap radius authenticator port number Description With this command you configure the inpu...

Page 368: ...1 2 1 65535 Number of port 1 6553 Result The input port is configured Further notes You display the setting with the show wlan security ap radius authenticator command See also show wlan security ap radius authenticator Access Point Page 361 10 2 4 6 wlan security ap radius authenticator primary Description With this command you configure the RADIUS server as primary server Note This command is av...

Page 369: ...primary server Further notes You disable the setting with the no wlan security ap radius authenticator primary command You display the setting with the show wlan security ap radius authenticator command See also no wlan security ap radius authenticator primary Page 369 show wlan security ap radius authenticator Access Point Page 361 10 2 4 7 no wlan security ap radius authenticator primary Descrip...

Page 370: ...le the setting with the wlan security ap radius authenticator primary command You display the setting with the show wlan security ap radius authenticator command See also wlan security ap radius authenticator primary Page 368 show wlan security ap radius authenticator Access Point Page 361 10 2 4 8 wlan security ap radius authenticator reauth interval Description With this command you configure th...

Page 371: ...play the setting with the show wlan security ap radius authenticator command You configure the local time management with thewlan security ap radius authenticator reauht mode command See also wlan security ap radius authenticator reauth mode Page 371 show wlan security ap radius authenticator Access Point Page 361 10 2 4 9 wlan security ap radius authenticator reauth mode Description With this com...

Page 372: ...ment on the server local Local time management You specify the period of validity with the wlan se curity ap radius authenticator reauth interval command mode Method of time management Result The function is configured Further notes You display the setting with the show wlan security ap radius authenticator command See also wlan security ap radius authenticator reauth interval Page 370 show wlan s...

Page 373: ... the RADIUS server Result The password is configured Further notes You display the setting with the show wlan security ap radius authenticator command See also show wlan security ap radius authenticator Access Point Page 361 10 2 5 Commands in the WLAN Interface configuration mode This section describes commands that you can call up in the WLAN Interface Configuration mode Depending on the Interfa...

Page 374: ...ion With this command you specify the type of authentication Note This command is only available in the client mode Note iPCF or iPCF MC mode enabled If iPCF or iPCF MC mode is enabled only Open System with the encryption method AES is supported in the security settings Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan...

Page 375: ...ng key can be selected as an option To ena ble encryption use the wlan security encryption command shared key A fixed key is stored for authentication wpa Radius WPA authentication wpa psk WPA authentication without RADIUS server wpa2 Radius WPA2 authentication wpa2 psk WPA2 authentication without RADIUS server wpa wpa2 auto Radius WPA and WPA2 authentication wpa wpa2 auto psk WPA and WPA2 authent...

Page 376: ...p the command with the following parameters wlan security cipher auto wep aes tkip The parameters have the following meaning Parameter Description auto TKIP or AES is used depending on the capability of the other station wep WEP Wired Equivalent Privacy A symmetrical stream encryption method with only 40 or 104 bit long keys based on the RC4 algorithm Ron s Code 4 aes AES Advanced Encryption Stand...

Page 377: ...om the key table is used for encryption Note This command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan security default key index 1 4 The parameter has the following meaning Parameters Description Values or range...

Page 378: ... the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan security dot1x check server certificate Result Validation is enabled Further notes You display the settings with the show wlan security wlan 0 X command You disable the validity check with th...

Page 379: ...his command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan security dot1x check server certificate Result Validation is disabled Further notes You display the settings with the show wlan security wlan 0 X command Yo...

Page 380: ...nd prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan security dot1x eap authentication type show types type The parameters have the following meaning Parameters Description Values or range of values show types Lists the available authenti cation methods auto Client offers RADIUS server all methods eap tls Extensible Authentication Protocol Tr...

Page 381: ... in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan security dot1x username string The parameter has the following meaning Parameters Description Values or value table string User name Enter the user name for the RADIUS server You speci...

Page 382: ...e client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan security dot1x password string The parameter has the following meaning Parameters Description Values or range of values string New password Enter the password for the user name You specify t...

Page 383: ... Note iPCF or iPCF MC mode activated If you want encryption with AES in iPCF or iPCF MC mode only keys with a 128 bit key length are supported Requirement You are in the Interface configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan security edit key index 1 4 key The parameters have the follo...

Page 384: ...ed for the encryption Note This command is only available in the client mode Requirement The type of authentication is open system You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan security encryption Result The encryption is enabled Further notes You display the settin...

Page 385: ...ntication Note This command is only available in the client mode Requirement The type of authentication is open system You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan security encryption Result The encryption is disabled Further notes You display the settings with ...

Page 386: ... known names words or terms that could be guessed If a device is lost or if the key becomes known the key should be changed on all devices to maintain security Note This command is only available in the client mode Requirement WPA PSK WPA2 PSK or WPA 2 PSK auto is set for the type of authentication You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows c...

Page 387: ...ge to this mode If you exit the VAP Interface Configuration mode with the exit command you return to the Global Configuration mode If you exit the VAP Interface Configuration mode with the end command you return to the Privileged EXEC mode 10 2 6 1 vap security authentication access point Description With this command you specify the type of authentication Note This command is available only in ac...

Page 388: ...with a fixed un changing key can be selected as an option To ena ble the key use the vap security encryption command shared key A fixed key is stored for authentication wpa Radius WPA authentication wpa psk WPA authentication without RADIUS server wpa2 Radius WPA2 authentication wpa2 psk WPA2 authentication without RADIUS server wpa wpa2 auto Radius WPA and WPA2 authentication wpa wpa2 auto psk WP...

Page 389: ...ace The command prompt is as follows cli config if vapX 0 Y Syntax Call up the command with the following parameters vap security cipher auto aes tkip The parameters have the following meaning Parameter Description auto TKIP or AES is used depending on the capability of the other station aes AES Advanced Encryption Standard Strong symmetrical block encryption method based on the Rijndael algorithm...

Page 390: ...h WEP key from the key table is used for encryption Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call up the command with the following parameters vap security default key index 1 4 The parameter has the following meaning Parameters Description Val...

Page 391: ...s available only in access point mode Requirement The type of authentication is open system You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment vap security encryption Result The encryption is enabled You can only disable encryption if you have selected open sytem for authentic...

Page 392: ...d Open System for authentication Note This command is available only in access point mode Requirement The type of authentication is open system You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment no vap security encryption Result The encryption is disabled Further notes You dis...

Page 393: ...vailable only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call up the command with the following parameters vap security wpa group key update interval 0 seconds 30 36000 The parameter has the following meaning Parameter Description Values or range of values 0 The key will not be ren...

Page 394: ...n names words or terms that could be guessed If a device is lost or if the key becomes known the key should be changed on all devices to maintain security Note This command is available only in access point mode Requirement WPA PSK WPA2 PSK or WPA 2 PSK auto is set for the type of authentication You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli c...

Page 395: ...is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment vap communication with own vap Result The communication option on the same SSID of an access point is enabled Further notes You display the settings with the show wlan securit...

Page 396: ...nd is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment no vap communication with own vap Result The communication option on the same SSID of an access point is disabled Further notes You display the settings with the show wlan ...

Page 397: ...is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment vap communication with ethernet Result The communication option is enabled Further notes You display the settings with the show wlan security vapX 0 Y command You disable the ...

Page 398: ...and is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment no vap communication with ethernet Result The communication option is disabled Further notes You display the settings with the show wlan security vapX 0 Y command You enab...

Page 399: ...agers Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show authorized managers ip source ip address The parameters have the following meaning Parameter Description Range of values note ip source Keyword for the network or host ad dress ip address Value for an IP address spe...

Page 400: ...uthorized manager is allowed to access the device Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters authorized manager ip source ip address subnet mask prefix length 1 32 interface interface type 0 a b 0 c interface type 0 a b 0 c vlan a b or a b or a b c d service snmp telnet http https ssh The...

Page 401: ...ameters are not specified when configuring the following defaults apply The manager is authorized for all services Note Configuration of the first entry As long as the list of authorized managers is empty access to the system is not restricted As soon as the list contains an entry access to the system is blocked for all others You should therefore configure the interface via which you access the s...

Page 402: ... meaning Parameter Description Range of values note ip address Specifies the network or the IP address for which the IP manager is authorized Enter a valid IP address or a network subnet mask Subnet mask that restricts the authori zation Enter a valid mask prefixlength Decimal representation of the mask as a number of 1 bits 1 32 For information on identifiers of addresses and interfaces refer to ...

Page 403: ...gures the transfer to the Syslog server Port mirroring Mirroring of ports to analyze the data stream without disturbing operation 11 1 Diagnostics In events and faults handling you set the events whose messages will be distributed in one of the available ways You configure the monitoring of certain system events and power supply and physical interfaces in the Events configuration mode 11 1 1 show ...

Page 404: ...orwarding the messages of the various event types Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events config Result The current configuration of the events display is displayed 11 1 3 show events severity Description This command shows the degree of severity of an event Info Warn...

Page 405: ...severity is shown for each type of notification Further notes You configure the assignment of the degree of severity of an event and the type of notification with the severity command 11 1 4 show events faults config Description This command shows the current configuration of the following error monitoring functions Monitoring of the power supply for power outage Monitoring of the network connecti...

Page 406: ...parameters are specified the settings for error monitoring are displayed Result The current configuration of the selected error monitoring function is displayed 11 1 5 show events faults status Description This command shows the status messages of fault monitoring of the power supply and network connections Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt...

Page 407: ...vileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events fault counter Result The number of indicated faults is displayed 11 1 7 show logbook Description With this command you display the content of the logbook Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call ...

Page 408: ...fo Information warning Warning critical Critical Result The content of the logbook is displayed 11 1 8 show power line state Description This command shows the status of the power supply Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show power line state Result The status of the power ...

Page 409: ...w rmon statistics stats index 1 65535 The parameters have the following meaning Parameter Description Range of val ues statistics Keyword for the rmon statistics to be investigated stats index Index number for the statistical values 1 65535 If you enter the command without parameters the display shows whether rmon is enabled or disabled Result The values entered for the selected statistics index a...

Page 410: ...ook Description With this command you delete the content of the logbook Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters clear logbook Result The content of the logbook is deleted 11 1 12 fault report ack Description With this command you acknowledge delete the messages of the Cold Warm start event Requirement You are i...

Page 411: ...13 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit c...

Page 412: ...nge to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections If you exit the EVENTS configuration mode with the exit command you return to the Global configuration mode If you exit the EVENTS configuration mode with the end command you return to the Privileged EXEC mode 11 1 14 1 add log Description With this command y...

Page 413: ...s e mail Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters client config syslog trap email all The parameters have the following meaning Parameter Description syslog Enables the client that sends the messages to the Syslog server trap Enables the client that sends the SNMP traps email Ena...

Page 414: ...ter Description syslog Disables the client that sends the messages to the Syslog server trap Disables the client that sends the SNMP traps email Disables the client that sends the e mails all Disables all clients at once Result The client selected for the transfer is disabled Further notes You display the status of the events and the clients with the show events config command You enable the funct...

Page 415: ...in different ways Entry in the logbook of the device Sending the message to the log server of the system Sending an e mail Sending an SNMP trap Lighting up of the error LED Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters event config cold warmstart linkchange authentication failure powe...

Page 416: ... the device ipcf poll size Message when the PNIO data size is too large for the transmission only available if supported by the device all All messages logtable Client that processes the logbook entries syslog Client that sends the messages to the log server email Client that sends the e mails trap Client that sends the SNMP traps faults The device triggers an error The error LED lights up all All...

Page 417: ...r change Message when there is a status change in the power supply faultstate change Message when there is a status change in the error monitoring stp change Message when there is a change in the Spanning Tree overlap ap Message if radio channels overlap in Access Point mode only wds Message if there are changes to WDS in Access Point mode only dfs Message if a radar signal is received or if there...

Page 418: ...evice will be stored or forwarded with the event config command 11 1 14 6 severity Description With this command you configure the threshold values for the sending of system event notifications Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters severity mail log syslog info warning critica...

Page 419: ...re processed as of the severity level Critical Result The settings for sending system event messages are configured The severity function is enabled Further notes You disable the setting with the no severity command You display the status of this function and other information show events severity 11 1 14 7 no severity Description With this command you disable the setting for the threshold values ...

Page 420: ...g table disabled syslog The setting of the threshold value the entering event messages in the Syslog file is disabled If you do not select any parameters from the parameter list the default value is used Result The settings for sending system event messages are configured Further notes You enable the setting with the severity command You display the status of this function and other information sh...

Page 421: ...red Further notes You can display the current setting with the show events faults config command You disable the function with the no link command 11 1 14 9 no link Description With this command you disable the monitoring of the physical network connections for cable breaks or for pulling of the connector Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli con...

Page 422: ...command You enable the function with the link command 11 1 14 10 send test mail Description With this command you send an e mail according to the currently configured SMTP settings Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call the command without parameters send test mail Result An e mail according to the currently configured SM...

Page 423: ...rivileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events syslogserver Result The entries of the configured Syslog server are displayed 11 2 2 Commands in the Events configuration mode This section describes commands that you can call up in the EVENTS configuration mode In the Global configuration mode enter the events command to change ...

Page 424: ...scription Range of values note ipv4 Keyword for an IP address ucast_addr Syslog server IPv4 Address Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN 100 Domain name Fully Qualified Domain Name Maximum of 100 characters port Serverport 1 65535 Default 514 For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 23 If...

Page 425: ... 100 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Syslog server IPv4 Address Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN 100 Domain name Fully Qualified Domain Name Maximum of 100 characters For information on identifiers of addresses and interfaces refer to the section Interface identifiers a...

Page 426: ...Diagnostics 11 2 Syslog client SCALANCE W760 W720 to IEEE 802 11n Command Line Interface 426 Configuration Manual 11 2014 C79000 G8976 C351 03 ...

Page 427: ...pe 192 wds partner mac 193 wds partner wds id 194 wlan alternative channel 144 wlan beacon interval 156 wlan channel 157 wlan data rate 11abg 163 wlan data rate 11n 165 wlan data rates 11abg selected only 160 166 wlan data rates 11n selected only 161 167 wlan dtim 169 wlan force roaming eth down 171 wlan frequency band 173 wlan guard interval 175 wlan ht channel 176 wlan ipcf mc cycle time 97 wlan...

Page 428: ...curity dot1x username 381 wlan security encryption 384 wlan security wpa psk passphrase 386 wlan signal recorder start 86 89 90 wlan signal recorder stop 88 wlan ssid table edit 170 commit mode 138 commit wlan settings 139 configure terminal 43 coordinates height 48 coordinates latitude 49 coordinates longitude 49 country 139 D dcp forwarding 276 dcp server 268 no dcp server 269 delete 67 device m...

Page 429: ...n 295 option value hex 293 option value string 294 no option 295 295 P password 71 no password 72 ping 46 pool enable 296 no pool enable 297 ports 216 no ports 217 R renew dhcp 278 restart 74 revision 256 no revision 257 S Scope of the manual 15 send test mail 422 sender mail address 334 no sender mail address 334 set interface 298 severity 418 no severity 419 show authlog 403 show authorized mana...

Page 430: ...de status 109 show sntp status 110 show sntp unicast mode status 110 show spanning tree 219 show spanning tree active 220 show spanning tree bridge 221 show spanning tree detail 222 show spanning tree interface 222 show spanning tree l2t edge 223 show spanning tree mst configuration 224 show spanning tree mst interface 225 show spanning tree root 226 show ssid table 131 show ssl server cert 340 sh...

Page 431: ...250 spanning tree mst configuration 233 spanning tree mst hello time 251 no spanning tree mst hello time 252 spanning tree mst instance id root 234 no spanning tree mst instance id root 235 spanning tree mst max hops 236 no spanning tree mst max hops 237 spanning tree priority 237 no spanning tree priority 238 ssh server 342 no ssh server 343 static lease mac 299 no static lease 300 switchport acc...

Page 432: ... eth down 171 no wlan force roaming eth down 172 wlan fragmentation threshold 173 wlan frequency band 173 174 wlan guard interval 175 wlan ht channel 176 wlan hw entries 177 wlan ipcf 93 95 no wlan ipcf 93 96 wlan ipcf mc cycle time 97 wlan ipcf mc mgmt scan period 98 wlan max tx power 178 wlan mode 179 180 wlan outdoor 182 no wlan outdoor 183 wlan overlap ap aging 183 wlan roaming threshold 184 w...

Search results

Summary of Contents for SCALANCE W720

Reviews:

Related manuals for SCALANCE W720

Brands by name

Popular brands

Siemens SCALANCE W720, Configuration Manual

Search results

Summary of Contents for SCALANCE W720

Reviews:

Related manuals for SCALANCE W720

Brands by name

Popular brands