Siemens SCALANCE W738-1 M12 Page 46 Configuration Manuals Download | Manualshive

Page: 46 / 616

background image

● Enable logging functions. Use the central logging function to log changes and access

attempts centrally. Check the logging information regularly.

● Configure a Syslog server to forward all logs to a central location.
● Use WPA2/ WPA2-PSK with AES to protect the WLAN. If iPCF or iPCF-MC is used, use

the AES encryption.

Passwords

● Define rules for the use of devices and assignment of passwords.
● Regularly update passwords and keys to increase security.
● Change all default passwords for users before you operate the device.
● Only use passwords with a high password strength. Avoid weak passwords for example

password1, 123456789, abcdefgh.

● Make sure that all passwords are protected and inaccessible to unauthorized personnel.
● Do not use the same password for different users and systems or after it has expired.

Keys and certificates

This section deals with the security keys and certificates you require to set up HTTPS

( HyperText Transfer Protocol Secured Socket Layer).
● We strongly recommend that you create your own HTTPS certificates and make them

available.

There are preset certificates and keys on the device. The preset and automatically created

HTTPS certificates are self-signed.

We recommend that you use HTTPS certificates signed either by a reliable external or by

an internal certification authority. The HTTPS certificate checks the identity of the device

and controls the encrypted data exchange. You can install the HTTPS certificate via the

WBM (System > Load and Save).

● Handle user-defined private keys with great caution if you use user-defined SSH or SSL

keys.

● Use the certification authority including key revocation and management to sign the

certificates.

● Verify certificates and fingerprints on the server and client to avoid "man in the middle"

attacks.

● We recommend that you use certificates with a key length of 2048 bits.
● Change keys and certificates immediately, if there is a suspicion of compromise.

Secure/non-secure protocols

● For the DCP function, enable the "DCP read-only" mode after commissioning.
● Avoid and disable non-secure protocols, for example Telnet and TFTP. For historical

reasons, these protocols are still available, however not intended for secure applications.

Use non-secure protocols on the device with caution.

Security recommendations

SCALANCE W770/W730 acc. to IEEE 802.11n Command Line Interface

46

Configuration Manual, 09/2017, C79000-G8976-C324-08

«
...
44
45
46
47
48
...
»

Summary of Contents for SCALANCE W738-1 M12

Page 1: ...ace Configuration Manual 09 2017 C79000 G8976 C324 08 Introduction 1 Description 2 Security recommendations 3 Configuration 4 Functions specific to SCALANCE 5 System time 6 Network structures 7 Network protocols 8 Load control 9 Layer 3 functions 10 Security and authentication 11 Diagnostics 12 ...

Page 2: ... those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the following WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation If products and components from other manufacturers are used th...

Page 3: ...ar screen 37 2 7 2 do 38 2 7 3 end 38 2 7 4 exit 39 2 7 5 Help functions and supported input 39 2 7 5 1 help 39 2 7 5 2 The command 40 2 7 5 3 Completion of command entries 41 2 7 5 4 Abbreviated notation of commands 42 2 7 5 5 Reusing the last used commands 42 2 7 5 6 The show commands 42 3 Security recommendations 45 4 Configuration 49 4 1 System 49 4 1 1 show commands 49 4 1 1 1 show cli consol...

Page 4: ...stem location 73 4 1 10 12 system name 74 4 1 11 Commands in the Interface configuration mode 74 4 1 11 1 alias 75 4 1 11 2 no alias 75 4 1 11 3 duplex 76 4 1 11 4 no duplex 77 4 1 11 5 lldp 78 4 1 11 6 no lldp 79 4 1 11 7 mtu 79 4 1 11 8 shutdown complete 80 4 1 11 9 no shutdown 81 4 2 Load and Save 82 4 2 1 The show commands 85 4 2 1 1 show loadsave files 85 4 2 1 2 show loadsave tftp 85 4 2 2 s...

Page 5: ...Commands in the global configuration mode 110 5 1 2 1 plug 110 5 1 3 Commands in the Plug Configuration mode 110 5 1 3 1 factoryclean 111 5 1 3 2 firmware on plug 111 5 1 3 3 no firmware on plug 112 5 1 3 4 write 112 5 1 3 5 presetplug 113 5 2 WBM 114 5 2 1 The show commands 114 5 2 1 1 show web session timeout 114 5 2 2 Commands in the global configuration mode 114 5 2 2 1 web session timeout 115...

Page 6: ... 2 Commands in the WLAN configuration mode 140 5 6 2 1 wlan ipcf mc 140 5 6 2 2 no wlan ipcf mc 141 5 6 2 3 wlan ipcf mc protocol support access point 142 5 6 2 4 wlan ipcf mc cycle time access point 143 5 6 2 5 wlan ipcf mc mgmt scan period client 144 5 6 2 6 wlan ipcf mc roaming filter client 145 5 6 2 7 no wlan ipcf mc roaming filter client 146 5 7 iPRP 147 5 7 1 The show commands 147 5 7 1 1 s...

Page 7: ...0 6 1 2 4 time dst recurring 171 6 1 2 5 no time dst 172 6 2 NTP client 172 6 2 1 The show commands 173 6 2 1 1 show ntp info 173 6 2 2 Commands in the global configuration mode 173 6 2 2 1 ntp 173 6 2 3 Commands in the NTP configuration mode 174 6 2 3 1 ntp server 174 6 2 3 2 no ntp server 175 6 2 3 3 ntp time diff 176 6 3 SNTP client 177 6 3 1 The show commands 177 6 3 1 1 show sntp broadcast mo...

Page 8: ...Commands in the WLAN configuration mode 205 7 1 4 1 device mode 205 7 1 4 2 commit mode 206 7 1 4 3 commit wlan settings 207 7 1 4 4 country 207 7 1 4 5 force roaming ip down Access Point 208 7 1 4 6 no force roaming ip down Access Point 209 7 1 5 Commands in the WLAN Interface configuration mode 210 7 1 5 1 wlan allowed channels 210 7 1 5 2 wlan allowed channels only 212 7 1 5 3 no wlan allowed c...

Page 9: ...ent 247 7 1 5 45 wlan ssid table edit client 248 7 1 5 46 wlan force roaming eth down access point 249 7 1 5 47 no wlan force roaming eth down access point 250 7 1 5 48 wlan fragmentation threshold 250 7 1 5 49 wlan frequency band access point 251 7 1 5 50 wlan frequency band client 252 7 1 5 51 wlan guard interval access point 253 7 1 5 52 wlan ht channel width access point 254 7 1 5 53 wlan hw r...

Page 10: ... 2 6 mgmt vlan 289 7 2 3 Commands in the interface configuration mode 290 7 2 3 1 switchport acceptable frame type 290 7 2 3 2 switchport access vlan 291 7 2 3 3 no switchport access vlan 292 7 2 3 4 switchport ingress filter 292 7 2 3 5 no switchport ingress filter 293 7 2 3 6 switchport priority default 294 7 2 3 7 no switchport priority default 294 7 2 3 8 switchport pvid 295 7 2 3 9 no switchp...

Page 11: ... 4 2 no spanning tree 326 7 3 4 3 spanning tree auto edge 327 7 3 4 4 no spanning tree auto edge 328 7 3 4 5 spanning tree bdpufilter 328 7 3 4 6 spanning tree bpdu receive 329 7 3 4 7 spanning tree bpdu transmit 330 7 3 4 8 spanning tree mst 330 7 3 4 9 no spanning tree mst 332 7 3 4 10 spanning tree mst hello time 333 7 3 4 11 no spanning tree mst hello time 334 7 3 5 Commands in the MSTP config...

Page 12: ... 362 8 2 3 1 ipv6 neighbor 362 8 2 3 2 no ipv6 neighbor 363 8 2 3 3 ipv6 path mtu 364 8 2 3 4 no ipv6 path mtu 365 8 2 3 5 ipv6 path mtu discover 366 8 2 3 6 no ipv6 path mtu discover 366 8 2 3 7 ipv6 default route 367 8 2 3 8 no ipv6 default route 368 8 2 4 Commands in the Interface configuration mode 369 8 2 4 1 ipv6 address 370 8 2 4 2 no ipv6 address 371 8 2 4 3 ipv6 address autoconfig 372 8 2...

Page 13: ...e 394 8 5 3 Commands in the DHCPPOOL configuration mode 394 8 5 3 1 lease time 395 8 5 3 2 network 396 8 5 3 3 option IP address 397 8 5 3 4 option value hex 398 8 5 3 5 option value string 399 8 5 3 6 no option 400 8 5 3 7 pool enable 401 8 5 3 8 no pool enable 402 8 5 3 9 set interface 402 8 5 3 10 static lease 404 8 5 3 11 no static lease 405 8 6 SNMP 405 8 6 1 The show commands 407 8 6 1 1 sho...

Page 14: ... 7 1 The show commands 436 8 7 1 1 show events smtp server 436 8 7 1 2 show events sender email 436 8 7 1 3 show events smtp port 437 8 7 2 Commands in the Events configuration mode 437 8 7 2 1 smtp server 438 8 7 2 2 no smtp server 439 8 7 2 3 sender mail address 439 8 7 2 4 no sender mail address 440 8 7 2 5 smtp port 441 8 7 2 6 no smtp port 441 8 8 HTTP server 442 8 8 1 The show commands 442 8...

Page 15: ...lient 461 10 1 3 5 nat local ip address Client 462 10 1 3 6 nat interface Client 463 10 1 3 7 no nat interface Client 464 10 1 3 8 nat ipv4 multicast forward global to local Client 464 10 1 3 9 no nat ipv4 multicast forward global to local Client 465 10 1 3 10 nat ipv4 multicast forward local to global Client 466 10 1 3 11 no nat ipv4 multicast forward local to global Client 467 10 1 3 12 nat time...

Page 16: ...authenticator primary 504 11 3 2 7 no wlan security ap radius authenticator primary 505 11 3 2 8 wlan security ap radius authenticator reauth interval 506 11 3 2 9 wlan security ap radius authenticator reauth mode 507 11 3 2 10 wlan security ap radius authenticator shared secret 508 11 3 2 11 wlan security context Client 509 11 3 2 12 no wlan security context Client 510 11 3 2 13 vap inter ap bloc...

Page 17: ...1 3 5 20 vap inter ap blocking block non ip traffic 543 11 3 5 21 no vap inter ap blocking block non ip traffic 544 11 4 MAC access control list 545 11 4 1 The show commands 545 11 4 1 1 show access lists 545 11 4 1 2 show interface access lists 546 11 4 2 Commands in the global configuration mode 546 11 4 2 1 mac access list extended 547 11 4 2 2 no mac access list extended 548 11 4 3 Commands in...

Page 18: ...ne state 586 12 1 1 9 show rmon 586 12 1 2 clear authlog 587 12 1 3 clear logbook 587 12 1 4 fault report ack 588 12 1 5 Commands in the global configuration mode 589 12 1 5 1 events 589 12 1 6 Commands in the Events configuration mode 589 12 1 6 1 add log 590 12 1 6 2 client config 590 12 1 6 3 no client config 591 12 1 6 4 event config 592 12 1 6 5 no event config 594 12 1 6 6 link 596 12 1 6 7 ...

Page 19: ...rom SIMATIC NET on the topic of Industrial Wireless LANs Configuration Manual SCALANCE W770 W730 Web Based Management This Configuration Manual is intended to provide you with the information you require to commission and operate SCALANCE W700 devices correctly It explains how to configure the SCALANCE W700 devices and how to integrate SCALANCE W700 devices in a WLAN network Performance data 802 1...

Page 20: ...combination and installation of the individual IWLAN components both indoors and outdoors a wide ranging selection of compatible coaxial accessories are available The system manual also covers connecting cables as well as a variety of plug in connectors lightning protectors a power splitter and an attenuator SIMATIC NET manuals You will find SIMATIC NET manuals on the Internet pages of Siemens Ind...

Page 21: ...y to implement and continuously maintain a holistic state of the art industrial security concept Siemens products and solutions constitute one element of such a concept Siemens products and solutions only form one element of such a concept Customers are responsible for preventing unauthorized access to their plants systems machines and networks Such systems machines and components should only be c...

Page 22: ...ions for open source software carefully before using the product You will find license conditions in the following documents on the supplied data medium OSS_Scalance W700_86 htm Trademarks The following and possibly other names not identified by the registered trademark sign are registered trademarks of Siemens AG SIMATIC NET SCALANCE C PLUG RCoax Firmware The firmware is signed and encrypted This...

Page 23: ...Maximum number System Syslog server 3 SMTP server 3 SNMPv1 trap recipient 10 SNTP server 2 NTP server 1 DHCP pools 1 IPv4 addresses managed by the DHCP server dynam ic static 100 DHCP static assignments per DHCP pool 20 DHCP options 20 Interfa ces Force destination addresses for roaming 10 Layer 2 Virtual LANs port based including VLAN 1 16 Multiple Spanning Tree instances 16 SCALANCE W770 W730 ac...

Page 24: ...egress rules Client 120 P1 WLAN management VLAN Access point 720 P1 WDS 1 Y VAP 1 Y management VLAN User roles 28 User groups 32 Users 28 Support of IPv6 The following system functions do not support IPv6 addresses Inter AP blocking Force roaming IP ACL Management ACL Note Interruption of the WLAN communication The WLAN communication can be influenced by high frequency interference signals and can...

Page 25: ...le and type in the command telnet followed by the IP address of the device you are configuring C telnet IP address 2 Enter your login and password As an alternative you can also enter the command telnet followed by the IP address of the device you are configuring in the Start Run menu Note Requirement for use of the CLI You should only use the command line interface if you are an experienced user ...

Page 26: ...dow In this mode you can use show commands to display the current values of configuration parameters You are logged out with the exit command It is not possible to modify parameters in this mode To be able to modify configuration parameters you need to change to the Privileged EXEC mode Privileged EXEC mode In this mode you can you display the configuration data and change it If you log with the a...

Page 27: ...ation mode In the Interface Configuration mode the parameters are configured for one specific interface The command prompt is displayed in the form CLI config if where the placeholder is replaced by the identifier of the Interface You select the Interface by setting suitable parameters for the interface command An identifier when the Trial mode is enabled If you first test changes to the configura...

Page 28: ...ibe mandatory and optional entries There is a general description of some of these combinations below Character combinations Meaning Parameter Instead of the expression in parentheses enter a permitted value Unit a b Instead of the expression in parentheses enter a value from the range a to b The unit to be used is specified before the brackets and is also replaced by the entry Parameter 1 Paramet...

Page 29: ...ce wlan 0 1 Addressing logical interfaces This notation also applies to other commands that address a logical interface VAP WDS Enter the command interface Specify the interface type interface type After a space enter the interface identifier interface id The interface identifier is made up of the module number and the port number separated by a slash The interfaces permanently installed in the de...

Page 30: ... Configuration mode To configure the interface use the command interface in the global configuration mode Since you configure precisely one of the existing interfaces in the Interface Configuration mode the command prompt shows not only the mode but also the identifier of this interface The command prompt is as follows cli config if The placeholder is replaced by the following name of the interfac...

Page 31: ...network part of an IPv4 address The notation is normally decimal in keeping with the IPv4 address Alternative notation for network masks In contrast to the notation described above network masks can also be represented as a number of 1 bits The mask of the decimal representation 255 255 0 0 is then written as 16 The syntax is then for example ipaddress 16 Note that there must be a space before and...

Page 32: ... 1 1 20 Hexadecimal 2a00 ad80 0123 with port 2a00 ad80 0123 20 Loopback 127 0 0 1 1 IP addresses of the interface 4 IP addresses Multiple IP addresses LLA A link local address formed automatically fe80 128 per interface ULA Several unique local unicast addresses per interface GUA Several global unicast addresses per interface Header Checksum Variable length Fragmentation in the header No security ...

Page 33: ...e DHCPv6 client to localize DHCPv6 servers 2 ADVERTISE The available DHCPv6 servers reply to this 3 REQUEST The DHCPv6 client requests an IPv6 address and the configuration settings from the DHCPv6 server 4 REPLY The DHCPv6 server sends the IPv6 address and the configuration settings If the client and server support the function Rapid commit the procedure is shortened to two DHCPv6 messages SOLICI...

Page 34: ...re of the subnet mask corresponds to that of an IP address If a 1 is used at a bit position in the subnet mask the bit belongs to the corresponding position in the IP address of the subnet address otherwise to the address of the computer Example of a class B network The standard subnet address for class B networks is 255 255 0 0 in other words the last two bytes are available for defining a subnet...

Page 35: ...LA Link local address FE80 10 As soon as IPv6 is activated on the interface a link local address is formed automatically Can only be reached by nodes located on the same link ULA Unique Local Address Defined in RFC 4193 Via this address the IPv6 interface can be reached in the LAN GUA Global Unicast Address Via this address the IPv6 interface can be reached e g via the Internet Interface ID The in...

Page 36: ...mitted The address fd00 0000 0000 ffff 02d1 7d01 0000 8f21 can also be shortened and written as follows fd00 ffff 2d1 7d01 0000 8f21 Decimal notation with periods The last 2 fields or 4 bytes can be written in the normal decimal notation with periods Example The IPv6 address fd00 ffff 125 1 0 1 is equivalent to fd00 ffff 7d01 1 Structure of the IPv6 address The IPv6 protocol distinguishes three ty...

Page 37: ...1 0db8 1234 48 Interface ID 1111 Entry and appearance The entry of IPv6 addresses is possible in the notations described above IPv6 addresses are always shown in the hexadecimal notation 2 7 General CLI commands This section describes commands that you can call up in any mode 2 7 1 clear screen Description With this command you clear the screen The command prompt is displayed Syntax Call the comma...

Page 38: ...nfiguration mode and you want to execute the write startup config command from the Privileged EXEC mode cli config if do write startup config Result The command from the Privileged EXEC mode will be executed 2 7 3 end Description With this command you exit the configuration mode and are then in the Privileged EXEC mode Requirement You are in a configuration mode Syntax Call the command without par...

Page 39: ...supported input The Command Line Interface provides various functions that are helpful when making entries in the command line help Command completion with the tab key Automatic completion of incomplete commands Paging in the list of most recently used commands Display of the list of most recently used commands show history 2 7 5 1 help Description With this command you display the help entry for ...

Page 40: ... global commands are displayed Note Incomplete command names If you have specified an incomplete command when calling help a list of all commands that start with the term you have entered is created 2 7 5 2 The command Description With this command you call up the command list Syntax Enter a question mark to obtain a list of all permitted commands in the current mode For this command you do not ne...

Page 41: ...nd have been entered in the input line the system can complete the entry as long as the character string is unambiguous This can be repeated after entering further characters Procedure Enter the first characters of the command Press the tab key Result The command interpreter completes the input as long as the command is unambiguous If you enter a character string that cannot be completed to form a...

Page 42: ...ed If you entered commands earlier in the Interface Configuration mode these commands are not included in the list of the Global Configuration mode You can only call up and reuse these commands in the Interface Configuration mode Procedure You can page through the list of the commands most recently used using the arrow up and arrow down keys If the command you are looking for is displayed you can ...

Page 43: ...mands entered in this mode are displayed These commands are not included in the list of the Interface configuration mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show history Result The list of used commands is displayed Description 2 7 General CLI commands SCALANCE W770 W730 acc ...

Page 44: ...Description 2 7 General CLI commands SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 44 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 45: ...at can be read out and modified Software security functions Keep the software up to date Check regularly for security updates of the product You will find information on this on the Internet pages Industrial Security http www siemens com industrialsecurity Inform yourself regularly about security advisories and bulletins published by Siemens ProductCERT http www siemens com cert en cert security a...

Page 46: ...ys on the device The preset and automatically created HTTPS certificates are self signed We recommend that you use HTTPS certificates signed either by a reliable external or by an internal certification authority The HTTPS certificate checks the identity of the device and controls the encrypted data exchange You can install the HTTPS certificate via the WBM System Load and Save Handle user defined...

Page 47: ...non secure protocols and services operate the device only within a protected network area Restrict the services and protocols available to the outside to a minimum Available protocols per port The following list provides you with an overview of the open ports on this device The table includes the following columns Protocol All protocols that the device supports Port number Port number assigned to ...

Page 48: ...gured The port is open if it has been configured Factory setting Open The factory setting of the port is Open Closed The factory setting of the port is Closed Authentication Specifies whether or not the protocol is authenticated Encryption Specifies whether or not the transfer is encrypted Security recommendations SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 48 Configuration Manua...

Page 49: ...ds This section describes commands with which you display various settings 4 1 1 1 show cli console timeout Description This command shows the global configuration for the timeout of the CLI console Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show cli console timeout Result The confi...

Page 50: ...show device information Description This command shows information about the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show device information Result The following information about the device is displayed MAC address of the device Serial Number Configuration 4 1 System SCAL...

Page 51: ...EtherNet IP configuration Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ethernetip Result The current EtherNet IP configuration is displayed 4 1 1 5 show im Description This command shows information on device specific vendor and maintenance data such as the article number serial ...

Page 52: ... prompt is as follows cli or cli Syntax Call up the command with the following parameters show interfaces interface type interface id description status vlan vlan id 1 4094 The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface description Shows th...

Page 53: ... mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show interfaces interface type interface id vlan vlan id 1 4094 counters The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface vlan Keyword ...

Page 54: ...ion Range of values note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 If no parameters are specified the settings for al...

Page 55: ...o of the interface loopback Loopback For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 If you do not select any parameter from the parameter list the configuration is displayed for all available IP interfaces Result The configuration of the selected IP interface is displayed 4 1 1 10 show ipv6 interface Description This comm...

Page 56: ...dentifiers and addresses Page 29 If you do not select any parameter from the parameter list the configuration is displayed for all available IPv6 interfaces Result The configuration is displayed Further notes You enable IPv6 on the VLAN interface or on the router port with the ipv6 enable command You configure an IPv6 address with the ipv6 address command 4 1 1 11 show pnio Description This comman...

Page 57: ...ment show lldp neighbors Result The neighborhood table is displayed 4 1 1 13 show lldp status Description This command shows per port whether LLDP frames are sent or received Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show lldp status port interface type interface id C...

Page 58: ...esult The information is displayed 4 1 1 14 show versions Description This command shows the versions of the hardware and software of the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show versions Result The following settings are displayed Basic device Name Revision Order ID F...

Page 59: ... type Type or speed of the interface Specify a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 If no parameters are specified the counters for all interfaces are reset Result The counters of the interface are reset Further notes You can display the statist...

Page 60: ...mmand prompt is as follows cli config Further notes You exit the Global configuration mode with the end command 4 1 4 clear line vty Description With this command you close a console session on the device With the forceful clear option you close a session and that is not reacting Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Configuration 4 1 System SCALANCE ...

Page 61: ...sole session is closed Further notes You show the logged on users with the show users command 4 1 5 disable Description With this command you close the Privileged EXEC mode You are then in the User EXEC mode Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters disable Result You are in the User EXEC mode The command prompt ...

Page 62: ...he Privileged EXEC mode The command prompt is as follows cli 4 1 7 logout Description With this command you exit the Command Line Interface If you are connected to the device via telnet the session is closed Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters logout Configuration 4 1 System ...

Page 63: ... destination address Address of the called node Enter a valid IPv4 address or a valid host name size Keyword for the size of the packets to be transferred byte Keyword for the size of the packets in bytes 0 2080 count Keyword for the number of packets to be re quested packet_count Number of packets 1 10 timeout Response wait time If this time expires the request is reported as timed out seconds Ti...

Page 64: ...wing parameters ping ipv6 prefix interface fqdn name FQDN repeat count size value anycast source vlan id source_prefix timeout value 1 100 The parameters have the following meaning Parameter Description Range of values note prefix IPv6 address of the destination Enter a valid IPv6 address interface optional parameter Only necessary when the IPv6 ad dress of the destination is a link local address ...

Page 65: ...ed 4 1 10 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or...

Page 66: ...h this command you enter a latitude coordinate Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters coordinates latitude latitude The parameter has the following meaning Parameter Description Range of values note latitude Input box for the latitude coordinate max 32 characters To use spaces in the ...

Page 67: ...nge of values note longitude Input box for the longitude coordinate max 32 characters To use spaces in the entry enter the longitude coordinate in quotes coordinates longitude 123 456 Result The longitude coordinate is created 4 1 10 4 ethernetip Description With this command you set whether EtherNet IP will be enabled or disabled after the next device restart Requirement You are in the Global con...

Page 68: ...estart Further notes You can display the current EtherNet IP configuration with the show ethernetip command You restore the default settings of the EtherNet IP profile with the restart command 4 1 10 5 interface Description With this command you change to the Interface Configuration mode There you can edit the settings for one interface You select the interface with the parameters of this command ...

Page 69: ...wds 0 vap cli config if vap 0 vlan cli config if vlan fast ethernet cli config if Fa 0 The placeholders or denote the numbering of the interface For the value ranges for the VLAN logical interface refer to the upper table You can only call up interfaces that you created with the vlan command The ranges of values from the physical interfaces depend on the hardware configuration Further notes You ex...

Page 70: ...d 4 1 10 7 cli console timeout Description With this command you enable the automatic logout and you configure the timeout setting for the CLI Note No automatic logout from the CLI If the connection is not terminated after the set time check the setting of the keepalive function on the Telnet client If the set interval is shorter than the configured time the lower value applies You have set for ex...

Page 71: ... You disable automatic logout with the no cli console timeout command You display the current timeout setting with the show cli console timeout command 4 1 10 8 no cli console timeout Description With this command you disable the automatic logout Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no cli consol...

Page 72: ...eter Description Range of values note off PROFINET is disabled If a PROFINET connection is established in other words the PROFINET AR status is On line you cannot disable PROFINET on PROFINET is activated When PROFINET is turned on EtherNet IP is turned off The switchover from PROFINET and EtherNet IP has no effect on DCP Result PROFINET is enabled or disabled after the next restart Further notes ...

Page 73: ...es note contact info Input box for contact information max 255 characters Result The contact information is created in the system 4 1 10 11 system location Description With this command you enter the location information for the system Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters system loc...

Page 74: ...ters system name system name The parameter has the following meaning Parameter Description Range of values note system name Input box for the name max 255 characters Result The name is created in the system 4 1 11 Commands in the Interface configuration mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command ...

Page 75: ...the configuration Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters alias interface name The parameter has the following meaning Parameter Description Range of values note interface name Name of the interface max 63 characters Result The interface was assigned a name Further notes You dele...

Page 76: ...he connected device Optical connections are always operated in full duplex mode since they have a fiber for each transmission direction With this command you configure the duplex mode of an interface The same mode must be set for connected interfaces Requirement Autonegotiation is disabled You are in the Interface configuration mode of an electrical interface The command prompt is as follows cli c...

Page 77: ... no negotiation command 4 1 11 4 no duplex Description With this command you reset the duplex mode of an interface to the default value The default value is full Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no duplex Result The duplex mode of the Interface is reset to the default value Further note...

Page 78: ...is enabled At system start or when using the restart command with the option memoryor factory the following defaults apply Sending and receipt of LLDP packets are enabled Note Enabling both options When you call this command you can only select one option If you want to enable both options call up the command again Result The setting is configured Further notes You disable the sending or receipt o...

Page 79: ...receipt of LLDP packets is disabled Note Disabling both options When you call this command you can only select one option If you want to disable both options call up the command again Result The setting is configured Further notes You enable the sending or receipt of LLDP packets with the lldp command You display the status of LLDP with the show lldp status command 4 1 11 7 mtu Description With th...

Page 80: ... The size of the MTU is configured to 1500 bytes Result The setting for the size of the MTU is configured Further notes You can shut down the interface with the shutdown complete command You display this setting with the show interface mtu command You display this setting and other information with the show interfaces command 4 1 11 8 shutdown complete Description With this command you shut down t...

Page 81: ...h the Reset button Further notes You activate the interface with the no shutdown command You can display the status of this function and other information with the show interfacescommand 4 1 11 9 no shutdown Description With this command you shut down an interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without ...

Page 82: ... well For more detailed information on creating and using the ConfigPack incl firmware refer to the section Maintenance X X CountryList The zip file contains the country list as a csv and as a pdf file X Debug This file contains information for Siemens Support X X EDS Electronic Data Sheet EDS Electronic data sheets for describing devices in the EtherNet IP mode X Firmware Loading firmware updates...

Page 83: ...d information about the measured values and their graphic representation in the section Sig nal recorder X X WLANSpec trumAnalyz er Only in ac cess point mode The Zip file contains a csv file with the measured values of the spectrum analyzer You will find information about the measured values and their graphic representation in the section Spec trum analyzer X X Table 4 2 TFTP SFTP File type Descr...

Page 84: ...Cert in client mode only User certificate You can specify a password for the user certificate on the WBM page Load Save Pass word Maximum file size 8192 bits X X WLANServerCert in client mode only Server certificate Maximum file size 8192 bits X X WLANSigRec in client mode only The zip file contains the following csv file with the measured values of the signal recorder pdf file with the measured v...

Page 85: ...thout parameters show loadsave files Result The current Load Save file information is displayed 4 2 1 2 show loadsave tftp Description This command shows the current configuration of the TFTP server for Load Save Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show loadsave tftp Configur...

Page 86: ...or an IPv4 address ucast_addr IPv4 unicast address of the TFTP server Enter a valid unicast IPv4 address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name of the TFTP server Maximum of 100 characters ipv6 Keyword for an IPv6 address ip6_addr IPv6 address of the TFTP server Enter a valid unicast IPv6 address port Keyword for the port of the server via which the TFTP c...

Page 87: ...in name Fully Qualified Domain Name of the TFTP server Maximum of 100 characters ipv6 Keyword for an IPv6 address ip6_addr IPv6 address of the TFTP server Enter a valid unicast IPv6 address port Keyword for the port of the server via which the TFTP connection runs tcp port Number of the port 1 65535 file Keyword for a file name to be assigned filename Name of the file Maximum of 100 characters fil...

Page 88: ...e Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 4 2 4 1 loadsave Description With this command you change to the LOADSAVE configuration mode Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters loadsave Result You are now in the LOADSAVE configuration mode ...

Page 89: ...iption With this command you call up the possible files or delete a specific file Requirement You are in the LOADSAVE configuration mode The command prompt is as follows cli config loadsave Syntax Call up the command with the following parameters delete showfiles filetype filetype The parameters have the following meaning Parameter Description Range of values note showfiles Shows the available fil...

Page 90: ...les Shows the available files filetype Keyword for a file type to be assigned a name filetype Name of the file type max 100 characters name Keyword for a file name to be assigned to the file type filename Name of the file max 100 characters Result The file types are displayed or the file type is assigned a name Further notes With the show loadsave files command you can display the file types 4 2 5...

Page 91: ...ther notes You configure the name of the file with the tftp filename command With the show loadsave files command you can display the file types 4 2 5 4 tftp save Description With this command you copy a file from the file system of the device to a TFTP server The TFTP protocol is used for the transfer You can also display a list of available files Requirement The name of the file is specified You...

Page 92: ...ation mode The command prompt is as follows cli config loadsave Syntax Call up the command with the following parameters tftp server ipv4 ucast addr fqdn name FQDN ipv6 ip6_addr port tcp port 1 65535 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 address ipv4 address Value for an IPv4 unicast address Enter a valid IPv4 unicast address ...

Page 93: ...FTP server Requirement You are in the LOADSAVE configuration mode The command prompt is as follows cli config loadsave Syntax Call up the command with the following parameters sftp filename showfiles filetype filetype name filename The parameters have the following meaning Parameter Description Range of values note showfiles Shows the available files filetype Keyword for a file type to be assigned...

Page 94: ...tion Range of values note showfiles Shows the available files filetype Keyword for a file type to be loaded filetype Name of the file type max 100 characters Result The file types are displayed or the file is downloaded to the device Further notes You configure the name of the file with the tftp filename command With the show loadsave files command you can display the file types 4 2 5 8 sftp save ...

Page 95: ... the file is copied Further notes You configure the name of the file with the sftp filename command With the show loadsave files command you can display the file types 4 2 5 9 sftp server Description With this command you configure the access to an SFTP server Requirement You are in the LOADSAVE configuration mode The command prompt is as follows cli config loadsave Syntax Call up the command with...

Page 96: ...on CLI command prompt Page 27 password Keyword for a password password Password of the user Enter the password for the user Refer to the information in the sec tion CLI command prompt Page 27 For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The settings for the access to the selected SFTP server are configured 4 2 5 ...

Page 97: ...ters pw Keyword for the password password Password Enter the password for the certificate with only the following readable ASCII characters 0x20 0x7e Result The password for the certificate is configured and activated Further notes You disable the password with the no password command 4 2 5 11 no password Description With this command you disable the password for encrypted certificates Requirement...

Page 98: ...ption When you save the ConfigPack file the file contains the start configuration the users and the certificates The firmware file is not included With this command you include the firmware file in the ConfigPack file When you save the ConfigPack file now the firmware is included After a restart the setting is disabled Requirement You are in the LOADSAVE configuration mode The command prompt is as...

Page 99: ...e command without parameter assignment no firmeware in configpack Result The function is disabled Further notes You enable the function with the firmeware in configpack command 4 3 Reset and Defaults This section describes commands for restarting the device and for restoring the original configuration 4 3 1 restart Description With this command you restart the device Configuration 4 3 Reset and De...

Page 100: ...The command prompt is as follows cli Syntax Call up the command with the following parameters restart memory factory The parameters have the following meaning if no parameters are specified restarts the system with the current configuration Parameter Description memory Restores the factory settings of the device and restarts the device The parameters listed above are unaffected by a reset factory ...

Page 101: ...e Restore This section describes commands for displaying saving and restoring configuration settings 4 4 1 The show commands This section describes commands with which you display various settings 4 4 1 1 show running config Description This command shows configuration settings of the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows c...

Page 102: ...port no of the interface ssh Shows the configuration settings of the Secure Shell protocol ssl Shows the configuration settings of the Secure Sockets Layer protocol acl Shows the configuration settings of the access control list ip Shows the configuration settings of the Internet Protocol snmp Shows the configuration settings of the Simple Network Management Protocol sntp Shows the configuration s...

Page 103: ...e active operational settings of all modules and all interfaces that do not match the preset values are displayed Result The selected configuration settings of the device are displayed The password cannot be read as plain language instead PASSWORD is displayed 4 4 2 write startup config Description With this command you save the changes to the configuration in the configuration file The use of thi...

Page 104: ...the Privileged EXEC mode again 4 4 3 1 auto save Description The CLI can save changes to the configuration automatically If you first want to test changes made to the configuration so that you can discard them afterwards if necessary you can disable the auto save function You are then in the Trial mode Changes to the configuration that you have not saved are indicated by an asterisk in front of th...

Page 105: ...e Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no auto save Result The auto save function is disabled The Trial mode is activated Further notes You enable the function with the auto save command You can display the status of this function and other information with the show device informationcommand You save changes to the configu...

Page 106: ...nfiguration interface is displayed 4 5 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global con...

Page 107: ... interface with the no sinema command You display the setting whether the SINEMA configuration interface is enabled or disabled with the command show sinema 4 5 2 2 no sinema Description With this command you disable the SINEMA configuration interface Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignmen...

Page 108: ...ation interface with the sinema command You display the setting whether the SINEMA configuration interface is enabled or disabled with the command show sinema Configuration 4 5 SINEMA SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 108 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 109: ...his section describes commands relevant for working with the C PLUG or KEY PLUG 5 1 1 The show commands This section describes commands with which you display various settings 5 1 1 1 show plug Description This command shows the current information of the PLUG Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the comman...

Page 110: ...iption With this command you change to the Plug Configuration mode Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters plug Result You are now in the Plug Configuration mode The command prompt is as follows cli config plug Further notes You exit the Plug Configuration mode with the end or exit command 5 1 3 Com...

Page 111: ...n the PLUG You are in the Plug Configuration mode The command prompt is cli config plug Syntax Call the command without parameters factoryclean Result The device configuration on the PLUG is deleted 5 1 3 2 firmware on plug Description With this command you specify that the firmware is stored on the PLUG Requirement There is a device configuration on the PLUG You are in the Plug Configuration mode...

Page 112: ...ommand 5 1 3 3 no firmware on plug Description With this command you disable the function The firmware is removed from the PLUG Requirement There is a device configuration on the PLUG You are in the Plug Configuration mode The command prompt is cli config plug Syntax Call the command without parameters no firmware on plug Result The firmware is removed from the PLUG 5 1 3 4 write Description With ...

Page 113: ...firmware version on the device This is indicated by the red LED flashing flashing interval 2 sec on 0 2 sec off Afterwards the device is restarted and the device configuration incl users and certificates on the PRESET PLUG is transferred to the device To make the PLUG writable again call the command factoryclean Requirement The PLUG is formatted There is a device configuration on the PLUG You are ...

Page 114: ... or cli Syntax Call the command without parameters show web session timeout Result The timeout setting for the WBM is displayed 5 2 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called i...

Page 115: ... until automatic logout after the last entry 60 3600 Default 900 Result The time is configured and automatic logout is enabled Further notes You disable automatic logoff with the no web session timeout command You display the current timeout setting with the show web session timeout command 5 2 2 2 no web session timeout Description With this command you disable the automatic logoff Requirement Yo...

Page 116: ... commands with which you display various settings 5 3 1 1 show wlan signal recorder Client Description This command shows the status of the signal recorder You can call the command before after or during the recording Note This command is only available in the client mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Cal...

Page 117: ...The recorded measured values are saved every 10 minutes and logged in files On completion of the recording the files can be downloaded as a zip file using http or tftp The automatic saving contains only the last fully elapsed 10 minutes The remaining minutes are discarded If the signal recorder is ended manually or if the procedure was ended automatically the file contains all the values since the...

Page 118: ...nts on which sig nal recorders are running The ac cess point data is not displayed on other clients For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The recording is configured and will be started The measured values are logged in files If these files already exist they will be overwritten If the set total number of ...

Page 119: ...ing parameters wlan signal recorder wlan 0 X stop The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The recording was stopped Further notes You start the recording with the wlan signal rec...

Page 120: ...er wlan 0 X ms 100 60000 bidirectional display The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface ms The interval in milliseconds ms be tween acquisition of two measured val ues 100 60000 The first measured value is dis played only after the set time interval has elapsed bidirectional The values of the access point are...

Page 121: ...configure and start recording with the signal recorder The measured values are output in the CLI and logged in files On completion of the recording the files can be downloaded as a zip file using http or tftp The values are stored every 10 minutes The file contains all values since the start of the recording Note This command is only available in the client mode Requirement The WLAN interface is e...

Page 122: ...tion on identifiers of addresses and interfaces refer to the section The CLI command prompt Page 27 Result The recording is configured and will be started The measured values are output in the CLI and logged in files If these files already exist they will be overwritten If the set total number of measured values is reached the recording stops automatically Use the wlan signal recorder wlan 0 X sto...

Page 123: ...ds are only available with the following KEY PLUGs W780 iFeatures MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Note This command is only available with the following KEY PLUG W740 iFeatures MLFB 6GK5 907 4PA00 Description This command shows the settings of iPCF Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call...

Page 124: ...mode enter the interface wlan 0 X command to change to this mode If you exit the WLAN Interface Configuration mode with the exit command you return to the Global Configuration mode If you exit the WLAN Interface Configuration mode with the end command you return to the Privileged EXEC mode 5 4 2 1 wlan ipcf Note This command is only available with the following KEY PLUG W740 iFeatures MLFB 6GK5 90...

Page 125: ...With this command you disable the iPCF mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameters no wlan ipcf Result The iPCF mode is disabled Further notes You enable the iPCF mode with the wlan ipcf command You display the setting with the show wlan ipcf command Functions s...

Page 126: ...e The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan ipcf protocol support pnio ethernet ip Parameter Description Range of values note pnio Keyword for the PROFI NET ethernet ip Keyword for the Ether Net IP Result The optimized support of PROFINET or Ethernet IP is enabled Further notes You disable the optimized support with the co...

Page 127: ...he command without parameters no wlan ipcf protocol support Result The optimized support of PROFINET or Ethernet IP is disabled Further notes You enable the optimized support of PROFINET or Ethernet IP with the command You display the setting with the show wlan ipcf command 5 4 2 5 wlan ipcf cycle time access point Note This command is only available with the following KEY PLUG W740 iFeatures MLFB...

Page 128: ...nodes Requirement The SCALANCE W700 device is in access point mode You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan ipcf cycle time ms 4 512 The parameter has the following meaning Parameter Description Range of values note ms Cycle time in millisec onds ms 4 8 16 ...

Page 129: ...s permitted channel list If an access point is there it connects to it If it does not find an access point on this channel it scans the next channel Result The scanning mode of the logged on clients is configured Further notes You display the setting with the show wlan ipcf command 5 4 2 7 wlan ipcf signal quality threshold access point Note This command is only available with the following KEY PL...

Page 130: ...ing mode Syntax Call up the command with the following parameters wlan ipcf signal quality threshold 1 5 The parameter has the following meaning Parameter Description Range of values note Threshold values for signal strength Level Signal quality in RSSI 1 20 40 2 25 50 3 30 60 4 35 70 5 40 80 Result The signal strength for the client is set Further notes You display the setting with the show wlan ...

Page 131: ...h WLAN mode only IEEE 802 11n is available only on the WLAN interface 1 It is advisable only to use an MCS index 5 5 1 The show commands This section describes commands with which general system properties can be displayed and configured 5 5 1 1 show wlan ipcf ht Note This command is only available with the following KEY PLUG W780 iFeatures MLFB 6GK5 907 8PA00 Description This command shows the se...

Page 132: ...n the Global Configuration mode enter the interface wlan 0 X command to change to this mode If you exit the WLAN Interface Configuration mode with the exit command you return to the Global Configuration mode If you exit the WLAN Interface Configuration mode with the end command you return to the Privileged EXEC mode 5 5 2 1 wlan ipcf ht Note This command is only available with the following KEY PL...

Page 133: ...With this command you disable the iPCF HT mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameters no wlan ipcf ht Result The iPCF mode is disabled Further notes You enable the iPCF mode with the wlan ipcf ht command You display the setting with the show wlan ipcf ht command...

Page 134: ...s as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan ipcf ht protocol support pnio ethernet ip Parameter Description Range of values note pnio Keyword for the PROFI NET ethernet ip Keyword for the Ether Net IP Result The optimized support of PROFINET or Ethernet IP is enabled Further notes You disable the optimized support with the no wlan ipcf ht proto...

Page 135: ... Syntax Call the command without parameters no wlan ipcf ht protocol support Result The optimized support of PROFINET or Ethernet IP is disabled Further notes You enable the optimized support of PROFINET or Ethernet IP with the wlan ipcf ht protocol support command You display the setting with the show wlan ipcf ht command 5 5 2 5 wlan ipcf ht cycle time Access Point Note This command is only avai...

Page 136: ...e to be set is calculated according to the formula 4 ms max number of nodes Requirement The SCALANCE W700 device is in access point mode You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan ipcf ht cycle time ms 16 512 The parameter has the following meaning Parameter ...

Page 137: ... next channel The parameters have the following meaning Parameter Description all channels The client scans all permitted channels and selects the access point with the best signal strength and connects to it next channel The client scans the next channel from its permitted channel list If an access point is there it connects to it If it does not find an access point on this channel it scans the n...

Page 138: ...gnal is and is displayed in the signal recorder Requirement The SCALANCE W700 device is in access point mode You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X next channel is set for the scanning mode Syntax Call up the command with the following parameters wlan ipcf ht signal quality threshold 1 5 The parameter has the follow...

Page 139: ...eatures MLFB 6GK5 907 4PA00 5 6 1 The show commands This section describes commands with which you display various settings 5 6 1 1 show wlan ipcf mc Note The command is only available if the SCALANCE W700 device supports iPFC MC or the function can be enabled iPCF MC is enabled with the aid of the following KEY PLUGs W780 iFeatures MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Descriptio...

Page 140: ...h the end command you return to the Privileged EXEC mode 5 6 2 1 wlan ipcf mc Note The command is only available if the SCALANCE W700 device supports iPFC MC or the function can be enabled iPCF MC is enabled with the aid of the following KEY PLUGs W780 iFeatures MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Description With this command you enable iPCF MC on this SCALANCE W700 device Requ...

Page 141: ...figured and active SSIDs must be assigned to security context 1 An SSID is active when the corresponding check box Enabled is selected on the page Interfaces WLAN Client In Japan iPCF MC cannot be enabled if the data or management interface uses a frequency of the 4920 MHz 5080 MH frequency band Syntax Call the command without parameter assignment wlan ipcf mc Result iPCF MC is enabled Further not...

Page 142: ...ts iPFC MC or the function can be enabled iPCF MC is enabled with the aid of the following KEY PLUGs W780 iFeatures MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 wlan ipcf mc protocol support access point Description With this command you enable the optimized support of PROFINET or Ethernet Frames with the selected protocol are preferred Requirement The SCALANCE W700 device is in access p...

Page 143: ...te The command is only available if the SCALANCE W700 device supports iPFC MC or the function can be enabled iPCF MC is enabled with the aid of the following KEY PLUGs W780 iFeatures MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Description With this command you configure the cycle time for iPCF MC Requirement You are in the WLAN configuration mode The command prompt is as follows cli con...

Page 144: ... enabled with the aid of the following KEY PLUGs W780 iFeatures MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Description With this command you the time for the background scan interval as a multiple of the update time Requirement The SCALANCE W700 device is in client mode You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call up the command wi...

Page 145: ...s MLFB 6GK5 907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Description With this command you specify the number of RSSI single measurements from which the median is determined Requirement You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan ipcf mc roaming filter 5 15 The parameter has the following mean...

Page 146: ...907 8PA00 W740 iFeatures MLFB 6GK5 907 4PA00 Description With this command you disable the roaming filter Requirement You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call the command without parameter assignment no wlan ipcf mc roaming filter Result The roaming filter is disabled Further notes You display the setting with the show wlan ipcf mc command...

Page 147: ...th oversize frames jumbo frames To be able to use oversize frames oversize frames jumbo frames must be configured on all devices in the network 5 7 1 The show commands This section describes commands with which you display various settings 5 7 1 1 show wlan iprp information Description This command shows the configuration of industrial Parallel Redundancy Protocol iPRP Requirement You are in the U...

Page 148: ...to the Privileged EXEC mode 5 7 2 1 wlan iprp Description With this command you change to the WLAN iPRP Configuration mode Requirement The base bridge mode 802 1Q VLAN Bridge is set The VLAN is created In client mode for MAC Mode Layer 2 Tunnel is set You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call the command without parameter assignment wlan ip...

Page 149: ... you return to the WLAN configuration mode If you exit the WLAN iPRP configuration mode with the end command you return to the Privileged EXEC mode 5 7 3 1 wlan iprp interface Description With this command you configure the iPRP function You specify the PRP network in which the interface is a member You can also enable the function for the required interface Requirement The interface is enabled Yo...

Page 150: ... 2 no wlan iprp interface Description With this command you remove the assignment of the interface Requirement You are in the WLAN iPRP configuration mode The command prompt is as follows cli config wlan iprp Syntax Call up the command with the following parameters no wlan iprp interface wlan 0 X vap X 0 Y network The parameters have the following meaning Parameter Description Range of values note...

Page 151: ...parameters wlan iprp network A B vlan id 1 4094 The parameters have the following meaning Parameter Description Range of values note network PRP Network A PRP A B PRP B vlan id Number of the addressed VLAN 1 4094 Result The VLAN assignment is configured Further notes You display this setting and other information with the show wlan iprp information command You delete the assignment with the no wla...

Page 152: ...nfigured Further notes You configure the VLAN assignment with the wlan iprp network command 5 8 AeroScout SCALANCE W access points support tags of the AeroScout company Tags are battery operated RFID sensors that send their data cyclically as multicast frames They provide information about temperature and movement and allow the user to send notifications Note The command is only available when the...

Page 153: ... AeroScout function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan aeroscout wlan 0 X The parameters have the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses ...

Page 154: ... manual configuration changes in the management program UDP packets Messages dropped The number of frames not forwarded If for example an AeroScout tag is configured so that it sends on channel 1 the SCALANCE W700 device does not forward a frame received on channel 6 5 8 2 WLAN Interface configuration mode This section describes commands that you can call up in the WLAN Interface Configuration mod...

Page 155: ...d WLAN interface Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameters wlan no aeroscout Result AeroScout is disabled 5 9 Spectrum analyzer This section describes the commands relevant for working with the spectrum analyzer Functions specific to SCALANCE 5 9 Spectrum analyzer ...

Page 156: ...ies can be displayed and configured 5 9 1 1 show wlan spectrumanalyzer Access Point Description This command shows the settings of the spectrum analyzer Note This command is available only in access point mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show wlan spectruman...

Page 157: ...enter frequency for measuring with the spectrum analyzer Note This command is available only in access point mode Requirement The WLAN interface is enabled You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan spectrumanalyzer centerfrequency show frequencies frequency ...

Page 158: ...eacons Note Do not enable the spectrum analyzer if the device is operating productively This can influence the performance of the device Note The functionality of the spectrum analyzer does not replace a dedicated spectrum analyzer Requirement The WLAN interface is enabled You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Synt...

Page 159: ... recording was started You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan spectrumanalyzer stop Result The measurement was ended Further notes You start the recording with the wlan spectrumanalyzer start command 5 10 Remote capture This section describes the commands rel...

Page 160: ...entifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The settings are displayed 5 10 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can b...

Page 161: ...mode This section describes commands that you can call up in the REMOTE CAPTURE configuration mode In the global configuration mode enter the remote capture command to change to this mode If you exit the REMOTE CAPTURE configuration mode with the exit command you return to the global configuration mode If you exit the REMOTE CAPTURE configuration mode with the end command you return to the Privile...

Page 162: ...escription With this command you disable the function Requirement You are in the REMOTE CAPTURE configuration mode The command prompt is as follows cli remote capture Syntax Call the command without parameter assignment no activate after restart Result Saving the configuration of remote capture is disabled After a restart the configuration is rest to the default settings Functions specific to SCAL...

Page 163: ...ics purposes The increased data traffic can influence the performance of the device Requirement You are in the REMOTE CAPTURE configuration mode The command prompt is as follows cli remote capture Syntax Call up the command with the following parameters capture interface type 0 a b 0 c interface type 0 a b 0 c all own traffic all traffic The parameters have the following meaning Parameter Descript...

Page 164: ...ven after a restart Linking in the interface in Wireshark Requirement Wireshark V2 0 0 is installed on the PC The PC and device must be reachable via IP layer 3 Procedure To analyze the data traffic e g of the WLAN interface 1 in Wireshark follow the steps below 1 Activate the function cli remote capture capture wlan 0 1 own traffic on the interface 2 Start Wireshark 3 Click Options in the Capture...

Page 165: ... capture command You disable the function with the no capture command 5 10 3 4 no capture Description With this command you disable the remote capture function Requirement You are in the REMOTE CAPTURE configuration mode The command prompt is as follows cli remote capture Syntax Call the command without parameter assignment no capture Result The function is disabled Functions specific to SCALANCE ...

Page 166: ...Functions specific to SCALANCE 5 10 Remote capture SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 166 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 167: ...ime Description This command shows the settings of the system clock Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show time Result The settings for the system clock are displayed 6 1 1 2 show dst info Description This command shows all the entries for daylight saving time stored on the...

Page 168: ...lating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 6 1 2 1 time Description With this command you configure the way in which the system time is obtained Requirement You are in the Global Configuration mode The command promp...

Page 169: ... You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters time set hh mm ss day 1 31 january february march april may june july august september october november december year 2000 2035 The parameters have the following meaning Parameter Description Range of values note hh mm ss Time of day Hour minute second each...

Page 170: ...099 begin MMDDhh end MMDDhh The parameters have the following meaning Parameter Description Range of values note name Name of the entry maximum 16 characters year Year 1900 2099 begin Keyword for the start of daylight saving time MMDDhh Time for the start of daylight saving time Time in the format MM Month DD Day hh Hour end Keyword for the end of daylight saving time MMDDhh Time for the end of da...

Page 171: ...1 5 last weekday month hour end week 1 5 last weekday month hour The parameters have the following meaning Parameter Description Range of values note name Name of the entry maximum 16 characters begin Keyword for the start of daylight saving time week Calendar week in a month 1 5 last Keyword for the last calendar week in a month weekday Weekday monday tuesday wednesday thursday friday saturday su...

Page 172: ... is as follows cli config Syntax Call up the command with the following parameters no time dst name 16 The parameter has the following meaning Parameter Description Range of values note name Name of the entry maximum 16 characters Result An entry or the entries for the start and end of daylight saving time was were deleted Further notes You display the settings for the daylight saving time changeo...

Page 173: ...onfiguration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the ...

Page 174: ...tion mode In the Global configuration mode enter the ntp command to change to this mode If you exit the NTP configuration mode with the exit command you return to the Global configuration mode If you exit the NTP configuration mode with the end command you return to the Privileged EXEC mode 6 2 3 1 ntp server Description With this command you configure the connection to a server on the NTP client ...

Page 175: ...address of the time server Enter a valid IPv6 address port UDP port of the time server 1025 36564 default Default value for the UDP port 123 poll Keyword for the time after which the time of day is requested again seconds Value for the time in seconds 64 1024 For information on identifiers of addresses and interfaces refer to the section Addresses and interface identifiers Page 29 Result The conne...

Page 176: ...f Description With this command you configure the time difference between the device and the NTP server Requirement You are in the NTP configuration mode The command prompt is as follows cli config ntp Syntax Call up the command with the following parameters ntp time diff hh mm The parameter has the following meaning Parameter Description Time zones to the west of the NTP server time zone Time zon...

Page 177: ...tion describes commands with which you display various settings 6 3 1 1 show sntp broadcast mode status Description This command shows the current configuration of the broadcast mode of SNTP Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show sntp broadcast mode status Result The curren...

Page 178: ...ayed 6 3 1 3 show sntp unicast mode status Description This command shows the current configuration of the unicast mode of SNTP Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show sntp unicast mode status Result The current SNTP unicast configuration is displayed System time 6 3 SNTP cl...

Page 179: ...p Description With this command you change to the SNTP configuration mode Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters sntp Result You are now in the SNTP configuration mode The command prompt is as follows cli config sntp Further notes You exit the SNTP configuration modewith the end or exit command 6 3...

Page 180: ...ration mode The command prompt is cli config sntp Syntax Call up the command with the following parameters sntp time diff hh mm The parameter has the following meaning Parameter Description Time zones to the west of the SNTP server time zone Time zones to the east of the SNTP server time zone hh Number of hours difference mm Number of minutes difference Enter the time difference as follows with si...

Page 181: ... ipv4 Keyword for an IP address ucast_addr Value for an IPv4 unicast address Enter a valid IPv4 unicast address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters ipv6 Keyword for an IPv6 address ip6_addr Value for the IPv6 address of the time server Enter a valid IPv6 address port UDP port of the time server 1025 36564 Default 123 poll Keywo...

Page 182: ...he following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Value for an IPv4 unicast address Enter a valid IPv4 unicast address fqdn name Keyword for a domain name Fully Qualified Domain Name 100 Domain name Fully Qualified Domain Name Maximum of 100 characters ipv6 Keyword for an IPv6 address ip6_addr Value for the IPv6 address of the time server Ent...

Page 183: ...e unicast configures the SNTP client in unicast mode Default unicast enabled broadcast configures the SNTP client in broadcast mode Supports only IPv4 addresses Result The addressing mode of the SNTP client is configured Further notes You display this setting and other information with the show sntp status command You display the settings for the unicast mode with the show sntp unicast mode status...

Page 184: ...System time 6 3 SNTP client SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 184 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 185: ...n advanced Description This command shows information about the send characteristics of the SCALANCE W700 device for example the beacon rate fragmentation Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan advanced wlan 0 X The parameter has the following meaning Par...

Page 186: ...e or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan allowed channels wlan 0 X The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifie...

Page 187: ... a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The antenna settings of the relevant WLAN interface are displayed 7 1 1 4 show wlan ap access point Description The command displays the configuration parameters of the access point Note This command is available only in access point mode Requirement...

Page 188: ...ced 11n Description The command shows the 802 11n configuration Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan advanced 11n wlan 0 X The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface...

Page 189: ...ows cli or cli Syntax Call up the command with the following parameters show wlan available ap list wlan 0 X connected The parameters have the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface connected shows the information of the access points with which the client is connected For information on identifiers of addresses and interfaces r...

Page 190: ... wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The following WLAN settings are displayed Admin status whether the interface is switched on or off Frequency band WLAN mode DFS 802 11h Outdoor Mode Max Tx Power TX power check Indicates whether the current WLAN settings...

Page 191: ...meters show wlan client wlan 0 X The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The following client settings are displayed MAC Mode Manual MAC Address Any SSID Roaming Threshold Backgr...

Page 192: ... 0 X mac macaddr sys sysname AID The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface mac Keyword for the MAC address of the client macaddr MAC address aa bb cc dd ee ff sys Keyword for the system name of the client sysname System name AID Connection ID of the client For information on identifiers of addresses and interf...

Page 193: ... has the following meaning Parameter Description Range of values note vapX 0 Y VAP interface Enter a valid interface AID Connection ID of the cli ent For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The table with the logged on clients is displayed 7 1 1 11 show wlan data rates access point Description This command s...

Page 194: ...ured data transmission speeds for the corresponding WLAN interface are displayed in the form of a table The display of the tables depends on the selected frequency band and the transmission standard 7 1 1 12 show wlan device Description This command shows the WLAN basic configuration for the SCALANCE W700 device for example the mode access point or client Requirement You are in the User EXEC mode ...

Page 195: ...ilable only in access point mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan force roaming ip down index 1 10 The parameter has the following meaning Parameter Description Range of values note index Keyword for the entry 1 10 Result The configuration of the re...

Page 196: ...how wlan overlap ap list access point Description This command shows all access points that are visible on the set or adjacent channels at 2 4 GHz If entries exist here the maximum data throughput of the access point will be restricted Note This command is available only in access point mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows c...

Page 197: ...The access points are displayed 7 1 1 16 show wlan overview Description The command shows configuration of the SCALANCE W700 device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show wlan overview Network structures 7 1 WLAN SCALANCE W770 W730 acc to IEEE 802 11n Command Line...

Page 198: ...N mode MAC Mode MAC Address Operative channel Connected BSSID Connected SSID HT Channel Width Mhz Status 7 1 1 17 show wlan statistics Description This command shows the following statistics how many bad frames were received or sent per WLAN interface how many frames were sent per VAP interface how many frames were received per VAP interface Network structures 7 1 WLAN SCALANCE W770 W730 acc to IE...

Page 199: ...face Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The statistics are displayed for the selected WLAN interface The range depends on the selected operating mode 7 1 1 18 show wlan ssid table client Description This command shows a table with the SSIDs of the access points to which the clien...

Page 200: ... edit client Page 248 7 1 1 19 show wlan vap access point Description This command shows the configuration of the VAP interface Note This command is available only in access point mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan vap vapX 0 Y The parameter has ...

Page 201: ...equirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan wds wdsX 0 Y The parameter has the following meaning Parameter Description Range of values note wdsX 0 Y WDS interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the se...

Page 202: ...mand prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan wds list wlan 0 X The parameter has the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The WDS partners...

Page 203: ... the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show wlan ip mapping Result The IP mapping table is displayed 7 1 2 clear wlan statistics Description With this command you reset the WLAN statistics Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters clear wla...

Page 204: ... mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 7 1 3 1 wlan Description With this command you change to the WLAN Configuration mode Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters wlan Result You ...

Page 205: ...turn to the Global configuration mode If you exit the WLAN Configuration mode with the end command you return to the Privileged EXEC mode 7 1 4 1 device mode Description With this command you specify the mode of the SCALANCE W700 device Requirement You are in the WLAN Configuration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters device...

Page 206: ...ngs become effective on the SCALANCE W700 device Requirement You are in the WLAN Configuration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters commit mode auto manual The parameters have the following meaning Parameters Description auto Each change to the WLAN settings is automatically applied and is immediately effective manual The ch...

Page 207: ...ent Manual is set in Commit mode You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call the command without parameter assignment commit wlan settings Result The changes are confirmed and effective See also commit mode Page 206 7 1 4 4 country Description With this command you specify the country in which the SCALANCE W700 device will be used Network str...

Page 208: ...of the required country Result The country is specified for the SCALANCE W700 device Further notes You display the setting with the show wlan device command See also show wlan device Page 194 7 1 4 5 force roaming ip down Access Point Description With this command you create a new entry in the table Force Roaming on IP down and change to the force roaming configuration mode Note This command is av...

Page 209: ...You exit the force roaming configuration mode with the end or exit command You delete the entry with the no force roaming ip down command You display this setting and other information with the show wlan force roaming ip down command 7 1 4 6 no force roaming ip down Access Point Description With this command you delete the entry Note This command is available only in access point mode Requirement ...

Page 210: ...s command sets are available In the Global Configuration mode enter the interface wlan 0 X command to change to this mode If you exit the WLAN Interface Configuration mode with the exit command you return to the Global Configuration mode If you exit the WLAN Interface Configuration mode with the end command you return to the Privileged EXEC mode 7 1 5 1 wlan allowed channels Description This comma...

Page 211: ...quency band from which you want to add one or more channels to the list 4 Optional parameter Use this parameter to specify the frequency band from which you want to add one or more channels to the list 5 Optional parameter Use this parameter to specify the frequency band from which you want to add one or more channels to the list channels Number of permitted channels To specify in more than one ch...

Page 212: ... parameter assignment wlan allowed channels only Result The function is enabled Further notes You display the setting with the show wlan allowed channels wlan 0 X command You disable the function with the no wlan allowed channels only command See also wlan allowed channels Page 210 no wlan allowed channels only Page 212 7 1 5 3 no wlan allowed channels only Description With this command you disabl...

Page 213: ...els only Page 212 7 1 5 4 wlan alternative channel access point Description If you have activated the DFS function you specify the alternative channel with this command If the access point on the current channel discovers a disruption it switches to the alternative channel Note This command is available only in access point mode Requirement The DFS function is enabled You are in the Interface Conf...

Page 214: ...ng with the show wlan basic wlan 0 X command You enable the DFS function with the wlan dfs command See also wlan dfs Page 240 7 1 5 5 wlan ampdu Description With this command you enable the sending of AMPDU data packets The function is enabled as default Requirement The IEEE 802 11n transmission standard is enabled You are in the Interface Configuration mode of the WLAN interface The command promp...

Page 215: ...EE 802 11n transmission standard is enabled You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan ampdu Result The sending of AMPDU data packets is disabled Further notes You display the setting with the show wlan advanced 11n wlan 0 X command You enable the function wit...

Page 216: ... limit bytes 1024 65535 The parameter has the following meaning Parameters Description Range of values note bytes Size of the AMPDU data packet in bytes 1024 to 65535 bytes Default 50000 bytes Result The size for the AMPDU data packets is specified Further notes You display the setting with the show wlan advanced 11n wlan 0 X command 7 1 5 8 wlan ampdu frames limit Description With this command yo...

Page 217: ...splay the setting with the show wlan advanced 11n wlan 0 X command 7 1 5 9 wlan amsdu Description With this command you enable the sending of A MSDU data packets Several MSDUs with the same destination address are bundled into an A MSDU and are sent together This reduces the network load The function is enabled as default Requirement The IEEE 802 11n transmission standard is enabled You are in the...

Page 218: ...Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan amsdu Result The sending of A MSDU data packets is disabled Further notes You display the setting with the show wlan advanced 11n wlan 0 X command You enable the function with the wlan ampsu command default setting 7 1 5 11 wlan ams...

Page 219: ...an advanced 11n wlan 0 X command 7 1 5 12 wlan antenna additional attenuation Description With this command you specify the additional attenuation caused for example by an additional splitter Using the show wlan basic command check whether or not the current WLAN settings violate the permitted transmit power restrictions TX Power Check of the selected country Requirement You are in the Interface C...

Page 220: ...ommand you configure the cable length between the SCALANCE W700 device and the external antenna Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan antenna cable length index 1 2 m 0 30 The parameters have the following meaning Parameter Description Range ...

Page 221: ...enna gain 2 4GHz index 1 3 dBi 0 30 The parameters have the following meaning Parameters Description Range of values note index Antenna connector 1 3 dBi Antenna gain in decibels isotropic dBi 0 30 0 antenna is not connected Result The antenna gain is specified Further notes You show the set antenna gain with the show wlan antennas wlan 0 X command 7 1 5 15 wlan antenna gain 5GHz Description With ...

Page 222: ...e antenna gain is specified Further notes You show the set antenna gain with the show wlan antennas wlan 0 X command 7 1 5 16 wlan antenna type Description With this command you specify which antenna type is connected to the relevant antenna connector Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up...

Page 223: ... configure the settings for the antenna connected to the SCALANCE W700 device Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan antenna mode index 1 2 RX TX RX TX The parameters have the following meaning Parameter Description Range of values note index ...

Page 224: ...ngs The clients can only connect to the access point on which the Broadcast SSID option is enabled Note This command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan any ssid Result The function is enabled Further notes ...

Page 225: ...e Requirement An active SSID is available You are in the Interface configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan any ssid Result The function is disabled Further notes You display the setting with the show wlan client wlan 0 X command You enable the function with the wlan any ssid comman...

Page 226: ...ound scan interval ms 300 60000 The parameter has the following meaning Parameters Description Range of values note ms Time in milliseconds ms 300 60 000 Default 5000 Result The interval is specified Further notes You show the set interval with the show wlan client wlan 0 X command 7 1 5 21 wlan background scan mode client Description With this command you specify how the client scans for further ...

Page 227: ...which the client scans for further access points Wit the command wlan background scan interval threshold you specify the threshold If the threshold is undershot the client searches continuously for further access points Result Scanning for further access points is specified Further notes You display the setting with the show wlan client wlan 0 X command 7 1 5 22 wlan background scan threshold Clie...

Page 228: ... access point Description With this command you specify the interval at which the SCALANCE W700 device sends beacons Beacons are packets that are sent cyclically by an access point to inform clients of its existence Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wl...

Page 229: ...Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan channel show channels number 0 auto The parameters have the following meaning Parameters Description Range of values note show channels Lists the available channels number Channel number If you want the a...

Page 230: ...e parameters have the following meaning Parameters Description auto The client automatically adopts the source MAC address of the first frame that it receives over the Ethernet interface This parameter is set as default manual Enter the MAC address with the wlan client manual mac command own The client uses the MAC address of the Ethernet interface for the WLAN interface l2t The L2T parameter acti...

Page 231: ...terface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan client mac address mac address The parameter has the following meaning Parameters Description Range of values note mac address MAC address of the client aa aa aa aa aa aa Result The MAC address was assigned to the client Further notes You display the setting with the show w...

Page 232: ...0 X The transmission standard IEEE 802 11a b g n is set Syntax Call the command without parameter assignment wlan data rates 11abg selected only Result The function is enabled Further notes You display the setting with the show wlan data rates command You disable the function with the no wlan data rates 11abg selected only command You configure the data transmission speeds with the wlan data rate ...

Page 233: ...n is disabled The data transmission speed is adapted automatically Further notes You display the setting with the show wlan data rates command You enable the function with the wlan data rates 11abg selected only command You configure the transmission standard with the wlan mode command 7 1 5 29 wlan data rates 11n selected only access point Description With this command you enable the Use selected...

Page 234: ... data transmission speeds with the wlan data rate 11n command You configure the transmission standard with the wlan mode command 7 1 5 30 no wlan data rates 11n selected only access point Description With this command you enable disable the automatic selection of the data transmission speed Note This command is available only in access point mode Requirement You are in the Interface Configuration ...

Page 235: ...eeds to the required WLAN interface The access point will then use only the selected data transmission speeds for communication with the clients Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X The transmission standard IEEE 802 11a b g n is set The Use sele...

Page 236: ...mission speed entered in the rate parameter is de clared as Basic The basic parameter can only be called in conjunction with the param eters add del all and none Note You need to assign at least one data transmission speed and one Basic to the WLAN interface Result The data transmission speeds are assigned to the WLAN interface Further notes You display the setting with the show wlan data rates co...

Page 237: ...llowing parameters wlan data rate 11n show MCS indexes add del index all none The parameters have the following meaning Parameters Description show MCS indexes Shows a list of the available data transmission speeds MCS indexes add The MCS index is assigned to the WLAN interface entered in the index parameter del The MCS index is removed from the WLAN interface entered in the index parameter index ...

Page 238: ...irement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X The transmission standard IEEE 802 11a b g n is set The Use selected data rates only function is enabled Syntax Call the command without parameter assignment wlan data rate 11abg defaults Result The selection is reset to the default setting Further notes You display the...

Page 239: ...ansmission standard IEEE 802 11a b g n is set The Use selected data rates only function is enabled Syntax Call the command without parameter assignment wlan data rate 11n defaults Result The selection is reset to the default setting Further notes You display the setting with the show wlan data rates command You disable the function with the no wlan data rates 11n selected only command You configur...

Page 240: ...wlan 0 X Syntax Call the command without parameter assignment wlan dfs Result The DFS function is enabled Further notes You display the setting with the show wlan basic wlan 0 X command You disable the function with the no wlan dfs command default setting See also no wlan dfs Page 240 7 1 5 36 no wlan dfs Description With this command you disable the DFS function This setting is activated as defau...

Page 241: ...nds for primary users on the channel During this time the access point does not send beacons If signals are found on the channel the access point changes channel and repeats the check Only when no signals from primary users are detected after 60 seconds does the access point send on the channel If no fixed channel is defined for the access points the device has no configured channel to which it ca...

Page 242: ... the channel is released again following a blockage Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan dfs prefer configured channel Result The function is disabled Further notes You display the setting with the show wlan advanced wlan 0 X command You enab...

Page 243: ... If only one access point detects a signal on a channel it treats this as a valid radar signal Requirement DFS is enabled You have a system with several access points The access points are connected together via an Ethernet network The access points send on the same channel The access point does not select the channel automatically You are in the Interface Configuration mode of the WLAN interface ...

Page 244: ... wlan advanced wlan 0 X command You enable the function with the wlan dfs multi radar detection command 7 1 5 41 wlan dhcp renew Client Description Note This command is only available in the client mode With this command you specify that after changing to a different access point the IPv4 address of the client is checked If he IPv4 address is invalid a new IPv4 address is requested from the DHCP s...

Page 245: ...d you disable the function If the client changes to a different access point the IPv4 address is not checked Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan dhcp renew Result The function is disabled Further notes You enable the function with the wlan d...

Page 246: ...nt You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan dtim 1 15 The parameter has the following meaning Parameters Description Range of values note 1 15 DTIM interval after which the collected pack ets are sent to the client 1 15 Default 1 Result The DTIM interval is...

Page 247: ...t falls below this range the client disconnects from the connected access point and searches for a new access point Note This command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan min ap signal strength dBm 95 0 T...

Page 248: ...8 enable Entry is used disable Entry is not used Default delete Entry is deleted The ssid param eter is ignored ssid SSID Enter the SSID of the access point The length of the character string for SSID is 1 to 32 characters ASCII code 0x20 to 0x7e is used for the SSID To be able to use spaces in the SSID enter the SSID in quotes wlan ssid table edit H a l l o Result The corresponding index entry in...

Page 249: ...nd you enable this function Note This command is available only in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment wlan force roaming eth down Result The function is enabled Further notes You display the setting with the show wlan advanced wla...

Page 250: ...o wlan force roaming eth down Result The function is disabled Further notes You display the setting with the show wlan advanced wlan 0 X command You enable the function with the wlan force roaming eth down command 7 1 5 48 wlan fragmentation threshold Description With this command you specify the maximum packet size transferred on the wireless link Large packets are divided up into small packets p...

Page 251: ...acket size is specified Further notes You configure the transmission standard with the wlan mode command You display the setting with the show wlan advanced wlan 0 X command 7 1 5 49 wlan frequency band access point Description With this command you specify the frequency band for the WLAN interface Note This command is available only in access point mode Requirement You are in the Interface Config...

Page 252: ...mmand you specify the frequency band for the WLAN interface Note This command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan frequency band all 2 4 5 The parameters have the following meaning Parameters Description...

Page 253: ...re in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan guard interval GI400 GI800 The parameters have the following meaning Parameters Description GI400 The send pause is 400 ns default GI800 The send pause is 800 ns Result The function is enabled and the send pause set Furth...

Page 254: ...scription HT 20 Channel bandwidth 20 MHz HT 40 UP Channel bandwidth 40 MHz The configured channel and the neighboring channel above it are used default setting HT 40 DOWN Channel bandwidth 40 MHz The configured channel and the underlying neighboring channel are used Note Channel bandwidth 40 MHz and frequency band 2 4 GHz If the access point detects another access point on the configured channel o...

Page 255: ...t The number of retries is specified Further notes You display the setting with the show wlan advanced wlan 0 X command 7 1 5 54 wlan max tx power Description With this command you specify the transmit power of the SCALANCE W700 device It may be necessary to reduce the transmit power when using antennas to avoid exceeding the maximum legal transmit power Reducing the transmit power effectively red...

Page 256: ...cription Range of values note dBm Transmit power in decibel milliwatts dBm 5 20 Default 20 Result The transmit power is specified Further notes You display the setting with the show wlan basic wlan 0 X command 7 1 5 55 wlan mode access point Description With this command you specify the transmission standard Note This command is available only in access point mode Requirement You are in the Interf...

Page 257: ...se the parameter if the client operates in dual frequency mode mode Value corresponding to a specific transmission standard auto The transmission standard is detected automatically a IEEE 802 11a 5 GHz g IEEE 802 11g 2 4 GHz Is downwards compatible with IEEE 802 11b n IEEE 802 11n 2 4 GHz 5 GHz Is downwards compatible with IEEE 802 11a and IEEE 802 11g n only IEEE 802 11n 2 4 GHz 5 GHz Is not down...

Page 258: ...Syntax Call up the command with the following parameters wlan mode show modes 2 4 5 mode The parameters have the following meaning Parameters Description Range of values note show modes Lists the transmission standards 2 4 Optional You can use the parameter in conjunction with auto and n This on ly takes into account the transmission standard for 2 4 GHz Use the parameter if the client operates in...

Page 259: ...s not downwards compatible with IEEE 802 11a and IEEE 802 11g Depending on the current configuration some settings are not possible In this case a message to this effect is displayed Result The transmission standard is specified Further notes You display the setting with the show wlan basic wlan 0 X command 7 1 5 57 wlan outdoor Description With this command you enable the outdoor mode In outdoor ...

Page 260: ...nable the indoor mode This setting is activated as default In indoor mode all the country dependent permitted channels and transmit power settings are available for operation in a building Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call the command without parameter assignment no wlan outdoor Result T...

Page 261: ...ly in access point mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan overlap ap aging min 1 7200 The parameter has the following meaning Parameters Description Range of values note min Time in minutes min 1 7200 Default 120 Result The aging time is ...

Page 262: ...ium high The parameters have the following meaning Parameter Description low Even if the difference in field strength is low change to the AP with the stronger signal medium If the difference in field strength is medium change to the AP with the stronger signal Default medium high If the difference in field strength is high change to the AP with the stronger signal Result The threshold is specifie...

Page 263: ...rther notes You display the setting with the show wlan advanced wlan 0 X command 7 1 6 Commands in the VAP Interface Configuration mode This section describes commands that you can call up in the VAP Interface Configuration mode Depending on the Interface selected various command sets are available In the Global Configuration mode enter the interface vapX 0 Y command to change to this mode If you ...

Page 264: ...ig if vapX 0 Y Syntax Call up the command with the following parameters vap wds id wds id The parameter has the following meaning Parameter Description wds id WDS ID The WDS ID can be a maximum of 32 characters long Result The WDS ID for the VAP interface is set Note WDS IDs longer than 32 characters are truncated at 32 characters Further notes You display the setting with the show wlan vap vap X ...

Page 265: ...ter has the following meaning Parameters Description Range of values note ssid SSID of the VAP interface Enter the SSID The length of the character string for SSID is 1 to 32 characters ASCII code 0x20 to 0x7e is used for the SSID To be able to use spaces in the SSID enter the SSID in quotes vap ssid H a l l o Result The SSID for the VAP interface is configured Further notes You display the settin...

Page 266: ...rement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment vap broadcast ssid Result The function is enabled Further notes You display the setting with the show wlan vap vap X 0 Y command You disable the function with the no vap broadcast ssid command See also no vap broadcast ...

Page 267: ...and is available only in access point mode Requirement You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment no vap broadcast ssid Result The function is disabled Further notes You display the setting with the show wlan vap vap X 0 Y command You enable the function with the vap b...

Page 268: ...ed who the VAP interface connects to Further notes You display the setting with the show wlan vap vap X 0 Y command You disable the function with the no vap wds only command default setting See also no vap wds only access point Page 268 7 1 6 6 no vap wds only access point Description With this command you specify that the access point supports not only communication via WDS This setting is activa...

Page 269: ...he WDS Interface Configuration mode This section describes commands that you can call up in the WDS Interface Configuration mode Depending on the Interface selected various command sets are available In the Global Configuration mode enter the interface wdsX 0 Y command to change to this mode If you exit the WDS Interface Configuration mode with the exit command you return to the Global Configurati...

Page 270: ...ess wds id The parameters have the following meaning Parameters Description mac address The MAC address is used for communication With the wds partner mac command you specify the MAC address wds id The WDS ID is used for communication With the wds partner wds id com mand you specify the WDS ID Result The type of communication is specified Further notes You display the setting with the show wlan wd...

Page 271: ...tax Call up the command with the following parameters wds partner mac mac address The parameter has the following meaning Parameters Description mac address MAC address of the communications partner Result The MAC address is specified Further notes You display the setting with the show wlan wds wdsX 0 Y command See also wds partner id type access point Page 270 Network structures 7 1 WLAN SCALANCE...

Page 272: ... wdsX 0 Y Syntax Call up the command with the following parameters wds partner wds id wds id The parameter has the following meaning Parameters Description wds id WDS ID of the WDS partner Result The WDS ID is specified Further notes You display the setting with the show wlan wds wdsX 0 Y command See also wds partner id type access point Page 270 Network structures 7 1 WLAN SCALANCE W770 W730 acc ...

Page 273: ... Description Range of values note wdsX 0 Y Interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The VAP interface is set Further notes You display the setting with the show wlan wds wdsX 0 Y command 7 1 8 Commands in the force roaming configuration mode 7 1 8 1 Introductory sentence for ...

Page 274: ...ss at regular intervals Note This command is available only in access point mode Requirement You are in the force roaming configuration mode The command prompt is as follows cli config wlan froid Syntax Call up the command with the following parameters dest addr ipv4 ucast_addr fqdn name FQDN The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an I...

Page 275: ...st Access Point Description With this command you specify the maximum number of consecutive lost ping responses When this number is reached for a destination address this destination address counts as being unreachable down Note This command is available only in access point mode Requirement You are in the force roaming configuration mode The command prompt is as follows cli config wlan froid Synt...

Page 276: ...n mode The command prompt is as follows cli config wlan froid Syntax Call up the command with the following parameters interval interval 100 5000 The parameter has the following meaning Parameter Description Range of values note interval Interval Enter the required interval 100 5000 seconds Result The setting is configured Further notes You display this setting and other information with the show ...

Page 277: ...ommand is available only in access point mode Requirement You are in the force roaming configuration mode The command prompt is as follows cli config wlan froid Syntax Call up the command with the following parameters port vapX 0 Y The parameter has the following meaning Parameter Description Range of values note vapX 0 Y VAP interface Specify a valid interface For information on identifiers of ad...

Page 278: ...ange of values note vapX 0 Y VAP interface Specify a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The function is disabled Further notes You display this setting and other information with the show wlan force roaming ip down command You enable this setting with the port command 7 2 VLAN This secti...

Page 279: ...meaning Parameter Description Range of values note address Keyword for a MAC address aa aa aa aa aa aa MAC address Specify a valid MAC ad dress interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Interface i...

Page 280: ...ber of the addressed VLAN or VLAN range 1 4094 Enter the range limits with a hy phen or a space address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the sec...

Page 281: ...ge of values note vlan Keyword for a VLAN or VLAN range vlan range Number of the addressed VLAN or VLAN range 1 4094 address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interf...

Page 282: ...LAN connection vlan id Number of the addressed VLAN 1 4094 If you do not select any parameter from the parameter list the total number of entries is displayed for all VLANs Result The number of MAC addresses for the selected VLAN is displayed 7 2 1 5 show vlan Description This command shows the specific information for all or a selected VLAN Requirement You are in the User EXEC mode or in the Priv...

Page 283: ...er list the entries of all available interfaces are displayed Result The information for the selected VLAN is displayed 7 2 1 6 show vlan device info Description This command shows all the global information that is valid for all VLANs Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show...

Page 284: ...d for a VLAN or VLAN range vlan range Number of the addressed VLAN or VLAN range 1 4094 Enter the range limits with a hy phen or a space If you do not select any parameter from the parameter list the entries of all available interfaces are displayed Result The settings for the automatic learning of addresses are displayed 7 2 1 8 show vlan port config Description This command shows the VLAN specif...

Page 285: ...is section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode...

Page 286: ...g Description With this command you disable the Aging function Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no mac address table aging Result The Aging function is disabled Further notes You enable the Aging function with the mac address table aging command Network structures 7 2 VLAN SCALANCE W770 W730 ...

Page 287: ...g parameters vlan vlan id 1 4094 The parameter has the following meaning Parameter Description Range of values note vlan id Number of the addressed VLAN 1 4094 Do not enter any leading zeros with the number of the VLAN Result The VLAN is created You are now in the VLAN configuration mode The command prompt is as follows cli config vlan Further notes You delete the VLAN with the no vlan command You...

Page 288: ...sult The VLAN is deleted Further notes With the vlan command you create a VLAN on the device You can display information about the VLAN with the show vlan command 7 2 2 5 base bridge mode Description With this command you configure whether or not the device is configured as a bridge according to IEEE 802 1D for the Spanning Tree protocol or according to IEEE 802 1Q for a virtual bridged LAN Requir...

Page 289: ...2 6 mgmt vlan Description With this command you change the agent VLAN ID You can only use VLANs that have already been configured Note Changing the agent VLAN ID If the configuration PC is connected directly to the device via Ethernet and you change the agent VLAN ID the device is no longer reachable via Ethernet following the change Requirement In base bridge mode the mode for the device is set t...

Page 290: ...at can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mode 7 2 3 1 switchport acceptable frame type Description With this command you configure which ty...

Page 291: ...ccess vlan Description With this command you assign an VLAN to an interface and configure the port VLAN identifier PVID for it Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters switchport access vlan vlan id 1 4094 The parameter has the following meaning Parameter Description Range of valu...

Page 292: ...without parameters no switchport access vlan Result The setting is reset to the default value Further notes You configure the setting with the switchport access vlan command You can display the status of this function and other information with the show vlan port configcommand 7 2 3 4 switchport ingress filter Description With incoming packets the ingress filter checks whether the port on which th...

Page 293: ...ingress filter and other settings with the show vlan port config command 7 2 3 5 no switchport ingress filter Description With this command you disable the ingress filter Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport ingress filter Result The ingress filter is deactivated Network struc...

Page 294: ... 0 7 The parameter has the following meaning Parameter Description Range of values note Value for the priority default 0 7 Default 0 Result The setting for the default priority of the interface is configured Further notes You reset the priority default to the original default with the no switchport priority default command You display this setting and other information with the show vlan port conf...

Page 295: ...command 7 2 3 8 switchport pvid Description With this command you assign an interface to a VLAN and configure the port VLAN identifier PVID for it If a received frame has no VLAN tag it has a tag added with the VLAN ID specified here and is sent according to the switch rules for the port Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax C...

Page 296: ...ion With this command you reset the setting for the port VLAN identifier PVID for an interface to the default value The default value is 1 Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport pvid Result The setting is reset to the default value Further notes You configure the setting with th...

Page 297: ...ion mode with the exit command you return to the Global Configuration mode If you exit the VLAN Configuration mode with the end command you return to the Privileged EXEC mode 7 2 4 1 name Description With this command you assign a name to the VLAN Requirement You are in the VLAN Configuration mode The command prompt is as follows cli config vlan Syntax Call up the command with the following parame...

Page 298: ... ports Description With this command you generate a static VLAN entry that specifies the use of the ports Here you configure the following types of ports Member ports tagged ports These ports are permanently added to the list of outgoing connections Untagged ports These ports transfer data packets without a VLAN marking Forbidden ports These ports are not used for communication in a VLAN The tagge...

Page 299: ... Port no of the interface Enter a valid interface name a b 0 c Port no of the interface Enter a valid interface name untagged Keyword for interfaces or ports that transfer data packets without VLAN marking all Specifies that all interfaces or ports are set to untagged forbidden Keyword for forbidden interfaces or ports name Keyword for the name assignment vlan name Name of the VLAN max 32 characte...

Page 300: ... Range of values note interface type Type or speed of the interface Enter a valid interface a b 0 c Port no of the interface untagged Keyword for interfaces or ports that transfer data packets without VLAN marking all Specifies that all interfaces or ports are set to untagged forbidden Keyword for forbidden interfaces or ports name Keyword for the name assignment vlan name Name of the VLAN max 32 ...

Page 301: ...ds in this section you should take particular care because a bad configuration of this function can have serious negative affects on the network 7 3 1 The show commands This section describes commands with which you display various settings 7 3 1 1 show spanning tree Description This command shows the settings of the spanning tree function Requirement You are in the User EXEC mode or in the Privil...

Page 302: ... tree detail show spanning tree interface show spanning tree root show spanning tree mst 7 3 1 2 show spanning tree active Description This command shows the settings for the active ports of the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show spa...

Page 303: ... the time that the bridge is in the listening mode when changing from the blocking mode to the learning mode hello time Shows the time after which the bridge sends configuration frames BPDUs id Shows the ID of the bridge max age Shows the maximum age of the data packet after which it is deleted protocol Shows the protocol used priority Shows the priority of the bridge detail Shows detailed informa...

Page 304: ...Call up the command with the following parameters show spanning tree interface interface type interface id cost priority portfast rootcost restricted role restricted tcn state stats detail The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface cost...

Page 305: ...on Interface identifiers and addresses Page 29 Result The settings of the ports for the spanning tree function are displayed 7 3 1 6 show spanning tree l2t edge Description This command displays the status of the layer 2 tunnel ports Note This command is available only in access point mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli...

Page 306: ...Spanning Tree Protocol with the show spanning tree command 7 3 1 8 show spanning tree mst Description This command shows various settings of the spanning tree configuration specific to a Common Internal Spanning Tree CIST instance or a selected instance of the Multiple Spanning Tree Protocol Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows c...

Page 307: ...ration Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with one of the following parameter assignments show spanning tree mst instance id 1 64 4094 interface interface type interface id stats hello time detail The parameters have the following meaning Parameter Description Range of values note instance ...

Page 308: ... command shows the settings of the root bridge for the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show spanning tree root address cost forward time id max age port priority detail The parameters have the following meaning Parameter Description ad...

Page 309: ...mode The command prompt is as follows cli or cli Syntax Call the command without parameters clear spanning tree counters Result The spanning tree counters are reset 7 3 3 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating...

Page 310: ...urther notes As default the function is enabled You disable the spanning tree function with the no spanning tree command You can display the status of this function and other information with the show spanning tree detail command You can display information about active ports with the show spanning tree active command 7 3 3 2 no spanning tree Description With this command you disable the spanning ...

Page 311: ...tocol that will be used by the spanning tree function Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters spanning tree compatibility stp rst mst The parameters have the following meaning Parameter Description Range of values note stp The version is compatible with the Span ning Tree protocol rst ...

Page 312: ... of the protocol of the spanning tree function to the default value The default value is MST Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no spanning tree compatibility Result The compatibility version is reset to the default value Further notes You configure the setting with the spanning tree compatibil...

Page 313: ... You disable the automatic detection with the no spanning tree l2t auto edge command You can display the status of this function with the show spanning tree l2t edgecommand 7 3 3 6 no spanning tree l2t auto edge Description With this command you disable automatic detection of an end device at layer 2 tunnel ports Requirement You are in the Global Configuration mode The command prompt is as follows...

Page 314: ...guration of the network will be triggered whenever a link to this port is modified The L2T clients should be interconnected Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters spanning tree l2t edge Result The setting is enabled Further notes You disable the setting with the no spanning tree l2t edge command Yo...

Page 315: ...covery of a bridge on the interface is disabled with the spanning tree l2t edge command You can display the status of this function with the show spanning tree l2t edgecommand 7 3 3 9 spanning tree mst configuration Description With this command you change to the MSTP configuration mode Requirement MSTP is enabled Compatibility mode MSTP You are in the Global configuration mode The command prompt ...

Page 316: ...ary or a substitute root bridge secondary Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters spanning tree mst instance id instance id 1 64 root primary secondary The parameters have the following meaning Parameter Description Range of values note instance id Keyword for the instance instance id ...

Page 317: ... notes You disable the root bridge with the no spanning tree mst instance id root command You display this setting and other information with the commands that start with show spanning tree 7 3 3 11 no spanning tree mst instance id root Description With this command you disable the root bridge function on the device Requirement You are in the Global Configuration mode The command prompt is as foll...

Page 318: ...all up the command with the following parameters spanning tree mst max hops value 6 40 The parameter has the following meaning Parameter Description Range of values note value Maximum number of hops that a path can run through in an MST 6 40 Default 20 Result The setting for the maximum number of hops is configured Further notes You can reset the setting for the maximum number of nodes to the defa...

Page 319: ...aximum number of nodes with the spanning tree mst max hops command You display this setting and other information with the show spanning tree mst configuration command 7 3 3 14 spanning tree priority Description With this command you configure the priority of the device Which device becomes the root bridge is decided based on the priority The bridge with the highest priority becomes the root bridg...

Page 320: ... notes You can reset the setting to the default with the no spanning tree priority command You display this setting and other information with the commands that start with show spanning tree 7 3 3 15 no spanning tree priority Description With this command you reset the priority of the device back to the default value The default value is 32768 Requirement You are in the Global Configuration mode T...

Page 321: ...gs of the spanning tree function With the forward time option you configure the time after which a port changes its spanning tree status from Blocking to Forwarding With the hello time option you configure the time after which the bridge sends its configuration frames BPDUs With the max age option you configure the time after which the information of the BPDUs becomes invalid Requirement You are i...

Page 322: ...o time 1 Result The selected setting for the time is configured Further notes You reset the time settings to the default values with the no spanning tree forward time no spanning tree hello time or no spanning tree max age If you call the no spanning tree command without parameters you disable the spanning tree function The configured time settings are retained If you call the restart factory comm...

Page 323: ...forward time hello time max age The parameters have the following meaning Parameter Description forward time Time after which a port changes its spanning tree status from Blocking to Forwarding hello time Time after which the bridge sends its configuration frames BPDUs max age Time after which the information of the BPDUs becomes invalid Result The selected setting for the time is reset to the def...

Page 324: ...iption With this command you configure the various properties of the spanning tree function With the cost option you configure the port costs used to calculate the lowest cost path With the disable option you disable the interface for the spanning tree function With the link type option you configure the connection status of the following network segment The following settings are possible point t...

Page 325: ...spanning tree function is ena bled on the interface link type Connection status of the following net work segment point to point shared Default point to point The connection is configured as full duplex shared in all other cases portfast Enables the PortFast function Default disabled port priority Priority of the interface 0 240 in steps of 16 Default 128 Note Configure multiple properties With ea...

Page 326: ...tion is configured as full duplex shared in all other cases portfast disabled port priority 128 Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters no spanning tree cost disable link type portfast port priority The parameters have the following meaning Parameter Description cost Keyword for ...

Page 327: ...nning tree auto edge Description With this command you enable automatic discovery of a bridge connected to the interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters spanning tree auto edge Result The automatic discovery of a bridge on the interface is enabled Further notes The automatic discovery ...

Page 328: ...urther notes The automatic discovery of a bridge on the interface is enabled with the spanning tree auto edge command 7 3 4 5 spanning tree bdpufilter Description With this command you configure the BPDU transmit status for a port Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters spanning ...

Page 329: ...as follows cli config if Syntax Call up the command with the following parameters spanning tree bpdu receive enabled disabled The parameters have the following meaning Parameter Description Range of values note enabled BPDU packets are received at the port Default enabled disabled BPDU packets are ignored at the port Result The BPDU receive status is enabled or disabled Further notes You can displ...

Page 330: ...tus has switched over Further notes You can display the status of this function and other information with the show spanning tree interface command with the detail option 7 3 4 8 spanning tree mst Description With this command you configure the various properties of the Multiple Spanning Tree function With the cost option you configure the port costs used to calculate the lowest cost path With the...

Page 331: ...ce 0 240 in steps of 16 Default 128 disable disables the interface for multiple span ning tree Default The Multiple Spanning Tree func tion is enabled on the interface Note Configure multiple properties With each call of the command you can configure precisely one property If you want to configure several properties call the command several times Result The selected property is configured Further ...

Page 332: ...id 1 64 cost port priority disable The parameters have the following meaning Parameter Description Range of values note instance id Number of the addressed instance 1 64 cost Keyword for the costs of the port for cal culating the lowest cost path port priority Keyword for the priority of the interface disable Enables the interface for multiple span ning tree Note Configure multiple properties With...

Page 333: ...s cli config if Syntax Call up the command with the following parameters spanning tree mst hello time seconds 1 2 The parameter has the following meaning Parameter Description Range of values note seconds Time after which the bridge sends its configuration frames BPDUs 1 2 Default 2 Result The setting for the hello time is configured Further notes You can reset the setting for the hello time to th...

Page 334: ...ing tree mst hello time command You display this setting and other information with the commands that start with show spanning tree 7 3 5 Commands in the MSTP configuration mode This section describes commands that you can call up in the MSTP configuration mode In the Global configuration mode enter the spanning tree mst configuration command to change to this mode If you exit the MSTP configurati...

Page 335: ...escription Range of values note instance id Number of the instance 1 64 You can define up to 8 MSTP in stances Default The VLANs 1 4094 are assigned to instance 0 vlan Keyword for a VLAN connection vlan range Range of VLANs assigned to an in stance enter the range limts with a hyphen or blank Result The range of VLANs is assigned to the MST instance Further notes You cancel the assignment of the V...

Page 336: ...the MST instance 1 64 vlan Keyword for a VLAN connection vlan range Range of VLANs that will be deleted from the instance 1 4094 Enter the range limits with a hy phen or a space If you specify a VLAN or a VLAN range the assignment to an MST instance is canceled If you do not specify a VLAN the MST instance is deleted Result The assignment of a VLAN to an MST instance is canceled or the MST instanc...

Page 337: ... is the MAC address of the device Result The name is configured Further notes You delete the name of the MST region with the no namecommand You display this setting and other information with the show spanning tree mst configuration command 7 3 5 4 no name Description With this command you reset the name for the MST region to the default value The default value is The MAC address of the device is ...

Page 338: ...assign a revision number to the MST region Requirement You are in the MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call up the command with the following parameters revision revision no 0 65535 The parameters have the following meaning Parameter Description Range of values note revision no Value of the revision number 0 65535 Default 0 Result The MST region is ass...

Page 339: ... MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call the command without parameters no revision Result The revision number of the MST region is reset to the default value Further notes You assign a revision number to the MST region with the revision command You display this setting and other information with the show spanning tree mst configuration command Network s...

Page 340: ...Network structures 7 3 Spanning Tree SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 340 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 341: ... mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show dcp forwarding port interface type interface id The parameters have the following meaning Parameter Description Range of values note port Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface ...

Page 342: ... command without parameters show dcp server Result The overview of the status of the DCP function and access rights is displayed 8 1 1 3 show ip route Description This command shows the routes currently being used Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show ip rout...

Page 343: ...server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip telnet Result The admin status and the port number of the Telnet server are displayed 8 1 1 5 show ip dns Description This command shows information about the DNS client for example the status of the DNS client and parameters...

Page 344: ... DNS server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip dns cache Result The content of the DNS cache is displayed 8 1 1 7 show ip dns name server Description This command shows information about the DNS servers configured on the device The table contains the index the addres...

Page 345: ...ment You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip dns statistics Result Information about the communication with the DNS server is displayed 8 1 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged ...

Page 346: ...command prompt is as follows cli config Syntax Call the command without parameters telnet server As default the function is enabled Result The Telnet server is enabled Further notes You disable the Telnet server with the no telnet server command 8 1 2 2 no telnet server Description With this command you disable the Telnet server Requirement You are in the Global configuration mode The command prom...

Page 347: ...nd a packet back to the sender echo reply With this command you enable the network node to react to ping queries Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ip echo reply Result ICMP echo reply messages are enabled The network node reacts to ping queries Further notes You disable the setting with the no...

Page 348: ...de does not react to ping queries Further notes You change the setting with the ip echo reply command 8 1 2 5 ip route Description With this command you configure a static entry in the IP routing table Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters ip route gateway Network protocols 8 1 IPv4 ...

Page 349: ...t You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no ip route gateway The parameter has the following meaning Parameter Description Range of values note gateway Specifies the IP address of the gateway Specify a valid IP address Result The entry is deleted Further notes You configure an entry from the IP r...

Page 350: ... note read only only reading is permitted on the DCP server read write reading and writing is permitted on the DPC server Default read write Result The read and write permissions for the DPC server are configured The DCP server is enabled Further notes You disable the DCP server with the no dcp server command 8 1 2 8 no dcp server Description With this command you disable the DCP server Requiremen...

Page 351: ...ion a DNS server must be reachable Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ip domain lookup Result The DNS client of the device is enabled and when necessary sends queries to the DNS server 8 1 2 10 no ip domain lookup Description This command disables the DNS client of the device Network protocols ...

Page 352: ...fies which DNS server the device uses Note Only resource records of type A IPv4 address of a host are supported Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters ip domain used server learned only manually only all Network protocols 8 1 IPv4 protocol SCALANCE W770 W730 acc to IEEE 802 11n Comman...

Page 353: ...ow this the optional parameter index is available The server with the lowest index is queried first Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters ip name server ipv4 ucast_addr ipv6 ip6_addr index integer 1 3 The parameters have the following meaning Parameter Description Range of values not...

Page 354: ...ntax Call up the command with the following parameters no ip name server ipv4 ucast_addr ipv6 ip6_addr index id 1 3 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for IPv4 ucast_addr IP address of the DNS server Enter a valid IPv4 address ipv6 Keyword for IPv6 ip6_addr IPv6 address of the DNS server Enter a valid IPv6 address index Keyword for the...

Page 355: ...mand you assign an IP address to a VLAN interface Requirement Interface is a router port You are in the Interface configuration mode of VLAN The command prompt is as follows cli config if vlan Syntax Call up the command with the following parameters ip address ip address subnet mask prefix length 1 32 The parameters have the following meaning Parameter Description Range of values note ip address I...

Page 356: ...erface configuration mode of VLAN The command prompt is as follows cli config if vlan Syntax Call up the command with the following parameters no ip address ucast_addr dhcp The parameter has the following meaning Parameter Description Range of values note ucast_addr IP Address of the VLAN interface that will be deleted enter a valid IP address dhcp Specify this parameter if you want to cancel the ...

Page 357: ...dhcp Description With this command the VLAN interface obtains the IP address via DHCP Requirement You are in the Interface Configuration mode of VLAN The command prompt is as follows cli config if vlan Syntax Call the command without parameters ip address dhcp Result The DHCP assigns the IP address to the VLAN interface Further notes You delete the settings with the no ip address command You displ...

Page 358: ... block DCP frames are discarded forward DCP frames are forwarded Default forward Result The forwarding behavior of the interface for DCP frames is configured 8 2 IPv6 protocol This section describes the commands relevant for working with IPv6 8 2 1 Configuration matrix Address configuration in WBM System Agent IPv6 CLI commands ipv6 address autocon fig ipv6 address dhcp ipv6 address Automatic x x ...

Page 359: ... without parameter assignment show ipv6 neighbors Result The IPv6 neighbors table is displayed Further notes You configure a static entry with the ipv6 neighbor command 8 2 2 2 show ipv6 pmtu Description This command shows the settings for Path MTU Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protocols 8 2 IPv6 protoco...

Page 360: ...mmand without parameter assignment show ipv6 route Result The IPv6 routing table is displayed Further notes You configure a static entry with the ipv6 route command 8 2 2 4 show ipv6 static route Description This command shows the routes that were generated statically Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows Network protocols 8 2 IPv...

Page 361: ...v6 traffic interface vlan vlan id interface type interface id hc The parameters have the following meaning Parameter Description Range of values note interface Keyword for the interface via which the statistics are created VLAN Interface vlan Keyword for a VLAN vlan id Keyword for a VLAN connection 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no ...

Page 362: ...ating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 8 2 3 1 ipv6 neighbor Description With this command you configure a static entry in the IPv6 neighbors table Requirement The neighbor node is located on the same link You ar...

Page 363: ...ses Page 29 Result The entry is configured Further notes You delete an entry with the no ipv6 neighbor command You display the IPv6 neighbor table with the show ipv6 neighbors command 8 2 3 2 no ipv6 neighbor Description With this command you delete an entry from the IPv6 neighbor table Requirement The neighbor node is located on the same link You are in the Global configuration mode The command p...

Page 364: ...tion Interface identifiers and addresses Page 29 Result The entry is deleted Further notes You configure an entry with the no ipv6 neighbor command You display the IPv6 neighbor table with the show ipv6 neighbors command 8 2 3 3 ipv6 path mtu Description With this command you configure maximum packet size MTU The setting is only effective if PMTU Discovery is enabled Requirement You are in the Glo...

Page 365: ...iscovery function with the command ipv6 path mtu discovery 8 2 3 4 no ipv6 path mtu Description With this command you disable the use of the maximum packet size In other words the setting is no longer used with the PMTU Discovery function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no ipv6...

Page 366: ...in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment ipv6 path mtu discover Result The PMTU Discovery function is enabled Further notes You disable the PMTU Discovery function with the command no ipv6 path mtu discover You display the settings with the show ipv6 pmtu command 8 2 3 6 no ipv6 path mtu discover Description W...

Page 367: ...6 route that applies to all IPv6 addresses The device only needs to know the default gateway NextHop and sends all IPv6 packets to it The default gateway either knows all routes itself or has a default route to another default gateway Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters ipv6 defaul...

Page 368: ... the interface For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The entry is configured Further notes You delete a static entry from the IPv6 routing table with the no ipv6 route command You display the IPv6 routing table with the show ipv6 route command 8 2 3 8 no ipv6 default route Description With this command you delet...

Page 369: ... of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The entry is deleted Further notes You configure a static entry in the IPv6 routing table with the ipv6 route command You display the IPv6 routing table with the show ipv6 route com...

Page 370: ...ows cli config if Syntax Call up the command with the following parameters ipv6 address prefix prefix length unicast eui64 or ipv6 address prefix prefix length unicast eui 64 link local The parameters have the following meaning Parameter Description Range of values note prefix IPv6 address Enter a valid IPv6 address prefix length Number of bits belonging to the prefix from left to right 1 128 bits...

Page 371: ...ed The interface is an IP interface You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters no ipv6 address prefix prefix length unicast eui64 The parameters have the following meaning Parameter Description Range of values note prefix IPv6 address Enter a valid IPv6 address prefix Len Number of bits belongi...

Page 372: ...face You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameter assignment ipv6 address autoconfig Result Stateless autoconfiguration is enabled Further notes You disable the setting with the no ipv6 address autoconfig command You show the setting with the show ipv6 dhcp interface command You can display the statistics of th...

Page 373: ...config Result Stateless autoconfiguration is enabled Further notes You enable the setting with the ipv6 address autoconfig command You show the setting with the show ipv6 dhcp interface command You can display the statistics of the DHCPv6 client with the show ipv6 dhcp client statistics command 8 2 4 5 ipv6 address dhcp Description With this command you specify whether the DHCPv6 client obtains th...

Page 374: ... DHCPv6 messages SOLICIT REPLY This is only possible when the DHCPv6 serv er supports this Result The setting is configured Further notes You disable the setting with the no ipv6 address dhcp command You show the setting with the show ipv6 dhcp interface command You can display the statistics of the DHCPv6 client with the show ipv6 dhcp client statistics command 8 2 4 6 no ipv6 address dhcp Descri...

Page 375: ...ipv6 dhcp interface command You can display the statistics of the DHCPv6 client with the show ipv6 dhcp client statistics command 8 2 4 7 ipv6 address link local Description With this command you assign a link local address to the interface Requirement IPv6 is activated The interface is an IP interface You are in the Interface configuration mode The command prompt is as follows cli config if Synta...

Page 376: ...local Description With this command you delete the link local address Requirement IPv6 is activated The interface is an IP interface You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters no ipv6 address prefix link local The parameter has the following meaning Parameter Description Range of values note pr...

Page 377: ...onfiguration mode The command prompt is as follows cli config if Requirement You are in the Interface configuration mode of VLAN The command prompt is as follows cli config if vlan Syntax Call the command without parameter assignment ipv6 enable Result IPv6 is enabled Further notes You configure an IPv6 address with the ipv6 address command You display this setting and other information with the s...

Page 378: ...ou display this setting and other information with the show ipv6 interface command 8 3 DHCPv4 client IPv4 This section describes commands of the Dynamic Host Configuration Protocol DHCP 8 3 1 The show commands This section describes commands with which you display various settings 8 3 1 1 show ip dhcp client stats Description With this command you display the statistical counters of the DHCP clien...

Page 379: ...s cli or cli Syntax Call the command without parameters show ip dhcp client Result The configuration settings of the DHCP client are displayed 8 3 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that ...

Page 380: ...t You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ip dhcp config file request Result The DHCP config file request option is enabled Further notes You disable the DHCP config file request option with the no ip dhcp config file request command 8 3 2 2 no ip dhcp config file request Description With this command you disab...

Page 381: ...all up the command with the following parameters ip dhcp client mode mac client id client id sysname pnio name of station The parameters have the following meaning Parameter Description Range of values note mac The client registers with its MAC address client id The client registers with the assigned ID client id Name of the assigned ID max 32 characters sysname The client registers with the assig...

Page 382: ...n Range of values note interface Shows that an interface description follows vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 2...

Page 383: ... Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show ipv6 dhcp Result The configuration is displayed 8 4 2 2 show ipv6 dhcp interface Description This command shows the DHCPv6 configuration and the DHCPv6 information that was received from the DHCPv6 server Requirement You are in the Privileged EXEC mode The command prompt is a...

Page 384: ... AUTOHOTSPOT Result The information is displayed See also Interface identifiers and addresses Page 29 8 4 2 3 show ipv6 dhcp client statistics Description With this command you display the statistics of the DHCPv6 client It provides information about how many PDUs were received or sent per interface Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up...

Page 385: ...tion mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Int...

Page 386: ...ess of the DNS server domain name Domain name sntp server address IPv6 address of the SNTP server option Keyword for the option code code Number of the DHCPV6 option Enter the required number 1 200 Result The setting is configured Further notes You remove the request with the no ipv6 dhcp client request command 8 4 3 2 no ipv6 dhcp client request Description With this command you remove the reques...

Page 387: ...ion Keyword for the option code code ID of the DHCPV6 option Specify the required ID of the DHCPv6 option 1 100 Result The required configuration parameter is removed Further notes You configure the request with the ipv6 dhcp client request command 8 5 DHCP server You can operate the device as a DHCP server This allows IP addresses to be assigned automatically to the connected devices The IP addre...

Page 388: ...uirement The connected devices are configured so that they obtain the IPv4 address from a DHCP server 8 5 1 The show commands This section describes commands with which you display various settings 8 5 1 1 show ip dhcp server pools Description The command shows the DHCP server configuration of a specific IPv4 address band or all IPv4 address bands and the corresponding DHCP options Requirement You...

Page 389: ...ation is displayed 8 5 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode ...

Page 390: ...ments you can create a maximum of 20 entries Requirement NAT is enabled in Client mode You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment ip dhcp server Result The DHCP server is enabled Further notes You disable the DHCP server with the no ip dhcp server command 8 5 2 2 no ip dhcp server Description With this c...

Page 391: ...robe address with ICMP echo before offer The DHCP server checks whether or not the IPv4 address has already been assigned If no reply is received the DHCP server can assign the IPv4 address Note With static assignments this check is not made Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment ip dhcp ...

Page 392: ...ode You then configure the other settings in the DHCPPOOL configuration mode 3 If you call the ip dhcp server pool command without parameters and IPv4 address band with the next free pool ID is created and you change directly to the corresponding DHCPPOOL configuration mode You then configure the interface and the other settings in the DHCPPOOL configuration mode Requirement You are in the Global ...

Page 393: ...ith the exit command You delete the entry with the no ip dhcp server pool command 8 5 2 5 no ip dhcp server pool Description With this command you delete the required IPv4 address band Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no ip dhcp server pool pool id 1 1 The parameter has the foll...

Page 394: ...e the function with the ip dhcp server icmp probe command 8 5 3 Commands in the DHCPPOOL configuration mode This section describes commands that you can call up in the DHCPPOOL Configuration mode In the Global Configuration mode enter the ip dhcp server pool command to change to this mode If you exit the DHCPPOOL Configuration mode with the exit command you return to the Global Configuration mode ...

Page 395: ...e command prompt is as follows cli config dhcp pool ID Syntax Call up the command with the following parameters lease time seconds 60 31536000 The parameter has the following meaning Parameter Description Range of values note seconds Time until renewal of the assigned IPv4 address in seconds 60 31536000 Result The time is configured Further notes You display the setting with the show ip dhcp serve...

Page 396: ...gn any IPv4 addresses Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call up the command with the following parameters network lower IP upper IP subnet mask prefix length 1 32 The parameters have the following meaning Parameter Description Range of values note lower IP Start of the IPv4 address band Enter a valid IPv4 address ...

Page 397: ...string command You assign an IP address to an interface with the set interface command You delete the DHCP option with the no option command 8 5 3 3 option IP address Description With this command you configure the DHCP options 3 6 and 66 that contain an IPv4 address as DHCP parameter The DHCP options 3 6 and 66 are created automatically when the IPv4 address band is created Requirement You are in...

Page 398: ...her notes You display the setting with the show ip dhcp server pools command You disable the IPv4 address band with the no pool enable command You delete the DHCP option with the no option command You configure the DHCP option 67 with the option value string command You configure all other DHCP options with the option value hex command You configure the interface with the set interface command 8 5...

Page 399: ...red In total a maximum of 20 DHCP options are possible Further notes You display the setting with the show ip dhcp server pools command You disable the IPv4 address band with the no pool enable command You delete the DHCP option with the no option command 8 5 3 5 option value string Description With this command you configure DHCP options 12 66 and 67 that contain a string as DHCP parameter The DH...

Page 400: ...the DHCP options 3 and 6 with the option IP address command You disable the IPv4 address band with the no pool enable command 8 5 3 6 no option Description With this command you delete the DHCP option with the specified number Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call up the command with the following parameters no o...

Page 401: ... config dhcp pool ID Syntax Call the command without parameter assignment pool enable Result The setting is enabled Note If the IPv4 address band is enabled the following parameters can no longer be edited DHCP options option Port Range ports Relay Agent Information relay information Static Leases static lease Further notes You display the setting with the show ip dhcp server pools command You dis...

Page 402: ...ration mode The command prompt is as follows cli config dhcp pool ID Syntax Call the command without parameter assignment no pool enable Result The setting is disabled Further notes You display the setting with the show ip dhcp server pools command You enable the setting with the pool enable command 8 5 3 9 set interface Note Access point With an access point the DHCP Server function is only possi...

Page 403: ...e vlan vlan id 1 4094 interface type interface id The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer...

Page 404: ...ress mac address Unicast MAC address Specify the MAC address aa bb cc dd ee ff client id Keyword for a DHCP client ID string Freely definable DHCP client ID Enter the required designation Maximum of 254 characters ip address Unicast IPv4 address Enter a valid IPv4 address The IPv4 address must match the subnet of the IPv4 address band Result The assignment is specified Further notes You display th...

Page 405: ...r Description Range of values note mac Keyword for a MAC address mac address Unicast MAC address Specify the MAC address aa bb cc dd ee ff client id Keyword for a DHCP client ID string Freely definable DHCP client ID Enter the required designation Result The assignment is deleted Further notes You configure the assignment with the static lease command 8 6 SNMP This section describes commands of th...

Page 406: ...lowing commands configure terminal snmp community index v2trapindex name public security v2secname snmp targetaddr trapringer param pav2c ipv4 192 168 1 254 taglist publictrapv2tag snmp targetparams pav2c user v2secname security model v2c message processing v2c snmp notify testnotify tag publictrapv2tag type trap end Event configuration Enables the sending of traps Execute the following commands c...

Page 407: ...command without parameters show snmp Result The status information is displayed 8 6 1 2 show snmp community Description This command shows the details of the configured of SNMP communities Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp community Network protocols 8 6 SNMP SCAL...

Page 408: ...and without parameters show snmp engineID Result The SNMP identification number of the device is displayed 8 6 1 4 show snmp filter Description This command shows the configured SNMP filters Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp filter Network protocols 8 6 SNMP SCALA...

Page 409: ...show snmp group Result The configured SNMP groups are displayed 8 6 1 6 show snmp group access Description This command shows the rights of the configured SNMP groups Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp group access Network protocols 8 6 SNMP SCALANCE W770 W730 acc ...

Page 410: ...rameters show snmp inform statistics Result The statistics of the Inform Messages are displayed 8 6 1 8 show snmp notif Description With this command you display the configured SNMP notification types Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp notif Network protocols 8 6 S...

Page 411: ...ameters show snmp targetaddr Result The configured SNMP target addresses are displayed 8 6 1 10 show snmp targetparam Description This command shows the configured SNMP target parameters Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp targetparam Network protocols 8 6 SNMP SCAL...

Page 412: ... parameters show snmp user Result The settings for the SNMP users are displayed 8 6 1 12 show snmp viewtree Description This command shows the settings for the SNMP tree view Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp viewtree Network protocols 8 6 SNMP SCALANCE W770 W730 ...

Page 413: ...xit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 8 6 2 1 snmpagent Description With this command you enable the SNMP agent function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters snmpagent Result The SNMP agent function is enabled Further notes Y...

Page 414: ...the SNMP agent function with the snmpagent command 8 6 2 3 snmp agent version Description With this command you configure whether all SNMP queries or only SNMPv3 queries are processed Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters snmp agent version v3only all Network protocols 8 6 SNMP SCALA...

Page 415: ... access GroupName v1 v2c v3 auth noauth priv read ReadView none write WriteView none notify NotifyView none volatile nonvolatile The parameters have the following meaning Parameter Description Range of values note GroupName Name of the group to which access is configured max 32 characters Version Selects the version of the protocol used v1 v2c v3 Authentication Selects the authentication method au...

Page 416: ...ult The settings for access to an SNMP group are configured Further notes You delete the access to an SNMP group with the no snmp access command You display the configured SNMP groups with the show snmp group command You display the access configurations for SNMP groups with the show snmp group access command You display the configured SNMP tree views with the show snmp viewtree command 8 6 2 5 no...

Page 417: ...g with the snmp access command You display the configured SNMP groups with the show snmp group command You display the access configurations for SNMP groups with the show snmp group access command You display the configured SNMP tree views with the show snmp viewtree command 8 6 2 6 snmp community index Description With this command you configure the details of an SNMP community Requirement You ar...

Page 418: ...ptional parameters are not specified when configuring a community the default values apply Note Community string For security reasons do not use the standard values public or private Change the community strings following the initial installation The recommended minimum length for community strings is 6 characters Result The settings are configured Further notes You delete the details of an SNMP c...

Page 419: ...mmunity command You show the status information of the SNMP communication with the show snmp command 8 6 2 8 snmp engineid migrate Description With this command you enable the SNMPv3 user migration If the function is enabled an SNMP engine ID is generated that can be migrated You can transfer configured SNMPv3 users to a different device If you enable this function and load the configuration of th...

Page 420: ...annot transfer this SNMP user configuration to other devices If you load the configuration of the device on another device all configured SNMPv3 users are deleted Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no snmp engineid migrate Result The SNMPv3 user migration is disabled Further notes You enable th...

Page 421: ...ask Mask that filters access to the elements of the MIB tree A series of 0 and 1 separated by dots in keeping with the path information of the MIB tree Specifies whether the filtered elements are used or excluded included excluded specifies whether the settings remain follow ing a restart volatile volatile The default settings are used after a restart nonvolatile non volatile The saved settings ar...

Page 422: ... with the following parameters no snmp filterprofile profilename OIDTree The parameters have the following meaning Parameters Description Range of values note profilename Name of the filter profile max 32 characters OIDTree Object ID Path information of the MIB tree Result The filter is deleted Further notes You create a filter with the snmp filterprofile command You display the created filter wit...

Page 423: ...ity model Specifies which security settings will be used v1 v2c v3 Storage type Specifies whether the settings remain following a restart volatile The settings are lost after a restart nonvolatile The settings are retained after a restart If optional parameters are not specified when configuring a group the default values apply Result The details of the group are configured Further notes You delet...

Page 424: ...rd for the user name UserName Name of the user max 32 characters security model Specifies which security settings are used for sending v1 v2c v3 Result The details of the group are deleted Further notes You change the details of an SNMP group with the snmp group command You display the created SNMP groups with the show snmp group command You display the created SNMP users with the show snmp user c...

Page 425: ...s an entry to the log server Storage type Specifies whether the settings remain following a restart The settings are lost after a restart The settings are retained after a restart Result The details of the SNMP notifications are configured Further notes You delete the details of an SNMP notification with the no snmp notify command You display the configured SNMP notifications with the show snmp no...

Page 426: ...the configured SNMP notifications with the show snmp notif command You display the configured SNMP target addresses with the show snmp targetaddr command 8 6 2 16 snmp targetaddr Description With this command you configure the SNMP target address Requirement The SNMP target parameters are configured You are in the Global configuration mode The command prompt is cli config Syntax Call up the comman...

Page 427: ...nse before it repeats the inform request message Seconds Time in seconds 1 1500 retries Keyword for the maximum number of attempts to obtain a response to an inform request message RetryCount Number of attempts 1 3 taglist Keyword for tag list TagIdentifier Tag identifier that selects the destina tion address for SNMP Specify the tag identifier none No tag identifier volatile nonvolatile Specifies...

Page 428: ...tion mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp targetaddr TargetAddressName The parameter has the following meaning Parameter Description Range of values note TargetAddressName SNMP target address max 32 characters Result The SNMP target address is deleted Further notes You change the SNMP target address with the snmp targetad...

Page 429: ...ch SNMP version is used With SNMPv3 a security level authen tication encryption can also be config ured SNMP version v1 v2c v3 Security level for v3 auth Authentication enabled no encryption enabled noauth No authentication enabled no encryption enabled priv Authentication enabled encryption enabled message processing Specifies which SNMP version is used for processing the messages and whether the...

Page 430: ... SNMP target parameters Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp targetparams ParamName The parameter has the following meaning Parameter Description Range of values note ParamName Name of the SNMP parameter max 32 characters Result The SNMP target parameters are deleted Further...

Page 431: ...d Further notes You release write access for SNMPv1 and SNMPv2 PDUs with the no snmp v1 v2 readonly command 8 6 2 21 no snmp v1 v2 readonly Description With this command you enable write access for SNMPv1 and SNMPv2 PDUs Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no snmp v1 v2 readonly Network protocol...

Page 432: ...have the following meaning Parameter Description Range of values note UserName Name of the user max 32 characters auth Specifies that authentication takes place and which algorithm is used md5 Message Digest 5 sha Secure Hash Algorithm Default No authentication passwd Password for authentication max 32 characters If you enter user passwords for SNMPv3 via the CLI you cannot enter any special chara...

Page 433: ...with the no snmp user command You display the configured users with the show snmp usercommand 8 6 2 23 no snmp user Description With this command you delete the details of an SNMP user Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp user UserName The parameter has the following meaning...

Page 434: ...note ViewName Name of the SNMP view max 32 characters OIDTree Object ID Path information of the MIB tree mask Keyword for the OID mask OIDMask Mask that filters access to the elements of the MIB tree A series of 0 and 1 separated by dots in keeping with the path in formation of the MIB tree View type Specifies whether the filtered elements are used or excluded included Default excluded Storage typ...

Page 435: ...lobal configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp view ViewName OIDTree The parameters have the following meaning Parameter Description Range of values note ViewName Name of the view max 32 characters OIDTree Object ID Path information of the MIB tree Result The SNMP view is deleted Further notes You configure a vi...

Page 436: ...d EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events smtp server Result The configured SMTP servers are displayed 8 7 1 2 show events sender email Description This command shows the configured e mail sender address Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network pr...

Page 437: ...configuration mode This section describes commands that you can call up in the EVENTS configuration mode In the Global configuration mode enter the events command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections If you exit the EVENTS configuration mode with the exit command you return to the Global c...

Page 438: ...me FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters If you have stored a suitable do main name you can specify a host name ipv6 Keyword for an IPv6 address ip6_addr IPv6 address of the SMTP server Enter a valid IPv6 address receiver mail address Name of the recipient Maximum of 100 characters For information on addresses and interfaces refer to the section Addresses and inter...

Page 439: ...nicast address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters ipv6 Keyword for an IPv6 address ip6_addr IPv6 address of the SMTP server Enter a valid IPv6 address For information on addresses and interfaces refer to the section Addresses and interface names Page 29 Result The SMTP server entry is deleted Further notes You configure an SMT...

Page 440: ...u reset the e mail name of the sender with the no sender mail address You display the setting with the show events sender email command 8 7 2 4 no sender mail address Description With this command you reset the e mail name of the sender Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call the command without parameters no sender mail a...

Page 441: ...ort smtp port 1 65535 The parameter has the following meaning Parameter Description Range of values note smtp port Value for the SMTP port 1 65535 Default 25 Result An SMTP port is configured Further notes You can reset the setting to the default with the no smtp port command You display the setting with the show smtp port command 8 7 2 6 no smtp port Description With this command you reset the SM...

Page 442: ...TTP server This section describes commands of the Hypertext Transfer Protocol HTTP 8 8 1 The show commands This section describes commands with which you display various settings 8 8 1 1 show ip http server status Description This command shows the status of the HTTP server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network ...

Page 443: ...guration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 8 8 2 1 ip http Description With this command you enable HTTP on the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ip http As defaul...

Page 444: ...Syntax Call the command without parameters no ip http Result Access to the WBM is now only possible with HTTPS Further notes You can display the setting of this function and other information with the show ip http server statuscommand You enable HTTP with the ip http command 8 9 HTTPS server This section describes commands of the Hypertext Transfer Protocol Secure HTTPS 8 9 1 The show commands Thi...

Page 445: ...her suite and version of the HTTPS server are displayed 8 9 1 2 show ssl server cert Description This command shows the SSL server certificate Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ssl server cert Result The SSL server certificate is displayed Network protocols 8 9 HTTPS s...

Page 446: ...lues note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface ip address Shows the IP addresses of the entries in the ARP table mac address Shows the MAC addresses of the en tries in the ARP table summary Shows a summary of the entries in the ARP tabl...

Page 447: ...or cli Syntax Call the command without parameters show ip ssh Result The settings for the SSH server are displayed 8 11 2 Commands in the Global Configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global...

Page 448: ...without parameters ssh server As default the function is enabled Result The SSH protocol is enabled on the device Further notes You disable the SSH protocol with the no ssh server command 8 11 2 2 no ssh server Description With this command you disable the SSH protocol on the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Network protocols 8...

Page 449: ...t The SSH protocol is disabled on the device Further notes You enable the SSH protocol with the ssh server command Network protocols 8 11 SSH server SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface Configuration Manual 09 2017 C79000 G8976 C324 08 449 ...

Page 450: ...Network protocols 8 11 SSH server SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 450 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 451: ...able aging time Description To ensure that the address entries are up to date MAC addresses are only kept in the address table for a specified time This command shows the time after which the MAC addresses are removed from the address table Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters...

Page 452: ...the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 9 1 2 1 mac address table aging time Description With this command you configure the aging of a dynamically...

Page 453: ...em start or when using the restart command with the option memoryor factory the following defaults apply The default value is 300 seconds Result The value of the aging of a dynamically learned entry is configured Further notes You can reset the setting to the default with the no mac address table aging time command You display the setting with the show mac address table aging time command Load con...

Page 454: ...Load control 9 1 Dynamic MAC aging SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 454 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 455: ...are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show nat connections Result The configuration and the translation list are displayed 10 1 1 2 Introductory sentence to the section with the show commands This section describes commands with which you display various settings SCALANCE W770 W730 acc to IEEE...

Page 456: ...nt Page 462 nat timeout Client Page 468 10 1 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Glob...

Page 457: ... the NAT Configuration mode with the end or exit command 10 1 3 Commands in the NAT configuration mode This section describes commands that you can call up in the NAT Configuration mode In the Global Configuration mode enter the nat command to change to this mode If you exit the NAT Configuration mode with the exit command you return to the Global Configuration mode If you exit the NAT Configurati...

Page 458: ...r MAC Mode IPv6 is deactivated Syntax Call the command without parameter assignment ipv6 transparent mode Result The transparent mode is activated Further notes You disable the transparent mode with the command no ipv6 transparent mode 10 1 3 2 no ipv6 transparent mode Client Note This command is only available in the client mode Description With this command you disable the transparent mode Layer...

Page 459: ... Note This command is only available in the client mode nat Description With this command you configure the translation list for communication from the global to the local network A maximum of 60 entries are possible Requirement You are now in the NAT Configuration mode The command prompt is as follows cli config nat Syntax Call up the command with the following parameters Layer 3 functions 10 1 N...

Page 460: ... end port enable Enables the NAT rule disable Disables the NAT rule Note Global port If the port is already occupied by a local service for example Telnet a warning is displayed In this case avoid using TCP port 23 Telnet port 22 SSH ports 80 443 http https reachability of the client with the WBM and UDP port 161 SNMP as global port Result The translation list is configured If the command is execu...

Page 461: ...eter Description Range of values note tcp Assignment of TCP for the follow ing global port udp Assignment of UDP for the follow ing global port globalportfrom Start port of the global port range enter the start port globalportto End port of the global port range enter the end port localip IPv4 address of the node in the lo cal network enter a valid IPv4 address localportfrom Start port of the loca...

Page 462: ...nd prompt is as follows cli config nat Syntax Call up the command with the following parameters nat local ip address ipaddress subnet mask prefix length 1 32 The parameters have the following meaning Parameters Description Range of values note ipaddress Address of the Ethernet interface specify a valid IP address subnet mask Subnet mask of the local Ethernet enter a valid subnet mask prefix length...

Page 463: ...type interface id The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result NAT is activated for the Ethernet interface ...

Page 464: ...ommand prompt is as follows cli config nat Syntax Call the command without parameters no nat interface Result NAT is disabled Further notes You enable NAT with the nat interface command See also show nat Client Page 456 10 1 3 8 nat ipv4 multicast forward global to local Client Note This command is only available in the client mode Layer 3 functions 10 1 NAT SCALANCE W770 W730 acc to IEEE 802 11n ...

Page 465: ...frames is enabled Further notes You disable the forwarding with the no nat ipv4 multicast forward global to local command 10 1 3 9 no nat ipv4 multicast forward global to local Client Note This command is only available in the client mode Description With this command you disable the forwarding of multicast frames The multicast frames incoming on the WLAN interface are not forwarded Requirement Yo...

Page 466: ...nd you enable the forwarding of multicast frames The multicast frames incoming on the local Ethernet interface are forwarded via the WLAN interface into the external network Requirement You are now in the NAT Configuration mode The command prompt is as follows cli config nat IPv6 is deactivated Syntax Call the command without parameter assignment nat ipv4 multicast forward local to global Result T...

Page 467: ...lticast frames incoming on the local interface are not forwarded Requirement You are now in the NAT Configuration mode The command prompt is as follows cli config nat Syntax Call the command without parameters no nat ipv4 multicast forward local to global Result The forwarding of multicast frames is disabled Further notes You enable the forwarding with the nat ipv4 multicast forward local to globa...

Page 468: ... command with the following parameters nat tcp udp timeout seconds The parameters have the following meaning Parameters Description Range of values note tcp TCP connection udp UDP connection seconds Period of time in seconds 1 4294967295 Result The period of time is configured Further notes You show the NAT configuration and the translation list with the show nat command You delete the period of t...

Page 469: ... udp timeout The parameters have the following meaning Parameters Description Range of values note tcp TCP connection udp UDP connection Result The time period for the TCP UDP connection was set to the default setting Further notes You show the NAT configuration and the translation list with the show nat command You configure the time with the nat timeout command See also show nat Client Page 456 ...

Page 470: ...Layer 3 functions 10 1 NAT SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 470 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 471: ... of the logged in user Requirement You are logged into the device with a local user account You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters change password passwd The parameter has the following meaning Parameter Description Range of values note passwd Value for the password Enter the ...

Page 472: ...icy command 11 1 2 whoami Description This command shows the user name of the logged in user Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters whoami Result The user name of the logged in user is displayed 11 1 3 The show commands This section describes commands with which you display vari...

Page 473: ... Further notes You configure the password policy with the password policy command 11 1 3 2 show function rights Description With this command you list the available function rights in a table Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters show function rights Security and authentication 11 1 User rights management SCA...

Page 474: ...sult The created roles are shown Further notes You create a role with the role command You delete a role with the no role command 11 1 3 4 show user accounts Description This command shows the created users Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Security and authentication 11 1 User rights management SCALANCE W770 W730 acc to IEEE 802 11n Command Line ...

Page 475: ... role on the device in the table External User Accounts with the user account ext command You delete a local user and the corresponding entry in the table External User Accounts with the no user account command You delete a link in the table External User Accounts with the no user account ext command 11 1 3 5 show user groups Description This command shows the links between groups and roles Requir...

Page 476: ...ayed 11 1 4 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end ...

Page 477: ...wing conditions It must be unique It must be between 1 and 64 characters long function rights Keyword for the function rights function rights value Value of the function rights Select the function rights of the role 1 Users with this role can read device parameters but cannot change them 15 Users with this role can both read and change device parameters description Keyword for the description role...

Page 478: ...roles with the show roles command 11 1 4 2 no role Description With this command you delete a role Note You can only delete a role when the role is not linked to a user Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no role role name The parameter has the following meaning Parameter Descripti...

Page 479: ...x Call up the command with the following parameters user account user name password user password role user role description user description The parameters have the following meaning Parameter Description Range of values note user name User name Enter the name for the user The name must meet the following conditions It must be unique It must be between 1 and 250 characters long The following char...

Page 480: ... the description user description Content of the description Enter a description for the user account The description text can be up to 100 char acters long Result The user has been created Note User name cannot be changed After creating a user the user name can no longer be modified If a user name needs to be changed the user must be deleted and a new user created Further notes You delete a user ...

Page 481: ...e user account command You show the created users with the show user accounts command 11 1 4 5 user account ext Description With this command you link a user with a role in the table External User Accounts The user is defined on RADIUS server The roll is defined locally on the device When a RADIUS server authenticates a user the corresponding group however is unknown or does not exist the device c...

Page 482: ... be between 1 and 250 characters long role Keyword for the role name user role ext Role name Enter a role You can choose between system defined and self defined roles description Keyword for the description user ext description Content of the description Enter a description for the user in the table External User Accounts The description text can be up to 100 characters long Result A link in the t...

Page 483: ...s the following meaning Parameter Description Range of values note user name ext User name Enter the name of a user Result The link in the table External User Accounts has been deleted Further notes You link a user with a role in the table External User Accounts with the user account ext command You show the links in the table External User Accounts with the show user accounts external command 11 ...

Page 484: ...g role Keyword for the role name role name Role name Enter a role name Users who are author ized with the linked group on the RADIUS server receive the rights of this role locally on the device You can choose between system defined and self defined roles description Keyword for the description user group description Content of the description Enter a description for the link The de scription text ...

Page 485: ...name Group name Enter the name of a group Result The link is deleted Further notes You link a group with a role with the user group command You show the created links with the show user groups command 11 1 4 9 username Description With this command you change the password of the factory set default user admin Requirement You are in the Global Configuration mode The command prompt is as follows cli...

Page 486: ...t 1 uppercase letter at least 1 special character at least 1 number Result The password is changed Note Changing the password in Trial mode Even if you change the password in Trial mode this change is saved immediately Further notes You show the created users with the show user accounts command You can also change the passwords with the user account command You display the currently valid password...

Page 487: ...her notes You assign a new password with the user account command You display the setting with the show password policy command 11 2 RADIUS client RADIUS Remote Authentication Dial In User Service is a client server protocol that allows the centralized logging in of users logging on in a physical or virtual network This makes central administration of user data possible This section describes comm...

Page 488: ...ation Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up the command with the following parameters show radius server ucast_addr The parameters have the following meaning Parameter Description Range of values note ucast_addr Value for an IPv4 unicast address Enter a valid unicast address For information on names of addresses and interfaces refer to ...

Page 489: ...d in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 11 2 2 1 login authentication Description With this command you enable authentication via a RADIUS server Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Ca...

Page 490: ...reached in the network Result The authentication is made according to the selected parameter Further notes You disable the authentication via a RADIUS server with the no login authentication command You can display the status of this function and other information with the show device information command 11 2 2 2 no login authentication Description With this command you disable authentication via ...

Page 491: ...ters radius authorization mode standard vendor specific The parameters have the following meaning Parameter Description Range of values note standard In this mode the user is logged in with administrator rights if the server returns the value Administrative User to the device for the attribute Service Type In all other cases the user is logged in with read rights Default vendor specific In this mo...

Page 492: ...llowing meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 address ipv4 address IPv4 address of the RADIUS server Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters If you have stored a suitable do main name you can specify a host name ipv6 Keyword for an IPv6 address ipv6 address IPv6 addre...

Page 493: ...s Default setting test Tests whether or not the specified RA DIUS server is available At the same time you can create a new RADIUS server and run the test For information on addresses and interfaces refer to the section Addresses and interface names Page 29 If optional parameters are not specified when configuring the default values apply Note Primary server In a network only one RADIUS server can...

Page 494: ...address primary Identifies the RADIUS server as primary server For information on addresses and interfaces refer to the section Addresses and interface names Page 29 Result The entry for a connection between the RADIUS client and a server or the identification as primary server is deleted Further notes You configure the connection of a RADIUS client to a server with the radius server command You s...

Page 495: ...eged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show wlan security wlan 0 X vapX 0 Y context Id 1 8 The parameters have the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Only available in client mode Enter a valid interface vapX 0 Y VAP interface Only available in Access Point mode Enter a va...

Page 496: ...so wlan security ap radius authenticator Page 499 wlan security ap radius authenticator address Page 501 wlan security ap radius authenticator max retransmit Page 502 wlan security ap radius authenticator port number Page 503 wlan security ap radius authenticator primary Page 504 no wlan security ap radius authenticator primary Page 505 wlan security ap radius authenticator reauth interval Page 50...

Page 497: ...urity keys wlan 0 X The parameters have the following meaning Parameter Description Range of values note wlan 0 X WLAN interface Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The key table is displayed See also wlan security edit key Page 512 Security and authentication 11 3 WLAN SCALANCE W...

Page 498: ...wing parameters show wlan inter ap blocking allowed addresses vapX 0 Y The parameters have the following meaning Parameter Description Range of values note vapX 0 Y VAP interface Only available in client mode Enter a valid interface For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The value of the update interval for...

Page 499: ...ivileged EXEC mode 11 3 2 1 wlan security ap radius authenticator Description With this command you enable the RADIUS server Note This command is available only in access point mode Requirement You are in the WLAN Configuration mode of the WLAN interface The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator i...

Page 500: ...DIUS server Note This command is available only in access point mode Requirement You are in the WLAN Configuration mode of the WLAN interface The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters no wlan security ap radius authenticator index 1 2 The parameter has the following meaning Parameters Description Range of values note index Index of th...

Page 501: ... is as follows cli config wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator address index 1 2 ipv4 ucast_addr fqdn name FQDN 100 ipv6 ipv6 addr The parameters have the following meaning Parameter Description Range of values note index Index of the RADIUS server 1 2 ipv4 Keyword for an IPv4 address ucast_addr IPv4 address of the RADIUS server Enter ...

Page 502: ...ement You are in the WLAN Configuration mode of the WLAN interface The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator max retransmit index 1 2 1 5 The parameters have the following meaning Parameter Description Range of values note index Index of the RADIUS server 1 2 1 5 Number of connection attempts 1 5 ...

Page 503: ...LAN interface The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator port number index 1 2 1 65535 The parameters have the following meaning Parameters Description Range of values note index Index of the RADIUS server 1 2 1 65535 Number of port 1 6553 Result The input port is configured Further notes You displ...

Page 504: ...n Syntax Call up the command with the following parameters wlan security ap radius authenticator primary index 1 2 The parameter has the following meaning Parameter Description Range of values note index Index of the RADIUS server 1 2 Result The RADIUS server is configured as primary server Further notes You disable the setting with the no wlan security ap radius authenticator primary command You ...

Page 505: ...nfig wlan Syntax Call up the command with the following parameters no wlan security ap radius authenticator primary index 1 2 The parameter has the following meaning Parameters Description Range of values note index Index of the RADIUS server 1 2 Result The primary server is disabled Further notes You enable the setting with the wlan security ap radius authenticator primary command You display the...

Page 506: ... follows cli config wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator reauth interval sec 60 43200 The parameter has the following meaning Parameters Description Range of values note sec Lifetime in seconds 60 43200 Default 3600 Result The lifetime is configured Further notes You display the setting with the show wlan security ap radius authenticat...

Page 507: ...fig wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator reauth mode show modes mode The parameters have the following meaning Parameters Description Range of values note show modes Lists the available values disabled Function is disabled server Time management on the server local Local time management You specify the period of validity with the wlan ...

Page 508: ...oint mode Requirement You are in the WLAN Configuration mode of the WLAN interface The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan security ap radius authenticator shared secret index 1 2 string The parameters have the following meaning Parameters Description Range of values note index Index of the RADIUS server 1 2 string Password Ent...

Page 509: ...nt You are in the WLAN configuration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters wlan security context ID 1 8 The parameter has the following meaning Parameters Description Range of values note ID ID of the security context 1 8 Result The security context is created You are in the security context configuration mode The command pro...

Page 510: ...nfiguration mode The command prompt is as follows cli config wlan Syntax Call up the command with the following parameters no wlan security context ID 1 8 The parameter has the following meaning Parameters Description Range of values note ID ID of the security context 1 8 Result The security context is deleted Further notes You create a security context and change to the security context configura...

Page 511: ... cli config wlan Syntax Call up the command with the following parameters vap inter ap blocking refresh time seconds 30 300 The parameters have the following meaning Parameter Description Range of values note seconds Update interval for the ARP table in seconds 30 300 Result The ARP table is updated when the set time elapses 11 3 3 Commands in the WLAN Interface configuration mode This section des...

Page 512: ...s on the other hand define a strong key 128 bits Note iPCF or iPCF MC mode activated If you want encryption with AES in iPCF or iPCF MC mode only keys with a 128 bit key length are supported Requirement You are in the Interface configuration mode of the WLAN interface The command prompt is as follows cli config if wlan 0 X Syntax Call up the command with the following parameters wlan security edit...

Page 513: ...following parameters wlan security ssid index 1 8 context ID 1 8 The parameters have the following meaning Parameter Description Range of values note index Index of the SSID list 1 8 context Keyword for a security context ID Enter a valid security context ID Available only in client mode 1 8 Result The security context was assigned Further notes You create a security context and change to the secu...

Page 514: ...rity authentication client Description With this command you specify the type of authentication Note This command is only available in the client mode Note iPCF or iPCF MC mode enabled If iPCF or iPCF MC mode is enabled only Open System with the encryption method AES is supported in the security settings Requirement You are in the Interface Configuration mode of the WLAN interface The command prom...

Page 515: ...t RADIUS server wpa wpa2 auto Radius WPA and WPA2 authentication wpa wpa2 auto psk WPA and WPA2 authentication without a RADIUS server methods Value corresponding to an authentication method Result The type of authentication is specified Further notes You display the settings with the show wlan security command See also no wlan security encryption client Page 523 11 3 4 2 wlan security cipher clie...

Page 516: ...h only 40 or 104 bit long keys based on the RC4 algorithm Ron s Code 4 aes AES Advanced Encryption Standard Strong symmetrical block encryption method based on the Rijndael algorithm that further improves the functions of TKIP tkip TKIP Temporal Key Integrity Protocol A symmetrical encryption method with the RC4 algorithm Ron s Code 4 In contrast to the weak WEP encryption TKIP uses changing keys ...

Page 517: ...key index 1 4 The parameter has the following meaning Parameters Description Range of values note index Index of the key table 1 4 Default 1 Result The WEP key is specified Further notes You display the settings with the show wlan security command 11 3 4 4 wlan security dot1x check server certificate client Description With this command you enable the validation of the server certificate on the cl...

Page 518: ...d default setting See also no wlan security dot1x check server certificate client Page 518 11 3 4 5 no wlan security dot1x check server certificate client Description With this command you disable the validation of the server certificate on the client This setting is activated as default Note This command is only available in the client mode Requirement You are in the Interface Configuration mode ...

Page 519: ... RADIUS authentication methods the client offers to the RADIUS server With auto the client offers a RADIUS server all supported methods Any other selection restricts the support by the client to this one method Note This command is only available in the client mode Requirement You are in the Interface Configuration mode of the WLAN interface The command prompt is as follows cli config wlan context...

Page 520: ...e authentication method is specified Further notes You display the settings with the show wlan security command 11 3 4 7 wlan security dot1x username client Description With this command you specify the user name for the RADIUS server Note This command is only available in the client mode Note Dot1X user name and Dot1X user password With WPA2 RADIUS EAP TLS EAP TTLS and PEAP the Dot1X user name an...

Page 521: ...ion With this command you specify the password for the RADIUS server When assigning the password ASCII code 0x20 to 0x7e is used Note This command is only available in the client mode Note Dot1X user name and Dot1X user password With WPA RADIUS WPA2 RADIUS EAP TLS EAP TTLS and PEAP the Dot1X user name and the Dot1X user password must be configured With the setting Auto either the certificate must ...

Page 522: ...xed unchanging WEP key You can only enable or disable encryption if you have selected Open System for authentication All other security methods include both authentication and encryption If you use Open system with Encryption or Shared Key you always need to specify the WEP key used for the encryption Note This command is only available in the client mode Requirement The type of authentication is ...

Page 523: ...ion With this command you disable encryption with a fixed unchanging WEP key This setting is activated as default You can only enable or disable encryption if you have selected Open System for authentication Note This command is only available in the client mode Requirement The type of authentication is open system You are in the Interface Configuration mode of the WLAN interface The command promp...

Page 524: ... numbers letters upper lowercase have few repetitions and special characters Do not use known names words or terms that could be guessed If a SCALANCE W700 device is lost or if the key becomes known the key should be changed on all SCALANCE W700 devices to maintain security Note This command is only available in the client mode Requirement WPA PSK WPA2 PSK or WPA 2 PSK auto is set for the type of ...

Page 525: ...and to change to this mode If you exit the VAP Interface Configuration mode with the exit command you return to the Global Configuration mode If you exit the VAP Interface Configuration mode with the end command you return to the Privileged EXEC mode 11 3 5 1 vap security authentication access point Description With this command you specify the type of authentication Note This command is available...

Page 526: ...he vap security encryption command shared key A fixed key is stored for authentication wpa Radius WPA authentication wpa psk WPA authentication without RADIUS server wpa2 Radius WPA2 authentication wpa2 psk WPA2 authentication without RADIUS server wpa wpa2 auto Radius WPA and WPA2 authentication wpa wpa2 auto psk WPA and WPA2 authentication without a RADIUS server method Value corresponding to an...

Page 527: ...tkip The parameters have the following meaning Parameter Description auto TKIP or AES is used depending on the capability of the other station aes AES Advanced Encryption Standard Strong symmetrical block encryption method based on the Rijndael algorithm that further improves the functions of TKIP tkip TKIP Temporal Key Integrity Protocol A symmetrical encryption method with the RC4 algorithm Ron ...

Page 528: ... VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call up the command with the following parameters vap security default key index 1 4 The parameter has the following meaning Parameters Description Range of values note index Index of the key table 1 4 Result The WEP key is specified Further notes You display the settings with the show wlan security vapX 0 Y command Secu...

Page 529: ...face The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment vap security encryption Result The encryption is enabled You can only disable encryption if you have selected open sytem for authentication Further notes You display the settings with the show wlan security vapX 0 Y command You disable the encryption with the no vap security encryption...

Page 530: ...in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call the command without parameter assignment no vap security encryption Result The encryption is disabled Further notes You display the settings with the show wlan security vapX 0 Y command You enable the encryption with the vap security encryption command See also vap security ...

Page 531: ...onfig if vapX 0 Y Syntax Call up the command with the following parameters vap security wpa group key update interval 0 seconds 30 36000 The parameter has the following meaning Parameter Description Range of values note 0 The key will not be renewed seconds When the time expires second the key is renewed 30 36000 Result The time for renewal of the key is specified Security and authentication 11 3 ...

Page 532: ...o maintain security Note This command is available only in access point mode Requirement WPA PSK WPA2 PSK or WPA 2 PSK auto is set for the type of authentication You are in the Interface Configuration mode of the VAP interface The command prompt is as follows cli config if vapX 0 Y Syntax Call up the command with the following parameters vap security wpa psk passphrase string The parameter has the...

Page 533: ... config if vapX 0 Y Syntax Call the command without parameter assignment vap communication with own vap Result The communication option on the same SSID of an access point is enabled Further notes You display the settings with the show wlan security vapX 0 Y command You disable the function with the no vap communication with own vap command See also no vap communication with own vap access point P...

Page 534: ...ap Result The communication option on the same SSID of an access point is disabled Note within own VAP function disabled If the within own VAP function is disabled the various WLAN clients can no longer see each other This means that Address Collision Detection ACD also no longer works reliably Further notes You display the settings with the show wlan security vapX 0 Y command You enable the funct...

Page 535: ...ig if vapX 0 Y Syntax Call the command without parameter assignment vap communication with other vaps Result The communication option via different SSIDs of an access point is enabled Further notes You display the settings with the show wlan security vapX 0 Y command You disable the function with the no vap communication with other vaps command See also no vap communication with other vaps access ...

Page 536: ...s Result The communication option via different SSIDs of an access point is disabled Note with other VAPs function disabled If the with other VAPs function is disabled the various WLAN clients can no longer see each other This means that Address Collision Detection ACD also no longer works reliably Further notes You display the settings with the show wlan security vapX 0 Y command You enable the f...

Page 537: ...t The communication option is enabled Further notes You display the settings with the show wlan security vapX 0 Y command You disable the function with the no vap communication with ethernet command See also no vap communication with ethernet access point Page 537 11 3 5 13 no vap communication with ethernet access point Description With this command you specify that the client cannot communicate ...

Page 538: ... Page 537 11 3 5 14 vap inter ap blocking allowed address Description With this command you specify which SCALANCE W700 devices are accessible to the clients Note The command is only available when the following requirements are met Access point mode The SCALANCE W700 device is equipped with one of the following KEY PLUGs W780 iFeatures MLFB 6GK5907 8PA00 W700 Security MLFB 6GK5907 0PA00 Requireme...

Page 539: ... the SCALANCE W700 device whose IPv4 address was specified as the parameter via the Ethernet interface Further notes You display the IPv4 addresses with the show wlan inter ap blocking allowed addresses command 11 3 5 15 no vap inter ap blocking allowed address Description This command deletes the SCALANCE W700 device with the specified IP address from the list of SCALANCE W700 devices with which ...

Page 540: ...nd restricts the communication of the clients Clients can only access SCALANCE W700 devices whose IP address was configured on the access point with the command vap inter ap blocking allowed address Note The command is only available when the following requirements are met Access point mode The SCALANCE W700 device is equipped with one of the following KEY PLUGs W780 iFeatures MLFB 6GK5907 8PA00 W...

Page 541: ... blocking Description This command allows unrestricted communication from a client to all SCALANCE W700 devices that can be reached via the access point Note The command is only available when the following requirements are met Access point mode The SCALANCE W700 device is equipped with one of the following KEY PLUGs W780 iFeatures MLFB 6GK5907 8PA00 W700 Security MLFB 6GK5907 0PA00 Requirement Yo...

Page 542: ...ng block gratuitous arp Description This command blocks the forwarding of gratuitous ARP packets Note The command is only available when the following requirements are met Access point mode The SCALANCE W700 device is equipped with one of the following KEY PLUGs W780 iFeatures MLFB 6GK5907 8PA00 W700 Security MLFB 6GK5907 0PA00 Requirement You are in the Interface Configuration mode of the VAP int...

Page 543: ...arameters no vap inter ap blocking block gratuitous arp Result Gratuitous ARP packets are also forwarded 11 3 5 20 vap inter ap blocking block non ip traffic Description This command restricts the communication between the client and the SCALANCE W700 devices configured as permitted communications partners on the access points to IP packets Note The command is only available when the following req...

Page 544: ...tween the client and the SCALANCE W700 devices that are configured on the access point as permitted communications partners Note The command is only available when the following requirements are met Access point mode The SCALANCE W700 device is equipped with one of the following KEY PLUGs W780 iFeatures MLFB 6GK5907 8PA00 W700 Security MLFB 6GK5907 0PA00 Requirement You are in the Interface Config...

Page 545: ...er EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show access lists ip mac access list number 1 20 The parameters have the following meaning Parameter Description Range of values note ip Selects IP based access lists IP ACL mac Selects MAC based access lists MAC ACL access list number Number of the acces...

Page 546: ...ule no and port no of the interface vlan Keyword for a VLAN connection vlan id Number of the VLAN 1 4094 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 If you do not select any parameter from the parameter list the configuration is displayed for all available interfaces Result The access control list of the selected IP interfac...

Page 547: ...list extended access list number 1 20 The parameter has the following meaning Parameter Description Range of values note access list number Number of the access control list 1 20 Result A MAC access control list has been generated You are now in the MAC ACL configuration mode The command prompt is as follows cli config ext macl Further notes You delete the MAC access control list with the no mac a...

Page 548: ...s lists command 11 4 3 Commands in the interface configuration mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode...

Page 549: ... of the access control list 1 20 in Specifies that incoming packets are fil tered out Specifies that outgoing packets are fil tered Result The packets are filtered according to the access control list ACL Further notes You disable the setting with the no mac access group command You display the statistical data of the access control list with the show access lists command 11 4 3 2 no mac access gr...

Page 550: ... the setting with the mac access group command You display the configuration of the access control list with the show access lists command 11 4 4 Commands in the MAC ACL configuration mode This section describes commands that you can call up in the MAC ACL configuration mode In the Global configuration mode enter the mac access list extended command to change to this mode If you exit the MAC ACL c...

Page 551: ...th the following parameters permit any host src mac address any host dest mac address The parameters have the following meaning Parameter Description Range of values note any Keyword for all host Keyword for the MAC address of an in coming connection that is permitted src mac address MAC address of the permitted incoming connection Specify a valid MAC address any Keyword for all host Keyword for t...

Page 552: ...ribes the MAC addresses for which incoming and or outgoing data traffic is locked The access control list contains only one entry If you want to lock or permit further addresses create a new access control list Note Processing order of the lists The access control lists are processed on the interface in the order in which they were created The index number of the access control list is not used fo...

Page 553: ...Page 29 Note MAC address input Use any if the rule is to apply to all src and or dest MAC addresses This corresponds to the MAC address 00 00 00 00 00 00 Result The MAC access control list is configured Further notes You exit the MAC ACL configuration mode with the exit command You delete the MAC access control list with the no mac access list extended command You display the configuration of the ...

Page 554: ... MAC based access lists MAC ACL access list number Number of the access control list 1 20 If you do not select any parameters from the parameter list the configuration of all access control lists will be displayed Result The configuration of the access control lists is displayed 11 5 1 2 show interface access lists Description This command shows the access control list of one or all interfaces Req...

Page 555: ...IP interface is displayed 11 5 2 Commands in the Global Configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configurati...

Page 556: ...the IP access control list with the no ip access list command You exit the ACL Standard configuration mode with the exit command You display the configuration of the access control list with the show access lists command 11 5 2 2 no ip access list Description With this command you delete an IP access control list Requirement You are in the Global configuration mode The command prompt is as follows...

Page 557: ...lable In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you re...

Page 558: ...ly effective for IP packets To filter packets with other data formats use an expanded MAC access control list Result The packets are filtered according to the access control list ACL Further notes You disable the setting with the no ip access group command You display the configuration of the access control list with the show access lists command 11 5 3 2 no ip access group Description With this c...

Page 559: ...mmands in the Interface configuration mode VLAN This section describes commands that you can call up for VLAN in the Interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface vlan command to change to this mode When doing this you need to replace the placeholders with the relevant VLAN ID Commands relati...

Page 560: ...The parameters have the following meaning Parameter Description Range of values note access list number Number of the access control list 1 20 in Specifies that incoming packets are fil tered out Specifies that outgoing packets are fil tered Result The packets are filtered according to the access control list ACL Further notes You disable the setting with the no ip access group command You display...

Page 561: ...are fil tered out Specifies that outgoing packets are fil tered If you do not specify a number for an access control list all lists of a VLAN are disabled Result The packet filtering according to the access control list ACL is canceled Further notes You enable the setting with the ip access group command You display the configuration of the access control list with the show access lists command 11...

Page 562: ...following options All incoming and or outgoing frames are forwarded Incoming and or outgoing frames of a specific host are forwarded Incoming and or outgoing frames of hosts of a specific subnet are forwarded Incoming and or outgoing frames of a specific protocol are forwarded Note Processing order of the lists The access control lists are processed on the interface in the order in which they were...

Page 563: ...a valid combination of IPv4 address and subnet mask mask Corresponding subnet mask dscp Keyword for the Differentiated Services Codepoint value Value for the Differentiated Services Co depoint 0 63 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP access list has been configured Note Subnet mask for individual hosts ...

Page 564: ...ol list is not used for this Requirement You are in the ACL standard configuration mode The command prompt is as follows cli config std nacl Syntax Call up the command with the following parameters deny any protocol type 1 255 any host src ip address src ip address mask any host dest ip address dest ip address mask dscp value 0 63 or deny any host src ip address network src ip mask any host dest i...

Page 565: ...rmation on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP access list has been configured Note Subnet mask for individual hosts If you create the rule for a single system one IPv4 address specify the subnet mask 255 255 255 255 As an alternative you can specify the keyword host followed by the IPv4 address Further notes You delete a...

Page 566: ...55 The parameters have the following meaning Parameter Description Range of values note any Allows all incoming frames host Keyword for a an individual IPv4 ad dress src ip address Source IPv4 address Enter a valid IPv4 address src ip address Network source address Enter a valid combination of IPv4 address and subnet mask src mask Corresponding subnet mask any Allows all outgoing frames host Keywo...

Page 567: ...control list for ICMP frames You have the following options All incoming and or outgoing ICMP messages are not forwarded Incoming and or outgoing ICMP messages of a specific host are not forwarded Incoming and or outgoing ICMP messages of hosts of a specific subnet are not forwarded Note Processing order of the lists The access control lists are processed on the interface in the order in which the...

Page 568: ...tination address Enter a valid combination of IPv4 address and subnet mask dest mask Corresponding subnet mask message type Keyword for the ICMP message type type ICMP message type 0 255 message code Keyword for the ICMP message code code ICMP message code 0 255 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP acces...

Page 569: ...equirement You are in the ACL standard configuration mode The command prompt is as follows cli config std nacl Syntax Call up the command with the following parameters permit tcp any host src ip address src ip address src mask gt src port number 1 65535 lt src port number 1 65535 eq src port number 1 65535 range src port number 1 65535 src port number 1 65535 any host dest ip address dest ip addre...

Page 570: ...n address Enter a valid combination of IPv4 address and subnet mask dest mask Corresponding subnet mask dscp Keyword for the Differentiated Services Codepoint value Value for the Differentiated Services Co depoint 0 63 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP access list for TCP segments has been configured ...

Page 571: ...nd with the following parameters deny tcp any host src ip address src ip address src mask gt src port number 1 65535 lt src port number 1 65535 eq src port number 1 65535 range src port number 1 65535 src port number 1 65535 any host dest ip address dest ip address dest mask gt dest port number 1 65535 lt dest port number 1 65535 eq dest port number 1 65535 range dest port number 1 65535 dest port...

Page 572: ...ask dscp Keyword for the Differentiated Services Codepoint value Value for the Differentiated Services Co depoint 0 63 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP access list for TCP segments has been configured Note Subnet mask for individual hosts If you create the rule for a single system one IPv4 address sp...

Page 573: ... Call up the command with the following parameters permit udp any host src ip address src ip address src mask gt port number 1 65535 lt port number 1 65535 eq port number 1 65535 range port number 1 65535 port number 1 65535 any host dest ip address dest ip address dest mask gt port number 1 65535 lt port number 1 65535 eq port number 1 65535 range port number 1 65535 port number 1 65535 dscp valu...

Page 574: ...orresponding subnet mask dscp Keyword for the Differentiated Services Codepoint value Value for the Differentiated Services Co depoint 0 63 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP access list for UDP datagrams has been configured Note Subnet mask for individual hosts If you create the rule for a single syst...

Page 575: ...l Syntax Call up the command with the following parameters deny udp any host src ip address src ip address src mask gt src port number 1 65535 lt src port number 1 65535 eq src port number 1 65535 range src port number 1 65535 src port number 1 65535 any host dest ip address dest ip address dest mask gt dest port number 1 65535 lt dest port number 1 65535 eq dest port number 1 65535 range dest por...

Page 576: ...sponding subnet mask dscp Keyword for the Differentiated Services Codepoint value Value for the Differentiated Services Co depoint 0 63 For information on names of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result The IP access control list for UDP frames has been configured Note Subnet mask for individual hosts If you create the rule for a single sys...

Page 577: ...agers ip source ip address ipv6 source prefix The parameters have the following meaning Parameter Description Range of values note ip source Keyword for the IPv4 network or host address ip address Value for an IPv4 address Enter a valid IPv4 address ipv6 source Keyword for the IPv6 network or host address prefix Value for an IPv6 address Enter a valid IPv6 address For information on identifiers of...

Page 578: ...e following parameters authorized manager ip source ip address subnet mask prefix length 0 32 interface interface type 0 a b 0 c interface type 0 a b 0 c vlan a b or a b or a b c d service snmp telnet http https ssh The parameters have the following meaning Parameter Description Range of values note ip address Specifies the network or the IP address for which the IP manager is authorized Enter a v...

Page 579: ...access to the system is blocked for all others You should therefore configure the interface via which you access the system first because your access is otherwise blocked Result The interfaces and protocols via which an authorized manager is allowed to access the device are configured Further notes You delete an interface for access of an authorized manager with the no authorized manager ip source...

Page 580: ...resentation of the mask as a number of 1 bits 0 32 For information on identifiers of addresses and interfaces refer to the section Interface identifiers and addresses Page 29 Result An authorized manager is deleted from the list Further notes You configure the interfaces and protocols via which an authorized manager is allowed to access the device with the authorized manager ip source command You ...

Page 581: ...nd faults handling you set the events whose messages will be distributed in one of the available ways You configure the monitoring of certain system events and power supply and physical interfaces in the Events configuration mode 12 1 1 The show commands This section describes commands with which you display various settings 12 1 1 1 show authlog Description With this command you show the informat...

Page 582: ...l are displayed Result The content of the logbook is displayed 12 1 1 2 show events config Description This command shows the current configuration for forwarding the messages of the various event types Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events config Result The current...

Page 583: ...ch type of notification Further notes You configure the assignment of the degree of severity of an event and the type of notification with the severity command 12 1 1 4 show events faults config Description This command shows the current configuration of the following error monitoring functions Monitoring of the power supply for power outage Monitoring of the network connections for a change in th...

Page 584: ...w events faults status Description This command shows the status messages of fault monitoring of the power supply and network connections Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events faults status Result A table with the status messages of the error monitoring functions is...

Page 585: ...d EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show logbook or Call up the command with the following parameters show logbook info warning critical The parameters have the following meaning Parameter Description info All log entries of the categories Information Warning and Critical are displayed warning All log entries of the categories Warning ...

Page 586: ...show power line state Result The status of the power supply is displayed 12 1 1 9 show rmon Description This command shows the counter reading Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show rmon statistics stats index 1 65535 Diagnostics 12 1 Diagnostics SCALANCE W770...

Page 587: ...cted statistics index are displayed 12 1 2 clear authlog Description With this command you delete the content of the logbook Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters clear authlog Result The content of the logbook is deleted 12 1 3 clear logbook Description With this command you delete the content of the logbook...

Page 588: ...EC mode The command prompt is as follows cli Syntax Call up the command with the following parameter fault report ack fault state id The parameter has the following meaning Parameters Description Range of values note fault state id ID of the mes sage Enter the ID of the message for the Cold Warm Start event To obtain the ID use the show events faults status command Result The message is acknowledg...

Page 589: ...he EVENTS configuration mode Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters events Result You are now in the EVENTS configuration mode The command prompt is as follows cli config events Further notes You exit the EVENTS configuration mode with the command end or exit 12 1 6 Commands in the Events configura...

Page 590: ... events Syntax Call the command without parameters add log log entry The parameter has the following meaning Parameter Description Range of values note log entry Entry in the logbook max 150 characters Result The entry has been made in the logbook 12 1 6 2 client config Description With this command you enable one of the clients that processes or forwards the messages of the device The following c...

Page 591: ...e client selected for the transfer is enabled Further notes You display the status of the events and the clients with the show events config command You disable a client with the no client config command 12 1 6 3 no client config Description With this command you disable one of the clients that processes or forwards the messages of the device Requirement You are in the EVENTS Configuration mode Th...

Page 592: ...ge when there is a status change on a physical interface Message if there is an incorrect login Message when there is a status change in the power supply Message when there is a status change in the error monitoring Message when there is a change in the spanning tree Message if radio channels overlap Message when changes are made to the connection status of WDS Message if a radar signal is receive...

Page 593: ...ree client wlan auth In client mode only Message for successful or failed WLAN authentication attempts only in client mode overlap ap Only in access point mode Message there is an entry in the Overlap AP list wds Only in access point mode Message when there is a change in the connection status of a WDS link dfs Only in access point mode Message when a radar signal was received or the DFS scan was ...

Page 594: ...mmand call you can only select one message type and one client If you want to process several message types or clients it may be more efficient to first select the all option and then disable individual elements 12 1 6 5 no event config Description With this command you configure which of the various message types of the device will no longer be stored or forwarded Requirement You are in the EVENT...

Page 595: ...opped wlan general Only in access point mode Message when the channel bandwidth has changed ipcf cycle time Only available when the KEY PLUG is inserted and only in Access Point mode Message if too many clients are logged on for the set iPCF cycle time or if some clients were not reached in one cycle ipcf poll size Only available when the KEY PLUG is inserted Message when the PROFINET data size is...

Page 596: ...signaled down Only a break on a connection is signaled Result The settings for monitoring the physical network connections have been configured Further notes You can display the current setting with the show events faults config command You disable the function with the no link command 12 1 6 7 no link Description With this command you disable the monitoring of the physical network connections for...

Page 597: ...s config command You enable the function with the link command 12 1 6 8 power Description With this command you configure and activate the monitoring of the power supplies Depending on the hardware variant there are one or two power connectors L 1 L 2 and a PoE power supply Note This command is not available on the SCALANCE W786 2 SFP Requirement You are in the EVENTS Configuration mode The comman...

Page 598: ...sable the function with the no power command 12 1 6 9 no power Description With this command you disable the monitoring of the power supplies Depending on the hardware variant there are one or two power connectors L 1 L 2 and a PoE power supply Note This command is not available on the SCALANCE W786 2 SFP Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli con...

Page 599: ... the function with the power command 12 1 6 10 power pnio redundancy Description With the following devices you can also configure which power supply will be monitored by PROFINET SCALANCE W788 x RJ 45 variants SCALANCE W748 1 RJ 45 SCALANCE W774 1 RJ 45 and M12 variant SCALANCE W734 1 RJ 45 Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli config events Syn...

Page 600: ... with the show events faults config command 12 1 6 11 send test mail Description With this command you send an e mail according to the currently configured SMTP settings Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call the command without parameters send test mail Result An e mail according to the currently configured SMTP settings...

Page 601: ... System event messages are entered in the syslog file authlog System event messages are entered in the log table for authentications info System events are processed as of the severity level Information warning System events are processed as of the severity level Warning critical System events are processed as of the severity level Critical Result The settings for sending system event messages are...

Page 602: ...threshold value for entering system event messages in the log table disabled syslog The setting of the threshold value the entering event messages in the Syslog file is disabled authlog The setting of the threshold value for entering system event messages in the log table for authentications is disabled If you do not select any parameters from the parameter list the default value is used Result Th...

Page 603: ...ured Syslog server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events syslogserver Result The entries of the configured Syslog server are displayed 12 2 2 Commands in the Events configuration mode This section describes commands that you can call up in the EVENTS configuration m...

Page 604: ...g meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 address ucast_addr IPv4 unicast address of the Syslog serv er Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters If you have stored a suitable do main name you can specify a host name ipv6 Keyword for an IPv6 address ip6_addr IPv6 address ...

Page 605: ... the following parameters no syslogserver ipv4 ucast_addr fqdn name FQDN ipv6 ip6_addr The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 address ucast_addr IPv4 unicast address of the Syslog serv er Enter a valid IPv4 address fqdn name Keyword for a domain name FQDN Domain name Fully Qualified Domain Name Maximum of 100 characters ipv6 Ke...

Page 606: ... is deleted Further notes You add a Syslog server with the syslogserver command Diagnostics 12 2 Syslog client SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 606 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Page 607: ...rtner mac wds partner wds id wlan alternative channel wlan beacon interval wlan channel wlan data rate 11abg wlan data rate 11n wlan data rates 11abg selected only wlan data rates 11n selected only wlan dtim wlan force roaming eth down wlan frequency band wlan guard interval wlan ht channel wlan ipcf cycle time wlan ipcf protocol support pnio wlan ipcf scan mode wlan ipcf signal quality threshold ...

Page 608: ...id table 199 wlan any ssid 224 wlan background scan interval 226 wlan background scan mode 226 wlan background scan threshold 227 wlan client mac address 231 wlan client mac mode 230 wlan dhcp renew 244 wlan frequency band 252 wlan ipcf mc mgmt scan period 144 wlan min ap signal strength 247 wlan mode 258 wlan roaming threshold 262 wlan security authentication 514 wlan security cipher 515 wlan sec...

Page 609: ...echo reply 347 no ip echo reply 348 ip http 443 no ip http 444 ip ipv6 neighbor no ipv6 neighbor 363 ip name server 353 no ip name server 354 ip route 348 no ip route 349 IPv6 Notation 36 ipv6 address 370 no ipv6 address 371 ipv6 address autoconfig 372 no ipv6 address autoconfig 373 ipv6 address dhcp no ipv6 address dhcp 374 ipv6 address link local 375 no ipv6 address link local 376 ipv6 default r...

Page 610: ...lan dfs prefer configured channel 242 no wlan ipcf protocol support 127 ntp 173 ntp server no ntp server 175 ntp server id 174 ntp time diff 176 O option 397 no option 400 option value hex 398 option value string 399 no option 400 P password 96 no password 97 password policy 486 permit 551 562 permit icmp 565 permit tcp 569 permit udp 573 ping 63 ping ipv6 64 plug 110 pnio 72 pool enable 401 no po...

Page 611: ... 57 show lldp status 57 show loadsave files 85 show loadsave tftp 85 show logbook 585 show mac address table 280 show mac address table aging status 452 show mac address table aging time 451 show mac address table count 282 show mac address table dynamic unicast 281 show nat 456 show nat connections 455 show ntp info 173 show password policy 473 show plug 109 show pnio 56 show power line state 586...

Page 612: ...neid migrate 419 snmp filterprofile 421 snmp group 423 no snmp group 424 snmp notify 424 no snmp notify 425 snmp targetaddr 426 no snmp targetaddr 428 snmp targetparams 428 no snmp targetparams 430 snmp user 432 no snmp user 433 snmp v1 v2 readonly 431 no snmp v1 v2 readonly 431 snmp view 434 no snmp view 435 snmpagent 413 no snmpagent 414 sntp 179 sntp client addressing mode 183 sntp time diff 18...

Page 613: ...vaps 535 no vap communication with other vaps 536 vap communication with own vap 533 no vap communication with own vap 533 534 vap inter ap blocking block non ip traffic 543 no vap inter ap blocking block non ip traffic 544 vap inter ap blocking refresh time 511 vap security authentication 525 vap security cipher 527 vap security default key 528 vap security encryption 529 no vap security encrypti...

Page 614: ... iprp 148 wlan iprp interface 149 no wlan iprp interface 150 wlan iprp network 151 no wlan iprp network 152 wlan max tx power 255 wlan min ap signal strength 247 wlan mode 256 258 wlan outdoor 259 no wlan outdoor 260 wlan overlap ap aging 261 wlan roaming threshold 262 wlan rts cts threshold 263 wlan security ap radius authenticator 499 no wlan security ap radius authenticator 500 wlan security ap...

Page 615: ...write startup config 103 Index SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface Configuration Manual 09 2017 C79000 G8976 C324 08 615 ...

Page 616: ...Index SCALANCE W770 W730 acc to IEEE 802 11n Command Line Interface 616 Configuration Manual 09 2017 C79000 G8976 C324 08 ...

Reviews:

No comments

Related manuals for SCALANCE W738-1 M12

Brand: Raymarine Pages: 464

Brand: 3M Pages: 8

Brand: ZOLL Pages: 3

Brand: B&K Pages: 12

Brand: Facsimile Pages: 16

Brand: Badger Meter Pages: 16

Brand: Cambro Pages: 6

Brand: Jackco Pages: 6

Brand: GE Pages: 212

Brand: Xtool Pages: 51

Brand: H-TEC Education Pages: 16

Brand: H-TEC Education Pages: 12

Brand: Ultraflex Pages: 3

Brand: Mackie Pages: 18

Brand: Mackie Pages: 2

Brand: Mackie Pages: 8

Brand: Mackie Pages: 7

Brand: TATU Pages: 30

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands